1858531 - sumo article request for third party root certificates feature [Desktop V120]

Status: RESOLVED FIXED

(support.mozilla.org :: Knowledge Base Content, task)

Description

[Dana Keeler (she/her) [:keeler]]

Did you check out the steps and FAQs for submitting requests to the CX content team? yes

Is the content embargoed (yes or no)? no

Product

Firefox

Select the type of request.

Unclear what the right answer here is. The request is for a new article, and there's already an in-product link for it in Nightly (https://support.mozilla.org/1/firefox/120.0a1/Darwin/en-US/automatically-trust-third-party-certificates).

New article
In-product link request

Please provide a summary of the request.

Please write a sumo article at the above URL for the "enterprise roots" feature, which was recently enabled by default (in Firefox 120). Here's a rough cut of what the article might look like: https://docs.google.com/document/d/1Nwz11vXu-OoP9WjOW3oDax9QgcPwI_lwfn0Gr2zUsXE

Is this an on- or off-train release? Please indicate the product version number, if applicable and add to the Summary field using the format of [Product V123]. Firefox V120

What is the anticipated release date? November 21 2023

Note: Content is typically published at, or within, 48 hours of the release.

Does the content need to be published prior to the release date? If so, when? No, but it would be nice to have for beta (October 23 2023).

Does the content need to be localized in any languages outside of EN-US? If yes, please indicate which languages. Whatever the default policy for translating sumo articles is is fine.

Note: Minimum of 10 days required for translation requests.

Please include any related JIRA/Github/Bugzilla tickets, documentation, demos or practical use cases.

https://bugzilla.mozilla.org/show_bug.cgi?id=1848815
https://mozilla-hub.atlassian.net/browse/FFXP-2196

Please include links to any design assets, visuals, figma files, etc. n/a

Note: Please include final visual assets only.

Please add instructions for testing that will enable us to replicate the expected product behavior.

In about:preferences, there should be a checkbox marked "Allow <product> to automatically trust third-party root certificates you install" with a "learn more" link next to it.

If you set up an https server with a certificate not issued by a trusted web CA (e.g. run openssl s_server, use https://searchfox.org/mozilla-central/source/security/manager/ssl/tests/unit/bad_certs/default-ee.pem as the server certificate, https://searchfox.org/mozilla-central/source/security/manager/ssl/tests/unit/bad_certs/default-ee.key as the server key), Firefox won't connect to it successfully by default. If you import the issuer certificate (https://searchfox.org/mozilla-central/source/security/manager/ssl/tests/unit/bad_certs/test-ca.pem) into your operating system's certificate manager (keychain on macOS), Firefox should connect successfully if the checkbox is checked (and it should fail if the checkbox isn't checked).

Does the content need approval prior to publishing? If so, by who? Not particularly, but you should probably run it by the cryptography engineering team (you can ask me to review it).

Comment 1

[Christoph Kerschbaumer [:ckerschb}]

Lucas, within (https://bugzilla.mozilla.org/show_bug.cgi?id=1848815)[Bug 1848815] we added a link to https://support.mozilla.org/1/firefox/120.0a1/WINNT/en-US/automatically-trust-third-party-certificates which will ship in Fx120 - how likely is it that we'll have a SUMO page for this link by then?

Let me know how we can help and support you - thank you!

Comment 2

[Lucas Siebert]

(In reply to Christoph Kerschbaumer [:ckerschb] from comment #1)

Lucas, within (https://bugzilla.mozilla.org/show_bug.cgi?id=1848815)[Bug 1848815] we added a link to https://support.mozilla.org/1/firefox/120.0a1/WINNT/en-US/automatically-trust-third-party-certificates which will ship in Fx120 - how likely is it that we'll have a SUMO page for this link by then?

Let me know how we can help and support you - thank you!

Hey Christoph! I'll be diving into this content later this week and will ping you once the draft is ready for review. I've also put in a placeholder article so the in-product link you mentioned is up and running. Oh, and any chance you have those Figma designs for the UI updates? I'd like to grab a few shots. Thanks!

Comment 3

[Lucas Siebert]

Placeholder article: https://support.mozilla.org/en-US/kb/automatically-trust-third-party-certificates

Comment 4

[Christoph Kerschbaumer [:ckerschb}]

(In reply to Lucas Siebert from comment #3)

Placeholder article: https://support.mozilla.org/en-US/kb/automatically-trust-third-party-certificates

Oh, this is great. Thanks so much Lucas.

Comment 5

[Lucas Siebert]

Draft: https://docs.google.com/document/d/1GqLB8QBObtgkzME-ehc38da2-wdZktOxfyr-3FD2Go8/edit

Comment 6

[Lucas Siebert]

SUMO article is live: https://support.mozilla.org/en-US/kb/automatically-trust-third-party-certificates