1920561 - only check certificate transparency for built-in roots

Status: RESOLVED FIXED

(Core :: Security: PSM, defect, P1)

Description

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Certificate transparency shouldn't be enforced for certificates issued by roots that aren't built-in.

Comment 1

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Attachment: Bug 1920561 - only check certificate transparency for certificates issued by built-in roots r?jschanck

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/745d7a55915a
only check certificate transparency for certificates issued by built-in roots r=jschanck

Comment 3

[Cristina Horotan [:chorotan]]

Backed out changeset 745d7a55915a (bug 1920561) for causing mochitest failures at test_ext_webrequest_getSecurityInfo.html

Backout: https://hg.mozilla.org/integration/autoland/rev/a021c885397e096d8bc0dd6574dc4c9873be6f99

Failure push: https://treeherder.mozilla.org/jobs?repo=autoland&group_state=expanded&resultStatus=testfailed%2Cbusted%2Cexception%2Cretry%2Cusercancel&revision=745d7a55915a9734fc569012e5162a9a678ce0ac&selectedTaskRun=J0ZPo1W-TZC5czSocgJLSA.0

Failure log: https://treeherder.mozilla.org/logviewer?job_id=475551647&repo=autoland&lineNumber=3850

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/7a0192e667f8
only check certificate transparency for certificates issued by built-in roots r=jschanck,extension-reviewers,rpl

Comment 5

[Cristina Horotan [:chorotan]]

https://hg.mozilla.org/mozilla-central/rev/7a0192e667f8