1929368 - Disable HTTP/3 only when a third party root certificate is used in connection

Status: RESOLVED FIXED

(Core :: Networking: HTTP, task, P2)

Description

[Kershaw Chang [:kershaw]]

See bug 1929093 #comment 0.
This bug is used to track the implementation work.

Comment 1

[Kershaw Chang [:kershaw]]

Attachment: Bug 1929368 - Part1: Revert changes done in bug 1925014, r=#necko

Comment 2

[Kershaw Chang [:kershaw]]

Attachment: Bug 1929368 - Part2: Introduce a new function to check if mSucceededCertChain contains non built-in roots, r=keeler

Depends on D228087

Comment 3

[Kershaw Chang [:kershaw]]

Attachment: Bug 1929368 - Part2: Disable HTTP/3 when third party roots is found in mSucceededCertChain, r=#necko

Depends on D228088

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/102321f3b719
Part1: Revert changes done in bug 1925014, r=necko-reviewers,valentin
https://hg.mozilla.org/integration/autoland/rev/fb0d2153de04
Part2: Disable HTTP/3 when third party roots is found in mSucceededCertChain, r=necko-reviewers,valentin

Comment 5

[Cristina Horotan [:chorotan]]

https://hg.mozilla.org/mozilla-central/rev/102321f3b719
https://hg.mozilla.org/mozilla-central/rev/fb0d2153de04

Comment 6

[Kershaw Chang [:kershaw]]

Attachment: Bug 1929368 - Squashed patch for beta uplift,

Comment 7

[Phabricator Automation]

beta Uplift Approval Request

• User impact if declined: HTTP/3 connections could be affected by Avast software.
• Code covered by automated testing: yes
• Fix verified in Nightly: yes
• Needs manual QE test: no
• Steps to reproduce for manual QE testing: N/A
• Risk associated with taking this patch: Low
• Explanation of risk level: This patch is straightforward and is verified.
• String changes made/needed: N/A
• Is Android affected?: yes

Comment 8

[Pulsebot]

https://hg.mozilla.org/releases/mozilla-beta/rev/299911741634