1940903 - Replace hard-coded SHA256 root hashes by full certificates

Status: NEW

(Application Services :: Remote Settings, enhancement)

Description

[Mathieu Leplatre [:leplatrem]]

In https://github.com/mozilla/application-services/pull/6534 we introduced signature verification in the RS client.

Since rc_crypto/pkixc require the SHA256 hash of the root certificate, we hardcoded the values for our PROD and NONPROD instances.

Instead of this, we should ship the root certificate content, and compute hashes at build time.

This would have the following benefits (quoted from Dana and Jeff on Slack):

• align with desktop and make it easy to check if the roots are the same as in mozilla-central
• in urgent cases, sign information from certificates with the same key material but different metadata without breaking old clients that can't get the new version of the certificate
• make it easier to add accepted root pool since most x509-using libraries have that as an abstraction. With root hashes, that code has to be written by hand. So when you invariably need to add more roots, you usually only need to update configs, not code.

Comment 1

[Mark Hammond [:markh] [:mhammond] [PTO until Sept 7]]

CC Johannes as he is doing some work with rc_crypto which may overlap here.

Comment 2

[Mathieu Leplatre [:leplatrem]]

Johannes, do you have more info about the status of this work?

Thank you :)

Comment 3

[Johannes [:joschmidt]]

Oh, I think all my work on rc_crypto is complete so far.