332179 - Set up some CNAMEs for bugzilla to enable cross-domain testing

Status: RESOLVED FIXED

(mozilla.org Graveyard :: Server Operations, task, P1)

Description

[Boris Zbarsky [:bzbarsky]]

It would be really useful for testing of cross-domain security stuff, document.domain, etc, if we had several different CNAMEs that all pointed to bugzilla (so we could attach testcases that effectively have different parts in different domains).  I propose the following cnames (or something similar):

test1.mozilla.org
test2.mozilla.org
test3.mozilla.org
sub1.test1.mozilla.org
sub2.test1.mozilla.org
sub1.test2.mozilla.org
sub2.test2.mozilla.org

Would that be reasonable?

Comment 1

[Dave Miller [:justdave]]

Does the fact that it's SSL confuse anything?

Comment 2

[Boris Zbarsky [:bzbarsky]]

Well, the cert won't match the hostname unless we do something...  I'd rather we did something, but even if we don't the CNAMEs would be useful.  I'm not sure whether they'd work with XMLHttpRequest and such, and I'd really like it if they did....

Comment 3

[Dave Miller [:justdave]]

The cert is for *.mozilla.org.  As long as it ends in mozilla.org and only has one part before that, the cert will match.

I was more concerned if that would have other side effects on the tests you're running since I think the security constraints on scripts are different on SSL than they are in the clear.  But I don't know much about it.

Comment 4

[Dave Miller [:justdave]]

I'm interested in feedback from dveditz and/or jruderman about this before I proceed.  Besides the question I brought up in the previous comment, I'm also interested in opinions on whether Bugzilla is really the right place to test this stuff.

Comment 5

[Jesse Ruderman]

How will this interact with the fix for bug 38862?

Comment 6

[Boris Zbarsky [:bzbarsky]]

As long as all the hostnames involved point to the same IP, not at all, I would think.

Comment 7

[Daniel Veditz [:dveditz]]

I'm all for it, I've already created testcases that rely on using the current machine name recluse, but that's fragile.

Bugzilla is not the place for testing (experimentation), but it's definitely the place for test *cases*. Otherwise they get remotely hosted and tend to go away as students graduate, people change ISPs, or housecleaning murders innocent old files.

Especially for security bugs, if we can save QA from having to set up servers by having the testcase live in the bug then we can verify them more accurately and ship releases faster.

ObNit: "test" names might attract the wrong sort, and might conflict with things QA folks already have or will want. If there's ever a plan to fix bug 38862 we could vary the name chosen for that. Or:
  attachments.m.o
  bugzillatest.m.o
  bugzillatc.m.o   //tc for testcase
  bugs#.m.o        // #== 1..N, probably N==3
  test#.bugzilla.m.o  // test OK as BMO subdomain

Comment 8

[Boris Zbarsky [:bzbarsky]]

Note that I know we have DOM bugs for which correct tests would need at least

test1.mozilla.org
sub1.test1.mozilla.org
sub2.test1.mozilla.org
sub1.test2.mozilla.org

or equiv (that is, two different subdomains of one domain, and a subdomain of another domain).

Comment 9

[Gervase Markham [:gerv]]

This bug might get more traction in Server Operations...

Gerv

Comment 10

[matthew zeier [:mrz]]

(In reply to comment #8)
> Note that I know we have DOM bugs for which correct tests would need at least
> 
> test1.mozilla.org
> sub1.test1.mozilla.org
> sub2.test1.mozilla.org
> sub1.test2.mozilla.org

Where are these to point to?  bugzilla.mozilla.org ?

Comment 11

[Boris Zbarsky [:bzbarsky]]

Yes.

Actually, add test2.mozilla.org to that list...

Comment 12

[matthew zeier [:mrz]]

Is there any issue if I preface each of these with bugzilla to avoid any future namespace collisions? 

> test1.mozilla.org
> test2.mozilla.org
> sub1.test1.mozilla.org
> sub2.test1.mozilla.org
> sub1.test2.mozilla.org

Comment 13

[Boris Zbarsky [:bzbarsky]]

You mean like test1.bugzilla.mozilla.org?  I _think_ that should be OK for what we want.

Comment 14

[matthew zeier [:mrz]]

Added the following:

test1.bugzilla          IN CNAME        bugzilla
test2.bugzilla          IN CNAME        bugzilla
sub1.test1.bugzilla             IN CNAME        bugzilla
sub2.test1.bugzilla             IN CNAME        bugzilla
sub1.test2.bugzilla             IN CNAME        bugzilla

root@boris (/var/named/external/) 6> host test1.bugzilla.mozilla.org
test1.bugzilla.mozilla.org is an alias for bugzilla.mozilla.org.

Comment 15

[Boris Zbarsky [:bzbarsky]]

This doesn't actually work, sorry.  See https://bugzilla.mozilla.org/attachment.cgi?id=247551 or even just https://test1.bugzilla.mozilla.org/attachment.cgi?id=247550

Perhaps the web server config also needs tweaking?

Comment 16

[Dave Miller [:justdave]]

OK, these have been added to the apache config as well.

Comment 17

[Boris Zbarsky [:bzbarsky]]

Awesome.  Verified that the testcase now works.  Thanks!