803667 - Capability to accept two add-on hotfix certs at the same time

Status: RESOLVED WORKSFORME

(Firefox :: General, defect)

Description

[Alex Keybl [:akeybl]]

We should implement the capability to accept two add-on hotfix certs at the same time in-product. This will prevent some of the need to hotfix old Firefox versions with the new cert. I say some, because FF10 through when we add the new cert would still be un-reachable even given this change. It will, however, prevent us from having to decide between which cert we want to hotfix, while we're updating old versions to the latest cert.

Hopefully that makes some sense :\. Reading it back confuses me a bit.

Comment 1

[Dave Townsend [:mossop]]

Note we already have this capability (though we've not done any manual testing on it). We just need to add the fingerprints for both certs to Firefox's prefs.

Comment 2

[Lukas Blakk [:lsblakk] use ?needinfo]

(In reply to Dave Townsend (:Mossop) from comment #1)
> Note we already have this capability (though we've not done any manual
> testing on it). We just need to add the fingerprints for both certs to
> Firefox's prefs.

Who can land/own that?

Comment 3

[Dave Townsend [:mossop]]

(In reply to Lukas Blakk [:lsblakk] from comment #2)
> (In reply to Dave Townsend (:Mossop) from comment #1)
> > Note we already have this capability (though we've not done any manual
> > testing on it). We just need to add the fingerprints for both certs to
> > Firefox's prefs.
> 
> Who can land/own that?

Anyone, once we buy additional certs. The email thread on exactly what we're going to do here is still ongoing.

Comment 4

[Dave Townsend [:mossop]]

I'm going to close this as Firefox already has the capability to accept multiple certs for the hotfix add-on. Whether we want to do it or not is up for discussion that that was happening outside of bugzilla.