847789 - Use HTTPS instead of HTTP for input.mozilla.org in mobile/android

Status: VERIFIED FIXED

(Firefox for Android Graveyard :: General, defect)

Description

[Raymond Lee [:raymondlee]]

A followup bug see bug 840678 comment 14

Comment 1

[:Margaret Leibovic]

Right now we use "https://m.input.mozilla.org/%LOCALE%/feedback" to submit a POST request, and when I tried switching this to https, I ran into this error:

E/GeckoConsole(19038): m.input.mozilla.org:443 uses an invalid security certificate.
E/GeckoConsole(19038): 
E/GeckoConsole(19038): The certificate is only valid for the following names:
E/GeckoConsole(19038):   input.mozilla.com , mobile.input.mozilla.com , mobile.input.mozilla.org , input.mozilla.org  
E/GeckoConsole(19038): 
E/GeckoConsole(19038): (Error code: ssl_error_bad_cert_domain)
E/GeckoConsole(19038): [JavaScript Error: "Error sending feedback to input.mozilla.org: " {file: "about:feedback" line: 200}]

Comment 2

[Raymond Lee [:raymondlee]]

(In reply to :Margaret Leibovic from comment #1)
> Right now we use "https://m.input.mozilla.org/%LOCALE%/feedback" to submit a
> POST request, and when I tried switching this to https, I ran into this
> error:
> 
> E/GeckoConsole(19038): m.input.mozilla.org:443 uses an invalid security
> certificate.
> E/GeckoConsole(19038): 
> E/GeckoConsole(19038): The certificate is only valid for the following names:
> E/GeckoConsole(19038):   input.mozilla.com , mobile.input.mozilla.com ,
> mobile.input.mozilla.org , input.mozilla.org  
> E/GeckoConsole(19038): 
> E/GeckoConsole(19038): (Error code: ssl_error_bad_cert_domain)
> E/GeckoConsole(19038): [JavaScript Error: "Error sending feedback to
> input.mozilla.org: " {file: "about:feedback" line: 200}]

Will: do you have any insights about this?

Comment 3

[Will Kahn-Greene [:willkg] ET needinfo? me]

Yup. The current input is running old code and m.input.mozilla.org has a cert for different hosts.

The new input (which will go to prod later this month) doesn't have these problems since it doesn't use multiple hosts. I spent a bunch of time making sure that Firefox for Android can post feedback. After getting the new input code to production, I was going to suggest we change the urls for Firefox for Android. I wouldn't bother changing it until then since we'll have to turn around and change it again.

Comment 4

[:Margaret Leibovic]

Attachment: patch

Here's the patch to make the swap, but we can wait until the new input.mozilla.org is ready to do this.

Comment 5

[Will Kahn-Greene [:willkg] ET needinfo? me]

As soon as we get input to prod, I'll comment here and we can go forward with fixing urls. Sorry it's taking so long.

Comment 6

[Will Kahn-Greene [:willkg] ET needinfo? me]

Margaret: I looked at attachment #721300 [details] [diff] [review]. Can you additionally change the host from "m.input.mozilla.org" to "input.mozilla.org"?

So the new url would be:

https://input.mozilla.org/%LOCALE%/feedback

This will work fine now with the new input.mozilla.org.

Comment 7

[Will Kahn-Greene [:willkg] ET needinfo? me]

Margaret: Also, I have a question. How hard is it to use a different url for each channel? Can it be done automatically? Or will it need to be changed every time the trees change (or whatever the migration operation is after a release)?

The reason I ask is that we'd rather do product/channel specific urls like this:

https://input.mozilla.org/%LOCALE%/feedback/firefox.android.stable
https://input.mozilla.org/%LOCALE%/feedback/firefox.android.beta
https://input.mozilla.org/%LOCALE%/feedback/firefox.android.aurora
https://input.mozilla.org/%LOCALE%/feedback/firefox.android.nightly

or something to that effect because it captures additional information that's difficult to synthesize correctly otherwise.

Is this hard/painful?

Comment 8

[Mark Finkle (:mfinkle) (use needinfo?)]

(In reply to Will Kahn-Greene [:willkg] from comment #7)
> Margaret: Also, I have a question. How hard is it to use a different url for
> each channel? Can it be done automatically? Or will it need to be changed
> every time the trees change (or whatever the migration operation is after a
> release)?
> 
> The reason I ask is that we'd rather do product/channel specific urls like
> this:
> 
> https://input.mozilla.org/%LOCALE%/feedback/firefox.android.stable
> https://input.mozilla.org/%LOCALE%/feedback/firefox.android.beta
> https://input.mozilla.org/%LOCALE%/feedback/firefox.android.aurora
> https://input.mozilla.org/%LOCALE%/feedback/firefox.android.nightly
> 
> or something to that effect because it captures additional information
> that's difficult to synthesize correctly otherwise.
> 
> Is this hard/painful?

Why not just pass the App version and OS? We do that for blocklist pings and updates.

Comment 9

[Will Kahn-Greene [:willkg] ET needinfo? me]

What exactly does "the App version and OS" look like? Can you show me some examples?

Comment 10

[Mark Finkle (:mfinkle) (use needinfo?)]

Some examples can be found in mobile.js:

AMO:
http://mxr.mozilla.org/mozilla-central/source/mobile/android/app/mobile.js#190

Blocklist pings:
http://mxr.mozilla.org/mozilla-central/source/mobile/android/app/mobile.js#208
(note this one has a lot of variables, including %CHANNEL%, which might server your purpose)

SUMO:
http://mxr.mozilla.org/mozilla-central/source/mobile/android/app/mobile.js#445

We would need to get a list of the core values of %CHANNEL%, but also know that %CHANNEL% can be changed to one-off partner values as well. You'd need a fallback. Those partner one-offs should only happen for release builds. Nightly, Aurora and Beta should be fixed to well known values.

Comment 11

[Will Kahn-Greene [:willkg] ET needinfo? me]

I'm definitely game for switching the url scheme especially if it's easier to maintain--I definitely don't want to create yet-another-scheme. The scheme in comment #7 isn't used, yet--I'm just feeling things out.

The bit at the end (e.g. "firefox.android.nightly") consists of a product name and a channel. The thinking was that this would be used as a form id so we can show the correct feedback form where it was theorized that different product/channel combinations have different feedback needs.

Looking at the sample urls in comment #10, it sounds like we should switch the composition of the form id from something like:

    firefox.android.channel

to something like:

    %PRODUCT%/%CHANNEL%/

That has the information we need. We have general mobile and desktop forms already that we'll use as fallbacks when more specific options aren't available. That should cover all the bases.

Bug #857056 will cover reworking Input to use a %PRODUCT%/%CHANNEL%/ form id scheme and support those urls.


For this bug, can we change the feedback url to this?:

    https://input.mozilla.org/%LOCALE%/feedback

Comment 12

[:Margaret Leibovic]

Attachment: updated patch

I cc'd myself to bug 857056, and I can help update the URL again when that's ready.

Comment 13

[:Margaret Leibovic]

https://hg.mozilla.org/integration/mozilla-inbound/rev/bae2ff5d3ca9

Will, should we uplift this change to aurora/beta?

Comment 14

[Will Kahn-Greene [:willkg] ET needinfo? me]

Margaret: If you could do that, you'd be my favoritest person ever!

Comment 15

[:Margaret Leibovic]

Comment on attachment 732347 [details] [diff] [review]
updated patch

[Approval Request Comment]
Bug caused by (feature/regressing bug #): n/a
User impact if declined: feedback sent over http instead of https
Testing completed (on m-c, etc.): just landed on inbound
Risk to taking this patch (and alternatives if risky): low-risk, changes url for POST request from about:feedback
String or IDL/UUID changes made by this patch: n/a

Comment 16

[Alex Keybl [:akeybl]]

Will - I trust input on previous versions of Firefox for Android will still function, even with the m. subdomain. Please email me if that isn't the case. 

Also adding verifyme to make sure the new URL and new input is on QA's radar for testing.

Comment 17

[Will Kahn-Greene [:willkg] ET needinfo? me]

Alex: Yes! We did some configuration trickery so that Firefox for Android currently works fine with the new Input. I'd be happy when we can ditch the trickery, though.

Comment 18

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/mozilla-central/rev/bae2ff5d3ca9

Comment 19

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/releases/mozilla-aurora/rev/75c4ef1e944e
https://hg.mozilla.org/releases/mozilla-beta/rev/233cb89fe45e

Comment 20

[Teodora Vermesan (:TeoVermesan)]

Verified fixed on:
Build: Firefox for Android 22 Beta 1 (2013-05-15)
Device: Samsung Galaxy Nexus
OS:Android 4.1.1