942847 - releng fake root certificate missing from xp ix test machines

Status: RESOLVED FIXED

(Infrastructure & Operations :: RelOps: General, task)

Description

[[e-mail] (:bhearsum)]

We noticed this while investigating test failures in bug 930194 - this certificate should in the "Trusted Root Certificate Authorities" for the SYSTEM account. Windows 7 and Windows 8 are set-up correctly, but I checked a few XP machines and none of them seemed to have the certificate installed.

Comment 1

[Robert Strong (they/them - no direct email)]

Has this been fixed?

Comment 2

[Mark Cornmesser [:markco] OOO 2024/04/15]

We have debating on the best way to make this work. Q said that he has GPO template that will be able to get this done, and that he will push it out tonight.

Comment 3

[Q]

Attachment: fakecert.jpg

Fake moz cert ca installing on xp

Comment 4

[Q]

GPO Install_mozilla_root_certs now active for XP machines ( see attachment for results of gpupdate). Changes will go out as machines reboot. Can we verify this provides the expected behavior ?

Comment 5

[Robert Strong (they/them - no direct email)]

After the machines have rebooted I will submit a patch to try to verify that this is working as expected. After that I'll get it reviewed and land it on mozilla-central as well so this will be checked on every Windows xpcshell test run. How will I know that the machines have rebooted so I can start on the above?

Comment 6

[Justin Wood (:Callek)]

no good way to confirm from your end at the moment (sadly) -- but submitting to try by early tomorrow AM should be plenty of time to ensure that all machines that are active reboot first.

Comment 7

[Robert Strong (they/them - no direct email)]

I have seen a Win XP machine running the tests that require the certificate so it appears to be working. Just need to wait on all of the Win XP machines having the fix. Thanks!

Comment 8

[[e-mail] (:bhearsum)]

Thanks all!

Comment 9

[Robert Strong (they/them - no direct email)]

So far everything looks good with the try push as well
https://tbpl.mozilla.org/?tree=Try&rev=8258cd79ddd9