974977 - Nagios monitor to ensure that the Flash+win32 entry in PFS has the correct hash for the file being downloaded.

Status: RESOLVED WONTFIX

(mozilla.org Graveyard :: Server Operations, task)

Description

[Benjamin Smedberg]

Currently we can sometimes go weeks without noticing that Firefox PFS is broken for Flash on Windows because we're providing the wrong hash for the Flash installer. We should monitor this via nagios. Please send the alerts to me and cbook.

Note that windows is the only PFS entry that has a direct installer link + hash, so we don't need this for other OSes.

Comment 1

[Wil Clouser [:clouserw]]

-> moving to ops.  I think you're going to need more detail here about what specifically you're asking them to check.

Comment 2

[Carsten Book [:Tomcat]]

one datasource to compare the hash could be https://pfs.mozilla.org/plugins/PluginFinderService.php?mimetype=application%2Fx-shockwave-flash&appID={ec8030f7-c20a-464f-9b0e-13a3a9e97384}&appVersion=20130129234028&clientOS=Windows&chromeLocale=en-US&appRelease=21.0a1 - there is also the download link http://download.macromedia.com/pub/flashplayer/pdc/fp_pl_pfs_installer.exe where this hash belong too :)

Comment 3

[Benjamin Smedberg]

The check in detail should be:

* download the pfs.mozilla.org URL from comment 2
* parse out the pfs:InstallerLocation and pfs:InstallerHash
* fetch the file at pfs:InstallerLocation
* take its sha256 hash and comapre it with the pfs:InstallerHash value
* alert if any of the downloads fail or if the hashes don't match

Comment 4

[Justin Dolske [:Dolske]]

Bug 836415 has now removed the Plugin Finder Service (PFS) from Firefox. As a result, I'm closing all the remaining PFS bugs.

If you're getting this bugmail for an ancient PFS bug, the basic summary of the world today is:

* NPAPI plugins are a dying technology
* PFS was already restricted to assisting with only the 4 most common plugins
* Sites commonly provide their own UI for install a required plugin
* Mozilla is generally focusing on  improving the web platform so that proprietary plugins are not required.

(Note that "plugins" are a completely separate from "browser extensions", such at those found on addons.mozilla.org. The latter are not going anywhere, and are not impacted by the removal of PFS.)