Bug 1280331 - Update HPKP preload script URL to deal with renaming of transport_security_state_static.certs. draft
authorCykesiopka <cykesiopka.bmo@gmail.com>
Tue, 21 Jun 2016 16:11:57 -0700
changeset 380423 bcf99f98bae471e7bc08dd07ace8ae34b048b9b1
parent 380422 29bf50e2f7cdc2bfefa63865dd1d12e502ef11b9
child 523728 ba25a38b076c7ffe3b18898f244cf93377b41d11
push id21222
push usercykesiopka.bmo@gmail.com
push dateTue, 21 Jun 2016 23:19:59 +0000
bugs1280331
milestone50.0a1
Bug 1280331 - Update HPKP preload script URL to deal with renaming of transport_security_state_static.certs. https://chromium.googlesource.com/chromium/src/net/+/4361f2ad66b6af0a8acfb42f34b95bfbcad3926a renamed transport_security_state_static.certs to transport_security_state_static.pins, so the URL needs to be updated to avoid a 404. MozReview-Commit-ID: 1FmYdi0mMcI
security/manager/tools/PreloadedHPKPins.json
--- a/security/manager/tools/PreloadedHPKPins.json
+++ b/security/manager/tools/PreloadedHPKPins.json
@@ -24,17 +24,17 @@
 // pinsets that reference certificates not in our root program (for example,
 // Facebook).
 
 // equifax -> aus3
 // Geotrust Primary -> www.mozilla.org
 // Geotrust Global -> *. addons.mozilla.org
 {
   "chromium_data" : {
-    "cert_file_url": "https://chromium.googlesource.com/chromium/src/net/+/master/http/transport_security_state_static.certs?format=TEXT",
+    "cert_file_url": "https://chromium.googlesource.com/chromium/src/net/+/master/http/transport_security_state_static.pins?format=TEXT",
     "json_file_url": "https://chromium.googlesource.com/chromium/src/net/+/master/http/transport_security_state_static.json?format=TEXT",
     "substitute_pinsets": {
       // Use the larger google_root_pems pinset instead of google
       "google": "google_root_pems"
     },
     "production_pinsets": [
       "google_root_pems",
       "facebook"