corysanin/tubestation
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

No Bug, mozilla-central repo-update HSTS HPKP remote-settings ct-logs - r=release-managers,dmeehan

Browse Source 
Differential Revision: https://phabricator.services.mozilla.com/D249540
This commit is contained in:
ffxbld
2025-05-15 12:12:51 +00:00
committed by dmeehan@mozilla.com
parent 4d3d635588
commit 15f23267c5
9 changed files with 431 additions and 379 deletions
Download Patch File Download Diff File Expand all files Collapse all files

52
security/ct/CTKnownLogs.h
View File

@@ -14,7 +14,7 @@
#include <stddef.h>
static const PRTime kCTExpirationTime = INT64_C(1753096895000000);
static const PRTime kCTExpirationTime = INT64_C(1753356533000000);
namespace mozilla::ct {
@@ -331,6 +331,56 @@ const CTLogInfo kCTLogList[] = {
"\x65\x35\x63\xf0\x49\xbe\x72\xd1\xaa\x9d\xaf\x7d\x08\xc4\xb4\x8d\x59\x3d"
"\x73",
91},
{"Sectigo 'Elephant2025h2'", CTLogState::Admissible,
1747100000000, // 2025-05-13T01:33:20Z
3, // operated by Sectigo
"\x30\x59\x30\x13\x06\x07\x2a\x86\x48\xce\x3d\x02\x01\x06\x08\x2a\x86\x48"
"\xce\x3d\x03\x01\x07\x03\x42\x00\x04\xd0\xe9\x4b\x78\x65\xb6\xa9\x46\x46"
"\x52\x84\x04\x47\x27\x70\xdc\x69\x5a\xc8\x43\xb7\x64\xad\xf8\xd7\xcc\xd3"
"\x85\x8d\x6d\x0d\x8a\xfc\xe4\x04\xa6\x7b\xa6\x4e\x2f\xfd\x83\x5f\x23\x97"
"\xc3\xc4\x42\xc1\x5b\x0a\x85\x16\xce\xa8\xc1\x0e\xc5\x6e\x10\xda\x9e\x0a"
"\x42",
91},
{"Sectigo 'Elephant2026h1'", CTLogState::Admissible,
1747100000000, // 2025-05-13T01:33:20Z
3, // operated by Sectigo
"\x30\x59\x30\x13\x06\x07\x2a\x86\x48\xce\x3d\x02\x01\x06\x08\x2a\x86\x48"
"\xce\x3d\x03\x01\x07\x03\x42\x00\x04\x53\x49\x6a\x9c\xf1\xe8\x5e\xe5\x3d"
"\x15\xcf\x5d\x26\xfd\x47\x41\x90\xaf\xb2\xc2\x5f\xbf\x12\xec\x8a\xbc\x15"
"\x43\xf7\xe4\x17\x25\x2a\x7a\xee\x22\x9f\x03\xca\x8a\x47\x93\xe0\x31\xb2"
"\xc9\x65\x87\xe0\xd4\x7f\x0c\x22\x5a\xd9\xb0\x2e\x98\x7a\xd7\x25\xd0\x1c"
"\x69",
91},
{"Sectigo 'Elephant2026h2'", CTLogState::Admissible,
1747100000000, // 2025-05-13T01:33:20Z
3, // operated by Sectigo
"\x30\x59\x30\x13\x06\x07\x2a\x86\x48\xce\x3d\x02\x01\x06\x08\x2a\x86\x48"
"\xce\x3d\x03\x01\x07\x03\x42\x00\x04\x3b\xfb\x78\x53\x09\x28\xa2\xee\xfc"
"\xce\x40\x9c\x86\x1f\x6d\x7c\x02\x9b\x21\x42\x66\x6c\xea\x14\x01\xbf\x2c"
"\xcc\x3f\x12\xb6\x79\xc7\x14\xa0\x15\x63\x99\x2a\xd4\xb8\xec\xf1\x80\xfb"
"\x09\xfc\xdd\x0f\xbc\x5c\x56\x39\x90\x62\x96\xed\x35\x48\x71\x44\xc4\x6d"
"\x98",
91},
{"Sectigo 'Elephant2027h1'", CTLogState::Admissible,
1747100000000, // 2025-05-13T01:33:20Z
3, // operated by Sectigo
"\x30\x59\x30\x13\x06\x07\x2a\x86\x48\xce\x3d\x02\x01\x06\x08\x2a\x86\x48"
"\xce\x3d\x03\x01\x07\x03\x42\x00\x04\xe1\xfb\xb7\xe8\x9c\xa0\x53\x06\x9a"
"\x54\xef\x9d\x75\x62\x7d\xec\x52\x59\x94\x0e\x52\x8c\xf2\xe6\x4f\xe4\x47"
"\xc2\x0d\x29\x6a\xf9\x08\xad\xb4\xf5\x6f\x92\xcd\x42\xbb\x1a\x13\x0d\x02"
"\xa0\x6a\xda\x7f\xb0\x64\xcc\xa6\x5f\xec\xf0\xbc\x81\x80\x12\x73\x0d\xb0"
"\xa0",
91},
{"Sectigo 'Elephant2027h2'", CTLogState::Admissible,
1747100000000, // 2025-05-13T01:33:20Z
3, // operated by Sectigo
"\x30\x59\x30\x13\x06\x07\x2a\x86\x48\xce\x3d\x02\x01\x06\x08\x2a\x86\x48"
"\xce\x3d\x03\x01\x07\x03\x42\x00\x04\x09\x33\xe1\xa4\x99\xd1\x16\xba\x11"
"\x46\x93\xff\xd4\x37\x40\x9e\xcf\x8f\xae\x79\x94\xcb\x0b\x6a\x21\x5f\x84"
"\x78\xbe\x09\x83\xcc\xca\xa2\xea\x16\xee\x4b\x80\x91\x8a\x3e\x91\x97\xa8"
"\x1e\xdc\x8a\xec\x20\x61\x7e\x52\x25\x32\x4e\xd3\xd9\x0a\xe7\xe3\x0f\xed"
"\xf2",
91},
{"Let's Encrypt 'Oak2025h1'", CTLogState::Admissible,
1701000000000, // 2023-11-26T12:00:00Z
4, // operated by Let's Encrypt

2
security/manager/ssl/StaticHPKPins.h
View File

@@ -736,4 +736,4 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {
static const int32_t kUnknownId = -1;
static const PRTime kPreloadPKPinsExpirationTime = INT64_C(1755516066207000);
static const PRTime kPreloadPKPinsExpirationTime = INT64_C(1755775704123000);

543
security/manager/ssl/nsSTSPreloadList.inc
View File

File diff suppressed because it is too large Load Diff

84
security/manager/tools/log_list.json
View File

@@ -1,6 +1,6 @@
{
"version": "53.41",
"log_list_timestamp": "2025-05-11T12:55:05Z",
"version": "54.1",
"log_list_timestamp": "2025-05-14T12:54:55Z",
"operators": [
{
"name": "Google",
@@ -501,6 +501,86 @@
"start_inclusive": "2026-07-01T00:00:00Z",
"end_exclusive": "2027-01-01T00:00:00Z"
}
},
{
"description": "Sectigo 'Elephant2025h2'",
"log_id": "DR28iUTp9QBVQtctPhRMzEMIKrbqHpTf1wZlfS6G8wE=",
"key": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE0OlLeGW2qUZGUoQERydw3GlayEO3ZK3418zThY1tDYr85ASme6ZOL/2DXyOXw8RCwVsKhRbOqMEOxW4Q2p4KQg==",
"url": "https://elephant2025h2.ct.sectigo.com/",
"mmd": 86400,
"state": {
"qualified": {
"timestamp": "2025-05-13T01:33:20Z"
}
},
"temporal_interval": {
"start_inclusive": "2025-07-01T00:00:00Z",
"end_exclusive": "2026-01-01T00:00:00Z"
}
},
{
"description": "Sectigo 'Elephant2026h1'",
"log_id": "0W6ppWgHfmY1oD83pd28A6U8QRIU1IgY9ekxsyPLlQQ=",
"key": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEU0lqnPHoXuU9Fc9dJv1HQZCvssJfvxLsirwVQ/fkFyUqeu4inwPKikeT4DGyyWWH4NR/DCJa2bAumHrXJdAcaQ==",
"url": "https://elephant2026h1.ct.sectigo.com/",
"mmd": 86400,
"state": {
"qualified": {
"timestamp": "2025-05-13T01:33:20Z"
}
},
"temporal_interval": {
"start_inclusive": "2026-01-01T00:00:00Z",
"end_exclusive": "2026-07-01T00:00:00Z"
}
},
{
"description": "Sectigo 'Elephant2026h2'",
"log_id": "r2eIO1ewTt2Pptl+9i6o64EKx3Fg8CReVdYML+eFhzo=",
"key": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEO/t4Uwkoou78zkCchh9tfAKbIUJmbOoUAb8szD8StnnHFKAVY5kq1Ljs8YD7CfzdD7xcVjmQYpbtNUhxRMRtmA==",
"url": "https://elephant2026h2.ct.sectigo.com/",
"mmd": 86400,
"state": {
"qualified": {
"timestamp": "2025-05-13T01:33:20Z"
}
},
"temporal_interval": {
"start_inclusive": "2026-07-01T00:00:00Z",
"end_exclusive": "2027-01-01T00:00:00Z"
}
},
{
"description": "Sectigo 'Elephant2027h1'",
"log_id": "YEyar3p/d18B1Ab8kg3ImesLHH34yVIb+voXdzuXi8k=",
"key": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE4fu36JygUwaaVO+ddWJ97FJZlA5SjPLmT+RHwg0pavkIrbT1b5LNQrsaEw0CoGraf7BkzKZf7PC8gYAScw2woA==",
"url": "https://elephant2027h1.ct.sectigo.com/",
"mmd": 86400,
"state": {
"qualified": {
"timestamp": "2025-05-13T01:33:20Z"
}
},
"temporal_interval": {
"start_inclusive": "2027-01-01T00:00:00Z",
"end_exclusive": "2027-07-01T00:00:00Z"
}
},
{
"description": "Sectigo 'Elephant2027h2'",
"log_id": "okkM3NuOM6QAMhdg1tTVGiA2GR6nfZaL4mqKAPb///c=",
"key": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAECTPhpJnRFroRRpP/1DdAns+PrnmUywtqIV+EeL4Jg8zKouoW7kuAkYo+kZeoHtyK7CBhflIlMk7T2Qrn4w/t8g==",
"url": "https://elephant2027h2.ct.sectigo.com/",
"mmd": 86400,
"state": {
"qualified": {
"timestamp": "2025-05-13T01:33:20Z"
}
},
"temporal_interval": {
"start_inclusive": "2027-07-01T00:00:00Z",
"end_exclusive": "2028-01-01T00:00:00Z"
}
}
],
"tiled_logs": []

24
services/settings/dumps/blocklists/addons-bloomfilters.json
View File

@@ -1,5 +1,27 @@
{
"data": [
{
"stash": {
"blocked": [
"{59b7e83f-2aea-4621-b87b-4472f57b9a2a}:3.53.2",
"{59b7e83f-2aea-4621-b87b-4472f57b9a2a}:3.53.3",
"{59b7e83f-2aea-4621-b87b-4472f57b9a2a}:3.54.2",
"live-nbaokx-scores@phantomicelectric.site:1.2",
"live-nbaokx-scores@phantomicelectric.site:1.4",
"live-nbaokx-scores@phantomicelectric.site:1.5",
"live-nbaokx-scores@phantomicelectric.site:1.6",
"live-nbaokx-scores@phantomicelectric.site:1.7",
"live-nbaokx-scores@phantomicelectric.site:1.8"
],
"unblocked": [],
"softblocked": []
},
"schema": 1747075601427,
"key_format": "{guid}:{version}",
"stash_time": 1747247706248,
"id": "286663a6-c51e-438a-bb10-616b74b3c4c2",
"last_modified": 1747247778277
},
{
"stash": {
"blocked": [
@@ -338,5 +360,5 @@
"last_modified": 1739466430716
}
],
"timestamp": 1746815782081
"timestamp": 1747247778277
}

20
services/settings/dumps/main/devtools-compatibility-browsers.json
View File

@@ -1,5 +1,14 @@
{
"data": [
{
"name": "Node.js",
"schema": 1747181110151,
"status": "current",
"version": "24.0.0",
"browserid": "nodejs",
"id": "9e4eb0f8-808c-4ae9-b137-bf0172b24166",
"last_modified": 1747199364436
},
{
"name": "Edge",
"schema": 1746230703388,
@@ -324,15 +333,6 @@
"id": "e05f8a82-8aa6-4621-b1ef-3195828ccdc0",
"last_modified": 1732521556529
},
{
"name": "Node.js",
"schema": 1731110704254,
"status": "current",
"version": "23.0.0",
"browserid": "nodejs",
"id": "78b5378c-c23a-4deb-b026-b305f4d17d23",
"last_modified": 1731397547435
},
{
"name": "Firefox for Android",
"schema": 1723593904156,
@@ -361,5 +361,5 @@
"last_modified": 1665656484764
}
],
"timestamp": 1747035932495
"timestamp": 1747199364436
}

27
services/settings/dumps/main/search-config-v2.json
View File

@@ -452,9 +452,9 @@
},
"id": "05645095-d26e-4f20-9137-f24a14a23f28",
"identifier": "bing",
"last_modified": 1742996759040,
"last_modified": 1747257920659,
"recordType": "engine",
"schema": 1742810344329,
"schema": 1747180809142,
"variants": [
{
"environment": {
@@ -576,6 +576,27 @@
"searchTermParamName": "q"
}
}
},
{
"environment": {
"experiment": "adblockers"
},
"partnerCode": "MZABT",
"urls": {
"search": {
"params": [
{
"name": "pc",
"value": "{partnerCode}"
},
{
"name": "form",
"value": "ABT"
}
],
"searchTermParamName": "q"
}
}
}
]
}
@@ -8199,5 +8220,5 @@
"schema": 1707824831520
}
],
"timestamp": 1745933974542
"timestamp": 1747257920659
}

7
services/settings/dumps/main/search-telemetry-v2.json
View File

@@ -1,7 +1,7 @@
{
"data": [
{
"schema": 1746437703179,
"schema": 1747075599737,
"subframes": [],
"components": [
{
@@ -134,6 +134,7 @@
"MOZT",
"MOZW",
"MOZX",
"MZABT",
"MZCP",
"MZTOF",
"MZSL01",
@@ -188,7 +189,7 @@
"^https://www\\.bing\\.com/acli?c?k"
],
"id": "e1eec461-f1f3-40de-b94b-3b670b78108c",
"last_modified": 1746713409840
"last_modified": 1747257937608
},
{
"schema": 1742915671669,
@@ -850,5 +851,5 @@
"last_modified": 1741781945953
}
],
"timestamp": 1746713409840
"timestamp": 1747257937608
}

51
services/settings/dumps/security-state/intermediates.json
View File

@@ -1,5 +1,18 @@
{
"data": [
{
"schema": 1747274261060,
"derHash": "Sn8QTwV9UvGrkS1BwSAHRAGeDjilb/J/T6ettOmjq5w=",
"attachment": {
"hash": "09486a4dc7a76a50df8734c024908603884945ffd8526f37453750d3fd3803de",
"size": 1821,
"filename": "yP4Wl1DsS7rJOKFrlSzDRH1_eNx0U3XU2TjrxnmmNbs=.pem",
"location": "security-state-staging/intermediates/9ae3b70c-7c4c-49dd-a9f6-cc712303e4f9.pem",
"mimetype": "application/x-pem-file"
},
"id": "d4454036-3d05-4125-8165-85ec3dc0c4a5",
"last_modified": 1747277822302
},
{
"schema": 1746885468781,
"derHash": "aDekmLtp3sdJ//T9H1/9xWZafBoyb8bXoFeGa6AKr9I=",
@@ -17221,24 +17234,6 @@
"id": "c5c35f82-5579-4f13-bc24-6e9a03dc2ae3",
"last_modified": 1666727868179
},
{
"schema": 1666727413203,
"derHash": "RZCrAULHhnEfVuh9+B6/mJGngEPNaNBwKUM/NRjsdss=",
"subject": "CN=WebSpace-Forum Essential CA II,O=WebSpace-Forum e.K.,L=Berlin,ST=Berlin,C=DE",
"subjectDN": "MHYxCzAJBgNVBAYTAkRFMQ8wDQYDVQQIEwZCZXJsaW4xDzANBgNVBAcTBkJlcmxpbjEcMBoGA1UEChMTV2ViU3BhY2UtRm9ydW0gZS5LLjEnMCUGA1UEAxMeV2ViU3BhY2UtRm9ydW0gRXNzZW50aWFsIENBIElJ",
"whitelist": false,
"attachment": {
"hash": "dcfbd2676910e5589b335c5be968b4cb3dcb3d6c8f52742c1882baa24ad9642f",
"size": 2138,
"filename": "JLiByOVnWd2f8bAC0L_puQNtFwBfGt4XaQ6BRcqgrQ4=.pem",
"location": "security-state-staging/intermediates/04ef33c1-c720-4d0f-877c-45a3b0231711.pem",
"mimetype": "application/x-pem-file"
},
"pubKeyHash": "JLiByOVnWd2f8bAC0L/puQNtFwBfGt4XaQ6BRcqgrQ4=",
"crlite_enrolled": false,
"id": "a4afd380-aadd-42d1-bc83-e5e3fdf9f9ab",
"last_modified": 1666727868165
},
{
"schema": 1666727397297,
"derHash": "Fk4Ac6dSAKWBaZG9wXxSbrohJx9xNXRGmE7SyApZ/Vo=",
@@ -17995,24 +17990,6 @@
"id": "6c442ac4-66c1-432d-bf78-80ce046badd7",
"last_modified": 1666727867316
},
{
"schema": 1666727403214,
"derHash": "C9FHkYe6Aeo+k4p1DHveO28oXcEOu5lTA/ZmAbpbLSA=",
"subject": "CN=WebSpace-Forum Server CA II,O=WebSpace-Forum e.K.,L=Berlin,ST=Berlin,C=DE",
"subjectDN": "MHMxCzAJBgNVBAYTAkRFMQ8wDQYDVQQIEwZCZXJsaW4xDzANBgNVBAcTBkJlcmxpbjEcMBoGA1UEChMTV2ViU3BhY2UtRm9ydW0gZS5LLjEkMCIGA1UEAxMbV2ViU3BhY2UtRm9ydW0gU2VydmVyIENBIElJ",
"whitelist": false,
"attachment": {
"hash": "65b7676339537a03054bbad626b8cb8d54125b5819f31bbe0f37a375bca49efb",
"size": 2133,
"filename": "5RYmGs6llHArO1X6YMpESuHfz0WJ0hjDErS2_5y9hWo=.pem",
"location": "security-state-staging/intermediates/c118334a-9f3b-48bb-b538-707da8727964.pem",
"mimetype": "application/x-pem-file"
},
"pubKeyHash": "5RYmGs6llHArO1X6YMpESuHfz0WJ0hjDErS2/5y9hWo=",
"crlite_enrolled": false,
"id": "15268d2e-197a-4e65-942b-23efa82b8c59",
"last_modified": 1666727867290
},
{
"schema": 1666727348871,
"derHash": "OYmjFwLp5qlIXzySp30hsYUsf2ci8j1EuMvnKpJuyFQ=",
@@ -29192,5 +29169,5 @@
"last_modified": 1559865884636
}
],
"timestamp": 1746975423008
"timestamp": 1747277822302
}