No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=jcristau

Differential Revision: https://phabricator.services.mozilla.com/D118699
2021-06-24 13:28:29 +00:00 · 2021-06-24 13:28:29 +00:00 · 07112f9595
--- a/security/manager/ssl/StaticHPKPins.h
+++ b/security/manager/ssl/StaticHPKPins.h
@ -1149,4 +1149,4 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {

 static const int32_t kUnknownId = -1;

-static const PRTime kPreloadPKPinsExpirationTime = INT64_C(1632739073849000);
+static const PRTime kPreloadPKPinsExpirationTime = INT64_C(1632998500081000);
--- a/security/manager/ssl/nsSTSPreloadList.inc
+++ b/security/manager/ssl/nsSTSPreloadList.inc
--- a/services/settings/dumps/main/password-rules.json
+++ b/services/settings/dumps/main/password-rules.json
--- a/services/settings/dumps/main/top-sites.json
+++ b/services/settings/dumps/main/top-sites.json
@ -1,5 +1,37 @@
 {
  "data": [
+    {
+      "url": "https://www.amazon.ca/?tag=admpdesktopca-20&ref=pd_sl_a317866944CA%YYYYMMDDHH%",
+      "order": 0,
+      "title": "Amazon",
+      "schema": 1624370112441,
+      "include_regions": [
+        "CA"
+      ],
+      "sponsored_position": 1,
+      "include_experiments": [
+        "ebay-2020-1"
+      ],
+      "url_urlbar_override": "https://www.amazon.ca/?tag=admpdesktopca-20&ref=pd_sl_a317867036CA%YYYYMMDDHH%",
+      "send_attribution_request": true,
+      "id": "f2fc4f42-d930-4c0c-acdc-1d29b56234d3",
+      "last_modified": 1624376393940
+    },
+    {
+      "url": "https://www.amazon.ca/",
+      "order": 50,
+      "title": "Amazon",
+      "schema": 1624370092747,
+      "include_regions": [
+        "CA"
+      ],
+      "search_shortcut": false,
+      "exclude_experiments": [
+        "ebay-2020-1"
+      ],
+      "id": "82386dfa-cc7a-4fcb-9b1e-c9343d3da79d",
+      "last_modified": 1624376393938
+    },
    {
      "url": "https://www.amazon.es/?tag=admarketpl0c0-21&ref=pd_sl_a317866950ES%YYYYMMDDHH%",
      "order": 0,
@ -95,19 +127,6 @@
      "id": "f16abe55-30be-4d53-b1ac-7ba1e16d17c6",
      "last_modified": 1623869278033
    },
-    {
-      "url": "https://www.amazon.ca/",
-      "order": 50,
-      "title": "Amazon",
-      "schema": 1621028261398,
-      "include_regions": [
-        "CA"
-      ],
-      "search_shortcut": false,
-      "exclude_experiments": [],
-      "id": "82386dfa-cc7a-4fcb-9b1e-c9343d3da79d",
-      "last_modified": 1621028626500
-    },
    {
      "url": "https://www.etsy.com/ca?utm_source=admarketplace&utm_medium=cpc&utm_term=etsy_exact&utm_campaign=Search_CA_Nonbrand_AMP_Conducive&utm_ag=utmag&utm_custom1=318426293CA%YYYYMMDDHH%_&utm_content=amp_218221_14988193_creative_targetid_device_feeditemid_318426293CA&utm_custom2=218221",
      "order": 0,
@ -124,23 +143,6 @@
      "id": "0171a7bd-6ddc-409b-b68f-dc5e9e5224d5",
      "last_modified": 1621028626497
    },
-    {
-      "url": "https://www.amazon.ca/?tag=admpdesktopca-20&ref=pd_sl_a317866944CA%YYYYMMDDHH%",
-      "order": 0,
-      "title": "Amazon",
-      "schema": 1619532618002,
-      "include_regions": [
-        "CA"
-      ],
-      "sponsored_position": 1,
-      "include_experiments": [
-        "disabled"
-      ],
-      "url_urlbar_override": "https://www.amazon.ca/?tag=admpdesktopca-20&ref=pd_sl_a317867036CA%YYYYMMDDHH%",
-      "send_attribution_request": true,
-      "id": "f2fc4f42-d930-4c0c-acdc-1d29b56234d3",
-      "last_modified": 1619539787374
-    },
    {
      "url": "https://www.amazon.com.br/?tag=admarketbr-20&ref=pd_sl_a317866941BR%YYYYMMDDHH%",
      "order": 0,
--- a/services/settings/dumps/main/websites-with-shared-credential-backends.json
+++ b/services/settings/dumps/main/websites-with-shared-credential-backends.json
@ -92,7 +92,8 @@
          "amazon.co.uk",
          "amazon.sa",
          "amazon.sg",
-          "amazon.se"
+          "amazon.se",
+          "amazon.pl"
        ],
        [
          "amcrestcloud.com",
@ -278,6 +279,7 @@
          "swarmapp.com"
        ],
        [
+          "glassdoor.ca",
          "glassdoor.com",
          "glassdoor.com.ar"
        ],
@ -306,6 +308,13 @@
          "liebherr.com",
          "myliebherr.com"
        ],
+        [
+          "logitech.com",
+          "logitechg.com",
+          "logi.com",
+          "astrogaming.com",
+          "ultimateears.com"
+        ],
        [
          "lookmark.io",
          "lookmark.link"
@ -337,6 +346,11 @@
          "mytotalconnectcomfort.com",
          "tccna.honeywell.com"
        ],
+        [
+          "nintendolife.com",
+          "purexbox.com",
+          "pushsquare.com"
+        ],
        [
          "nokia.com",
          "alcatel-lucent.com",
@ -466,6 +480,10 @@
          "ticketmaster.com",
          "livenation.com"
        ],
+        [
+          "tp-link.com",
+          "tplinkcloud.com"
+        ],
        [
          "uhc.com",
          "myuhc.com"
@ -543,7 +561,7 @@
        ]
      ],
      "id": "8c3d4151-8e68-4bb3-a3fd-babf4aba2cdc",
-      "last_modified": 1613052721204
+      "last_modified": 1624479523629
    }
  ]
 }
--- a/services/settings/dumps/security-state/intermediates.json
+++ b/services/settings/dumps/security-state/intermediates.json
@ -1,5 +1,167 @@
 {
  "data": [
+    {
+      "schema": 1624370740634,
+      "derHash": "GTe5v2YvtXhAe3erh9jWYrFjJ8+SM0DQ9y2VGVKxnIA=",
+      "subject": "CN=TuringSign ECC Secure CA,O=Turing Crypto GmbH,C=DE",
+      "subjectDN": "ME0xCzAJBgNVBAYTAkRFMRswGQYDVQQKExJUdXJpbmcgQ3J5cHRvIEdtYkgxITAfBgNVBAMTGFR1cmluZ1NpZ24gRUNDIFNlY3VyZSBDQQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "0c5cf83ed5b3664d80db1c28c2aa11c8a0e114bee2267c442ec1ed894a803551",
+        "size": 1406,
+        "filename": "Qg8WXvoy1Rxl-vs4yqRTbwJDijUK-I6ahTBJYsotkfo=.pem",
+        "location": "security-state-staging/intermediates/bb01d689-8bcd-4d14-af20-07387a168d54.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "Qg8WXvoy1Rxl+vs4yqRTbwJDijUK+I6ahTBJYsotkfo=",
+      "crlite_enrolled": false,
+      "id": "dd96ac03-d8d5-4495-beea-0012d87afa24",
+      "last_modified": 1624525052276
+    },
+    {
+      "schema": 1624370742364,
+      "derHash": "EpdlWLaOjh6qeaYpqOTRft75P1rDDebfsM3uOJ1W0VY=",
+      "subject": "CN=TuringSign RSA Secure CA,O=Turing Crypto GmbH,C=DE",
+      "subjectDN": "ME0xCzAJBgNVBAYTAkRFMRswGQYDVQQKExJUdXJpbmcgQ3J5cHRvIEdtYkgxITAfBgNVBAMTGFR1cmluZ1NpZ24gUlNBIFNlY3VyZSBDQQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "2f15e1f6218dde794713d0b2b8cfc8bd6eaad84e6e30aeda4ccb44a17decc213",
+        "size": 2028,
+        "filename": "LjNGvuYlXy4cly5bwppVDU4T8q5pCHAHEEAG--Nx1WA=.pem",
+        "location": "security-state-staging/intermediates/c1c4618d-96e6-4765-ae3a-4bb85239e857.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "LjNGvuYlXy4cly5bwppVDU4T8q5pCHAHEEAG++Nx1WA=",
+      "crlite_enrolled": false,
+      "id": "3c374e00-e085-448e-9ff1-40ce30b5121b",
+      "last_modified": 1624525052262
+    },
+    {
+      "schema": 1624373394117,
+      "derHash": "EpdlWLaOjh6qeaYpqOTRft75P1rDDebfsM3uOJ1W0VY=",
+      "subject": "CN=TuringSign RSA Secure CA,O=Turing Crypto GmbH,C=DE",
+      "subjectDN": "ME0xCzAJBgNVBAYTAkRFMRswGQYDVQQKExJUdXJpbmcgQ3J5cHRvIEdtYkgxITAfBgNVBAMTGFR1cmluZ1NpZ24gUlNBIFNlY3VyZSBDQQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "2f15e1f6218dde794713d0b2b8cfc8bd6eaad84e6e30aeda4ccb44a17decc213",
+        "size": 2028,
+        "filename": "LjNGvuYlXy4cly5bwppVDU4T8q5pCHAHEEAG--Nx1WA=.pem",
+        "location": "security-state-staging/intermediates/bdce1582-5c19-4c93-9aaa-fd72e9b4c2a3.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "LjNGvuYlXy4cly5bwppVDU4T8q5pCHAHEEAG++Nx1WA=",
+      "crlite_enrolled": false,
+      "id": "f7a748e9-450d-4d23-b766-96e0c4a4c83f",
+      "last_modified": 1624525052249
+    },
+    {
+      "schema": 1624373395878,
+      "derHash": "GTe5v2YvtXhAe3erh9jWYrFjJ8+SM0DQ9y2VGVKxnIA=",
+      "subject": "CN=TuringSign ECC Secure CA,O=Turing Crypto GmbH,C=DE",
+      "subjectDN": "ME0xCzAJBgNVBAYTAkRFMRswGQYDVQQKExJUdXJpbmcgQ3J5cHRvIEdtYkgxITAfBgNVBAMTGFR1cmluZ1NpZ24gRUNDIFNlY3VyZSBDQQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "0c5cf83ed5b3664d80db1c28c2aa11c8a0e114bee2267c442ec1ed894a803551",
+        "size": 1406,
+        "filename": "Qg8WXvoy1Rxl-vs4yqRTbwJDijUK-I6ahTBJYsotkfo=.pem",
+        "location": "security-state-staging/intermediates/74c28d77-0a83-4ef3-8d7a-8858ff534b5f.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "Qg8WXvoy1Rxl+vs4yqRTbwJDijUK+I6ahTBJYsotkfo=",
+      "crlite_enrolled": false,
+      "id": "7970fe87-7873-4399-851d-eef65ed7130b",
+      "last_modified": 1624525052236
+    },
+    {
+      "schema": 1624481397906,
+      "derHash": "+uzdBdny5f6EmN5WzfiVwKaXCU4Xc97eX84gAbTHsVI=",
+      "subject": "CN=CRYPTAS OV Issuing CA,O=CRYPTAS it-Security GmbH,C=AT",
+      "subjectDN": "MFAxCzAJBgNVBAYTAkFUMSEwHwYDVQQKExhDUllQVEFTIGl0LVNlY3VyaXR5IEdtYkgxHjAcBgNVBAMTFUNSWVBUQVMgT1YgSXNzdWluZyBDQQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "f56a51e5163cf8ad0112976fedb21ae8b4b37916e6ce6589da1af5850254ff9f",
+        "size": 1739,
+        "filename": "U8nQD9wXAUszOzpIA4B47LOCJYIzJLUU65_asRztVds=.pem",
+        "location": "security-state-staging/intermediates/ea32cf1d-0468-4c6e-8a78-d5381be82033.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "U8nQD9wXAUszOzpIA4B47LOCJYIzJLUU65/asRztVds=",
+      "crlite_enrolled": false,
+      "id": "57899723-0793-43ef-ad24-f5da978584e9",
+      "last_modified": 1624525052223
+    },
+    {
+      "schema": 1624481399654,
+      "derHash": "HsCvw+2fK63KBo4MLYH5xi75dSIxYxe3iGYrPtrTgHU=",
+      "subject": "CN=CRYPTAS EV Issuing CA,O=CRYPTAS it-Security GmbH,C=AT",
+      "subjectDN": "MFAxCzAJBgNVBAYTAkFUMSEwHwYDVQQKExhDUllQVEFTIGl0LVNlY3VyaXR5IEdtYkgxHjAcBgNVBAMTFUNSWVBUQVMgRVYgSXNzdWluZyBDQQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "2457cbcf379f5f195fb7ba4cfda565f717ef9156b63623457e3301d515f0a255",
+        "size": 1735,
+        "filename": "Hfy6dQZGrjdPYWGB1jtGCNqt0xhK43ly0PpF6FLmg3A=.pem",
+        "location": "security-state-staging/intermediates/bc8ea5bd-51a8-4d5a-843d-4e5dc8487e16.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "Hfy6dQZGrjdPYWGB1jtGCNqt0xhK43ly0PpF6FLmg3A=",
+      "crlite_enrolled": false,
+      "id": "35a5d389-1b24-494b-b20f-25ff30eee6b3",
+      "last_modified": 1624525052209
+    },
+    {
+      "schema": 1624503002546,
+      "derHash": "/mtvnkS2cHl9UuXxbvG7ELSes61mJSL8Yys335pQRM0=",
+      "subject": "CN=Staclar TLS Issuing CA R1,O=Staclar\\, Inc.,L=Claymont,ST=Delaware,C=US",
+      "subjectDN": "MG8xCzAJBgNVBAYTAlVTMREwDwYDVQQIDAhEZWxhd2FyZTERMA8GA1UEBwwIQ2xheW1vbnQxFjAUBgNVBAoMDVN0YWNsYXIsIEluYy4xIjAgBgNVBAMMGVN0YWNsYXIgVExTIElzc3VpbmcgQ0EgUjE=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "54038b6768167a2d4b10ab95d2f8e93b47ab7b8e6233e07343f621a977f51f34",
+        "size": 2495,
+        "filename": "2hrK22IRCeQc0huhCCGTSKY2R0LmyeFUaH4ArRR6YUc=.pem",
+        "location": "security-state-staging/intermediates/3efc8703-5c7e-45d9-b345-9857aec25425.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "2hrK22IRCeQc0huhCCGTSKY2R0LmyeFUaH4ArRR6YUc=",
+      "crlite_enrolled": false,
+      "id": "b3bfb57e-84e5-459a-93ea-751a8c706623",
+      "last_modified": 1624525052196
+    },
+    {
+      "schema": 1624481400864,
+      "derHash": "WaNFbnUOMl/LE1ncKegoGJtJgsEZxk+s/WcocRswUy8=",
+      "subject": "CN=www.lh.pl,OU=LH.pl,O=LH.pl Sp. z o.o.,C=PL",
+      "subjectDN": "MEwxCzAJBgNVBAYTAlBMMRkwFwYDVQQKDBBMSC5wbCBTcC4geiBvLm8uMQ4wDAYDVQQLDAVMSC5wbDESMBAGA1UEAwwJd3d3LmxoLnBs",
+      "whitelist": false,
+      "attachment": {
+        "hash": "402828757f41d8cffb0ca05dbda29cf243d74ac40d69868042f3c4704cefe6be",
+        "size": 1589,
+        "filename": "SPflJTPfbRg6NWYkxrOaqWFjkUz6d6fxe8POctPyEFo=.pem",
+        "location": "security-state-staging/intermediates/9852f8f4-698c-4682-be77-b302a242b445.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "SPflJTPfbRg6NWYkxrOaqWFjkUz6d6fxe8POctPyEFo=",
+      "crlite_enrolled": false,
+      "id": "88fae53f-9c98-4491-98fc-5382066d04ba",
+      "last_modified": 1624525052172
+    },
+    {
+      "schema": 1624287550178,
+      "derHash": "ClUqZfIv+CDn7D1Du/iLAqvDS9JH4MNQWJG2NC8WpfI=",
+      "subject": "CN=SHECA RSA Domain Validation Server CA G3,O=UniTrust,C=CN",
+      "subjectDN": "MFMxCzAJBgNVBAYTAkNOMREwDwYDVQQKDAhVbmlUcnVzdDExMC8GA1UEAwwoU0hFQ0EgUlNBIERvbWFpbiBWYWxpZGF0aW9uIFNlcnZlciBDQSBHMw==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "42516b0068507cb60d6383aaefa05ac169921cff9e4616761151efe098d3e1fe",
+        "size": 2008,
+        "filename": "N6OrM0KKQgR1zORoDKkLLFEKAYCmS_84dpbLl_qNOnU=.pem",
+        "location": "security-state-staging/intermediates/525578e5-a94b-4525-b9e7-801be6e0ff89.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "N6OrM0KKQgR1zORoDKkLLFEKAYCmS/84dpbLl/qNOnU=",
+      "crlite_enrolled": true,
+      "id": "4b6a2421-1677-41c0-8103-bc13fb7e09f9",
+      "last_modified": 1624330758483
+    },
    {
      "schema": 1624068324827,
      "derHash": "Jv1MQ2fkY9OccXlq5AEOUzgNyTvBMvsBnWcYpoc+gfQ=",
@ -270,24 +432,6 @@
      "id": "9c0eb9aa-b6ce-452b-9c28-80f98e51306b",
      "last_modified": 1623898686549
    },
-    {
-      "schema": 1623895636139,
-      "derHash": "ClUqZfIv+CDn7D1Du/iLAqvDS9JH4MNQWJG2NC8WpfI=",
-      "subject": "CN=SHECA RSA Domain Validation Server CA G3,O=UniTrust,C=CN",
-      "subjectDN": "MFMxCzAJBgNVBAYTAkNOMREwDwYDVQQKDAhVbmlUcnVzdDExMC8GA1UEAwwoU0hFQ0EgUlNBIERvbWFpbiBWYWxpZGF0aW9uIFNlcnZlciBDQSBHMw==",
-      "whitelist": false,
-      "attachment": {
-        "hash": "42516b0068507cb60d6383aaefa05ac169921cff9e4616761151efe098d3e1fe",
-        "size": 2008,
-        "filename": "N6OrM0KKQgR1zORoDKkLLFEKAYCmS_84dpbLl_qNOnU=.pem",
-        "location": "security-state-staging/intermediates/525578e5-a94b-4525-b9e7-801be6e0ff89.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "N6OrM0KKQgR1zORoDKkLLFEKAYCmS/84dpbLl/qNOnU=",
-      "crlite_enrolled": true,
-      "id": "4b6a2421-1677-41c0-8103-bc13fb7e09f9",
-      "last_modified": 1623898686510
-    },
    {
      "schema": 1623679609235,
      "derHash": "pbJ9hEoOy2jx0GVyMgKi8HxmfelrhOaKmvI0ZpOX1sQ=",
@ -16812,24 +16956,6 @@
      "id": "2f77cfd2-2ffb-4909-8714-3629bde7ad50",
      "last_modified": 1601517443152
    },
-    {
-      "schema": 1601376770407,
-      "derHash": "WaNFbnUOMl/LE1ncKegoGJtJgsEZxk+s/WcocRswUy8=",
-      "subject": "CN=www.lh.pl,OU=LH.pl,O=LH.pl Sp. z o.o.,C=PL",
-      "subjectDN": "MEwxCzAJBgNVBAYTAlBMMRkwFwYDVQQKDBBMSC5wbCBTcC4geiBvLm8uMQ4wDAYDVQQLDAVMSC5wbDESMBAGA1UEAwwJd3d3LmxoLnBs",
-      "whitelist": false,
-      "attachment": {
-        "hash": "402828757f41d8cffb0ca05dbda29cf243d74ac40d69868042f3c4704cefe6be",
-        "size": 1589,
-        "filename": "SPflJTPfbRg6NWYkxrOaqWFjkUz6d6fxe8POctPyEFo=.pem",
-        "location": "security-state-staging/intermediates/9852f8f4-698c-4682-be77-b302a242b445.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "SPflJTPfbRg6NWYkxrOaqWFjkUz6d6fxe8POctPyEFo=",
-      "crlite_enrolled": true,
-      "id": "88fae53f-9c98-4491-98fc-5382066d04ba",
-      "last_modified": 1601517443133
-    },
    {
      "schema": 1601376764928,
      "derHash": "RKFX2TSIYKfUznyS4aOJ5MwMpZZ/nbu9EmY5+bmARrc=",
--- a/services/settings/dumps/security-state/onecrl.json
+++ b/services/settings/dumps/security-state/onecrl.json
@ -1,5 +1,20 @@
 {
  "data": [
+    {
+      "schema": 1623872990204,
+      "details": {
+        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1717548",
+        "who": "dkeeler@mozilla.com",
+        "why": "Kazakhstan MITM (#7)",
+        "name": "Information Security Certification Authority",
+        "created": "2021-06-21T23:32:05Z"
+      },
+      "enabled": true,
+      "issuerName": "MFMxNTAzBgNVBAMTLEluZm9ybWF0aW9uIFNlY3VyaXR5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MQ0wCwYDVQQKEwRJU0NBMQswCQYDVQQGEwJLWg==",
+      "serialNumber": "JUSY/Krdlt5RgUcu0HsWP/eeatM=",
+      "id": "cd5f0792-b5d2-4215-a5eb-92fc483c3491",
+      "last_modified": 1624320350090
+    },
    {
      "schema": 1623343005748,
      "details": {