No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM

Differential Revision: https://phabricator.services.mozilla.com/D121518
2021-08-02 11:35:31 +00:00 · 2021-08-02 11:35:31 +00:00 · 2831cbf797
--- a/security/manager/ssl/StaticHPKPins.h
+++ b/security/manager/ssl/StaticHPKPins.h
@ -1149,4 +1149,4 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {

 static const int32_t kUnknownId = -1;

-static const PRTime kPreloadPKPinsExpirationTime = INT64_C(1636022515064000);
+static const PRTime kPreloadPKPinsExpirationTime = INT64_C(1636368112417000);
--- a/security/manager/ssl/nsSTSPreloadList.inc
+++ b/security/manager/ssl/nsSTSPreloadList.inc
--- a/services/settings/dumps/blocklists/addons-bloomfilters.json
+++ b/services/settings/dumps/blocklists/addons-bloomfilters.json
@ -1,5 +1,51 @@
 {
  "data": [
+    {
+      "stash": {
+        "blocked": [],
+        "unblocked": []
+      },
+      "schema": 1627583861171,
+      "key_format": "{guid}:{version}",
+      "stash_time": 1627605309792,
+      "id": "da99f7c7-7bab-4bb6-9e0c-0a7e2b81c536",
+      "last_modified": 1627605467907
+    },
+    {
+      "stash": {
+        "blocked": [
+          "{0034fea2-06d8-4f73-8e70-9ef391e47b93}:5.4.2",
+          "{106b5521-033b-4c06-a168-8a5721a5aae1}:1.0",
+          "{d86e99c1-d540-4df3-9895-48062616892b}:2.3.2",
+          "{bd922f43-d60d-43e1-af46-7cd0ecc58c42}:1.1",
+          "{3f00705a-cc05-4f74-a036-ea67f19e3ae7}:1.1",
+          "{bd922f43-d60d-43e1-af46-7cd0ecc58c42}:1.0",
+          "{3fc558d4-6f70-42f4-b6e6-55cf84a05ca0}:2.3.2",
+          "{3f00705a-cc05-4f74-a036-ea67f19e3ae7}:1.2"
+        ],
+        "unblocked": []
+      },
+      "schema": 1627562279318,
+      "key_format": "{guid}:{version}",
+      "stash_time": 1627583709016,
+      "id": "a45e0fdd-7491-4cd2-b9f5-593292ec3bdb",
+      "last_modified": 1627583861117
+    },
+    {
+      "stash": {
+        "blocked": [
+          "@SearchFoxMe-ext:1.0.0",
+          "@SearchFoxMeExt-ext:1.0.0",
+          "{756d48b2-6668-4659-b754-1fa66456a924}:1.0"
+        ],
+        "unblocked": []
+      },
+      "schema": 1627475875327,
+      "key_format": "{guid}:{version}",
+      "stash_time": 1627562110359,
+      "id": "52760e30-4a3c-4c4a-ae75-8b8aeaf9771b",
+      "last_modified": 1627562279263
+    },
    {
      "stash": {
        "blocked": [
--- a/services/settings/dumps/main/search-config.json
+++ b/services/settings/dumps/main/search-config.json
--- a/services/settings/dumps/security-state/intermediates.json
+++ b/services/settings/dumps/security-state/intermediates.json
@ -1,5 +1,77 @@
 {
  "data": [
+    {
+      "schema": 1627740208946,
+      "derHash": "wt/7PBuwbeTBCSblF/82b5OJLV4C3G95CAJ121f9b8g=",
+      "subject": "CN=TI Trust Technologies EV CA,OU=Controlled by Sectigo exclusively for TI Trust Technologies,O=Telecom Italia Trust Technologies S.R.L.,L=Pomezia,ST=Roma,C=IT",
+      "subjectDN": "MIHNMQswCQYDVQQGEwJJVDENMAsGA1UECBMEUm9tYTEQMA4GA1UEBxMHUG9tZXppYTExMC8GA1UEChMoVGVsZWNvbSBJdGFsaWEgVHJ1c3QgVGVjaG5vbG9naWVzIFMuUi5MLjFEMEIGA1UECxM7Q29udHJvbGxlZCBieSBTZWN0aWdvIGV4Y2x1c2l2ZWx5IGZvciBUSSBUcnVzdCBUZWNobm9sb2dpZXMxJDAiBgNVBAMTG1RJIFRydXN0IFRlY2hub2xvZ2llcyBFViBDQQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "f3a3288bc3b67208c3f1e4164cb00b27794763ac59477eb6171158b3507ab3e8",
+        "size": 2288,
+        "filename": "lG0jsaBDRslBBApGfnJu_ukJ5x3uoc841KUU1OMrO1E=.pem",
+        "location": "security-state-staging/intermediates/48b456c7-6568-4b6a-b3a6-e6d3c9384968.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "lG0jsaBDRslBBApGfnJu/ukJ5x3uoc841KUU1OMrO1E=",
+      "crlite_enrolled": true,
+      "id": "3eca5483-9836-4680-82c5-bb0774a0b4ad",
+      "last_modified": 1627743575700
+    },
+    {
+      "schema": 1627657085658,
+      "derHash": "Jv1MQ2fkY9OccXlq5AEOUzgNyTvBMvsBnWcYpoc+gfQ=",
+      "subject": "CN=SHECA RSA Organization Validation Server CA G3,O=UniTrust,C=CN",
+      "subjectDN": "MFkxCzAJBgNVBAYTAkNOMREwDwYDVQQKDAhVbmlUcnVzdDE3MDUGA1UEAwwuU0hFQ0EgUlNBIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIFNlcnZlciBDQSBHMw==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "a02a5c8205e62c2ef5dc42345a1585558c86f166ed9875d861601a465bcc4651",
+        "size": 2016,
+        "filename": "0JA1q1ctk_4J8qS0t-GhJaG5egVDq9SB33oMY7SMpfs=.pem",
+        "location": "security-state-staging/intermediates/caec957d-379a-4c23-bf42-3bd122e7cf33.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "0JA1q1ctk/4J8qS0t+GhJaG5egVDq9SB33oMY7SMpfs=",
+      "crlite_enrolled": true,
+      "id": "10ec0271-99d5-4c06-a20d-1c03ccf7d780",
+      "last_modified": 1627696694103
+    },
+    {
+      "schema": 1627696659687,
+      "derHash": "ClUqZfIv+CDn7D1Du/iLAqvDS9JH4MNQWJG2NC8WpfI=",
+      "subject": "CN=SHECA RSA Domain Validation Server CA G3,O=UniTrust,C=CN",
+      "subjectDN": "MFMxCzAJBgNVBAYTAkNOMREwDwYDVQQKDAhVbmlUcnVzdDExMC8GA1UEAwwoU0hFQ0EgUlNBIERvbWFpbiBWYWxpZGF0aW9uIFNlcnZlciBDQSBHMw==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "42516b0068507cb60d6383aaefa05ac169921cff9e4616761151efe098d3e1fe",
+        "size": 2008,
+        "filename": "N6OrM0KKQgR1zORoDKkLLFEKAYCmS_84dpbLl_qNOnU=.pem",
+        "location": "security-state-staging/intermediates/525578e5-a94b-4525-b9e7-801be6e0ff89.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "N6OrM0KKQgR1zORoDKkLLFEKAYCmS/84dpbLl/qNOnU=",
+      "crlite_enrolled": true,
+      "id": "4b6a2421-1677-41c0-8103-bc13fb7e09f9",
+      "last_modified": 1627696694071
+    },
+    {
+      "schema": 1627527491679,
+      "derHash": "PzHbdYKNqpbk3luCoGeP4gI71bJGw/klDL9nGOEJWPU=",
+      "subject": "CN=Domain The Net Technologies Ltd CA for EV SSL R2,O=Domain The Net Technologies Ltd,C=IL",
+      "subjectDN": "MHIxCzAJBgNVBAYTAklMMSgwJgYDVQQKDB9Eb21haW4gVGhlIE5ldCBUZWNobm9sb2dpZXMgTHRkMTkwNwYDVQQDDDBEb21haW4gVGhlIE5ldCBUZWNobm9sb2dpZXMgTHRkIENBIGZvciBFViBTU0wgUjI=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "cf5351124dd205109785f9b65c288b991342bec54071a6a24020c197870d64f5",
+        "size": 2487,
+        "filename": "Lk19AkNIC7AwHNF5HsU_phCEnUBI-eiA0mbFhxxeQsQ=.pem",
+        "location": "security-state-staging/intermediates/e3c32426-ee59-4729-9b1d-1ad5faa81c2c.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "Lk19AkNIC7AwHNF5HsU/phCEnUBI+eiA0mbFhxxeQsQ=",
+      "crlite_enrolled": true,
+      "id": "dafe281c-5c26-4b1e-b927-70b741e43b25",
+      "last_modified": 1627567413849
+    },
    {
      "schema": 1627505857328,
      "derHash": "k6B4mNibLMoWa6bx+KFBOM5Dgo5JG4MZJryCR9ORzHI=",
@ -18,24 +90,6 @@
      "id": "eda1d6cc-95f3-4925-b185-1972acc69e5a",
      "last_modified": 1627527490628
    },
-    {
-      "schema": 1627462733339,
-      "derHash": "Jv1MQ2fkY9OccXlq5AEOUzgNyTvBMvsBnWcYpoc+gfQ=",
-      "subject": "CN=SHECA RSA Organization Validation Server CA G3,O=UniTrust,C=CN",
-      "subjectDN": "MFkxCzAJBgNVBAYTAkNOMREwDwYDVQQKDAhVbmlUcnVzdDE3MDUGA1UEAwwuU0hFQ0EgUlNBIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIFNlcnZlciBDQSBHMw==",
-      "whitelist": false,
-      "attachment": {
-        "hash": "a02a5c8205e62c2ef5dc42345a1585558c86f166ed9875d861601a465bcc4651",
-        "size": 2016,
-        "filename": "0JA1q1ctk_4J8qS0t-GhJaG5egVDq9SB33oMY7SMpfs=.pem",
-        "location": "security-state-staging/intermediates/caec957d-379a-4c23-bf42-3bd122e7cf33.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "0JA1q1ctk/4J8qS0t+GhJaG5egVDq9SB33oMY7SMpfs=",
-      "crlite_enrolled": true,
-      "id": "10ec0271-99d5-4c06-a20d-1c03ccf7d780",
-      "last_modified": 1627484269985
-    },
    {
      "schema": 1627354662566,
      "derHash": "MaCWocuRiHbuV8hbI0n8nMLCy0/Pm903eHzp2levR5A=",
@ -54,24 +108,6 @@
      "id": "136cca7b-196b-4678-a6b0-4b880a8df6c5",
      "last_modified": 1627397859276
    },
-    {
-      "schema": 1627333083363,
-      "derHash": "ClUqZfIv+CDn7D1Du/iLAqvDS9JH4MNQWJG2NC8WpfI=",
-      "subject": "CN=SHECA RSA Domain Validation Server CA G3,O=UniTrust,C=CN",
-      "subjectDN": "MFMxCzAJBgNVBAYTAkNOMREwDwYDVQQKDAhVbmlUcnVzdDExMC8GA1UEAwwoU0hFQ0EgUlNBIERvbWFpbiBWYWxpZGF0aW9uIFNlcnZlciBDQSBHMw==",
-      "whitelist": false,
-      "attachment": {
-        "hash": "42516b0068507cb60d6383aaefa05ac169921cff9e4616761151efe098d3e1fe",
-        "size": 2008,
-        "filename": "N6OrM0KKQgR1zORoDKkLLFEKAYCmS_84dpbLl_qNOnU=.pem",
-        "location": "security-state-staging/intermediates/525578e5-a94b-4525-b9e7-801be6e0ff89.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "N6OrM0KKQgR1zORoDKkLLFEKAYCmS/84dpbLl/qNOnU=",
-      "crlite_enrolled": true,
-      "id": "4b6a2421-1677-41c0-8103-bc13fb7e09f9",
-      "last_modified": 1627354661542
-    },
    {
      "schema": 1627329796081,
      "derHash": "odJdKJQfr8DCpuueWWpUeG5zHQpKjjIdufHPLCT91gk=",
@ -28026,24 +28062,6 @@
      "id": "ef80dba5-2722-4073-94a2-06a8e7cf1eee",
      "last_modified": 1576536533226
    },
-    {
-      "schema": 1576535692634,
-      "derHash": "wt/7PBuwbeTBCSblF/82b5OJLV4C3G95CAJ121f9b8g=",
-      "subject": "CN=TI Trust Technologies EV CA,OU=Controlled by Sectigo exclusively for TI Trust Technologies,O=Telecom Italia Trust Technologies S.R.L.,L=Pomezia,ST=Roma,C=IT",
-      "subjectDN": "MIHNMQswCQYDVQQGEwJJVDENMAsGA1UECBMEUm9tYTEQMA4GA1UEBxMHUG9tZXppYTExMC8GA1UEChMoVGVsZWNvbSBJdGFsaWEgVHJ1c3QgVGVjaG5vbG9naWVzIFMuUi5MLjFEMEIGA1UECxM7Q29udHJvbGxlZCBieSBTZWN0aWdvIGV4Y2x1c2l2ZWx5IGZvciBUSSBUcnVzdCBUZWNobm9sb2dpZXMxJDAiBgNVBAMTG1RJIFRydXN0IFRlY2hub2xvZ2llcyBFViBDQQ==",
-      "whitelist": false,
-      "attachment": {
-        "hash": "f3a3288bc3b67208c3f1e4164cb00b27794763ac59477eb6171158b3507ab3e8",
-        "size": 2288,
-        "filename": "lG0jsaBDRslBBApGfnJu_ukJ5x3uoc841KUU1OMrO1E=.pem",
-        "location": "security-state-staging/intermediates/48b456c7-6568-4b6a-b3a6-e6d3c9384968.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "lG0jsaBDRslBBApGfnJu/ukJ5x3uoc841KUU1OMrO1E=",
-      "crlite_enrolled": false,
-      "id": "3eca5483-9836-4680-82c5-bb0774a0b4ad",
-      "last_modified": 1576536533221
-    },
    {
      "schema": 1576535691263,
      "derHash": "j3Y2enra5GQiWOZYaiqWQqAPPsux63JfGLXnrT2Vrtk=",
@ -31932,24 +31950,6 @@
      "id": "954d0ac8-d979-4964-a8f1-6ae3ae761ebc",
      "last_modified": 1576536531183
    },
-    {
-      "schema": 1576536078694,
-      "derHash": "PzHbdYKNqpbk3luCoGeP4gI71bJGw/klDL9nGOEJWPU=",
-      "subject": "CN=Domain The Net Technologies Ltd CA for EV SSL R2,O=Domain The Net Technologies Ltd,C=IL",
-      "subjectDN": "MHIxCzAJBgNVBAYTAklMMSgwJgYDVQQKDB9Eb21haW4gVGhlIE5ldCBUZWNobm9sb2dpZXMgTHRkMTkwNwYDVQQDDDBEb21haW4gVGhlIE5ldCBUZWNobm9sb2dpZXMgTHRkIENBIGZvciBFViBTU0wgUjI=",
-      "whitelist": false,
-      "attachment": {
-        "hash": "cf5351124dd205109785f9b65c288b991342bec54071a6a24020c197870d64f5",
-        "size": 2487,
-        "filename": "Lk19AkNIC7AwHNF5HsU_phCEnUBI-eiA0mbFhxxeQsQ=.pem",
-        "location": "security-state-staging/intermediates/e3c32426-ee59-4729-9b1d-1ad5faa81c2c.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "Lk19AkNIC7AwHNF5HsU/phCEnUBI+eiA0mbFhxxeQsQ=",
-      "crlite_enrolled": false,
-      "id": "dafe281c-5c26-4b1e-b927-70b741e43b25",
-      "last_modified": 1576536531160
-    },
    {
      "schema": 1576536136786,
      "derHash": "VyZLgqhk26HBHvP4CruUysNmBmKwwi9XH/mTs/vPdvs=",