зеркало из https://github.com/mozilla/gecko-dev.git
No Bug, mozilla-central repo-update HSTS HPKP remote-settings - r=release-managers,pascalc
Differential Revision: https://phabricator.services.mozilla.com/D216269
This commit is contained in:
Родитель
2208f61a4a
Коммит
4f2185455d
|
@ -111,18 +111,6 @@ static const char kFacebookBackupFingerprint[] =
|
|||
static const char kGOOGLE_PIN_DigiCertECCSecureServerCAFingerprint[] =
|
||||
"PZXN3lRAy+8tBKk2Ox6F7jIlnzr2Yzmwqc3JnyfXoCw=";
|
||||
|
||||
/* GOOGLE_PIN_R3LetsEncrypt */
|
||||
static const char kGOOGLE_PIN_R3LetsEncryptFingerprint[] =
|
||||
"jQJTbIh0grw0/1TkHSumWb+Fs0Ggogr621gT3PvPKG0=";
|
||||
|
||||
/* GOOGLE_PIN_R4LetsEncrypt */
|
||||
static const char kGOOGLE_PIN_R4LetsEncryptFingerprint[] =
|
||||
"5VReIRNHJBiRxVSgOTTN6bdJZkpZ0m1hX+WPd5kPLQM=";
|
||||
|
||||
/* GOOGLE_PIN_RapidSSL */
|
||||
static const char kGOOGLE_PIN_RapidSSLFingerprint[] =
|
||||
"lT09gPUeQfbYrlxRtpsHrjDblj9Rpz+u7ajfCrg4qDM=";
|
||||
|
||||
/* GOOGLE_PIN_SymantecClass3EVG3 */
|
||||
static const char kGOOGLE_PIN_SymantecClass3EVG3Fingerprint[] =
|
||||
"gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E=";
|
||||
|
@ -187,14 +175,6 @@ static const char kISRG_Root_X1Fingerprint[] =
|
|||
static const char kISRG_Root_X2Fingerprint[] =
|
||||
"diGVwiVYbubAI3RW4hB9xU8e/CH2GnkuvVFZE8zmgzI=";
|
||||
|
||||
/* Let's Encrypt Authority X3 */
|
||||
static const char kLet_s_Encrypt_Authority_X3Fingerprint[] =
|
||||
"YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg=";
|
||||
|
||||
/* Let's Encrypt Authority X4 */
|
||||
static const char kLet_s_Encrypt_Authority_X4Fingerprint[] =
|
||||
"sRHdihwgkaib1P1gxX8HFszlD+7/gTfNvuAybgLPNis=";
|
||||
|
||||
/* Starfield Class 2 CA */
|
||||
static const char kStarfield_Class_2_CAFingerprint[] =
|
||||
"FfFKxFycfaIz00eRZOgTf+Ne4POK6FgYPwhBDqgqxLQ=";
|
||||
|
@ -207,18 +187,6 @@ static const char kStarfield_Root_Certificate_Authority___G2Fingerprint[] =
|
|||
static const char kTestSPKIFingerprint[] =
|
||||
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=";
|
||||
|
||||
/* Tor1 */
|
||||
static const char kTor1Fingerprint[] =
|
||||
"bYz9JTDk89X3qu3fgswG+lBQso5vI0N1f0Rx4go4nLo=";
|
||||
|
||||
/* Tor2 */
|
||||
static const char kTor2Fingerprint[] =
|
||||
"xXCxhTdn7uxXneJSbQCqoAvuW3ZtQl2pDVTf2sewS8w=";
|
||||
|
||||
/* Tor3 */
|
||||
static const char kTor3Fingerprint[] =
|
||||
"CleC1qwUR8JPgH1nXvSe2VHxDe5/KfNs96EusbfSOfo=";
|
||||
|
||||
/* USERTrust ECC Certification Authority */
|
||||
static const char kUSERTrust_ECC_Certification_AuthorityFingerprint[] =
|
||||
"ICGRfpgmOUXIWcQ/HXPLQTkFPEFPoDyjvH7ohhQpjzs=";
|
||||
|
@ -321,22 +289,6 @@ static const StaticFingerprints kPinset_google = {
|
|||
kPinset_google_Data
|
||||
};
|
||||
|
||||
static const char* const kPinset_tor_Data[] = {
|
||||
kGOOGLE_PIN_R4LetsEncryptFingerprint,
|
||||
kTor3Fingerprint,
|
||||
kDigiCert_High_Assurance_EV_Root_CAFingerprint,
|
||||
kLet_s_Encrypt_Authority_X3Fingerprint,
|
||||
kTor1Fingerprint,
|
||||
kGOOGLE_PIN_R3LetsEncryptFingerprint,
|
||||
kGOOGLE_PIN_RapidSSLFingerprint,
|
||||
kLet_s_Encrypt_Authority_X4Fingerprint,
|
||||
kTor2Fingerprint,
|
||||
};
|
||||
static const StaticFingerprints kPinset_tor = {
|
||||
sizeof(kPinset_tor_Data) / sizeof(const char*),
|
||||
kPinset_tor_Data
|
||||
};
|
||||
|
||||
static const char* const kPinset_facebook_Data[] = {
|
||||
kCOMODO_ECC_Certification_AuthorityFingerprint,
|
||||
kISRG_Root_X1Fingerprint,
|
||||
|
@ -391,7 +343,6 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {
|
|||
{ "appspot.com", true, false, false, -1, &kPinset_google_root_pems },
|
||||
{ "aus4.mozilla.org", true, true, true, 3, &kPinset_mozilla_services },
|
||||
{ "aus5.mozilla.org", true, true, true, 7, &kPinset_mozilla_services },
|
||||
{ "blog.torproject.org", true, true, false, -1, &kPinset_tor },
|
||||
{ "blogger.com", true, false, false, -1, &kPinset_google_root_pems },
|
||||
{ "blogspot.com", true, false, false, -1, &kPinset_google_root_pems },
|
||||
{ "bugs.chromium.org", true, false, false, -1, &kPinset_google_root_pems },
|
||||
|
@ -401,7 +352,6 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {
|
|||
{ "cdn.ampproject.org", true, false, false, -1, &kPinset_google_root_pems },
|
||||
{ "cdn.mozilla.net", true, false, true, 16, &kPinset_mozilla_services },
|
||||
{ "cdn.mozilla.org", true, false, true, 17, &kPinset_mozilla_services },
|
||||
{ "check.torproject.org", true, true, false, -1, &kPinset_tor },
|
||||
{ "checkout.google.com", true, false, false, -1, &kPinset_google_root_pems },
|
||||
{ "chrome-devtools-frontend.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
|
||||
{ "chrome.com", true, false, false, -1, &kPinset_google_root_pems },
|
||||
|
@ -426,7 +376,6 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {
|
|||
{ "datastudio.google.com", true, false, false, -1, &kPinset_google_root_pems },
|
||||
{ "developer.android.com", true, false, false, -1, &kPinset_google_root_pems },
|
||||
{ "developers.facebook.com", true, false, false, -1, &kPinset_facebook },
|
||||
{ "dist.torproject.org", true, true, false, -1, &kPinset_tor },
|
||||
{ "dl.google.com", true, false, false, -1, &kPinset_google_root_pems },
|
||||
{ "dns.google.com", true, false, false, -1, &kPinset_google_root_pems },
|
||||
{ "docs.google.com", true, false, false, -1, &kPinset_google_root_pems },
|
||||
|
@ -736,7 +685,6 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {
|
|||
{ "telemetry.mozilla.org", true, true, true, 8, &kPinset_mozilla_services },
|
||||
{ "test-mode.pinning.example.com", true, true, false, -1, &kPinset_mozilla_test },
|
||||
{ "testpilot.firefox.com", false, false, true, 9, &kPinset_mozilla_services },
|
||||
{ "torproject.org", false, true, false, -1, &kPinset_tor },
|
||||
{ "touch.facebook.com", true, false, false, -1, &kPinset_facebook },
|
||||
{ "translate.googleapis.com", true, false, false, -1, &kPinset_google_root_pems },
|
||||
{ "tunnel-staging.googlezip.net", true, false, false, -1, &kPinset_google_root_pems },
|
||||
|
@ -767,7 +715,6 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {
|
|||
{ "www.googlegroups.com", true, false, false, -1, &kPinset_google_root_pems },
|
||||
{ "www.googlemail.com", false, false, false, -1, &kPinset_google_root_pems },
|
||||
{ "www.messenger.com", true, false, false, -1, &kPinset_facebook },
|
||||
{ "www.torproject.org", true, true, false, -1, &kPinset_tor },
|
||||
{ "xbrlsuccess.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
|
||||
{ "xn--7xa.google.com", true, false, false, -1, &kPinset_google_root_pems },
|
||||
{ "youtu.be", true, false, false, -1, &kPinset_google_root_pems },
|
||||
|
@ -776,8 +723,8 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {
|
|||
{ "ytimg.com", true, false, false, -1, &kPinset_google_root_pems },
|
||||
};
|
||||
|
||||
// Pinning Preload List Length = 397;
|
||||
// Pinning Preload List Length = 392;
|
||||
|
||||
static const int32_t kUnknownId = -1;
|
||||
|
||||
static const PRTime kPreloadPKPinsExpirationTime = INT64_C(1728910423470000);
|
||||
static const PRTime kPreloadPKPinsExpirationTime = INT64_C(1729163016886000);
|
||||
|
|
Разница между файлами не показана из-за своего большого размера
Загрузить разницу
|
@ -1,5 +1,113 @@
|
|||
{
|
||||
"data": [
|
||||
{
|
||||
"schema": 1720666099799,
|
||||
"derHash": "frX0qqw5s6eDXXb3IqRz+bSRHko2kd54s8KXNZV2TqI=",
|
||||
"subject": "CN=Cloudflare Inc ECC CA-4,O=Cloudflare\\, Inc.,C=US",
|
||||
"subjectDN": "MEoxCzAJBgNVBAYTAlVTMRkwFwYDVQQKExBDbG91ZGZsYXJlLCBJbmMuMSAwHgYDVQQDExdDbG91ZGZsYXJlIEluYyBFQ0MgQ0EtNA==",
|
||||
"whitelist": false,
|
||||
"attachment": {
|
||||
"hash": "2d3185ca699ccb9aabb49c911f21d543cffb499812b422438327ecaab43e6cc1",
|
||||
"size": 1142,
|
||||
"filename": "bqmrs-PB9A-B92euE7tljq0Umt_lqmpZwgZdjHQqvgE=.pem",
|
||||
"location": "security-state-staging/intermediates/36b03b92-df2e-43dc-948d-2d8a984b3bd7.pem",
|
||||
"mimetype": "application/x-pem-file"
|
||||
},
|
||||
"pubKeyHash": "bqmrs+PB9A+B92euE7tljq0Umt/lqmpZwgZdjHQqvgE=",
|
||||
"crlite_enrolled": false,
|
||||
"id": "d33cf9b6-cfc1-49f7-895a-917b74fdb9be",
|
||||
"last_modified": 1720666622968
|
||||
},
|
||||
{
|
||||
"schema": 1720666099461,
|
||||
"derHash": "n7A4Uxf6scAFQbJ0psgrdkTefH/Uu14zXeRF+gqWv9k=",
|
||||
"subject": "CN=Cloudflare Inc RSA CA-3,O=Cloudflare\\, Inc.,C=US",
|
||||
"subjectDN": "MEoxCzAJBgNVBAYTAlVTMRkwFwYDVQQKExBDbG91ZGZsYXJlLCBJbmMuMSAwHgYDVQQDExdDbG91ZGZsYXJlIEluYyBSU0EgQ0EtMw==",
|
||||
"whitelist": false,
|
||||
"attachment": {
|
||||
"hash": "1e8c31bf768c6248ab7f86fdf717168da9cd2746844381a019609220b542585b",
|
||||
"size": 1983,
|
||||
"filename": "33fTYx2MHyKfegGuQmiGJj_BkFCXWk5xJFyuVujoO6U=.pem",
|
||||
"location": "security-state-staging/intermediates/73fe75ca-7e88-43dd-9ac2-7b323fb8a9f9.pem",
|
||||
"mimetype": "application/x-pem-file"
|
||||
},
|
||||
"pubKeyHash": "33fTYx2MHyKfegGuQmiGJj/BkFCXWk5xJFyuVujoO6U=",
|
||||
"crlite_enrolled": false,
|
||||
"id": "04f8aed8-c52d-4069-b0ae-419a20bd695c",
|
||||
"last_modified": 1720666622966
|
||||
},
|
||||
{
|
||||
"schema": 1720558069715,
|
||||
"derHash": "gEYrkmrRB5OpA214wFTn8xvU4mYCCzMiDtIa2Aje69E=",
|
||||
"subject": "CN=NETLOCK TLS OV ECC CA,O=NETLOCK Kft.,L=Budapest,C=HU",
|
||||
"subjectDN": "MHAxCzAJBgNVBAYTAkhVMREwDwYDVQQHDAhCdWRhcGVzdDEVMBMGA1UECgwMTkVUTE9DSyBLZnQuMR4wHAYDVQQDDBVORVRMT0NLIFRMUyBPViBFQ0MgQ0ExFzAVBgNVBGEMDlZBVEhVLTEyMjAxNTIx",
|
||||
"whitelist": false,
|
||||
"attachment": {
|
||||
"hash": "1f8c607b45240a4940a89b928eeeac156489773c7f3836b292151d2d20fb9edb",
|
||||
"size": 1329,
|
||||
"filename": "i16I9ip2k2JwWRaZXmFeIeiS2KzOYhrChFGnUDooIl0=.pem",
|
||||
"location": "security-state-staging/intermediates/73527d36-9b9e-479c-80c6-7b67fbc17e15.pem",
|
||||
"mimetype": "application/x-pem-file"
|
||||
},
|
||||
"pubKeyHash": "i16I9ip2k2JwWRaZXmFeIeiS2KzOYhrChFGnUDooIl0=",
|
||||
"crlite_enrolled": false,
|
||||
"id": "85d19132-20a5-4258-a939-893191c393fe",
|
||||
"last_modified": 1720558623153
|
||||
},
|
||||
{
|
||||
"schema": 1720558070405,
|
||||
"derHash": "73hwstg6oUWCcUeTsNfZ7xEk+9/MiK4Bw3efnDHW9TI=",
|
||||
"subject": "CN=NETLOCK TLS Qualified EV ECC CA,O=NETLOCK Kft.,L=Budapest,C=HU",
|
||||
"subjectDN": "MHoxCzAJBgNVBAYTAkhVMREwDwYDVQQHDAhCdWRhcGVzdDEVMBMGA1UECgwMTkVUTE9DSyBLZnQuMSgwJgYDVQQDDB9ORVRMT0NLIFRMUyBRdWFsaWZpZWQgRVYgRUNDIENBMRcwFQYDVQRhDA5WQVRIVS0xMjIwMTUyMQ==",
|
||||
"whitelist": false,
|
||||
"attachment": {
|
||||
"hash": "a2e9517784ec821dce9524ef6c79147beac8c351995ece25e3cf29748a806e67",
|
||||
"size": 1341,
|
||||
"filename": "8hGei3i00u2h5PvrbQEWCXLIaozLXkbULtTHvZ-3QZg=.pem",
|
||||
"location": "security-state-staging/intermediates/51412110-bb01-49aa-bc56-2c9175706337.pem",
|
||||
"mimetype": "application/x-pem-file"
|
||||
},
|
||||
"pubKeyHash": "8hGei3i00u2h5PvrbQEWCXLIaozLXkbULtTHvZ+3QZg=",
|
||||
"crlite_enrolled": false,
|
||||
"id": "87032642-01fe-4a50-ad59-84b47e7c5601",
|
||||
"last_modified": 1720558623151
|
||||
},
|
||||
{
|
||||
"schema": 1720558070096,
|
||||
"derHash": "Pexf+DbrS0oUTxDKAr7t8GUAH3PydtKbXIU1GD/kPHg=",
|
||||
"subject": "CN=NETLOCK TLS DV ECC CA,O=NETLOCK Kft.,L=Budapest,C=HU",
|
||||
"subjectDN": "MHAxCzAJBgNVBAYTAkhVMREwDwYDVQQHDAhCdWRhcGVzdDEVMBMGA1UECgwMTkVUTE9DSyBLZnQuMR4wHAYDVQQDDBVORVRMT0NLIFRMUyBEViBFQ0MgQ0ExFzAVBgNVBGEMDlZBVEhVLTEyMjAxNTIx",
|
||||
"whitelist": false,
|
||||
"attachment": {
|
||||
"hash": "343a542ba4ea4dba9663b057ae11ee0d96d063aa034a0f11e40883468d85076a",
|
||||
"size": 1329,
|
||||
"filename": "li0YuffRNQ1XEOF7VTuJakr96zJ_ALD7q_pshmkp7mU=.pem",
|
||||
"location": "security-state-staging/intermediates/5ee95c7a-b260-49d2-bdad-37a5bd990661.pem",
|
||||
"mimetype": "application/x-pem-file"
|
||||
},
|
||||
"pubKeyHash": "li0YuffRNQ1XEOF7VTuJakr96zJ/ALD7q/pshmkp7mU=",
|
||||
"crlite_enrolled": false,
|
||||
"id": "8f163a1a-b497-432c-98c4-250210622918",
|
||||
"last_modified": 1720558623148
|
||||
},
|
||||
{
|
||||
"schema": 1720536768542,
|
||||
"derHash": "ArSq9XrwlD/x17rEzg/MdW4zbw8cBZqoyvhN/53S56M=",
|
||||
"subject": "CN=NETLOCK TLS EV ECC CA,O=NETLOCK Kft.,L=Budapest,C=HU",
|
||||
"subjectDN": "MHAxCzAJBgNVBAYTAkhVMREwDwYDVQQHDAhCdWRhcGVzdDEVMBMGA1UECgwMTkVUTE9DSyBLZnQuMR4wHAYDVQQDDBVORVRMT0NLIFRMUyBFViBFQ0MgQ0ExFzAVBgNVBGEMDlZBVEhVLTEyMjAxNTIx",
|
||||
"whitelist": false,
|
||||
"attachment": {
|
||||
"hash": "832bdc18f3f40ce2b30b365dd2d5bbbb5b7d253c40e49988f501de6d21413ab2",
|
||||
"size": 1329,
|
||||
"filename": "cbddOej5UNOOv4KN9cNSXUsA1PNl6KujuXDCLRgBnFg=.pem",
|
||||
"location": "security-state-staging/intermediates/8db8da41-bb31-40e1-9d98-12d022ea0eb3.pem",
|
||||
"mimetype": "application/x-pem-file"
|
||||
},
|
||||
"pubKeyHash": "cbddOej5UNOOv4KN9cNSXUsA1PNl6KujuXDCLRgBnFg=",
|
||||
"crlite_enrolled": false,
|
||||
"id": "4ce91844-0658-4c91-b850-56dd1cd43695",
|
||||
"last_modified": 1720537022986
|
||||
},
|
||||
{
|
||||
"schema": 1719240777384,
|
||||
"derHash": "OygSHYmF4trfICnFPyMgB/DBnseIZUssK6rr5QQZsNU=",
|
||||
|
@ -30979,5 +31087,5 @@
|
|||
"last_modified": 1559865884636
|
||||
}
|
||||
],
|
||||
"timestamp": 1720018623201
|
||||
"timestamp": 1720666622968
|
||||
}
|
||||
|
|
Загрузка…
Ссылка в новой задаче