Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2025-02-23 10:54:33 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Bug 1680372 - replace Let's Encrypt intermediate certificates with ISRG Root X1 in the mozilla_services pinset r=kjacobs DONTBUILD

Browse Source 
Now that we're actually using Let's Encrypt for Mozilla services, we should pin
to the root.

Differential Revision: https://phabricator.services.mozilla.com/D99293
This commit is contained in:
Dana Keeler 2020-12-10 17:17:12 +00:00
parent 04499e3930
commit be3c95a9e6
1 changed files with 1 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
security/manager/tools/PreloadedHPKPins.json
View File

@ -74,10 +74,7 @@
"sha256_hashes": [
"DigiCert Global Root CA",
"DigiCert High Assurance EV Root CA",
// Backup intermediates with Let's Encrypt are not normally
// in use and require disabling Mozilla's sites blacklisting
"Let's Encrypt Authority X3",
"Let's Encrypt Authority X4"
"ISRG Root X1"
]
},
// For pinning tests on pinning.example.com, the certificate must be 'End