From 2aa4a82499d4becd2284cdb482213d541b8804dd Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 28 Apr 2024 16:29:10 +0200 Subject: Adding upstream version 86.0.1. Signed-off-by: Daniel Baumann --- tools/update-verify/release/mar_certs/README | 29 +++++++++++++++++++++ tools/update-verify/release/mar_certs/dep1.der | Bin 0 -> 1225 bytes tools/update-verify/release/mar_certs/dep2.der | Bin 0 -> 1225 bytes .../mar_certs/nightly_aurora_level3_primary.der | Bin 0 -> 1225 bytes .../mar_certs/nightly_aurora_level3_secondary.der | Bin 0 -> 1225 bytes .../release/mar_certs/release_primary.der | Bin 0 -> 1225 bytes .../release/mar_certs/release_secondary.der | Bin 0 -> 1225 bytes .../update-verify/release/mar_certs/sha1/dep1.der | Bin 0 -> 709 bytes .../update-verify/release/mar_certs/sha1/dep2.der | Bin 0 -> 713 bytes .../release/mar_certs/sha1/release_primary.der | Bin 0 -> 709 bytes .../release/mar_certs/sha1/release_secondary.der | Bin 0 -> 713 bytes .../release/mar_certs/xpcshellCertificate.der | Bin 0 -> 1189 bytes 12 files changed, 29 insertions(+) create mode 100644 tools/update-verify/release/mar_certs/README create mode 100644 tools/update-verify/release/mar_certs/dep1.der create mode 100644 tools/update-verify/release/mar_certs/dep2.der create mode 100644 tools/update-verify/release/mar_certs/nightly_aurora_level3_primary.der create mode 100644 tools/update-verify/release/mar_certs/nightly_aurora_level3_secondary.der create mode 100644 tools/update-verify/release/mar_certs/release_primary.der create mode 100644 tools/update-verify/release/mar_certs/release_secondary.der create mode 100644 tools/update-verify/release/mar_certs/sha1/dep1.der create mode 100644 tools/update-verify/release/mar_certs/sha1/dep2.der create mode 100644 tools/update-verify/release/mar_certs/sha1/release_primary.der create mode 100644 tools/update-verify/release/mar_certs/sha1/release_secondary.der create mode 100644 tools/update-verify/release/mar_certs/xpcshellCertificate.der (limited to 'tools/update-verify/release/mar_certs') diff --git a/tools/update-verify/release/mar_certs/README b/tools/update-verify/release/mar_certs/README new file mode 100644 index 0000000000..dd931ef1d3 --- /dev/null +++ b/tools/update-verify/release/mar_certs/README @@ -0,0 +1,29 @@ +These certificates are imported from mozilla-central (https://hg.mozilla.org/mozilla-central/file/tip/toolkit/mozapps/update/updater) +and used to support staging update verify jobs. These jobs end up replacing the certificates within the binaries +(through a binary search and replace), and must all be the same length for this to work correctly. If we recreate +these certificates, and the resulting public certificates are not the same length anymore, the commonName may be +changed to line them up again. https://github.com/google/der-ascii is a useful tool for doing this. For example: + +To convert the certificate to ascii: +der2ascii -i dep1.der -o dep1.ascii + +Then use your favourite editor to change the commonName field. That block will look something like: + SEQUENCE { + SET { + SEQUENCE { + # commonName + OBJECT_IDENTIFIER { 2.5.4.3 } + PrintableString { "CI MAR signing key 1" } + } + } + } + +You can pad the PrintableString with spaces to increase the length of the cert (1 space = 1 byte). + +Then, convert back to der: +ascii2der -i dep1.ascii -o newdep1.der + +The certificats in the sha1 subdirectory are from +https://hg.mozilla.org/mozilla-central/file/0fcbe72581bc/toolkit/mozapps/update/updater +which are the SHA-1 certs from before they where updated in Bug 1105689. They only include the release +certs, since the nightly certs are different length, and we only care about updates from old ESRs. diff --git a/tools/update-verify/release/mar_certs/dep1.der b/tools/update-verify/release/mar_certs/dep1.der new file mode 100644 index 0000000000..5320f41dfa Binary files /dev/null and b/tools/update-verify/release/mar_certs/dep1.der differ diff --git a/tools/update-verify/release/mar_certs/dep2.der b/tools/update-verify/release/mar_certs/dep2.der new file mode 100644 index 0000000000..f3eb568425 Binary files /dev/null and b/tools/update-verify/release/mar_certs/dep2.der differ diff --git a/tools/update-verify/release/mar_certs/nightly_aurora_level3_primary.der b/tools/update-verify/release/mar_certs/nightly_aurora_level3_primary.der new file mode 100644 index 0000000000..44fd95dcff Binary files /dev/null and b/tools/update-verify/release/mar_certs/nightly_aurora_level3_primary.der differ diff --git a/tools/update-verify/release/mar_certs/nightly_aurora_level3_secondary.der b/tools/update-verify/release/mar_certs/nightly_aurora_level3_secondary.der new file mode 100644 index 0000000000..90f8e6e82c Binary files /dev/null and b/tools/update-verify/release/mar_certs/nightly_aurora_level3_secondary.der differ diff --git a/tools/update-verify/release/mar_certs/release_primary.der b/tools/update-verify/release/mar_certs/release_primary.der new file mode 100644 index 0000000000..1d94f88ad7 Binary files /dev/null and b/tools/update-verify/release/mar_certs/release_primary.der differ diff --git a/tools/update-verify/release/mar_certs/release_secondary.der b/tools/update-verify/release/mar_certs/release_secondary.der new file mode 100644 index 0000000000..474706c4b7 Binary files /dev/null and b/tools/update-verify/release/mar_certs/release_secondary.der differ diff --git a/tools/update-verify/release/mar_certs/sha1/dep1.der b/tools/update-verify/release/mar_certs/sha1/dep1.der new file mode 100644 index 0000000000..ec8ce6184d Binary files /dev/null and b/tools/update-verify/release/mar_certs/sha1/dep1.der differ diff --git a/tools/update-verify/release/mar_certs/sha1/dep2.der b/tools/update-verify/release/mar_certs/sha1/dep2.der new file mode 100644 index 0000000000..4d0f244df2 Binary files /dev/null and b/tools/update-verify/release/mar_certs/sha1/dep2.der differ diff --git a/tools/update-verify/release/mar_certs/sha1/release_primary.der b/tools/update-verify/release/mar_certs/sha1/release_primary.der new file mode 100644 index 0000000000..11417c35e7 Binary files /dev/null and b/tools/update-verify/release/mar_certs/sha1/release_primary.der differ diff --git a/tools/update-verify/release/mar_certs/sha1/release_secondary.der b/tools/update-verify/release/mar_certs/sha1/release_secondary.der new file mode 100644 index 0000000000..16a7ef6d91 Binary files /dev/null and b/tools/update-verify/release/mar_certs/sha1/release_secondary.der differ diff --git a/tools/update-verify/release/mar_certs/xpcshellCertificate.der b/tools/update-verify/release/mar_certs/xpcshellCertificate.der new file mode 100644 index 0000000000..ea1fd47faa Binary files /dev/null and b/tools/update-verify/release/mar_certs/xpcshellCertificate.der differ -- cgit v1.2.3