Balrog/Client Domains: Difference between revisions
No edit summary |
No edit summary |
||
| Line 89: | Line 89: | ||
|- | |- | ||
| Thunderbird | | Thunderbird | ||
| 14.0 - | | 14.0 - 35.0 | ||
| "OU=Equifax Secure Certificate Authority,O=Equifax,C=US" | | "OU=Equifax Secure Certificate Authority,O=Equifax,C=US" | ||
"CN=Thawte SSL CA,O=\"Thawte, Inc.\",C=US" | "CN=Thawte SSL CA,O=\"Thawte, Inc.\",C=US" | ||
| Line 108: | Line 108: | ||
| {{bug|302721}} | | {{bug|302721}} | ||
|} | |} | ||
NB: Beginning with 24.0, Thunderbird started shipping release channel builds of ESR repos. This means that they have not shipped any release builds from Gecko versions other than 24.0, 31.0, 38.0, 45.0, 52.0, etc. The version numbers in the table still apply for Betas shipped from the major versions listed. | |||
Revision as of 13:11, 24 March 2017
This page documents all of domains that Balrog serves, when various applications switched to them, and their SSL pinning requirements.
| Domain | Application | Versions | Issuer Pinned To | HPKP(inning) | Links |
|---|---|---|---|---|---|
| aus5.mozilla.org | Firefox | 42.0 and up | Nothing | None | bug 1116409 |
| Fennec | Nothing | None | bug 1116409 | ||
| GMP | "CN=DigiCert SHA2 Secure Server CA,O=DigiCert Inc,C=US"
"CN=thawte SSL CA - G2,O=thawte, Inc.,C=US" |
None | bug 1116409 | ||
| Thunderbird | "CN=DigiCert SHA2 Secure Server CA,O=DigiCert Inc,C=US"
"CN=thawte SSL CA - G2,O=thawte, Inc.,C=US" |
None | bug 1116409 | ||
| B2G | ??? | Nothing | None | bug 1116409 | |
| SystemAddons | 44.0 and up | Nothing | None | bug 1213348 | |
| aus4.mozilla.org | Firefox | 36.0 - 41.0 | "CN=DigiCert Secure Server CA,O=DigiCert Inc,C=US"
"CN=Thawte SSL CA,O=\"Thawte, Inc.\",C=US" |
None | bug 885477 |
| Thunderbird | "CN=DigiCert Secure Server CA,O=DigiCert Inc,C=US"
"CN=Thawte SSL CA,O=\"Thawte, Inc.\",C=US" |
None | bug 922264 | ||
| Fennec | 27.0 - 42.0 | "CN=DigiCert Secure Server CA,O=DigiCert Inc,C=US"
"CN=Thawte SSL CA,O=\"Thawte, Inc.\",C=US" |
None | bug 885477 | |
| B2G | ??? | Nothing | None | bug 918068 | |
| GMP | 37.0 - 41.0 | "CN=DigiCert Secure Server CA,O=DigiCert Inc,C=US"
"CN=Thawte SSL CA,O=\"Thawte, Inc.\",C=US" |
None | ||
| aus3.mozilla.org | Firefox | 4.0 - 35.0 | "OU=Equifax Secure Certificate Authority,O=Equifax,C=US"
"CN=Thawte SSL CA,O=\"Thawte, Inc.\",C=US" |
None | bug 586213 |
| Thunderbird | 14.0 - 35.0 | "OU=Equifax Secure Certificate Authority,O=Equifax,C=US"
"CN=Thawte SSL CA,O=\"Thawte, Inc.\",C=US" |
None | bug 751679 | |
| aus2.mozilla.org | Firefox | 2.0 - 3.0 | Nothing | None | bug 302721 |
| Fennec | 26.0 and earlier | Nothing | None | bug 302721 |
NB: Beginning with 24.0, Thunderbird started shipping release channel builds of ESR repos. This means that they have not shipped any release builds from Gecko versions other than 24.0, 31.0, 38.0, 45.0, 52.0, etc. The version numbers in the table still apply for Betas shipped from the major versions listed.