Commit 9c5ce3f7 authored by ma1's avatar ma1 Committed by Pier Angelo Vendrame
Browse files

TB 41728: Pin bridges.torproject.org domains to Let's Encrypt's root cert public key

parent 939d2ca0

security/manager/ssl/StaticHPKPins.h

+9 −0
Original line number Diff line number Diff line
@@ -279,6 +279,14 @@ static const StaticFingerprints kPinset_google = { 
  kPinset_google_Data

};



static const char* const kPinset_tor_browser_Data[] = {

  kISRG_Root_X1Fingerprint,

};

static const StaticFingerprints kPinset_tor_browser = {

  sizeof(kPinset_tor_browser_Data) / sizeof(const char*),

  kPinset_tor_browser_Data

};



/* Domainlist */

struct TransportSecurityPreload {

  // See bug 1338873 about making these fields const.
@@ -307,6 +315,7 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = { 
  { "aus5.mozilla.org", true, true, true, 7, &kPinset_mozilla_services },

  { "blogger.com", true, false, false, -1, &kPinset_google_root_pems },

  { "blogspot.com", true, false, false, -1, &kPinset_google_root_pems },

  { "bridges.torproject.org", false, false, false, -1, &kPinset_tor_browser },

  { "bugs.chromium.org", true, false, false, -1, &kPinset_google_root_pems },

  { "build.chromium.org", true, false, false, -1, &kPinset_google_root_pems },

  { "calendar.google.com", true, false, false, -1, &kPinset_google_root_pems },