Unverified Commit bac3fcf5 authored by Alex Catarineu's avatar Alex Catarineu Committed by Matthew Finkel
Browse files

Bug 40166: Disable security.certerrors.mitm.auto_enable_enterprise_roots

parent 45724d03
...@@ -323,6 +323,9 @@ pref("security.enterprise_roots.enabled", false); ...@@ -323,6 +323,9 @@ pref("security.enterprise_roots.enabled", false);
// Don't ping Mozilla for MitM detection, see bug 32321 // Don't ping Mozilla for MitM detection, see bug 32321
pref("security.certerrors.mitm.priming.enabled", false); pref("security.certerrors.mitm.priming.enabled", false);
// Don't automatically enable enterprise roots, see bug 40166
pref("security.certerrors.mitm.auto_enable_enterprise_roots", false);
// Disable the language pack signing check for now on macOS, see #31942 // Disable the language pack signing check for now on macOS, see #31942
#ifdef XP_MACOSX #ifdef XP_MACOSX
pref("extensions.langpacks.signatures.required", false); pref("extensions.langpacks.signatures.required", false);
......
...@@ -1319,6 +1319,20 @@ BrowserGlue.prototype = { ...@@ -1319,6 +1319,20 @@ BrowserGlue.prototype = {
// handle any UI migration // handle any UI migration
this._migrateUI(); this._migrateUI();
// Clear possibly auto enabled enterprise_roots prefs (see bug 40166)
if (
!Services.prefs.getBoolPref(
"security.certerrors.mitm.auto_enable_enterprise_roots"
) &&
Services.prefs.getBoolPref(
"security.enterprise_roots.auto-enabled",
false
)
) {
Services.prefs.clearUserPref("security.enterprise_roots.enabled");
Services.prefs.clearUserPref("security.enterprise_roots.auto-enabled");
}
if (!Services.prefs.prefHasUserValue(PREF_PDFJS_ISDEFAULT_CACHE_STATE)) { if (!Services.prefs.prefHasUserValue(PREF_PDFJS_ISDEFAULT_CACHE_STATE)) {
PdfJs.checkIsDefault(this._isNewProfile); PdfJs.checkIsDefault(this._isNewProfile);
} }
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment