Verified Commit d5b89f38 authored by ma1's avatar ma1
Browse files

TB 41728: Pin bridges.torproject.org domains to Let's Encrypt's root cert public key

parent b1123d3c

security/manager/ssl/StaticHPKPins.h

+9 −0
Original line number Diff line number Diff line
@@ -289,6 +289,14 @@ static const StaticFingerprints kPinset_google = { 
  kPinset_google_Data

};



static const char* const kPinset_tor_browser_Data[] = {

  kISRG_Root_X1Fingerprint,

};

static const StaticFingerprints kPinset_tor_browser = {

  sizeof(kPinset_tor_browser_Data) / sizeof(const char*),

  kPinset_tor_browser_Data

};



static const char* const kPinset_facebook_Data[] = {

  kCOMODO_ECC_Certification_AuthorityFingerprint,

  kISRG_Root_X1Fingerprint,
@@ -345,6 +353,7 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = { 
  { "aus5.mozilla.org", true, true, true, 7, &kPinset_mozilla_services },

  { "blogger.com", true, false, false, -1, &kPinset_google_root_pems },

  { "blogspot.com", true, false, false, -1, &kPinset_google_root_pems },

  { "bridges.torproject.org", false, false, false, -1, &kPinset_tor_browser },

  { "bugs.chromium.org", true, false, false, -1, &kPinset_google_root_pems },

  { "build.chromium.org", true, false, false, -1, &kPinset_google_root_pems },

  { "business.facebook.com", true, false, false, -1, &kPinset_facebook },