Bug 41988 - mozroots fails when trying to reach mxr.mozilla.org
Summary: mozroots fails when trying to reach mxr.mozilla.org
Status: VERIFIED FIXED
Alias: None
Product: Tools
Classification: Mono
Component: other ()
Version: unspecified
Hardware: PC Linux
: --- normal
Target Milestone: C7SR1
Assignee: Alexander Köplinger [MSFT]
URL:
Depends on:
Blocks:
 
Reported: 2016-06-20 08:11 UTC by Piotr Zierhoffer
Modified: 2016-07-14 12:55 UTC (History)
6 users (show)

Tags:
Is this bug a regression?: ---
Last known good build:

Notice (2018-05-24): bugzilla.xamarin.com is now in read-only mode.

Please join us on Visual Studio Developer Community and in the Xamarin and Mono organizations on GitHub to continue tracking issues. Bugzilla will remain available for reference in read-only mode. We will continue to work on open Bugzilla bugs, copy them to the new locations as needed for follow-up, and add the new items under Related Links.

Our sincere thanks to everyone who has contributed on this bug tracker over the years. Thanks also for your understanding as we make these adjustments and improvements for the future.


Please create a new report on GitHub or Developer Community with your current version information, steps to reproduce, and relevant error messages or log files if you are hitting an issue that looks similar to this resolved bug and you do not yet see a matching new report.

Related Links:
Status:
VERIFIED FIXED

Description Piotr Zierhoffer 2016-06-20 08:11:42 UTC
The server is down for some time now and the discussion on mozilla's bugzilla suggests, that the URL used in mozroots has many flaws.

https://bugzilla.mozilla.org/show_bug.cgi?id=1279952

Especially https://bugzilla.mozilla.org/show_bug.cgi?id=1279952#c8 points to another link, that might me more stable/better to use.
Comment 1 Alexander Köplinger [MSFT] 2016-06-21 15:23:28 UTC
This is fixed by https://github.com/mono/mono/pull/3188 in mono master.

We'll backport this to a service release for the Mono 4.4 series.
Comment 2 Alexander Köplinger [MSFT] 2016-06-21 15:32:54 UTC
Filed https://trello.com/c/93TKSteP/23-mono-fix-mozroots-url-for-mozilla-s-certdata-txt-and-add-deprecation-warning for tracking the backport to C7SR1
Comment 3 Saurabh 2016-06-23 11:33:28 UTC
This test Issue is reported on Linux but I do not have Linux machine. So I have checked this Issue on Mac with latest master build (Mono 4.5.1.917). I am not seeing any error when using Mozroots commands

Hello:~ 360_macmini$ mozroots --import --sync
Mozilla Roots Importer - version 4.5.1.0
Download and import trusted root certificates from Mozilla's MXR.
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.

WARNING: mozroots is deprecated, please move to cert-sync instead.

Downloading from 'https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt'...
Importing certificates into user store...
1 new root certificates were added to your trust store.
Import process completed.

Hello:~ 360_macmini$ mozroots --ask
Mozilla Roots Importer - version 4.5.1.0
Download and import trusted root certificates from Mozilla's MXR.
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.

WARNING: mozroots is deprecated, please move to cert-sync instead.

Downloading from 'https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt'...
Hello:~ 360_macmini$
Comment 4 Shruti 2016-07-07 06:39:19 UTC
@Alexander, Can you please have a look to comment 3 and help Saurabh to reproduce this issue If can check it on Mac. Because we won't be able to verify this issue till we did not reproduce it.
Comment 5 Saurabh 2016-07-07 07:23:29 UTC
I checked this with Cycle 7 build (Mono 4.4.0.200). Mozroots command working fine.

Hello:~ 360_macmini$ mozroots --import --sync
Mozilla Roots Importer - version 4.4.0.0
Download and import trusted root certificates from Mozilla's MXR.
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.

WARNING: mozroots is deprecated, please move to cert-sync instead.

Downloading from 'https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt'...
Importing certificates into user store...
1 new root certificates were added to your trust store.
Import process completed.

Hello:~ 360_macmini$ mozroots --ask
Mozilla Roots Importer - version 4.4.0.0
Download and import trusted root certificates from Mozilla's MXR.
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.

WARNING: mozroots is deprecated, please move to cert-sync instead.

Downloading from 'https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt'...

I can't change the status of this bug to Verified because I do not have access fro this bug.
Comment 6 Alexander Köplinger [MSFT] 2016-07-07 15:24:31 UTC
@Saurabh both Mono 4.4.0.200 and Mono 4.5.1.917 already contain the fix, so it's no surprise it doesn't fail :-)

You need to test e.g. with the Cycle 7 baseline release, Mono 4.4.0.182: http://download.mono-project.com/archive/4.4.0/macos-10-universal/MonoFramework-MDK-4.4.0.182.macos10.xamarin.universal.pkg
Comment 7 Saurabh 2016-07-08 07:09:01 UTC
I checked with Cycle 7 baseline release (Mono 4.4.0.182). Mozroots command working fine.

Hello:~ 360_macmini$ mozroots --import --sync
Mozilla Roots Importer - version 4.4.0.0
Download and import trusted root certificates from Mozilla's MXR.
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.

Downloading from 'http://mxr.mozilla.org/seamonkey/source/security/nss/lib/ckfw/builtins/certdata.txt?raw=1'...
Importing certificates into user store...
8 new root certificates were added to your trust store.
Import process completed.

Hello:~ 360_macmini$ mozroots --ask
Mozilla Roots Importer - version 4.4.0.0
Download and import trusted root certificates from Mozilla's MXR.
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.

Downloading from 'http://mxr.mozilla.org/seamonkey/source/security/nss/lib/ckfw/builtins/certdata.txt?raw=1'...