[Mozilla Enterprise] unsubscribe

Thu Jan 23 19:09:15 UTC 2020

-- 
Atenciosamente, 

WESLEY MULLER 
Coordenador de Infraestrutura de TI 

PMC - SEMFI - SUB-TI - GTI - CIT 

(27) 3354-5882 | 9.9613-5678 

wesley.muller at cariacica.es.gov.br 

www.cariacica.es.gov.br 

De: "marius tarlo" <marius.tarlo at orange.com> 
Para: "Mike Kaply" <mkaply at mozilla.com> 
Cc: "ZAJAC Stephane TGI/OLS" <stephane.zajac at orange.com>, enterprise at mozilla.org, "CHEMINEL Mickael DTSI/DISU" <mickael.cheminel at orange.com>, "MAURIN Vincent DSCS" <vincent.maurin at orange.com> 
Enviadas: Quinta-feira, 23 de janeiro de 2020 6:35:42 
Assunto: Re: [Mozilla Enterprise] IPSILAN/MOZILLA : Firefox doesn't use system certificate store 

I’ve issues with mozregression which cannot retrieve the Nightly builds through our proxy: 

message: ProxyError: HTTPSConnectionPool(host='api.github.com', port=443): Max retries exceeded with url: /repos/mozilla/mozregression/releases/latest (Caused by ProxyError('Cannot connect to proxy.', error('Tunnel connection failed: 407 Proxy Authentication Required',))) 

That’s why I’ve done the same but manually 

Cordialement / Best regards, 

Marius TARLO 
Maintenance e-buro 
Orange / OBS / SCE / OCB SUBS / DACF / DS / CS / TMI ORA 

Orange / TGI / OLS / DIESE / GWIS / MSSM / M 
tél. +33 1 42 75 34 25 
marius.tarlo at orange.com 

De : Mike Kaply [mailto:mkaply at mozilla.com] 
Envoyé : mercredi 22 janvier 2020 17:51 
À : TARLO Marius OBS/OCB 
Cc : enterprise at mozilla.org; ZAJAC Stephane TGI/OLS; CHEMINEL Mickael DTSI/DISU; MAURIN Vincent DSCS 
Objet : Re: [Mozilla Enterprise] IPSILAN/MOZILLA : Firefox doesn't use system certificate store 

Would it be possible for you to use mozregression to narrow it down further? 

https://mozilla.github.io/mozregression/ 

It's a really easy tool to use and you can set that preference using the tool so it just starts builds for you to test. 

Mike 

On Wed, Jan 22, 2020 at 6:55 AM < marius.tarlo at orange.com > wrote: 

Hello again! 

I’ve downloaded a lot of Nightly to tell when this problem appears, and I’ve narrowed down when exactly : 

Nightly 67.0a1 2019-02-01-22-12-23 is OK 

Nightly 67.0a1 2019-02-02-09-44-51 is NOT OK 

Cordialement / Best regards, 

Marius TARLO 
Maintenance e-buro 
Orange / OBS / SCE / OCB SUBS / DACF / DS / CS / TMI ORA 

Orange / TGI / OLS / DIESE / GWIS / MSSM / M 
tél. +33 1 42 75 34 25 
marius.tarlo at orange.com 

De : TARLO Marius OBS/OCB 
Envoyé : mercredi 22 janvier 2020 11:11 
À : enterprise at mozilla.org 
Cc : MAURIN Vincent DSCS; CHEMINEL Mickael DTSI/DISU; ZAJAC Stephane TGI/OLS; WULLEPUT Pascal TGI/OLS; Romain Testard; Mike Kaply 
Objet : RE: [Mozilla Enterprise] IPSILAN/MOZILLA : Firefox doesn't use system certificate store 

Hello everybody, 

I encounter the same issue with Firefox ESR 68.3.0 

security.enterprise_roots.enabled is set to True 

Need to manually import the certificate in Firefox to correctly log on a website which uses this certificate 

With Firefox ESR 60.7.2: 

no issue, Firefox does manage to pick the certificate in the Windows store 

Cordialement / Best regards, 

Marius TARLO 
Maintenance e-buro 
Orange / OBS / SCE / OCB SUBS / DACF / DS / CS / TMI ORA 

Orange / TGI / OLS / DIESE / GWIS / MSSM / M 
tél. +33 1 42 75 34 25 
marius.tarlo at orange.com 

De : Enterprise [mailto: enterprise-bounces at mozilla.org ] De la part de Arun SIVAKUMARAN 
Envoyé : jeudi 3 octobre 2019 10:48 
À : Mike Kaply 
Cc : Abdel-Hakim AMRANI; enterprise at mozilla.org ; Antoine LECORNEC 
Objet : Re: [Mozilla Enterprise] IPSILAN/MOZILLA : Firefox doesn't use system certificate store 

Hello Mike, 

That’s what we thought also. 

I’m okay for opening a Bugzilla. 

Is there a specific process for that ? 

You can have remote access to the machines, … if you need. 

Best Regards, 

Arun SIVAKUMARAN 
Ingénieur Sécurité & Réseaux Unifiés 
Numéro Unique : +33 (0) 1 85 36 02 22 
arun.sivakumaran at ipsilan-networks.fr 

> Avant d’imprimer, pensez à l’environnement … 

From: Mike Kaply [mailto: mkaply at mozilla.com ] 
Sent: mercredi 2 octobre 2019 21:26 
To: Arun SIVAKUMARAN < arun.sivakumaran at ipsilan-networks.fr > 
Cc: enterprise at mozilla.org ; Antoine LECORNEC < antoine.lecornec at ipsilan-networks.fr > 
Subject: Re: [Mozilla Enterprise] IPSILAN/MOZILLA : Firefox doesn't use system certificate store 

It definitely should work. 

There is a problem if the cert is required on the very first page that is loaded (we've fixed that). 

And you won't see it in Firefox certificate settings, but it definitely should work. 

Could you open a bugzilla bug please and we can debug? 

Mike 

On Tue, Oct 1, 2019 at 3:12 AM Arun SIVAKUMARAN < arun.sivakumaran at ipsilan-networks.fr > wrote: 

BQ_BEGIN

Hello Mike, 

Thank you very much for your reply! 

To be more specific, we’ve deployed, via GPO, a CA certificate in window’s “trusted root CA” store. 

And we need Firefox to use or to import this certificate in order to trust certificates generated by this CA. 

Best Regards, 

Arun SIVAKUMARAN 
Ingénieur Sécurité & Réseaux Unifiés 
Numéro Unique : +33 (0) 1 85 36 02 22 
arun.sivakumaran at ipsilan-networks.fr 

> Avant d’imprimer, pensez à l’environnement … 

From: Mike Kaply [mailto: mkaply at mozilla.com ] 
Sent: lundi 30 septembre 2019 18:07 
To: Arun SIVAKUMARAN < arun.sivakumaran at ipsilan-networks.fr > 
Cc: enterprise at mozilla.org ; Antoine LECORNEC < antoine.lecornec at ipsilan-networks.fr > 
Subject: Re: [Mozilla Enterprise] IPSILAN/MOZILLA : Firefox doesn't use system certificate store 

Can you be more specific? 

We don't use every cert from the OS store, only added CAs. 

Also we don't support client certificates. 

What exactly are you seeing? 

Mike 

On Mon, Sep 30, 2019 at 10:51 AM Arun SIVAKUMARAN < arun.sivakumaran at ipsilan-networks.fr > wrote: 

BQ_BEGIN

Hello, 

We have an issue where Firefox doesn't use the system’s certificate store. 

We’ve enabled the “security.enterprise_roots.enabled” with the Boolean value “true”. 

But, it doesn’t seems to apply the config. 

The Firefox’s version is 69.0.1 and it’s an 64 bits version running on Windows 10 Professional 64 bits, version 1803. 

Advance thanks, 

Arun SIVAKUMARAN 
Ingénieur Sécurité & Réseaux Unifiés 
Numéro Unique : +33 (0) 1 85 36 02 22 
arun.sivakumaran at ipsilan-networks.fr 

Agence Ile de France 
4 route de Gisy – 91570 Bièvres 
Tel : +33 1 30 67 16 00 - Fax : +33 1 30 67 16 29 
www.ipsilan-networks.fr 

> Avant d’imprimer, pensez à l’environnement … 

Ce courrier électronique, et éventuellement ses pièces jointes, peuvent contenir des informations confidentielles et/ou personnelles et a été envoyé uniquement à l'usage de la personne ou de l'entité citée ci-dessus. Si vous receviez ce courrier électronique par erreur, merci de bien vouloir en avertir l'expéditeur immédiatement par la réponse en retour à ce courrier et effacer l'original et détruire toute copie enregistrée dans un ordinateur, ou imprimée ou encore sauvegardée sur un disque . Toute revue, retransmission ou toute autre forme d'utilisation de ce courrier électronique par toute autre personne que le destinataire prévue est strictement interdite. 

L'Internet ne permettant pas d'assurer l'intégrité de ce message, l'expéditeur décline toute responsabilité au cas où il aurait été intercepté ou modifié par quiconque. 

This e-mail and possibly any attachment may contain confidential and/or privileged information and is intended only for the use of the individual or entity named above. If you have received it in error, please advise the sender immediately by reply e-mail and delete and destroy all copies including all copies stored in the recipient's computer, printed or saved to disk. . Any review, retransmission, or further use of this e-mail by persons or entities other than the intended recipient is strictly prohibited. 

Because of the nature of the Internet the sender is not in a position to ensure the integrity of this message, therefore the sender disclaims any liability whatsoever, in the event of this message having been intercepted and/or altered. 

_______________________________________________ 
Enterprise mailing list 
Enterprise at mozilla.org 
https://mail.mozilla.org/listinfo/enterprise 

To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise or send an email to enterprise-request at mozilla.org with a subject of "unsubscribe" 

Ce courrier électronique, et éventuellement ses pièces jointes, peuvent contenir des informations confidentielles et/ou personnelles et a été envoyé uniquement à l'usage de la personne ou de l'entité citée ci-dessus. Si vous receviez ce courrier électronique par erreur, merci de bien vouloir en avertir l'expéditeur immédiatement par la réponse en retour à ce courrier et effacer l'original et détruire toute copie enregistrée dans un ordinateur, ou imprimée ou encore sauvegardée sur un disque . Toute revue, retransmission ou toute autre forme d'utilisation de ce courrier électronique par toute autre personne que le destinataire prévue est strictement interdite. 

L'Internet ne permettant pas d'assurer l'intégrité de ce message, l'expéditeur décline toute responsabilité au cas où il aurait été intercepté ou modifié par quiconque. 

This e-mail and possibly any attachment may contain confidential and/or privileged information and is intended only for the use of the individual or entity named above. If you have received it in error, please advise the sender immediately by reply e-mail and delete and destroy all copies including all copies stored in the recipient's computer, printed or saved to disk. . Any review, retransmission, or further use of this e-mail by persons or entities other than the intended recipient is strictly prohibited. 

Because of the nature of the Internet the sender is not in a position to ensure the integrity of this message, therefore the sender disclaims any liability whatsoever, in the event of this message having been intercepted and/or altered. 

BQ_END

Ce courrier électronique, et éventuellement ses pièces jointes, peuvent contenir des informations confidentielles et/ou personnelles et a été envoyé uniquement à l'usage de la personne ou de l'entité citée ci-dessus. Si vous receviez ce courrier électronique par erreur, merci de bien vouloir en avertir l'expéditeur immédiatement par la réponse en retour à ce courrier et effacer l'original et détruire toute copie enregistrée dans un ordinateur, ou imprimée ou encore sauvegardée sur un disque . Toute revue, retransmission ou toute autre forme d'utilisation de ce courrier électronique par toute autre personne que le destinataire prévue est strictement interdite. 

L'Internet ne permettant pas d'assurer l'intégrité de ce message, l'expéditeur décline toute responsabilité au cas où il aurait été intercepté ou modifié par quiconque. 

This e-mail and possibly any attachment may contain confidential and/or privileged information and is intended only for the use of the individual or entity named above. If you have received it in error, please advise the sender immediately by reply e-mail and delete and destroy all copies including all copies stored in the recipient's computer, printed or saved to disk. . Any review, retransmission, or further use of this e-mail by persons or entities other than the intended recipient is strictly prohibited. 

Because of the nature of the Internet the sender is not in a position to ensure the integrity of this message, therefore the sender disclaims any liability whatsoever, in the event of this message having been intercepted and/or altered. 
_________________________________________________________________________________________________________________________ 
Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc 
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler 
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, 
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci. 
This message and its attachments may contain confidential or privileged information that may be protected by law; 
they should not be distributed, used or copied without authorisation. 
If you have received this email in error, please notify the sender and delete this message and its attachments. 
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified. 
Thank you. 

_______________________________________________ 
Enterprise mailing list 
Enterprise at mozilla.org 
https://mail.mozilla.org/listinfo/enterprise 

To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise or send an email to enterprise-request at mozilla.org with a subject of "unsubscribe" 
BQ_END

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you. 

_______________________________________________ 
Enterprise mailing list 
Enterprise at mozilla.org 
https://mail.mozilla.org/listinfo/enterprise 

To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise or send an email to enterprise-request at mozilla.org with a subject of "unsubscribe" 

Esta mensagem pode conter informação confidencial ou privilegiada, sendo seu sigilo protegido por lei. Se você não for o destinatário ou a pessoa autorizada a receber esta mensagem, não a use, copie, divulgue ou tome qualquer ação baseada nela. Se você recebeu esta mensagem por engano, por favor apague-a imediatamente. Agradecemos a sua cooperação.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20200123/7343e2c0/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 785 bytes
Desc: image001.jpg
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20200123/7343e2c0/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 785 bytes
Desc: image002.jpg
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20200123/7343e2c0/attachment-0001.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 10661 bytes
Desc: image003.png
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20200123/7343e2c0/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 10671 bytes
Desc: image004.png
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20200123/7343e2c0/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.jpg
Type: image/jpeg
Size: 5210 bytes
Desc: image005.jpg
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20200123/7343e2c0/attachment-0002.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image006.png
Type: image/png
Size: 1483 bytes
Desc: image006.png
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20200123/7343e2c0/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image007.png
Type: image/png
Size: 1586 bytes
Desc: image007.png
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20200123/7343e2c0/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image008.jpg
Type: image/jpeg
Size: 1014 bytes
Desc: image008.jpg
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20200123/7343e2c0/attachment-0003.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image009.jpg
Type: image/jpeg
Size: 1399 bytes
Desc: image009.jpg
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20200123/7343e2c0/attachment-0004.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image010.png
Type: image/png
Size: 4919 bytes
Desc: image010.png
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20200123/7343e2c0/attachment-0004.png>