New issue
Advanced search Search tips

Issue 591253 link

Starred by 2 users

Issue metadata

Status: Verified
Owner:
Closed: Jul 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: All
Pri: 2
Type: Bug



Sign in to add a comment

Unable to have 'private' public suffices with wildcards or exception

Project Member Reported by rsleevi@chromium.org, Mar 2 2016

Issue description

make_dafsa.py is used to process the PSL and generate the compiled-in DAFSA.

While the Chromium implementation of (effective_tld_names.gperf, registry_controlled_domain.*) treats the status as a bitmask, make_dafsa.py treats it as discrete values.

As such, make_dafsa.py rejects certificates that are wildcard-and-private (2 + 4 == 6) or that are exceptions-and-private (1 + 4 = 5).

This is blocking updating to the latest versions of the PSL, as Github has several wildcarded private domains included in the latest version.
 
Project Member

Comment 1 by bugdroid1@chromium.org, Mar 4 2016

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/55859a4ac6f8d43c63752ddcba20c6df76710e1f

commit 55859a4ac6f8d43c63752ddcba20c6df76710e1f
Author: rsleevi <rsleevi@chromium.org>
Date: Fri Mar 04 01:34:58 2016

Support all possible bitflags when computing the PSL DAFSA

make_dafsa.py restricted the set of flags a given eTLD could have to
being the discrete values (0, 1, 2, 4), but the underlying
implementation is as a bitmask. Support the entire range of valid
values within make_dafsa, so that non-ICANN eTLDs can have wildcards or
exceptions

BUG= 591253 

Review URL: https://codereview.chromium.org/1756733003

Cr-Commit-Position: refs/heads/master@{#379167}

[modify] https://crrev.com/55859a4ac6f8d43c63752ddcba20c6df76710e1f/net/tools/dafsa/make_dafsa.py
[modify] https://crrev.com/55859a4ac6f8d43c63752ddcba20c6df76710e1f/net/tools/dafsa/make_dafsa_unittest.py

Project Member

Comment 2 by bugdroid1@chromium.org, Apr 4 2016

Labels: merge-merged-2661
The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/fbc95014262c9b56a79859a3ef79309d19246173

commit fbc95014262c9b56a79859a3ef79309d19246173
Author: Ryan Sleevi <rsleevi@chromium.org>
Date: Mon Apr 04 23:24:41 2016

Support all possible bitflags when computing the PSL DAFSA

make_dafsa.py restricted the set of flags a given eTLD could have to
being the discrete values (0, 1, 2, 4), but the underlying
implementation is as a bitmask. Support the entire range of valid
values within make_dafsa, so that non-ICANN eTLDs can have wildcards or
exceptions

BUG= 591253 

Review URL: https://codereview.chromium.org/1756733003

Cr-Commit-Position: refs/heads/master@{#379167}
(cherry picked from commit 55859a4ac6f8d43c63752ddcba20c6df76710e1f)

Review URL: https://codereview.chromium.org/1860753005 .

Cr-Commit-Position: refs/branch-heads/2661@{#487}
Cr-Branched-From: ef6f6ae5e4c96622286b563658d5cd62a6cf1197-refs/heads/master@{#378081}

[modify] https://crrev.com/fbc95014262c9b56a79859a3ef79309d19246173/net/tools/dafsa/make_dafsa.py
[modify] https://crrev.com/fbc95014262c9b56a79859a3ef79309d19246173/net/tools/dafsa/make_dafsa_unittest.py

Status: Verified (was: Started)

Sign in to add a comment