build/pgo/server-locations.txt

   1 #
   2 # This Source Code Form is subject to the terms of the Mozilla Public
   3 # License, v. 2.0. If a copy of the MPL was not distributed with this
   4 # file, You can obtain one at http://mozilla.org/MPL/2.0/.
   5
   6 #
   7 # This file defines the locations at which this HTTP server may be accessed.
   8 # It is referred to by the following page, so if this file moves, that page must
   9 # be modified accordingly:
  10 #
  11 # https://developer.mozilla.org/en/docs/Mochitest#How_do_I_test_issues_which_only_show_up_when_tests_are_run_across_domains.3F
  12 #
  13 # Empty lines and lines which begin with "#" are ignored and may be used for
  14 # storing comments.  All other lines consist of an origin followed by whitespace
  15 # and a comma-separated list of options (if indeed any options are needed).
  16 #
  17 # The format of an origin is, referring to RFC 2396, a scheme (either "http" or
  18 # "https"), followed by "://", followed by a host, followed by ":", followed by
  19 # a port number.  The colon and port number must be present even if the port
  20 # number is the default for the protocol.
  21 #
  22 # Unrecognized options are ignored.  Recognized options are "primary" and
  23 # "privileged", "nocert", "cert=some_cert_nickname", "redir=hostname" and
  24 # "failHandshake".
  25 #
  26 # "primary" denotes a location which is the canonical location of
  27 # the server; this location is the one assumed for requests which don't
  28 # otherwise identify a particular origin (e.g. HTTP/1.0 requests).
  29 #
  30 # "privileged" denotes a location which should have the ability to request
  31 # elevated privileges; the default is no privileges.
  32 #
  33 # "nocert" makes sense only for https:// hosts and means there is not
  34 # any certificate automatically generated for this host.
  35 #
  36 # "failHandshake" causes the tls handshake to fail (by sending a client hello to
  37 # the client).
  38 #
  39 # "cert=nickname" tells the pgo server to use a particular certificate
  40 # for this host. The certificate is referenced by its nickname that must
  41 # not contain any spaces. The certificate  key files (PKCS12 modules)
  42 # for custom certification are loaded from build/pgo/certs
  43 # directory. When new certificate is added to this dir pgo/ssltunnel
  44 # must be built then. This is only necessary for cases where we really do
  45 # want specific certs.
  46 # You can find instructions on how to add or modify certificates at:
  47 # https://firefox-source-docs.mozilla.org/build/buildsystem/test_certificates.html
  48 #
  49 # "redir=hostname" tells the pgo server is only used for https://
  50 # hosts while processing the CONNECT tunnel request. It responds
  51 # to the CONNECT with a 302 and redirection to the hostname instead
  52 # of connecting to the real back end and replying with a 200. This
  53 # mode exists primarily to ensure we don't allow a proxy to do that.
  54 #
  55
  56 #
  57 # This is the primary location from which tests run.
  58 #
  59 http://mochi.test:8888   primary,privileged
  60
  61 #
  62 # These are a common set of prefixes scattered across one TLD with two ports and
  63 # another TLD on a single port.
  64 #
  65 http://127.0.0.1:80               privileged
  66 http://127.0.0.1:8888             privileged
  67 http://test:80                    privileged
  68 http://mochi.test:8888            privileged
  69 http://mochi.xorigin-test:8888    privileged
  70 http://test1.mochi.test:8888
  71 http://sub1.test1.mochi.test:8888
  72 http://sub2.xn--lt-uia.mochi.test:8888
  73 http://test2.mochi.test:8888
  74 http://example.org:80                privileged
  75 http://test1.example.org:80          privileged
  76 http://test2.example.org:80          privileged
  77 http://sub1.test1.example.org:80     privileged
  78 http://sub1.test2.example.org:80     privileged
  79 http://sub2.test1.example.org:80     privileged
  80 http://sub2.test2.example.org:80     privileged
  81 http://example.org:8000              privileged
  82 http://test1.example.org:8000        privileged
  83 http://test2.example.org:8000        privileged
  84 http://sub1.test1.example.org:8000   privileged
  85 http://sub1.test2.example.org:8000   privileged
  86 http://sub2.test1.example.org:8000   privileged
  87 http://sub2.test2.example.org:8000   privileged
  88 http://example.com:80                privileged
  89 http://www.example.com:80            privileged
  90 http://test1.example.com:80          privileged
  91 http://test2.example.com:80          privileged
  92 http://sub1.test1.example.com:80     privileged
  93 http://sub1.test2.example.com:80     privileged
  94 http://sub2.test1.example.com:80     privileged
  95 http://sub2.test2.example.com:80     privileged
  96 http://noxul.example.com:80          privileged,noxul
  97 http://example.net:80                privileged
  98 http://supports-insecure.expired.example.com:80 privileged
  99 # Used to test that clearing Service Workers for domain example.com, does not clear prefixexample.com
 100 http://prefixexample.com:80
 101
 102 # The first HTTPS location is used to generate the Common Name (CN) value of the
 103 # certificate's Issued To field.
 104 https://example.com:443                privileged
 105 https://test1.example.com:443          privileged
 106 https://test2.example.com:443          privileged
 107 https://example.org:443                privileged
 108 https://test1.example.org:443          privileged
 109 https://test2.example.org:443          privileged
 110 https://sub1.test1.example.com:443     privileged
 111 https://sub1.test2.example.com:443     privileged
 112 https://sub2.test1.example.com:443     privileged
 113 https://sub2.test2.example.com:443     privileged
 114 https://nocert.example.com:443         privileged,nocert
 115 https://self-signed.example.com:443    privileged,cert=selfsigned
 116 https://untrusted.example.com:443      privileged,cert=untrusted
 117 https://expired.example.com:443        privileged,cert=expired
 118 https://requestclientcert.example.com:443         privileged,clientauth=request
 119 https://requireclientcert.example.com:443         privileged,clientauth=require
 120 https://requireclientcert-2.example.com:443         privileged,clientauth=require
 121 https://mismatch.expired.example.com:443        privileged,cert=expired
 122 https://mismatch.untrusted.example.com:443      privileged,cert=untrusted
 123 https://untrusted-expired.example.com:443       privileged,cert=untrustedandexpired
 124 https://mismatch.untrusted-expired.example.com:443      privileged,cert=untrustedandexpired
 125 https://supports-insecure.expired.example.com:443   privileged,cert=expired
 126 https://no-subject-alt-name.example.com:443   cert=noSubjectAltName
 127
 128 # Used for secure contexts on ip addresses, see bug 1616675. Note that
 129 # 127.0.0.1 prompts ssltunnel.cpp to do special-cases, so we use .2
 130 https://127.0.0.2:443                  privileged,ipV4Address
 131
 132 # Prevent safebrowsing tests from hitting the network for its-a-trap.html and
 133 # its-an-attack.html.
 134 http://www.itisatrap.org:80
 135 https://www.itisatrap.org:443
 136
 137 #
 138 # These are subdomains of <ält.example.org>.
 139 #
 140 http://sub1.xn--lt-uia.example.org:8000   privileged
 141 http://sub2.xn--lt-uia.example.org:80     privileged
 142 http://xn--exmple-cua.test:80             privileged
 143 http://sub1.xn--exmple-cua.test:80        privileged
 144 http://xn--exaple-kqf.test:80             privileged
 145 http://sub1.xn--exaple-kqf.test:80        privileged
 146
 147 https://xn--hxajbheg2az3al.xn--jxalpdlp:443        privileged
 148 https://sub1.xn--hxajbheg2az3al.xn--jxalpdlp:443   privileged
 149
 150 #
 151 # These are subdomains of <παράδειγμα.δοκιμή>, the Greek IDN for example.test.
 152 #
 153 http://xn--hxajbheg2az3al.xn--jxalpdlp:80        privileged
 154 http://sub1.xn--hxajbheg2az3al.xn--jxalpdlp:80   privileged
 155
 156 # Bug 413909 test host
 157 https://bug413909.xn--hxajbheg2az3al.xn--jxalpdlp:443   privileged,cert=bug413909cert
 158
 159 #
 160 # These hosts are used in tests which exercise privilege-granting functionality;
 161 # we could reuse some of the names above, but specific names make it easier to
 162 # distinguish one from the other in tests (as well as what functionality is
 163 # being tested).
 164 #
 165 http://sectest1.example.org:80       privileged
 166 http://sub.sectest2.example.org:80   privileged
 167 http://sectest2.example.org:80
 168 http://sub.sectest1.example.org:80
 169
 170 https://sectest1.example.org:443       privileged
 171 https://sub.sectest2.example.org:443   privileged
 172 https://sectest2.example.org:443
 173 https://sub.sectest1.example.org:443
 174
 175 #
 176 # Used while testing the url-classifier
 177 #
 178 http://malware.example.com:80
 179 http://unwanted.example.com:80
 180 http://tracking.example.com:80
 181 http://cryptomining.example.com:80
 182 http://fingerprinting.example.com:80
 183 http://not-tracking.example.com:80
 184 http://tracking.example.org:80
 185 http://another-tracking.example.net:80
 186 http://social-tracking.example.org:80
 187 http://itisatracker.org:80
 188 https://itisatracker.org:443
 189 http://trackertest.org:80
 190 #
 191 # Used while testing TLS session ticket resumption for third-party trackers (bug 1500533)
 192 # (DO NOT USE THIS HOST IN OTHER TESTS!)
 193 #
 194 https://tlsresumptiontest.example.org:443
 195
 196 https://malware.example.com:443
 197 https://unwanted.example.com:443
 198 https://tracking.example.com:443
 199 https://cryptomining.example.com:443
 200 https://fingerprinting.example.com:443
 201 https://not-tracking.example.com:443
 202 https://tracking.example.org:443
 203 https://another-tracking.example.net:443
 204 https://social-tracking.example.org:443
 205
 206 #
 207 # Used while testing flash blocking (Bug 1307604)
 208 #
 209 http://flashallow.example.com:80
 210 http://exception.flashallow.example.com:80
 211 http://flashblock.example.com:80
 212 http://exception.flashblock.example.com:80
 213 http://subdocument.example.com:80
 214 https://subdocument.example.com:443
 215 http://exception.subdocument.example.com:80
 216
 217 #
 218 # Used while testing tracking protection (Bug 1580416)
 219 # Not that apps.fbsbx.com is a public suffix
 220 #
 221 http://mochitest.apps.fbsbx.com:80
 222
 223 #
 224 # Flash usage can fail unless this URL exists
 225 #
 226 http://fpdownload2.macromedia.com:80
 227 https://fpdownload2.macromedia.com:443
 228
 229 # Bug 1281083
 230 http://bug1281083.example.com:80
 231
 232 # Bug 483437, 484111
 233 https://www.bank1.com:443           privileged,cert=escapeattack1
 234
 235 #
 236 # CONNECT for redirproxy results in a 302 redirect to
 237 # test1.example.com
 238 #
 239 https://redirproxy.example.com:443          privileged,redir=test1.example.com
 240
 241 # Host used for IndexedDB Quota testing
 242 http://bug704464-1.example.com:80        privileged
 243 http://bug704464-2.example.com:80        privileged
 244 http://bug704464-3.example.com:80        privileged
 245 http://bug702292.example.com:80          privileged
 246
 247 # W3C hosts.
 248 # See http://www.w3.org/wiki/Testing/Requirements#The_Web_test_server_must_be_available_through_different_domain_names
 249 http://w3c-test.org:80
 250 http://w3c-test.org:81
 251 http://w3c-test.org:82
 252 http://w3c-test.org:83
 253 http://www.w3c-test.org:80
 254 http://www.w3c-test.org:81
 255 http://www.w3c-test.org:82
 256 http://www.w3c-test.org:83
 257 http://www1.w3c-test.org:80
 258 http://www1.w3c-test.org:81
 259 http://www1.w3c-test.org:82
 260 http://www1.w3c-test.org:83
 261 http://www2.w3c-test.org:80
 262 http://www2.w3c-test.org:81
 263 http://www2.w3c-test.org:82
 264 http://www2.w3c-test.org:83
 265 # http://天気の良い日.w3c-test.org
 266 http://xn--n8j6ds53lwwkrqhv28a.w3c-test.org:80
 267 http://xn--n8j6ds53lwwkrqhv28a.w3c-test.org:81
 268 http://xn--n8j6ds53lwwkrqhv28a.w3c-test.org:82
 269 http://xn--n8j6ds53lwwkrqhv28a.w3c-test.org:83
 270 # http://élève.w3c-test.org
 271 http://xn--lve-6lad.w3c-test.org:80
 272 http://xn--lve-6lad.w3c-test.org:81
 273 http://xn--lve-6lad.w3c-test.org:82
 274 http://xn--lve-6lad.w3c-test.org:83
 275 # HTTPS versions of the above
 276 https://w3c-test.org:443
 277 https://www.w3c-test.org:443
 278 https://www1.w3c-test.org:443
 279 https://www2.w3c-test.org:443
 280 https://xn--n8j6ds53lwwkrqhv28a.w3c-test.org:443
 281 https://xn--lve-6lad.w3c-test.org:443
 282 http://test.w3.org:80
 283
 284 # Hosts for testing TLD-based fallback encoding
 285 http://example.tw:80                privileged
 286 http://example.cn:80                privileged
 287 http://example.co.jp:80             privileged
 288 http://example.fi:80                privileged
 289 http://example.in:80                privileged
 290 http://example.lk:80                privileged
 291
 292 # Host for HPKP
 293 https://include-subdomains.pinning-dynamic.example.com:443        privileged,cert=dynamicPinningGood
 294 https://bad.include-subdomains.pinning-dynamic.example.com:443    privileged,cert=dynamicPinningBad
 295
 296 # Host for static pin tests
 297 https://badchain.include-subdomains.pinning.example.com:443       privileged,cert=staticPinningBad
 298 https://fail-handshake.example.com:443                            privileged,failHandshake
 299
 300 # Host for bad cert domain fixup test
 301 https://badcertdomain.example.com:443                             privileged,cert=badCertDomain
 302 https://www.badcertdomain.example.com:443                         privileged,cert=badCertDomain
 303 https://127.0.0.3:433                                             privileged,cert=badCertDomain
 304 https://badcertdomain.example.com:82                              privileged,cert=badCertDomain
 305 https://mismatch.badcertdomain.example.com:443                    privileged,cert=badCertDomain
 306
 307 # Hosts for sha1 console warning tests
 308 https://sha1ee.example.com:443                                    privileged,cert=sha1_end_entity
 309 https://sha256ee.example.com:443                                  privileged,cert=sha256_end_entity
 310
 311 # Hosts for imminent distrust warning tests
 312 https://imminently-distrusted.example.com:443                     privileged,cert=imminently_distrusted
 313
 314 # Hosts for ssl3/rc4/tls1 warning tests
 315 https://ssl3.example.com:443         privileged,ssl3
 316 https://rc4.example.com:443          privileged,rc4
 317 https://ssl3rc4.example.com:443      privileged,ssl3,rc4
 318 https://tls1.example.com:443         privileged,tls1
 319 https://tls11.example.com:443        privileged,tls1_1
 320 https://tls12.example.com:443        privileged,tls1_2
 321 https://tls13.example.com:443        privileged,tls1,tls1_3
 322
 323 # Hosts for youtube rewrite tests
 324 https://mochitest.youtube.com:443
 325
 326 # Host for U2F localhost tests
 327 https://localhost:443
 328
 329 # Bug 1402530
 330 http://localhost:80                 privileged
 331
 332 # Host for testing APIs whitelisted for mozilla.org
 333 https://www.mozilla.org:443