build/pgo/server-locations.txt

   1 #
   2 # This Source Code Form is subject to the terms of the Mozilla Public
   3 # License, v. 2.0. If a copy of the MPL was not distributed with this
   4 # file, You can obtain one at http://mozilla.org/MPL/2.0/.
   5
   6 #
   7 # This file defines the locations at which this HTTP server may be accessed.
   8 # It is referred to by the following page, so if this file moves, that page must
   9 # be modified accordingly:
  10 #
  11 # https://developer.mozilla.org/en/docs/Mochitest#How_do_I_test_issues_which_only_show_up_when_tests_are_run_across_domains.3F
  12 #
  13 # Empty lines and lines which begin with "#" are ignored and may be used for
  14 # storing comments.  All other lines consist of an origin followed by whitespace
  15 # and a comma-separated list of options (if indeed any options are needed).
  16 #
  17 # The format of an origin is, referring to RFC 2396, a scheme (either "http" or
  18 # "https"), followed by "://", followed by a host, followed by ":", followed by
  19 # a port number.  The colon and port number must be present even if the port
  20 # number is the default for the protocol.
  21 #
  22 # Unrecognized options are ignored.  Recognized options are "primary" and
  23 # "privileged", "nocert", "cert=some_cert_nickname", "redir=hostname" and
  24 # "failHandshake".
  25 #
  26 # "primary" denotes a location which is the canonical location of
  27 # the server; this location is the one assumed for requests which don't
  28 # otherwise identify a particular origin (e.g. HTTP/1.0 requests).
  29 #
  30 # "privileged" denotes a location which should have the ability to request
  31 # elevated privileges; the default is no privileges.
  32 #
  33 # "nocert" makes sense only for https:// hosts and means there is not
  34 # any certificate automatically generated for this host.
  35 #
  36 # "failHandshake" causes the tls handshake to fail (by sending a client hello to
  37 # the client).
  38 #
  39 # "cert=nickname" tells the pgo server to use a particular certificate
  40 # for this host. The certificate is referenced by its nickname that must
  41 # not contain any spaces. The certificate  key files (PKCS12 modules)
  42 # for custom certification are loaded from build/pgo/certs
  43 # directory. When new certificate is added to this dir pgo/ssltunnel
  44 # must be built then. This is only necessary for cases where we really do
  45 # want specific certs.
  46 # You can find instructions on how to add or modify certificates at:
  47 # https://firefox-source-docs.mozilla.org/build/buildsystem/test_certificates.html
  48 #
  49 # "redir=hostname" tells the pgo server is only used for https://
  50 # hosts while processing the CONNECT tunnel request. It responds
  51 # to the CONNECT with a 302 and redirection to the hostname instead
  52 # of connecting to the real back end and replying with a 200. This
  53 # mode exists primarily to ensure we don't allow a proxy to do that.
  54 #
  55
  56 #
  57 # This is the primary location from which tests run.
  58 #
  59 http://mochi.test:8888   primary,privileged
  60
  61 #
  62 # These are a common set of prefixes scattered across one TLD with two ports and
  63 # another TLD on a single port.
  64 #
  65 http://127.0.0.1:80               privileged
  66 http://127.0.0.1:8888             privileged
  67 http://test:80                    privileged
  68 http://mochi.test:8888            privileged
  69 http://mochi.xorigin-test:8888    privileged
  70 http://test1.mochi.test:8888
  71 http://sub1.test1.mochi.test:8888
  72 http://sub2.xn--lt-uia.mochi.test:8888
  73 http://test2.mochi.test:8888
  74 http://example.org:80                privileged
  75 http://test1.example.org:80          privileged
  76 http://test2.example.org:80          privileged
  77 http://sub1.test1.example.org:80     privileged
  78 http://sub1.test2.example.org:80     privileged
  79 http://sub2.test1.example.org:80     privileged
  80 http://sub2.test2.example.org:80     privileged
  81 http://example.org:8000              privileged
  82 http://test1.example.org:8000        privileged
  83 http://test2.example.org:8000        privileged
  84 http://sub1.test1.example.org:8000   privileged
  85 http://sub1.test2.example.org:8000   privileged
  86 http://sub2.test1.example.org:8000   privileged
  87 http://sub2.test2.example.org:8000   privileged
  88 http://example.com:80                privileged
  89 http://www.example.com:80            privileged
  90 http://test1.example.com:80          privileged
  91 http://test2.example.com:80          privileged
  92 http://sub1.test1.example.com:80     privileged
  93 http://sub1.test2.example.com:80     privileged
  94 http://sub2.test1.example.com:80     privileged
  95 http://sub2.test2.example.com:80     privileged
  96 http://noxul.example.com:80          privileged,noxul
  97 http://example.net:80                privileged
  98 http://supports-insecure.expired.example.com:80 privileged
  99 # Used to test that clearing Service Workers for domain example.com, does not clear prefixexample.com
 100 http://prefixexample.com:80
 101
 102 # The first HTTPS location is used to generate the Common Name (CN) value of the
 103 # certificate's Issued To field.
 104 https://example.com:443                privileged
 105 https://test1.example.com:443          privileged
 106 https://test2.example.com:443          privileged
 107 https://example.org:443                privileged
 108 https://test1.example.org:443          privileged
 109 https://test2.example.org:443          privileged
 110 https://sub1.test1.example.com:443     privileged
 111 https://sub1.test2.example.com:443     privileged
 112 https://sub2.test1.example.com:443     privileged
 113 https://sub2.test2.example.com:443     privileged
 114 https://nocert.example.com:443         privileged,nocert
 115 https://self-signed.example.com:443    privileged,cert=selfsigned
 116 https://untrusted.example.com:443      privileged,cert=untrusted
 117 https://expired.example.com:443        privileged,cert=expired
 118 https://requestclientcert.example.com:443         privileged,clientauth=request
 119 https://requireclientcert.example.com:443         privileged,clientauth=require
 120 https://requireclientcert-2.example.com:443         privileged,clientauth=require
 121 https://mismatch.expired.example.com:443        privileged,cert=expired
 122 https://mismatch.untrusted.example.com:443      privileged,cert=untrusted
 123 https://untrusted-expired.example.com:443       privileged,cert=untrustedandexpired
 124 https://mismatch.untrusted-expired.example.com:443      privileged,cert=untrustedandexpired
 125 https://supports-insecure.expired.example.com:443   privileged,cert=expired
 126 https://no-subject-alt-name.example.com:443   cert=noSubjectAltName
 127
 128 # Used for secure contexts on ip addresses, see bug 1616675. Note that
 129 # 127.0.0.1 prompts ssltunnel.cpp to do special-cases, so we use .2
 130 https://127.0.0.2:443                  privileged,ipV4Address
 131 https://secureonly.example.com:443
 132
 133 # Prevent safebrowsing tests from hitting the network for its-a-trap.html and
 134 # its-an-attack.html.
 135 http://www.itisatrap.org:80
 136 https://www.itisatrap.org:443
 137
 138 #
 139 # These are subdomains of <ält.example.org>.
 140 #
 141 http://sub1.xn--lt-uia.example.org:8000   privileged
 142 http://sub2.xn--lt-uia.example.org:80     privileged
 143 http://xn--exmple-cua.test:80             privileged
 144 http://sub1.xn--exmple-cua.test:80        privileged
 145 http://xn--exaple-kqf.test:80             privileged
 146 http://sub1.xn--exaple-kqf.test:80        privileged
 147
 148 https://xn--hxajbheg2az3al.xn--jxalpdlp:443        privileged
 149 https://sub1.xn--hxajbheg2az3al.xn--jxalpdlp:443   privileged
 150
 151 #
 152 # These are subdomains of <παράδειγμα.δοκιμή>, the Greek IDN for example.test.
 153 #
 154 http://xn--hxajbheg2az3al.xn--jxalpdlp:80        privileged
 155 http://sub1.xn--hxajbheg2az3al.xn--jxalpdlp:80   privileged
 156
 157 # Bug 413909 test host
 158 https://bug413909.xn--hxajbheg2az3al.xn--jxalpdlp:443   privileged,cert=bug413909cert
 159
 160 #
 161 # These hosts are used in tests which exercise privilege-granting functionality;
 162 # we could reuse some of the names above, but specific names make it easier to
 163 # distinguish one from the other in tests (as well as what functionality is
 164 # being tested).
 165 #
 166 http://sectest1.example.org:80       privileged
 167 http://sub.sectest2.example.org:80   privileged
 168 http://sectest2.example.org:80
 169 http://sub.sectest1.example.org:80
 170
 171 https://sectest1.example.org:443       privileged
 172 https://sub.sectest2.example.org:443   privileged
 173 https://sectest2.example.org:443
 174 https://sub.sectest1.example.org:443
 175
 176 #
 177 # Used while testing the url-classifier
 178 #
 179 http://malware.example.com:80
 180 http://unwanted.example.com:80
 181 http://tracking.example.com:80
 182 http://cryptomining.example.com:80
 183 http://fingerprinting.example.com:80
 184 http://not-tracking.example.com:80
 185 http://tracking.example.org:80
 186 http://another-tracking.example.net:80
 187 http://social-tracking.example.org:80
 188 http://itisatracker.org:80
 189 https://itisatracker.org:443
 190 http://trackertest.org:80
 191 #
 192 # Used while testing TLS session ticket resumption for third-party trackers (bug 1500533)
 193 # (DO NOT USE THIS HOST IN OTHER TESTS!)
 194 #
 195 https://tlsresumptiontest.example.org:443
 196
 197 https://malware.example.com:443
 198 https://unwanted.example.com:443
 199 https://tracking.example.com:443
 200 https://cryptomining.example.com:443
 201 https://fingerprinting.example.com:443
 202 https://not-tracking.example.com:443
 203 https://tracking.example.org:443
 204 https://another-tracking.example.net:443
 205 https://social-tracking.example.org:443
 206
 207 #
 208 # Used while testing flash blocking (Bug 1307604)
 209 #
 210 http://flashallow.example.com:80
 211 http://exception.flashallow.example.com:80
 212 http://flashblock.example.com:80
 213 http://exception.flashblock.example.com:80
 214 http://subdocument.example.com:80
 215 https://subdocument.example.com:443
 216 http://exception.subdocument.example.com:80
 217
 218 #
 219 # Used while testing tracking protection (Bug 1580416)
 220 # Not that apps.fbsbx.com is a public suffix
 221 #
 222 http://mochitest.apps.fbsbx.com:80
 223
 224 #
 225 # Flash usage can fail unless this URL exists
 226 #
 227 http://fpdownload2.macromedia.com:80
 228 https://fpdownload2.macromedia.com:443
 229
 230 # Bug 1281083
 231 http://bug1281083.example.com:80
 232
 233 # Bug 483437, 484111
 234 https://www.bank1.com:443           privileged,cert=escapeattack1
 235
 236 #
 237 # CONNECT for redirproxy results in a 302 redirect to
 238 # test1.example.com
 239 #
 240 https://redirproxy.example.com:443          privileged,redir=test1.example.com
 241
 242 # Host used for IndexedDB Quota testing
 243 http://bug704464-1.example.com:80        privileged
 244 http://bug704464-2.example.com:80        privileged
 245 http://bug704464-3.example.com:80        privileged
 246 http://bug702292.example.com:80          privileged
 247
 248 # W3C hosts.
 249 # See http://www.w3.org/wiki/Testing/Requirements#The_Web_test_server_must_be_available_through_different_domain_names
 250 http://w3c-test.org:80
 251 http://w3c-test.org:81
 252 http://w3c-test.org:82
 253 http://w3c-test.org:83
 254 http://www.w3c-test.org:80
 255 http://www.w3c-test.org:81
 256 http://www.w3c-test.org:82
 257 http://www.w3c-test.org:83
 258 http://www1.w3c-test.org:80
 259 http://www1.w3c-test.org:81
 260 http://www1.w3c-test.org:82
 261 http://www1.w3c-test.org:83
 262 http://www2.w3c-test.org:80
 263 http://www2.w3c-test.org:81
 264 http://www2.w3c-test.org:82
 265 http://www2.w3c-test.org:83
 266 # http://天気の良い日.w3c-test.org
 267 http://xn--n8j6ds53lwwkrqhv28a.w3c-test.org:80
 268 http://xn--n8j6ds53lwwkrqhv28a.w3c-test.org:81
 269 http://xn--n8j6ds53lwwkrqhv28a.w3c-test.org:82
 270 http://xn--n8j6ds53lwwkrqhv28a.w3c-test.org:83
 271 # http://élève.w3c-test.org
 272 http://xn--lve-6lad.w3c-test.org:80
 273 http://xn--lve-6lad.w3c-test.org:81
 274 http://xn--lve-6lad.w3c-test.org:82
 275 http://xn--lve-6lad.w3c-test.org:83
 276 # HTTPS versions of the above
 277 https://w3c-test.org:443
 278 https://www.w3c-test.org:443
 279 https://www1.w3c-test.org:443
 280 https://www2.w3c-test.org:443
 281 https://xn--n8j6ds53lwwkrqhv28a.w3c-test.org:443
 282 https://xn--lve-6lad.w3c-test.org:443
 283 http://test.w3.org:80
 284
 285 # Hosts for testing TLD-based fallback encoding
 286 http://example.tw:80                privileged
 287 http://example.cn:80                privileged
 288 http://example.co.jp:80             privileged
 289 http://example.fi:80                privileged
 290 http://example.in:80                privileged
 291 http://example.lk:80                privileged
 292
 293 # Host for HPKP
 294 https://include-subdomains.pinning-dynamic.example.com:443        privileged,cert=dynamicPinningGood
 295 https://bad.include-subdomains.pinning-dynamic.example.com:443    privileged,cert=dynamicPinningBad
 296
 297 # Host for static pin tests
 298 https://badchain.include-subdomains.pinning.example.com:443       privileged,cert=staticPinningBad
 299 https://fail-handshake.example.com:443                            privileged,failHandshake
 300
 301 # Host for bad cert domain fixup test
 302 https://badcertdomain.example.com:443                             privileged,cert=badCertDomain
 303 https://www.badcertdomain.example.com:443                         privileged,cert=badCertDomain
 304 https://127.0.0.3:433                                             privileged,cert=badCertDomain
 305 https://badcertdomain.example.com:82                              privileged,cert=badCertDomain
 306 https://mismatch.badcertdomain.example.com:443                    privileged,cert=badCertDomain
 307
 308 # Hosts for sha1 console warning tests
 309 https://sha1ee.example.com:443                                    privileged,cert=sha1_end_entity
 310 https://sha256ee.example.com:443                                  privileged,cert=sha256_end_entity
 311
 312 # Hosts for imminent distrust warning tests
 313 https://imminently-distrusted.example.com:443                     privileged,cert=imminently_distrusted
 314
 315 # Hosts for ssl3/rc4/tls1 warning tests
 316 https://ssl3.example.com:443         privileged,ssl3
 317 https://rc4.example.com:443          privileged,rc4
 318 https://ssl3rc4.example.com:443      privileged,ssl3,rc4
 319 https://tls1.example.com:443         privileged,tls1
 320 https://tls11.example.com:443        privileged,tls1_1
 321 https://tls12.example.com:443        privileged,tls1_2
 322 https://tls13.example.com:443        privileged,tls1,tls1_3
 323
 324 # Hosts for youtube rewrite tests
 325 https://mochitest.youtube.com:443
 326
 327 # Host for U2F localhost tests
 328 https://localhost:443
 329
 330 # Bug 1402530
 331 http://localhost:80                 privileged
 332
 333 # Host for testing APIs whitelisted for mozilla.org
 334 https://www.mozilla.org:443
 335
 336 # local-IP origins for password manager tests (Bug 1582499)
 337 http://10.0.0.0:80                 privileged
 338 http://192.168.0.0:80              privileged