QA/Browser Technologies/Services/Releases/BrowserID 12082011

Information

• Train 16: 12-08-2011

Links

• Bugs/Issues: https://github.com/mozilla/browserid/issues
• Test Plan: https://wiki.mozilla.org/QA/BrowserID/TestPlan
• Weekly Train Wiki: https://wiki.mozilla.org/QA/BrowserID/BrowserID_Weekly_Trains_Beta
• Stage Test Wiki: internal site TBD
• Stage Server: https://diresworb.org
• Stage Client/RP1: http://beta.myfavoritebeer.org
• Stage Client/RP2: http://beta.myfavoritebooze.org
• Stage Client/RP3: http://beta.myfavoriteshow.org
• Stage Client/RP4: http://carrera.databits.net:9999

• New Dev Server: https://dev-browserid.services.mozilla.com
• New Dev Client: http://beer.mtv1.dev.svc.mozilla.com

• Old Dev Server: https://dev.diresworb.org
• Old Dev Client/RP1: http://dev.myfavoritebeer.org
• Old Dev Client/RP2: http://dev.myfavoritebooze.org
• Old Dev Client/RP3: http://dev.myfavoriteshow.org

Deployment Ticket

• bug 711265 - please deploy browserid train-2011.12.08 to stage
• bug 711267 - QA and deploy BrowserID train-2011.12.08 to production

ChangeLog

• 12/08: ChangeLog including issues resolved
  • https://github.com/mozilla/browserid/blob/train-2011.12.08/ChangeLog#L1-8

Versions

• Beta: no longer available
• old Dev: https://dev.diresworb.org/ver.txt
  • de5fd87 Removing trailing whitespace from m.css
• Prod: https://browserid.org/ver.txt
  • 83c408a merge hotfix for issue #754 into production
• new Dev: https://dev-browserid.services.mozilla.com/ver.txt
  • 17642ad bump version
• Stage: https://stage-browserid.services.mozilla.com/ver.txt
  • f8c2efd merge hotfix for issue #754 into beta: train-2011.12.08

Heartbeat

• old Dev: https://dev.diresworb.org/__heartbeat__
  • ok
• old Prod: https://browserid.org/__heartbeat__
  • ok
• Dev: https://dev-browserid.services.mozilla.com/__heartbeat__
  • ok
• Stage: https://diresworb.org/__heartbeat__
  • ok

Processes

• webheads
  • /usr/bin/node bin/browserid
  • /usr/bin/node bin/verifier
• secure webheads
  • /usr/bin/node bin/dbwriter
• keysigners
  • /usr/bin/node bin/keysigner
• databases: various mysql processes
• zeus: various zeus processes

Unit Tests

• Front-End Unit Tests
  • Pass
• Back-End Unit Tests
  • Pass
• Headless Front-End Unit Tests
  • Pass

New/Updated OPs Tickets and Issues

• [BrowserID issue 793] : handle SIGHUP for log rotation
• bug 695960 - browserid: deploy to production
• bug 709941 - graphs needed for new metrics reported through statsd on browserid
• bug 709970 - zeus "proxy" vserver for browserid rollout
• bug 695943 - build internal zeus cluster in scl2 & phx
• bug 702762 - rename zlb.scl2.stage to zlb.pub.scl2.stage
• bug 710338 - Upgrade browserid.org SSL cert to EV or crazypants good level
• bug 703497 - [browserid] deploy local MTA with socketlabs integration
• bug 708321 - browserid: configure zeus service protection classes
• bug 701921 - Provide documentation for BrowserID systems
• bug 701926 - Create infrasec user for BrowserID
• bug 701930 - Deploy OSSEC agent on BrowserID systems
• bug 703054 - Change the default ioscheduler on all new BID boxes to deadline
• bug 710771 - rhn communication broken in BiD
• bug 712803 - browserid: build proxy service
• bug 708444 - need iptables on internal zlb for fancy routing rules
• bug 713650 - fix /etc/cron.daily/prelink on idsecweb production hosts
• bug 713684 - zlb1.pub.scl2.stage.svc: rebooted and it won't come back
• bug 713691 - bid webheads: monitor /wsapi/have_email
• bug 713727 - rsbac logs to /var/log/rsbac.log

Resolved/Closed Bugs and Issues

• [BrowserID issue 757] : myfavoritebeer.org 500 Internal Server Error on all get/set requests
• [BrowserID issue 626] : Relay frame error on beta.myfavoriteshow.org on browser restart
• [BrowserID issue 631] : Second attempt to log in to beta.myfavoriteshow.org causes apparent hang or no action on diresworb.org
• [BrowserID issue 470] : On a slow link, about:blank shows for an uncomfortable period of time
• [BrowserID issue 765] : Cancel "Use Different Email" not working in dev.
• [BrowserID issue 640] : IE9: beta.myfavoritebooze.org gets error after user logs out/in.
• [BrowserID issue 744] : npm install fails on bigint and crypto code
• [BrowserID issue 731] : Dev: Verification email formatting is compressed again.
• [BrowserID issue 686] : Speed up the front end unit tests.
• [BrowserID issue 681] : sporadic authentication failures when under load
• [BrowserID issue 745] : Mac: npm install fails on key generation and node CPU maxout
• [BrowserID issue 300] : The "This is not me" link is not selectable on stock browser for Android tablet
• [BrowserID issue 688] : IE8 blowing up trying to do "delete" on localStorage members.
• [BrowserID issue 680] : statsd binds too many ephemeral UDP ports under load
• [BrowserID issue 734] : users cannot log in in latest prod
• [BrowserID issue 738] : Handle 503 on the front end
• [BrowserID issue 740] : Sign in one account, will prompt to select from multiple accounts
• [BrowserID issue 351] : Safari/Opera: BrowserID Account Manage page does not show emails
• [BrowserID issue 614] : IE8: Can not sign in due to missing fields on diresworb.org/sign_in
• [BrowserID issue 788] : load_gen: Fix steps for local install and load test
• [BrowserID issue 767] : Support (secure?) CORS requests to /verify
• [BrowserID issue 704] : Post animation callback not always called on Android default browser.
• [BrowserID issue 691] : statsd reporting througout code
• [BrowserID issue 722] : The user is not automatically signed in when confirming his sign up from a different browser
• [BrowserID issue 729] : Dev: Forgot Password verification page in browser is confusing.
• [BrowserID issue 419] : Help build out QA VM to run behind web service

Verified As Still Open, Reopened, or Updated : Server

• [BrowserID issue 584] : Design is not adapted to mobile on Android
• [BrowserID issue 723] : Sign in doesn't work on Android devices
• [BrowserID issue 385] : UI on both sites for post-account creation task is confusing.
• [BrowserID issue 698] : New email is not marked as "last used" after logout, Sign In
• [BrowserID issue 730] : Dev: Verification email text is incorrect for forgotton passwords.
• [BrowserID issue 708] : can't sign-in with stock browser on android
• [BrowserID issue 766] : channel.js no longer needed
• [BrowserID issue 632] : beta.myfavoriteshow.org email field allows all matter of silliness...
• [BrowserID issue 360] : BrowserID does not appear to be compatible with the Dolphin browser.
• [BrowserID issue 719] : diresword.org returns "You are offline" (Stock browser, Android 2.3.4)
• [BrowserID issue 730] : Dev: Verification email text is incorrect for forgotton passwords.
• [BrowserID issue 711] : iOS5.0.1: can't validate email into diresworb.org
• [BrowserID issue 719] : diresword.org returns "You are offline" (Stock browser, Android 2.3.4)
• [BrowserID issue 682] : loadgen attached bogus certs to email addresses
• [BrowserID issue 728] : Support Center link should open a new tab/window
• [BrowserID issue 613] : new Dev/Stage: not seeing any *-error.log files

Verified As Still Open, Reopened, or Updated : Client

• None

Opened Bugs/Issues For This Week: Server

• [BrowserID issue 725] : Dev: delayed email verification does not seem to be working
• [BrowserID issue 728] : Dev: Support Center link should open a new tab/window
• [BrowserID issue 729] : Dev: Forgot Password verification page in browser is confusing.
• [BrowserID issue 730] : Dev: Verification email text is incorrect for forgotton passwords.
• [BrowserID issue 731] : Dev: Verification email formatting is compressed again.
• [BrowserID issue 739] : old Dev/Prod: New "error" showing up in *-error.log files
• [BrowserID issue 744] : npm install fails on bigint and crypto code
• [BrowserID issue 745] : Mac: npm install fails on key generation and node CPU maxout
• [BrowserID issue 746] : Linux: npm install fails after gpm-devel install
• [BrowserID issue 772] : Dev/Stage: Get log rotation and archiving working
• [BrowserID issue 776] : old Dev: dev.myfavoritebooze.org does not always "keep me signed in"
• [BrowserID issue 778] : BrowserID is causing crashes with nightly Java Fennec
• [BrowserID issue 782] : load_gen: fix Usage information
• [BrowserID issue 784] : load_gen: Investigate unusual spike in errors during low/med level load test
• [BrowserID issue 785] : load_gen: Investigate "failed to auth" errors showing up at regular intervals
• [BrowserID issue 786] : load_gen: Fix load test to not obsessively spam with emails
• [BrowserID issue 787] : load_gen: Fix code to better handle failures due to up-front overloading
• [BrowserID issue 788] : load_gen: Fix steps for local install and load test
• [BrowserID issue 790] : IE8: Can not directly sign into beta.myfavoriteshow.org
• [BrowserID issue 791] : Opera: is not honoring the "keep me signed in" feature
• [BrowserID issue 792] : BrowserID RPM build on ID2 is throwing Asynchronous errors
• [BrowserID issue 798] : ID2: No longer able to do a local install to this VM
• [BrowserID issue 799] : Stage: Currently unable to sign in due to Internal Server Error
• [BrowserID issue 801] : BrowserID: Security hole when adding an email to an existing account.
• [BrowserID issue 802] : Remember to refresh a page when signing up from diresworb.org
• [BrowserID issue 803] : IE8: Trying to sign into http://carrera.databits.net:9999 gets an error
• [BrowserID issue 804] : IE8: Cancelling a "Use a different email" path closes the pop-up
• [BrowserID issue 805] : IE8: First attempt to complete Sign In to an RP fails
• [BrowserID issue 806] : IE8: Loading diresworb.org often causes IE to crash
• [BrowserID issue 810] : Dev: Account Manager password section not working right for IE8.
• [BrowserID issue 811] : Dev: Password change does not work in IE8/WinXP
• [BrowserID issue 812] : Dev: Issues with white on white text for IE8/WinXP
• [BrowserID issue 732] : Signing in already known email will prompt to confirm your mail address
• [BrowserID issue 740] : Sign in one account, will prompt to select from multiple accounts
• [BrowserID issue 773] : The user is not logged out of http://beta.myfavoritebooze.org after clearing all the browsing data
• [BrowserID issue 780] : Confusing behavior when trying to add an email already associated to the currently used BrowserID account
• [BrowserID issue 781] : The Cancel button on the Add Email dialog is non-responsive in Firefox 9
• [BrowserID issue 777] : BrowserID doesn't allow login at all from Native Fennec
• [BrowserID issue 779] : BrowserID hangs on "Communicating with server" on iPad (iOS5)

Opened Bugs/Issues For This Week: Client

• None

Other Open Bugs

• bug 706572 - Document best practices for localizing node.js services
• bug 711082 - Collect logs from all production identity/browserid servers to ETL processing machine (browserid-stats1.vm1.labs.sjc1.mozilla.com).
• bug 712401 - Please install required pkgs for BrowserID and load_gen on Client load generators

• [BrowserID issue 726] : Train 2011.12.01 hotfix 601
• [BrowserID issue 727] : Train 2011.12.01 hotfix 601
• [BrowserID issue 733] : Justify asking for a password
• [BrowserID issue 734] : users cannot log in in latest prod
• [BrowserID issue 735] : move to crypto.getRandom
• [BrowserID issue 736] : Prod hotfix internal api
• [BrowserID issue 737] : Registering a new BrowserID account throws an error
• [BrowserID issue 738] : Handle 503 on the front end
• [BrowserID issue 741] : Unresponsive script avoids Sign Up
• [BrowserID issue 742] : get include.js takes 832ms to complete
• [BrowserID issue 743] : http://www.nightlight.ws/ giving relay frame not found
• [BrowserID issue 747] : Sample RP too wide for mobile devices
• [BrowserID issue 748] : doWinUnload front end unit test fails if run by itself
• [BrowserID issue 749] : Updating Install instructions, reving Vagrant VM, adding update instructions.
• [BrowserID issue 750] : BrowserID should allow login from N emails with user's 1 password
• [BrowserID issue 751] : Bad SSL Cert for https://beta.myfavoritebeer.org
• [BrowserID issue 752] : IE9/Win7 - Logout of beta.myfavoritebooze.org then page refresh shows previous login info.
• [BrowserID issue 753] : IE8 has been reblocked
• [BrowserID issue 754] : cancel forgot password is not working on required email flow.
• [BrowserID issue 755] : user education to encourage picking strong, unique passwords for the browserid account
• [BrowserID issue 756] : verification email comes from "no reply"
• [BrowserID issue 757] : myfavoritebeer.org 500 Internal Server Error on all get/set requests
• [BrowserID issue 758] : remove all trailing whitespace from all files.
• [BrowserID issue 759] : email reset / password recovery is not good
• [BrowserID issue 760] : make "logout" work better
• [BrowserID issue 761] : implement primary support
• [BrowserID issue 762] : detect browser speed and downgrade keysize if needed
• [BrowserID issue 763] : do crypto in web worker
• [BrowserID issue 764] : consider migrating to winchan
• [BrowserID issue 765] : Cancel "Use Different Email" not working in dev.
• [BrowserID issue 766] : channel.js no longer needed
• [BrowserID issue 767] : Support (secure?) CORS requests to /verify
• [BrowserID issue 768] : repair .channel internal API in dev
• [BrowserID issue 769] : don't load css file from third-party domain
• [BrowserID issue 770] : New User Sign In Flow - No Way Back
• [BrowserID issue 771] : XHR mock: session_context call unnecessarily difficult to use.
• [BrowserID issue 774] : prioritize research questions
• [BrowserID issue 775] : Additional step for Vagrant box: npm install
• [BrowserID issue 783] : revived the navigator.id.channel, as well as the #NATIVE and #INTERNAL
• [BrowserID issue 789] : use crypto.getRandom instead of urandom
• [BrowserID issue 794] : Provide a way for user to specify email association of BrowserID assertions
• [BrowserID issue 795] : Error including browserid.org/include.js
• [BrowserID issue 796] : Sign-in failure using Google Chrome Frame
• [BrowserID issue 797] : UX on first page with regards to edit/remove buttons
• [BrowserID issue 800] : fix csrf token generation
• [BrowserID issue 807] : Feature randomseed from server
• [BrowserID issue 808] : Removed a trailing comma that prevents Google Closure Compiler from minifying the file.
• [BrowserID issue 809] : UX with regards to button capitalization

Notes

• '*'-error.log - these are not yet available
• Log rotation and archiving - still not available
• A significant number of older, Closed bugs from August through November that were not part of any ChangeLog.
• All Unit tests successfully run by QA on a local install. This will become a regular part of the Staging process (along with the testing of a local install using standard and RPM methods).
• Front-End Unit tests successfully run by QA on Stage. This will become a regular part of the Staging process.
• load_gen successfully run by both Dev and QA teams on Stage. This will become a regular part of the Staging process.