We're planning to ship a new CDM following some internal testing.

This release should have less time pressure than previous releases, so we may be able to ship it to nightly then it let it ride the trains, rather than having to do faster rollouts to beta + release. We'll likely still want to ship to ESR.

Based on current information, we shouldn't need any changes to Fx to use this new CDM, so it should be a matter of testing and then updating our rules.

I'll follow up here once testing is complete with URLs and hashes.

Internal testing looks good. We're just waiting for go live so we have URLs to hit for the CDMs.

New CDMS are live. Would it be possible to setup a nightlytest rule for the new CDMs?

Once we're ready to roll out, I think we can just replace the existing 4.10.2391.0 rules with 4.10.2449.0 as we expect the new CDM to be compatible with all Firefox versions that could accept the current CDM.

In case it helps update rules, here's the output from my script to pull new CDMs and log info -- FWIW the suffix on the win32 CDM has changed (from ia32 to x86).

Got https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-linux-x64.zip
SHA256: 5d9b972b73427ea6da435b6e30e5e3fd4e32242d7c7eeb6aa355a3b8ca8cad10
SHA512: fd739809833a78e6f4b63aa477307288edec7c2fe0480089cf0216a023f5e977be69ffcaa6b9dd5898608aa35bac834f44fdabeb33fdf96606471e49e0ca1b94
file size: 6581254 bytes

Got https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-mac-x64.zip
SHA256: ee5d987759bcaa6e54e3ff87fa00f0fa097f6742b6a6b152e6ddd770b915b1ce
SHA512: 7d2b92552c137d8cbbbbe97047c7e409859ad01107ea2a4895f4035ebf876efac050dc2868435fa70db3c422344e36db148a0f2c6f2f9b319919284152e2b033
file size: 7213441 bytes

Got https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-mac-arm64.zip
SHA256: 1ecf297128c784347c416a88d9866bbc4d2af912a9fd646f035f62d37f40ab12
SHA512: 96d379f619825c2af568965f6eb366e4521d476c0a23de3812988ffefa80312d550da541b0e6d200ae1efaaf6a03acc2cd3382655d889bd4a051098be246fa82
file size: 6641996 bytes

Got https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-win-x86.zip
SHA256: e02fae93878ced8874b040509dba36dad07f4d35848768dc8015ce199bb16384
SHA512: 11d7e2ac362ceba35747317761f873742b061563a2e0b96c3a379e5b5bc09461f078b01dfe526e5674ddc2f4a5aa4de44adc622baba17442ccd6c5f0d1a31b6b
file size: 6398951 bytes

Got https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-win-x64.zip
SHA256: 1452ac6635f8dc5e2b024a34861c807248113a674a851f7eec6c4b72b39fa596
SHA512: 6fe5d258ba46d9db74f28e0b95419c624831db3988d9a32bb4c603578ae7ca3cd918564259b3ba1e0517b93c48a043f9f7820f6f6474714b6d74bad3f1dbb11b
file size: 6840150 bytes

First pass at the new blob:

{
  "hashFunction": "sha512",
  "name": "Widevine-4.10.2449.0",
  "product": "Widevine",
  "schema_version": 1000,
  "vendors": {
    "gmp-widevinecdm": {
      "platforms": {
        "Darwin_aarch64-gcc3": {
          "fileUrl": "https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-mac-arm64.zip",
          "filesize": 6641996,
          "hashValue": "96d379f619825c2af568965f6eb366e4521d476c0a23de3812988ffefa80312d550da541b0e6d200ae1efaaf6a03acc2cd3382655d889bd4a051098be246fa82"
        },
        "Darwin_x86_64-gcc3": {
          "alias": "Darwin_x86_64-gcc3-u-i386-x86_64"
        },
        "Darwin_x86_64-gcc3-u-i386-x86_64": {
          "fileUrl": "https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-mac-x64.zip",
          "filesize": 7213441,
          "hashValue": "7d2b92552c137d8cbbbbe97047c7e409859ad01107ea2a4895f4035ebf876efac050dc2868435fa70db3c422344e36db148a0f2c6f2f9b319919284152e2b033"
        },
        "Linux_x86_64-gcc3": {
          "fileUrl": "https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-linux-x64.zip",
          "filesize": 6581254,
          "hashValue": "fd739809833a78e6f4b63aa477307288edec7c2fe0480089cf0216a023f5e977be69ffcaa6b9dd5898608aa35bac834f44fdabeb33fdf96606471e49e0ca1b94"
        },
        "Linux_x86_64-gcc3-asan": {
          "alias": "Linux_x86_64-gcc3"
        },
        "WINNT_aarch64-msvc-aarch64": {
          "alias": "WINNT_x86-msvc"
        },
        "WINNT_x86-msvc": {
          "fileUrl": "https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-win-x86.zip",
          "filesize": 6398951,
          "hashValue": "11d7e2ac362ceba35747317761f873742b061563a2e0b96c3a379e5b5bc09461f078b01dfe526e5674ddc2f4a5aa4de44adc622baba17442ccd6c5f0d1a31b6b"
        },
        "WINNT_x86-msvc-x64": {
          "alias": "WINNT_x86-msvc"
        },
        "WINNT_x86-msvc-x86": {
          "alias": "WINNT_x86-msvc"
        },
        "WINNT_x86_64-msvc": {
          "fileUrl": "https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-win-x64.zip",
          "filesize": 6840150,
          "hashValue": "6fe5d258ba46d9db74f28e0b95419c624831db3988d9a32bb4c603578ae7ca3cd918564259b3ba1e0517b93c48a043f9f7820f6f6474714b6d74bad3f1dbb11b"
        },
        "WINNT_x86_64-msvc-x64": {
          "alias": "WINNT_x86_64-msvc"
        },
        "WINNT_x86_64-msvc-x64-asan": {
          "alias": "WINNT_x86_64-msvc"
        }
      },
      "version": "4.10.2449.0"
    }
  }
}

Here's the output from the script I use as a double check:

{
  "hashFunction": "sha512",
  "name": "Widevine-4.10.2449.0",
  "schema_version": 1000,
  "vendors": {
    "gmp-widevinecdm": {
      "platforms": {
        "Darwin_aarch64-gcc3": {
          "fileUrl": "https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-mac-arm64.zip",
          "filesize": 6641996,
          "hashValue": "96d379f619825c2af568965f6eb366e4521d476c0a23de3812988ffefa80312d550da541b0e6d200ae1efaaf6a03acc2cd3382655d889bd4a051098be246fa82"
        },
        "Darwin_x86_64-gcc3": {
          "alias": "Darwin_x86_64-gcc3-u-i386-x86_64"
        },
        "Darwin_x86_64-gcc3-u-i386-x86_64": {
          "fileUrl": "https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-mac-x64.zip",
          "filesize": 7213441,
          "hashValue": "7d2b92552c137d8cbbbbe97047c7e409859ad01107ea2a4895f4035ebf876efac050dc2868435fa70db3c422344e36db148a0f2c6f2f9b319919284152e2b033"
        },
        "Linux_x86_64-gcc3": {
          "fileUrl": "https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-linux-x64.zip",
          "filesize": 6581254,
          "hashValue": "fd739809833a78e6f4b63aa477307288edec7c2fe0480089cf0216a023f5e977be69ffcaa6b9dd5898608aa35bac834f44fdabeb33fdf96606471e49e0ca1b94"
        },
        "Linux_x86_64-gcc3-asan": {
          "alias": "Linux_x86_64-gcc3"
        },
        "WINNT_aarch64-msvc-aarch64": {
          "alias": "WINNT_x86-msvc"
        },
        "WINNT_x86-msvc": {
          "fileUrl": "https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-win-x86.zip",
          "filesize": 6398951,
          "hashValue": "11d7e2ac362ceba35747317761f873742b061563a2e0b96c3a379e5b5bc09461f078b01dfe526e5674ddc2f4a5aa4de44adc622baba17442ccd6c5f0d1a31b6b"
        },
        "WINNT_x86-msvc-x64": {
          "alias": "WINNT_x86-msvc"
        },
        "WINNT_x86-msvc-x86": {
          "alias": "WINNT_x86-msvc"
        },
        "WINNT_x86_64-msvc": {
          "fileUrl": "https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-win-x64.zip",
          "filesize": 6840150,
          "hashValue": "6fe5d258ba46d9db74f28e0b95419c624831db3988d9a32bb4c603578ae7ca3cd918564259b3ba1e0517b93c48a043f9f7820f6f6474714b6d74bad3f1dbb11b"
        },
        "WINNT_x86_64-msvc-x64": {
          "alias": "WINNT_x86_64-msvc"
        },
        "WINNT_x86_64-msvc-x64-asan": {
          "alias": "WINNT_x86_64-msvc"
        }
      },
      "version": "4.10.2449.0"
    }
  }
}

Looks exactly the same, except I'm missing the product property -- so seems good to me!

Excellent. Thanks for that!

Widevine-4.10.2449.0 is now up on the nightlytest channel.

(In reply to Geoff Brown [:gbrown] from comment #6)

Widevine-4.10.2449.0 is now up on the nightlytest channel.

Thanks!

I've smoke tested using nightlytest and everything looks good -- getting the new CDM as expected and content is playing without issue. Could we roll the new CDM out to the nightly channel? The plan is to pursue further QA there + let it bake for a bit.

Done: Available on the nightly channel now.

Everything is looking good on nightly so far, could we update the rules to also serve this to beta?

Done: Widevine-4.10.2449.0 is now up on the nightlytest, nightly, and beta channels.

Could we please update the hashes for the CDM zips? Widevine appear to have updated the zips without notification, and this has broken our hashes. I'm checking the files in the zips, and they appear to be the same files, but with updated timestamps. Since the timestamps are stored as data in the zip, this causes binary change to the file -> change to the hash. New hashes follow:

Got https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-linux-x64.zip
SHA256: becafa7b298aa94d98e873380cf1e751f564076050d474925af935b4d8540396
SHA512: 32e2c702f84e3fa3a5ac077b5b33dbcb72b7d040e2b18861bdf441b9c8724b1c3c53fbadf3154080ffbd987a35eef4b9b5884afe56ee42819dc79bad50395a06
file size: 6581254 bytes

Got https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-mac-x64.zip
SHA256: ee5d987759bcaa6e54e3ff87fa00f0fa097f6742b6a6b152e6ddd770b915b1ce
SHA512: 7d2b92552c137d8cbbbbe97047c7e409859ad01107ea2a4895f4035ebf876efac050dc2868435fa70db3c422344e36db148a0f2c6f2f9b319919284152e2b033
file size: 7213441 bytes

Got https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-mac-arm64.zip
SHA256: 7c720e402de6e3ae0d583df81e01482ad19bf4957c9436ca7182adcfde88ea3e
SHA512: 2af8b1e2b75fe924974d0c21717696747607938bc35012fb1aeb3fd3ffb57bc2a9016641f79c077dab83ba14be82558bce0ca652ab82a4f826472fe7ccae9d08
file size: 6641996 bytes

Got https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-win-x86.zip
SHA256: eb27228cc1ca87a708790edb199116a27d3dd8b720afeb0f3510a62acbd442b2
SHA512: 4cb83077325ed3ede97de0e6498a99e20d6cdcfa728f765d5f3faca1ca2e638984ba8d286d0f8d5cb039f579d4f41b3b5cfdafc3c7b55ba8691208f946e06e46
file size: 6398951 bytes

Got https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-win-x64.zip
SHA256: b45630be7b3c1c80551e0a89e7bd6dbc65804fa0ca99e5f13fb317b2083ac194
SHA512: 984d3b438146d1180b6c37d54793fadb383f4585e9a13f0ec695f75b27b50db72d7f5f0ef218a6313302829ba83778c348d37c4d9e811c0dba7c04ef4fb04672
file size: 6840150 bytes

Updated blob:

{
  "hashFunction": "sha512",
  "name": "Widevine-4.10.2449.0",
  "product": "Widevine",
  "schema_version": 1000,
  "vendors": {
    "gmp-widevinecdm": {
      "platforms": {
        "Darwin_aarch64-gcc3": {
          "fileUrl": "https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-mac-arm64.zip",
          "filesize": 6641996,
          "hashValue": "2af8b1e2b75fe924974d0c21717696747607938bc35012fb1aeb3fd3ffb57bc2a9016641f79c077dab83ba14be82558bce0ca652ab82a4f826472fe7ccae9d08"
        },
        "Darwin_x86_64-gcc3": {
          "alias": "Darwin_x86_64-gcc3-u-i386-x86_64"
        },
        "Darwin_x86_64-gcc3-u-i386-x86_64": {
          "fileUrl": "https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-mac-x64.zip",
          "filesize": 7213441,
          "hashValue": "7d2b92552c137d8cbbbbe97047c7e409859ad01107ea2a4895f4035ebf876efac050dc2868435fa70db3c422344e36db148a0f2c6f2f9b319919284152e2b033"
        },
        "Linux_x86_64-gcc3": {
          "fileUrl": "https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-linux-x64.zip",
          "filesize": 6581254,
          "hashValue": "32e2c702f84e3fa3a5ac077b5b33dbcb72b7d040e2b18861bdf441b9c8724b1c3c53fbadf3154080ffbd987a35eef4b9b5884afe56ee42819dc79bad50395a06"
        },
        "Linux_x86_64-gcc3-asan": {
          "alias": "Linux_x86_64-gcc3"
        },
        "WINNT_aarch64-msvc-aarch64": {
          "alias": "WINNT_x86-msvc"
        },
        "WINNT_x86-msvc": {
          "fileUrl": "https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-win-x86.zip",
          "filesize": 6398951,
          "hashValue": "4cb83077325ed3ede97de0e6498a99e20d6cdcfa728f765d5f3faca1ca2e638984ba8d286d0f8d5cb039f579d4f41b3b5cfdafc3c7b55ba8691208f946e06e46"
        },
        "WINNT_x86-msvc-x64": {
          "alias": "WINNT_x86-msvc"
        },
        "WINNT_x86-msvc-x86": {
          "alias": "WINNT_x86-msvc"
        },
        "WINNT_x86_64-msvc": {
          "fileUrl": "https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-win-x64.zip",
          "filesize": 6840150,
          "hashValue": "984d3b438146d1180b6c37d54793fadb383f4585e9a13f0ec695f75b27b50db72d7f5f0ef218a6313302829ba83778c348d37c4d9e811c0dba7c04ef4fb04672"
        },
        "WINNT_x86_64-msvc-x64": {
          "alias": "WINNT_x86_64-msvc"
        },
        "WINNT_x86_64-msvc-x64-asan": {
          "alias": "WINNT_x86_64-msvc"
        }
      },
      "version": "4.10.2449.0"
    }
  }
}

Blob diff:

12c12
<           "hashValue": "96d379f619825c2af568965f6eb366e4521d476c0a23de3812988ffefa80312d550da541b0e6d200ae1efaaf6a03acc2cd3382655d889bd4a051098be246fa82"
---
>           "hashValue": "2af8b1e2b75fe924974d0c21717696747607938bc35012fb1aeb3fd3ffb57bc2a9016641f79c077dab83ba14be82558bce0ca652ab82a4f826472fe7ccae9d08"
25c25
<           "hashValue": "fd739809833a78e6f4b63aa477307288edec7c2fe0480089cf0216a023f5e977be69ffcaa6b9dd5898608aa35bac834f44fdabeb33fdf96606471e49e0ca1b94"
---
>           "hashValue": "32e2c702f84e3fa3a5ac077b5b33dbcb72b7d040e2b18861bdf441b9c8724b1c3c53fbadf3154080ffbd987a35eef4b9b5884afe56ee42819dc79bad50395a06"
36c36
<           "hashValue": "11d7e2ac362ceba35747317761f873742b061563a2e0b96c3a379e5b5bc09461f078b01dfe526e5674ddc2f4a5aa4de44adc622baba17442ccd6c5f0d1a31b6b"
---
>           "hashValue": "4cb83077325ed3ede97de0e6498a99e20d6cdcfa728f765d5f3faca1ca2e638984ba8d286d0f8d5cb039f579d4f41b3b5cfdafc3c7b55ba8691208f946e06e46"
47c47
<           "hashValue": "6fe5d258ba46d9db74f28e0b95419c624831db3988d9a32bb4c603578ae7ca3cd918564259b3ba1e0517b93c48a043f9f7820f6f6474714b6d74bad3f1dbb11b"
---
>           "hashValue": "984d3b438146d1180b6c37d54793fadb383f4585e9a13f0ec695f75b27b50db72d7f5f0ef218a6313302829ba83778c348d37c4d9e811c0dba7c04ef4fb04672"

At first this confused me: There are only 4 changes. I believe the hash for 4.10.2449.0-mac-x64.zip is still the same - how curious!

Changes are live.

Much appreciated! Good spot on the Mac hashes being the same. That is curious. My understanding was that all CDMs needed to be repushed to update a single one, but clearly that is not the case given the above.

:sigh: looks like the Mac64 values have changed and they went through after regenerating the last set of hashes. Sorry to be a bother, but could we get yet another update?

{
  "hashFunction": "sha512",
  "name": "Widevine-4.10.2449.0",
  "schema_version": 1000,
  "vendors": {
    "gmp-widevinecdm": {
      "platforms": {
        "Darwin_aarch64-gcc3": {
          "fileUrl": "https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-mac-arm64.zip",
          "filesize": 6641996,
          "hashValue": "2af8b1e2b75fe924974d0c21717696747607938bc35012fb1aeb3fd3ffb57bc2a9016641f79c077dab83ba14be82558bce0ca652ab82a4f826472fe7ccae9d08"
        },
        "Darwin_x86_64-gcc3": {
          "alias": "Darwin_x86_64-gcc3-u-i386-x86_64"
        },
        "Darwin_x86_64-gcc3-u-i386-x86_64": {
          "fileUrl": "https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-mac-x64.zip",
          "filesize": 7213441,
          "hashValue": "d2c122a56becf1cfe4822d0d4a0cab1470e9f1f382bd42c81c31d5fa71c77f2f9d840099fdf8b43ae11d8d87bc937c0c3090291ca1c55c2d043e5223da4fb64f"
        },
        "Linux_x86_64-gcc3": {
          "fileUrl": "https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-linux-x64.zip",
          "filesize": 6581254,
          "hashValue": "32e2c702f84e3fa3a5ac077b5b33dbcb72b7d040e2b18861bdf441b9c8724b1c3c53fbadf3154080ffbd987a35eef4b9b5884afe56ee42819dc79bad50395a06"
        },
        "Linux_x86_64-gcc3-asan": {
          "alias": "Linux_x86_64-gcc3"
        },
        "WINNT_aarch64-msvc-aarch64": {
          "alias": "WINNT_x86-msvc"
        },
        "WINNT_x86-msvc": {
          "fileUrl": "https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-win-x86.zip",
          "filesize": 6398951,
          "hashValue": "4cb83077325ed3ede97de0e6498a99e20d6cdcfa728f765d5f3faca1ca2e638984ba8d286d0f8d5cb039f579d4f41b3b5cfdafc3c7b55ba8691208f946e06e46"
        },
        "WINNT_x86-msvc-x64": {
          "alias": "WINNT_x86-msvc"
        },
        "WINNT_x86-msvc-x86": {
          "alias": "WINNT_x86-msvc"
        },
        "WINNT_x86_64-msvc": {
          "fileUrl": "https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2449.0-win-x64.zip",
          "filesize": 6840150,
          "hashValue": "984d3b438146d1180b6c37d54793fadb383f4585e9a13f0ec695f75b27b50db72d7f5f0ef218a6313302829ba83778c348d37c4d9e811c0dba7c04ef4fb04672"
        },
        "WINNT_x86_64-msvc-x64": {
          "alias": "WINNT_x86_64-msvc"
        },
        "WINNT_x86_64-msvc-x64-asan": {
          "alias": "WINNT_x86_64-msvc"
        }
      },
      "version": "4.10.2449.0"
    }
  }
}

No worries. Updated.

Could we please roll this out to release, ESR, and replace all instances of 4.10.2391.0 with this CDM? Clients who can accept the 4.10.2391.0 CDM should have compatibility with this one, so we can have them on the most up to date CDM + simplify our rules.

Done!