It would be really useful for testing of cross-domain security stuff, document.domain, etc, if we had several different CNAMEs that all pointed to bugzilla (so we could attach testcases that effectively have different parts in different domains). I propose the following cnames (or something similar): test1.mozilla.org test2.mozilla.org test3.mozilla.org sub1.test1.mozilla.org sub2.test1.mozilla.org sub1.test2.mozilla.org sub2.test2.mozilla.org Would that be reasonable?

Does the fact that it's SSL confuse anything?

Well, the cert won't match the hostname unless we do something... I'd rather we did something, but even if we don't the CNAMEs would be useful. I'm not sure whether they'd work with XMLHttpRequest and such, and I'd really like it if they did....

The cert is for *.mozilla.org. As long as it ends in mozilla.org and only has one part before that, the cert will match. I was more concerned if that would have other side effects on the tests you're running since I think the security constraints on scripts are different on SSL than they are in the clear. But I don't know much about it.

I'm interested in feedback from dveditz and/or jruderman about this before I proceed. Besides the question I brought up in the previous comment, I'm also interested in opinions on whether Bugzilla is really the right place to test this stuff.

How will this interact with the fix for bug 38862?

As long as all the hostnames involved point to the same IP, not at all, I would think.

I'm all for it, I've already created testcases that rely on using the current machine name recluse, but that's fragile. Bugzilla is not the place for testing (experimentation), but it's definitely the place for test *cases*. Otherwise they get remotely hosted and tend to go away as students graduate, people change ISPs, or housecleaning murders innocent old files. Especially for security bugs, if we can save QA from having to set up servers by having the testcase live in the bug then we can verify them more accurately and ship releases faster. ObNit: "test" names might attract the wrong sort, and might conflict with things QA folks already have or will want. If there's ever a plan to fix bug 38862 we could vary the name chosen for that. Or: attachments.m.o bugzillatest.m.o bugzillatc.m.o //tc for testcase bugs#.m.o // #== 1..N, probably N==3 test#.bugzilla.m.o // test OK as BMO subdomain

Note that I know we have DOM bugs for which correct tests would need at least test1.mozilla.org sub1.test1.mozilla.org sub2.test1.mozilla.org sub1.test2.mozilla.org or equiv (that is, two different subdomains of one domain, and a subdomain of another domain).

This bug might get more traction in Server Operations... Gerv

(In reply to comment #8) > Note that I know we have DOM bugs for which correct tests would need at least > > test1.mozilla.org > sub1.test1.mozilla.org > sub2.test1.mozilla.org > sub1.test2.mozilla.org Where are these to point to? bugzilla.mozilla.org ?

Yes. Actually, add test2.mozilla.org to that list...

Is there any issue if I preface each of these with bugzilla to avoid any future namespace collisions? > test1.mozilla.org > test2.mozilla.org > sub1.test1.mozilla.org > sub2.test1.mozilla.org > sub1.test2.mozilla.org

You mean like test1.bugzilla.mozilla.org? I _think_ that should be OK for what we want.

Added the following: test1.bugzilla IN CNAME bugzilla test2.bugzilla IN CNAME bugzilla sub1.test1.bugzilla IN CNAME bugzilla sub2.test1.bugzilla IN CNAME bugzilla sub1.test2.bugzilla IN CNAME bugzilla root@boris (/var/named/external/) 6> host test1.bugzilla.mozilla.org test1.bugzilla.mozilla.org is an alias for bugzilla.mozilla.org.

This doesn't actually work, sorry. See https://bugzilla.mozilla.org/attachment.cgi?id=247551 or even just https://test1.bugzilla.mozilla.org/attachment.cgi?id=247550 Perhaps the web server config also needs tweaking?

OK, these have been added to the apache config as well.

Awesome. Verified that the testcase now works. Thanks!