Bug 1236975 - Re-enable SHA-1 certificates r=keeler,rbarnes

This commit is contained in:
Richard Barnes 2016-01-05 12:36:17 -05:00
parent 69a0d7750b
commit d561cbc3fe
2 changed files with 4 additions and 4 deletions

View File

@ -1405,8 +1405,8 @@ pref("security.insecure_password.ui.enabled", false);
// 1 = allow MITM for certificate pinning checks.
pref("security.cert_pinning.enforcement_level", 1);
// 2 = allow SHA-1 only before 2016-01-01
pref("security.pki.sha1_enforcement_level", 2);
// 0 = allow SHA-1
pref("security.pki.sha1_enforcement_level", 0);
// Required blocklist freshness for OneCRL OCSP bypass
// (default is 1.25x extensions.blocklist.interval, or 30 hours)

View File

@ -497,8 +497,8 @@ pref("security.mixed_content.block_active_content", true);
// Enable pinning
pref("security.cert_pinning.enforcement_level", 1);
// Allow SHA-1 certificates only before 2016-01-01
pref("security.pki.sha1_enforcement_level", 2);
// Allow SHA-1 certificates
pref("security.pki.sha1_enforcement_level", 0);
// Required blocklist freshness for OneCRL OCSP bypass
// (default is 1.25x extensions.blocklist.interval, or 30 hours)