Commit Graph

2346 Commits

Author SHA1 Message Date
Ehsan Akhgari
9b1a4d8138 Backed out changeset 4b792c35d0be (bug 1041325) because of build bustage 2014-07-20 19:19:05 -04:00
Ehsan Akhgari
16367b70ab Bug 1041325 - Use intrin.h for _ReturnAddress in the chromium sandbox code; r=bbondy 2014-07-20 19:05:44 -04:00
Ryan VanderMeulen
ff865012d8 Merge m-c to inbound. a=merge 2014-07-20 15:14:23 -04:00
ffxbld
9b268f3bb8 No bug, Automated HPKP preload list update from host bld-linux64-spot-477 - a=hpkp-update 2014-07-19 03:17:35 -07:00
ffxbld
cbb9460772 No bug, Automated HSTS preload list update from host bld-linux64-spot-477 - a=hsts-update 2014-07-19 03:17:32 -07:00
Alexandre Poirot
09c66c2ebd Bug 1027242 - Blacklist mulet's failing tests + expose 'mulet' to ini files; fix previous bustage on a CLOSED TREE, r=ahal 2014-07-02 15:40:56 -07:00
Jonathan Griffin
0cd20a2c49 Backout 4f6d9db92389 for bustage on a CLOSED TREE 2014-07-22 17:55:50 -07:00
Mike Hommey
b99bba5c3f Bug 1041864 - Remove LIBRARY_NAMEs that aren't used. r=mshal 2014-07-23 08:39:56 +09:00
Alexandre Poirot
c044256760 Bug 1027242 - Blacklist mulet's failing tests + expose 'mulet' to ini files. r=ahal 2014-07-02 15:40:56 -07:00
Camilo Viecco
1cf5856cb9 Bug 1004353 - Enable pinning for TOR websites. r=mmc
--HG--
extra : rebase_source : d880368dd9eaaafcde353ce187438ae074994bfa
2014-07-22 14:28:52 -07:00
Jed Davis
1cdd0d8544 Bug 1037211 - Remove MOZ_CONTENT_SANDBOX_REPORTER by making it always true. r=kang r=ted
--HG--
extra : amend_source : 450d51dab077794e194bf407044de95627de0cde
2014-07-17 14:57:28 -07:00
Richard Barnes
9058c6eba3 Bug 1034852 - Add support for AES-KW to WebCrypto API r=keeler 2014-07-19 07:04:00 -05:00
Richard Barnes
a978414e83 Bug 1025230 - Allow import/export of JWK-formatted keys in WebCrypto r=bz,keeler 2014-07-19 08:25:00 -05:00
Makoto Kato
12c0753107 Bug 984033 - Large OOM in nsStreamLoader::WriteSegmentFun. r=honza 2014-07-17 17:37:33 +09:00
Jed Davis
285d65221e Bug 1038900 - Dynamically allocate signal number for sandbox startup. r=kang 2014-07-16 13:37:00 +02:00
Tim Abraldes
2271b8aa31 bug 985252. Build sandbox code regardless of whether --enable-content-sandbox/MOZ_CONTENT_SANDBOX is provided. Enable sandboxing of GMP plugins. Enable SandboxBroker to set different security policies for different process types. r=bbondy, r=cpearce, r=bent 2014-07-16 16:01:34 -07:00
Wan-Teh Chang
971754ce50 Bug 1025729: Update NSS to NSS_3_17_BETA1.
Also includes fixes for bug 836658, bug 1026148, bug 1028582, bug 920719.
2014-07-16 14:26:11 -07:00
Cykesiopka
70596433c6 Bug 360126 - OCSP Delegated Responder Test. r=briansmith 2014-07-15 19:51:00 -04:00
Cykesiopka
2863e90900 Bug 360126 - Main tests. r=cviecco 2014-07-15 19:50:00 -04:00
Cykesiopka
65dfa136df Bug 360126 - Stop accepting certs that use RSA1023 or weaker; Original patch by Richard van den Berg. r=briansmith 2014-07-15 19:49:00 -04:00
Bob Owen
4f4b3629bb Bug 1035275 - Remove unused base Chromium code. r=bbondy 2014-07-07 13:59:11 +01:00
Brian Smith
e3618bd35b Bug 1038837: Factor out mozilla::pkix::Input into a separate header, r=mmc
--HG--
rename : security/pkix/lib/pkixder.h => security/pkix/include/pkix/Input.h
rename : security/pkix/lib/pkixutil.h => security/pkix/include/pkix/Result.h
extra : rebase_source : 09bac0a183932f721cdfd32936595867e4dc26ce
2014-07-13 13:17:36 -07:00
Brian Smith
7b3263e6c9 Bug 1038828: Replace mozilla::pkix::der::Result with uses of mozilla::pkix::Result, r=mmc
--HG--
rename : security/pkix/lib/pkixutil.h => security/pkix/include/pkix/Result.h
extra : rebase_source : e385af4bab665627aa5d434db04830065cbc641f
2014-07-15 10:33:49 -07:00
Jed Davis
ad5a014572 Bug 1038490 - Fix misuse of MOZ_WIDGET_GONK in Linux content process sandbox policy. r=kang
--HG--
extra : amend_source : 0a7fe8ca751b59102cbc23316b18982268306423
2014-07-14 18:35:56 -07:00
Jed Davis
ada7d21572 Bug 1038486 - Fix Linux desktop seccomp sandbox build on 32-bit x86. r=kang
--HG--
extra : amend_source : 130d2cbd485734997739ea96ac5d83c01899d8b0
2014-07-09 16:52:56 -07:00
Brian Smith
bc7b3b4b4c Bug 916629, Part 4: Unit tests for trust of delegated OCSP responder certificates for mozilla::pkix, r=keeler
--HG--
extra : rebase_source : c473285add9faee9a876677404935bdc253832cb
2014-07-10 21:20:17 -07:00
Brian Smith
1beed22447 Bug 916629, Part 3: Unit tests for OCSP responses signed by a delegated OCSP responder for mozilla::pkix, r=keeler
--HG--
extra : rebase_source : c2c78458aa674dcc1e1426a0efc81df19b73ac4f
2014-07-10 22:14:57 -07:00
Brian Smith
ba1f6e4228 Bug 916629, Part 2: Unit tests for "successful" OCSP responses for mozilla::pkix, r=keeler
--HG--
extra : rebase_source : 14633119755cbfd55fc3bfef9cf482de3d638b53
2014-07-15 10:09:26 -07:00
Brian Smith
e367b4a22f Bug 916629, Part 1: Unit tests for OCSP responses without responseBytes, r=keeler
--HG--
extra : rebase_source : 62ef4209745ff8f2c5a852beb1a9823cbe7c7ff4
2014-07-14 23:09:36 -07:00
jvoisin
7c10650a8f Bug 1035786 - Fix namespace bug in Linux sandbox LOG_ERROR macro. r=jld 2014-07-08 05:53:00 +01:00
Jed Davis
d9856e93b1 Bug 1035786 - Avoid warning-as-error sandbox build failure with an explicit cast. r=gdestuynder
getpid() is never negative, so this is safe.
2014-07-10 17:37:45 -07:00
Bob Owen
218decde34 Bug 1035786 - Fix member variable initialisation order in LogMessage stub in Linux Sandbox.cpp. r=jld 2014-07-09 12:32:49 +01:00
Tim Taubert
ca2ba72632 Bug 1026398 - Add support for RSA-OAEP to WebCrypto API r=rbarnes,bz,dkeeler
* * *
Bug 1026398 - Add RSA-OAEP tests r=rbarnes
2014-07-14 18:33:12 -07:00
Brian Smith
46bdbab7f8 Bug 1038098: Save intermediate certificates during TLS handshake, r=keeler
--HG--
extra : rebase_source : 99e2551e78bc8eac91174e5320c15623ede26642
extra : histedit_source : c4af1c24b95b1b3c8a86d06575645b6ffc5308a6
2014-07-14 16:43:33 -07:00
Brian Smith
8fd4eed261 Bug 1036105: Delegate digest operations to the TrustDomain in mozilla::pkix, r=keeler
--HG--
extra : rebase_source : dd8dc1243ea2e37955a15f2481e1c452311e90d8
extra : histedit_source : adc1a2035d41c608d3f0ebe14bba159b2857502d
2014-07-06 19:36:05 -07:00
Brian Smith
ac8cb082e7 Bug 1036107, Part 2: Test algorithm identifier parsing, r=keeler
--HG--
extra : rebase_source : c800d42856d81ba8cceaadde0caa98477b3008f4
extra : histedit_source : 71305fa34b435450525ae3a3e603aef065eaec14
2014-07-10 18:30:58 -07:00
Brian Smith
16a3da199e Bug 1036107, Part 1: Stop using CERTSignedData in mozilla::pkix, r=keeler
--HG--
extra : rebase_source : 94c49062ae3ddf755651f151e2d648543b10e1ad
extra : histedit_source : a7377bf1d9adb62e1c584e2adeb793aa074245fb
2014-07-10 19:00:32 -07:00
Birunthan Mohanathas
a3b4387964 Bug 1038417 - Convert tabs to spaces in moz.build files. r=gps 2014-07-14 15:58:10 -07:00
Monica Chew
c611beb0e3 Bug 1020485: Enable production mode for fxa (r=keeler) 2014-07-14 13:06:25 -07:00
Carsten "Tomcat" Book
845c7a4d1b merge mozilla-inbound to mozilla-central a=merge 2014-07-14 14:34:36 +02:00
ffxbld
6abb482be9 No bug, Automated HPKP preload list update from host bld-linux64-spot-135 - a=hpkp-update 2014-07-12 03:13:54 -07:00
ffxbld
d7e396dc18 No bug, Automated HSTS preload list update from host bld-linux64-spot-135 - a=hsts-update 2014-07-12 03:13:52 -07:00
Ryan VanderMeulen
27a0fdf6de Merge inbound to m-c. a=merge 2014-07-11 16:34:56 -04:00
ffxbld
2489cb2f72 No bug, Automated HPKP preload list update from host bld-linux64-spot-1092 - a=hpkp-update 2014-07-11 06:19:00 -07:00
ffxbld
3b8181f62d No bug, Automated HSTS preload list update from host bld-linux64-spot-1092 - a=hsts-update 2014-07-11 06:18:58 -07:00
Ed Morley
d847619d99 Backed out changeset 5460c4558253 (bug 1026398) for test_WebCrypto.html timeouts on B2G; CLOSED TREE 2014-07-11 17:01:44 +01:00
Mike Hommey
07267c6f7f Bug 1036864 - Remove EXPORT_LIBRARY. r=mshal 2014-07-11 19:06:55 +09:00
Brian Smith
66d7df7a7b Bug 1036765: Disable cipher suites that are not in the "Browser Cipher Suite" proposal that are still enabled, r=keeler
--HG--
extra : rebase_source : af06ac8fe6c2132b942ca4a1a50a12505b3ca508
extra : histedit_source : 2127635c80fbff235136980990993e753509e802
2014-07-09 18:33:38 -07:00
Harsh Pathak
0f97085326 Bug 1036080 - Fix addCertFromBase64() to update trust bits of existing permanent certificates. r=keeler 2014-07-10 11:38:00 +02:00
Richard Barnes
293d38e687 Bug 1021607 - Add support for PBKDF2 to WebCrypto API. r=bz
0001 - Introduce BasicSymmetricKeyAlgorithm r=rbarnes
0002 - Implement import key operation for PBKDF2 r=bz,rbarnes
0003 - Introduce MapAlgorithmNameToMechanism() r=rbarnes
0004 - Implement derive bits operation for PBKDF2 r=rbarnes,keeler,bz
0005 - Introduce GetKeySizeForAlgorithm() r=rbarnes
0006 - Implement derive keys operation for PBKDF2 r=rbarnes,bz
2014-07-12 20:06:00 +02:00
Richard Barnes
1011dd627f Bug 1026398 - Add support for RSA-OAEP to WebCrypto API. r=bz,dkeeler 2014-07-10 13:44:00 +02:00
Nathan Yee
da5b38f868 Bug 1006671 - Remove unnecessary JSContext argument to nsContentUtils::GetContentSecurityPolicy. r=bholley 2014-07-10 19:25:00 +02:00
Monica Chew
7e4c6f1d21 Bug 1036142: Don't use kPublicKeyPinningPreloadListLength (r=keeler) 2014-07-09 12:58:40 -07:00
Brian Smith
53e0350589 Bug 1035942: Decide whether to consider end-entity CN as a dnsName in CheckNameConstraints instead of in BuildCertChain, r=cviecco
--HG--
extra : rebase_source : 19c5949253e4e631b0bd841f17f000885001b327
extra : histedit_source : dce57eb862a2a13d07d11fdf6917afcf6cb4136c
2014-07-08 13:04:17 -07:00
Brian Smith
d66c74e652 Bug 1035009: Stop using CERTCertList in mozilla::pkix, r=keeler
--HG--
extra : rebase_source : fc2b39e5e2b44fea365914e83a7d1f2dc9b784bc
extra : histedit_source : b40e5e8cb106fe87f6f065b01ca43adb0bf3a605
2014-07-06 15:55:38 -07:00
Mike Shal
fb0a8cf672 Bug 1036569 - Fix NSS_STATIC_LIBS with carriage return on Windows; r=glandium 2014-07-09 14:38:29 -04:00
Camilo Viecco
07061b97ea Bug 1030204 - 2/2 Tests for Name constraints for ANSSI(DCISS) Root cert in psm. r=keeler
--HG--
extra : rebase_source : 0b64f7206446a8c414df5b0f4a9653f0180b8b44
2014-07-08 16:16:22 -07:00
Camilo Viecco
863d637d5c Bug 1030204 - 1/2 Name constraint ANSSI(DCISS) Root cert in mozilla::pkix. r=keeler
--HG--
extra : rebase_source : 221ca75af601649731bf83cace2e6b0edcd4b2ab
2014-07-08 16:16:26 -07:00
Monica Chew
085607a75a Bug 1035923: Remove deprecated certs from google_root_pems (r=keeler) 2014-07-08 16:01:29 -07:00
Benoit Jacob
539a8b5902 Bug 1035394 - Fix dangerous public destructors in security/ - r=bsmith 2014-07-08 17:23:18 -04:00
Camilo Viecco
6ce12bd4a1 Bug 827264 - Add some temporary android logging to nss. r=blassey
--HG--
extra : rebase_source : 8f16d6b6cbaed2ef51fb5d1ecf7edbb0b8568ffe
2014-06-27 13:55:11 -07:00
Chris Peterson
65da3b81ed Bug 1035607 - Remove unused empty_null to fix -Wunused warning-as-error in security/pkix. r=briansmith 2014-07-07 20:37:21 -07:00
Brian Smith
8d65effbf6 Bug 1035470: Use signature algorithm OID instead of digest algorithm OID in the signature field of certificates in mozilla::pkix tests, r=cviecco
--HG--
extra : rebase_source : 99b1d5c0739221e90d4b04738f9362135f42a23c
2014-07-07 00:46:10 -07:00
David Keeler
247c6dfcfe bug 940506 - remove nsIRecentBadCerts and implementation r=briansmith 2014-07-07 15:33:24 -07:00
Brian Smith
876b584f49 Bug 1035008, Part 2: Modify existing mozilla::pkix GTests to follow naming conventions, r=mmc
--HG--
rename : security/pkix/test/gtest/pkix_cert_chain_length_tests.cpp => security/pkix/test/gtest/pkixbuild_tests.cpp
rename : security/pkix/test/gtest/pkix_cert_extension_tests.cpp => security/pkix/test/gtest/pkixcert_extension_tests.cpp
rename : security/pkix/test/gtest/pkix_ocsp_request_tests.cpp => security/pkix/test/gtest/pkixocsp_CreateEncodedOCSPRequest_tests.cpp
extra : rebase_source : 05035197c37cd2fecf0c6e2f5231eeabfd4f64fd
extra : histedit_source : db050cf69b025e34e992a68b8b57665608c6a3d9
2014-07-05 22:14:25 -07:00
Brian Smith
c178453b72 Bug 1035008, Part 1: Document naming convention for mozilla::pkix GTests, r=mmc
--HG--
extra : rebase_source : 8239f56513d8aba59eb8851bd219295fb6920b64
extra : histedit_source : 90856c24e66c7cc451c65cfd72a005cb2949085a
2014-07-06 15:59:08 -07:00
Brian Smith
358b82e03b Bug 1034636: Remove mozilla::pkix::ScopedCERTCertifciate and mozilla::pkix::ScopedPLArenaPool, r=mmc
--HG--
extra : rebase_source : 68e6da2f1e1c7fa678ef4cc81d23cc6298709108
extra : histedit_source : feba4c589dbf004ee50e2dea1fca0809f8f97674
2014-07-03 21:49:56 -07:00
Brian Smith
0c6544f1f0 Bug 1033563, Part 3: Change mozilla::pkix::TrustDomain::FindPotentialIssuers API to be iterator-like, r=keeler
--HG--
extra : rebase_source : e8c734ecb2de2c52dd8909c8b48f4bdb09d0128e
2014-07-02 16:15:16 -07:00
Brian Smith
f13fdc263c Bug 1033563, Part 2: Convert mozilla::pkix::BuildForwardInner into an iterator-type thing, r=keeler
--HG--
extra : rebase_source : 175e308191441035db4f3eed4a855205bab1a3f3
2014-07-02 15:03:58 -07:00
Brian Smith
f628a48e8e Bug 1033563, Part 1: Move revocation checking code from mozilla::pkix::BuildForward to BuildForwardInner, r=keeler
--HG--
extra : rebase_source : 0f11eb64ffb00d953c39d81f4877067bd173eadd
2014-07-02 12:21:41 -07:00
Brian Smith
549189d132 Bug 1029247, Part 2: Parse certificates using mozilla::pkix::der, r=keeler
--HG--
extra : rebase_source : e093922497d005734c590a59f175993a7715bce8
2014-07-03 16:59:42 -07:00
Brian Smith
f58287e30a Bug 1035034: Fix typo in CertVerifier, r=cviecco
--HG--
extra : rebase_source : b8871ee8cf1e156ef48d363ea49e8b82ab268d98
2014-07-06 19:15:13 -07:00
Monica Chew
9e4228ecad Bug 1027133: Set test_mode=false for *.twitter.com (r=keeler) 2014-07-07 08:58:13 -07:00
Jan de Mooij
3c7459b21a Bug 1034191 - Make nsDependentJSString users work with Latin1 strings and nursery-allocated strings. r=bz 2014-07-05 17:30:54 +02:00
Brian Smith
66ce2813a7 Bug 1029247, Part 1: Add new overload to mozilla::pkix::bind, r=keeler
--HG--
extra : rebase_source : 7a9dc499ed6ad038e4840953744a9fcd6578290b
2014-06-21 18:06:30 -07:00
Brian Smith
f1d1e65aca Bug 1034634: Improve ScopedNSSTypes.h to compile without warnings, r=mmc
--HG--
extra : rebase_source : a9cbc1ab3083f1e893552c49a4518453f3b7d1b7
2014-07-03 20:40:46 -07:00
Brian Smith
d35cdc1555 Bug 1034632: Fix suppression of warnings for MOZILLA_PKIX_ENUM_CLASS, r=mmc
--HG--
extra : rebase_source : 962fa75dab803f1d139096fa5d41b4b656e32f86
2014-07-03 20:41:07 -07:00
Brian Smith
840e9d16c9 Bug 1034412: Clarify definition of mozilla::pkix::der::SEQUENCE, r=mmc
--HG--
extra : rebase_source : 3e139a66133c1d7916fbc13c7cec2b12e9545122
2014-06-30 21:58:34 -07:00
Zack Weinberg
1998b1670b Bug 234856: add automated test case (fixed by bug 235230). r=kaie 2014-07-04 12:22:32 -04:00
Marco Castelluccio
c56414d138 Bug 1029674 - Fix installation of apps with custom origin. r=myk,keeler
--HG--
rename : toolkit/webapps/tests/test_packaged_launch.xul => toolkit/webapps/tests/test_custom_origin.xul
2014-07-04 15:23:16 +02:00
Harsh Pathak
fffec87019 Bug 643041 - Merge nsIX509Cert2 and nsIX509Cert3 into nsIX509Cert, and merge nsIX509CertDB2 into nsIX509CertDB. r=keeler
--HG--
extra : rebase_source : 5283c637e45dbee9f741d56cda54fdef1afce16e
2014-07-03 22:09:24 -07:00
Brian Smith
eabf3ca82e Bug 1019770: Add tests for checking of notAfter and notBefore, r=cviecco
--HG--
extra : rebase_source : 614e002886ffa73e7e38218ebb3ea2509edcd1a4
2014-06-30 19:12:35 -07:00
Monica Chew
92f36e6b6f Bug 1033872: Split off api.accounts.firefox.com into a separate pinset (r=keeler) 2014-07-03 16:41:57 -07:00
Kai Engert
b03f02387d Bug 1029561, Update to NSS 3.16.3 after July 1st to include root CA updates, r=rrelyea 2014-07-03 17:24:18 +02:00
Jed Davis
dd6575be07 Bug 956961 - Stop disabling sandboxing when DMD is enabled. r=kang
--HG--
extra : rebase_source : 4737cfd613c1ddee8e1a4340e819eddc151e73f7
extra : histedit_source : 2d2610a775a3ae986157f61ef3797f4e88baa922
2014-07-02 11:28:48 -07:00
Brian Smith
747d5ce9c9 Bug 1033103: Add and use mozilla::pkix::der::ExpectTagAndGetTLV, r=keeler
--HG--
extra : rebase_source : 16461be12705998799f5c84e2043d68b0c431cb0
2014-07-01 13:25:43 -07:00
Brian Smith
f98c380254 Bug 1033092: Add unit tests for mozilla::pkix::der::ExpectTagAndGetValue, r=keeler
--HG--
extra : rebase_source : 8ad8960969e5ee5bf47054f1c285a85cbbdb18cf
2014-07-01 16:28:45 -07:00
Wes Kocher
929077356e Backed out changeset 5206957b4f83 (bug 940506) for build bustage on a CLOSED TREE 2014-07-02 18:15:55 -07:00
Wes Kocher
20f50977c0 Merge m-c to inbound 2014-07-02 17:44:20 -07:00
Wes Kocher
6b3e1ca139 Merge inbound to m-c a=merge 2014-07-02 16:31:17 -07:00
David Keeler
51b554fb6a bug 940506 - remove nsIRecentBadCerts and implementation r=briansmith 2014-07-02 11:15:26 -07:00
ffxbld
48104012ec No bug, Automated HPKP preload list update from host b-linux64-hp-0034 - a=hpkp-update 2014-07-02 10:05:51 -07:00
ffxbld
50c4cd24ee No bug, Automated HSTS preload list update from host b-linux64-hp-0034 - a=hsts-update 2014-07-02 10:05:48 -07:00
Wes Kocher
f174cd042e Backed out 3 changesets (bug 956961) for non-unified build bustage
Backed out changeset f1be89cb58b9 (bug 956961)
Backed out changeset 272b01e4f856 (bug 956961)
Backed out changeset 56907af18c66 (bug 956961)
2014-07-02 15:03:29 -07:00
Brian Smith
0c5e4c3465 Bug 1032947: Change CheckNameConstraints to construct CERTCertificate instances when needed, r=keeler
--HG--
extra : rebase_source : d0bf802f4ff3fe9900ed7444c046617aa27faea9
2014-06-26 14:22:20 -07:00
Brian Smith
26dc5a975e Bug 1019770: Add more tests for parsing GeneralizedTime and TimeChoice, r=cviecco
--HG--
extra : rebase_source : f38fd90973b4bdf2cff5887c7d48f7e7b2a7126b
2014-07-01 18:01:28 -07:00
Brian Smith
35167f7fb2 Bug 1019770, Part 2: modify existing GeneralizedTime tests to test TimeChoice too, r=cviecco
--HG--
extra : rebase_source : fe0b6f06a374dd1e50233c352031e6fdbde1c5f9
2014-06-24 10:51:53 -07:00
Brian Smith
ffb9b0ea05 Bug 1019770: Use mozilla::pkix::der to decode times and certificate validity period, r=cviecco
--HG--
extra : rebase_source : 2b1fa83599c4d0748757b25b56f65e10d41504c8
2014-06-24 21:48:12 -07:00
Brian Smith
c0edfa6daf Bug 1031952: Remove preferences for obsolete cipher suites, r=keeler
--HG--
extra : rebase_source : 22eaa4fbeb20d9b9524d550c1979f5ec27d963ac
2014-06-29 15:15:45 -07:00
Wes Kocher
af7ae55f0c Backed out changeset 6728977a3687 (bug 1031952) to fix bustage on a CLOSED TREE 2014-07-01 17:44:18 -07:00
Wes Kocher
e94fb2297d Backed out changeset 5ea9b7bd2db5 (bug 1019770) 2014-07-01 17:43:47 -07:00
Wes Kocher
e28f2353af Backed out changeset 981f8345edd8 (bug 1019770) 2014-07-01 17:43:43 -07:00
Wes Kocher
f8ac718627 Backed out changeset 91b03a644dbe (bug 1019770) 2014-07-01 17:43:38 -07:00
Wes Kocher
33290e8d10 Backed out changeset f97578949399 (bug 1032947) 2014-07-01 17:43:33 -07:00
Brian Smith
215f38b298 Bug 1032947: Change CheckNameConstraints to construct CERTCertificate instances when needed, r=keeler
--HG--
extra : rebase_source : 64bd4c390f708213242e0d4987b7117b0049d02a
2014-06-26 14:22:20 -07:00
Brian Smith
98aa2aa582 Bug 1019770: Add more tests for parsing GeneralizedTime and TimeChoice, r=cviecco
--HG--
extra : rebase_source : 5e8171a2a849d61866ccdff33f06d96f04fc4bd5
2014-06-30 17:11:56 -07:00
Brian Smith
8480ae43f4 Bug 1019770, Part 2: modify existing GeneralizedTime tests to test TimeChoice too, r=cviecco
--HG--
extra : rebase_source : 8c891cc5269482d1ccf4c1c688e5576a2b8864f8
2014-06-24 10:51:53 -07:00
Brian Smith
7d84462b7b Bug 1019770: Use mozilla::pkix::der to decode times and certificate validity period, r=cviecco
--HG--
extra : rebase_source : 05e348b4ae9bb88fdd0895ec5dcec55993ca17c4
2014-06-24 21:48:12 -07:00
Brian Smith
e9bc359f89 Bug 1031952: Remove preferences for obsolete cipher suites, r=keeler
--HG--
extra : rebase_source : 92ccc85ffe5db10649242d8796daecc6833ca14a
2014-06-29 15:15:45 -07:00
Monica Chew
9afcf9b174 Bug 1012875: Expire pins in 8 weeks once they reach stable (r=keeler) 2014-07-02 11:34:04 -07:00
Jed Davis
49f614d6ca Bug 956961 - Stop disabling sandboxing when DMD is enabled. r=kang
--HG--
extra : amend_source : 66f2453794e6a8a581e1564e786cfc8cac1f6bbd
2014-07-02 11:28:48 -07:00
David Keeler
2a5b4f9664 bug 1019770 - follow-up to remove unused const GENERALIZED_TIME_LENGTH r=briansmith 2014-07-02 10:04:31 -07:00
David Keeler
2ed80eebae bug 1025332 - use nsIDocshell.failedChannel in certificate exception dialog instead of recent bad certs service r=jaws 2014-06-13 16:13:09 -07:00
Kyle Huey
d2738ad8c9 Bug 1031051: Part 18 - Kill the old XPIDL-based event generator. r=smaug 2014-06-30 16:02:04 -07:00
Kyle Huey
bf1fd04304 Bug 1031051: Part 8 - Migrate SmartCardEvent to the WebIDL code generator. r=smaug 2014-06-30 16:02:02 -07:00
David Keeler
e81525f1dc bug 1005266 - disable test_ocsp_timeout.js on windows for frequent intermittent failures r=mmc 2014-06-30 13:14:31 -07:00
Joshua Cranmer
85bb6bc254 Fix spelling mistake in changeset 3018d1b623ab (bug 1025998), r=bustage-fix a=bustage-fix
--HG--
extra : amend_source : 021b1b14fee5068e2176be9395c5c461f3333947
2014-06-29 21:34:47 -05:00
Joshua Cranmer
439281d591 Bug 1025998 - add a missed symbol for comm-central debug builds, rs=glandium, a=philor for landing on m-c directly. 2014-06-29 17:46:13 -05:00
Phil Ringnalda
02bb2e2ec7 Merge m-i to m-c, a=merge 2014-06-28 17:39:03 -07:00
ffxbld
61e9de60c8 No bug, Automated HSTS preload list update from host bld-linux64-spot-147 - a=hsts-update 2014-06-28 03:40:19 -07:00
Nathan Froyd
0d91e4eaf7 Bug 1025998 - part 2 - use hand-rolled .def files for linking NSS; r=glandium 2014-06-24 15:36:10 -04:00
Brian Smith
fc1da5970d Bug 1030475: Use a valid id-ce-inhibitAnyPolicy extension value for test pkix_cert_extensions.KnownCriticalCEExtension, r=keeler
--HG--
extra : rebase_source : 34972b2842d65ad6d716b0fbccf4984f9efd1fbf
2014-06-25 17:14:32 -07:00
Brian Smith
3ecc948391 Bug 1030478: Make the AIA extension used in pkix_cert_extensions.CriticalAIAExtension less invalid, r=keeler
--HG--
extra : rebase_source : 42241cb4c8d2ba4e3e0ccc937059f9510765314b
2014-06-25 16:42:50 -07:00
Brian Smith
9a8e340c2d Bug 1031022: Go back to accepting explicit encoding of v1 for certificates and OCSP responses, r=cviecco
--HG--
extra : rebase_source : f0adf63879a48db6c036cce1a3e9a7b65e44fc4e
2014-06-26 17:03:48 -07:00
Carsten "Tomcat" Book
39ff1551ea merge fx-team to mozilla-central a=merge 2014-06-26 15:33:24 +02:00
Wes Kocher
c8c625d1b9 Merge m-c to fx-team a=merge 2014-06-25 18:44:50 -07:00
Nathan Froyd
5bbf5e513f Backout bcd72aabb661, 1ed1c6212f4c, and 8d6f286139ef (bug 1025998) for xpcshell bustage leading to this CLOSED TREE 2014-06-25 17:00:06 -04:00
Nathan Froyd
3de99d0ace Bug 1025998 - also export symbols groveled out of NSS by ctypes; r=me to reopen this CLOSED TREE 2014-06-25 15:14:49 -04:00
Brian Smith
bf76dd549d Bug 1029341: Factor out decoding of certificate/OCSP extensions, r=keeler
--HG--
extra : rebase_source : a1d66b75838e9dfad486f5654db6d977e5c1d97a
extra : histedit_source : 34e05d8b3d94500b9cb4f1e311f8fe526b97ba6e
2014-06-24 21:52:50 -07:00
Brian Smith
adfff88e33 Bug 1029364: Centralize version parsing in BackCert::Init, r=cviecco
--HG--
extra : rebase_source : 7e91710ed7cd6e68875c2d26f0b503835968e1f2
extra : histedit_source : e07446cad5edbf6cbb048304bc2b2af4395410db
2014-06-25 01:32:06 -07:00
Brian Smith
8503754c20 Bug 1029992, Improve AlgorithmIdentifier decoding in mozilla::pkix, r=cviecco
--HG--
extra : rebase_source : dec7d3e00afe3a9e433f789baf09c0c41679b0e2
extra : histedit_source : 47657cfde7a266b5d5322b024800abe316e9dbd6
2014-06-24 21:47:50 -07:00
Nathan Froyd
5a67e1f345 Bug 1025998 - part 2 - use hand-rolled .def files for linking NSS; r=glandium 2014-06-24 15:36:10 -04:00
Kai Engert
5f9fdca404 Bug 1020695, Update Mozilla to use NSS 3.16.2, r=wtc 2014-06-25 11:25:59 +02:00
Carsten "Tomcat" Book
51ab717a65 Backed out changeset 4f21e9bc729a (bug 1029364) for B2G Device and Emulator Bustage on a CLOSED TREE 2014-06-25 10:01:17 +02:00
Carsten "Tomcat" Book
14df6ed8f0 Backed out changeset a10da316a35f (bug 1029341) 2014-06-25 10:00:42 +02:00
Brian Smith
8a23d2f4a9 Bug 1029341: Factor out decoding of certificate/OCSP extensions, r=keeler
--HG--
extra : rebase_source : e307bea95d29cf78c9eaa7ddb1f2b2c195a59dc9
2014-06-24 21:52:50 -07:00
Brian Smith
54eb2e2841 Bug 1029364: Centralize version parsing in BackCert::Init, r=cviecco
--HG--
extra : rebase_source : 79d5f29c2af1ec77d6bb8a7936bb0a17f28e8d52
2014-06-19 16:17:28 -07:00
Jim Blandy
4d6a633bba Bug 914753: Make Emacs file variable header lines correct, or at least consistent. DONTBUILD r=ehsan
The -*- file variable lines -*- establish per-file settings that Emacs will
pick up. This patch makes the following changes to those lines (and touches
nothing else):

 - Never set the buffer's mode.

   Years ago, Emacs did not have a good JavaScript mode, so it made sense
   to use Java or C++ mode in .js files. However, Emacs has had js-mode for
   years now; it's perfectly serviceable, and is available and enabled by
   default in all major Emacs packagings.

   Selecting a mode in the -*- file variable line -*- is almost always the
   wrong thing to do anyway. It overrides Emacs's default choice, which is
   (now) reasonable; and even worse, it overrides settings the user might
   have made in their '.emacs' file for that file extension. It's only
   useful when there's something specific about that particular file that
   makes a particular mode appropriate.

 - Correctly propagate settings that establish the correct indentation
   level for this file: c-basic-offset and js2-basic-offset should be
   js-indent-level. Whatever value they're given should be preserved;
   different parts of our tree use different indentation styles.

 - We don't use tabs in Mozilla JS code. Always set indent-tabs-mode: nil.
   Remove tab-width: settings, at least in files that don't contain tab
   characters.

 - Remove js2-mode settings that belong in the user's .emacs file, like
   js2-skip-preprocessor-directives.
2014-06-24 22:12:07 -07:00
Brian R. Bondy
9886164729 Bug 598615 - Rename HAVE_64BIT_OS to HAVE_64BIT_BUILD. r=ted 2014-06-24 22:16:25 -04:00
Wes Kocher
d9ec170da8 Backed out 2 changesets (bug 1027890) for B2G Windows Build bustage on a CLOSED TREE
Backed out changeset bcd694f0e95d (bug 1027890)
Backed out changeset 49cadfcde709 (bug 1027890)
2014-06-24 18:33:46 -07:00
Mike Hommey
f59abd2745 Bug 1027890 - Remove all sorts of build system code dedicated to pymake. r=gps 2014-06-25 08:38:28 +09:00
Cykesiopka
a29ee4ef6d Bug 270016 - Make the list of certs shown in the Delete/Distrust cert dialog scrollable. r=keeler 2014-06-23 23:51:00 +02:00
Brian Smith
7878e11fff Bug 1028643: Convert nsISignatureVerifier to use CertVerifier (mozilla::pkix) and move nsISignatureVerifier functionality to nsIDataSignatureVerifier, r=keeler
--HG--
extra : rebase_source : 14f6f5dedd7145d574ac5b4c86b6ad42b6716ae8
extra : histedit_source : f891fbe80c4ca9fc62849bc2d6d8ffad372a6bf0
2014-06-22 18:50:22 -07:00
Brian Smith
63d49eeb0e Bug 1028493: Remove unused stapledOCSPResponse parameter from CreateCetErrorRunnable, r=mmc
--HG--
extra : rebase_source : 6ceddadff81fd607b53de317dc841e334bc76621
extra : histedit_source : d05fe4430c880da25c4d361977218ceb416d8f0d
2014-06-20 19:43:09 -07:00
Benoit Jacob
8bf465bb60 Bug 1028588 - Fix dangerous public destructors in security/ - r=bsmith 2014-06-23 18:40:03 -04:00
Honza Bambas
c3a79a614e Bug 1023748 - Allow NTLMv1 over SSL/TLS by default, r=jduell 2014-06-23 19:43:40 +02:00
Ryan VanderMeulen
0c2067d9e5 Merge inbound to m-c. a=merge 2014-06-23 10:42:32 -04:00
ffxbld
d652fc38cc No bug, Automated HSTS preload list update from host bld-linux64-spot-1030 - a=hsts-update 2014-06-21 03:14:13 -07:00
Harsh Pathak
50c058f0fd bug 956147 - Use Scoped PLArenaPool in GetSubjectAltNames to avoid memory leaks. r=keeler. 2014-06-19 14:36:31 -07:00
Brian Smith
84f52d8461 Bug 1006812: Use mozilla::pkix::der to decode the key usage extension, r=keeler
--HG--
extra : rebase_source : e445c913994dc027e1179543d7b6cab2505e734d
2014-06-19 00:13:20 -07:00