Brian Smith
4268442c28
Bug 957667: Decouple OCSP stapling pref from the OCSP fetching pref, and couple the OCSP required pref to the OCSP fetching pref, r=keeler
...
--HG--
extra : rebase_source : 86cb86f76f4def579fcf07e479025852849c34f8
extra : source : 08115711a4e6e77971c9e872fb6c68e88ac9693e
2014-01-08 08:51:06 -08:00
Brian Smith
225d0f3c9e
Bug 959026: Add telemetry about cases where we don't do OCSP fetching when we expect to, r=keeler
...
--HG--
extra : rebase_source : f7e9826569325f497273a92eec5127c414baa8bc
extra : source : bb5bb5a1b571e54695a4c8d5be0cc447f29f0358
2014-01-12 19:31:40 -08:00
Ryan VanderMeulen
614d80980a
Backed out changesets 1b892043a386 and 0e14b3468b94 (bug 923304) and changeset 2e2c276950b9 (bug 950129) for xpcshell failures.
2014-01-13 18:00:34 -05:00
Ryan VanderMeulen
4d0972315d
Merge inbound to m-c.
2014-01-13 17:44:24 -05:00
Brian Smith
0d8a085890
Bug 923304, Part 2: Adjust EV tests, r=keeler
...
--HG--
extra : source : 97bf218ac3bb44e81074ca95877ca8b6414265b3
2013-12-28 11:28:49 -08:00
Brian Smith
a6fda06c4f
Bug 923304, Part 1: Add test for OCSP response signed by CA that has an OCSP URI, r=keeler, r=briansmith
...
--HG--
extra : source : e7afcba6743e40755d28a296b00c395392864657
2014-01-13 02:33:08 -08:00
Brian Smith
9e081845fc
Bug 950129: Make OCSP fetching policy for OCSP response signing certificates consistent, r=wtc, r=rrelyea
...
--HG--
extra : source : 44afac41de6a81c1e4430afa10e6f2836599ecd8
2014-01-12 23:13:10 -08:00
Brian Smith
8642936ac2
Bug 958916: Update to NSS 3.15.5 beta 1 (NSS_3_15_5_BETA1), r=me
...
--HG--
extra : rebase_source : 19606540e96bd00b737bc9c5782f8c445e006189
2014-01-12 22:09:19 -08:00
Patrick McManus
fa1a932713
bug 951199 - Interface for Socket Level Access to TLS Version Used r=dkeeler r=bsmith
2013-10-09 17:21:48 -07:00
Nemina Amarasinghe
fe42b2da6d
Bug 946075 - Remove extra space from ssl_error_bad_cert_domain error message contains in TransportSecurityInfo.cpp. r=dkeeler
2014-01-13 09:28:14 -05:00
Brian Smith
54577ca0b6
Bug 957665: Add telemetry to measure how many people have OCSP enabled, r=keeler
...
--HG--
extra : rebase_source : e6dd0d7d06ce0eb5b2f34a77a851dd7c0655ac3e
2014-01-08 08:59:53 -08:00
Jed Davis
81f5ace514
Bug 945330 - Reword and slightly improve sandbox violation log message. r=kang
...
The main goal is to have a message that unambiguously indicates a crash,
so mozharness can grep for it even if some of the details change later.
Also now includes the entire argument list; most syscalls don't use all
six, so the last few will be meaningless, but it can't hurt to log them.
2014-01-10 08:22:58 -05:00
David Keeler
af14c1e77c
bug 950268 - fix leak in nsCertTree::GetDispInfoAtIndex r=cviecco
2014-01-09 10:02:08 -08:00
Phil Ringnalda
b1d0a82ada
Back out 2e7e2de7b13e (bug 948574) for b2g mochitest crashes
...
CLOSED TREE
2014-01-07 21:10:23 -08:00
David Keeler
312c00712f
bug 948574 - remote nsISiteSecurityService::IsSecureURI r=bz
2014-01-07 11:31:30 -08:00
Brian Smith
47f12dab81
Bug 952876: Add test for bug 952808 (OCSP stapling not honored when there is a error entry in the OCSP cache), r=keeler
2014-01-06 14:45:35 -08:00
Brian Smith
34c79e6c63
Bug 933109: Add tests to verify that we retry OCSP when we have a cached Unknown response, r=keeler
2014-01-06 14:41:04 -08:00
Wes Kocher
e58ffe9455
Backed out changeset 75e5396d0847 (bug 933109) for xpcshell bustage
2014-01-06 17:50:53 -08:00
Wes Kocher
f21b041b0f
Backed out changeset b8f1b1cfc9e2 (bug 952876)
2014-01-06 17:50:23 -08:00
Brian Smith
e5e4f7555e
Bug 952876: Add test for bug 952808 (OCSP stapling not honored when there is a error entry in the OCSP cache), r=keeler
...
--HG--
extra : rebase_source : d83e4b3681b36616441e6fd412969998a19eae4c
extra : amend_source : 475bff5dd333fb54729fdace0f295c6e026c5a18
2014-01-06 14:45:35 -08:00
Brian Smith
1bd1da9540
Bug 933109: Add tests to verify that we retry OCSP when we have a cached Unknown response, r=keeler
...
--HG--
extra : rebase_source : 4e73c5812e75adf053f2158a88a6a8e58307c9d7
2014-01-06 14:41:04 -08:00
David Keeler
15f6ba41c8
bug 951354 - nsNSSCertificateDB: call shutdown(calledFromObject) in destructor r=cviecco a=abillings
2013-12-19 11:45:50 -08:00
Brian Smith
94ac987daf
Bug 898431: Update NSS to NSS 3.15.4 RTM (NSS_3_15_4_RTM), r=me
2014-01-06 14:31:01 -08:00
Ehsan Akhgari
ebd358dfd7
Bug 927728 - Part 1: Replace PRUnichar with char16_t; r=roc
...
This patch was automatically generated by the following script:
#!/bin/bash
# Command to convert PRUnichar to char16_t
function convert() {
echo "Converting $1 to $2..."
find . ! -wholename "*nsprpub*" \
! -wholename "*security/nss*" \
! -wholename "*modules/libmar*" \
! -wholename "*/.hg*" \
! -wholename "obj-ff-dbg*" \
! -name prtypes.h \
! -name Char16.h \
-type f \
\( -iname "*.cpp" \
-o -iname "*.h" \
-o -iname "*.c" \
-o -iname "*.cc" \
-o -iname "*.idl" \
-o -iname "*.ipdl" \
-o -iname "*.ipdlh" \
-o -iname "*.mm" \) | \
xargs -n 1 sed -i -e "s/\b$1\b/$2/g"
}
convert PRUnichar char16_t
2014-01-04 10:02:17 -05:00
ffxbld
1e84c8d649
No bug, Automated HSTS preload list update from host bld-linux64-ec2-441 - a=hsts-update
2014-01-04 03:20:04 -08:00
ffxbld
1b45db05aa
No bug, Automated HSTS preload list update from host bld-linux64-ec2-018 - a=hsts-update
2013-12-28 03:23:00 -08:00
Brian Smith
e3fcf76058
Bug 898431: Update NSS to NSS 3.15.4 beta 10 (NSS_3_15_4_BETA10), r=me
2013-12-21 23:15:41 -08:00
ffxbld
4b0fae6f2f
No bug, Automated HSTS preload list update from host bld-centos6-hp-016 - a=hsts-update
2013-12-21 03:14:20 -08:00
Wan-Teh Chang
d2b3e048e1
Bug 898431: Update NSS to NSS_3_15_4_BETA9. Includes the fixes for
...
bug 946147, bug 930874, bug 930857, bug 934545, bug 915408.
2013-12-20 12:01:06 -08:00
Gregory Szorc
158ed8b3ec
Bug 774572 - Part 2: Define JAR_MANIFESTS in moz.build files; r=glandium
...
Every directory with a jar.mn now has JAR_MANIFESTS defined in its
moz.build file.
We also removed the may_skip special consideration of jar.mn files
because this information is now available during tier traversal by the
reader courtesy of the variables being present in moz.build files.
--HG--
extra : rebase_source : 21049b15e6bd9cf65b0805ccaccc4ba5aae93c98
extra : amend_source : 0b1ea866d725beef92d37c6f6d475369ac002e19
2013-12-10 16:18:11 +09:00
David Keeler
018e03fe74
bug 887321 - initial OCSP stapling telemetry r=briansmith
2013-12-16 09:32:16 -08:00
Trevor Saunders
907dfc4528
bug 949821 - use MOZ_UTF16 more and NS_LITERAL_STRING less r=froydnj
2013-12-12 20:50:01 -05:00
Raymond Etornam Agbeame
b6a36ce552
Bug 945857: Remove the security.fresh_revocation_info.require preference, r=briansmith
2013-12-16 00:09:21 -08:00
Phil Ringnalda
3a1d0374aa
Merge m-i to m-c
2013-12-14 18:20:38 -08:00
ffxbld
f00e1e651f
No bug, Automated HSTS preload list update from host bld-linux64-ix-037 - a=hsts-update
2013-12-14 03:18:03 -08:00
David Keeler
183762aa4e
bug 950253 - fix typo in getHSTSPreloadList.js r=briansmith DONTBUILD because NPOTB
2013-12-13 16:06:54 -08:00
Bobby Holley
a7395d2ec6
Bug 937317 - Replace all instance of null cx pushing with AutoSystemCaller. r=bz
...
This is an easy bonus chunk of the work to phase out cx pushing in the browser.
2013-12-11 17:51:58 -08:00
Camilo Viecco
e92b932f63
Bug 938046 - Part 4. Tests for consistency of getchain and getissuer. r=dkeeler
2013-11-21 13:50:51 -08:00
Camilo Viecco
1ee1446f11
Bug 938046 - Part 3. Iterate only through valid users on getchain r=dkeeler
2013-12-11 13:04:07 -08:00
Camilo Viecco
0158164ec2
Bug 938046 - Part 2. Get issuer uses getchain to comput issuer. r=dkeeler
2013-11-21 13:50:49 -08:00
Camilo Viecco
bdf275bc24
Bug 938046 - Part 1. Iterate through variable not over const. r=dkeeler
2013-11-21 13:45:20 -08:00
Cykesiopka
a856c7f1a1
Bug 910986 - Fix cert trust editing in People tab of Cert Manager. r=dkeeler
2013-12-10 10:36:47 -05:00
Cykesiopka
d659aa3ac8
Bug 539710 - Use char16_t ',' instead of NS_LITERAL_STRING in nsNSSCertificate.cpp. r=dkeeler
2013-12-10 10:36:31 -05:00
Ryan VanderMeulen
ca386608b9
Merge b2g-inbound to m-c.
2013-12-09 17:26:11 -05:00
Camilo Viecco
b10aaf2d3e
Bug 936808 - Serialize calls to PK11 routines in SSLServerCertVerification. r=briansmith
2013-12-09 09:12:47 -08:00
Birunthan Mohanathas
759ab69b0a
Bug 713082 - Part 2: Rename Util.h to ArrayUtils.h. r=Waldo
...
--HG--
rename : mfbt/Util.h => mfbt/ArrayUtils.h
2013-12-08 21:52:54 -05:00
Brian Smith
d64b1c97c0
Bug 942152, r=dkeeler, r=honzab
...
--HG--
extra : rebase_source : 7f0bab4efa26e9c185b29fdb14d846035147fd2f
2013-12-05 20:33:49 -08:00
Phil Ringnalda
e2e1627d17
Back out 35371620801a:bf2019278b77 (bug 937317) for gaia-ui-test bustage and frequent timeouts in its own test
2013-12-07 11:08:56 -08:00
ffxbld
3c0a9dc3b1
No bug, Automated HSTS preload list update from host bld-linux64-ec2-351 - a=hsts-update
2013-12-07 03:22:31 -08:00
Camilo Viecco
df14c5d1d1
Bug 945349 - CertVerifier should check early for bad usages. r=briansmith
2013-12-06 13:42:44 -08:00