Commit Graph

772 Commits

Author SHA1 Message Date
Shriram Kunchanapalli
5a7f15d5b3 Bug 820613 - Remove all references to shutdown-cleanse. r=bsmedberg 2013-01-17 00:40:56 +05:30
Patrick McManus
724b384ac7 bug 804605 - backout 766973 767158 785050 r=backout a=akeybl 2013-01-22 11:59:01 -05:00
Brian Smith
a3d652b504 Bug 624514: Make PSM access the network.ntlm.send-lm-response pref only on the main thread, r=honzab
--HG--
extra : rebase_source : ef4c9e19548fbbc9198d1cd63c32a33e797c5dd9
2013-01-18 16:06:12 -08:00
Brian Smith
adaa345534 Bug 714477: Do not check the OCSP enabled pref during extended validation, r=rrelyea
--HG--
extra : source : 48823673fe63bd00cd182fe185b6aba0d19eff9d
2013-01-18 10:28:58 -08:00
Mats Palmgren
d5826be6d7 Bug 786533 - Replace NS_MIN/NS_MAX with std::min/std::max and #include <algorithm> where needed. r=ehsan 2013-01-15 13:22:03 +01:00
Antonio Manuel Amaya Calvo
0eba4f3ab1 Bug 828730: Fix crash in test_signed_apps/generate.sh, r=bsmith, a=NPOTB
--HG--
extra : rebase_source : 7edc7a07b2447c902074735039a17e5f2726096f
2013-01-10 13:55:54 +01:00
Brian Smith
b61797dec2 Bug 824199: Replace the marketplace-dev cert with the marketplace-prod test cert, r=rtilder
--HG--
extra : rebase_source : f2b9a1102e32c58a7d55ec4481b895af531d5e14
2013-01-08 11:55:04 +01:00
Ehsan Akhgari
129c4cd7fd Bug 579517 follow-up: Remove NSPR types that crept in 2013-01-07 18:21:50 -05:00
Andres Hernandez
5ef959a002 Bug 824493 - Intermittent timeout in test_sts_privatebrowsing_perwindowpb.html; r=ehsan 2013-01-04 10:05:32 -06:00
Ehsan Akhgari
726d181e3b Backed out changeset 66a7359f9be2 (bug 791546) because it broke the build 2013-01-03 18:36:16 -05:00
Shriram Kunchanapalli
2239414ab6 Bug 791546: Removes nsCRT::strcmp(const PRUnichar* s) from nsCRT.h and replaces it occurrences with NS_strcmp; r=bsmedberg 2012-12-24 08:47:18 +05:30
Camilo Viecco
3e1b6f0a96 Bug 799267 - AuthCertificate Telemetry (measuring first auth, pkix and classic) r=bsmith 2013-01-02 08:14:07 -08:00
Ms2ger
519fc6202b Merge PGO-green changeset from inbound to m-c. 2012-12-22 12:06:37 +01:00
Ms2ger
3eb0a0a781 Bug 823107 - Make nsIDOMEvent::SetTrusted return void; r=smaug 2012-12-22 09:18:08 +01:00
Benjamin Smedberg
5f32a1893f Bug 807757 part PSM - Remove nsIProfileChangeStatus and related veto notifications from PSM r=bsmith
--HG--
extra : rebase_source : a4611953352684c48913501d26e8ce782ba04f8f
2012-12-13 12:20:00 -05:00
Andres Hernandez
dbd105015e Bug 806731 - Port test_sts_privatebrowsing.html to the new per-window PB APIs; r=ehsan
--HG--
rename : security/manager/ssl/tests/mochitest/stricttransportsecurity/test_sts_privatebrowsing.html => security/manager/ssl/tests/mochitest/stricttransportsecurity/test_sts_privatebrowsing_perwindowpb.html
2012-12-14 15:35:33 -06:00
Ed Morley
dbdc5c97de Backout 851fd44eeb42 (bug 799267) for leaks on a CLOSED TREE 2012-12-19 22:07:04 +00:00
Camilo Viecco
b05a420c0c Bug 799267 - Telemetry for Cert Verification (PKIX and classic) in SSLServerCertVerification r=bsmith 2012-12-19 13:05:43 -08:00
Ed Morley
9e8a4f79dc Merge mozilla-central to mozilla-inbound 2012-12-14 19:03:57 +00:00
Josh Matthews
afb3c11643 Bug 769288 - Part 7: Use separate SSL session cache entries for private connections. r=mayhemer 2012-12-07 17:57:53 -05:00
Josh Matthews
c4ae32a33f Bug 769288 - Part 5: Close private socket connections when the lsat private browsing instance dies. r=bsmith,mcmanus 2012-12-07 17:50:43 -05:00
Josh Matthews
8a6b872223 Bug 769288 - Part 4: Clear SSL session cache upon leaving private browsing. r=bsmith 2012-12-06 22:05:34 -05:00
Josh Matthews
ddef2da004 Bug 769288 - Part 3: Clear all temporary cert overrides upon leaving private browsing. r=bsmith 2012-12-06 22:05:34 -05:00
Josh Matthews
1c894a8fc6 Bug 769288 - Part 2: Avoid storing intermediate cert data for private contexts. r=bsmith sr=mayhemer 2012-12-06 22:05:34 -05:00
Josh Matthews
2365a99364 Bug 769288 - Part 1: Make PSM more amenable to storing concurrent private and non-private data. r=bsmith 2012-12-06 22:05:27 -05:00
Ed Morley
2b5f199504 Merge mozilla-inbound to mozilla-central on a CLOSED TREE 2012-12-14 15:28:22 +00:00
Ed Morley
0ff2809134 Backout d9336f8c0f6c, 761ff8b47a4e, 072da0be4236, ee2822d2eab9, 38cd815da29a, a80ec6b90878 & 9e9281ce1b63 (bug 769288) on suspicion of causing bug 821701 on a CLOSED TREE 2012-12-14 15:07:48 +00:00
Brian Smith
7bf7022fd9 Bug 772365, Part 3: Add B2G-specific customizations to NSS certificate trust database with tests, r=rrelyea r=honzab
--HG--
rename : dom/tests/browser/browser_ConsoleStoragePBTest_perwindowpb.js => dom/tests/browser/browser_ConsoleStoragePBTest.js
rename : dom/tests/mochitest/localstorage/test_localStorageBasePrivateBrowsing_perwindowpb.html => dom/tests/mochitest/localstorage/test_localStorageBasePrivateBrowsing.html
rename : security/manager/ssl/tests/mochitest/browser/browser_bug627234_perwindowpb.js => security/manager/ssl/tests/unit/test_bug627234.js
extra : rebase_source : 2792b75d7ccccf80e9a23feed70c134dfcdfe00f
2012-12-10 07:17:29 -08:00
Josh Matthews
0e7772fb45 Bug 769288 - Part 7: Use separate SSL session cache entries for private connections. r=mayhemer 2012-12-07 17:57:53 -05:00
Josh Matthews
25637557d7 Bug 769288 - Part 5: Close private socket connections when the lsat private browsing instance dies. r=bsmith,mcmanus 2012-12-07 17:50:43 -05:00
Josh Matthews
4597eb8010 Bug 769288 - Part 4: Clear SSL session cache upon leaving private browsing. r=bsmith 2012-12-06 22:05:34 -05:00
Josh Matthews
cd19472008 Bug 769288 - Part 3: Clear all temporary cert overrides upon leaving private browsing. r=bsmith 2012-12-06 22:05:34 -05:00
Josh Matthews
0726a9f42b Bug 769288 - Part 2: Avoid storing intermediate cert data for private contexts. r=bsmith sr=mayhemer 2012-12-06 22:05:34 -05:00
Josh Matthews
d4dc77e053 Bug 769288 - Part 1: Make PSM more amenable to storing concurrent private and non-private data. r=bsmith 2012-12-06 22:05:27 -05:00
Mario Alvarado [:marioalv]
3747833633 Bug 806732 - Port test_bug627234.js to the new per-tab PB APIs; r=ehsan
DONTBUILD since this is NPOTB for global PB builds

--HG--
rename : security/manager/ssl/tests/unit/test_bug627234.js => security/manager/ssl/tests/mochitest/browser/browser_bug627234_perwindowpb.js
2012-12-12 15:15:35 -06:00
Ehsan Akhgari
1f59e32027 Backed out 7 changesets (bug 769288) because of leaks
Backed out changeset b2fb475b6e4e (bug 769288)
Backed out changeset 912331d0c2fd (bug 769288)
Backed out changeset 6d8d78bd56a9 (bug 769288)
Backed out changeset e75cd1e1fca3 (bug 769288)
Backed out changeset e10c24f10bd2 (bug 769288)
Backed out changeset 7b0fdedb4fa9 (bug 769288)
Backed out changeset 42b468942a84 (bug 769288)
2012-12-12 00:05:49 -05:00
Josh Matthews
7a51d111ae Bug 769288 - Part 7: Use separate SSL session cache entries for private connections. r=mayhemer 2012-12-07 17:57:53 -05:00
Josh Matthews
d7d7d2b978 Bug 769288 - Part 5: Close private socket connections when the lsat private browsing instance dies. r=bsmith,mcmanus 2012-12-07 17:50:43 -05:00
Josh Matthews
1e33a7d36b Bug 769288 - Part 4: Clear SSL session cache upon leaving private browsing. r=bsmith 2012-12-06 22:05:34 -05:00
Josh Matthews
666d90e1b9 Bug 769288 - Part 3: Clear all temporary cert overrides upon leaving private browsing. r=bsmith 2012-12-06 22:05:34 -05:00
Josh Matthews
4923c3cd6b Bug 769288 - Part 2: Avoid storing intermediate cert data for private contexts. r=bsmith sr=mayhemer 2012-12-06 22:05:34 -05:00
Josh Matthews
16f96bcb09 Bug 769288 - Part 1: Make PSM more amenable to storing concurrent private and non-private data. r=bsmith 2012-12-06 22:05:27 -05:00
Camilo Viecco
ace29d5678 Bug 819429 - Remove assertion allowing aToken to be NULL in nsNSSCertificateDB::FindCertByDBKey. r=bsmith 2012-12-14 09:10:44 -08:00
Saurabh Anand
151d13c7a5 Bug 818817 - Fix some compiler warnings, r=Ms2ger 2012-12-09 22:53:19 +05:30
Ehsan Akhgari
b3efcff124 Merge mozilla-central into mozilla-inbound 2012-12-06 01:08:07 -05:00
Ehsan Akhgari
603c1a492c Bug 806733 - Part 0: Don't run test_sts_preloadlist.js in per-window PB builds 2012-12-06 00:39:44 -05:00
Ehsan Akhgari
ac20c50532 Bug 806732 - Part 0: Don't run test_bug627234.js in per-window PB builds 2012-12-06 00:39:06 -05:00
Ehsan Akhgari
2ec638928f Bug 806731 - Part 0: Don't run test_sts_privatebrowsing.html in per-window PB builds 2012-12-06 00:37:37 -05:00
Brian Smith
4031b71173 Bug 772365, Part 1: Implement JARSignatureVerification, r=honzab, parts r=ehsan
* * *
Bug 772365, Part 2.1: Generate test cases for signed app signature verification
* * *
Bug 772365, Part 2.2: Test JAR signature verification

--HG--
extra : rebase_source : 198be789e8b1565dad418e15760fa6dc90da843f
2012-11-14 15:31:39 -08:00
Brian Smith
918b8579c0 Bug 767241, Part 3: Replace uses of one-off Auto* classes with ScopedNSSTypes in ssltunnel, r=ted
--HG--
extra : rebase_source : d3d9c1e474bee2c0952d5d71cb3e7460d661a5aa
2012-11-12 09:42:33 -08:00
Brian Smith
0cfd275457 Bug 767241, Part 2: Replace almost all uses of NSSCleanupAutoPtrClass with ScopedNSSTypes, r=honzab
--HG--
extra : rebase_source : 5fa068e15febb301b0c776f1a565262d698789b2
2012-11-12 09:42:28 -08:00
Brian Smith
594736d869 Backed out changeset 84bf2e19c701
--HG--
extra : rebase_source : 446249323b44e54161bf187c0d386db645402bb7
2012-11-30 19:39:46 -08:00
Brian Smith
2a9f131039 Backed out changeset c966b16e4fb5
--HG--
extra : rebase_source : 4b3f5af10951cf33c70f459a5043075bb946ccb4
2012-11-30 19:37:39 -08:00
Brian Smith
9fcc4bfd61 Backed out changeset 329da1081148
--HG--
extra : rebase_source : 9efe319bbff8d9a3f55208686d238626bf6d0dc0
2012-11-30 19:36:08 -08:00
Brian Smith
534e4f8dbf Bug 767241, Part 3: Replace uses of one-off Auto* classes with ScopedNSSTypes in ssltunnel, r=ted 2012-11-12 09:42:33 -08:00
Brian Smith
6ca9a21460 Bug 767241, Part 2: Replace almost all uses of NSSCleanupAutoPtrClass with ScopedNSSTypes, r=honzab 2012-11-12 09:42:28 -08:00
Andres Hernandez
db50a92da6 Bug 806733 - Port test_sts_preloadlist.js to the new per-window PB APIs; r=ehsan
--HG--
rename : security/manager/ssl/tests/unit/test_sts_preloadlist.js => security/manager/ssl/tests/unit/test_sts_preloadlist_perwindowpb.js
2012-12-13 12:15:10 -06:00
Brian Smith
9087077a80 Bug 804663: Create a CryptoTask API to simplify the creation of correct async crypto operations and add more utilities to ScopedNSSTypes.h, r=honzab
--HG--
extra : rebase_source : de29f383e6d5b109a06837b887d96bbcbce55817
2012-07-13 15:44:24 -07:00
Brian Smith
e51024bde5 Bug 804663: Create a CryptoTask API to simplify the creation of correct async crypto operations and add more utilities to ScopedNSSTypes.h, r=honzab 2012-07-13 15:44:24 -07:00
Daniel Holbert
eb0138e91d Bug 817176: Add "(void)" cast to silence GCC unused-var warning for an intentionally-unused variable. r=bsmith 2012-11-30 16:59:42 -08:00
Brian Smith
a3848f342f Bug 812531: Make MOZ_TYPE_SPECIFIC_SCOPED_POINTER_TEMPLATE comply with two-phase template name lookup rules, as clang requires, r=khuey
--HG--
extra : rebase_source : 5c4c8c0ff4f2dfcb4d83e63376036a5bf45ab0ab
2012-11-15 17:02:11 -08:00
Josh Matthews
682011a69c Bug 812794 - Make docshell STS usage use existing PB knowledge instead of digging in SSL internals. r=bz/bsmith 2012-11-28 11:24:03 -05:00
Daniel Holbert
e548ef3a86 Bug 815928 part 2: Fix typo s/elment/elment/ in comments & tests. DONTBUILD, rs=Waldo 2012-11-27 19:15:36 -08:00
Patrick McManus
3d5a1836dc bug 806992 EV initialization blocks the first certificate verification thread for a long time r=bsmith r=honzab 2012-11-22 15:57:59 -05:00
Patrick McManus
3b2659e71b bug 807435 telemetry for ssl handshake time r=bsmith r=honzab 2012-11-22 15:36:59 -05:00
Patrick McManus
de18bbe99e bug 807435 - telemetry for ssl key exchange algorithm r=bsmith r=honzab 2012-11-22 11:43:27 -05:00
Patrick McManus
64542079df bug 807435 - telemetry for ocsp success/failure and elapsed time r=bsmith r=honzab 2012-11-22 11:43:27 -05:00
Patrick McManus
37f5399c50 bug 807435 telemetry for server TLS NPN support r=bsmith r=honzab 2012-11-22 11:43:27 -05:00
Patrick McManus
db47e11909 bug 807435 telemetry for ssl version used r=honzab r=bsmith 2012-11-22 11:43:27 -05:00
Brian Smith
f54dc1694d Backed out changeset ef6db4ced917 (bug 804663) due to build bustage, a=bustage
--HG--
extra : rebase_source : 20d434a5f205052e836e059bcee57a0bf84725c4
2012-11-19 20:24:47 -08:00
Brian Smith
11b18b39eb Bug 804663: Add a CryptoTask class for asynchronous crypto operations and add more utilities to ScopedNSSTypes.h
--HG--
extra : source : cc195997c6e526ce4b64d28cfb065d671b90bdba
2012-07-13 15:44:24 -07:00
Josh Matthews
c7506771fc Bug 722979 - Add privacy status argument to relevant nsIStrictTransportSecurityService methods. r=bsmith sr=biesi 2012-06-30 07:34:17 -07:00
Ed Morley
bbae80e3f1 Backout e123e0173185, 326ed6f1dc9e & 7c2c9c988869 (bug 722979) for mochitest-a11y failures 2012-11-16 15:06:13 +00:00
Josh Matthews
cac189ed83 Bug 722979 - Update test in accordance with STS API changes. 2012-11-16 14:48:08 +00:00
Josh Matthews
79a2c3192a Bug 722979 - Add privacy status argument to relevant nsIStrictTransportSecurityService methods. r=bsmith sr=biesi 2012-06-30 07:34:17 -07:00
Kai Engert
8fe2c9902a Bug 799304 - Document how to enable a CA root certificate for EV (extended validation, r=rrelyea, DONTBUILD 2012-11-15 17:33:37 +01:00
Isaac Aggrey
32fe8546ca Bug 802706: Remove usage of NSPRFormatTime.h from tree; r=ehsan 2012-11-14 13:14:21 -06:00
Brian Smith
6a43df62c6 Bug 799007: Remove support for low/weak/null cipher suites, r=honzab, r=dao 2012-11-10 20:49:29 -08:00
Brian Smith
b78a4cfb46 backout cset b36d5c933092 due to orange 2012-11-10 19:09:07 -08:00
Brian Smith
16a1014808 Bug 772365: Fix build bustage caused by cset 4ed8af50dc10, a=bustage 2012-11-10 18:51:22 -08:00
Brian Smith
741fc10ba2 Bug 799007: Remove support for low/weak/null cipher suites, r=honzab, r=dao
--HG--
extra : rebase_source : 822ef336a5cdeb7d6693dbe46844a26465600854
2012-11-10 18:18:14 -08:00
Brian Smith
769b6dddc4 Bug 802302: Remove obsolete OCSP responder override UI and API, r=honzab
--HG--
extra : rebase_source : 5d241a8b9573f442c37d0aeef0689ae5054dd08d
2012-10-15 20:39:11 -07:00
Brian Smith
962ab4d8eb Bug 772365, Part 0: remove nsNSSCertHeader.h, r=honzab
--HG--
extra : rebase_source : b58ac957c58f647180f67a6e13be3cc81915d90c
2012-11-02 12:34:46 -07:00
Brian Smith
a61e92f320 Bug 804441: Put our NSPR and NSS header wrappers before OS_INCLUDES, r=ted
This allows inline functions in headers to call NSPR/NSS functions without
causing linking errors.

--HG--
extra : rebase_source : f89df8a53d6e8f624c84fc3b84982c4dd92d5f38
2012-10-24 14:31:54 -07:00
Camilo Viecco
03c06fc2ed Bug 785259 - tests, r=honzab 2012-10-31 22:17:28 +01:00
Nathan Froyd
f9b2a74082 Bug 806618 - rewrite PR_NewLogModule calls to not generate static initializers; r=ehsan 2012-10-29 19:32:10 -04:00
Jacek Szpot
bea8356b2c Bug 792180 - Replace NS_{UN,}LIKELY with MOZ_{UN,}LIKELY; r=ehsan 2012-10-26 15:32:10 +02:00
David Keeler
4ec6ef9594 bug 800444 - disable HSTS preload list if firefox has not updated in 18 weeks r=bsmith, mayhemer 2012-10-26 09:50:23 -07:00
Andrew Quartey
a1996feccf Bug 792581 - part 21: Replace LL_F2L and LL_D2L macros. r=ehsan 2012-10-25 19:25:58 -04:00
Tim Taubert
ddb6c4b88a merge m-c to fx-team 2012-10-25 21:23:58 +02:00
Mihai Sucan
2476780676 Bug 803964 - Cannot show window object with inspect viewer in remote web console; r=bz 2012-10-24 13:01:54 +03:00
Mike Conley
d9903283d7 Bug 804690 - Skip test for bug 627234 if the Private Browsing service is not available. r=dkeeler. 2012-10-24 15:00:36 -04:00
Brian Smith
31cc1c11ed Bug 802378: Make PSM coding patterns more consistent, and more consistent with Mozilla Coding Style, r=keeler
--HG--
extra : rebase_source : 8b7ebf227a490cfde7376a61e2952a07a900e2d2
2012-10-17 13:48:36 -07:00
Patrick McManus
c0fb380918 bug 803267 - speculative backout of 802378 to test crash stats r=backout 2012-10-23 16:42:19 -04:00
Brian Smith
035e8b8432 Bug 794510: Part 6 - Fixups needed to build on Windows and Android and Mac OS X debug, plus shorten comment to be less than 80 columns; r=ehsan 2012-10-18 15:55:48 -04:00
Kai Engert
33ba0fc9f9 Bug 757240 - May 2012 batch of changes to the EV-activation list, r=bsmith 2012-10-18 22:17:59 +02:00
David Keeler
825d26ac23 bug 627234 - test that hsts data isn't deleted in private browsing when includeSubdomains is false r=bsmith 2012-10-22 10:38:50 -07:00
Nick Hurley
e7f284c9d3 Bug 536324 part 3 - Change consumers of nsIChannel. r=sworkman 2012-10-22 10:51:07 -07:00
Bobby Holley
bac4dc387e Bug 789224 - Separate certificate principals out from CAPS. r=dveditz
There's no longer any reason why "certificate principals" need to be principals at all.
I tried to rip them out entirely, but it looks like they're still used vestigially at XPI
install time to display author information. But there's no reason that they have to be
porkbarreled into the security-critical objects that we pass around all over the place.
So let's make them their own deal.

I was tempted to call them "certificate holders", but that would involve renaming methods and
cause more compat fuss than necessary.

--HG--
rename : caps/idl/nsISignatureVerifier.idl => security/manager/ssl/public/nsISignatureVerifier.idl
2012-10-22 08:29:56 +02:00
Brian Smith
4020f12f18 Bug 802378: Make PSM coding patterns more consistent, and more consistent with Mozilla Coding Style, r=keeler
--HG--
extra : rebase_source : 46fde9231dd69356221c0c5a7042a7b2d3dd0cf6
2012-10-17 13:48:36 -07:00