Commit Graph

1079 Commits

Author SHA1 Message Date
Josh Matthews
b10e54c8a1 Backed out changeset 571f73bc8d01 (bug 769288) 2012-12-12 02:53:06 -05:00
Josh Matthews
d6b4232ea5 Backed out changeset 209bff5d2e80 (bug 769288) 2012-12-12 02:53:05 -05:00
Josh Matthews
922d804409 Backed out changeset 9fcf530e1c41 (bug 769288) 2012-12-12 02:53:03 -05:00
Josh Matthews
a5db6503f5 Backed out changeset a5c2323ca151 (bug 769288) 2012-12-12 02:52:59 -05:00
Josh Matthews
e7f92d3a9a Bug 769288 - Part 7: Use separate SSL session cache entries for private connections. r=mayhemer 2012-12-07 17:57:53 -05:00
Josh Matthews
22a51d9ed1 Bug 769288 - Part 5: Close private socket connections when the lsat private browsing instance dies. r=bsmith,mcmanus 2012-12-07 17:50:43 -05:00
Josh Matthews
bf8a575e6f Bug 769288 - Part 4: Clear SSL session cache upon leaving private browsing. r=bsmith 2012-12-06 22:05:34 -05:00
Josh Matthews
52565c80ab Bug 769288 - Part 3: Clear all temporary cert overrides upon leaving private browsing. r=bsmith 2012-12-06 22:05:34 -05:00
Josh Matthews
23cec1578a Bug 769288 - Part 2: Avoid storing intermediate cert data for private contexts. r=bsmith sr=mayhemer 2012-12-06 22:05:34 -05:00
Josh Matthews
94b29c24d4 Bug 769288 - Part 1: Make PSM more amenable to storing concurrent private and non-private data. r=bsmith 2012-12-06 22:05:27 -05:00
Wan-Teh Chang
95f4853fb2 Bug 611451: Update NSS to NSS_3_14_1_BETA3. Also include the fixes for
bug 811317, bug 818741, bug 813401.
2012-12-12 13:19:33 -08:00
Camilo Viecco
ace29d5678 Bug 819429 - Remove assertion allowing aToken to be NULL in nsNSSCertificateDB::FindCertByDBKey. r=bsmith 2012-12-14 09:10:44 -08:00
Makoto Kato
03f2158bee Bug 486141 - pymake cannot build securiy/build. r=gladium 2012-12-12 12:23:42 +09:00
Mike Hommey
7cfff25fc0 Bug 818903 - Also link NSPR and NSS with --build-id when available. r=ted 2012-12-10 19:00:38 +01:00
Ed Morley
cf6ee79d29 Backout 28807b41f92e (bug 818903) for errors during configure 2012-12-10 18:23:45 +00:00
Mike Hommey
d1971cdcea Bug 818903 - Also link NSPR and NSS with --build-id when available. r=ted 2012-12-10 19:00:38 +01:00
Mike Hommey
1f081089c8 Bug 486141 - Stop building NSS with gmake when building m-c with pymake. r=ted 2012-12-10 10:05:03 +01:00
Saurabh Anand
151d13c7a5 Bug 818817 - Fix some compiler warnings, r=Ms2ger 2012-12-09 22:53:19 +05:30
David Keeler
8d8aefd158 bug 819106 - update processStsHeader call in hsts preload list script r=bsmith DONTBUILD (NPOTB) 2012-12-06 16:46:00 -08:00
Ehsan Akhgari
b3efcff124 Merge mozilla-central into mozilla-inbound 2012-12-06 01:08:07 -05:00
Ehsan Akhgari
603c1a492c Bug 806733 - Part 0: Don't run test_sts_preloadlist.js in per-window PB builds 2012-12-06 00:39:44 -05:00
Ehsan Akhgari
ac20c50532 Bug 806732 - Part 0: Don't run test_bug627234.js in per-window PB builds 2012-12-06 00:39:06 -05:00
Ehsan Akhgari
2ec638928f Bug 806731 - Part 0: Don't run test_sts_privatebrowsing.html in per-window PB builds 2012-12-06 00:37:37 -05:00
Brian Smith
4031b71173 Bug 772365, Part 1: Implement JARSignatureVerification, r=honzab, parts r=ehsan
* * *
Bug 772365, Part 2.1: Generate test cases for signed app signature verification
* * *
Bug 772365, Part 2.2: Test JAR signature verification

--HG--
extra : rebase_source : 198be789e8b1565dad418e15760fa6dc90da843f
2012-11-14 15:31:39 -08:00
Brian Smith
918b8579c0 Bug 767241, Part 3: Replace uses of one-off Auto* classes with ScopedNSSTypes in ssltunnel, r=ted
--HG--
extra : rebase_source : d3d9c1e474bee2c0952d5d71cb3e7460d661a5aa
2012-11-12 09:42:33 -08:00
Brian Smith
0cfd275457 Bug 767241, Part 2: Replace almost all uses of NSSCleanupAutoPtrClass with ScopedNSSTypes, r=honzab
--HG--
extra : rebase_source : 5fa068e15febb301b0c776f1a565262d698789b2
2012-11-12 09:42:28 -08:00
Brian Smith
a315453a26 Backed out changeset 7ac3f1563741
--HG--
extra : rebase_source : 1b25c854c88690c4d0f64927d0ec1e2d656b9ca3
2012-11-30 19:40:27 -08:00
Brian Smith
594736d869 Backed out changeset 84bf2e19c701
--HG--
extra : rebase_source : 446249323b44e54161bf187c0d386db645402bb7
2012-11-30 19:39:46 -08:00
Brian Smith
2a9f131039 Backed out changeset c966b16e4fb5
--HG--
extra : rebase_source : 4b3f5af10951cf33c70f459a5043075bb946ccb4
2012-11-30 19:37:39 -08:00
Brian Smith
9fcc4bfd61 Backed out changeset 329da1081148
--HG--
extra : rebase_source : 9efe319bbff8d9a3f55208686d238626bf6d0dc0
2012-11-30 19:36:08 -08:00
Brian Smith
534e4f8dbf Bug 767241, Part 3: Replace uses of one-off Auto* classes with ScopedNSSTypes in ssltunnel, r=ted 2012-11-12 09:42:33 -08:00
Brian Smith
6ca9a21460 Bug 767241, Part 2: Replace almost all uses of NSSCleanupAutoPtrClass with ScopedNSSTypes, r=honzab 2012-11-12 09:42:28 -08:00
Andres Hernandez
db50a92da6 Bug 806733 - Port test_sts_preloadlist.js to the new per-window PB APIs; r=ehsan
--HG--
rename : security/manager/ssl/tests/unit/test_sts_preloadlist.js => security/manager/ssl/tests/unit/test_sts_preloadlist_perwindowpb.js
2012-12-13 12:15:10 -06:00
Ehsan Akhgari
5085c9776c Merge mozilla-central into mozilla-inbound 2012-12-13 16:01:29 -05:00
Wan-Teh Chang
3552df150c Bug 816392: Update NSS to NSS_3_14_1_RC0. 2012-12-13 12:00:41 -08:00
Ed Morley
844fb967b0 Backout 4ebd50016f35 & 9033700cc24f (bug 807757) for failing to build on a CLOSED TREE 2012-12-13 18:46:38 +00:00
Benjamin Smedberg
e1992703b2 Bug 807757 part PSM - Remove nsIProfileChangeStatus and related veto notifications from PSM r=bsmith
--HG--
extra : rebase_source : d31d974b8d7da64e6a524fbbea4d98bf0d9a505a
2012-12-13 12:20:00 -05:00
Brian Smith
9087077a80 Bug 804663: Create a CryptoTask API to simplify the creation of correct async crypto operations and add more utilities to ScopedNSSTypes.h, r=honzab
--HG--
extra : rebase_source : de29f383e6d5b109a06837b887d96bbcbce55817
2012-07-13 15:44:24 -07:00
Brian Smith
5a14f993ea Bug 816392: Update to NSS 3.14.1 beta 2 (NSS_3_14_1_BETA2), r=me, a=rrelyea
--HG--
extra : rebase_source : fad4097ed16f529fc9845231292c99fce4fea1f5
2012-12-05 15:19:18 -08:00
Brian Smith
e51024bde5 Bug 804663: Create a CryptoTask API to simplify the creation of correct async crypto operations and add more utilities to ScopedNSSTypes.h, r=honzab 2012-07-13 15:44:24 -07:00
Brian Smith
4a19468daf Bug 816392: Update NSS to NSS 3_14_1_BETA1, r=me, a=relyea, a=wtc 2012-11-30 18:00:34 -08:00
Daniel Holbert
eb0138e91d Bug 817176: Add "(void)" cast to silence GCC unused-var warning for an intentionally-unused variable. r=bsmith 2012-11-30 16:59:42 -08:00
Brian Smith
a3848f342f Bug 812531: Make MOZ_TYPE_SPECIFIC_SCOPED_POINTER_TEMPLATE comply with two-phase template name lookup rules, as clang requires, r=khuey
--HG--
extra : rebase_source : 5c4c8c0ff4f2dfcb4d83e63376036a5bf45ab0ab
2012-11-15 17:02:11 -08:00
Brian Smith
be0d41bee2 Bug 813241: Update config/system-headers and make wrapping of NSPR & NSS headers more robust, r=glandium
--HG--
extra : rebase_source : 5ba0a83110268ff489df7b3e0a8a9219711247b1
2012-11-22 11:15:01 -08:00
Josh Matthews
682011a69c Bug 812794 - Make docshell STS usage use existing PB knowledge instead of digging in SSL internals. r=bz/bsmith 2012-11-28 11:24:03 -05:00
Daniel Holbert
e548ef3a86 Bug 815928 part 2: Fix typo s/elment/elment/ in comments & tests. DONTBUILD, rs=Waldo 2012-11-27 19:15:36 -08:00
Patrick McManus
3d5a1836dc bug 806992 EV initialization blocks the first certificate verification thread for a long time r=bsmith r=honzab 2012-11-22 15:57:59 -05:00
Patrick McManus
3b2659e71b bug 807435 telemetry for ssl handshake time r=bsmith r=honzab 2012-11-22 15:36:59 -05:00
Patrick McManus
de18bbe99e bug 807435 - telemetry for ssl key exchange algorithm r=bsmith r=honzab 2012-11-22 11:43:27 -05:00
Patrick McManus
64542079df bug 807435 - telemetry for ocsp success/failure and elapsed time r=bsmith r=honzab 2012-11-22 11:43:27 -05:00
Patrick McManus
37f5399c50 bug 807435 telemetry for server TLS NPN support r=bsmith r=honzab 2012-11-22 11:43:27 -05:00
Patrick McManus
db47e11909 bug 807435 telemetry for ssl version used r=honzab r=bsmith 2012-11-22 11:43:27 -05:00
Brian Smith
f54dc1694d Backed out changeset ef6db4ced917 (bug 804663) due to build bustage, a=bustage
--HG--
extra : rebase_source : 20d434a5f205052e836e059bcee57a0bf84725c4
2012-11-19 20:24:47 -08:00
Brian Smith
11b18b39eb Bug 804663: Add a CryptoTask class for asynchronous crypto operations and add more utilities to ScopedNSSTypes.h
--HG--
extra : source : cc195997c6e526ce4b64d28cfb065d671b90bdba
2012-07-13 15:44:24 -07:00
Josh Matthews
c7506771fc Bug 722979 - Add privacy status argument to relevant nsIStrictTransportSecurityService methods. r=bsmith sr=biesi 2012-06-30 07:34:17 -07:00
Ed Morley
bbae80e3f1 Backout e123e0173185, 326ed6f1dc9e & 7c2c9c988869 (bug 722979) for mochitest-a11y failures 2012-11-16 15:06:13 +00:00
Josh Matthews
cac189ed83 Bug 722979 - Update test in accordance with STS API changes. 2012-11-16 14:48:08 +00:00
Josh Matthews
79a2c3192a Bug 722979 - Add privacy status argument to relevant nsIStrictTransportSecurityService methods. r=bsmith sr=biesi 2012-06-30 07:34:17 -07:00
Kai Engert
8fe2c9902a Bug 799304 - Document how to enable a CA root certificate for EV (extended validation, r=rrelyea, DONTBUILD 2012-11-15 17:33:37 +01:00
Isaac Aggrey
32fe8546ca Bug 802706: Remove usage of NSPRFormatTime.h from tree; r=ehsan 2012-11-14 13:14:21 -06:00
Brian Smith
63175cf75b Bug 799009: Remove unneeded SSL-related security alerts, r=honzab, r=dao 2012-11-10 20:49:44 -08:00
Brian Smith
6a43df62c6 Bug 799007: Remove support for low/weak/null cipher suites, r=honzab, r=dao 2012-11-10 20:49:29 -08:00
Brian Smith
b78a4cfb46 backout cset b36d5c933092 due to orange 2012-11-10 19:09:07 -08:00
Brian Smith
5b7b090005 backout cset 30f8e29f9cd1 due to orange 2012-11-10 19:08:26 -08:00
Brian Smith
16a1014808 Bug 772365: Fix build bustage caused by cset 4ed8af50dc10, a=bustage 2012-11-10 18:51:22 -08:00
Brian Smith
b3f665df00 Bug 799009: Remove unneeded SSL-related security alerts, r=honzab, r=dao
--HG--
extra : rebase_source : b6216bf3163f63f1eb4f16901943d9f351bca2cf
2012-11-10 18:19:55 -08:00
Brian Smith
741fc10ba2 Bug 799007: Remove support for low/weak/null cipher suites, r=honzab, r=dao
--HG--
extra : rebase_source : 822ef336a5cdeb7d6693dbe46844a26465600854
2012-11-10 18:18:14 -08:00
Brian Smith
769b6dddc4 Bug 802302: Remove obsolete OCSP responder override UI and API, r=honzab
--HG--
extra : rebase_source : 5d241a8b9573f442c37d0aeef0689ae5054dd08d
2012-10-15 20:39:11 -07:00
Brian Smith
962ab4d8eb Bug 772365, Part 0: remove nsNSSCertHeader.h, r=honzab
--HG--
extra : rebase_source : b58ac957c58f647180f67a6e13be3cc81915d90c
2012-11-02 12:34:46 -07:00
Brian Smith
a61e92f320 Bug 804441: Put our NSPR and NSS header wrappers before OS_INCLUDES, r=ted
This allows inline functions in headers to call NSPR/NSS functions without
causing linking errors.

--HG--
extra : rebase_source : f89df8a53d6e8f624c84fc3b84982c4dd92d5f38
2012-10-24 14:31:54 -07:00
Camilo Viecco
03c06fc2ed Bug 785259 - tests, r=honzab 2012-10-31 22:17:28 +01:00
Nathan Froyd
f9b2a74082 Bug 806618 - rewrite PR_NewLogModule calls to not generate static initializers; r=ehsan 2012-10-29 19:32:10 -04:00
Jacek Szpot
bea8356b2c Bug 792180 - Replace NS_{UN,}LIKELY with MOZ_{UN,}LIKELY; r=ehsan 2012-10-26 15:32:10 +02:00
David Keeler
4ec6ef9594 bug 800444 - disable HSTS preload list if firefox has not updated in 18 weeks r=bsmith, mayhemer 2012-10-26 09:50:23 -07:00
Andrew Quartey
a1996feccf Bug 792581 - part 21: Replace LL_F2L and LL_D2L macros. r=ehsan 2012-10-25 19:25:58 -04:00
Tim Taubert
ddb6c4b88a merge m-c to fx-team 2012-10-25 21:23:58 +02:00
Mihai Sucan
2476780676 Bug 803964 - Cannot show window object with inspect viewer in remote web console; r=bz 2012-10-24 13:01:54 +03:00
Mike Conley
d9903283d7 Bug 804690 - Skip test for bug 627234 if the Private Browsing service is not available. r=dkeeler. 2012-10-24 15:00:36 -04:00
Brian Smith
31cc1c11ed Bug 802378: Make PSM coding patterns more consistent, and more consistent with Mozilla Coding Style, r=keeler
--HG--
extra : rebase_source : 8b7ebf227a490cfde7376a61e2952a07a900e2d2
2012-10-17 13:48:36 -07:00
Patrick McManus
c0fb380918 bug 803267 - speculative backout of 802378 to test crash stats r=backout 2012-10-23 16:42:19 -04:00
Daniel Holbert
18106ac8d2 Bug 803236: Reorder nsSTSHostEntry constructors' init lists to fix build warning, and mark that directory & its sibling 'pki' as warning-free. r=bsmith 2012-10-18 15:42:10 -07:00
Brian Smith
035e8b8432 Bug 794510: Part 6 - Fixups needed to build on Windows and Android and Mac OS X debug, plus shorten comment to be less than 80 columns; r=ehsan 2012-10-18 15:55:48 -04:00
Kai Engert
33ba0fc9f9 Bug 757240 - May 2012 batch of changes to the EV-activation list, r=bsmith 2012-10-18 22:17:59 +02:00
Wan-Teh Chang
855975e926 Bug 801218: Upgrade NSS from NSS_3_14_BETA1 to NSS_3_14_RC1. 2012-10-18 11:41:08 -07:00
David Keeler
825d26ac23 bug 627234 - test that hsts data isn't deleted in private browsing when includeSubdomains is false r=bsmith 2012-10-22 10:38:50 -07:00
Nick Hurley
e7f284c9d3 Bug 536324 part 3 - Change consumers of nsIChannel. r=sworkman 2012-10-22 10:51:07 -07:00
Bobby Holley
bac4dc387e Bug 789224 - Separate certificate principals out from CAPS. r=dveditz
There's no longer any reason why "certificate principals" need to be principals at all.
I tried to rip them out entirely, but it looks like they're still used vestigially at XPI
install time to display author information. But there's no reason that they have to be
porkbarreled into the security-critical objects that we pass around all over the place.
So let's make them their own deal.

I was tempted to call them "certificate holders", but that would involve renaming methods and
cause more compat fuss than necessary.

--HG--
rename : caps/idl/nsISignatureVerifier.idl => security/manager/ssl/public/nsISignatureVerifier.idl
2012-10-22 08:29:56 +02:00
Brian Smith
4020f12f18 Bug 802378: Make PSM coding patterns more consistent, and more consistent with Mozilla Coding Style, r=keeler
--HG--
extra : rebase_source : 46fde9231dd69356221c0c5a7042a7b2d3dd0cf6
2012-10-17 13:48:36 -07:00
Isaac Aggrey
588adae9f1 Bug 794510: Part 5 - use plarena.h type definitions; r=ehsan 2012-10-11 01:39:28 -05:00
Ehsan Akhgari
5f562a1bf7 Bug 722978 - Port the certificate exception UI to the new per-window private browsing API; r=jdm
--HG--
extra : rebase_source : a49d0c630a170a950dd830ad484e084a29f8b51f
2012-10-12 23:38:19 -04:00
David Keeler
3b999cffca bug 786417 - filter the hsts preload list to sites that actually send the header r=bsmith, mayhemer 2012-10-15 14:43:57 -07:00
Andrew Quartey
9b685a759c Bug 792581 - part 17: Replace LL_L2F macro with a double cast. r=ehsan 2012-10-12 13:29:11 -04:00
Andrew Quartey
6d6e443bea Bug 792581 - part 16: Replace LL_L2UI macro with uint32_t cast. r=ehsan 2012-10-12 13:29:11 -04:00
Trevor Saunders
e2db6e1941 bug 798595 - remove useless prmem.h includes r=ehsan 2012-10-04 02:14:06 -04:00
Abhishek Potnis
2abf651a08 Bug 795504: Remove usages of PR_STATIC_CALLBACK from the tree; r=ehsan 2012-10-08 21:45:12 +05:30
EKR
3ba764ed03 Bug 790517: mtransport - Generic media transport subsystem for ICE and DTLS r=jesup,bsmith,mcmanus 2012-10-02 13:04:58 -07:00
Andrew Quartey
3b4dab9dc0 Bug 792581 - part 13: Replace LL_MOD macro with modulo operator. r=ehsan 2012-10-05 01:05:28 -04:00
Andrew Quartey
52003ca06d Bug 792581 - part 12: Replace LL_DIV with division operator. r=ehsan 2012-10-05 01:05:28 -04:00
Andrew Quartey
42f2f3750f Bug 792581 - part 11: Replace LL_MUL macro with multiplication operator. r=ehsan 2012-10-05 01:05:28 -04:00
Andrew Quartey
1839819e70 Bug 792581 - part 10: Replace LL_SUB macro with mathematical minus operator. r=ehsan 2012-10-05 01:05:27 -04:00