Magnus Melin
f7471d0bb1
Bug 1200567 - ensure shipped blocklist.xml doesn't affect the test_cert_blocklist.js. r=dkeeler
...
Caused comm-central TEST-UNEXPECTED-FAIL | security/manager/ssl/tests/unit/test_cert_blocklist.js | - revocations.txt should be as expected
2015-12-10 19:08:09 +02:00
Ryan VanderMeulen
62fbdedafe
Merge m-c to inbound. a=merge
2015-12-05 15:27:33 -05:00
Ryan VanderMeulen
63e1acf84e
Merge fx-team to m-c. a=merge
2015-12-05 15:09:41 -05:00
ffxbld
13ffbb6fae
No bug, Automated HPKP preload list update from host bld-linux64-spot-049 - a=hpkp-update
2015-12-05 04:05:19 -08:00
ffxbld
84f7ea7dba
No bug, Automated HSTS preload list update from host bld-linux64-spot-049 - a=hsts-update
2015-12-05 04:05:17 -08:00
Panos Astithas
039b1a70f1
Bug 1207146 - Add a link to expert technical information in the cert error page. r=Gijs,keeler
2015-12-04 19:46:13 +02:00
Bob Owen
a225070f96
Bug 1229804: Use the correct string length in Windows sandbox logging. r=tabraldes
2015-12-03 11:19:14 +00:00
Carsten "Tomcat" Book
b0525f779e
merge mozilla-inbound to mozilla-central a=merge
2015-12-03 12:00:42 +01:00
ffxbld
94445b2f14
No bug, Automated HPKP preload list update from host bld-linux64-spot-369 - a=hpkp-update
2015-12-02 14:59:16 -08:00
ffxbld
995f8130a6
No bug, Automated HSTS preload list update from host bld-linux64-spot-369 - a=hsts-update
2015-12-02 14:59:14 -08:00
Mike Hommey
57f05db8a5
Bug 1225682 - Don't use nsAuto{,C}String as class member variables in security/manager/. r=keeler
2015-12-02 11:04:37 +09:00
Xidorn Quan
8864e8fa81
Bug 1229587 part 2 - Use verbose format to disable C4061 to workaround bug of VS2015u1. r=keeler
2015-12-03 09:29:42 +11:00
Xidorn Quan
40b3b8be85
Bug 1229587 part 1 - Disable C4464 warning newly added in VS2015u1. r=keeler
2015-12-03 09:29:42 +11:00
Cykesiopka
d3496ca93e
Bug 1224968 - Support public key input to unbreak periodic HPKP updates. r=keeler
...
be448badb1ba1f296240
2015-12-01 00:30:00 +01:00
Cykesiopka
48152475d6
Bug 1228794 - Convert test_getchain.js to generate certificates at build time. r=keeler
...
With this change, CertUtils.py is no longer needed.
2015-12-01 00:28:00 +01:00
Bogdan Postelnicu
aea0abf4da
Bug 1228346 - initialize mOCSPMustStapleEnabled in constructor. r=dkeeler
2015-11-26 07:40:00 +01:00
David Keeler
a0a0bd8a2c
bug 986956 - only ever initialize NSS once per process r=Cykesiopka r=mgoodwin
...
As a consequence, if NSS is initialized when there is no profile directory, NSS
will not persist changes. Other failures may occur (e.g. see bug 1216882).
2015-11-19 13:31:52 -08:00
Mark Goodwin
39bf94580b
Bug 1227970 - Perform preference checks to allow OCSP Bypass for OneCRL via Kinto r=keeler
2015-11-26 16:57:21 +00:00
Carsten "Tomcat" Book
46bd94b7de
Merge mozilla-central to mozilla-inbound
2015-11-25 13:57:30 +01:00
Jonathan Hao
db70215456
Bug 1225422 - Update the PrivilegedPackageRoot certificate. r=keeler
2015-11-19 15:08:05 +08:00
Julian Hector
62aebd2a01
Bug 1215303 - Part 2 - automatically enable broker when in permissive mode r=jld
2015-11-13 12:29:47 +00:00
Julian Hector
4a50cad8bc
Bug 1215303 - Part 1 - add permissive mode r=jld
2015-11-13 12:27:45 +00:00
Ben Bucksch
fcfe70ba4a
Bug 1200802 - Accept RFC1929 SOCKS credentials in proxyInfo. r=michal
2015-11-24 22:56:00 +01:00
Carsten "Tomcat" Book
e8329a26bf
merge mozilla-inbound to mozilla-central a=merge
2015-11-23 14:08:50 +01:00
ffxbld
ea3cd557b2
No bug, Automated HPKP preload list update from host bld-linux64-spot-1073 - a=hpkp-update
2015-11-21 03:49:57 -08:00
ffxbld
d1065e576b
No bug, Automated HSTS preload list update from host bld-linux64-spot-1073 - a=hsts-update
2015-11-21 03:49:55 -08:00
David Keeler
7777004de0
bug 1230234 - fix a leak in client auth certificate handling r=Cykesiopka
...
Looks like this was essentially a copy/paste error. See changeset 04b4ea333800,
which appears to have landed as part of bug 675221 (the bug number annotation in
that commit message is incorrect).
2015-12-03 12:43:23 -08:00
Mark Goodwin
18e5fc3212
Bug 1224467 - Add a preference for controlling whether oneCRL blocklists are updated via AMO. Also add a test. r=keeler,mossop
2015-11-18 11:53:54 +00:00
Carsten "Tomcat" Book
e53fe2c40e
Merge mozilla-central to mozilla-inbound
2015-11-17 12:33:46 +01:00
Carsten "Tomcat" Book
72a2bb1a1b
merge fx-team to mozilla-central a=merge
2015-11-17 12:10:03 +01:00
ffxbld
73f130af61
No bug, Automated HPKP preload list update from host bld-linux64-spot-383 - a=hpkp-update
2015-11-17 00:44:58 -08:00
ffxbld
65e938363c
No bug, Automated HSTS preload list update from host bld-linux64-spot-383 - a=hsts-update
2015-11-17 00:44:56 -08:00
Cykesiopka
df3c0999ef
Bug 1224478 - Replace do_check_* calls with their Assert.jsm equivalents in PSM xpcshell tests. r=keeler
...
Also replaces if-do_throw() blocks with equivalent Assert.jsm method calls.
2015-11-16 22:53:00 +01:00
Wes Kocher
20a6f667ce
Merge m-c to fx-team, a=merge
2015-11-16 17:28:26 -08:00
Panos Astithas
d57e1f69aa
Make 'Go Back' button work even when there is nothing to go back to (bug 1221084); r=paolo
2015-11-16 15:37:27 +02:00
Cykesiopka
bc1f70ae1c
Bug 1224481 - Comment out CA certs removed in NSS 3.21 in PreloadedHPKPins.json to keep periodic Static HPKP updates working. r=dkeeler
2015-11-13 07:28:28 -08:00
Cykesiopka
fefb703f63
Bug 1222903 - Reject EV status for EV EE certs that are valid for longer than 27 months as well. r=keeler
2015-11-13 07:42:00 +01:00
David Keeler
76e9b80948
bug 1222179 - remove unnecessary observation topics in nsNSSComponent r=Cykesiopka
...
nsNSSComponent would (unnecessarily) observe "profile-change-net-teardown" and
"profile-change-net-restore". Now it no longer does.
2015-11-12 16:21:33 -08:00
Mark Goodwin
39defcf9cc
Bug 921907 - Enable OCSP must-staple. r=keeler
2015-11-20 11:44:25 +00:00
Kai Engert
38c05169d7
Bug 1211568, land NSS_3_21_RTM r=martin.thomson, and adjust Makefiles r=mh
2015-11-13 18:03:01 +01:00
Mark Goodwin
e64e269a0d
Bug 901698 - Some tests for OCSP-must-staple; r=keeler
2015-11-13 16:49:09 +00:00
Mark Goodwin
f2e92f7de5
Bug 901698 - Implement OCSP-must-staple; r=keeler
2015-11-13 16:49:08 +00:00
David Keeler
cbc6c51f4d
bug 1223466 - update extended validation information to deal with root removals in NSS 3.21 r=mgoodwin
...
These entries were removed:
from bug 1204962:
CN=TC TrustCenter Universal CA III,OU=TC TrustCenter Universal CA,O=TC TrustCenter GmbH,C=DE
SHA-256: 309B4A87F6CA56C93169AAA99C6D988854D7892BD5437E2D07B29CBEDA55D35D
SHA-1: 9656CD7B57969895D0E141466806FBB8C6110687
from bug 1204997:
CN=A-Trust-nQual-03,OU=A-Trust-nQual-03,O=A-Trust Ges. f. Sicherheitssysteme im elektr. Datenverkehr GmbH,C=AT
SHA-256: 793CBF4559B9FDE38AB22DF16869F69881AE14C4B0139AC788A78A1AFCCA02FB
SHA-1: D3C063F219ED073E34AD5D750B327629FFD59AF2
from bug 1208461:
CN=UTN - DATACorp SGC,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
SHA-256: 85FB2F91DD12275A0145B636534F84024AD68B69B8EE88684FF711375805B348
SHA-1: 58119F0E128287EA50FDD987456F4F78DCFAD6D4
2015-11-10 10:13:18 -08:00
Wes Kocher
cfdc46c501
Merge m-c to inbound, a=merge
2015-11-11 17:12:26 -08:00
Masatoshi Kimura
451907567d
Bug 1219088 - Clear the session cache when a weak crypto override is revoked. r=keeler
2015-11-11 23:13:34 +09:00
Masatoshi Kimura
e178ef3a87
Bug 1223131 - Don't remove a host from the whitelist if the version fallback was needed. r=keeler
2015-11-12 07:18:37 +09:00
Ehsan Akhgari
356c8d7e00
Bug 1215723 - Part 5: Add an automated test; r=keeler
2015-10-30 15:30:00 -04:00
Ehsan Akhgari
ae44b58442
Bug 1215723 - Part 4: Make isSecureHost and isSecureURI usable from the content process; r=keeler
2015-10-30 15:30:00 -04:00
Ehsan Akhgari
578bdf9ab2
Bug 1215723 - Part 3: Propagate updates to DataStorage from the parent process to the content processes; r=keeler
2015-10-30 15:30:00 -04:00
Ehsan Akhgari
3990e391f4
Bug 1215723 - Part 2: Initialize DataStorage items in the content process from the data in the parent; r=keeler
2015-10-30 15:30:00 -04:00
