Brian Smith
3a97f29d06
Bug 970542, Part 9: Better document name constraints as reference IDs, r=keeler
...
--HG--
extra : rebase_source : 60413188771454081226d58d03156c15ce795ca7
2014-10-26 11:26:26 -07:00
Brian Smith
adaf412263
Bug 970542, Part 8: IPAddress name constraint tests, r=keeler
...
--HG--
extra : rebase_source : e8cc0158248d4621da19dfef56089957af417f73
2014-10-26 16:57:00 -07:00
Brian Smith
f9a98ddf90
Bug 970542, Part 7: More CN-ID name constraint tests, r=keeler
...
--HG--
extra : rebase_source : 7a3d1d31cdc08ea1b989428cfc85f60a00528c72
2014-12-03 21:35:29 -08:00
Brian Smith
54e073fbcf
Bug 970542, Part 6: DNSName name constraint tests, r=keeler
...
--HG--
extra : rebase_source : ec31862fc25cfcba1454ae862a26e7a27513e9b6
2014-10-19 23:53:45 -07:00
Brian Smith
02208f546b
Bug 970542, Part 5: New name constraint implementation, r=keeler, r=mmc
...
--HG--
extra : rebase_source : 849161ac892b05e5ff2d5552c632fc647d309085
2014-10-18 15:38:42 -07:00
Brian Smith
9b37d008b6
Bug 970542, Part 4: DirectoryName name constraint matching, r=keeler
...
--HG--
extra : rebase_source : 01770088851823ae1005227dcd43d82d015f4b0e
2014-10-18 14:51:37 -07:00
Brian Smith
c21142ee14
Bug 970542, Part 3: IPAddress name constraint matching, r=keeler
...
--HG--
extra : rebase_source : f47ef9ead3323704595b91873811d1ead2403839
2014-10-17 13:02:26 -07:00
Brian Smith
f8c7ead55e
Bug 970542, Part 2: DNSName name constraint matching, r=keeler
...
--HG--
extra : rebase_source : 50b1a7d5d9da97cc64e09d5e6cdc41b8200c3551
2014-10-20 22:20:58 -07:00
Brian Smith
539fa2a14d
Bug 970542, Part 1: Refactor name matching within CN AVAs to reduce duplicate logic, r=keeler
...
--HG--
extra : rebase_source : f129b24c58377f34ac7d80ee7d5e8775635843ff
2014-10-16 16:44:27 -07:00
Bob Owen
2824b2a003
Bug 1105729: Pre VS2010 SP1 define our own verion of _xgetbv. r=tabraldes
2014-11-28 18:58:33 +00:00
Cykesiopka
012a5db140
Bug 1009158 - Fix and re-enable PSM xpcshell tests that would previously time out on Android due to LD_LIBRARY_PATH issues. r=keeler
2014-12-03 09:15:00 +01:00
Masatoshi Kimura
6d98b6a986
Bug 1102632 - Stop triggering non-secure fallback for SSL_ERROR_UNSUPPORTED_VERSION. r=keeler
2014-12-02 20:33:24 +09:00
Kai Engert
3665e05348
Bug 1088969
- Upgrade Mozilla 36 to use NSS 3.17.3, changing version numbers, only.
2014-12-01 14:34:08 +01:00
Jan Beich
d76f92bf8d
Bug 1105851 - Unbreak non-unified non-SPS build after 1054498. r=jcj
2014-11-30 21:27:45 +01:00
Bob Owen
513e26d6ce
Bug 1094667: Use the USER_NON_ADMIN access token by default for the Windows content sandbox. r=tabraldes
2014-11-29 17:12:18 +00:00
Bob Owen
976a5c00ec
Bug 928044 Part 3: Add logging changes back into the Chromium interception code. r=tabraldes
2014-11-29 17:12:18 +00:00
Bob Owen
9a0a395aed
Bug 928044 Part 2: Enable the content sandbox by default on Windows with an open policy. r=tabraldes,glandium,jimm
...
--HG--
rename : security/sandbox/win/src/warnonlysandbox/wosCallbacks.h => security/sandbox/win/src/logging/loggingCallbacks.h
rename : security/sandbox/win/src/warnonlysandbox/wosTypes.h => security/sandbox/win/src/logging/loggingTypes.h
rename : security/sandbox/win/src/warnonlysandbox/warnOnlySandbox.cpp => security/sandbox/win/src/logging/sandboxLogging.cpp
rename : security/sandbox/win/src/warnonlysandbox/warnOnlySandbox.h => security/sandbox/win/src/logging/sandboxLogging.h
2014-11-29 17:12:18 +00:00
Bob Owen
f1c46b88fc
Bug 928044 Part 1: Remove Chromium interception logging changes. r=tabraldes
2014-11-29 17:12:17 +00:00
ffxbld
9c4b8697e8
No bug, Automated HPKP preload list update from host b-linux64-ix-0005 - a=hpkp-update
2014-11-29 03:19:59 -08:00
ffxbld
fc4c314b24
No bug, Automated HSTS preload list update from host b-linux64-ix-0005 - a=hsts-update
2014-11-29 03:19:56 -08:00
Kai Engert
5120a5ba80
Bug 1088969
- Upgrade Mozilla 36 to use NSS 3.18, land beta 4 which backs out bug 1073330
2014-11-28 07:56:26 +01:00
Carsten "Tomcat" Book
004f2edc52
Backed out changeset 761071f57ab6 (bug 1024809) for emulator ics bustage
2014-11-27 16:30:41 +01:00
Mark Goodwin ext:(%2C%20Harsh%20Pathak%20%3Chpathak%40mozilla.com%3E)
e1eaa1f5df
Bug 1024809 - (OneCRL) Create a blocklist mechanism to revoke intermediate certs. r=keeler,Unfocused
2014-11-27 04:12:00 +01:00
Masatoshi Kimura
5754d27f07
Bug 1092998 - Followup to address review comments. r=keeler
2014-11-27 21:39:33 +09:00
Bob Owen
0313e26177
Bug 1027902: Use an intial integrity level of low for the GMP sandbox on Windows. r=tabraldes
2014-11-27 08:44:45 +00:00
Blake Kaplan
0a803d9447
Bug 582297 - Make <keygen> work in e10s. r=billm/dkeeler
2014-11-26 14:28:28 -08:00
Masatoshi Kimura
d651e82425
Bug 1092998 - Deal with "cipher mismatch intolerant" servers. r=keeler
2014-11-27 07:19:11 +09:00
Rob Stradling
2f38dd3438
bug 1104109 - follow-up to fix new EV OID description strings (they need to match if the OIDs are the same) r=keeler
2014-11-26 11:28:17 -08:00
Bob Owen
7ca0b31e65
Bug 1041775 Part 3: Re-apply pre-vista stdout/err process inheritance change to Chromium code after merge. r=tabraldes
...
Originally landed as changsets:
https://hg.mozilla.org/mozilla-central/rev/f94a07671389
2014-11-18 15:11:47 +00:00
Bob Owen
57f83c8aaa
Bug 1041775 Part 2: Re-apply warn only sandbox changes to Chromium code after merge. r=tabraldes
...
Originally landed as changsets:
https://hg.mozilla.org/mozilla-central/rev/e7eef85c1b0a
https://hg.mozilla.org/mozilla-central/rev/8d0aca89e1b2
2014-11-18 15:09:55 +00:00
Bob Owen
13e2a562f7
Bug 1041775 Part 1: Update Chromium sandbox code to commit 9522fad406dd161400daa518075828e47bd47f60. r=jld,aklotz,glandium
...
--HG--
rename : security/sandbox/chromium/sandbox/linux/sandbox_export.h => security/sandbox/chromium/sandbox/sandbox_export.h
2014-11-18 13:48:21 +00:00
Cykesiopka
82d0372c82
Bug 1103336 - Fix and re-enable PSM xpcshell tests that don't use add_tls_server_setup() on Android. r=dkeeler
2014-11-22 00:08:00 +01:00
J.C. Jones
ab36d11f8d
Bug 1104109 - December 2014 batch of EV root CA Changes. r=keeler
2014-11-24 16:36:00 +01:00
Richard Barnes
78927cb49c
Bug 968817 - Only accept certs for server TLS which use EKU (and which assert the TLS Server Authentication EKU) r=keeler
2014-11-24 20:33:50 -05:00
Jed Davis
eb5a7b8072
Bug 1101170 - Move Linux sandbox code into plugin-container on desktop. r=kang r=glandium
...
Specifically:
* SandboxCrash() uses internal Gecko interfaces, so stays in libxul.
* SandboxInfo moves to libxul from libmozsandbox, which no longer exists.
* Where libxul calls Set*Sandbox(), it uses weak symbols.
* Everything remains as it was on mobile.
2014-11-24 15:22:13 -08:00
Jed Davis
279ab5b3c8
Bug 1101170 - Move sandbox status info into a separate module. r=kang r=glandium
...
This changes the interface so that the code which determines the flags
can live in one place, but checking the flags doesn't need to call into
another library.
Also removes the no-op wrappers for Set*Sandbox when disabled at build
time; nothing used them, one of them was unusable due to having the wrong
type, and all they really accomplish is allowing sloppiness with ifdefs
(which could hide actual mistakes).
2014-11-24 15:22:13 -08:00
Richard Barnes
c8d1717147
Bug 1088255 - Collect telemetry on CAs that appear in valid cert chains r=keeler
2014-11-07 16:26:46 -05:00
Carsten "Tomcat" Book
99c627c356
merge mozilla-inbound to mozilla-central a=merge
2014-11-24 13:30:23 +01:00
ffxbld
ad59d69d06
No bug, Automated HPKP preload list update from host bld-linux64-spot-132 - a=hpkp-update
2014-11-22 03:19:44 -08:00
ffxbld
cd9a4bdea2
No bug, Automated HSTS preload list update from host bld-linux64-spot-132 - a=hsts-update
2014-11-22 03:19:41 -08:00
Kai Engert
d568114769
Bug 1088969
- Upgrade Mozilla 36 to use NSS 3.18 - NSS_3_18_BETA3, r=wtc
2014-11-20 20:29:15 +01:00
Carsten "Tomcat" Book
00488eb57e
Backed out changeset 1aebb84c8af1 (bug 1041775) for Windows 8 PGO Build Bustage on a CLOSED TREE
...
--HG--
rename : security/sandbox/chromium/sandbox/sandbox_export.h => security/sandbox/chromium/sandbox/linux/sandbox_export.h
2014-11-20 16:11:56 +01:00
Carsten "Tomcat" Book
aadab21ee9
Backed out changeset ec63befb3ad7 (bug 1041775)
2014-11-20 16:11:12 +01:00
Carsten "Tomcat" Book
0f9bf9f40f
Backed out changeset ebe866ff8a44 (bug 1041775)
2014-11-20 16:11:06 +01:00
David Keeler
cc65ea472a
bug 1079436 - fix validThrough as returned by VerifyEncodedOCSPResponse r=briansmith
...
validThrough should now be the time through which, if passed in as the given
time to validate an OCSP response at, VerifyEncodedOCSPResponse will still
consider it trustworthy. After that time, it will be expired. This makes it
so the OCSP cache compares validity period responses consistently with
mozilla::pkix.
2014-11-21 10:43:43 -08:00
Bob Owen
a52aebdb85
Bug 1041775 Part 3: Re-apply pre-vista stdout/err process inheritance change to Chromium code after merge. r=tabraldes
...
Originally landed as changsets:
https://hg.mozilla.org/mozilla-central/rev/f94a07671389
2014-11-18 15:11:47 +00:00
Bob Owen
87ccc9be29
Bug 1041775 Part 2: Re-apply warn only sandbox changes to Chromium code after merge. r=tabraldes
...
Originally landed as changsets:
https://hg.mozilla.org/mozilla-central/rev/e7eef85c1b0a
https://hg.mozilla.org/mozilla-central/rev/8d0aca89e1b2
2014-11-18 15:09:55 +00:00
Bob Owen
aae8e1186c
Bug 1041775 Part 1: Update Chromium sandbox code to commit 9522fad406dd161400daa518075828e47bd47f60. r=jld,aklotz
...
--HG--
rename : security/sandbox/chromium/sandbox/linux/sandbox_export.h => security/sandbox/chromium/sandbox/sandbox_export.h
2014-11-18 13:48:21 +00:00
David Keeler
975927dcc7
bug 1091232 - update PSM data structures that are affected by root CA changes r=mmc
2014-11-18 16:41:18 -08:00
Cykesiopka
509363556e
Bug 1089305 - Switch EV tests to SQL DB and partially clean up scripts. r=keeler
2014-11-17 21:12:00 +01:00