Commit Graph

66 Commits

Author SHA1 Message Date
Brian Smith
7eb83c7ec9 Bug 787155: Avoid using libpkix on B2G to work around crash in PKIX_List_GetItem and improve performance, r=honzab, a=tef+
--HG--
extra : rebase_source : 88ef8746f7f74dc4891599ba6d074a20c801778f
2013-04-17 17:17:10 -07:00
Camilo Viecco
a04c03cc90 Bug 813418 - Backout 95add3006aaf due to bustage CLOSED TREE 2013-04-15 16:45:38 -07:00
Camilo Viecco
29bf74d445 Bug 813418 - Backout 2f47fcb0a648 due to bustage CLOSED TREE 2013-04-15 16:45:11 -07:00
Camilo Viecco
9376ed8b22 Bug 813418 - Backout 7bcdee03b55 due to bustage CLOSED TREE 2013-04-15 16:44:38 -07:00
Camilo Viecco
c760167814 Bug 813418 - Centralize certificate validation (Part 3 Getting chain form verify). r=bsmith
--HG--
rename : security/manager/ssl/src/nsCERTValInParamWrapper.cpp => security/manager/ssl/src/CertVerifier.cpp
extra : rebase_source : f373c1dabd57b4e0e6d61ac27b2eb0528eac03ba
2013-04-15 15:39:39 -07:00
Brian Smith
214e506247 Bug 813418 - Centralize certificate validation (Part 2 centralize verfification) r=bsmith
--HG--
rename : security/manager/ssl/src/nsCERTValInParamWrapper.cpp => security/manager/ssl/src/CertVerifier.cpp
extra : rebase_source : 36e8fc83be5c0ec3d83791f04505f47ab972e2cb
2012-10-27 00:11:35 -07:00
Camilo Viecco
903d1a3019 Bug 813418 - Centralize certificate validation (Part 1, tests). r=bsmith
--HG--
extra : rebase_source : a9d66d37da35b315097af6e20177188a3ef52ce0
2013-02-27 10:30:19 -08:00
Brian Smith
adaa345534 Bug 714477: Do not check the OCSP enabled pref during extended validation, r=rrelyea
--HG--
extra : source : 48823673fe63bd00cd182fe185b6aba0d19eff9d
2013-01-18 10:28:58 -08:00
Ehsan Akhgari
129c4cd7fd Bug 579517 follow-up: Remove NSPR types that crept in 2013-01-07 18:21:50 -05:00
Brian Smith
0cfd275457 Bug 767241, Part 2: Replace almost all uses of NSSCleanupAutoPtrClass with ScopedNSSTypes, r=honzab
--HG--
extra : rebase_source : 5fa068e15febb301b0c776f1a565262d698789b2
2012-11-12 09:42:28 -08:00
Brian Smith
2a9f131039 Backed out changeset c966b16e4fb5
--HG--
extra : rebase_source : 4b3f5af10951cf33c70f459a5043075bb946ccb4
2012-11-30 19:37:39 -08:00
Brian Smith
6ca9a21460 Bug 767241, Part 2: Replace almost all uses of NSSCleanupAutoPtrClass with ScopedNSSTypes, r=honzab 2012-11-12 09:42:28 -08:00
Kai Engert
8fe2c9902a Bug 799304 - Document how to enable a CA root certificate for EV (extended validation, r=rrelyea, DONTBUILD 2012-11-15 17:33:37 +01:00
Brian Smith
31cc1c11ed Bug 802378: Make PSM coding patterns more consistent, and more consistent with Mozilla Coding Style, r=keeler
--HG--
extra : rebase_source : 8b7ebf227a490cfde7376a61e2952a07a900e2d2
2012-10-17 13:48:36 -07:00
Patrick McManus
c0fb380918 bug 803267 - speculative backout of 802378 to test crash stats r=backout 2012-10-23 16:42:19 -04:00
Kai Engert
33ba0fc9f9 Bug 757240 - May 2012 batch of changes to the EV-activation list, r=bsmith 2012-10-18 22:17:59 +02:00
Brian Smith
4020f12f18 Bug 802378: Make PSM coding patterns more consistent, and more consistent with Mozilla Coding Style, r=keeler
--HG--
extra : rebase_source : 46fde9231dd69356221c0c5a7042a7b2d3dd0cf6
2012-10-17 13:48:36 -07:00
Isaac Aggrey
84680bfb39 Bug 789847 - Remove PR_CALLBACK usage from tree 2012-09-25 11:18:38 -05:00
Randell Jesup
29ac5c0b8c Bug 773151: Convert nsCAutoString->nsAutoCString CLOSED TREE r=bsmedberg 2012-09-01 22:35:17 -04:00
Landry Breuil
d47685dcd8 Bug 785738 Part 5: restore a PRUint64, fix an OpenBSD build failure. r=ehsan
Root cause is bug 634793 (ie int64_t != PRint64 on OpenBSD..sigh), and
since security/nss/lib/certdb/certt.h still uses PRUint64 for
cert_rev_flags_per_method we need to assign it a correct type in
security/manager/ssl/src/nsIdentityChecking.cpp.
2012-08-30 09:10:44 +02:00
Ehsan Akhgari
8c296bbcd4 Bug 579517 - Part 1: Automated conversion of NSPR numeric types to stdint types in Gecko; r=bsmedberg
This patch was generated by a script.  Here's the source of the script for
future reference:

function convert() {
echo "Converting $1 to $2..."
find . ! -wholename "*nsprpub*" \
       ! -wholename "*security/nss*" \
       ! -wholename "*/.hg*" \
       ! -wholename "obj-ff-dbg*" \
       ! -name nsXPCOMCID.h \
       ! -name prtypes.h \
         -type f \
      \( -iname "*.cpp" \
         -o -iname "*.h" \
         -o -iname "*.c" \
         -o -iname "*.cc" \
         -o -iname "*.idl" \
         -o -iname "*.ipdl" \
         -o -iname "*.ipdlh" \
         -o -iname "*.mm" \) | \
    xargs -n 1 sed -i -e "s/\b$1\b/$2/g"
}

convert PRInt8 int8_t
convert PRUint8 uint8_t
convert PRInt16 int16_t
convert PRUint16 uint16_t
convert PRInt32 int32_t
convert PRUint32 uint32_t
convert PRInt64 int64_t
convert PRUint64 uint64_t

convert PRIntn int
convert PRUintn unsigned

convert PRSize size_t

convert PROffset32 int32_t
convert PROffset64 int64_t

convert PRPtrdiff ptrdiff_t

convert PRFloat64 double
2012-08-22 11:56:38 -04:00
Aryeh Gregor
57c0ad57fb Bug 777292 part 2 - Change all nsnull to nullptr 2012-07-30 17:20:58 +03:00
Gervase Markham
64b4633d51 Bug 759095 - upgrade license to MPL 2, and other licensing cleanups. 2012-05-31 10:33:35 +01:00
Brian Smith
933613a562 Bug 703834 - Part 1 - Factor TransportSecurityInfo base class out of nsNSSIOLayer, r=honzab
--HG--
rename : security/manager/ssl/src/nsNSSIOLayer.cpp => security/manager/ssl/src/TransportSecurityInfo.cpp
rename : security/manager/ssl/src/nsNSSIOLayer.h => security/manager/ssl/src/TransportSecurityInfo.h
2012-04-29 21:00:22 -07:00
Kai Engert
4f31bf6664 Bug 661681 - Enable A-Trust-nQual-03 root certificate for EV in PSM
r=honzab
2011-12-18 16:08:38 +01:00
Brian Smith
c1eb7360a3 Bug 698983: Fix extended validation indicator, r=mayhemer 2011-11-02 20:59:56 -07:00
Brian Smith
b50e0e6eef Bug 686248: Add isExtendedValidation to nsISSLStatus so it can be used by mobile, r=meyhemer
--HG--
extra : rebase_source : 6d21f2fdc3cb587874662cc23f84503e63b95ed1
2011-10-30 11:43:06 -07:00
Ehsan Akhgari
2a602a5685 Bug 690892 - Replace PR_TRUE/PR_FALSE with true/false on mozilla-central; rs=dbaron
Landing on a CLOSED TREE
2011-10-17 10:59:28 -04:00
Michael Wu
d8e503c38b Bug 675553 - Switch from PRBool to bool on a CLOSED TREE , r=bsmedberg,khuey,bz,cjones
--HG--
rename : tools/trace-malloc/bloatblame.c => tools/trace-malloc/bloatblame.cpp
2011-09-28 23:19:26 -07:00
Kai Engert
a00df4bb79 Bug 682927 - Dis-trust DigiNotar root certificate, part 2; r=bsmith 2011-08-30 10:32:25 -04:00
Kai Engert
b5b651566c Bug 642144, Enable multiple roots for EV. (March 2011 batch, depends on NSS 3.12.10), r=rrelyea, r=honzab 2011-05-05 16:38:11 +02:00
Kai Engert
9de12182dd Bug 614852, Enable multiple roots from NSS 3.12.9 for EV. (Nov/Dec 2010 batch), r=honzab.moz, a=johnath 2011-02-17 14:52:25 +01:00
Boying Lu
cfbf9938c5 Bug 621848 - memory leak in nsNSSComponent::IdentityInfoInit; r=mayhemer a=johnath 2011-01-17 12:26:53 -05:00
Kai Engert
8ce90f1ec7 bug 582759, Enable multiple new roots from NSS 3.12.8 for EV
r=rrelyea, a=johnath
2010-11-25 20:53:32 +01:00
Julian Seward
98f5697d12 Bug 538531 - valgrind: UMR in sec_asn1e_write_contents() because PSM passes uninitialized SECItem to NSS r=sayrer,honzab.moz
--HG--
extra : rebase_source : 5adcbbde9728161c83ab3967e059ec8c50495edc
2010-07-18 11:25:16 +02:00
Kai Engert
789d452402 Bug 555860, Enable Certplus Class 2 Primary CA for EV in PSM
r=rrelyea, r=honzab
2010-05-03 13:34:56 +02:00
Kai Engert
697c86dc09 Bug 499716, Enable Buypass Class 3 CA 1 for EV in PSM
r=rrelyea, approval-1.9.2=johnath
2009-12-04 07:10:35 +01:00
Wan-Teh Chang
9cd3d12b27 Bug 510135: Fix leaks of certificatePolicies and subjectAltName
extensions.  r=alexei.volkov.
2009-08-15 20:51:10 -07:00
Wan-Teh Chang
2f2dd84793 Bug 510135: Don't need to decode policy OID in CERTPolicyInfo
because the 'oid' member contains the decoded policy OID.  Use
CERT_REV_M_IGNORE_MISSING_FRESH_INFO (the default) for clarity.
r=alexei.volkov
2009-08-14 06:37:31 -07:00
Daniel Holbert
3fdba359b8 Bug 497832: Restore const keyword on char*s in nsMyTrustedEVInfo struct, to reduce compiler spam. r=kaie 2009-06-13 22:09:38 -07:00
Eddy Nigg
aa97b9ac8e EV enablement for 6 roots. b=493709 r=kaie
WellsSecure, SECOM Trust, StartCom, SwissSign, Cybertrust, DigiNotar
2009-05-22 11:41:44 -04:00
Kai Engert
533a2e2d3f Bug 450429, Enable COMODO ECC Certificate Authority for EV in PSM
r=nelson
2008-10-22 04:29:51 +02:00
Kai Engert
86201c8a3c Bug 456945 - EV failure, off by one error; r=rrelyea 2008-10-16 03:06:44 +02:00
Kai Engert
12321d9d10 bug 449892, Enable additional EV roots for FF 3.0.2
r=rrelyea
2008-08-20 03:57:23 +02:00
Kai Engert
c91389877e Bug 442561, enable Entrust Root Certification Authority for EV
r=rrelyea
2008-07-08 23:27:13 +02:00
Kai Engert
3c85060846 Bug 429794, Lk (trace malloc leaks) test results have become very unstable
r=nelson
2008-07-08 22:42:51 +02:00
kaie@kuix.de
c0caa44ac4 Bug 431384, Enable Network Solutions Certificate Authority for EV r=rrelyea, a1.9=beltzner 2008-05-03 18:36:46 -07:00
kaie@kuix.de
913a248f1e Bug 428415, Don't pass uninitialized values to NSS CERT_PKIXVerifyCert r=rrelyea, a1.9=dsicore 2008-04-10 18:26:19 -07:00
kaie@kuix.de
f9e142e884 Bug 406755, EV certs not recognized as EV with some cross-certification scenarios second landing attempt, earlier EV verification, patch 9 r=rrelyea also landing a regression fix, which applies to debug mode compilation code, only r=rrelyea blocking1.9=dsicore 2008-04-08 18:48:02 -07:00
kaie@kuix.de
ed10ad9a44 Bug 425518, Enable multiple roots for EV (and remove 1): Geotrust, Thawte, Verisign, Trustwave, Comodo r=rrelyea, r=nelson, blocking1.9=dsicore 2008-04-08 17:28:48 -07:00