Monica Chew
085607a75a
Bug 1035923: Remove deprecated certs from google_root_pems (r=keeler)
2014-07-08 16:01:29 -07:00
Benoit Jacob
539a8b5902
Bug 1035394 - Fix dangerous public destructors in security/ - r=bsmith
2014-07-08 17:23:18 -04:00
Camilo Viecco
6ce12bd4a1
Bug 827264 - Add some temporary android logging to nss. r=blassey
...
--HG--
extra : rebase_source : 8f16d6b6cbaed2ef51fb5d1ecf7edbb0b8568ffe
2014-06-27 13:55:11 -07:00
Chris Peterson
65da3b81ed
Bug 1035607 - Remove unused empty_null to fix -Wunused warning-as-error in security/pkix. r=briansmith
2014-07-07 20:37:21 -07:00
Brian Smith
8d65effbf6
Bug 1035470: Use signature algorithm OID instead of digest algorithm OID in the signature field of certificates in mozilla::pkix tests, r=cviecco
...
--HG--
extra : rebase_source : 99b1d5c0739221e90d4b04738f9362135f42a23c
2014-07-07 00:46:10 -07:00
David Keeler
247c6dfcfe
bug 940506 - remove nsIRecentBadCerts and implementation r=briansmith
2014-07-07 15:33:24 -07:00
Brian Smith
876b584f49
Bug 1035008, Part 2: Modify existing mozilla::pkix GTests to follow naming conventions, r=mmc
...
--HG--
rename : security/pkix/test/gtest/pkix_cert_chain_length_tests.cpp => security/pkix/test/gtest/pkixbuild_tests.cpp
rename : security/pkix/test/gtest/pkix_cert_extension_tests.cpp => security/pkix/test/gtest/pkixcert_extension_tests.cpp
rename : security/pkix/test/gtest/pkix_ocsp_request_tests.cpp => security/pkix/test/gtest/pkixocsp_CreateEncodedOCSPRequest_tests.cpp
extra : rebase_source : 05035197c37cd2fecf0c6e2f5231eeabfd4f64fd
extra : histedit_source : db050cf69b025e34e992a68b8b57665608c6a3d9
2014-07-05 22:14:25 -07:00
Brian Smith
c178453b72
Bug 1035008, Part 1: Document naming convention for mozilla::pkix GTests, r=mmc
...
--HG--
extra : rebase_source : 8239f56513d8aba59eb8851bd219295fb6920b64
extra : histedit_source : 90856c24e66c7cc451c65cfd72a005cb2949085a
2014-07-06 15:59:08 -07:00
Brian Smith
358b82e03b
Bug 1034636: Remove mozilla::pkix::ScopedCERTCertifciate and mozilla::pkix::ScopedPLArenaPool, r=mmc
...
--HG--
extra : rebase_source : 68e6da2f1e1c7fa678ef4cc81d23cc6298709108
extra : histedit_source : feba4c589dbf004ee50e2dea1fca0809f8f97674
2014-07-03 21:49:56 -07:00
Brian Smith
0c6544f1f0
Bug 1033563, Part 3: Change mozilla::pkix::TrustDomain::FindPotentialIssuers API to be iterator-like, r=keeler
...
--HG--
extra : rebase_source : e8c734ecb2de2c52dd8909c8b48f4bdb09d0128e
2014-07-02 16:15:16 -07:00
Brian Smith
f13fdc263c
Bug 1033563, Part 2: Convert mozilla::pkix::BuildForwardInner into an iterator-type thing, r=keeler
...
--HG--
extra : rebase_source : 175e308191441035db4f3eed4a855205bab1a3f3
2014-07-02 15:03:58 -07:00
Brian Smith
f628a48e8e
Bug 1033563, Part 1: Move revocation checking code from mozilla::pkix::BuildForward to BuildForwardInner, r=keeler
...
--HG--
extra : rebase_source : 0f11eb64ffb00d953c39d81f4877067bd173eadd
2014-07-02 12:21:41 -07:00
Brian Smith
549189d132
Bug 1029247, Part 2: Parse certificates using mozilla::pkix::der, r=keeler
...
--HG--
extra : rebase_source : e093922497d005734c590a59f175993a7715bce8
2014-07-03 16:59:42 -07:00
Brian Smith
f58287e30a
Bug 1035034: Fix typo in CertVerifier, r=cviecco
...
--HG--
extra : rebase_source : b8871ee8cf1e156ef48d363ea49e8b82ab268d98
2014-07-06 19:15:13 -07:00
Monica Chew
9e4228ecad
Bug 1027133: Set test_mode=false for *.twitter.com (r=keeler)
2014-07-07 08:58:13 -07:00
Jan de Mooij
3c7459b21a
Bug 1034191 - Make nsDependentJSString users work with Latin1 strings and nursery-allocated strings. r=bz
2014-07-05 17:30:54 +02:00
Brian Smith
66ce2813a7
Bug 1029247, Part 1: Add new overload to mozilla::pkix::bind, r=keeler
...
--HG--
extra : rebase_source : 7a9dc499ed6ad038e4840953744a9fcd6578290b
2014-06-21 18:06:30 -07:00
Brian Smith
f1d1e65aca
Bug 1034634: Improve ScopedNSSTypes.h to compile without warnings, r=mmc
...
--HG--
extra : rebase_source : a9cbc1ab3083f1e893552c49a4518453f3b7d1b7
2014-07-03 20:40:46 -07:00
Brian Smith
d35cdc1555
Bug 1034632: Fix suppression of warnings for MOZILLA_PKIX_ENUM_CLASS, r=mmc
...
--HG--
extra : rebase_source : 962fa75dab803f1d139096fa5d41b4b656e32f86
2014-07-03 20:41:07 -07:00
Brian Smith
840e9d16c9
Bug 1034412: Clarify definition of mozilla::pkix::der::SEQUENCE, r=mmc
...
--HG--
extra : rebase_source : 3e139a66133c1d7916fbc13c7cec2b12e9545122
2014-06-30 21:58:34 -07:00
Zack Weinberg
1998b1670b
Bug 234856: add automated test case (fixed by bug 235230). r=kaie
2014-07-04 12:22:32 -04:00
Marco Castelluccio
c56414d138
Bug 1029674 - Fix installation of apps with custom origin. r=myk,keeler
...
--HG--
rename : toolkit/webapps/tests/test_packaged_launch.xul => toolkit/webapps/tests/test_custom_origin.xul
2014-07-04 15:23:16 +02:00
Harsh Pathak
fffec87019
Bug 643041 - Merge nsIX509Cert2 and nsIX509Cert3 into nsIX509Cert, and merge nsIX509CertDB2 into nsIX509CertDB. r=keeler
...
--HG--
extra : rebase_source : 5283c637e45dbee9f741d56cda54fdef1afce16e
2014-07-03 22:09:24 -07:00
Brian Smith
eabf3ca82e
Bug 1019770: Add tests for checking of notAfter and notBefore, r=cviecco
...
--HG--
extra : rebase_source : 614e002886ffa73e7e38218ebb3ea2509edcd1a4
2014-06-30 19:12:35 -07:00
Monica Chew
92f36e6b6f
Bug 1033872: Split off api.accounts.firefox.com into a separate pinset (r=keeler)
2014-07-03 16:41:57 -07:00
Kai Engert
b03f02387d
Bug 1029561, Update to NSS 3.16.3 after July 1st to include root CA updates, r=rrelyea
2014-07-03 17:24:18 +02:00
Jed Davis
dd6575be07
Bug 956961 - Stop disabling sandboxing when DMD is enabled. r=kang
...
--HG--
extra : rebase_source : 4737cfd613c1ddee8e1a4340e819eddc151e73f7
extra : histedit_source : 2d2610a775a3ae986157f61ef3797f4e88baa922
2014-07-02 11:28:48 -07:00
Brian Smith
747d5ce9c9
Bug 1033103: Add and use mozilla::pkix::der::ExpectTagAndGetTLV, r=keeler
...
--HG--
extra : rebase_source : 16461be12705998799f5c84e2043d68b0c431cb0
2014-07-01 13:25:43 -07:00
Brian Smith
f98c380254
Bug 1033092: Add unit tests for mozilla::pkix::der::ExpectTagAndGetValue, r=keeler
...
--HG--
extra : rebase_source : 8ad8960969e5ee5bf47054f1c285a85cbbdb18cf
2014-07-01 16:28:45 -07:00
Wes Kocher
929077356e
Backed out changeset 5206957b4f83 (bug 940506) for build bustage on a CLOSED TREE
2014-07-02 18:15:55 -07:00
Wes Kocher
20f50977c0
Merge m-c to inbound
2014-07-02 17:44:20 -07:00
Wes Kocher
6b3e1ca139
Merge inbound to m-c a=merge
2014-07-02 16:31:17 -07:00
David Keeler
51b554fb6a
bug 940506 - remove nsIRecentBadCerts and implementation r=briansmith
2014-07-02 11:15:26 -07:00
ffxbld
48104012ec
No bug, Automated HPKP preload list update from host b-linux64-hp-0034 - a=hpkp-update
2014-07-02 10:05:51 -07:00
ffxbld
50c4cd24ee
No bug, Automated HSTS preload list update from host b-linux64-hp-0034 - a=hsts-update
2014-07-02 10:05:48 -07:00
Wes Kocher
f174cd042e
Backed out 3 changesets (bug 956961) for non-unified build bustage
...
Backed out changeset f1be89cb58b9 (bug 956961)
Backed out changeset 272b01e4f856 (bug 956961)
Backed out changeset 56907af18c66 (bug 956961)
2014-07-02 15:03:29 -07:00
Brian Smith
0c5e4c3465
Bug 1032947: Change CheckNameConstraints to construct CERTCertificate instances when needed, r=keeler
...
--HG--
extra : rebase_source : d0bf802f4ff3fe9900ed7444c046617aa27faea9
2014-06-26 14:22:20 -07:00
Brian Smith
26dc5a975e
Bug 1019770: Add more tests for parsing GeneralizedTime and TimeChoice, r=cviecco
...
--HG--
extra : rebase_source : f38fd90973b4bdf2cff5887c7d48f7e7b2a7126b
2014-07-01 18:01:28 -07:00
Brian Smith
35167f7fb2
Bug 1019770, Part 2: modify existing GeneralizedTime tests to test TimeChoice too, r=cviecco
...
--HG--
extra : rebase_source : fe0b6f06a374dd1e50233c352031e6fdbde1c5f9
2014-06-24 10:51:53 -07:00
Brian Smith
ffb9b0ea05
Bug 1019770: Use mozilla::pkix::der to decode times and certificate validity period, r=cviecco
...
--HG--
extra : rebase_source : 2b1fa83599c4d0748757b25b56f65e10d41504c8
2014-06-24 21:48:12 -07:00
Brian Smith
c0edfa6daf
Bug 1031952: Remove preferences for obsolete cipher suites, r=keeler
...
--HG--
extra : rebase_source : 22eaa4fbeb20d9b9524d550c1979f5ec27d963ac
2014-06-29 15:15:45 -07:00
Wes Kocher
af7ae55f0c
Backed out changeset 6728977a3687 (bug 1031952) to fix bustage on a CLOSED TREE
2014-07-01 17:44:18 -07:00
Wes Kocher
e94fb2297d
Backed out changeset 5ea9b7bd2db5 (bug 1019770)
2014-07-01 17:43:47 -07:00
Wes Kocher
e28f2353af
Backed out changeset 981f8345edd8 (bug 1019770)
2014-07-01 17:43:43 -07:00
Wes Kocher
f8ac718627
Backed out changeset 91b03a644dbe (bug 1019770)
2014-07-01 17:43:38 -07:00
Wes Kocher
33290e8d10
Backed out changeset f97578949399 (bug 1032947)
2014-07-01 17:43:33 -07:00
Brian Smith
215f38b298
Bug 1032947: Change CheckNameConstraints to construct CERTCertificate instances when needed, r=keeler
...
--HG--
extra : rebase_source : 64bd4c390f708213242e0d4987b7117b0049d02a
2014-06-26 14:22:20 -07:00
Brian Smith
98aa2aa582
Bug 1019770: Add more tests for parsing GeneralizedTime and TimeChoice, r=cviecco
...
--HG--
extra : rebase_source : 5e8171a2a849d61866ccdff33f06d96f04fc4bd5
2014-06-30 17:11:56 -07:00
Brian Smith
8480ae43f4
Bug 1019770, Part 2: modify existing GeneralizedTime tests to test TimeChoice too, r=cviecco
...
--HG--
extra : rebase_source : 8c891cc5269482d1ccf4c1c688e5576a2b8864f8
2014-06-24 10:51:53 -07:00
Brian Smith
7d84462b7b
Bug 1019770: Use mozilla::pkix::der to decode times and certificate validity period, r=cviecco
...
--HG--
extra : rebase_source : 05e348b4ae9bb88fdd0895ec5dcec55993ca17c4
2014-06-24 21:48:12 -07:00
Brian Smith
e9bc359f89
Bug 1031952: Remove preferences for obsolete cipher suites, r=keeler
...
--HG--
extra : rebase_source : 92ccc85ffe5db10649242d8796daecc6833ca14a
2014-06-29 15:15:45 -07:00
Monica Chew
9afcf9b174
Bug 1012875: Expire pins in 8 weeks once they reach stable (r=keeler)
2014-07-02 11:34:04 -07:00
Jed Davis
49f614d6ca
Bug 956961 - Stop disabling sandboxing when DMD is enabled. r=kang
...
--HG--
extra : amend_source : 66f2453794e6a8a581e1564e786cfc8cac1f6bbd
2014-07-02 11:28:48 -07:00
David Keeler
2a5b4f9664
bug 1019770 - follow-up to remove unused const GENERALIZED_TIME_LENGTH r=briansmith
2014-07-02 10:04:31 -07:00
David Keeler
2ed80eebae
bug 1025332 - use nsIDocshell.failedChannel in certificate exception dialog instead of recent bad certs service r=jaws
2014-06-13 16:13:09 -07:00
Kyle Huey
d2738ad8c9
Bug 1031051: Part 18 - Kill the old XPIDL-based event generator. r=smaug
2014-06-30 16:02:04 -07:00
Kyle Huey
bf1fd04304
Bug 1031051: Part 8 - Migrate SmartCardEvent to the WebIDL code generator. r=smaug
2014-06-30 16:02:02 -07:00
David Keeler
e81525f1dc
bug 1005266 - disable test_ocsp_timeout.js on windows for frequent intermittent failures r=mmc
2014-06-30 13:14:31 -07:00
Joshua Cranmer
85bb6bc254
Fix spelling mistake in changeset 3018d1b623ab (bug 1025998), r=bustage-fix a=bustage-fix
...
--HG--
extra : amend_source : 021b1b14fee5068e2176be9395c5c461f3333947
2014-06-29 21:34:47 -05:00
Joshua Cranmer
439281d591
Bug 1025998 - add a missed symbol for comm-central debug builds, rs=glandium, a=philor for landing on m-c directly.
2014-06-29 17:46:13 -05:00
Phil Ringnalda
02bb2e2ec7
Merge m-i to m-c, a=merge
2014-06-28 17:39:03 -07:00
ffxbld
61e9de60c8
No bug, Automated HSTS preload list update from host bld-linux64-spot-147 - a=hsts-update
2014-06-28 03:40:19 -07:00
Nathan Froyd
0d91e4eaf7
Bug 1025998 - part 2 - use hand-rolled .def files for linking NSS; r=glandium
2014-06-24 15:36:10 -04:00
Brian Smith
fc1da5970d
Bug 1030475: Use a valid id-ce-inhibitAnyPolicy extension value for test pkix_cert_extensions.KnownCriticalCEExtension, r=keeler
...
--HG--
extra : rebase_source : 34972b2842d65ad6d716b0fbccf4984f9efd1fbf
2014-06-25 17:14:32 -07:00
Brian Smith
3ecc948391
Bug 1030478: Make the AIA extension used in pkix_cert_extensions.CriticalAIAExtension less invalid, r=keeler
...
--HG--
extra : rebase_source : 42241cb4c8d2ba4e3e0ccc937059f9510765314b
2014-06-25 16:42:50 -07:00
Brian Smith
9a8e340c2d
Bug 1031022: Go back to accepting explicit encoding of v1 for certificates and OCSP responses, r=cviecco
...
--HG--
extra : rebase_source : f0adf63879a48db6c036cce1a3e9a7b65e44fc4e
2014-06-26 17:03:48 -07:00
Carsten "Tomcat" Book
39ff1551ea
merge fx-team to mozilla-central a=merge
2014-06-26 15:33:24 +02:00
Wes Kocher
c8c625d1b9
Merge m-c to fx-team a=merge
2014-06-25 18:44:50 -07:00
Nathan Froyd
5bbf5e513f
Backout bcd72aabb661, 1ed1c6212f4c, and 8d6f286139ef (bug 1025998) for xpcshell bustage leading to this CLOSED TREE
2014-06-25 17:00:06 -04:00
Nathan Froyd
3de99d0ace
Bug 1025998 - also export symbols groveled out of NSS by ctypes; r=me to reopen this CLOSED TREE
2014-06-25 15:14:49 -04:00
Brian Smith
bf76dd549d
Bug 1029341: Factor out decoding of certificate/OCSP extensions, r=keeler
...
--HG--
extra : rebase_source : a1d66b75838e9dfad486f5654db6d977e5c1d97a
extra : histedit_source : 34e05d8b3d94500b9cb4f1e311f8fe526b97ba6e
2014-06-24 21:52:50 -07:00
Brian Smith
adfff88e33
Bug 1029364: Centralize version parsing in BackCert::Init, r=cviecco
...
--HG--
extra : rebase_source : 7e91710ed7cd6e68875c2d26f0b503835968e1f2
extra : histedit_source : e07446cad5edbf6cbb048304bc2b2af4395410db
2014-06-25 01:32:06 -07:00
Brian Smith
8503754c20
Bug 1029992, Improve AlgorithmIdentifier decoding in mozilla::pkix, r=cviecco
...
--HG--
extra : rebase_source : dec7d3e00afe3a9e433f789baf09c0c41679b0e2
extra : histedit_source : 47657cfde7a266b5d5322b024800abe316e9dbd6
2014-06-24 21:47:50 -07:00
Nathan Froyd
5a67e1f345
Bug 1025998 - part 2 - use hand-rolled .def files for linking NSS; r=glandium
2014-06-24 15:36:10 -04:00
Kai Engert
5f9fdca404
Bug 1020695, Update Mozilla to use NSS 3.16.2, r=wtc
2014-06-25 11:25:59 +02:00
Carsten "Tomcat" Book
51ab717a65
Backed out changeset 4f21e9bc729a (bug 1029364) for B2G Device and Emulator Bustage on a CLOSED TREE
2014-06-25 10:01:17 +02:00
Carsten "Tomcat" Book
14df6ed8f0
Backed out changeset a10da316a35f (bug 1029341)
2014-06-25 10:00:42 +02:00
Brian Smith
8a23d2f4a9
Bug 1029341: Factor out decoding of certificate/OCSP extensions, r=keeler
...
--HG--
extra : rebase_source : e307bea95d29cf78c9eaa7ddb1f2b2c195a59dc9
2014-06-24 21:52:50 -07:00
Brian Smith
54eb2e2841
Bug 1029364: Centralize version parsing in BackCert::Init, r=cviecco
...
--HG--
extra : rebase_source : 79d5f29c2af1ec77d6bb8a7936bb0a17f28e8d52
2014-06-19 16:17:28 -07:00
Jim Blandy
4d6a633bba
Bug 914753: Make Emacs file variable header lines correct, or at least consistent. DONTBUILD r=ehsan
...
The -*- file variable lines -*- establish per-file settings that Emacs will
pick up. This patch makes the following changes to those lines (and touches
nothing else):
- Never set the buffer's mode.
Years ago, Emacs did not have a good JavaScript mode, so it made sense
to use Java or C++ mode in .js files. However, Emacs has had js-mode for
years now; it's perfectly serviceable, and is available and enabled by
default in all major Emacs packagings.
Selecting a mode in the -*- file variable line -*- is almost always the
wrong thing to do anyway. It overrides Emacs's default choice, which is
(now) reasonable; and even worse, it overrides settings the user might
have made in their '.emacs' file for that file extension. It's only
useful when there's something specific about that particular file that
makes a particular mode appropriate.
- Correctly propagate settings that establish the correct indentation
level for this file: c-basic-offset and js2-basic-offset should be
js-indent-level. Whatever value they're given should be preserved;
different parts of our tree use different indentation styles.
- We don't use tabs in Mozilla JS code. Always set indent-tabs-mode: nil.
Remove tab-width: settings, at least in files that don't contain tab
characters.
- Remove js2-mode settings that belong in the user's .emacs file, like
js2-skip-preprocessor-directives.
2014-06-24 22:12:07 -07:00
Brian R. Bondy
9886164729
Bug 598615 - Rename HAVE_64BIT_OS to HAVE_64BIT_BUILD. r=ted
2014-06-24 22:16:25 -04:00
Wes Kocher
d9ec170da8
Backed out 2 changesets (bug 1027890) for B2G Windows Build bustage on a CLOSED TREE
...
Backed out changeset bcd694f0e95d (bug 1027890)
Backed out changeset 49cadfcde709 (bug 1027890)
2014-06-24 18:33:46 -07:00
Mike Hommey
f59abd2745
Bug 1027890 - Remove all sorts of build system code dedicated to pymake. r=gps
2014-06-25 08:38:28 +09:00
Cykesiopka
a29ee4ef6d
Bug 270016 - Make the list of certs shown in the Delete/Distrust cert dialog scrollable. r=keeler
2014-06-23 23:51:00 +02:00
Brian Smith
7878e11fff
Bug 1028643: Convert nsISignatureVerifier to use CertVerifier (mozilla::pkix) and move nsISignatureVerifier functionality to nsIDataSignatureVerifier, r=keeler
...
--HG--
extra : rebase_source : 14f6f5dedd7145d574ac5b4c86b6ad42b6716ae8
extra : histedit_source : f891fbe80c4ca9fc62849bc2d6d8ffad372a6bf0
2014-06-22 18:50:22 -07:00
Brian Smith
63d49eeb0e
Bug 1028493: Remove unused stapledOCSPResponse parameter from CreateCetErrorRunnable, r=mmc
...
--HG--
extra : rebase_source : 6ceddadff81fd607b53de317dc841e334bc76621
extra : histedit_source : d05fe4430c880da25c4d361977218ceb416d8f0d
2014-06-20 19:43:09 -07:00
Benoit Jacob
8bf465bb60
Bug 1028588 - Fix dangerous public destructors in security/ - r=bsmith
2014-06-23 18:40:03 -04:00
Honza Bambas
c3a79a614e
Bug 1023748 - Allow NTLMv1 over SSL/TLS by default, r=jduell
2014-06-23 19:43:40 +02:00
Ryan VanderMeulen
0c2067d9e5
Merge inbound to m-c. a=merge
2014-06-23 10:42:32 -04:00
ffxbld
d652fc38cc
No bug, Automated HSTS preload list update from host bld-linux64-spot-1030 - a=hsts-update
2014-06-21 03:14:13 -07:00
Harsh Pathak
50c058f0fd
bug 956147 - Use Scoped PLArenaPool in GetSubjectAltNames to avoid memory leaks. r=keeler.
2014-06-19 14:36:31 -07:00
Brian Smith
84f52d8461
Bug 1006812: Use mozilla::pkix::der to decode the key usage extension, r=keeler
...
--HG--
extra : rebase_source : e445c913994dc027e1179543d7b6cab2505e734d
2014-06-19 00:13:20 -07:00
Camilo Viecco
e62cd5dd12
Bug 1015973 - Improve cert error decoding. r=keeler
...
--HG--
extra : rebase_source : e812bc94b7c30727ef3a17fab0dac03633254083
2014-06-02 09:04:39 -07:00
David Keeler
a63cae1518
bug 1027711 - remove some unused const variables in PSM r=cviecco
2014-06-19 10:31:06 -07:00
Brian Smith
d06e9c1790
Bug 1027311, Part 3: Remove irrelevant & problematic extensions from test_cert_signatures test certificates, r=cviecco
...
--HG--
extra : rebase_source : 574e46ea5664b1985ac19dab395e75f75f0bdccb
2014-06-18 13:40:18 -07:00
Brian Smith
00b99f0d6f
Bug 1027311, Part 2: Remove irrelevant & problematic extensions from test_ev_certs test certificates, r=cviecco
...
--HG--
extra : rebase_source : 413b57030d95d8e0293933e01c5877909ceb27ff
2014-06-18 15:05:45 -07:00
Brian Smith
adbc90e527
Bug 1027311, Part 1: Remove irrelevant & problematic extensions from test_certificate_usages test certificates, r=cviecco
...
--HG--
extra : rebase_source : e9a4072de3d24797929fc37c85ba99517bb6bad1
2014-06-18 13:56:36 -07:00
Brian Smith
5d398a95ee
Bug 1027255: Add ASSERT_/EXPECT_ GTest helpers for mozilla::pkix::Result, r=mmc
...
--HG--
extra : rebase_source : 2fb8807724ba59028ec32e8d287296a905bd3615
2014-06-18 23:40:34 -07:00
Brian Smith
2ca94ac6c0
Bug 611752: Remove XPCOM CMS interfaces (nsICMS* and nsISMimeCert), r=keeler
...
--HG--
extra : rebase_source : d5f70ff8b084fa9d53309d28d2ad478a478f4ff6
2014-06-15 20:51:51 -07:00
Brian Smith
81e6beaa4b
Bug 1022970: Switch from UNIFIED_SOURCES back to SOURCES in security/pkix, security/certverifier, and security/manager/ssl/src, r=keeler
...
--HG--
extra : rebase_source : 7d45d018be6b23af199c1e9c858fb5bb3bb5a01b
2014-06-16 22:57:55 -07:00
Brian Smith
8db16ecca0
Bug 1026371
: Remove useless comments in CertVerifier.cpp, r=cviecco
...
--HG--
extra : rebase_source : 58444ab17c68bcde6938540b3b074af55e417687
2014-06-16 23:37:53 -07:00
Birunthan Mohanathas
ec8396a564
Bug 1016240 - Exterminate CR+LF line endings. r=briansmith,cpearce,ehsan,gavin
2014-06-18 17:56:02 -07:00
Benoit Jacob
1812745529
Bug 1027251 - Fix or whitelist dangerous public destructors in security/ - r=bsmith
2014-06-18 22:29:00 -04:00
Monica Chew
2c60d2032e
Bug 1027133: Enable test mode for *.twitter.com (r=keeler)
2014-06-18 16:23:13 -04:00
David Keeler
c251954bfe
bug 1017826 - follow-up to fix indentation r=me a=whitespace-only DONTBUILD
2014-06-17 09:14:00 -07:00
Harsh Pathak
ca13d59d69
Bug 1017826 - prevent a potential memory leak in OCSPCache::Put. r=keeler
2014-06-16 20:27:00 +02:00
Nathan Froyd
15b074605b
Bug 1018375 - part 4 - use a linker script for libnss3 on Linux-like OSes; r=glandium
2014-05-30 14:34:54 -04:00
Nathan Froyd
336ecd5b08
Bug 1018375 - part 3 - use a static list of NSS def files for MOZ_FOLD_LIBS groveling; r=glandium
2014-06-03 14:23:06 -04:00
Harsh Pathak
e61d04813e
bug 550052 - add length check when decoding key usage bit strings. r=dkeeler
2014-06-10 16:56:00 +02:00
Harsh Pathak
a4a5503deb
Bug 1017348 - DumpASN1Object/ifdef-ed out code removed. r=dkeeler
2014-06-10 16:58:00 +02:00
Phil Ringnalda
4e06fa48fe
Merge m-i to m-c, a=merge
2014-06-15 09:28:20 -07:00
ffxbld
07c98694d3
No bug, Automated HSTS preload list update from host bld-linux64-spot-006 - a=hsts-update
2014-06-14 03:14:44 -07:00
Wan-Teh Chang
c1b297e7af
Bug 1020695: Update Mozilla to use NSS 3.16.2 Beta 4. Includes fixes for
...
bug 1013088, bug 996237, bug 970539, bug 1016567, bug 485732, bug 334013,
bug 959864, bug 1016836, bug 1016811, bug 1018536, bug 996250, bug 1009227,
bug 963150, bug 1007126, bug 1021102.
2014-06-13 14:17:18 -07:00
Camilo Viecco
388e775d77
Bug 998513 - Test GeneralizedTime encodings in mozilla::pkix. r=keeler.
2014-06-13 12:50:11 -07:00
Wes Kocher
03b6cb112d
Merge m-c to fx-team
2014-06-11 18:52:12 -07:00
Monica Chew
fe6ce09033
Bug 1004352: Enable pinning for Google in production mode (r=keeler)
2014-06-11 15:32:37 -07:00
Gijs Kruitbosch
07a4ac12e7
Bug 908534 - change of event sink should trigger OnSecurityChange notifications, r=dkeeler
2014-06-11 11:19:17 +01:00
David Keeler
65bc823886
bug 1017160 - remove nsINSSCertErrorDialog and implementation r=cviecco
2014-06-09 16:35:35 -07:00
David Keeler
f6a2f616b1
bug 1020993 - properly handle unknown critical extensions in BackCert::Init r=briansmith
2014-06-09 13:57:44 -07:00
Harsh Pathak
4ba177382c
Bug 997370 - Update comment in nsIX509Cert.idl to reflect certificate fingerprint instead of public key. r=cviecco
2014-06-09 10:58:00 -04:00
Ryan VanderMeulen
8ad58324ce
Merge m-c to inbound on a CLOSED TREE. a=me
2014-06-07 13:36:44 -04:00
ffxbld
4fe9e3ab4b
No bug, Automated HSTS preload list update from host bld-linux64-spot-051 - a=hsts-update
2014-06-07 03:18:25 -07:00
David Keeler
cb6b2b4ade
bug 1019198 - fail handshake if given an expired OCSP response and fetching a new one fails r=briansmith
2014-06-06 09:20:50 -07:00
Camilo Viecco
d9e0b6f6ea
Bug 1000548 - Leaking arenas allocated in mozilla::pkix r=keeler
...
--HG--
extra : rebase_source : 6b0aaef098a4fa4d5749013a332b6b7602640b36
2014-06-05 16:28:46 -07:00
Ed Morley
5747f4d5d4
Backed out changeset 189492a9a115 (bug 1020695) for mochitest-2 failures in test_WebCrypto.html; CLOSED TREE
2014-06-05 15:52:01 +01:00
Wan-Teh Chang
9510f3e6cc
Bug 1020695: Update Mozilla to use NSS 3.16.2 Beta 3. Includes fixes for
...
bug 1013088, bug 996237, bug 970539, bug 1016567, bug 485732, bug 334013,
bug 959864, bug 1016836, bug 1016811, bug 1018536, bug 996250, bug 1009227,
bug 963150.
2014-06-05 07:06:32 -07:00
Wan-Teh Chang
ec2bea3335
Revert 8406a2b981c5 to fix build bustage.
...
> Bug 1020695: Update Mozilla to use NSS 3.16.2 Beta 3. Includes fixes for
> bug 1013088, bug 996237, bug 970539, bug 1016567, bug 485732, bug 334013,
> bug 959864, bug 1016836, bug 1016811, bug 1018536, bug 996250, bug 1009227,
> bug 963150.
2014-06-04 21:26:33 -07:00
Wan-Teh Chang
9939efaa7f
Bug 1020695: Update Mozilla to use NSS 3.16.2 Beta 3. Includes fixes for
...
bug 1013088, bug 996237, bug 970539, bug 1016567, bug 485732, bug 334013,
bug 959864, bug 1016836, bug 1016811, bug 1018536, bug 996250, bug 1009227,
bug 963150.
2014-06-04 21:03:47 -07:00
David Keeler
502d720549
bug 1003566 - part 2/2: prevent OCSP requests from being upgraded to HTTPS by HSTS r=cviecco
2014-06-04 09:58:28 -07:00
Camilo Viecco
3e7d66d335
Bug 1021797 - Rename ArenaFalseCleaner to PORT_FreeArena_false. r=keeler
...
--HG--
extra : rebase_source : e7316ee06f58f42afbaf68d7e5f7948277fd15fd
2014-06-06 14:11:08 -07:00
Monica Chew
291d694626
Bug 1020485: Enable pinning in test mode for accounts.firefox.com (r=keeler)
2014-06-06 13:44:59 -07:00
Brian Smith
2e61c5fffb
Bug 1020683, Part 3: Fix build bustage, a=BUSTAGE on a CLOSED TREE
...
--HG--
extra : rebase_source : 8eaa3eae911b0e75129988d58a19e5e76257b369
2014-06-06 12:04:36 -07:00
Brian Smith
9cdf5d2de5
Bug 1020682: Simplify mozilla::pkix results cert chain construction and make it more efficient, r=cviecco
...
--HG--
extra : rebase_source : 69cb8ea66e075c89bbcbab3ca115cc2ccc95fa4f
2014-06-04 01:28:44 -07:00
Brian Smith
fbc33e0c8d
Bug 1020683, Part 2: Remove more references to CERTCertificate from mozilla::pkix, r=keeler
...
--HG--
extra : rebase_source : 9dce7585975fb23fe04f5714ece18645b22b2261
2014-06-04 00:03:28 -07:00
Brian Smith
f3ab0b43c6
Bug 1020683, Part 1: Remove internal uses of CERTCertificate from mozilla::pkix::VerifyEncodedOCSPResponse, r=keeler
...
--HG--
extra : rebase_source : 416938498080c4d44874025f1da4562ab1c7c3c8
2014-06-05 15:18:32 -07:00
Brian Smith
90ae4efb88
Bug 1018411: Factor out signed data parsing in mozilla::pkix into a reusable and separately-testable function, r=keeler
...
--HG--
extra : rebase_source : d65a760f9f8efb656f238794019bd451ca163c0b
2014-05-31 18:54:34 -07:00
Mike Hommey
b02a375963
Bug 1027890 - Remove all sorts of build system code dedicated to pymake. r=gps
2014-06-25 08:38:28 +09:00
Jed Davis
d1a5790ae4
Bug 1014299 - Add times() to seccomp whitelist. r=kang
...
This system call seems to be used by some versions of the Qualcomm Adreno
graphics drivers when we run WebGL apps.
2014-06-02 14:52:00 +02:00
Sébastien Blin
6aefbf6100
Bug 1019722 - Remove a double assignment to lastRdn to fix a minor warning found by scan-build, the LLVM/Clang static analyzer. r=keeler
2014-06-02 20:16:14 +02:00
David Keeler
5acb4cc504
Bug 1009988 - OCSP tests: Precompute responses to prevent timeouts. r=cviecco
2014-06-02 11:35:27 -07:00
Monica Chew
d5ba5c9bc8
Bug 1019772: Enable production mode on pinning AMO (r=keeler)
2014-06-03 11:00:39 -07:00
Brian Smith
c9249cca82
Bug 1019814: Remove CERTCertificate dependency from TrustDomain::GetCertTrust, r=keeler
...
--HG--
extra : rebase_source : 9abf0522f02d00ac2f63f2327ddbe8d119ffc64f
2014-06-03 10:47:25 -07:00
Brian Smith
7af638d360
Bug 1019109: Add DottedOIDToCode.py tool, r=keeler
...
--HG--
extra : rebase_source : 44a92234f884af4500bc6eb5a1fc4dd4cfd38dc2
2014-06-02 10:50:04 -07:00
Cykesiopka
4e78fd0ee5
Bug 235230 - Change IDL type of nsIX509Cert::windowTitle to AString; Original patch by Zack Weinberg. r=keeler
2014-06-01 13:59:00 +02:00
Brian Smith
bf7fe601ba
Bug 1018633: Simplify the max cert chain length check code in mozilla::pkix and make it more efficient, r=cviecco
...
--HG--
extra : rebase_source : 7fa4cc6c1b46357abed0c57c6e24c622049c5acb
2014-05-31 16:32:58 -07:00
Brian Smith
7457c20cbe
Bug 1001188: Set the error code when the max cert chain length limit is exceeded, r=cviecco
...
--HG--
extra : rebase_source : ce9e1faa083f5c679e20a2b6d9e8d482462e75b0
2014-05-31 16:55:54 -07:00
Brian Smith
91e474eea0
Bug 1018642: Factor out reusable NSS GTest infrastructure into a new NSSTest class, r=cviecco
...
--HG--
extra : rebase_source : 101c316c1ea54f5092a21af4d7a1be349c504800
2014-05-30 16:46:49 -07:00
Brian Smith
06f430ee13
Bug 1018064: Replace mozilla::pkix::der::Input::Match with mozilla::pkix::der::Input::MatchRest, r=mmc
...
--HG--
extra : rebase_source : 5c5b14cf23b1e40854d241cbc482de40b01ac494
2014-05-29 22:09:45 -07:00
Brian Smith
293e4188d5
Bug 1018061: Have mozilla::pkix::der::Input::Read use EnsureLength instead of its own checks, r=mmc
...
--HG--
extra : rebase_source : f46d6b9bdcd7d7a272fb39f22312a89d2695db56
2014-05-29 23:36:30 -07:00
Phil Ringnalda
786e840e01
Merge m-i to m-c
2014-05-31 20:29:24 -07:00
ffxbld
bec4c38688
No bug, Automated HSTS preload list update from host bld-linux64-spot-176 - a=hsts-update
2014-05-31 03:14:44 -07:00
Cykesiopka
ea035ab7a4
Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
2014-05-30 00:01:00 -04:00
Camilo Viecco
be441f03f1
Bug 991815 - Part 2/2 - Tests for OCSP responses up to 1 year old. r=keeler
...
--HG--
extra : rebase_source : cc012870da3a165a0a3d0d5c6c9671eeeda37f3f
2014-05-28 14:08:02 -07:00
Camilo Viecco
fc11f7c21d
Bug 991815 - Part 1/2 - Allow intermediate OCSP responses up to 1 year old. r=keeler
...
--HG--
extra : rebase_source : 28d5336da1dc44932b92ce2c59fca5fcb2b8a3d8
2014-05-30 16:12:36 -07:00
Nathan Froyd
c5a3c603c2
Bug 1017661
- remove MOZ_NSS_PATCH functionality; r=glandium
2014-05-29 12:16:58 -04:00
Brian Smith
4c6adb7ede
Bug 1018033: Prevent buffer read overflow due to integer overflow in mozilla::pkix::der::Input::EnsureLength, r=keeler
...
--HG--
extra : rebase_source : e4e88d61e448fa475a106a06b9f32181906fba0f
2014-05-29 23:37:40 -07:00
Brian Smith
b3bb9ea641
Bug 1018041: Fix linking error in pkix_ocsp_request_tests when GTest is enabled on Windows, r=keeler
...
--HG--
extra : rebase_source : 36c5ee4f5cc40adb1079e34bd309147a662fc45f
2014-05-29 23:06:10 -07:00
Brian Smith
8dcde055ad
Bug 1018018: Remove support/mention of proprietary Netscape certificate extensions from PSM, r=cviecco
...
--HG--
extra : rebase_source : 758ff9384c040084b1015f8025a4ff9f33590176
2014-05-29 20:38:25 -07:00
Brian Smith
833425eae1
Bug 1010634, Part 6: Enable -Wall with a few exceptions for certverifier, r=cviecco
...
--HG--
extra : rebase_source : 611f0d65e7edb74345a4a599a6606de37e3da75e
2014-05-15 21:56:23 -07:00
Brian Smith
9eeeb8204b
Bug 1010634, Part 5: Add private destructor to NSSErrorService in line with the XPCOM recommendations, r=cviecco
...
--HG--
extra : rebase_source : 1f8b4558114eef0e1a15f51f0c814f16e05f6f76
2014-05-29 20:18:17 -07:00
Brian Smith
7a871c3cee
Bug 1010634, Part 3: Fix more warnings in CertVerifier, r=cviecco
...
--HG--
extra : rebase_source : 21e79fbc472aeccec7df213e0cd8d99bebfbff75
2014-05-29 20:17:53 -07:00
David Keeler
56379872a2
bug 1006710 - add class of PSM errors to SEC and SSL errors r=briansmith
2014-05-28 15:28:03 -07:00
Camilo Viecco
b3316b8666
Bug 1005142 - Part 2/2 - Basic OCSP fetch method tests. r=keeler
...
--HG--
extra : rebase_source : 364a5d410eb3743ae0a03ebcf0a258e847d71743
2014-05-23 09:47:41 -07:00
Camilo Viecco
44bf536cc4
Bug 1005142 - Part 1/2 - Add OCSP get capabilities to OCSPRequestor. r=keeler
...
--HG--
extra : rebase_source : ee4a86bf02a466a31de8b0b6cd7ce375a7f28c6d
2014-05-21 15:42:21 -07:00
David Keeler
4a93b644f6
bug 995801 - cache nsNSSCertificate::mCachedEVStatus on disk r=mayhemer
2014-01-10 11:13:03 -08:00
Brian Smith
e230435e59
Bug 1037324: Delegate additional name constraint selection to the TrustDomain in mozilla::pkix, r=cviecco
...
--HG--
extra : rebase_source : 300f33bfb3a0c9ae1525695b080674c1fb21eafc
2014-07-10 22:38:59 -07:00
Ryan VanderMeulen
1d389b2a03
Merge m-c to inbound. a=merge
2014-07-11 16:38:04 -04:00
David Keeler
16cc2aaa5e
bug 1031543 - allow importing user certificates via certificate manager r=honzab
2014-07-11 11:19:24 -07:00
David Keeler
3be08d691c
bug 1038913 - (4/4) test that smart card events are dispatched by the observer service r=briansmith
2014-08-06 16:56:12 -07:00
David Keeler
bb8405c01e
bug 1038913 - (3/4) add observer service notifications for smart card events ("smartcard-insert" and "smartcard-remove") r=briansmith
2014-07-24 13:00:46 -07:00
David Keeler
2f729908aa
bug 1038913 - (2/4) cleanup smart card event dispatching code for style and safety r=briansmith
2014-07-24 12:59:32 -07:00
David Keeler
eb9ed016d0
bug 1038913 - (1/4) move smart card event dispatching code to nsSmartCardMonitor.cpp r=briansmith
2014-07-24 12:58:14 -07:00
David Keeler
cdc5134237
bug 1047494 - refactor tautological size check in mozilla::pkix::VerifySignedData r=briansmith
2014-08-08 11:28:44 -07:00
Brian Smith
450a20ba54
Bug 1031542: Add test case for key usage without any value bits, r=keeler
...
--HG--
extra : rebase_source : 25bdc0db6b042fe6fbba61b80cb8a4ac7cb588eb
2014-06-27 15:21:48 -07:00
Brian Smith
2bd47f2cb9
Bug 975229: Remove NSS-based certificate verification, r=keeler
...
--HG--
extra : rebase_source : 49cb20f1b51e2d9993a35decd820764e20ad9be9
2014-06-16 23:13:29 -07:00
Brian Smith
c214d0f55e
Bug 1026261: Remove CERTCertificate from mozilla::pkix revocation checking API, r=keeler
...
--HG--
extra : rebase_source : 6798f494bd351961ea02abba07b5860839bbc418
2014-06-20 10:10:51 -07:00
David Keeler
4e568fe551
bug 1028178 - re-add nsICertificateDialogs to nsNSSDialogs' NS_IMPL_ISUPPORTS declaration r=briansmith
2014-06-20 09:38:08 -07:00
David Keeler
6dc7ca62d1
bug 997509 - heed expired Revoked or Unknown OCSP responses r=briansmith
2014-06-20 09:01:57 -07:00
Cykesiopka
40f95d5437
Bug 972702 - Make Cert Viewer details tab content resizable. r=keeler
2014-05-27 20:58:00 +02:00
Camilo Viecco
2883e1d4ea
Bug 1016442 - Make mozilla cdn sites production on built-in list. r=mmc
...
--HG--
extra : rebase_source : 5d937b61ab86c974210dcc83735cd4308bff018e
2014-05-27 10:53:40 -07:00
Ryan VanderMeulen
9460f40816
Backed out changeset d5da62e82faf (bug 995801) for test_browserElement_oop_SecurityChange.html failures.
...
CLOSED TREE
2014-05-27 14:27:40 -04:00
David Keeler
bacc5f19c7
bug 995801 - cache nsNSSCertificate::mCachedEVStatus on disk r=mayhemer
2014-01-10 11:13:03 -08:00
Richard Barnes
cf739d773c
Bug 998803 - Add support for RSA encryption and signing to WebCrypto API. r=bz,dkeeler
2014-05-23 15:29:00 +02:00
ffxbld
1b5b7ecfd1
No bug, Automated HSTS preload list update from host bld-linux64-spot-1068 - a=hsts-update
2014-05-24 03:14:12 -07:00
Monica Chew
c21cc7a85f
Bug 1004351: Enable production mode for twitter pins (r=keeler)
2014-05-22 15:11:07 -07:00
Monica Chew
f87b89298d
Bug 1014344: Use Google's root pems in addition to their intermediate certs (r=keeler)
2014-05-22 15:09:45 -07:00
Wan-Teh Chang
c88fddaa3c
Bug 1009794: Update NSS to NSS_3_16_2_BETA2, which also includes fixes
...
for bug 999893, bug 1011090, bug 1009785, bug 421391, and bug 1011229.
2014-05-22 12:31:09 -07:00
Cykesiopka
17e952b63e
Bug 622332 - Show cert SHA-256 fingerprint and remove MD5 fingerprint. r=keeler
2014-05-22 00:52:00 +02:00
Birunthan Mohanathas
76ca8ec617
Bug 869836 - Part 7: Use AppendLiteral instead of Append where possible. r=ehsan
2014-05-22 06:48:51 +03:00
Birunthan Mohanathas
c4568a7085
Bug 869836 - Part 6: Use EqualsLiteral instead of Equals where possible. r=ehsan
2014-05-22 06:48:51 +03:00
Birunthan Mohanathas
807e72372f
Bug 869836 - Part 4: Use EqualsLiteral instead of Equals(NS_LITERAL_STRING(...))
. r=ehsan
2014-05-22 06:48:51 +03:00
Birunthan Mohanathas
411a8639b4
Bug 869836 - Part 3: Use Append('c')
instead of AppendLiteral("c")
. r=ehsan
2014-05-22 06:48:51 +03:00
Birunthan Mohanathas
62570a8716
Bug 869836 - Part 2: Use AppendLiteral instead of Append(NS_LITERAL_STRING(...))
. r=ehsan
2014-05-22 06:48:50 +03:00
Camilo Viecco
a87a54bcc1
Bug 1010594 - Part 2/2 tests - r=keeler
...
--HG--
extra : rebase_source : 4ca9623b815544edc58308544fa85b192c2f31f3
2014-05-19 13:26:23 -07:00
Camilo Viecco
1eac4f4b6c
Bug 1010594 - Part 1/2 OCSP url check - r=briansmith
...
--HG--
extra : rebase_source : 0b26339d33db90722401ae1d8ac255d0390aea30
2014-05-16 13:53:14 -07:00
Camilo Viecco
4eff7cf088
Bug 1009635 - PreloadedHPKP.json should also contain production/exclusion lists. r=keeler
...
--HG--
extra : rebase_source : 46c13e490358f26b21191d6d783d795897ceea63
2014-05-15 08:04:54 -07:00
Richard Barnes
7b6d82be69
Bug 995385 - Ensure that NSS is initialzed for CryptoTasks. r=dkeeler
2014-05-16 15:47:00 -04:00
Bob Owen
2c9a59f64a
Bug 1009452 - inherit stdout and stderr into the content process to allow logging. r=aklotz
2014-05-14 16:09:31 +01:00
Jed Davis
c7dae997a6
Bug 920372 - Fix socketcall whitelisting on i386. r=kang
2014-05-20 18:38:14 -07:00
Jed Davis
1523066770
Bug 920372 - Allow tgkill only for threads of the calling process itself. r=kang
2014-05-20 18:38:06 -07:00
Jed Davis
3a308504da
Bug 920372 - Use Chromium seccomp-bpf compiler to dynamically build sandbox program. r=kang
2014-05-20 18:37:53 -07:00
Jed Davis
3b103d307f
Bug 920372 - Import Chromium seccomp-bpf compiler, rev 4c08f442d2588a2c7cfaa117a55bd87d2ac32f9a. r=kang
...
Newly imported:
* sandbox/linux/seccomp-bpf/
* sandbox/linux/sandbox_export.h
* base/posix/eintr_wrapper.h
Updated:
* base/basictypes.h
* base/macros.h
At the time of this writing (see future patches for this bug) the only
things we're using from sandbox/linux/seccomp-bpf/ are codegen.cc and
basicblock.cc, and the header files they require. However, we may use
more of this code in the future, and it seems cleaner in general to
import the entire subtree.
2014-05-20 18:37:45 -07:00
Monica Chew
b35189dfe7
Bug 1013504: Introduce error file for genHPKPStaticPins.js (r=keeler)
2014-05-20 13:25:02 -07:00
Richard Barnes
ae11832c51
Bug 1005375 - Add an API that allows CryptoTasks to be created without being dispatched
2014-05-03 08:50:00 +02:00
Chris Peterson
7429b133b7
Bug 1007708 - Part 1: Fix warnings in security/pkix/test/ and mark as FAIL_ON_WARNINGS. r=briansmith
2014-05-17 20:12:10 -07:00
Monica Chew
1d542c52b2
Bug 1011269: Forgot to qref to pick up keeler's changes (r=keeler)
2014-05-19 13:24:41 -07:00
Monica Chew
8bc2f051f9
Bug 1011269: Add CertVerifier::pinningEnforceTestMode (r=keeler)
2014-05-19 13:04:40 -07:00
David Keeler
0c382cbab9
bug 986150 - fix some comments in mozilla::pkix DER tests r=mmc
2014-05-19 12:14:51 -07:00
David Keeler
b0685b996f
bug 986150 - test mozilla::pkix::der::OptionalBoolean r=mmc
2014-05-19 12:14:44 -07:00
David Keeler
7490c005ac
bug 1002814 - OCSP requests: long serial check should be on cert, not issuerCert r=briansmith
2014-05-14 10:05:32 -07:00
David Keeler
ca14d7c987
bug 1002814 - retry PK11_GenerateKeyPair when it fails non-fatally r=briansmith
2014-05-19 11:13:04 -07:00
Marco Castelluccio
98f16ffbdc
Bug 972201 - Remove the MOZ_B2G_CERTDATA hack. r=briansmith
2014-05-18 15:42:42 +02:00
ffxbld
7253546a17
No bug, Automated HSTS preload list update from host bld-linux64-spot-358 - a=hsts-update
2014-05-17 03:15:04 -07:00
Brian Smith
ed25ac818b
Bug 1010634, Part 1: Fix compiler warnings in certverifier, r=cviecco
...
--HG--
extra : rebase_source : f8d925f042040368b038b62bc1d0c9d4d6d04618
2014-05-14 17:46:32 -07:00
Brian Smith
b3711e99df
Bug 1006958: Use mozilla::pkix::der to parse certificate policies instead of NSS, r=keeler
...
--HG--
extra : rebase_source : fde88efebc1025bc4f825aa38df809d04b1b250a
2014-05-15 18:59:52 -07:00
Brian Smith
fcba6f8814
Bug 1010581: Document Expect/Match/Skip terminology in mozilla::pkix::der and make that code more consistent, r=keeler
...
--HG--
extra : rebase_source : 12aa2e1e9eed4f32a75732a65cbfaba9789d5d39
2014-05-14 19:30:09 -07:00
Brian Smith
e1de62ff87
Bug 1006041: Use mozilla::pkix::der for decoding the extended key usage extension, r=keeler
...
--HG--
extra : rebase_source : b4b62f117d653784eb6ad058554faf520a1bd90b
2014-05-14 01:02:34 -07:00
Brian Smith
dd25f656a6
Bug 989564, Part 2: Remove CERTCertificate dependency from CheckBasicConstraints, r=keeler
...
--HG--
extra : rebase_source : c0ce62f44109cbcdf65da770a1154814733a6b49
2014-04-25 20:27:27 -07:00
Brian Smith
8a6f85b521
Bug 989564, Part 1: Decode basic constraints extension using mozilla::pkix::der, r=keeler
...
--HG--
extra : rebase_source : 89560218a69596868cb8a93c69ee72656b0abf77
2014-05-05 09:55:57 -07:00
Monica Chew
a1ab4d859d
Bug 1007844: Implement per-host telemetry for pin violations for AMO and aus4 (r=keeler)
2014-05-15 16:56:51 -07:00
Monica Chew
f023ce771c
Bug 1006594: Implement moz-specific telemetry (r=keeler)
2014-05-14 16:36:46 -07:00
David Keeler
34bae7a5a0
backout dfc04fd0a41f (bug 1002814) for gtest breakage
2014-05-14 11:08:20 -07:00
David Keeler
099169f359
bug 1005266 - disable strict timeout checking in test_ocsp_timeout.js on WinXP because of frequent failures r=mmc
2014-05-14 09:57:10 -07:00
David Keeler
bfe37e0d32
bug 1002814 - OCSP requests: long serial check should be on cert, not issuerCert r=briansmith
2014-05-14 10:05:32 -07:00
Patrick McManus
033d5fc4e8
bug 1006804 - psm interface for kea size and make kea available in preliminary handshake r=keeler r=honzab
2014-05-06 17:22:25 -04:00
Gervase Markham
4ce70c195e
Bug 1007195 - Change licensing on mozilla::pkix to dual Apache 2/MPL 2. r=briansmith.
2014-05-14 14:37:25 +01:00
Monica Chew
9eb1c9c9de
Bug 1009720: Telemetry for CERT_PINNING_TEST_RESULTS (r=keeler)
2014-05-13 13:50:13 -07:00
David Keeler
c441103da0
bug 1005355 - look for PSM test binaries in /data/local/xpcb/ on Android/B2G r=mmc
2014-05-12 14:38:00 -07:00
Monica Chew
d1eb9b420d
Bug 772756: Implement sha1 support, import Chrome's pinsets wholesale, add test mode (r=cviecco,keeler)
2014-05-08 17:18:50 -07:00
Carsten "Tomcat" Book
ce3573f668
Merge mozilla-central to mozilla-inbound
2014-05-12 13:48:01 +02:00
Carsten "Tomcat" Book
97853c8221
merge mozilla-inbound to mozilla-central
2014-05-12 13:33:19 +02:00
ffxbld
59e3b8e3f4
No bug, Automated HSTS preload list update from host bld-linux64-spot-382 - a=hsts-update
2014-05-10 03:26:08 -07:00
Jacek Caban
37b0fcfa8d
Bug 1005309 - Fixed MSVC detection.
...
--HG--
extra : rebase_source : 0b61de1270eb861234539de675c2d381e217f55c
2014-05-12 11:01:22 +02:00
David Keeler
0d13727d61
bug 1005266 - specify a timeout for the socket in test_ocsp_timeout.js r=mmc
2014-05-09 15:17:43 -07:00
Camilo Viecco
b1148150bc
Bug 1007986 - Remove 1024 bit roots from mozilla pin list. r=mmc
2014-05-09 10:58:47 -07:00
David Keeler
92b21afdff
bug 1007962 - CreateEncodedCertificate should take a SECItem as its serialNumber argument r=mmc
2014-05-08 15:33:38 -07:00
David Keeler
a4528a1530
bug 1007813 - match CreateEncodedCertificate declaration to its definition r=mmc
2014-05-08 11:51:50 -07:00
Wan-Teh Chang
6a62d32e50
Bug 979703: Update NSS to NSS_3_16_2_BETA1.
...
Fix bugs in intel-gcm-x86-masm.asm and re-enable the
Intel AES assembly code. (The fix is by Shay Gueron of Intel.)
Remove an unnecessary loop in intel-gcm-x64-masm.asm r=agl.
2014-05-08 14:28:47 -07:00
Monica Chew
a203d88ce4
Bug 1000354: Fix comment and make test clearer (r=keeler)
2014-05-07 15:48:23 -07:00
Bobby Holley
5c9d904093
Bug 997987 - Remove usage of nsIScriptSecurityManager::GetSubjectPrincipal. r=Ms2ger
2014-05-06 15:43:03 -07:00
Jed Davis
52cd05523d
Bug 1004832 - Add tgkill to seccomp-bpf whitelist. r=kang
2014-05-02 16:57:00 +02:00
Camilo Viecco
ae2571aa01
Bug 1006107 - Disable pining by default, setup pinning for *.addons.mozilla.org. r=dkeeler
...
--HG--
extra : rebase_source : 93b1dbd5dc31490424060729a3941deffa8ee1d5
2014-05-05 13:59:32 -07:00
Wan-Teh Chang
958625bc6e
Bug 993569: Update to NSS 3.16.1 and NSPR 4.10.5. r=kaie.
2014-05-05 13:51:39 -07:00
Monica Chew
b049aa3cac
Bug 1005364: Disable pinning for all mozilla properties (r=keeler)
2014-05-04 15:36:38 -07:00
Brian Smith
a97bc4147c
Bug 1005667: Fix build warning due to buggy test code in pkixtestutil.cpp, r=dholbert
2014-05-04 11:04:48 -07:00
Brian Smith
163631e898
Bug 1005309, Part 2: Enable extended compiler warnings (-W4 -Wall) in mozilla::pkix, r=mmc
...
--HG--
extra : rebase_source : 033574a0b26582753baec003becfaf15bbd85003
extra : histedit_source : 2d52c47f92b8f694203c2eb580b37be78ccf2f9c
2014-05-03 17:50:26 -07:00
Brian Smith
8da948d67f
Bug 1005309, Part 1: Improve type conversion and error checking for hashing done in mozilla::pkix's pkixocsp.cpp. r=mmc
...
--HG--
extra : rebase_source : 79c248ebc45d722249ae7adbbd2527dc9985f6f0
extra : histedit_source : 8ea66942cec4252d9d7e625da22b5ad9964485a1
2014-05-02 11:53:06 -07:00
Brian Smith
2cad23bbfd
Bug 1005256: Improve parameter validation in mozilla::pkix::der::Input::GetSECItem, r=mmc
...
--HG--
extra : rebase_source : 93b65e103c86747ddaf463e639aacffdf7ccb08f
extra : histedit_source : 10ef0ab13fb9de710ea3c589600db4632f9cf4a0
2014-05-02 11:52:10 -07:00
Brian Smith
b6d4008ea4
Bug 1005208: Rename issuerKeyHash to keyHash in mozilla::pkix's pkixocsp.cpp, r=mmc
...
--HG--
extra : rebase_source : ede4ed17cb56e3e52325ecadc2c5ded33c4a6013
extra : histedit_source : b727000e81bbc8afa6b9f8188b97065f59da45ad
2014-05-02 10:40:03 -07:00
Brian Smith
46d3a85aea
Bug 1005198: Make it easy to create test certificates in GTest tests, r=keeler
...
--HG--
extra : rebase_source : 0b1ec263a5a1ce1856afb12f11ea4c35c2aa55d0
extra : histedit_source : 40a3a3fc1993de0fcdeb5593a1a1df4dc94832b8
2014-04-25 19:57:40 -07:00
ffxbld
b43b9dd445
No bug, Automated HSTS preload list update from host bld-linux64-spot-043 - a=hsts-update
2014-05-03 03:18:44 -07:00
David Keeler
e771a7d73d
bug 1004270 - use SQL cert/key DBs in PSM tests so we can run them on Android r=briansmith
2014-05-02 15:06:29 -07:00
Camilo Viecco
3b227aa061
Bug 951315 - Add telemetry to PK pinning. r=dkeeler
2014-04-30 17:04:00 -07:00
Monica Chew
92fa29b307
Bug 1002696 - Minimum set of changes to make genHPKPStaticPins.js productionizable. r=cviecco, dkeeler
...
--HG--
rename : security/manager/boot/src/PreloadedHPKPins.json => security/manager/tools/PreloadedHPKPins.json
rename : security/manager/boot/src/genHPKPStaticPins.js => security/manager/tools/genHPKPStaticPins.js
2014-05-01 14:48:37 -07:00
David Keeler
6c916db011
bug 982248 - NSSCertDBTrustDomain: specify timeout for OCSP requests r=briansmith
2014-05-01 15:07:55 -07:00
Brian Smith
cb05abe1d6
Bug 1003290: Fix OID parser template type, r=keeler
...
--HG--
extra : rebase_source : c33e450b84234ae7471118c2f8749593a59d9298
2014-04-25 16:31:30 -07:00
Brian Smith
6b71be8400
Bug 1002933: Use Strongly-typed enums more often in mozilla::pkix, r=mmc
...
--HG--
extra : rebase_source : 3f67f48d1f4150df0830f89e6c07bbbf3a8fc7e8
2014-04-25 16:29:26 -07:00
Brian Smith
80e8f86c33
Bug 1002929: Avoid implicit conversion of Result to boolean in mozilla::der::GeneralizedTime, r=keeler
...
--HG--
extra : rebase_source : 8966d41f1837611b83ac84b347aeddfade9bc949
2014-04-24 16:08:30 -07:00
Monica Chew
b06faaca65
Bug 998057: Add tests for certificate pinning (r=cviecco,dkeeler)
2014-04-30 20:11:35 -07:00
Monica Chew
a950040c90
Backed out changeset 9c8fbf297d51
...
Camilo did not land his patch that this depends on, my bad.
2014-04-30 20:01:34 -07:00
Monica Chew
628c03d585
Bug 998057: Add tests for certificate pinning (r=cviecco,dkeeler)
2014-04-30 19:56:03 -07:00
Monica Chew
625b9449b2
Bug 998057: Add test pinset to the pin generator (r=cviecco)
...
--HG--
rename : security/manager/ssl/tests/unit/tlsserver/default-ee.der => security/manager/boot/src/default-ee.der
2014-04-30 15:30:44 -07:00
Camilo Viecco
06f960a801
Bug 744204 - Allow Certificate key pinning Part 2 - Certverifier Interface. r=keeler
...
--HG--
extra : rebase_source : 2f9748ba0b241c697e22b7ff72f2f5a0fad4a2ca
2014-02-05 14:49:10 -08:00
Richard Barnes
39fa6a3803
Bug 1003604 - Make nsNSSShutDownObject::isAlreadyShutDown() const. r=dkeeler
2014-04-29 17:45:00 +02:00
Rodrigo Rodriguez Jr.
bc17528767
Bug 952650 (part 11) - Remove JSVAL_TO_INT. r=njn.
...
--HG--
extra : rebase_source : 41923458bbf8fd957c9a57685df4969f1190bd9f
2014-04-27 19:55:08 -07:00
Rodrigo Rodriguez Jr.
1b9dfa0db1
Bug 952650 (part 9) - Remove JSVAL_IS_INT. r=njn.
...
--HG--
extra : rebase_source : dc0c170914c2370c218cdbbe671d2a68628f5a87
2014-04-27 19:47:02 -07:00
Rodrigo Rodriguez Jr.
5b7e66980d
Bug 952650 (part 1) - Remove JSVAL_IS_NULL. r=terrence.
...
--HG--
extra : rebase_source : 83d1cdaf71260fd99b688c23303ceb2de7b00031
2014-04-27 19:30:51 -07:00
Wan-Teh Chang
e809100c4e
Bug 993569 - Update Mozilla 31 to use NSS 3.16.1 Beta 4. This disables
...
the new Intel AES assembly code on Windows. r=kaie.
2014-04-29 16:13:03 -07:00
Camilo Viecco
08d3905de0
Bug 744204 - Allow Key pining part 1 - Built-in Pinning Service. r=keeler
2013-06-20 10:35:43 -07:00
David Keeler
2a77846f27
bug 977865 - mozilla::pkix: add backoff for ocsp fetching when a responder fails r=cviecco
2014-04-28 16:38:15 -07:00
Brian Smith
c587f858f4
Bug 998067: Add utility code for making it easier to create GTests based on NSS, r=keeler
...
--HG--
extra : rebase_source : 8ae08d1ccc9329aa567cfc7ac590ddb026155bae
2014-04-16 21:38:01 -07:00
Brian Smith
2c23644423
Bug 1000544: Use "Fail(x, y)" instead of "PR_SetError(y, 0); return x;" more consistently, r=mmc
...
--HG--
extra : rebase_source : 96addac738b8ffe39c7a92d546388d5f13fc2340
2014-04-23 14:13:32 -07:00
Brian Smith
8d2dfeb6e2
Bug 1000482: Remove unused stapledOCSPResponse parmaeter from BuildForwardInner, r=mmc, r=keeler
...
--HG--
extra : rebase_source : b5d67d3488aa3df5690a7dd2b76495ac4986a723
2014-04-23 13:42:38 -07:00
Brian Smith
717e7f71a1
Bug 1000483: Remove unused isTrustAnchor parameter from CheckKeyUsage, r=cviecco
...
--HG--
extra : rebase_source : 96e7b76362d6219193c814d35c332aae2ed5b48f
2014-04-23 13:38:19 -07:00
Wan-Teh Chang
6b1f295425
Bug 993569 - Update Mozilla 31 to use NSS 3.16.1 Beta 3. The main change
...
is https://hg.mozilla.org/projects/nss/rev/7e8485a5ed49 .
2014-04-27 20:39:24 -07:00
Birunthan Mohanathas
ff8ce9bd42
Bug 900908 - Part 3: Change uses of numbered macros in nsIClassInfoImpl.h/nsISupportsImpl.h to the variadic variants. r=froydnj
2014-04-27 03:06:00 -04:00
Ryan VanderMeulen
de681ea4fc
Merge m-c to inbound.
2014-04-26 21:41:26 -04:00
ffxbld
3daca64876
No bug, Automated HSTS preload list update from host bld-linux64-spot-425 - a=hsts-update
2014-04-26 03:23:23 -07:00
Nathan Toone
d67b9ae3a0
Bug 1001585 - Don't build tests directory if --disable-tests is specified. r=briansmith
2014-04-26 11:29:00 -04:00
Arpad Borsos
e19fb46166
Bug 474369 - remove nsVoidArray includes; r=ehsan
...
--HG--
extra : rebase_source : dd3abeb623fd8b784fd6ba639c88def84a4daf58
2014-04-26 16:12:45 +02:00
Camilo Viecco
71d731b4d8
Bug 915930 - Make mozilla::pkix the default certificate verifier for all (not just desktop) r=briansmith
...
--HG--
extra : rebase_source : 56402e60078298dc64cf5476afda7c95671a7092
2014-04-25 13:22:30 -07:00
Wan-Teh Chang
e6781c8c31
Bug 993569 - Update Mozilla 31 to use NSS 3.16.1 Beta 2.
2014-04-25 06:06:01 -07:00
Honza Bambas
605c3001ad
Bug 999306 - Add 'allow-insecure-ntlm-v1' preference for the generic NTLM v1 authentication module, r=jduell
2014-04-24 18:50:46 +02:00
Stefan Arentz
54d22813e9
Bug 968490: Add mozilla::pkix::der unit tests (r=cviecco)
2014-03-26 16:00:03 -07:00
Randell Jesup
1f9314c7a8
Bug 996487: don't null out mThread while committing thread suicide r=bsmedberg
2014-04-22 15:32:13 -04:00
YFdyh000
686ab7c5e8
Bug 995528 - Certificate viewer describes not-valid-before date as issue date. r=honzab, ui-r=philipp
2014-04-21 10:58:04 -04:00
ffxbld
1ff1ed65cc
No bug, Automated HSTS preload list update from host bld-linux64-spot-454 - a=hsts-update
2014-04-19 03:14:16 -07:00
Randell Jesup
45132d9932
Bug 988881: clean up CryptoTask (SignedJar) tasks instead of leaking them r=bsmedberg,mayhemer
2014-04-17 02:18:04 -04:00
Anuj Agarwal
b57b4cf0d1
Bug 897359 - Remove unimplemented popChallengeResponse, random, and disableRightClick methods. r=bz
2014-04-18 09:32:52 -04:00
David Keeler
2e3bd0056f
bug 991898 - mozilla::pkix: temporarily allow empty Extensions in OCSP responses r=briansmith
2014-04-17 16:01:18 -07:00
Camilo Viecco
2a380c2fee
Bug 997795 - Cleanup decodings. r=dkeeler
2014-04-17 14:42:05 -07:00
Jed Davis
a52d5f0783
Bug 997409 - Add set_thread_area to seccomp whitelist if available. r=kang
2014-04-17 16:23:23 -04:00
Camilo Viecco
e70e998770
Bug 992972 - Add sha256SubjectPublicKeyInfoDigest attribute to nsIX509Cert. sr=bsmith
2014-04-07 10:35:57 -07:00
David Keeler
267f36c29e
bug 997843 - mozilla::pkix::der::Input::Expect should take a uint16_t as its length argument r=briansmith
2014-04-17 09:50:06 -07:00
Patrick McManus
edc73bcc7b
bug 993591 - PSM HTTP Fetch should own streamloader data r=dkeller r=mayhemmer
2014-04-09 17:48:17 -04:00
David Keeler
7ce7130265
bug 982774 - der::ExpectTagAndGetLength: check that input has enough capacity for the length described r=briansmith
2014-04-16 13:30:09 -07:00
David Keeler
47abc69838
bug 972753 - OCSP testing: delegated responses and including multiple certificates r=cviecco
2014-04-16 09:31:27 -07:00
Raymond Etornam Agbeame(:retornam)
7f95bd8328
Bug 934676 - Remove unused variable 'extracted' in ClientAuthDataRunnable::RunOnTargetThread. r=keeler
2014-04-15 15:46:00 +02:00
Monica Chew
d98ff86e6e
Bug 991177: Disallow overrides for SEC_ERROR_CA_CERT_INVALID (r=keeler)
2014-04-15 15:35:41 -07:00
Kyle Huey
b6957123df
Bug 991812: Remove uses of AtomicRefCounted<T> that live in Gecko. r=ehsan
...
--HG--
extra : rebase_source : 0d14e02c64d548fd3177681248d722683aaa87c3
2014-04-14 12:04:25 -07:00