Commit Graph

1024 Commits

Author SHA1 Message Date
Camilo Viecco
fafb89e70a Bug 927016 - Create EV testsuite in xpcshell. r=keeler 2013-11-21 13:40:31 -08:00
David Keeler
0e2eda840f bug 929617 - disregard expired stapled OCSP responses, acquire fresh ones r=briansmith 2013-11-25 15:40:11 -08:00
David Keeler
32fea093c6 bug 943115 - return early in CreateCertErrorRunnable for non-overridable errors r=briansmith 2013-11-26 13:49:47 -08:00
Patrick McManus
8703982b00 Bug 942729, Part 2: Remove unused expected symmetric cipher mechanism, r=briansmith
--HG--
extra : rebase_source : 9630808b663d6a670c2e45d242177a640817f2ee
2013-11-25 18:12:40 -05:00
Brian Smith
be4eff2cb2 Bug 942729, Part 1: Re-enable TLS False Start, r=mcmanus
--HG--
extra : rebase_source : 9908b1cbc3a30e9868739a10a705de8dbf30c5e1
2013-11-20 13:49:33 -08:00
Ehsan Akhgari
337645b04f Bug 942033 - Build security/manager in unified mode; r=bsmith
--HG--
extra : rebase_source : d48b78001772e0421a6dfc2ecd204434c33cd2d4
2013-11-26 13:18:21 -05:00
Mike Hommey
21281c6e45 Bug 940407 - Kill GTEST_SOURCES. r=gps 2013-11-26 11:48:58 +09:00
Brian Smith
ee891102ba Bug 942728 - Fix telemetry for cipher suites and crypto algorithms andkey sizes, r=keeler, a=lsblakk
--HG--
extra : rebase_source : bd0bc0d67fe811612df4210b2b5e19f1d5eca5a0
2013-11-21 13:35:23 -08:00
David Keeler
643c22e742 bug 909044 - make generate_certs.sh work on windows r=briansmith DONTBUILD NPOTB 2013-11-22 11:03:34 -08:00
Camilo Viecco
d1fb9a6dca Bug 938805 - Create standalone oscpResponseGenerator for testing. r=keeler 2013-10-29 14:02:35 -07:00
Patrick McManus
75afee68ad bug 802649 network priority for ocsp r=bsmith r=honzab
--HG--
extra : rebase_source : 17554ab7627e1d42a4736078254f94f36cf9c48b
2013-11-20 09:57:56 -05:00
Camilo Viecco
9cb0490825 Bug 912155 - Adding new interface in nssCertifcateDB for testing. r=bsmith 2013-11-11 16:37:06 -08:00
Mike Hommey
931cb49886 Bug 939632 - Remove LIBRARY_NAME for leaf libraries. r=gps
Landing on a CLOSED TREE.
2013-11-19 11:50:54 +09:00
Mike Hommey
db9e5129bc Bug 939074 - Remove most LIBXUL_LIBRARY. rs=gps 2013-11-19 11:48:10 +09:00
Mike Hommey
b18be7aacd Bug 939044 - Rename remaining MODULE definitions to XPIDL_MODULE. r=mshal 2013-11-19 11:47:43 +09:00
Mike Hommey
f0d1cd1e10 Bug 939044 - Remove most definitions of MODULE. r=mshal 2013-11-19 11:47:39 +09:00
Mike Hommey
f81885e53b Bug 935881 - Use FINAL_LIBRARY for all (fake) libraries that end up linked in a single other library. r=gps 2013-11-19 11:47:14 +09:00
Camilo Viecco
15af5c4f84 Bug 935769: Fix shutdown locks for nssCerList and nssCertListEnumerator. r=bsmith 2013-11-11 15:16:45 -08:00
Landry Breuil
df1158db14 Bug 939498 - Properly include <algorithm> for std::max. r=bsmith 2013-11-18 11:04:13 +01:00
Brian Smith
2356f6f87a Bug 901718, Part 2: fix comment, r=me 2013-11-17 14:00:00 -08:00
Brian Smith
4ef7fa66b2 Bug 934663 followup: fix unused variable warning, r=me
--HG--
extra : rebase_source : e343b569df4d313f0f5f65fc82de99b9ea5b2ba9
2013-11-17 13:53:18 -08:00
Brian Smith
f878be4b6e Bug 901718: Remove TLS intolerance fallback from TLS 1.0 to SSL 3.0 for connection resets, r=honzab
--HG--
extra : rebase_source : 304e73126b66ae2e1a9fa6ae4c0cc3fa803aaac0
2013-11-17 13:51:37 -08:00
Brian Smith
600d22739e Bug 707275, Part 2: Add telemetry for cipher suites and key sizes, r=keeler
--HG--
extra : rebase_source : bd5f91877de357b415b6f143eccc87434d72db2b
2013-11-17 13:47:30 -08:00
Brian Smith
65c5b66328 Bug 707275, Part 1: Add telemetry for TLS intolerance, r=keeler
--HG--
extra : rebase_source : 8331f1486ad764838812ea500742a97fbc025858
2013-11-17 13:47:23 -08:00
Tom Schuster
f052cdba92 Bug 933834 - Rename and handlify JS_ValueToString. r=terrence,bz 2013-11-16 13:31:36 +01:00
Ms2ger
29adada2a2 Backout changesets ded0d64f6786:03f041d03f24 and 30cbd1abde1a (bug 935696, bug 933834 and bug 939194) for build bustage. 2013-11-17 16:39:25 +01:00
Tom Schuster
a12aa024e6 Bug 933834 - Rename and handlify JS_ValueToString. r=terrence,bz 2013-11-16 13:31:36 +01:00
Chris Peterson
e85861c8cb Bug 937459 - Remove unused private fields from nsNSSSocketInfo class. r=briansmith 2013-11-11 14:06:29 -08:00
David Keeler
979f562dfd bug 932519 - (3/3) add an optional additional cert name as a parameter to GetOCSPResponseForType r=cviecco r=briansmith 2013-11-11 13:36:29 -08:00
David Keeler
3189c3e838 bug 932519 - (2/3) rename OCSP response generation test code to remove "stapling" r=cviecco r=briansmith 2013-11-11 13:42:35 -08:00
David Keeler
373b5ea9bf bug 932519 - (1/3) move common OCSP response generation test code for refactoring r=cviecco r=briansmith
--HG--
rename : security/manager/ssl/tests/unit/tlsserver/cmd/OCSPStaplingServer.cpp => security/manager/ssl/tests/unit/tlsserver/lib/OCSPCommon.cpp
rename : security/manager/ssl/tests/unit/tlsserver/cmd/OCSPStaplingServer.cpp => security/manager/ssl/tests/unit/tlsserver/lib/OCSPCommon.h
2013-11-11 13:43:04 -08:00
David Keeler
78a5e9e6f5 bug 935618 - (2/2) generateCRMFRequest: test using a bad popcert parameter r=cviecco 2013-11-07 13:33:58 -08:00
David Keeler
be9934f8aa bug 935618 - (1/2) check for an ec certificate in nsConvertToActualKeyGenParams r=cviecco 2013-11-07 13:34:59 -08:00
Jacob Acord
d01a66c71a Bug 934673 - Fix nsRandomGenerator::GenerateRandomBytes can leak r=keeler 2013-11-11 14:38:37 -08:00
Brian Smith
5561c4b35b Bug 934663: Enable AES-GCM cipher suites; disable SEED, ECDH_*, and FIPS, and DSS+Camellia cipher suites, r=cviecco
--HG--
extra : rebase_source : a1542ba09258448e571109bc4aa6423cd9ad616a
2013-11-01 05:20:03 -07:00
Brian Smith
780de23203 Bug 934327: Give OCSP-related NSS errors symbolic names in xpcshell tests, r=keeler
--HG--
extra : rebase_source : 10bd4842f16a6a4e1cbd8d50505a70a6502d9581
2013-10-14 21:36:18 -07:00
Garrett Robinson
e97987f422 Bug 855326 - CSP 1.1 nonce-source for scripts and styles r=mrbkap r=dholbert r=geekboy 2013-11-08 15:44:39 -08:00
Daniel Holbert
0d7ef379ad backout 57213b64023b (bug 855326) for build bustage in debug builds
CLOSED TREE
2013-11-08 11:22:36 -08:00
Garrett Robinson
7cbc01f239 Bug 855326 - CSP 1.1 nonce-source for scripts and styles. r=mrbkap r=dholbert r=geekboy 2013-11-08 09:20:43 -08:00
David Keeler
9a14744725 bug 934716 - generateCRMFRequest: accept only the first repeated keygen parameter r=cviecco 2013-11-07 10:42:59 -08:00
Michael Shuen
88afe268b2 Bug 933995 - Check return value of ImportCertsIntoPermanentStorage and CERT_ImportCerts. r=dkeeler 2013-11-06 12:30:45 -05:00
Ryan VanderMeulen
41e603833c Merge m-c to inbound. 2013-11-04 16:31:13 -05:00
Carsten "Tomcat" Book
dc3520d4b7 merge b2g-inbound to mozilla-central 2013-11-04 13:52:18 +01:00
Michael Shuen
4bbdb5bd61 Bug 933998 - Prevent leak in nsNSSCertificateDB::ConstructX509FromBase64. r=bsmith 2013-11-04 14:22:37 -05:00
Meadhbh Hamrick
d9c9da76b7 Bug 861266: Enable TLS 1.2 by default, r=briansmith
--HG--
extra : rebase_source : 4f28724d58791e1ee0e281ff48232f5aaca2048f
2013-11-01 04:48:57 -07:00
Brian Smith
8ba7715f0f Bug 932176: Add preference to control whether OCSP GET is used, off by default, r=cviecco
--HG--
extra : rebase_source : 7cbc273155d04bc64a110eda9216c6f727ce0c18
2013-10-24 14:32:09 -07:00
Brian Smith
1f07bf5b3c Bug 934171: Fix OCSP stapling test, r=mcmanus
--HG--
extra : rebase_source : 4f77b595b2004dabf3444187424ac4426fb7a41a
2013-11-02 19:57:26 -07:00
Mike Hommey
0b53da458d Bug 933135 - Treat SIMPLE_PROGRAMS more like PROGRAM. r=mshal 2013-11-02 08:43:55 +09:00
Brian Smith
1e9e2670cc Bug 733647: Enable TLS 1.1 by default, r=wtc
--HG--
extra : rebase_source : 539406fa06a715e60d84b207a6112257262817f6
2013-10-26 01:01:37 -07:00
David Keeler
f957c2f300 bug 930209 - differentiate empty OCSP response from no OCSP response in tests r=cviecco 2013-10-28 13:15:53 -07:00