David Keeler
|
2ee3959bc7
|
bug 1040446 - mozilla::pkix: add error code for CA cert used as end-entity cert r=briansmith
|
2014-08-11 12:35:45 -07:00 |
|
Brian Smith
|
8c9ce89101
|
Bug 1048070, Part 2: Remove uses of PR_NOT_REACHED and PR_ARRAY_SIZE in mozilla::pkix, r=keeeler
--HG--
extra : rebase_source : d373a7526c1048770bed8bacb7e14c8f10e832cb
|
2014-08-03 18:24:35 -07:00 |
|
Brian Smith
|
f5ad3ac382
|
Bug 1048070, Part 1: Replace uses of PR_ASSERT in mozilla::pkix, r=keeler
--HG--
extra : rebase_source : 3f1dbb4babb6d575bde3088c92aeb6f28d689210
|
2014-08-02 09:17:59 -07:00 |
|
Brian Smith
|
b1f7e52f48
|
Bug 1042479: Accept the OIW sha1WithRSASignature OID, r=keeler
--HG--
extra : rebase_source : 98dfbf1b5130898604e86c54ad4a8453aa87bde4
|
2014-08-04 16:34:47 -07:00 |
|
David Keeler
|
cdc5134237
|
bug 1047494 - refactor tautological size check in mozilla::pkix::VerifySignedData r=briansmith
|
2014-08-08 11:28:44 -07:00 |
|
Brian Smith
|
0441bbeeef
|
Bug 1043041: Use mozilla::pkix::Time instead of PRTime, r=keeler
--HG--
extra : rebase_source : 2cc39d3c322c1355aad003f2497659a091febac2
|
2014-08-02 08:49:12 -07:00 |
|
Brian Smith
|
1b48468046
|
Bug 1047792: Rely on mozilla::pkix to filter out expired certs instead of CERT_CreateSubjectCertList, r=keeler
--HG--
extra : rebase_source : 5182147037b69f0ac3c3cd060d6e2af71bfde2e7
|
2014-08-01 23:16:21 -07:00 |
|
Brian Smith
|
f56b3e7407
|
Bug 1041344: Refactor mozilla::pkix::CheckCertificatePolicies, r=cviecco
--HG--
extra : rebase_source : d40184b986e9c6ed44c0b39a485292a91f924f13
|
2014-07-19 18:51:10 -07:00 |
|
Brian Smith
|
6fd326c0c2
|
Bug 1041186, Part 3: More renaming, r=keeler
--HG--
extra : rebase_source : e4d70240f25f566c3bde91d515739bf46853fe8d
|
2014-07-31 20:55:52 -07:00 |
|
Brian Smith
|
c0428247ef
|
Bug 1041186, Part 2: Rename Input to Reader and InputBuffer to Input, r=keeler
--HG--
extra : rebase_source : bf57a9eb6ae5c122912e00a47156010e5ea99478
|
2014-07-31 12:17:31 -07:00 |
|
Brian Smith
|
e3aee85ed9
|
Bug 1041186, Part 1: Improve buffer overflow protection in mozilla::pkix, r=keeler
--HG--
extra : rebase_source : 0f4a33f2c66594930ba9c79233648c70e33ba27c
|
2014-07-18 22:30:51 -07:00 |
|
Brian Smith
|
7417889c50
|
Bug 1041343: Use references instead of pointers for TrustLevel output parameters, r=cviecco
--HG--
extra : rebase_source : d5c07dc29a95ccb75a7a8f199de26d43950b9ed4
|
2014-07-20 11:06:26 -07:00 |
|
Brian Smith
|
0da7cb4337
|
Bug 1039601: Use bounds-checked DERArray instead of plain arrays in pkixocsp.cpp, r=cviecco
--HG--
extra : rebase_source : cbe6257fc470069de0f7cb4f9f169550980a6b98
|
2014-07-16 09:54:10 -07:00 |
|
Brian Smith
|
8d436cc99b
|
Bug 1039064: Use strongly-typed enum instead of NSPR-style error handling, r=keeler
--HG--
extra : rebase_source : 4f3e41916cd7e2c74679d468eeeb702af3321532
|
2014-07-18 11:48:49 -07:00 |
|
Mike Hommey
|
b99bba5c3f
|
Bug 1041864 - Remove LIBRARY_NAMEs that aren't used. r=mshal
|
2014-07-23 08:39:56 +09:00 |
|
Cykesiopka
|
65dfa136df
|
Bug 360126 - Stop accepting certs that use RSA1023 or weaker; Original patch by Richard van den Berg. r=briansmith
|
2014-07-15 19:49:00 -04:00 |
|
Brian Smith
|
e3618bd35b
|
Bug 1038837: Factor out mozilla::pkix::Input into a separate header, r=mmc
--HG--
rename : security/pkix/lib/pkixder.h => security/pkix/include/pkix/Input.h
rename : security/pkix/lib/pkixutil.h => security/pkix/include/pkix/Result.h
extra : rebase_source : 09bac0a183932f721cdfd32936595867e4dc26ce
|
2014-07-13 13:17:36 -07:00 |
|
Brian Smith
|
7b3263e6c9
|
Bug 1038828: Replace mozilla::pkix::der::Result with uses of mozilla::pkix::Result, r=mmc
--HG--
rename : security/pkix/lib/pkixutil.h => security/pkix/include/pkix/Result.h
extra : rebase_source : e385af4bab665627aa5d434db04830065cbc641f
|
2014-07-15 10:33:49 -07:00 |
|
Brian Smith
|
bc7b3b4b4c
|
Bug 916629, Part 4: Unit tests for trust of delegated OCSP responder certificates for mozilla::pkix, r=keeler
--HG--
extra : rebase_source : c473285add9faee9a876677404935bdc253832cb
|
2014-07-10 21:20:17 -07:00 |
|
Brian Smith
|
1beed22447
|
Bug 916629, Part 3: Unit tests for OCSP responses signed by a delegated OCSP responder for mozilla::pkix, r=keeler
--HG--
extra : rebase_source : c2c78458aa674dcc1e1426a0efc81df19b73ac4f
|
2014-07-10 22:14:57 -07:00 |
|
Brian Smith
|
ba1f6e4228
|
Bug 916629, Part 2: Unit tests for "successful" OCSP responses for mozilla::pkix, r=keeler
--HG--
extra : rebase_source : 14633119755cbfd55fc3bfef9cf482de3d638b53
|
2014-07-15 10:09:26 -07:00 |
|
Brian Smith
|
e367b4a22f
|
Bug 916629, Part 1: Unit tests for OCSP responses without responseBytes, r=keeler
--HG--
extra : rebase_source : 62ef4209745ff8f2c5a852beb1a9823cbe7c7ff4
|
2014-07-14 23:09:36 -07:00 |
|
Brian Smith
|
8fd4eed261
|
Bug 1036105: Delegate digest operations to the TrustDomain in mozilla::pkix, r=keeler
--HG--
extra : rebase_source : dd8dc1243ea2e37955a15f2481e1c452311e90d8
extra : histedit_source : adc1a2035d41c608d3f0ebe14bba159b2857502d
|
2014-07-06 19:36:05 -07:00 |
|
Brian Smith
|
ac8cb082e7
|
Bug 1036107, Part 2: Test algorithm identifier parsing, r=keeler
--HG--
extra : rebase_source : c800d42856d81ba8cceaadde0caa98477b3008f4
extra : histedit_source : 71305fa34b435450525ae3a3e603aef065eaec14
|
2014-07-10 18:30:58 -07:00 |
|
Brian Smith
|
16a3da199e
|
Bug 1036107, Part 1: Stop using CERTSignedData in mozilla::pkix, r=keeler
--HG--
extra : rebase_source : 94c49062ae3ddf755651f151e2d648543b10e1ad
extra : histedit_source : a7377bf1d9adb62e1c584e2adeb793aa074245fb
|
2014-07-10 19:00:32 -07:00 |
|
Brian Smith
|
e230435e59
|
Bug 1037324: Delegate additional name constraint selection to the TrustDomain in mozilla::pkix, r=cviecco
--HG--
extra : rebase_source : 300f33bfb3a0c9ae1525695b080674c1fb21eafc
|
2014-07-10 22:38:59 -07:00 |
|
Brian Smith
|
53e0350589
|
Bug 1035942: Decide whether to consider end-entity CN as a dnsName in CheckNameConstraints instead of in BuildCertChain, r=cviecco
--HG--
extra : rebase_source : 19c5949253e4e631b0bd841f17f000885001b327
extra : histedit_source : dce57eb862a2a13d07d11fdf6917afcf6cb4136c
|
2014-07-08 13:04:17 -07:00 |
|
Brian Smith
|
d66c74e652
|
Bug 1035009: Stop using CERTCertList in mozilla::pkix, r=keeler
--HG--
extra : rebase_source : fc2b39e5e2b44fea365914e83a7d1f2dc9b784bc
extra : histedit_source : b40e5e8cb106fe87f6f065b01ca43adb0bf3a605
|
2014-07-06 15:55:38 -07:00 |
|
Camilo Viecco
|
863d637d5c
|
Bug 1030204 - 1/2 Name constraint ANSSI(DCISS) Root cert in mozilla::pkix. r=keeler
--HG--
extra : rebase_source : 221ca75af601649731bf83cace2e6b0edcd4b2ab
|
2014-07-08 16:16:26 -07:00 |
|
Chris Peterson
|
65da3b81ed
|
Bug 1035607 - Remove unused empty_null to fix -Wunused warning-as-error in security/pkix. r=briansmith
|
2014-07-07 20:37:21 -07:00 |
|
Brian Smith
|
8d65effbf6
|
Bug 1035470: Use signature algorithm OID instead of digest algorithm OID in the signature field of certificates in mozilla::pkix tests, r=cviecco
--HG--
extra : rebase_source : 99b1d5c0739221e90d4b04738f9362135f42a23c
|
2014-07-07 00:46:10 -07:00 |
|
Brian Smith
|
876b584f49
|
Bug 1035008, Part 2: Modify existing mozilla::pkix GTests to follow naming conventions, r=mmc
--HG--
rename : security/pkix/test/gtest/pkix_cert_chain_length_tests.cpp => security/pkix/test/gtest/pkixbuild_tests.cpp
rename : security/pkix/test/gtest/pkix_cert_extension_tests.cpp => security/pkix/test/gtest/pkixcert_extension_tests.cpp
rename : security/pkix/test/gtest/pkix_ocsp_request_tests.cpp => security/pkix/test/gtest/pkixocsp_CreateEncodedOCSPRequest_tests.cpp
extra : rebase_source : 05035197c37cd2fecf0c6e2f5231eeabfd4f64fd
extra : histedit_source : db050cf69b025e34e992a68b8b57665608c6a3d9
|
2014-07-05 22:14:25 -07:00 |
|
Brian Smith
|
c178453b72
|
Bug 1035008, Part 1: Document naming convention for mozilla::pkix GTests, r=mmc
--HG--
extra : rebase_source : 8239f56513d8aba59eb8851bd219295fb6920b64
extra : histedit_source : 90856c24e66c7cc451c65cfd72a005cb2949085a
|
2014-07-06 15:59:08 -07:00 |
|
Brian Smith
|
358b82e03b
|
Bug 1034636: Remove mozilla::pkix::ScopedCERTCertifciate and mozilla::pkix::ScopedPLArenaPool, r=mmc
--HG--
extra : rebase_source : 68e6da2f1e1c7fa678ef4cc81d23cc6298709108
extra : histedit_source : feba4c589dbf004ee50e2dea1fca0809f8f97674
|
2014-07-03 21:49:56 -07:00 |
|
Brian Smith
|
0c6544f1f0
|
Bug 1033563, Part 3: Change mozilla::pkix::TrustDomain::FindPotentialIssuers API to be iterator-like, r=keeler
--HG--
extra : rebase_source : e8c734ecb2de2c52dd8909c8b48f4bdb09d0128e
|
2014-07-02 16:15:16 -07:00 |
|
Brian Smith
|
f13fdc263c
|
Bug 1033563, Part 2: Convert mozilla::pkix::BuildForwardInner into an iterator-type thing, r=keeler
--HG--
extra : rebase_source : 175e308191441035db4f3eed4a855205bab1a3f3
|
2014-07-02 15:03:58 -07:00 |
|
Brian Smith
|
f628a48e8e
|
Bug 1033563, Part 1: Move revocation checking code from mozilla::pkix::BuildForward to BuildForwardInner, r=keeler
--HG--
extra : rebase_source : 0f11eb64ffb00d953c39d81f4877067bd173eadd
|
2014-07-02 12:21:41 -07:00 |
|
Brian Smith
|
549189d132
|
Bug 1029247, Part 2: Parse certificates using mozilla::pkix::der, r=keeler
--HG--
extra : rebase_source : e093922497d005734c590a59f175993a7715bce8
|
2014-07-03 16:59:42 -07:00 |
|
Brian Smith
|
66ce2813a7
|
Bug 1029247, Part 1: Add new overload to mozilla::pkix::bind, r=keeler
--HG--
extra : rebase_source : 7a9dc499ed6ad038e4840953744a9fcd6578290b
|
2014-06-21 18:06:30 -07:00 |
|
Brian Smith
|
d35cdc1555
|
Bug 1034632: Fix suppression of warnings for MOZILLA_PKIX_ENUM_CLASS, r=mmc
--HG--
extra : rebase_source : 962fa75dab803f1d139096fa5d41b4b656e32f86
|
2014-07-03 20:41:07 -07:00 |
|
Brian Smith
|
840e9d16c9
|
Bug 1034412: Clarify definition of mozilla::pkix::der::SEQUENCE, r=mmc
--HG--
extra : rebase_source : 3e139a66133c1d7916fbc13c7cec2b12e9545122
|
2014-06-30 21:58:34 -07:00 |
|
Brian Smith
|
eabf3ca82e
|
Bug 1019770: Add tests for checking of notAfter and notBefore, r=cviecco
--HG--
extra : rebase_source : 614e002886ffa73e7e38218ebb3ea2509edcd1a4
|
2014-06-30 19:12:35 -07:00 |
|
Brian Smith
|
747d5ce9c9
|
Bug 1033103: Add and use mozilla::pkix::der::ExpectTagAndGetTLV, r=keeler
--HG--
extra : rebase_source : 16461be12705998799f5c84e2043d68b0c431cb0
|
2014-07-01 13:25:43 -07:00 |
|
Brian Smith
|
f98c380254
|
Bug 1033092: Add unit tests for mozilla::pkix::der::ExpectTagAndGetValue, r=keeler
--HG--
extra : rebase_source : 8ad8960969e5ee5bf47054f1c285a85cbbdb18cf
|
2014-07-01 16:28:45 -07:00 |
|
David Keeler
|
2a5b4f9664
|
bug 1019770 - follow-up to remove unused const GENERALIZED_TIME_LENGTH r=briansmith
|
2014-07-02 10:04:31 -07:00 |
|
Brian Smith
|
0c5e4c3465
|
Bug 1032947: Change CheckNameConstraints to construct CERTCertificate instances when needed, r=keeler
--HG--
extra : rebase_source : d0bf802f4ff3fe9900ed7444c046617aa27faea9
|
2014-06-26 14:22:20 -07:00 |
|
Brian Smith
|
26dc5a975e
|
Bug 1019770: Add more tests for parsing GeneralizedTime and TimeChoice, r=cviecco
--HG--
extra : rebase_source : f38fd90973b4bdf2cff5887c7d48f7e7b2a7126b
|
2014-07-01 18:01:28 -07:00 |
|
Brian Smith
|
35167f7fb2
|
Bug 1019770, Part 2: modify existing GeneralizedTime tests to test TimeChoice too, r=cviecco
--HG--
extra : rebase_source : fe0b6f06a374dd1e50233c352031e6fdbde1c5f9
|
2014-06-24 10:51:53 -07:00 |
|
Brian Smith
|
ffb9b0ea05
|
Bug 1019770: Use mozilla::pkix::der to decode times and certificate validity period, r=cviecco
--HG--
extra : rebase_source : 2b1fa83599c4d0748757b25b56f65e10d41504c8
|
2014-06-24 21:48:12 -07:00 |
|
Wes Kocher
|
e94fb2297d
|
Backed out changeset 5ea9b7bd2db5 (bug 1019770)
|
2014-07-01 17:43:47 -07:00 |
|