Monica Chew
9eb1c9c9de
Bug 1009720: Telemetry for CERT_PINNING_TEST_RESULTS (r=keeler)
2014-05-13 13:50:13 -07:00
David Keeler
c441103da0
bug 1005355 - look for PSM test binaries in /data/local/xpcb/ on Android/B2G r=mmc
2014-05-12 14:38:00 -07:00
Monica Chew
d1eb9b420d
Bug 772756: Implement sha1 support, import Chrome's pinsets wholesale, add test mode (r=cviecco,keeler)
2014-05-08 17:18:50 -07:00
Carsten "Tomcat" Book
ce3573f668
Merge mozilla-central to mozilla-inbound
2014-05-12 13:48:01 +02:00
Carsten "Tomcat" Book
97853c8221
merge mozilla-inbound to mozilla-central
2014-05-12 13:33:19 +02:00
ffxbld
59e3b8e3f4
No bug, Automated HSTS preload list update from host bld-linux64-spot-382 - a=hsts-update
2014-05-10 03:26:08 -07:00
Jacek Caban
37b0fcfa8d
Bug 1005309 - Fixed MSVC detection.
...
--HG--
extra : rebase_source : 0b61de1270eb861234539de675c2d381e217f55c
2014-05-12 11:01:22 +02:00
David Keeler
0d13727d61
bug 1005266 - specify a timeout for the socket in test_ocsp_timeout.js r=mmc
2014-05-09 15:17:43 -07:00
Camilo Viecco
b1148150bc
Bug 1007986 - Remove 1024 bit roots from mozilla pin list. r=mmc
2014-05-09 10:58:47 -07:00
David Keeler
92b21afdff
bug 1007962 - CreateEncodedCertificate should take a SECItem as its serialNumber argument r=mmc
2014-05-08 15:33:38 -07:00
David Keeler
a4528a1530
bug 1007813 - match CreateEncodedCertificate declaration to its definition r=mmc
2014-05-08 11:51:50 -07:00
Wan-Teh Chang
6a62d32e50
Bug 979703: Update NSS to NSS_3_16_2_BETA1.
...
Fix bugs in intel-gcm-x86-masm.asm and re-enable the
Intel AES assembly code. (The fix is by Shay Gueron of Intel.)
Remove an unnecessary loop in intel-gcm-x64-masm.asm r=agl.
2014-05-08 14:28:47 -07:00
Monica Chew
a203d88ce4
Bug 1000354: Fix comment and make test clearer (r=keeler)
2014-05-07 15:48:23 -07:00
Bobby Holley
5c9d904093
Bug 997987 - Remove usage of nsIScriptSecurityManager::GetSubjectPrincipal. r=Ms2ger
2014-05-06 15:43:03 -07:00
Jed Davis
52cd05523d
Bug 1004832 - Add tgkill to seccomp-bpf whitelist. r=kang
2014-05-02 16:57:00 +02:00
Camilo Viecco
ae2571aa01
Bug 1006107 - Disable pining by default, setup pinning for *.addons.mozilla.org. r=dkeeler
...
--HG--
extra : rebase_source : 93b1dbd5dc31490424060729a3941deffa8ee1d5
2014-05-05 13:59:32 -07:00
Wan-Teh Chang
958625bc6e
Bug 993569: Update to NSS 3.16.1 and NSPR 4.10.5. r=kaie.
2014-05-05 13:51:39 -07:00
Monica Chew
b049aa3cac
Bug 1005364: Disable pinning for all mozilla properties (r=keeler)
2014-05-04 15:36:38 -07:00
Brian Smith
a97bc4147c
Bug 1005667: Fix build warning due to buggy test code in pkixtestutil.cpp, r=dholbert
2014-05-04 11:04:48 -07:00
Brian Smith
163631e898
Bug 1005309, Part 2: Enable extended compiler warnings (-W4 -Wall) in mozilla::pkix, r=mmc
...
--HG--
extra : rebase_source : 033574a0b26582753baec003becfaf15bbd85003
extra : histedit_source : 2d52c47f92b8f694203c2eb580b37be78ccf2f9c
2014-05-03 17:50:26 -07:00
Brian Smith
8da948d67f
Bug 1005309, Part 1: Improve type conversion and error checking for hashing done in mozilla::pkix's pkixocsp.cpp. r=mmc
...
--HG--
extra : rebase_source : 79c248ebc45d722249ae7adbbd2527dc9985f6f0
extra : histedit_source : 8ea66942cec4252d9d7e625da22b5ad9964485a1
2014-05-02 11:53:06 -07:00
Brian Smith
2cad23bbfd
Bug 1005256: Improve parameter validation in mozilla::pkix::der::Input::GetSECItem, r=mmc
...
--HG--
extra : rebase_source : 93b65e103c86747ddaf463e639aacffdf7ccb08f
extra : histedit_source : 10ef0ab13fb9de710ea3c589600db4632f9cf4a0
2014-05-02 11:52:10 -07:00
Brian Smith
b6d4008ea4
Bug 1005208: Rename issuerKeyHash to keyHash in mozilla::pkix's pkixocsp.cpp, r=mmc
...
--HG--
extra : rebase_source : ede4ed17cb56e3e52325ecadc2c5ded33c4a6013
extra : histedit_source : b727000e81bbc8afa6b9f8188b97065f59da45ad
2014-05-02 10:40:03 -07:00
Brian Smith
46d3a85aea
Bug 1005198: Make it easy to create test certificates in GTest tests, r=keeler
...
--HG--
extra : rebase_source : 0b1ec263a5a1ce1856afb12f11ea4c35c2aa55d0
extra : histedit_source : 40a3a3fc1993de0fcdeb5593a1a1df4dc94832b8
2014-04-25 19:57:40 -07:00
ffxbld
b43b9dd445
No bug, Automated HSTS preload list update from host bld-linux64-spot-043 - a=hsts-update
2014-05-03 03:18:44 -07:00
David Keeler
e771a7d73d
bug 1004270 - use SQL cert/key DBs in PSM tests so we can run them on Android r=briansmith
2014-05-02 15:06:29 -07:00
Camilo Viecco
3b227aa061
Bug 951315 - Add telemetry to PK pinning. r=dkeeler
2014-04-30 17:04:00 -07:00
Monica Chew
92fa29b307
Bug 1002696 - Minimum set of changes to make genHPKPStaticPins.js productionizable. r=cviecco, dkeeler
...
--HG--
rename : security/manager/boot/src/PreloadedHPKPins.json => security/manager/tools/PreloadedHPKPins.json
rename : security/manager/boot/src/genHPKPStaticPins.js => security/manager/tools/genHPKPStaticPins.js
2014-05-01 14:48:37 -07:00
David Keeler
6c916db011
bug 982248 - NSSCertDBTrustDomain: specify timeout for OCSP requests r=briansmith
2014-05-01 15:07:55 -07:00
Brian Smith
cb05abe1d6
Bug 1003290: Fix OID parser template type, r=keeler
...
--HG--
extra : rebase_source : c33e450b84234ae7471118c2f8749593a59d9298
2014-04-25 16:31:30 -07:00
Brian Smith
6b71be8400
Bug 1002933: Use Strongly-typed enums more often in mozilla::pkix, r=mmc
...
--HG--
extra : rebase_source : 3f67f48d1f4150df0830f89e6c07bbbf3a8fc7e8
2014-04-25 16:29:26 -07:00
Brian Smith
80e8f86c33
Bug 1002929: Avoid implicit conversion of Result to boolean in mozilla::der::GeneralizedTime, r=keeler
...
--HG--
extra : rebase_source : 8966d41f1837611b83ac84b347aeddfade9bc949
2014-04-24 16:08:30 -07:00
Monica Chew
b06faaca65
Bug 998057: Add tests for certificate pinning (r=cviecco,dkeeler)
2014-04-30 20:11:35 -07:00
Monica Chew
a950040c90
Backed out changeset 9c8fbf297d51
...
Camilo did not land his patch that this depends on, my bad.
2014-04-30 20:01:34 -07:00
Monica Chew
628c03d585
Bug 998057: Add tests for certificate pinning (r=cviecco,dkeeler)
2014-04-30 19:56:03 -07:00
Monica Chew
625b9449b2
Bug 998057: Add test pinset to the pin generator (r=cviecco)
...
--HG--
rename : security/manager/ssl/tests/unit/tlsserver/default-ee.der => security/manager/boot/src/default-ee.der
2014-04-30 15:30:44 -07:00
Camilo Viecco
06f960a801
Bug 744204 - Allow Certificate key pinning Part 2 - Certverifier Interface. r=keeler
...
--HG--
extra : rebase_source : 2f9748ba0b241c697e22b7ff72f2f5a0fad4a2ca
2014-02-05 14:49:10 -08:00
Richard Barnes
39fa6a3803
Bug 1003604 - Make nsNSSShutDownObject::isAlreadyShutDown() const. r=dkeeler
2014-04-29 17:45:00 +02:00
Rodrigo Rodriguez Jr.
bc17528767
Bug 952650 (part 11) - Remove JSVAL_TO_INT. r=njn.
...
--HG--
extra : rebase_source : 41923458bbf8fd957c9a57685df4969f1190bd9f
2014-04-27 19:55:08 -07:00
Rodrigo Rodriguez Jr.
1b9dfa0db1
Bug 952650 (part 9) - Remove JSVAL_IS_INT. r=njn.
...
--HG--
extra : rebase_source : dc0c170914c2370c218cdbbe671d2a68628f5a87
2014-04-27 19:47:02 -07:00
Rodrigo Rodriguez Jr.
5b7e66980d
Bug 952650 (part 1) - Remove JSVAL_IS_NULL. r=terrence.
...
--HG--
extra : rebase_source : 83d1cdaf71260fd99b688c23303ceb2de7b00031
2014-04-27 19:30:51 -07:00
Wan-Teh Chang
e809100c4e
Bug 993569 - Update Mozilla 31 to use NSS 3.16.1 Beta 4. This disables
...
the new Intel AES assembly code on Windows. r=kaie.
2014-04-29 16:13:03 -07:00
Camilo Viecco
08d3905de0
Bug 744204 - Allow Key pining part 1 - Built-in Pinning Service. r=keeler
2013-06-20 10:35:43 -07:00
David Keeler
2a77846f27
bug 977865 - mozilla::pkix: add backoff for ocsp fetching when a responder fails r=cviecco
2014-04-28 16:38:15 -07:00
Brian Smith
c587f858f4
Bug 998067: Add utility code for making it easier to create GTests based on NSS, r=keeler
...
--HG--
extra : rebase_source : 8ae08d1ccc9329aa567cfc7ac590ddb026155bae
2014-04-16 21:38:01 -07:00
Brian Smith
2c23644423
Bug 1000544: Use "Fail(x, y)" instead of "PR_SetError(y, 0); return x;" more consistently, r=mmc
...
--HG--
extra : rebase_source : 96addac738b8ffe39c7a92d546388d5f13fc2340
2014-04-23 14:13:32 -07:00
Brian Smith
8d2dfeb6e2
Bug 1000482: Remove unused stapledOCSPResponse parmaeter from BuildForwardInner, r=mmc, r=keeler
...
--HG--
extra : rebase_source : b5d67d3488aa3df5690a7dd2b76495ac4986a723
2014-04-23 13:42:38 -07:00
Brian Smith
717e7f71a1
Bug 1000483: Remove unused isTrustAnchor parameter from CheckKeyUsage, r=cviecco
...
--HG--
extra : rebase_source : 96e7b76362d6219193c814d35c332aae2ed5b48f
2014-04-23 13:38:19 -07:00
Wan-Teh Chang
6b1f295425
Bug 993569 - Update Mozilla 31 to use NSS 3.16.1 Beta 3. The main change
...
is https://hg.mozilla.org/projects/nss/rev/7e8485a5ed49 .
2014-04-27 20:39:24 -07:00
Birunthan Mohanathas
ff8ce9bd42
Bug 900908 - Part 3: Change uses of numbered macros in nsIClassInfoImpl.h/nsISupportsImpl.h to the variadic variants. r=froydnj
2014-04-27 03:06:00 -04:00