Ben Kelly
39ac893e51
Bug 1210941 P10 Use LOAD_BYPASS_SERVICE_WORKER in nsNSSCallbacks. r=ehsan
2015-10-06 06:37:07 -07:00
Kate McKinley
7014f86655
Bug 1191414 - gather telemetry on usage of <keygen>. r=keeler,r=vladan
2015-09-22 09:52:58 -07:00
Nicholas Nethercote
434138fa6d
Bug 1209351 (part 5) - Optimize nsTHashTable::RemoveEntry() usage in security/. r=keeler.
2015-09-24 20:44:31 -07:00
Phil Ringnalda
da0936bb5f
Merge m-i to m-c, a=merge
2015-10-03 15:37:39 -07:00
ffxbld
dc83241385
No bug, Automated HPKP preload list update from host bld-linux64-spot-410 - a=hpkp-update
2015-10-03 03:44:51 -07:00
ffxbld
d939f15e9a
No bug, Automated HSTS preload list update from host bld-linux64-spot-410 - a=hsts-update
2015-10-03 03:44:49 -07:00
David Keeler
c7fac22d4c
bug 1205767 - prevent memory leak when generating an EC key with <keygen> r=ttaubert
2015-09-17 14:57:24 -07:00
Tooru Fujisawa
6ed8e81abc
Bug 1207499 - Part 8: Remove use of expression closure from security/. r=keeler
2015-09-23 18:42:19 +09:00
Kaspar Brand
84007f05ef
Bug 278689 - Multiple Certificates with the same subject are not shown in the digital signature select cert combo (only one is shown) r=dkeeler
2015-09-05 07:52:00 +02:00
David Keeler
6b687ec14b
bug 1187994 - remove unused file CryptoUtil.h r=jcj
...
This probably should have been removed as part of bug 891066.
2015-07-27 09:56:14 -07:00
David Keeler
9b8ef98274
bug 1203312 - split tlsserver certificates into ocsp_certs and bad_certs r=mgoodwin
...
The B2G emulators apparently take ~5 minutes to read 50 certificates into
memory, which causes intermittent test timeouts. This is an attempt to
reduce the number of certificates needed to be read at any given time.
2015-09-22 17:03:15 -07:00
David Keeler
9ef70f3b6f
bug 1203312 - convert tlsserver to generate certificates at build time r=Cykesiopka,mgoodwin
2015-08-24 15:53:07 -07:00
ffxbld
31dcb7460f
No bug, Automated HPKP preload list update from host bld-linux64-spot-363 - a=hpkp-update
2015-09-26 03:40:59 -07:00
ffxbld
d0d75fd31d
No bug, Automated HSTS preload list update from host bld-linux64-spot-363 - a=hsts-update
2015-09-26 03:40:57 -07:00
Jonathan Hao
2f6735a7c4
Bug 1178518 - Add an AppTrustedRoot for signed packaged app. r=keeler
2015-09-07 15:28:21 +08:00
ffxbld
eb2bb96364
No bug, Automated HPKP preload list update from host bld-linux64-spot-560 - a=hpkp-update
2015-09-19 03:46:51 -07:00
ffxbld
14311b7985
No bug, Automated HSTS preload list update from host bld-linux64-spot-560 - a=hsts-update
2015-09-19 03:46:49 -07:00
Wes Kocher
0d0a8a55a8
Backed out changeset a08287c70962 (bug 1203312) for b2g xpcshell failures
2015-09-18 12:53:24 -07:00
David Keeler
e2328c01f5
bug 1203312 - convert tlsserver to generate certificates at build time r=Cykesiopka,mgoodwin
2015-08-24 15:53:07 -07:00
Kate McKinley
b1eba1c35b
Bug 1196039 - Telemetry for certificate lifetime. r=rbarnes,vladan
2015-09-17 10:04:52 -07:00
Nicholas Nethercote
248f611da3
Bug 1201135 - Rename pldhash.{h,cpp} to PLDHashTable.{h,cpp}. r=mccr8.
2015-09-15 20:49:53 -07:00
Ehsan Akhgari
63b25b683a
Bug 1205302 - Disallow intercepting OCSP requests; r=jdm
2015-09-16 19:15:32 -04:00
Nicholas Nethercote
f71059bd78
Bug 1121760 (part 6) - Move all remaining PL_DHash*() functions into PLDHashTable. r=poiru.
2015-09-14 14:23:47 -07:00
Nicholas Nethercote
4dafae0e81
Bug 1121760 (part 3) - Remove PL_DHashTableRemove(). r=poiru.
2015-09-14 14:23:24 -07:00
Nicholas Nethercote
6f753fbb80
Bug 1121760 (part 2) - Remove PL_DHashTableAdd(). r=poiru.
2015-09-14 14:23:12 -07:00
Nicholas Nethercote
e600d6de49
Bug 1121760 (part 1) - Remove PL_DHashTableSearch(). r=poiru.
2015-05-21 00:34:25 -07:00
Shu-yu Guo
d8faa01cea
Bug 1202902 - Mass replace toplevel 'let' with 'var' in preparation for global lexical scope. (rs=jorendorff)
2015-09-15 11:19:45 -07:00
Cykesiopka
819da2f9d0
Bug 443811 - Use long date format for cert date output. r=keeler
2015-09-13 23:33:00 +02:00
Richard Barnes
8824811399
Bug 942515 - Show Untrusted Connection Error for SHA-1-based SSL certificates with notBefore >= 2016-01-01 r=keeler
2015-09-11 14:52:30 -04:00
ffxbld
9a77a9ac48
No bug, Automated HPKP preload list update from host bld-linux64-spot-542 - a=hpkp-update
2015-09-12 03:39:46 -07:00
ffxbld
c1f042338f
No bug, Automated HSTS preload list update from host bld-linux64-spot-542 - a=hsts-update
2015-09-12 03:39:44 -07:00
Mark Goodwin
73033140cf
Bug 1016555 - Disable OCSP checking for certificates covered by OneCRL r=keeler
...
1) Added some comments to firefox.js to explain the relationship between
extensions.blocklist.interval and security.onecrl.maximum_staleness_in_seconds
2) Modified default values in firefox.js and mobile.js to set maximum staleness
to 1.25x blocklist interval
3) modified the tests_ev_certs.js xpcshell test to cope with larger maximum
staleness values to address test failures
2015-09-10 11:10:07 +01:00
Nicholas Nethercote
58f8fe3be0
Bug 1202526 (part 5) - Use PLDHashTable::RemoveEntry() in nsSecureBrowserUIImpl. r=dkeeler.
...
This avoids repeating the hash table search in order to remove the entry.
2015-09-07 19:20:16 -07:00
ffxbld
864437b73f
No bug, Automated HPKP preload list update from host bld-linux64-spot-1098 - a=hpkp-update
2015-09-05 03:41:54 -07:00
ffxbld
e3bf6d0091
No bug, Automated HSTS preload list update from host bld-linux64-spot-1098 - a=hsts-update
2015-09-05 03:41:52 -07:00
David Keeler
3f8710ffab
bug 1196853 - convert test_cert_signatures.js to generate certificates at build time r=jcj
...
Also add additional testcases that weren't in the original test (tampered
signatures had been tested, but tampered certificates hadn't been covered).
2015-08-19 15:59:49 -07:00
ffxbld
f258dabcf6
No bug, Automated HPKP preload list update from host bld-linux64-spot-305 - a=hpkp-update
2015-09-03 13:59:53 -07:00
ffxbld
341ad958a2
No bug, Automated HSTS preload list update from host bld-linux64-spot-305 - a=hsts-update
2015-09-03 13:59:50 -07:00
Masatoshi Kimura
f260637c16
Bug 1201024 - Disable unrestricted RC4 fallback and add RC4-only servers to the fallback whitelist. r=cykesiopka
2015-09-03 21:50:52 +09:00
Nick Thomas
92f8a729b5
Bug 1197607, Automated hsts & hpkp updates are failing on mozilla-central, mozilla-aurora, mozilla-esr38, r=cykesiopka
2015-09-03 22:07:42 +12:00
Masatoshi Kimura
a426c031e5
Bug 1195789 - Update fallback whitelist. r=cykesiopka
2015-09-02 00:44:04 +09:00
Nicholas Nethercote
10d95cca57
Bug 1198334 (part 1) - Replace the opt-in FAIL_ON_WARNINGS with the opt-out ALLOW_COMPILER_WARNINGS. r=glandium.
...
The patch removes 455 occurrences of FAIL_ON_WARNINGS from moz.build files, and
adds 78 instances of ALLOW_COMPILER_WARNINGS. About half of those 78 are in
code we control and which should be removable with a little effort.
2015-08-27 20:44:53 -07:00
Cykesiopka
49c1e300ef
Bug 1197644 - Remove the security.ssl.warn_missing_rfc5746 pref. r=keeler
2015-08-24 22:53:42 -07:00
Xidorn Quan
4ccdd6c2ca
Bug 1188468 - Allow script to force updating a generated file even if the file is actually not changed. r=gps
2015-08-25 10:07:43 +10:00
David Keeler
532e32633c
bug 1194013 - convert test_name_constraints.js to generate certificates at build time r=Cykesiopka,mgoodwin
2015-08-11 16:40:38 -07:00
Ryan VanderMeulen
a7890c1d6f
Merge inbound to m-c. a=merge
2015-08-23 17:18:36 -04:00
Fabrice Desré
21c4e1bceb
Bug 1196988 - Remove THA support. r=gwagner
2015-08-21 10:00:54 -07:00
Jonathan Griffin
411013ed53
Bug 1136892 - Create an xpcshell-addons tag for running addon-specific xpcshell tests, r=chmanchester
2015-08-18 11:26:14 -07:00
Wes Kocher
878dfeff75
Backed out changeset 688775a8227f (bug 1136892) for mass bustage prompting a CLOSED TREE
2015-08-18 11:58:05 -07:00
Christoph Kerschbaumer
eaa13b8628
Bug 1195606 - Use channel->ascynOpen2 in security/manager/ssl/nsNSSCallbacks.cpp (r=sicking)
2015-08-18 09:54:09 -07:00
