Commit Graph

981 Commits

Author SHA1 Message Date
Brian Smith
c90d9b85f2 Bug 772365, Part 3: Add B2G-specific customizations to NSS certificate trust database with tests, r=rrelyea r=honzab
--HG--
rename : dom/tests/browser/browser_ConsoleStoragePBTest_perwindowpb.js => dom/tests/browser/browser_ConsoleStoragePBTest.js
rename : dom/tests/mochitest/localstorage/test_localStorageBasePrivateBrowsing_perwindowpb.html => dom/tests/mochitest/localstorage/test_localStorageBasePrivateBrowsing.html
rename : security/manager/ssl/tests/mochitest/browser/browser_bug627234_perwindowpb.js => security/manager/ssl/tests/unit/test_bug627234.js
extra : rebase_source : 2792b75d7ccccf80e9a23feed70c134dfcdfe00f
2012-12-10 07:17:29 -08:00
Josh Matthews
8254edebb3 Bug 769288 - Part 7: Use separate SSL session cache entries for private connections. r=mayhemer 2012-12-07 17:57:53 -05:00
Josh Matthews
ed70f58493 Bug 769288 - Part 5: Close private socket connections when the lsat private browsing instance dies. r=bsmith,mcmanus 2012-12-07 17:50:43 -05:00
Josh Matthews
a96cc77495 Bug 769288 - Part 4: Clear SSL session cache upon leaving private browsing. r=bsmith 2012-12-06 22:05:34 -05:00
Josh Matthews
a20b20132f Bug 769288 - Part 3: Clear all temporary cert overrides upon leaving private browsing. r=bsmith 2012-12-06 22:05:34 -05:00
Josh Matthews
46bea8356f Bug 769288 - Part 2: Avoid storing intermediate cert data for private contexts. r=bsmith sr=mayhemer 2012-12-06 22:05:34 -05:00
Josh Matthews
61c247f393 Bug 769288 - Part 1: Make PSM more amenable to storing concurrent private and non-private data. r=bsmith 2012-12-06 22:05:27 -05:00
Mario Alvarado [:marioalv]
56f41c45a6 Bug 806732 - Port test_bug627234.js to the new per-tab PB APIs; r=ehsan
DONTBUILD since this is NPOTB for global PB builds

--HG--
rename : security/manager/ssl/tests/unit/test_bug627234.js => security/manager/ssl/tests/mochitest/browser/browser_bug627234_perwindowpb.js
2012-12-12 15:15:35 -06:00
Ehsan Akhgari
c2c74adb17 Backed out 7 changesets (bug 769288) because of leaks
Backed out changeset b2fb475b6e4e (bug 769288)
Backed out changeset 912331d0c2fd (bug 769288)
Backed out changeset 6d8d78bd56a9 (bug 769288)
Backed out changeset e75cd1e1fca3 (bug 769288)
Backed out changeset e10c24f10bd2 (bug 769288)
Backed out changeset 7b0fdedb4fa9 (bug 769288)
Backed out changeset 42b468942a84 (bug 769288)
2012-12-12 00:05:49 -05:00
Josh Matthews
fb98be5c10 Bug 769288 - Part 7: Use separate SSL session cache entries for private connections. r=mayhemer 2012-12-07 17:57:53 -05:00
Josh Matthews
d6fff6f417 Bug 769288 - Part 5: Close private socket connections when the lsat private browsing instance dies. r=bsmith,mcmanus 2012-12-07 17:50:43 -05:00
Josh Matthews
4d5d2fb53f Bug 769288 - Part 4: Clear SSL session cache upon leaving private browsing. r=bsmith 2012-12-06 22:05:34 -05:00
Josh Matthews
b3b7171571 Bug 769288 - Part 3: Clear all temporary cert overrides upon leaving private browsing. r=bsmith 2012-12-06 22:05:34 -05:00
Josh Matthews
72562d9da6 Bug 769288 - Part 2: Avoid storing intermediate cert data for private contexts. r=bsmith sr=mayhemer 2012-12-06 22:05:34 -05:00
Josh Matthews
0618421593 Bug 769288 - Part 1: Make PSM more amenable to storing concurrent private and non-private data. r=bsmith 2012-12-06 22:05:27 -05:00
Camilo Viecco
dab940de30 Bug 819429 - Remove assertion allowing aToken to be NULL in nsNSSCertificateDB::FindCertByDBKey. r=bsmith 2012-12-14 09:10:44 -08:00
Saurabh Anand
c9e3659e16 Bug 818817 - Fix some compiler warnings, r=Ms2ger 2012-12-09 22:53:19 +05:30
David Keeler
b01ad0081c bug 819106 - update processStsHeader call in hsts preload list script r=bsmith DONTBUILD (NPOTB) 2012-12-06 16:46:00 -08:00
Ehsan Akhgari
4970895402 Merge mozilla-central into mozilla-inbound 2012-12-06 01:08:07 -05:00
Ehsan Akhgari
72ffc2012c Bug 806733 - Part 0: Don't run test_sts_preloadlist.js in per-window PB builds 2012-12-06 00:39:44 -05:00
Ehsan Akhgari
5ebfc14028 Bug 806732 - Part 0: Don't run test_bug627234.js in per-window PB builds 2012-12-06 00:39:06 -05:00
Ehsan Akhgari
08fd71c9a6 Bug 806731 - Part 0: Don't run test_sts_privatebrowsing.html in per-window PB builds 2012-12-06 00:37:37 -05:00
Brian Smith
8b3350f6d2 Bug 772365, Part 1: Implement JARSignatureVerification, r=honzab, parts r=ehsan
* * *
Bug 772365, Part 2.1: Generate test cases for signed app signature verification
* * *
Bug 772365, Part 2.2: Test JAR signature verification

--HG--
extra : rebase_source : 198be789e8b1565dad418e15760fa6dc90da843f
2012-11-14 15:31:39 -08:00
Brian Smith
8b107fc7c0 Bug 767241, Part 3: Replace uses of one-off Auto* classes with ScopedNSSTypes in ssltunnel, r=ted
--HG--
extra : rebase_source : d3d9c1e474bee2c0952d5d71cb3e7460d661a5aa
2012-11-12 09:42:33 -08:00
Brian Smith
cb7c24d515 Bug 767241, Part 2: Replace almost all uses of NSSCleanupAutoPtrClass with ScopedNSSTypes, r=honzab
--HG--
extra : rebase_source : 5fa068e15febb301b0c776f1a565262d698789b2
2012-11-12 09:42:28 -08:00
Brian Smith
d9bc34c46b Backed out changeset 84bf2e19c701
--HG--
extra : rebase_source : 446249323b44e54161bf187c0d386db645402bb7
2012-11-30 19:39:46 -08:00
Brian Smith
eab8e69e69 Backed out changeset c966b16e4fb5
--HG--
extra : rebase_source : 4b3f5af10951cf33c70f459a5043075bb946ccb4
2012-11-30 19:37:39 -08:00
Brian Smith
62fead1afa Backed out changeset 329da1081148
--HG--
extra : rebase_source : 9efe319bbff8d9a3f55208686d238626bf6d0dc0
2012-11-30 19:36:08 -08:00
Brian Smith
d5e492d0d1 Bug 767241, Part 3: Replace uses of one-off Auto* classes with ScopedNSSTypes in ssltunnel, r=ted 2012-11-12 09:42:33 -08:00
Brian Smith
0757356584 Bug 767241, Part 2: Replace almost all uses of NSSCleanupAutoPtrClass with ScopedNSSTypes, r=honzab 2012-11-12 09:42:28 -08:00
Andres Hernandez
157805f7c8 Bug 806733 - Port test_sts_preloadlist.js to the new per-window PB APIs; r=ehsan
--HG--
rename : security/manager/ssl/tests/unit/test_sts_preloadlist.js => security/manager/ssl/tests/unit/test_sts_preloadlist_perwindowpb.js
2012-12-13 12:15:10 -06:00
Brian Smith
6c0a65320c Bug 804663: Create a CryptoTask API to simplify the creation of correct async crypto operations and add more utilities to ScopedNSSTypes.h, r=honzab
--HG--
extra : rebase_source : de29f383e6d5b109a06837b887d96bbcbce55817
2012-07-13 15:44:24 -07:00
Brian Smith
46c8b420d3 Bug 804663: Create a CryptoTask API to simplify the creation of correct async crypto operations and add more utilities to ScopedNSSTypes.h, r=honzab 2012-07-13 15:44:24 -07:00
Daniel Holbert
d7d5846bc1 Bug 817176: Add "(void)" cast to silence GCC unused-var warning for an intentionally-unused variable. r=bsmith 2012-11-30 16:59:42 -08:00
Brian Smith
79b9a37db4 Bug 812531: Make MOZ_TYPE_SPECIFIC_SCOPED_POINTER_TEMPLATE comply with two-phase template name lookup rules, as clang requires, r=khuey
--HG--
extra : rebase_source : 5c4c8c0ff4f2dfcb4d83e63376036a5bf45ab0ab
2012-11-15 17:02:11 -08:00
Josh Matthews
cfa92f09d7 Bug 812794 - Make docshell STS usage use existing PB knowledge instead of digging in SSL internals. r=bz/bsmith 2012-11-28 11:24:03 -05:00
Daniel Holbert
1f6c42c110 Bug 815928 part 2: Fix typo s/elment/elment/ in comments & tests. DONTBUILD, rs=Waldo 2012-11-27 19:15:36 -08:00
Patrick McManus
91262a60f6 bug 806992 EV initialization blocks the first certificate verification thread for a long time r=bsmith r=honzab 2012-11-22 15:57:59 -05:00
Patrick McManus
7099237ca8 bug 807435 telemetry for ssl handshake time r=bsmith r=honzab 2012-11-22 15:36:59 -05:00
Patrick McManus
eb3911c98d bug 807435 - telemetry for ssl key exchange algorithm r=bsmith r=honzab 2012-11-22 11:43:27 -05:00
Patrick McManus
ef5cec2956 bug 807435 - telemetry for ocsp success/failure and elapsed time r=bsmith r=honzab 2012-11-22 11:43:27 -05:00
Patrick McManus
380fde7b17 bug 807435 telemetry for server TLS NPN support r=bsmith r=honzab 2012-11-22 11:43:27 -05:00
Patrick McManus
1abfc63665 bug 807435 telemetry for ssl version used r=honzab r=bsmith 2012-11-22 11:43:27 -05:00
Brian Smith
57d66aaf73 Backed out changeset ef6db4ced917 (bug 804663) due to build bustage, a=bustage
--HG--
extra : rebase_source : 20d434a5f205052e836e059bcee57a0bf84725c4
2012-11-19 20:24:47 -08:00
Brian Smith
3b421f7cf1 Bug 804663: Add a CryptoTask class for asynchronous crypto operations and add more utilities to ScopedNSSTypes.h
--HG--
extra : source : cc195997c6e526ce4b64d28cfb065d671b90bdba
2012-07-13 15:44:24 -07:00
Josh Matthews
3c1cd97486 Bug 722979 - Add privacy status argument to relevant nsIStrictTransportSecurityService methods. r=bsmith sr=biesi 2012-06-30 07:34:17 -07:00
Ed Morley
f2ccb0abbe Backout e123e0173185, 326ed6f1dc9e & 7c2c9c988869 (bug 722979) for mochitest-a11y failures 2012-11-16 15:06:13 +00:00
Josh Matthews
e4660ea794 Bug 722979 - Update test in accordance with STS API changes. 2012-11-16 14:48:08 +00:00
Josh Matthews
6d9f8239fe Bug 722979 - Add privacy status argument to relevant nsIStrictTransportSecurityService methods. r=bsmith sr=biesi 2012-06-30 07:34:17 -07:00
Kai Engert
cd1eba1beb Bug 799304 - Document how to enable a CA root certificate for EV (extended validation, r=rrelyea, DONTBUILD 2012-11-15 17:33:37 +01:00
Isaac Aggrey
218a57b4d4 Bug 802706: Remove usage of NSPRFormatTime.h from tree; r=ehsan 2012-11-14 13:14:21 -06:00
Brian Smith
d79b8dcdb8 Bug 799009: Remove unneeded SSL-related security alerts, r=honzab, r=dao 2012-11-10 20:49:44 -08:00
Brian Smith
1da60348ef Bug 799007: Remove support for low/weak/null cipher suites, r=honzab, r=dao 2012-11-10 20:49:29 -08:00
Brian Smith
87d054d8e5 backout cset b36d5c933092 due to orange 2012-11-10 19:09:07 -08:00
Brian Smith
7781a26273 backout cset 30f8e29f9cd1 due to orange 2012-11-10 19:08:26 -08:00
Brian Smith
ca3df795ee Bug 772365: Fix build bustage caused by cset 4ed8af50dc10, a=bustage 2012-11-10 18:51:22 -08:00
Brian Smith
d6580050c0 Bug 799009: Remove unneeded SSL-related security alerts, r=honzab, r=dao
--HG--
extra : rebase_source : b6216bf3163f63f1eb4f16901943d9f351bca2cf
2012-11-10 18:19:55 -08:00
Brian Smith
cb19bf16cd Bug 799007: Remove support for low/weak/null cipher suites, r=honzab, r=dao
--HG--
extra : rebase_source : 822ef336a5cdeb7d6693dbe46844a26465600854
2012-11-10 18:18:14 -08:00
Brian Smith
824cf41577 Bug 802302: Remove obsolete OCSP responder override UI and API, r=honzab
--HG--
extra : rebase_source : 5d241a8b9573f442c37d0aeef0689ae5054dd08d
2012-10-15 20:39:11 -07:00
Brian Smith
4f01c0148b Bug 772365, Part 0: remove nsNSSCertHeader.h, r=honzab
--HG--
extra : rebase_source : b58ac957c58f647180f67a6e13be3cc81915d90c
2012-11-02 12:34:46 -07:00
Brian Smith
20fdba1c78 Bug 804441: Put our NSPR and NSS header wrappers before OS_INCLUDES, r=ted
This allows inline functions in headers to call NSPR/NSS functions without
causing linking errors.

--HG--
extra : rebase_source : f89df8a53d6e8f624c84fc3b84982c4dd92d5f38
2012-10-24 14:31:54 -07:00
Camilo Viecco
e2817d88c5 Bug 785259 - tests, r=honzab 2012-10-31 22:17:28 +01:00
Nathan Froyd
bd55a07f0e Bug 806618 - rewrite PR_NewLogModule calls to not generate static initializers; r=ehsan 2012-10-29 19:32:10 -04:00
Jacek Szpot
0b35b0e3d8 Bug 792180 - Replace NS_{UN,}LIKELY with MOZ_{UN,}LIKELY; r=ehsan 2012-10-26 15:32:10 +02:00
David Keeler
48d041d98a bug 800444 - disable HSTS preload list if firefox has not updated in 18 weeks r=bsmith, mayhemer 2012-10-26 09:50:23 -07:00
Andrew Quartey
5576623aa8 Bug 792581 - part 21: Replace LL_F2L and LL_D2L macros. r=ehsan 2012-10-25 19:25:58 -04:00
Tim Taubert
101d75524c merge m-c to fx-team 2012-10-25 21:23:58 +02:00
Mihai Sucan
ff15ba270c Bug 803964 - Cannot show window object with inspect viewer in remote web console; r=bz 2012-10-24 13:01:54 +03:00
Mike Conley
ce88c1ca2d Bug 804690 - Skip test for bug 627234 if the Private Browsing service is not available. r=dkeeler. 2012-10-24 15:00:36 -04:00
Brian Smith
3d1a0697eb Bug 802378: Make PSM coding patterns more consistent, and more consistent with Mozilla Coding Style, r=keeler
--HG--
extra : rebase_source : 8b7ebf227a490cfde7376a61e2952a07a900e2d2
2012-10-17 13:48:36 -07:00
Patrick McManus
3ff8d7a652 bug 803267 - speculative backout of 802378 to test crash stats r=backout 2012-10-23 16:42:19 -04:00
Daniel Holbert
cb88fe3510 Bug 803236: Reorder nsSTSHostEntry constructors' init lists to fix build warning, and mark that directory & its sibling 'pki' as warning-free. r=bsmith 2012-10-18 15:42:10 -07:00
Brian Smith
125999d7c4 Bug 794510: Part 6 - Fixups needed to build on Windows and Android and Mac OS X debug, plus shorten comment to be less than 80 columns; r=ehsan 2012-10-18 15:55:48 -04:00
Kai Engert
1a42ab289d Bug 757240 - May 2012 batch of changes to the EV-activation list, r=bsmith 2012-10-18 22:17:59 +02:00
David Keeler
a3ef93cf41 bug 627234 - test that hsts data isn't deleted in private browsing when includeSubdomains is false r=bsmith 2012-10-22 10:38:50 -07:00
Nick Hurley
31985d7fa6 Bug 536324 part 3 - Change consumers of nsIChannel. r=sworkman 2012-10-22 10:51:07 -07:00
Bobby Holley
dc33cae831 Bug 789224 - Separate certificate principals out from CAPS. r=dveditz
There's no longer any reason why "certificate principals" need to be principals at all.
I tried to rip them out entirely, but it looks like they're still used vestigially at XPI
install time to display author information. But there's no reason that they have to be
porkbarreled into the security-critical objects that we pass around all over the place.
So let's make them their own deal.

I was tempted to call them "certificate holders", but that would involve renaming methods and
cause more compat fuss than necessary.

--HG--
rename : caps/idl/nsISignatureVerifier.idl => security/manager/ssl/public/nsISignatureVerifier.idl
2012-10-22 08:29:56 +02:00
Brian Smith
dac4a30ad5 Bug 802378: Make PSM coding patterns more consistent, and more consistent with Mozilla Coding Style, r=keeler
--HG--
extra : rebase_source : 46fde9231dd69356221c0c5a7042a7b2d3dd0cf6
2012-10-17 13:48:36 -07:00
Isaac Aggrey
fc1063f503 Bug 794510: Part 5 - use plarena.h type definitions; r=ehsan 2012-10-11 01:39:28 -05:00
Ehsan Akhgari
115ba5a2eb Bug 722978 - Port the certificate exception UI to the new per-window private browsing API; r=jdm
--HG--
extra : rebase_source : a49d0c630a170a950dd830ad484e084a29f8b51f
2012-10-12 23:38:19 -04:00
David Keeler
2148728e6b bug 786417 - filter the hsts preload list to sites that actually send the header r=bsmith, mayhemer 2012-10-15 14:43:57 -07:00
Andrew Quartey
40a4eebd6c Bug 792581 - part 17: Replace LL_L2F macro with a double cast. r=ehsan 2012-10-12 13:29:11 -04:00
Andrew Quartey
464807b57d Bug 792581 - part 16: Replace LL_L2UI macro with uint32_t cast. r=ehsan 2012-10-12 13:29:11 -04:00
Trevor Saunders
3d3592cd63 bug 798595 - remove useless prmem.h includes r=ehsan 2012-10-04 02:14:06 -04:00
Abhishek Potnis
6f931b9ad7 Bug 795504: Remove usages of PR_STATIC_CALLBACK from the tree; r=ehsan 2012-10-08 21:45:12 +05:30
EKR
2ae69bfc6d Bug 790517: mtransport - Generic media transport subsystem for ICE and DTLS r=jesup,bsmith,mcmanus 2012-10-02 13:04:58 -07:00
Andrew Quartey
b0c7350c5a Bug 792581 - part 13: Replace LL_MOD macro with modulo operator. r=ehsan 2012-10-05 01:05:28 -04:00
Andrew Quartey
e0477b23d8 Bug 792581 - part 12: Replace LL_DIV with division operator. r=ehsan 2012-10-05 01:05:28 -04:00
Andrew Quartey
efd58ac27b Bug 792581 - part 11: Replace LL_MUL macro with multiplication operator. r=ehsan 2012-10-05 01:05:28 -04:00
Andrew Quartey
9f926a0d71 Bug 792581 - part 10: Replace LL_SUB macro with mathematical minus operator. r=ehsan 2012-10-05 01:05:27 -04:00
Andrew Quartey
b92e443462 Bug 792581 - part 9: Replace LL_ADD with mathematical plus operator. r=ehsan 2012-10-05 01:05:27 -04:00
Andrew Quartey
106c5d6f24 Bug 792581 - part 5: Replace LL_CMP macro with standard comparison. r=ehsan 2012-10-03 10:13:19 -04:00
Andrew Quartey
9eed719a44 Bug 792581 - part 1: Replace LL_IS_ZERO macro with standard relation. r=ehsan 2012-10-03 10:13:18 -04:00
Brian Smith
739ac20ce3 Bug 767241, Part 1: Create scoped pointer types for NSS types, r=honzab
--HG--
rename : dom/tests/mochitest/localstorage/test_clear_browser_data.html => dom/tests/mochitest/localstorage/test_app_uninstall.html
rename : layout/reftests/flexbox/solidblue.png => layout/reftests/bugs/solidblue.png
extra : rebase_source : d0825fab76fdb92eba788d3baaaa25aa97547d43
2012-05-22 13:49:49 -07:00
cviecco@mozilla.com
c3bba668b3 Bug 785259: Fix override bit masking [v2], r=bsmith, sr=honzab
--HG--
extra : rebase_source : 22768054c4113e6904d07f5e9b5db32d969315a1
2012-09-28 11:05:26 -07:00
Isaac Aggrey
997db4d142 Bug 791906: Replace NSPR integer limit constants with stdint ones; r=ehsan 2012-09-28 01:57:33 -05:00
cviecco@mozilla.com
55026bdf5b Bug 785259: Fix override bit masking, r=bsmith, sr=honzab
--HG--
extra : rebase_source : 42bef348ffad84d9c49181c896dd0a1446a86e68
2012-09-26 12:08:00 -07:00
Isaac Aggrey
b33410feb2 Bug 789847 - Remove PR_CALLBACK usage from tree 2012-09-25 11:18:38 -05:00
Benjamin Peterson
d66436f7f5 backout 5f9951a2e6df (bug 785918) for breaking on osx 2012-09-25 10:24:09 -04:00
José Guilherme Vanz
8596bb0170 Bug 785918 - Replace the usages of PR_ARRAY_SIZE with mozilla::ArrayLength; r=ehsan 2012-09-25 09:57:08 -04:00