Commit Graph

1787 Commits

Author SHA1 Message Date
Brian Smith
2bd47f2cb9 Bug 975229: Remove NSS-based certificate verification, r=keeler
--HG--
extra : rebase_source : 49cb20f1b51e2d9993a35decd820764e20ad9be9
2014-06-16 23:13:29 -07:00
Brian Smith
c214d0f55e Bug 1026261: Remove CERTCertificate from mozilla::pkix revocation checking API, r=keeler
--HG--
extra : rebase_source : 6798f494bd351961ea02abba07b5860839bbc418
2014-06-20 10:10:51 -07:00
David Keeler
4e568fe551 bug 1028178 - re-add nsICertificateDialogs to nsNSSDialogs' NS_IMPL_ISUPPORTS declaration r=briansmith 2014-06-20 09:38:08 -07:00
David Keeler
6dc7ca62d1 bug 997509 - heed expired Revoked or Unknown OCSP responses r=briansmith 2014-06-20 09:01:57 -07:00
Cykesiopka
40f95d5437 Bug 972702 - Make Cert Viewer details tab content resizable. r=keeler 2014-05-27 20:58:00 +02:00
Camilo Viecco
2883e1d4ea Bug 1016442 - Make mozilla cdn sites production on built-in list. r=mmc
--HG--
extra : rebase_source : 5d937b61ab86c974210dcc83735cd4308bff018e
2014-05-27 10:53:40 -07:00
Ryan VanderMeulen
9460f40816 Backed out changeset d5da62e82faf (bug 995801) for test_browserElement_oop_SecurityChange.html failures.
CLOSED TREE
2014-05-27 14:27:40 -04:00
David Keeler
bacc5f19c7 bug 995801 - cache nsNSSCertificate::mCachedEVStatus on disk r=mayhemer 2014-01-10 11:13:03 -08:00
Richard Barnes
cf739d773c Bug 998803 - Add support for RSA encryption and signing to WebCrypto API. r=bz,dkeeler 2014-05-23 15:29:00 +02:00
ffxbld
1b5b7ecfd1 No bug, Automated HSTS preload list update from host bld-linux64-spot-1068 - a=hsts-update 2014-05-24 03:14:12 -07:00
Monica Chew
c21cc7a85f Bug 1004351: Enable production mode for twitter pins (r=keeler) 2014-05-22 15:11:07 -07:00
Monica Chew
f87b89298d Bug 1014344: Use Google's root pems in addition to their intermediate certs (r=keeler) 2014-05-22 15:09:45 -07:00
Cykesiopka
17e952b63e Bug 622332 - Show cert SHA-256 fingerprint and remove MD5 fingerprint. r=keeler 2014-05-22 00:52:00 +02:00
Birunthan Mohanathas
76ca8ec617 Bug 869836 - Part 7: Use AppendLiteral instead of Append where possible. r=ehsan 2014-05-22 06:48:51 +03:00
Birunthan Mohanathas
c4568a7085 Bug 869836 - Part 6: Use EqualsLiteral instead of Equals where possible. r=ehsan 2014-05-22 06:48:51 +03:00
Birunthan Mohanathas
807e72372f Bug 869836 - Part 4: Use EqualsLiteral instead of Equals(NS_LITERAL_STRING(...)). r=ehsan 2014-05-22 06:48:51 +03:00
Birunthan Mohanathas
411a8639b4 Bug 869836 - Part 3: Use Append('c') instead of AppendLiteral("c"). r=ehsan 2014-05-22 06:48:51 +03:00
Birunthan Mohanathas
62570a8716 Bug 869836 - Part 2: Use AppendLiteral instead of Append(NS_LITERAL_STRING(...)). r=ehsan 2014-05-22 06:48:50 +03:00
Camilo Viecco
a87a54bcc1 Bug 1010594 - Part 2/2 tests - r=keeler
--HG--
extra : rebase_source : 4ca9623b815544edc58308544fa85b192c2f31f3
2014-05-19 13:26:23 -07:00
Camilo Viecco
4eff7cf088 Bug 1009635 - PreloadedHPKP.json should also contain production/exclusion lists. r=keeler
--HG--
extra : rebase_source : 46c13e490358f26b21191d6d783d795897ceea63
2014-05-15 08:04:54 -07:00
Richard Barnes
7b6d82be69 Bug 995385 - Ensure that NSS is initialzed for CryptoTasks. r=dkeeler 2014-05-16 15:47:00 -04:00
Monica Chew
b35189dfe7 Bug 1013504: Introduce error file for genHPKPStaticPins.js (r=keeler) 2014-05-20 13:25:02 -07:00
Richard Barnes
ae11832c51 Bug 1005375 - Add an API that allows CryptoTasks to be created without being dispatched 2014-05-03 08:50:00 +02:00
Monica Chew
1d542c52b2 Bug 1011269: Forgot to qref to pick up keeler's changes (r=keeler) 2014-05-19 13:24:41 -07:00
Monica Chew
8bc2f051f9 Bug 1011269: Add CertVerifier::pinningEnforceTestMode (r=keeler) 2014-05-19 13:04:40 -07:00
ffxbld
7253546a17 No bug, Automated HSTS preload list update from host bld-linux64-spot-358 - a=hsts-update 2014-05-17 03:15:04 -07:00
Monica Chew
a1ab4d859d Bug 1007844: Implement per-host telemetry for pin violations for AMO and aus4 (r=keeler) 2014-05-15 16:56:51 -07:00
Monica Chew
f023ce771c Bug 1006594: Implement moz-specific telemetry (r=keeler) 2014-05-14 16:36:46 -07:00
David Keeler
099169f359 bug 1005266 - disable strict timeout checking in test_ocsp_timeout.js on WinXP because of frequent failures r=mmc 2014-05-14 09:57:10 -07:00
Patrick McManus
033d5fc4e8 bug 1006804 - psm interface for kea size and make kea available in preliminary handshake r=keeler r=honzab 2014-05-06 17:22:25 -04:00
Monica Chew
9eb1c9c9de Bug 1009720: Telemetry for CERT_PINNING_TEST_RESULTS (r=keeler) 2014-05-13 13:50:13 -07:00
David Keeler
c441103da0 bug 1005355 - look for PSM test binaries in /data/local/xpcb/ on Android/B2G r=mmc 2014-05-12 14:38:00 -07:00
Monica Chew
d1eb9b420d Bug 772756: Implement sha1 support, import Chrome's pinsets wholesale, add test mode (r=cviecco,keeler) 2014-05-08 17:18:50 -07:00
Carsten "Tomcat" Book
97853c8221 merge mozilla-inbound to mozilla-central 2014-05-12 13:33:19 +02:00
ffxbld
59e3b8e3f4 No bug, Automated HSTS preload list update from host bld-linux64-spot-382 - a=hsts-update 2014-05-10 03:26:08 -07:00
David Keeler
0d13727d61 bug 1005266 - specify a timeout for the socket in test_ocsp_timeout.js r=mmc 2014-05-09 15:17:43 -07:00
Camilo Viecco
b1148150bc Bug 1007986 - Remove 1024 bit roots from mozilla pin list. r=mmc 2014-05-09 10:58:47 -07:00
Bobby Holley
5c9d904093 Bug 997987 - Remove usage of nsIScriptSecurityManager::GetSubjectPrincipal. r=Ms2ger 2014-05-06 15:43:03 -07:00
Camilo Viecco
ae2571aa01 Bug 1006107 - Disable pining by default, setup pinning for *.addons.mozilla.org. r=dkeeler
--HG--
extra : rebase_source : 93b1dbd5dc31490424060729a3941deffa8ee1d5
2014-05-05 13:59:32 -07:00
Monica Chew
b049aa3cac Bug 1005364: Disable pinning for all mozilla properties (r=keeler) 2014-05-04 15:36:38 -07:00
Brian Smith
46d3a85aea Bug 1005198: Make it easy to create test certificates in GTest tests, r=keeler
--HG--
extra : rebase_source : 0b1ec263a5a1ce1856afb12f11ea4c35c2aa55d0
extra : histedit_source : 40a3a3fc1993de0fcdeb5593a1a1df4dc94832b8
2014-04-25 19:57:40 -07:00
ffxbld
b43b9dd445 No bug, Automated HSTS preload list update from host bld-linux64-spot-043 - a=hsts-update 2014-05-03 03:18:44 -07:00
David Keeler
e771a7d73d bug 1004270 - use SQL cert/key DBs in PSM tests so we can run them on Android r=briansmith 2014-05-02 15:06:29 -07:00
Camilo Viecco
3b227aa061 Bug 951315 - Add telemetry to PK pinning. r=dkeeler 2014-04-30 17:04:00 -07:00
Monica Chew
92fa29b307 Bug 1002696 - Minimum set of changes to make genHPKPStaticPins.js productionizable. r=cviecco, dkeeler
--HG--
rename : security/manager/boot/src/PreloadedHPKPins.json => security/manager/tools/PreloadedHPKPins.json
rename : security/manager/boot/src/genHPKPStaticPins.js => security/manager/tools/genHPKPStaticPins.js
2014-05-01 14:48:37 -07:00
David Keeler
6c916db011 bug 982248 - NSSCertDBTrustDomain: specify timeout for OCSP requests r=briansmith 2014-05-01 15:07:55 -07:00
Monica Chew
b06faaca65 Bug 998057: Add tests for certificate pinning (r=cviecco,dkeeler) 2014-04-30 20:11:35 -07:00
Monica Chew
a950040c90 Backed out changeset 9c8fbf297d51
Camilo did not land his patch that this depends on, my bad.
2014-04-30 20:01:34 -07:00
Monica Chew
628c03d585 Bug 998057: Add tests for certificate pinning (r=cviecco,dkeeler) 2014-04-30 19:56:03 -07:00
Monica Chew
625b9449b2 Bug 998057: Add test pinset to the pin generator (r=cviecco)
--HG--
rename : security/manager/ssl/tests/unit/tlsserver/default-ee.der => security/manager/boot/src/default-ee.der
2014-04-30 15:30:44 -07:00
Camilo Viecco
06f960a801 Bug 744204 - Allow Certificate key pinning Part 2 - Certverifier Interface. r=keeler
--HG--
extra : rebase_source : 2f9748ba0b241c697e22b7ff72f2f5a0fad4a2ca
2014-02-05 14:49:10 -08:00
Richard Barnes
39fa6a3803 Bug 1003604 - Make nsNSSShutDownObject::isAlreadyShutDown() const. r=dkeeler 2014-04-29 17:45:00 +02:00
Rodrigo Rodriguez Jr.
bc17528767 Bug 952650 (part 11) - Remove JSVAL_TO_INT. r=njn.
--HG--
extra : rebase_source : 41923458bbf8fd957c9a57685df4969f1190bd9f
2014-04-27 19:55:08 -07:00
Rodrigo Rodriguez Jr.
1b9dfa0db1 Bug 952650 (part 9) - Remove JSVAL_IS_INT. r=njn.
--HG--
extra : rebase_source : dc0c170914c2370c218cdbbe671d2a68628f5a87
2014-04-27 19:47:02 -07:00
Rodrigo Rodriguez Jr.
5b7e66980d Bug 952650 (part 1) - Remove JSVAL_IS_NULL. r=terrence.
--HG--
extra : rebase_source : 83d1cdaf71260fd99b688c23303ceb2de7b00031
2014-04-27 19:30:51 -07:00
Camilo Viecco
08d3905de0 Bug 744204 - Allow Key pining part 1 - Built-in Pinning Service. r=keeler 2013-06-20 10:35:43 -07:00
David Keeler
2a77846f27 bug 977865 - mozilla::pkix: add backoff for ocsp fetching when a responder fails r=cviecco 2014-04-28 16:38:15 -07:00
Birunthan Mohanathas
ff8ce9bd42 Bug 900908 - Part 3: Change uses of numbered macros in nsIClassInfoImpl.h/nsISupportsImpl.h to the variadic variants. r=froydnj 2014-04-27 03:06:00 -04:00
Ryan VanderMeulen
de681ea4fc Merge m-c to inbound. 2014-04-26 21:41:26 -04:00
ffxbld
3daca64876 No bug, Automated HSTS preload list update from host bld-linux64-spot-425 - a=hsts-update 2014-04-26 03:23:23 -07:00
Nathan Toone
d67b9ae3a0 Bug 1001585 - Don't build tests directory if --disable-tests is specified. r=briansmith 2014-04-26 11:29:00 -04:00
Arpad Borsos
e19fb46166 Bug 474369 - remove nsVoidArray includes; r=ehsan
--HG--
extra : rebase_source : dd3abeb623fd8b784fd6ba639c88def84a4daf58
2014-04-26 16:12:45 +02:00
Honza Bambas
605c3001ad Bug 999306 - Add 'allow-insecure-ntlm-v1' preference for the generic NTLM v1 authentication module, r=jduell 2014-04-24 18:50:46 +02:00
Randell Jesup
1f9314c7a8 Bug 996487: don't null out mThread while committing thread suicide r=bsmedberg 2014-04-22 15:32:13 -04:00
Camilo Viecco
71d731b4d8 Bug 915930 - Make mozilla::pkix the default certificate verifier for all (not just desktop) r=briansmith
--HG--
extra : rebase_source : 56402e60078298dc64cf5476afda7c95671a7092
2014-04-25 13:22:30 -07:00
YFdyh000
686ab7c5e8 Bug 995528 - Certificate viewer describes not-valid-before date as issue date. r=honzab, ui-r=philipp 2014-04-21 10:58:04 -04:00
ffxbld
1ff1ed65cc No bug, Automated HSTS preload list update from host bld-linux64-spot-454 - a=hsts-update 2014-04-19 03:14:16 -07:00
Randell Jesup
45132d9932 Bug 988881: clean up CryptoTask (SignedJar) tasks instead of leaking them r=bsmedberg,mayhemer 2014-04-17 02:18:04 -04:00
Anuj Agarwal
b57b4cf0d1 Bug 897359 - Remove unimplemented popChallengeResponse, random, and disableRightClick methods. r=bz 2014-04-18 09:32:52 -04:00
David Keeler
2e3bd0056f bug 991898 - mozilla::pkix: temporarily allow empty Extensions in OCSP responses r=briansmith 2014-04-17 16:01:18 -07:00
Camilo Viecco
2a380c2fee Bug 997795 - Cleanup decodings. r=dkeeler 2014-04-17 14:42:05 -07:00
Camilo Viecco
e70e998770 Bug 992972 - Add sha256SubjectPublicKeyInfoDigest attribute to nsIX509Cert. sr=bsmith 2014-04-07 10:35:57 -07:00
Patrick McManus
edc73bcc7b bug 993591 - PSM HTTP Fetch should own streamloader data r=dkeller r=mayhemmer 2014-04-09 17:48:17 -04:00
David Keeler
47abc69838 bug 972753 - OCSP testing: delegated responses and including multiple certificates r=cviecco 2014-04-16 09:31:27 -07:00
Raymond Etornam Agbeame(:retornam)
7f95bd8328 Bug 934676 - Remove unused variable 'extracted' in ClientAuthDataRunnable::RunOnTargetThread. r=keeler 2014-04-15 15:46:00 +02:00
Monica Chew
d98ff86e6e Bug 991177: Disallow overrides for SEC_ERROR_CA_CERT_INVALID (r=keeler) 2014-04-15 15:35:41 -07:00
Kyle Huey
b6957123df Bug 991812: Remove uses of AtomicRefCounted<T> that live in Gecko. r=ehsan
--HG--
extra : rebase_source : 0d14e02c64d548fd3177681248d722683aaa87c3
2014-04-14 12:04:25 -07:00
David Keeler
c0e2e8d723 bug 994932 - fix error checking in GetOCSPResponseForType r=retornam 2014-04-15 14:21:08 -07:00
Bobby Holley
f223b1107f Bug 989528 - Rename AutoSystemCaller to AutoNoJSAPI, and assert against pre-existing exceptions. r=bz 2014-04-14 20:27:00 -07:00
Ryan VanderMeulen
601b02224e Backed out changesets ddbac34527fe and fa82f32d0c39 (bug 991812) for B2G bustage.
CLOSED TREE
2014-04-14 16:16:18 -04:00
Kyle Huey
acd8c16b76 Bug 991812: Remove uses of AtomicRefCounted<T> that live in Gecko. r=ehsan 2014-04-14 12:04:25 -07:00
Ryan VanderMeulen
be657e134d Merge m-c to inbound on a CLOSED TREE. 2014-04-13 22:52:50 -04:00
ffxbld
783ee9d2ef No bug, Automated HSTS preload list update from host bld-linux64-spot-327 - a=hsts-update 2014-04-12 03:21:26 -07:00
Mike Kaply
535e1a8665 Bug #993846 - Add missing stringbundle, r=kaie 2014-04-11 10:07:02 -05:00
David Keeler
f0c23bbc7e bug 993186 - improve test_cert_eku generator r=cviecco 2014-04-09 11:04:00 -07:00
David Keeler
ae21952cdd bug 991209 - mozilla::pkix: allow non-end-entity certs to have OCSP signing EKU r=briansmith 2014-04-10 10:15:02 -07:00
Boris Zbarsky
35fca5eeeb Bug 991742 part 8. Remove the "aScope" argument of WebIDL/nsWrapperCache WrapObject() methods. r=bholley
This patch was mostly generated with the following command:

find . -name "*.h" -o -name "*.cpp" | xargs sed -e '/WrapObject(JSContext/ {; N; s/\(WrapObject(JSContext *\* *a\{0,1\}[Cc]x\),\n\{0,1\} *JS::Handle<JSObject\*> a\{0,1\}[sS]cope/\1/ ; }' -i ""

and then reverting the changes that made to
dom/bindings/BindingUtils.h, since those WrapObject methods are not
the ones we're trying to change here, plus a bunch of manual fixups
for cases that this command did not catch (including all the callsites
of WrapObject()).
2014-04-08 18:27:18 -04:00
Boris Zbarsky
56f44fdf10 Bug 991742 part 6. Remove the "aScope" argument of binding Wrap() methods. r=bholley
This patch was mostly generated with this command:

find . -name "*.h" -o -name "*.cpp" | xargs sed -e 's/Binding::Wrap(aCx, aScope, this/Binding::Wrap(aCx, this/' -e 's/Binding_workers::Wrap(aCx, aScope, this/Binding_workers::Wrap(aCx, this/' -e 's/Binding::Wrap(cx, scope, this/Binding::Wrap(cx, this/' -i ""

plus a few manual fixes to dom/bindings/Codegen.py, js/xpconnect/src/event_impl_gen.py, and a few C++ files that were not caught in the search-and-replace above.
2014-04-08 18:27:17 -04:00
David Keeler
2f779bc64a bug 990603 - test override for server certificate with basic constraints: CA=true r=briansmith 2014-04-08 09:51:45 -07:00
David Keeler
179fc74542 bug 990603 - mozilla::pkix: defer reporting end-entity cert errors until after path building r=briansmith 2014-04-08 09:49:36 -07:00
Peter Van der Beken
a12d286723 Bug 984497 - Use SpecialPowers more and change SpecialPower usage to deal with Window on WebIDL bindings. r=bz.
--HG--
rename : content/media/webspeech/synth/test/test_setup.html => content/media/webspeech/synth/test/file_setup.html
rename : content/media/webspeech/synth/test/test_speech_queue.html => content/media/webspeech/synth/test/file_speech_queue.html
rename : content/media/webspeech/synth/test/test_speech_simple.html => content/media/webspeech/synth/test/file_speech_simple.html
extra : rebase_source : 687daf9d78e69fe6ae21f7c1a26503cf88a18b97
2014-02-15 22:12:34 +01:00
Peter Van der Beken
7741df1efa Back out 75c95dac7fe0 (bug 984497) and f1b0d3d13755 (bug 990475) to fix bustage on a CLOSED TREE.
--HG--
extra : rebase_source : a63315cd428faeb95464f6ad76946d1c0c6d36c3
2014-04-07 22:18:53 +02:00
Peter Van der Beken
8cf720bdb0 Bug 984497 - Use SpecialPowers more and change SpecialPower usage to deal with Window on WebIDL bindings. r=bz.
--HG--
rename : content/media/webspeech/synth/test/test_setup.html => content/media/webspeech/synth/test/file_setup.html
rename : content/media/webspeech/synth/test/test_speech_queue.html => content/media/webspeech/synth/test/file_speech_queue.html
rename : content/media/webspeech/synth/test/test_speech_simple.html => content/media/webspeech/synth/test/file_speech_simple.html
extra : rebase_source : 3662ae8b0f35fefb250c9cd048e848d662863855
2014-02-15 22:12:34 +01:00
Shu-yu Guo
f236a45566 Bug 989509 - Part 3: security/ (r=cviecco,dkeeler) 2014-04-03 19:29:40 -07:00
Camilo Viecco
02c29dd580 Bug 987816 - Part 2/3. Update tests to match un-regressed behaviour. r=dkeeler
--HG--
extra : rebase_source : 7bccc66831f56cede353ec33275449b7bf2560b1
2014-03-31 09:10:13 -07:00
Camilo Viecco
2011f0e31a Bug 987816 - Part 2/3. Test verifying certificateUsageVerifyCA can return OK. r= dkeeler
--HG--
extra : rebase_source : 8e3f50d58c3c61e0fc843a053370f74d9adac8c0
2014-03-31 09:10:11 -07:00
Jon Coppeard
bb2e7cbea1 Bug 959787 - Handlify JS_ExecuteScript and JS::Evaluate APIs r=terrence r=bz 2014-04-01 11:34:39 +01:00
Mike Hommey
edf4794405 Bug 988168 - Better integrate gtest libxul in the build system. r=mshal. DONTBUILD
--HG--
rename : toolkit/library/Makefile.in => toolkit/library/libxul.mk
rename : toolkit/library/moz.build => toolkit/library/libxul.mozbuild
2014-03-31 13:21:38 +02:00
Mike Hommey
3dbd6f1f57 Backed out changeset 561b9329d832 (bug 988168) for wrong attribution. 2014-04-01 13:17:50 +09:00
Jacek Caban
258449c186 Bug 988168 - Better integrate gtest libxul in the build system. r=mshal
--HG--
rename : toolkit/library/Makefile.in => toolkit/library/libxul.mk
rename : toolkit/library/moz.build => toolkit/library/libxul.mozbuild
2014-03-31 13:21:38 +02:00
Geoff Brown
4ba9807bcb Bug 967704 - Skip a few more tests on Android 2.3 2014-03-31 21:30:07 -06:00
David Keeler
1af2e5556c bug 987295 - mozilla::pkix: test ocsp extension decoding r=cviecco 2014-03-31 10:54:53 -07:00
Camilo Viecco
02ccbcd3d6 Bug 986156 - Test anypolicyoid (no inhibit policy) for EV . r=dkeeler
--HG--
extra : rebase_source : 004dbe5fc1b168c43f62c5bed8e71d4d67b04754
2014-03-28 10:00:45 -07:00
Phil Ringnalda
aa7ac0fff7 Merge m-i to m-c 2014-03-29 09:00:18 -07:00
ffxbld
c0d0a0bd94 No bug, Automated HSTS preload list update from host bld-linux64-spot-403 - a=hsts-update 2014-03-29 03:14:50 -07:00
Mike Hommey
b4ed5e9a80 Backout changesets ca413634eba3 and a92851ff7444 (bug 988168) for likely windows PGO perf regression 2014-03-29 16:49:19 +09:00
Wes Kocher
51005ce03d Backed out 2 changesets (bug 987816) for xpcshell orange
Backed out changeset 245d0cb5a7b3 (bug 987816)
Backed out changeset b714220dd39d (bug 987816)
2014-03-28 16:57:12 -07:00
Camilo Viecco
557392561a Bug 987816 - test certificateUsageVerifyCA can return success. r=dkeeler
--HG--
rename : toolkit/library/libxul.mk => toolkit/library/Makefile.in
rename : toolkit/library/libxul.mozbuild => toolkit/library/moz.build
extra : rebase_source : 145fd4fce17325ca9e34681f3451c66c33bfd1a1
2014-03-28 15:53:08 -07:00
Mike Hommey
d55f8470ad Bug 988168 - Better integrate gtest libxul in the build system. r=mshal
--HG--
rename : toolkit/library/Makefile.in => toolkit/library/libxul.mk
rename : toolkit/library/moz.build => toolkit/library/libxul.mozbuild
2014-03-29 07:50:08 +09:00
Camilo Viecco
4ebeba8a03 Bug 982292 - Enhance EKU testing. r=dkeeler 2014-03-18 08:59:37 -07:00
Benjamin Peterson
1b0c0d2f10 Bug 988718 - Mark nsSecurityHeaderParser explicit. r=dkeeler 2014-03-27 12:51:25 -04:00
Antonio M. Amaya
572fc8db93 Bug 880043 - Signed packaged installation test certificate generation. r=cviecco
--HG--
rename : security/manager/ssl/tests/unit/test_signed_apps/nss_ctypes.py => security/manager/ssl/tests/unit/test_signed_apps/gentestfiles/nss_ctypes.py
rename : security/manager/ssl/tests/unit/test_signed_apps/sign_b2g_app.py => security/manager/ssl/tests/unit/test_signed_apps/gentestfiles/sign_b2g_app.py
2014-03-27 11:02:27 -04:00
David Keeler
00785d6113 bug 986171 - mozilla::pkix: telemetry for what cert validation library is in use r=cviecco 2014-03-26 09:41:08 -07:00
David Keeler
1ea866dced Backed out changeset d9e136a02980 (bug 986171) for build bustage r=backout 2014-03-25 14:02:42 -07:00
David Keeler
d56c7b6534 bug 986171 - mozilla::pkix: telemetry for what cert validation library is in use r=cviecco 2014-03-25 13:43:01 -07:00
David Keeler
1898826bf2 bug 987217 - free leaking encodedRequest in GenerateCRMFRequest r=cviecco 2014-03-25 10:38:03 -07:00
Camilo Viecco
da379b1daf Bug 969188 - Part 3/3 - Test handling of v1/v2/v3 certificates from PSM. r=keeler
--HG--
extra : rebase_source : 321d603913f07a0afe64400e300146873e8a81af
2014-02-25 15:37:22 -08:00
Phil Ringnalda
39747a1529 Merge m-c to m-i 2014-03-22 08:09:46 -07:00
ffxbld
2306430b7a No bug, Automated HSTS preload list update from host bld-linux64-spot-008 - a=hsts-update 2014-03-22 03:20:45 -07:00
David Keeler
d33e060a52 bug 969758 - ignore "snionly" property in Google's HSTS preload list r=cviecco DONTBUILD because NPOTB 2014-03-21 14:09:04 -07:00
David Keeler
2fb9ff870f bug 985201 - follow-up: fix comment mentioning "Insanity" (it should be "mozilla::pkix") r=me DONTBUILD 2014-03-20 15:36:23 -07:00
David Keeler
676eaf13b4 bug 985201 - rename insanity::pkix to mozilla::pkix r=cviecco r=briansmith
--HG--
rename : security/insanity/include/insanity/ScopedPtr.h => security/pkix/include/pkix/ScopedPtr.h
rename : security/insanity/include/insanity/bind.h => security/pkix/include/pkix/bind.h
rename : security/insanity/include/insanity/nullptr.h => security/pkix/include/pkix/nullptr.h
rename : security/insanity/include/insanity/pkix.h => security/pkix/include/pkix/pkix.h
rename : security/insanity/include/insanity/pkixtypes.h => security/pkix/include/pkix/pkixtypes.h
rename : security/insanity/lib/pkixbind.cpp => security/pkix/lib/pkixbind.cpp
rename : security/insanity/lib/pkixbuild.cpp => security/pkix/lib/pkixbuild.cpp
rename : security/insanity/lib/pkixcheck.cpp => security/pkix/lib/pkixcheck.cpp
rename : security/insanity/lib/pkixcheck.h => security/pkix/lib/pkixcheck.h
rename : security/insanity/lib/pkixder.cpp => security/pkix/lib/pkixder.cpp
rename : security/insanity/lib/pkixder.h => security/pkix/lib/pkixder.h
rename : security/insanity/lib/pkixkey.cpp => security/pkix/lib/pkixkey.cpp
rename : security/insanity/lib/pkixocsp.cpp => security/pkix/lib/pkixocsp.cpp
rename : security/insanity/lib/pkixutil.h => security/pkix/lib/pkixutil.h
rename : security/insanity/moz.build => security/pkix/moz.build
rename : security/insanity/test/lib/moz.build => security/pkix/test/lib/moz.build
rename : security/insanity/test/lib/pkixtestutil.cpp => security/pkix/test/lib/pkixtestutil.cpp
rename : security/insanity/test/lib/pkixtestutil.h => security/pkix/test/lib/pkixtestutil.h
2014-03-20 14:29:21 -07:00
David Keeler
43eeb69107 bug 984567 - insanity::pkix: handle/test malformed OCSP responses r=briansmith r=cviecco 2014-03-19 09:36:10 -07:00
Camilo Viecco
424c0bfa64 Bug 966820 - Add test for trustbits for Certverifier. r=dkeeler
--HG--
rename : layout/reftests/abs-pos/table-internal-5-ref.html => layout/reftests/abs-pos/table-internal-1-ref.html
rename : layout/reftests/abs-pos/table-internal-6-ref.html => layout/reftests/abs-pos/table-internal-3-ref.html
rename : layout/reftests/abs-pos/table-internal-7-ref.html => layout/reftests/abs-pos/table-internal-4-ref.html
extra : rebase_source : d854bd51bd84e9f7e21980a31c822726e4401dd9
2014-03-06 14:17:50 -08:00
Paolo Amadini
8dd6c66f29 Bug 984788 - Convert legacy uses of promise.js to Promise.jsm. rs=Yoric 2014-03-18 15:16:02 +01:00
Neil Rashbrook
c3b2f90f39 Bug 514280 Stop using nsCOMPtr for concrete types r=bsmedberg
--HG--
extra : rebase_source : f8fb50de9292320eb7589dd28dc566d0f5044da6
2014-03-18 00:23:03 +00:00
Wes Kocher
c0dba87922 Backed out 2 changesets (bug 514280) for OSX build bustage on a CLOSED TREE
Backed out changeset 2a015b45d808 (bug 514280)
Backed out changeset a01f97c1ed02 (bug 514280)
2014-03-17 15:19:53 -07:00
David Keeler
472a6edd05 bug 977870 - insanity::pkix: consume the rest of input when a CertID doesn't match in an OCSP response r=briansmith 2014-03-17 14:34:34 -07:00
David Keeler
ed25ed39d5 bug 982754 - allow some inadequate key usage overrides r=cviecco 2014-03-13 16:49:12 -07:00
Neil Rashbrook
b07eaa1644 Bug 514280 Stop using nsCOMPtr for concrete types r=bsmedberg
--HG--
extra : rebase_source : eaca8b2925eaffb49e29a617cd72c0d6686e6d9e
2014-03-17 19:07:09 +00:00
Jon Coppeard
6ca748883c Bug 959787 - Handlify JS_ExecuteScript, JS_EvaluateScript and other JS APIs r=sfink r=bz 2014-03-17 16:17:58 +00:00
Phil Ringnalda
8c19bde08b Merge m-c to m-i 2014-03-15 12:32:04 -07:00
Kyle Huey
510a49016d Bug 967364: Rename already_AddRefed::get to take. r=bsmedberg 2014-03-15 12:00:15 -07:00
ffxbld
ba946c8294 No bug, Automated HSTS preload list update from host bld-linux64-spot-485 - a=hsts-update 2014-03-15 03:17:07 -07:00
Bill McCloskey
aa5f40a77e Bug 982828 - [e10s] Disable mochitest-plain tests that don't pass in e10s (r=ted) 2014-03-13 21:38:19 -07:00
Wes Kocher
a3277d291d Backed out changeset 88425ad0f06a (bug 982828) for introducing various mochitest-5 failures on a CLOSED TREE
* * *
Backed out changeset 94f9ebdc6662 (bug 982828)
2014-03-13 19:41:21 -07:00
Bill McCloskey
f4f6bf8e4d Bug 982828 - [e10s] Disable mochitest-plain tests that don't pass in e10s (r=ted) 2014-03-13 15:41:41 -07:00
Bill McCloskey
7193069fa0 Backed out changeset d6261f65070a 2014-03-13 15:52:27 -07:00
Bill McCloskey
69a746922b Bug 982828 - [e10s] Disable mochitest-plain tests that don't pass in e10s (r=ted) 2014-03-13 15:41:41 -07:00
David Keeler
609e9a9f16 bug 969048 - adjust OCSP stapling telemetry for insanity::pkix r=briansmith r=cviecco 2014-03-13 09:41:03 -07:00
Vaibhav Agarwal
74d0d984a3 Bug 971132 - B2G mochitests should use the new manifest format for runtests; r=jmaher 2014-03-13 10:40:10 -04:00
David Keeler
8fc5d6daee bug 915932 - cache OCSP responses when using insanity::pkix r=cviecco r=briansmith 2014-03-12 13:08:48 -07:00
David Keeler
341b865887 bug 982403 - separate the compilation of certverifier and insanity::pkix r=cviecco r=briansmith
--HG--
rename : security/certverifier/moz.build => security/insanity/moz.build
2014-03-12 13:08:18 -07:00
David Keeler
6d6c54d69b Bug 974715 - Create more flexible OCSP response generation code. r=briansmith, r=cviecco 2014-03-10 14:04:31 -07:00
Brian Smith
ec6bc705e3 Bug 947584: Use official IANA names for cipher suites in PSM, r=cviecco
--HG--
extra : rebase_source : fafec912dc96480cb4f00bddec00d40e5e9db088
2014-03-09 20:21:12 -07:00
ffxbld
0992075bf2 No bug, Automated HSTS preload list update from host bld-linux64-spot-041 - a=hsts-update 2014-03-08 04:29:12 -08:00
Luke Wagner
b2189937c6 Bug 980180 - remove principals as an argument to compilation, part 2 (r=terrence)
--HG--
extra : rebase_source : 86791b50b4293ba5506f1e0f5c64730338f552e6
2014-03-06 16:28:07 -06:00
Vaibhav Agarwal
417b7f2e77 Bug 970925 - convert testing/mochitest/android.json into skip-if statements in mochitest.ini files; r=jmaher 2014-03-06 13:42:47 -05:00
Ted Mielczarek
5db86de6a8 Bug 977699 - Move the few remaining mochitests to manifests. r=jmaher 2014-03-04 15:54:31 -05:00
David Keeler
06559f1667 bug 978797 - stop classifying SEC_ERROR_INADEQUATE_KEY_USAGE as a "bad cert" error r=briansmith 2014-03-03 15:39:07 -08:00
Brian Smith
4b8d4318a5 Bug 978117: Enable test_signed_apps.js and test_signed_apps-marketplace.js on Android and B2G, r=cviecco
--HG--
extra : rebase_source : acc33b667f19583d94d300d4e4a73cb3e225bbd6
2014-03-01 20:55:57 -08:00
Brian Smith
185ce0c8d9 Bug 978120: Enable more PSM xpcshell tests on Android and B2G, r=keeler
--HG--
extra : rebase_source : 439914322f2b2f2ebd7bf529e3a4a59f36831a7e
2014-03-01 19:02:58 -08:00
Brian Smith
f91269e634 Bug 978120: Make nsIX509Cert.setCerttrust, and nsIX509CertDB.addCert, and nsIX509CertDB2.addCertFromBase64 work on Android and B2G, r=keeler
--HG--
extra : rebase_source : 5582716fe0c650366e3cf5e85a30748a7d22b156
2014-03-01 19:01:23 -08:00
Ed Morley
1169e3e5fb Merge latest green inbound changeset and mozilla-central 2014-03-03 14:44:44 +00:00
ffxbld
204086414a No bug, Automated HSTS preload list update from host bld-linux64-spot-483 - a=hsts-update 2014-03-01 03:17:30 -08:00
Brian Smith
ca2ea62abf Bug 978111, Bug 978426: Disable test_sts_preloadlist_perwindowpb.js on B2G/ARM, a=bustage
--HG--
extra : rebase_source : 434af7dc53cf57eca1335a6e0ad0a4785c547e72
2014-02-28 21:12:07 -08:00
Brian Smith
4637429114 Bug 978185: Improve error codes returned from nsIX509CertDB.addCert and nsIX50CertDB.setCertTrust, r=keeler
--HG--
extra : rebase_source : e32a913f085524d113b17d03917c10ad92c7f6e1
2014-02-28 11:19:38 -08:00
Brian Smith
a5d253392f Bug 978111: Enable already-working PSM xpcshell tests on Android and B2G, r=cviecco
--HG--
extra : rebase_source : c14ef67870f2b40a3319e6bc8df0ddfe9dd222e3
2014-02-28 11:16:16 -08:00
Andrew McCreight
537eb6fa81 Bug 962608 - Make PL_DHashTableInit infallible by default. r=briansmith,bsmedberg,ehsan,froydnj,jduell,jfkthame,roc,smaug 2014-02-27 10:04:09 -08:00
Brian Smith
c13108b590 Bug 921885: Use insanity::pkix for EV cert verification when insanity::pkix is the selected implementation, r=cviecco, r=keeler
--HG--
extra : rebase_source : b1fd1f8eace675484b3c2d568e5e74f767f1d2ad
2014-02-23 22:15:53 -08:00
Brian Smith
29c8950e17 Bug 970810: Expand name constraint tests to test insanity::pkix, r=cviecco
--HG--
extra : rebase_source : b8190690743a12623c7524429215fc7d8a8dea49
extra : histedit_source : fd9877f98303dd237b302e6c606ca11f4c36fd7c
2014-02-25 01:15:52 -08:00
Camilo Viecco
2e520f51df Bug 900727: Add name constraints to psm in xpcshell. r=bsmith 2013-12-12 10:28:06 -08:00
Brian Smith
db4827dbd4 Bug 975122: Allow cert error overrides when insanity::pkix is used, r?cviecco, r?keeler
--HG--
extra : rebase_source : 47f5e779a16c462e40baa2d9cec2e83946c9076c
2014-02-22 19:08:06 -08:00
Raymond Etornam Agbeame(:retornam)
6d832f03cf Bug 970614 - Remove code wrapped in #if 0 ... #endif blocks in PSM. r=keeler 2014-02-24 09:41:55 -05:00
Ehsan Akhgari
0f5851acbd Bug 935778 - Part 0.3: Spray some more MOZ_DECLARE_REFCOUNTED_TYPENAME across the tree 2014-02-20 23:07:24 -05:00
David Keeler
27afebfba2 bug 969479 - only prevent TLS fallback for STARTTLS r=briansmith 2014-02-20 15:14:32 -08:00
Brian Smith
2e66c4833d Bug 915931, Part 4: Expand OCSP xpcshell tests to test insanity::pkix, r=keeler
--HG--
extra : rebase_source : e645de251c459d6fa38996bb7bfd35e21eaf3b72
2014-02-17 13:19:54 -08:00
Ms2ger
6e066deaea Bug 968856 - Move unconditional LOCAL_INCLUDES into moz.build; r=mshal 2014-02-15 21:24:59 +01:00
Phil Ringnalda
045a2cbe55 Merge m-i to m-c 2014-02-15 09:54:57 -08:00
ffxbld
b9dfc6f557 No bug, Automated HSTS preload list update from host bld-linux64-spot-071 - a=hsts-update 2014-02-15 03:20:10 -08:00
Vaibhav Agarwal
d109cb3fc7 Bug 970925 - convert testing/mochitest/android.json into skip-if statements in mochitest.ini files; r=jmaher 2014-02-15 04:53:02 -05:00
Brian Smith
83e4eaa908 Bug 896620: Make marketplace certs work on in all products, r=keeler
--HG--
extra : source : 86ec7137a8892f75918c77e605df970f5b96ef62
extra : histedit_source : 33326790804d49e6ec658626116ebf870d94d445
2014-02-14 14:37:07 -08:00
David Keeler
30ccf7829f bug 967975 - certificate error override telemetry r=briansmith
--HG--
rename : security/manager/ssl/tests/unit/tlsserver/cmd/OCSPStaplingServer.cpp => security/manager/ssl/tests/unit/tlsserver/cmd/BadCertServer.cpp
2014-02-13 14:53:29 -08:00
Jeff Walden
2619346f9f Bug 969165 - Convert Atomic<T> where T != bool but is used as a bool over to Atomic<bool>, now that it's supported, in security/manager/. r=bsmith
--HG--
extra : rebase_source : 3632af6471e41d099a0948542d26a7df527efaad
2014-02-06 22:17:07 -08:00
Brian Smith
91ddc1d104 Bug 971178, Part 4: Expand test_intermediates_basic_constraints.js test insanity::pkix, r=cviecco
--HG--
extra : rebase_source : b419a3087b3d327c9a48d984551abeac4943be7a
2014-02-11 16:24:45 -08:00
Brian Smith
f1350c0f8f Bug 971178, Part 3: Expand test_certificate_usages.js test insanity::pkix, r=cviecco
--HG--
extra : rebase_source : 3810925d18767d1b04f8a47004a0ab7a631e5b4b
2014-02-11 01:42:41 -08:00
Brian Smith
6581563f7a Bug 971178, Part 2: Make test_getchains.js test insanity::pkix, r=cviecco
--HG--
extra : rebase_source : ff9620bad6b20a84cf179af7ffa7a74f6ffd6640
2014-02-11 01:42:55 -08:00
Brian Smith
b8f2b8be6a Bug 971178, Part 1: Expand test_cert_signatures.js test insanity::pkix, r=cviecco
--HG--
extra : rebase_source : 90cf68bdb50b8499aeda3e14c476977db9e43c2a
2014-02-11 01:42:24 -08:00
Camilo Viecco
0bca16e9bd Bug 877376: Add tests for intermediate CA basic constraints and KU/EKU, r=briansmith
--HG--
extra : rebase_source : b831ab0e459af4ea0f43a1184e32b333f43b2f01
2013-05-23 10:15:19 -07:00
Brian Smith
84299706e6 Bug 878932, Part 2: Make certificate verification implementation prefs dynamic, r=cviecco
--HG--
extra : rebase_source : 4b413cfd8e122ee4e0fea64d624285856e2cb0cb
2014-01-20 15:55:12 -08:00
Brian Smith
bbf60e0ee9 Bug 878932, Part 1: add insanity::pkix as an option for certificate verification, r=keeler, r=cviecco
--HG--
extra : rebase_source : c1f75dff6ac7f32e082517af701654abebaee250
2014-02-10 11:41:12 -08:00
Brian Smith
0dd915920a Bug 970512: Remove uninteresting cases for certificate usage verification, r=cviecco
--HG--
extra : rebase_source : 6df6dcfb39f8b4e2cd063115470af04675c0f768
extra : source : 56e0904260b417ce181e2a35978f6d77e78ef2c2
2013-10-13 23:34:28 -07:00
Brian Smith
a543241ac1 Bug 969938: Stop adding id-KP-OCSPSigning EKU to CA certificates in tests, r=cviecco
--HG--
extra : rebase_source : 9f5e42ea788e63fb93e3a37632be12093096e63d
2014-02-08 21:01:39 -08:00
David Keeler
e6f147946b bug 961528 - holepunch chart.apis.google.com from the HSTS preload list r=briansmith 2014-02-11 10:21:57 -08:00
Jacek Caban
867f117090 Bug 969330 - Fix -Werror=int-to-pointer-cast in windows-only code. r=ehsan 2014-02-10 12:05:22 +01:00
ffxbld
5c2460d500 No bug, Automated HSTS preload list update from host bld-linux64-ec2-400 - a=hsts-update 2014-02-08 03:17:31 -08:00
Daniel Holbert
6fb15215a9 Bug 968363: Mark security/manager/ssl/src/ as FAIL_ON_WARNINGS. r=briansmith 2014-02-06 00:12:17 -08:00
Daniel Holbert
6fa076714c Bug 968348: Remove some set-but-never-read variables, an inline a PR_LOGGING-only variable, to fix build warnings in security/manager/ssl/src/. r=keeler 2014-02-06 00:12:16 -08:00
Daniel Holbert
9e611f121a Bug 968323: Declare prlog variables inside #ifdef PR_LOGGING instead of MOZ_LOGGING, in /security, to fix build failures in --disable-logging builds. r=briansmith 2014-02-05 22:11:26 -08:00
Daniel Holbert
3695b32275 Bug 968338 followup: Add missing #include for unused.h. (bustage fix on a CLOSED TREE) 2014-02-05 14:14:54 -08:00
Daniel Holbert
ec8f21dd23 Bug 968338: Pass unused-in-some-build-configurations variable 'mFdForLogging' to mozilla::unused, to suppress clang warning in SSLServerCertVerification.cpp. r=bsmith 2014-02-05 13:39:27 -08:00
Daniel Holbert
c287205b92 (no bug) Fix a few DOS newline characters in SSLServerCertVerification.cpp. (no review, whitespace-only) 2014-02-05 13:39:26 -08:00
David Keeler
1002e4f24e bug 860076 - remove SkipOcsp/SkipOcspOff r=briansmith
--HG--
rename : security/manager/ssl/tests/mochitest/browser/browser_certificateManagerLeak.js => security/manager/ssl/tests/mochitest/browser/browser_certViewer.js
2014-02-04 16:13:47 -08:00
David Keeler
00f70ac6cf bug 967629 - don't release any nsNSSShutDownObject in any destructorSafeDestroyNSSReference r=cviecco 2014-02-04 16:14:51 -08:00
Monica Chew
7a7febbd96 Bug 967298: Make nsIX509CertList instantiable (r=briansmith) 2014-02-03 22:25:50 -08:00
Honza Bambas
8abe5e1893 Bug 828183 - disable NTLM generic module, effectively disable arbitrary NTLMv1 in Firefox, r=bsmith 2014-02-04 01:52:55 +01:00
Brian Smith
ccd33163bb Bug 967299: Fix async/sync issue in test_ev_certs.js, r=keeler
--HG--
extra : rebase_source : bb7e0a593205ff95de35cf4eecb65ed9dc91a630
2014-02-03 16:05:33 -08:00
David Keeler
576b9b1513 Bug 964493, Part 2: Test, r=briansmith
--HG--
extra : rebase_source : 4bc219aaece6f16458ce7755acf552bf956e01a0
2014-01-31 11:32:48 -08:00
David Keeler
12ecfb8778 bug 965379 - refactor getting the profile directory in nsNSSComponent::InitializeNSS r=briansmith 2014-02-02 13:00:45 -08:00
David Keeler
91ee7961d8 bug 965379 - properly indent nsNSSComponent::InitializeNSS r=briansmith 2014-02-02 13:02:27 -08:00