Xidorn Quan
56cfa2743c
Bug 1229587 part 1 - Disable C4464 warning newly added in VS2015u1. r=keeler
2015-12-03 09:29:42 +11:00
Mark Goodwin
66019acce1
Bug 901698 - Some tests for OCSP-must-staple; r=keeler
2015-11-13 16:49:09 +00:00
Mark Goodwin
63d61227ae
Bug 901698 - Implement OCSP-must-staple; r=keeler
2015-11-13 16:49:08 +00:00
Richard Barnes
ef0d9ed24f
Bug 942515 - Show Untrusted Connection Error for SHA-1-based SSL certificates with notBefore >= 2016-01-01 r=keeler
2015-09-11 14:52:30 -04:00
Jacek Caban
a1d8a2b9b2
Bug 1199624 - Don't use memset and memcmp in files that don't include cstring explicitly. r=briansmith
2015-09-09 14:16:59 +02:00
Nicholas Nethercote
69d088e45f
Bug 1198334 (part 1) - Replace the opt-in FAIL_ON_WARNINGS with the opt-out ALLOW_COMPILER_WARNINGS. r=glandium.
...
The patch removes 455 occurrences of FAIL_ON_WARNINGS from moz.build files, and
adds 78 instances of ALLOW_COMPILER_WARNINGS. About half of those 78 are in
code we control and which should be removable with a little effort.
2015-08-27 20:44:53 -07:00
Ryan VanderMeulen
3325ea8059
Backed out changeset 982be1bbebdf (bug 1199624) for Windows bustage.
2015-08-30 17:09:09 -04:00
Jacek Caban
5a61810c25
Bug 1199624 - Don't use memset and memcmp in files that don't include cstring explicitly. r=briansmith
2015-08-29 07:59:00 -04:00
Mike Hommey
f041201fd5
Bug 1189891 - Avoid including <cstring> from pkix/Input.h. r=bsmith
2015-08-21 15:27:22 +09:00
Mike Hommey
6bd3004c10
Backout changesets af1b36497559 and 1d52ab626597 (bug 1189891) for pkix bustage
2015-08-21 15:05:38 +09:00
Mike Hommey
22a71eae08
Bug 1189891 - Avoid including <cstring> from pkix/Input.h. r=bsmith
2015-08-21 14:29:19 +09:00
Birunthan Mohanathas
47ed3a3675
Bug 1182996 - Fix and add missing namespace comments. rs=ehsan
...
The bulk of this commit was generated by running:
run-clang-tidy.py \
-checks='-*,llvm-namespace-comment' \
-header-filter=^/.../mozilla-central/.* \
-fix
2015-07-13 08:25:42 -07:00
Mark Goodwin
7064a50b2f
Bug 1159155 - Add telemetry probe for SHA-1 usage (r=keeler)
2015-07-09 07:22:29 +01:00
Cykesiopka
f7f78003a7
Bug 1145679 - Reject EV status for end-entity EV certs with overly long validity periods. r=keeler
2015-06-29 22:19:00 +02:00
Tim Taubert
9df7e5e6d9
Bug 1060112 - Don't treat OCSP responses omitting the requested certificate status as "unknown certificate" responses blocking the connection r=keeler
2015-05-21 13:39:34 -04:00
David Keeler
6a5160aa2a
bug 1141189 - implement skipping expensive revocation checks (OCSP fetching) for short-lived certificates r=rbarnes
2015-04-06 16:10:28 -07:00
David Keeler
aef2b30e4e
bug 1150114 - allow PrintableString to match UTF8String in name constraints checking r=briansmith
2015-04-08 16:17:39 -07:00
Brian Smith
83c90debbf
Bug 1154399 - Part 4: Simplify certificate parsing in OCSP responses. r=keeler
2015-04-14 05:33:03 -10:00
Brian Smith
0cc9d436df
Bug 1154399 - Part 3: Simplify OptionalExtensions. r=keeler
...
We used to avoid using Nested and NestedOf because they were based on
bind and it was difficult to maintain our std::bind polyfill. Now that
we use lambdas, it is easy to use Nested and NestedOf, so we should do
so wherever it makes the code clearer.
2015-04-14 05:32:46 -10:00
Brian Smith
dc0d3cf78e
Bug 1154399 - Part 2: Simplify and un-inline OptionalVersion. r=keeler
...
Also fixes the wrong comment. The syntax for version in OCSP and X.509
certs is identical.
2015-04-14 05:32:29 -10:00
Brian Smith
10450b2670
Bug 1154399 - Part 1: De-templatize and un-inline IntegralValue. r=keeler
2015-04-14 05:06:41 -10:00
Mike Hommey
4cff7b2866
Bug 1153114 - Remove anonymous namespace around pkix gtests. r=bsmith
...
This avoids -Wunused-variable fatal warnings with GCC 5.0
2015-04-15 09:21:23 +09:00
Brian Smith
e3b9248715
Bug 1153738: Make ScopedPtr a minimal proper subset of std::unique_ptr, r=keeler
...
Remove all features of ScopedPtr that aren't in std::unique_ptr, and
remove all currently-unused features of ScopedPtr. In particular,
replace |operator=(T*)| with |reset(T* p = nullptr)| and make
|operator bool| explicit.
2015-04-13 00:28:11 -10:00
Brian Smith
3509081d96
Bug 1146057: Remove support for GCC 4.6, r=keeler
...
Since Gecko now requires GCC 4.7 or later, we no longer need to
work around the lack of support for "override" and "final" in
earlier versions of GCC.
2015-03-30 20:18:46 -10:00
Brian Smith
923d2ca048
Bug 1136278, Part 2: Refactor test SubjectPublicKeyInfo generation, r=keeler
2015-02-26 13:10:13 -08:00
Brian Smith
1717dc45d9
Bug 1136278, Part 1: Refactor algorithm identifiers in tests, r=keeler
...
This will make it easier to expand the tests to additional
signature algorithms and additional public key types.
2015-02-26 16:11:41 -08:00
David Keeler
ebeac632b8
bug 1143085 - allow subject alternative name extensions to be empty for compatibility r=briansmith a=kwierso
2015-03-16 14:00:33 -07:00
David Keeler
7654ba85e7
Bug 1136616 - Allow underscores in reference DNS-IDs in mozilla::pkix name matching. r=briansmith
2015-03-03 13:34:45 -08:00
Brian Smith
48b59204aa
Bug 1131767: Prune away paths using unacceptable algorithms earlier, r=keeler
2015-02-14 16:59:02 -08:00
Brian Smith
b20439c68e
Bug 1077864, Part 2: Override the trust level for OCSP response signer certs so that they are never considered trust anchors, r=keeler
2015-02-14 15:59:38 -08:00
Brian Smith
5d73953c07
Bug 1077864, Part 1: Check consistency of certificates' signature and signatureAlgorithm fields, r=keeler
2015-02-22 16:59:03 -08:00
Brian Smith
0fd7ea7c26
Bug 1135407: Factor out duplicate logic in tests, r=keeler
2015-02-21 14:12:38 -08:00
Ehsan Akhgari
d59e287524
Bug 1135745 - Disable the reserved-id-macro macro in security/pkix; r=briansmith
2015-02-23 13:40:09 -05:00
Brian Smith
729b7869c0
Bug 1133618 - Move test SHA1 function to pkixtestutil.cpp. r=mmc
2015-02-16 16:37:03 -08:00
Brian Smith
15a55b5a35
Bug 1130754 - Make PublicKeyAlgorithm an enum class. r=keeler
2015-02-14 13:25:09 -08:00
Cykesiopka
1d7d83f71b
Bug 1097622 - Return ERROR_INVALID_TIME when decoding invalid time values. r=dkeeler
2015-02-18 15:56:00 -05:00
Brian Smith
859c0d622a
Bug 1130754: Avoid recalculating tbsCertificate digest, r=keeler
2015-02-07 12:14:31 -08:00
Brian Smith
70541ae471
Bug 1122841, Part 2: Centralize checking of public key, r=keeler
2015-02-02 16:17:08 -08:00
Brian Smith
6f49fad120
Bug 1122841, Part 1: Add PositiveInteger parser, r=keeler
2015-02-06 18:21:20 -08:00
Brian Smith
21d66c0293
Bug 1128413, Part 4: Fix warnings in mozilla-config.h and gcc-stl-wrapper.template.h, r=glandium
2015-02-02 17:35:19 -08:00
Brian Smith
5c3f56a357
Bug 1128413, Part 3: Enable more compiler warnings, r=mmc
2015-02-07 14:38:40 -08:00
Brian Smith
1aa8a904ff
Bug 1128413, Part 2: Don't use double underscores any more
2015-01-31 19:51:46 -08:00
Brian Smith
0e83193293
Bug 1128413, Part 1: Fix switch-related warnings, r=mmc
2015-02-02 14:21:27 -08:00
Cykesiopka
6af3b3a232
Bug 968560 - Return distinct error codes for certificates that are not valid yet, in mozilla::pkix. r=keeler
2015-02-06 11:18:20 -08:00
Ehsan Akhgari
9f466f4b06
Bug 1126128 - Mark TestTrustDomain::VerifySignedData as override; r=bsmith
2015-01-27 08:33:24 -05:00
Ehsan Akhgari
6e4bdea85d
Backed out changeset 45921e3d9773 (bug 1117034) because of build bustage on a CLOSED TREE
2015-01-26 21:52:40 -05:00
Ehsan Akhgari
bd30de9162
Bug 1117034 - Mark some overridden functions in the tree as override
2015-01-26 21:14:12 -05:00
David Keeler
1dd73ac36f
bug 1125261 - mozilla::pkix: handle comparing single, relative labels with wildcards r=briansmith
...
e.g. handle comparing "localhost" with "*.example.com"
2015-01-23 15:56:53 -08:00
Daniel Holbert
3dbcd679e4
Bug 1125673: Mark method 'FindIssuer' as 'override' in pkixocsp_VerifyEncodedOCSPResponse.cpp, to fix clang warning. r=briansmith
2015-01-26 10:40:07 -08:00
Cykesiopka
0be7e63254
Bug 1077790 - Make mozilla::pkix::CheckPublicKeySize() accept specific elliptic curves only. r=briansmith
2015-01-21 17:20:16 -08:00