Commit Graph

347 Commits

Author SHA1 Message Date
Xidorn Quan
56cfa2743c Bug 1229587 part 1 - Disable C4464 warning newly added in VS2015u1. r=keeler 2015-12-03 09:29:42 +11:00
Mark Goodwin
66019acce1 Bug 901698 - Some tests for OCSP-must-staple; r=keeler 2015-11-13 16:49:09 +00:00
Mark Goodwin
63d61227ae Bug 901698 - Implement OCSP-must-staple; r=keeler 2015-11-13 16:49:08 +00:00
Richard Barnes
ef0d9ed24f Bug 942515 - Show Untrusted Connection Error for SHA-1-based SSL certificates with notBefore >= 2016-01-01 r=keeler 2015-09-11 14:52:30 -04:00
Jacek Caban
a1d8a2b9b2 Bug 1199624 - Don't use memset and memcmp in files that don't include cstring explicitly. r=briansmith 2015-09-09 14:16:59 +02:00
Nicholas Nethercote
69d088e45f Bug 1198334 (part 1) - Replace the opt-in FAIL_ON_WARNINGS with the opt-out ALLOW_COMPILER_WARNINGS. r=glandium.
The patch removes 455 occurrences of FAIL_ON_WARNINGS from moz.build files, and
adds 78 instances of ALLOW_COMPILER_WARNINGS. About half of those 78 are in
code we control and which should be removable with a little effort.
2015-08-27 20:44:53 -07:00
Ryan VanderMeulen
3325ea8059 Backed out changeset 982be1bbebdf (bug 1199624) for Windows bustage. 2015-08-30 17:09:09 -04:00
Jacek Caban
5a61810c25 Bug 1199624 - Don't use memset and memcmp in files that don't include cstring explicitly. r=briansmith 2015-08-29 07:59:00 -04:00
Mike Hommey
f041201fd5 Bug 1189891 - Avoid including <cstring> from pkix/Input.h. r=bsmith 2015-08-21 15:27:22 +09:00
Mike Hommey
6bd3004c10 Backout changesets af1b36497559 and 1d52ab626597 (bug 1189891) for pkix bustage 2015-08-21 15:05:38 +09:00
Mike Hommey
22a71eae08 Bug 1189891 - Avoid including <cstring> from pkix/Input.h. r=bsmith 2015-08-21 14:29:19 +09:00
Birunthan Mohanathas
47ed3a3675 Bug 1182996 - Fix and add missing namespace comments. rs=ehsan
The bulk of this commit was generated by running:

  run-clang-tidy.py \
    -checks='-*,llvm-namespace-comment' \
    -header-filter=^/.../mozilla-central/.* \
    -fix
2015-07-13 08:25:42 -07:00
Mark Goodwin
7064a50b2f Bug 1159155 - Add telemetry probe for SHA-1 usage (r=keeler) 2015-07-09 07:22:29 +01:00
Cykesiopka
f7f78003a7 Bug 1145679 - Reject EV status for end-entity EV certs with overly long validity periods. r=keeler 2015-06-29 22:19:00 +02:00
Tim Taubert
9df7e5e6d9 Bug 1060112 - Don't treat OCSP responses omitting the requested certificate status as "unknown certificate" responses blocking the connection r=keeler 2015-05-21 13:39:34 -04:00
David Keeler
6a5160aa2a bug 1141189 - implement skipping expensive revocation checks (OCSP fetching) for short-lived certificates r=rbarnes 2015-04-06 16:10:28 -07:00
David Keeler
aef2b30e4e bug 1150114 - allow PrintableString to match UTF8String in name constraints checking r=briansmith 2015-04-08 16:17:39 -07:00
Brian Smith
83c90debbf Bug 1154399 - Part 4: Simplify certificate parsing in OCSP responses. r=keeler 2015-04-14 05:33:03 -10:00
Brian Smith
0cc9d436df Bug 1154399 - Part 3: Simplify OptionalExtensions. r=keeler
We used to avoid using Nested and NestedOf because they were based on
bind and it was difficult to maintain our std::bind polyfill. Now that
we use lambdas, it is easy to use Nested and NestedOf, so we should do
so wherever it makes the code clearer.
2015-04-14 05:32:46 -10:00
Brian Smith
dc0d3cf78e Bug 1154399 - Part 2: Simplify and un-inline OptionalVersion. r=keeler
Also fixes the wrong comment. The syntax for version in OCSP and X.509
certs is identical.
2015-04-14 05:32:29 -10:00
Brian Smith
10450b2670 Bug 1154399 - Part 1: De-templatize and un-inline IntegralValue. r=keeler 2015-04-14 05:06:41 -10:00
Mike Hommey
4cff7b2866 Bug 1153114 - Remove anonymous namespace around pkix gtests. r=bsmith
This avoids -Wunused-variable fatal warnings with GCC 5.0
2015-04-15 09:21:23 +09:00
Brian Smith
e3b9248715 Bug 1153738: Make ScopedPtr a minimal proper subset of std::unique_ptr, r=keeler
Remove all features of ScopedPtr that aren't in std::unique_ptr, and
remove all currently-unused features of ScopedPtr. In particular,
replace |operator=(T*)| with |reset(T* p = nullptr)| and make
|operator bool| explicit.
2015-04-13 00:28:11 -10:00
Brian Smith
3509081d96 Bug 1146057: Remove support for GCC 4.6, r=keeler
Since Gecko now requires GCC 4.7 or later, we no longer need to
work around the lack of support for "override" and "final" in
earlier versions of GCC.
2015-03-30 20:18:46 -10:00
Brian Smith
923d2ca048 Bug 1136278, Part 2: Refactor test SubjectPublicKeyInfo generation, r=keeler 2015-02-26 13:10:13 -08:00
Brian Smith
1717dc45d9 Bug 1136278, Part 1: Refactor algorithm identifiers in tests, r=keeler
This will make it easier to expand the tests to additional
signature algorithms and additional public key types.
2015-02-26 16:11:41 -08:00
David Keeler
ebeac632b8 bug 1143085 - allow subject alternative name extensions to be empty for compatibility r=briansmith a=kwierso 2015-03-16 14:00:33 -07:00
David Keeler
7654ba85e7 Bug 1136616 - Allow underscores in reference DNS-IDs in mozilla::pkix name matching. r=briansmith 2015-03-03 13:34:45 -08:00
Brian Smith
48b59204aa Bug 1131767: Prune away paths using unacceptable algorithms earlier, r=keeler 2015-02-14 16:59:02 -08:00
Brian Smith
b20439c68e Bug 1077864, Part 2: Override the trust level for OCSP response signer certs so that they are never considered trust anchors, r=keeler 2015-02-14 15:59:38 -08:00
Brian Smith
5d73953c07 Bug 1077864, Part 1: Check consistency of certificates' signature and signatureAlgorithm fields, r=keeler 2015-02-22 16:59:03 -08:00
Brian Smith
0fd7ea7c26 Bug 1135407: Factor out duplicate logic in tests, r=keeler 2015-02-21 14:12:38 -08:00
Ehsan Akhgari
d59e287524 Bug 1135745 - Disable the reserved-id-macro macro in security/pkix; r=briansmith 2015-02-23 13:40:09 -05:00
Brian Smith
729b7869c0 Bug 1133618 - Move test SHA1 function to pkixtestutil.cpp. r=mmc 2015-02-16 16:37:03 -08:00
Brian Smith
15a55b5a35 Bug 1130754 - Make PublicKeyAlgorithm an enum class. r=keeler 2015-02-14 13:25:09 -08:00
Cykesiopka
1d7d83f71b Bug 1097622 - Return ERROR_INVALID_TIME when decoding invalid time values. r=dkeeler 2015-02-18 15:56:00 -05:00
Brian Smith
859c0d622a Bug 1130754: Avoid recalculating tbsCertificate digest, r=keeler 2015-02-07 12:14:31 -08:00
Brian Smith
70541ae471 Bug 1122841, Part 2: Centralize checking of public key, r=keeler 2015-02-02 16:17:08 -08:00
Brian Smith
6f49fad120 Bug 1122841, Part 1: Add PositiveInteger parser, r=keeler 2015-02-06 18:21:20 -08:00
Brian Smith
21d66c0293 Bug 1128413, Part 4: Fix warnings in mozilla-config.h and gcc-stl-wrapper.template.h, r=glandium 2015-02-02 17:35:19 -08:00
Brian Smith
5c3f56a357 Bug 1128413, Part 3: Enable more compiler warnings, r=mmc 2015-02-07 14:38:40 -08:00
Brian Smith
1aa8a904ff Bug 1128413, Part 2: Don't use double underscores any more 2015-01-31 19:51:46 -08:00
Brian Smith
0e83193293 Bug 1128413, Part 1: Fix switch-related warnings, r=mmc 2015-02-02 14:21:27 -08:00
Cykesiopka
6af3b3a232 Bug 968560 - Return distinct error codes for certificates that are not valid yet, in mozilla::pkix. r=keeler 2015-02-06 11:18:20 -08:00
Ehsan Akhgari
9f466f4b06 Bug 1126128 - Mark TestTrustDomain::VerifySignedData as override; r=bsmith 2015-01-27 08:33:24 -05:00
Ehsan Akhgari
6e4bdea85d Backed out changeset 45921e3d9773 (bug 1117034) because of build bustage on a CLOSED TREE 2015-01-26 21:52:40 -05:00
Ehsan Akhgari
bd30de9162 Bug 1117034 - Mark some overridden functions in the tree as override 2015-01-26 21:14:12 -05:00
David Keeler
1dd73ac36f bug 1125261 - mozilla::pkix: handle comparing single, relative labels with wildcards r=briansmith
e.g. handle comparing "localhost" with "*.example.com"
2015-01-23 15:56:53 -08:00
Daniel Holbert
3dbcd679e4 Bug 1125673: Mark method 'FindIssuer' as 'override' in pkixocsp_VerifyEncodedOCSPResponse.cpp, to fix clang warning. r=briansmith 2015-01-26 10:40:07 -08:00
Cykesiopka
0be7e63254 Bug 1077790 - Make mozilla::pkix::CheckPublicKeySize() accept specific elliptic curves only. r=briansmith 2015-01-21 17:20:16 -08:00