Gregory Szorc
158ed8b3ec
Bug 774572 - Part 2: Define JAR_MANIFESTS in moz.build files; r=glandium
...
Every directory with a jar.mn now has JAR_MANIFESTS defined in its
moz.build file.
We also removed the may_skip special consideration of jar.mn files
because this information is now available during tier traversal by the
reader courtesy of the variables being present in moz.build files.
--HG--
extra : rebase_source : 21049b15e6bd9cf65b0805ccaccc4ba5aae93c98
extra : amend_source : 0b1ea866d725beef92d37c6f6d475369ac002e19
2013-12-10 16:18:11 +09:00
David Keeler
018e03fe74
bug 887321 - initial OCSP stapling telemetry r=briansmith
2013-12-16 09:32:16 -08:00
Trevor Saunders
907dfc4528
bug 949821 - use MOZ_UTF16 more and NS_LITERAL_STRING less r=froydnj
2013-12-12 20:50:01 -05:00
Raymond Etornam Agbeame
b6a36ce552
Bug 945857: Remove the security.fresh_revocation_info.require preference, r=briansmith
2013-12-16 00:09:21 -08:00
Phil Ringnalda
3a1d0374aa
Merge m-i to m-c
2013-12-14 18:20:38 -08:00
ffxbld
f00e1e651f
No bug, Automated HSTS preload list update from host bld-linux64-ix-037 - a=hsts-update
2013-12-14 03:18:03 -08:00
David Keeler
183762aa4e
bug 950253 - fix typo in getHSTSPreloadList.js r=briansmith DONTBUILD because NPOTB
2013-12-13 16:06:54 -08:00
Bobby Holley
a7395d2ec6
Bug 937317 - Replace all instance of null cx pushing with AutoSystemCaller. r=bz
...
This is an easy bonus chunk of the work to phase out cx pushing in the browser.
2013-12-11 17:51:58 -08:00
Camilo Viecco
e92b932f63
Bug 938046 - Part 4. Tests for consistency of getchain and getissuer. r=dkeeler
2013-11-21 13:50:51 -08:00
Camilo Viecco
1ee1446f11
Bug 938046 - Part 3. Iterate only through valid users on getchain r=dkeeler
2013-12-11 13:04:07 -08:00
Camilo Viecco
0158164ec2
Bug 938046 - Part 2. Get issuer uses getchain to comput issuer. r=dkeeler
2013-11-21 13:50:49 -08:00
Camilo Viecco
bdf275bc24
Bug 938046 - Part 1. Iterate through variable not over const. r=dkeeler
2013-11-21 13:45:20 -08:00
Cykesiopka
a856c7f1a1
Bug 910986 - Fix cert trust editing in People tab of Cert Manager. r=dkeeler
2013-12-10 10:36:47 -05:00
Cykesiopka
d659aa3ac8
Bug 539710 - Use char16_t ',' instead of NS_LITERAL_STRING in nsNSSCertificate.cpp. r=dkeeler
2013-12-10 10:36:31 -05:00
Ryan VanderMeulen
ca386608b9
Merge b2g-inbound to m-c.
2013-12-09 17:26:11 -05:00
Camilo Viecco
b10aaf2d3e
Bug 936808 - Serialize calls to PK11 routines in SSLServerCertVerification. r=briansmith
2013-12-09 09:12:47 -08:00
Birunthan Mohanathas
759ab69b0a
Bug 713082 - Part 2: Rename Util.h to ArrayUtils.h. r=Waldo
...
--HG--
rename : mfbt/Util.h => mfbt/ArrayUtils.h
2013-12-08 21:52:54 -05:00
Brian Smith
d64b1c97c0
Bug 942152, r=dkeeler, r=honzab
...
--HG--
extra : rebase_source : 7f0bab4efa26e9c185b29fdb14d846035147fd2f
2013-12-05 20:33:49 -08:00
Phil Ringnalda
e2e1627d17
Back out 35371620801a:bf2019278b77 (bug 937317) for gaia-ui-test bustage and frequent timeouts in its own test
2013-12-07 11:08:56 -08:00
ffxbld
3c0a9dc3b1
No bug, Automated HSTS preload list update from host bld-linux64-ec2-351 - a=hsts-update
2013-12-07 03:22:31 -08:00
Camilo Viecco
df14c5d1d1
Bug 945349 - CertVerifier should check early for bad usages. r=briansmith
2013-12-06 13:42:44 -08:00
Vicamo Yang
02b63a0803
Bug 944625 - B2G Emulator-x86: fix undeclared __NR_socketpair, __NR_sendmsg. r=kang,jld
2013-12-09 21:02:54 +08:00
Bobby Holley
4d56f0a83d
Bug 937317 - Replace all instance of null cx pushing with AutoSystemCaller. r=bz
...
This is an easy bonus chunk of the work to phase out cx pushing in the browser.
2013-12-06 12:01:42 -08:00
Raymond Etornam Agbeame
d183132bf1
Bug 945855: Remove the security.first_network_revocation_method pref, r=briansmith
...
--HG--
extra : rebase_source : e416ba1e78f95234d403c078ad81b5fddcce947a
extra : amend_source : 7adbe291df748b5a6d1f1122573e862bdc5f5f11
2013-12-06 00:55:17 -08:00
Cykesiopka
437fb46beb
Bug 945851: Remove pref for showing dialog box when NSS initialization fails, r=briansmith
...
--HG--
extra : rebase_source : 1142d1775b8846e8bd46109affc62df262e598d4
2013-12-06 00:12:08 -08:00
Carsten "Tomcat" Book
f0d2b953c5
Backed out changeset 374e44c835a8 (bug 937317) WinXP Build Bustage on a CLOSED TREE
2013-12-06 08:41:42 +01:00
Chris Peterson
e77c67135d
Bug 946116 - Remove unused isResumedSession variable from nsNSSCallbacks.cpp. r=bsmith
2013-12-03 21:07:29 -08:00
Bobby Holley
c8308277c1
Bug 937317 - Replace all instance of null cx pushing with AutoSystemCaller. r=bz
...
This is an easy bonus chunk of the work to phase out cx pushing in the browser.
2013-12-05 21:34:17 -08:00
Camilo Viecco
887aa6047d
Bug 585122 - In PSM provide EV only with OCSP revocation (Part 2: tests). r=briansmith.
2013-12-02 11:12:21 -08:00
Camilo Viecco
a1040bf48f
Bug 585122 - Part 1. EV do not request CRL. r=briansmith.
2013-12-02 11:08:06 -08:00
Brian Smith
218399d1f3
Bug 898431: Update to NSS 3.15.4 beta 8 (NSS_3_15_4_BETA8), r=me
2013-12-05 07:27:11 -08:00
Brian Smith
819884c576
Bug 898431: Update to NSS 3.15.4 beta 7 (NSS_3_15_4_BETA7), r=me
...
--HG--
extra : rebase_source : 51f5e01db5d8dec46f341e217fa2ba97382c723c
extra : amend_source : 04d8a9e4a861228c217b9d766cd8781d49ed496f
2013-12-04 20:51:58 -08:00
Brian Smith
8dcf3ae739
Bug 898431: Update NSS to NSS 3.15.4 beta 6 (NSS_3_15_4_BETA6), r=me
...
--HG--
extra : rebase_source : 9f497ceb1c74fbf15938171229f5a7339e277333
2013-12-03 20:04:07 -08:00
Steffen Wilberg
7542ae498f
Bug 945871: Remove the security.ssl3.ecdh_* preferences, r=briansmith
...
--HG--
extra : rebase_source : 39f680c48ae198263af61b8c2cc07bdb7dc829a7
2013-12-03 18:56:33 -08:00
Jed Davis
d1ffa9058b
Bug 943774 - Allow sigaction when sandboxed, for the crash reporter. r=kang
2013-12-03 18:45:17 -05:00
Ryan VanderMeulen
375ca823e3
Merge m-c to inbound.
2013-12-03 17:42:20 -05:00
Mike Hommey
2827b48400
Bug 937005 - Make the original fix actually do something. r=ted
2013-12-04 07:15:40 +09:00
Cykesiopka
f5adbcaf50
Bug 915937 - Cleanup #defines in nsNSSComponent.cpp and change them to static consts. r=bsmith
2013-12-03 15:23:27 -05:00
Nathan Froyd
2b73940866
Bug 942109 - constify PLDHashTableOps in security/manager/; r=briansmith
2013-11-20 13:42:08 -05:00
Camilo Viecco
f577979fe4
Bug 942918 - remove ev tests that use crl for revocation check. r=dkeeler
2013-12-02 15:20:24 -08:00
Mike Hommey
bf60896454
Bug 943728 - Replace double quotes with single quotes in Makefiles (or remove them when it makes sense). r=mshal
2013-12-03 06:34:21 +09:00
Brian Smith
7f355c58e6
Bug 945195: Do insecure fallback from TLS 1.0 to SSL 3.0 when we receive a FIN during the initial handshake, r=honzab
...
--HG--
extra : rebase_source : d10091aea21f7d552f682d54383bf43ece7633ed
2013-12-02 10:48:06 -08:00
Ajitesh Gupta
6b707d4378
Bug 917047: Remove the security.enable_md5_signatures pref, r=briansmith
...
--HG--
extra : rebase_source : ae721bc7f91b399e61c2efb869e15ab902c810e0
2013-11-19 16:05:26 -08:00
ffxbld
a3292f8191
No bug, Automated HSTS preload list update from host bld-linux64-ec2-170 - a=hsts-update
2013-11-30 03:19:19 -08:00
Ms2ger
f56294acdb
Bug 937258 - Part a: Remove empty makefiles; r=gps
2013-11-28 15:25:40 +01:00
Mike Hommey
9245936f8b
Bug 874266 - Move all DEFINES that can be moved to moz.build. r=mshal
2013-11-27 22:55:07 +09:00
Mike Hommey
2b828323f2
Backout changeset 3fd4b546eed4 (bug 874266) and changeset a35d2e3a872f (bug 942043) for ASAN build bustage and Windows test bustage
...
--HG--
extra : amend_source : f20d09aeff1c8b5cbd0f1d24c7ce04e86f3aed1d
2013-11-28 14:24:05 +09:00
Mike Hommey
d210f8ff00
Bug 874266 - Move all DEFINES that can be moved to moz.build. r=mshal
2013-11-28 13:08:16 +09:00
Camilo Viecco
a930076740
Bug 917380 - part2 - test ensure disabled ev root certs remain untrusted. r=briansmith
2013-10-29 14:56:34 -07:00
Camilo Viecco
01b5a10348
Bug 917380 - Part 1 - Add filters for EV root list. r=briansmith
2013-10-21 14:27:46 -07:00
Camilo Viecco
4867756afe
Bug 927016 - Create EV testsuite in xpcshell. r=keeler
2013-11-21 13:40:31 -08:00
Brian Smith
4a26265906
Bug 898431: Update NSS to NSS 3.15.4 beta 5 (NSS_3_15_4_BETA5), r=me
2013-11-26 20:21:14 -08:00
David Keeler
4ca8cde553
bug 929617 - disregard expired stapled OCSP responses, acquire fresh ones r=briansmith
2013-11-25 15:40:11 -08:00
David Keeler
199e914302
bug 943115 - return early in CreateCertErrorRunnable for non-overridable errors r=briansmith
2013-11-26 13:49:47 -08:00
Patrick McManus
1cf2a2c447
Bug 942729, Part 2: Remove unused expected symmetric cipher mechanism, r=briansmith
...
--HG--
extra : rebase_source : 9630808b663d6a670c2e45d242177a640817f2ee
2013-11-25 18:12:40 -05:00
Brian Smith
1af2ea48ab
Bug 942729, Part 1: Re-enable TLS False Start, r=mcmanus
...
--HG--
extra : rebase_source : 9908b1cbc3a30e9868739a10a705de8dbf30c5e1
2013-11-20 13:49:33 -08:00
Ehsan Akhgari
d6792974b0
Bug 942033 - Build security/manager in unified mode; r=bsmith
...
--HG--
extra : rebase_source : d48b78001772e0421a6dfc2ecd204434c33cd2d4
2013-11-26 13:18:21 -05:00
Mike Hommey
62cde4eed8
Bug 940407 - Kill GTEST_SOURCES. r=gps
2013-11-26 11:48:58 +09:00
Brian Smith
039c1380a4
Bug 898431: Update NSS to NSS 3.15.4 beta 4 (NSS_3_15_4_BETA4), r=me
...
--HG--
extra : rebase_source : 72f78bad585cdb1e09b5ebd1f7d0ba0e713de677
2013-11-25 17:08:17 -08:00
Brian Smith
d0a8f7663c
Bug 942728 - Fix telemetry for cipher suites and crypto algorithms andkey sizes, r=keeler, a=lsblakk
...
--HG--
extra : rebase_source : bd0bc0d67fe811612df4210b2b5e19f1d5eca5a0
2013-11-21 13:35:23 -08:00
Phil Ringnalda
9710fc9cf4
Merge m-i to m-c
2013-11-23 08:18:35 -08:00
ffxbld
38118fee51
No bug, Automated HSTS preload list update from host bld-linux64-ix-034 - a=hsts-update
2013-11-23 03:17:46 -08:00
David Keeler
c4a1548118
bug 909044 - make generate_certs.sh work on windows r=briansmith DONTBUILD NPOTB
2013-11-22 11:03:34 -08:00
Camilo Viecco
1779a62ab0
Bug 938805 - Create standalone oscpResponseGenerator for testing. r=keeler
2013-10-29 14:02:35 -07:00
Richard Newman
09fc24021c
Bug 935831 - Back out Bug 927230 for Android 2.3 startup crash, r=briansmith
...
--HG--
extra : rebase_source : 5b8ff8da93a882d6c8303c26d234ad63b748389c
2013-11-20 17:05:55 -08:00
Brian Smith
3621df35cd
Bug 898431: Clean up security/patches to remove references to the private false start patch that is no longer applied, r=me, a=NPOTB
...
--HG--
extra : rebase_source : 94ee34c96357666e6c6d266fe9029af1d977a940
2013-11-20 17:05:24 -08:00
Christoph Kerschbaumer
ad08ffe884
Bug 935111 - Enable seccomp-bpf for Linux. r=jld
2013-11-19 16:09:18 -08:00
Patrick McManus
a64352d983
bug 802649 network priority for ocsp r=bsmith r=honzab
...
--HG--
extra : rebase_source : 17554ab7627e1d42a4736078254f94f36cf9c48b
2013-11-20 09:57:56 -05:00
Camilo Viecco
922b598103
Bug 912155 - Adding new interface in nssCertifcateDB for testing. r=bsmith
2013-11-11 16:37:06 -08:00
Mike Hommey
a65383e1e9
Bug 939632 - Remove LIBRARY_NAME for leaf libraries. r=gps
...
Landing on a CLOSED TREE.
2013-11-19 11:50:54 +09:00
Mike Hommey
8ceb917350
Bug 939074 - Remove most LIBXUL_LIBRARY. rs=gps
2013-11-19 11:48:10 +09:00
Mike Hommey
b95448fc0b
Bug 914245 - Move FORCE_SHARED_LIB to moz.build. r=mshal
2013-11-19 11:47:45 +09:00
Mike Hommey
9fe772e7fd
Bug 939044 - Rename remaining MODULE definitions to XPIDL_MODULE. r=mshal
2013-11-19 11:47:43 +09:00
Mike Hommey
bb6779efe3
Bug 939044 - Remove most definitions of MODULE. r=mshal
2013-11-19 11:47:39 +09:00
Mike Hommey
d7b6f95761
Bug 935881 - Use FINAL_LIBRARY for all (fake) libraries that end up linked in a single other library. r=gps
2013-11-19 11:47:14 +09:00
Camilo Viecco
ac92dc4190
Bug 935769: Fix shutdown locks for nssCerList and nssCertListEnumerator. r=bsmith
2013-11-11 15:16:45 -08:00
Landry Breuil
c9b75df3f7
Bug 939498 - Properly include <algorithm> for std::max. r=bsmith
2013-11-18 11:04:13 +01:00
Brian Smith
db5e56dfcb
Bug 901718, Part 2: fix comment, r=me
2013-11-17 14:00:00 -08:00
Brian Smith
28c2d9c5d5
Bug 934663 followup: fix unused variable warning, r=me
...
--HG--
extra : rebase_source : e343b569df4d313f0f5f65fc82de99b9ea5b2ba9
2013-11-17 13:53:18 -08:00
Brian Smith
756bf5d8e7
Bug 901718: Remove TLS intolerance fallback from TLS 1.0 to SSL 3.0 for connection resets, r=honzab
...
--HG--
extra : rebase_source : 304e73126b66ae2e1a9fa6ae4c0cc3fa803aaac0
2013-11-17 13:51:37 -08:00
Brian Smith
00fb081b00
Bug 898431: Update to NSS 3.15.4 beta 3 (NSS_3_15_4_BETA3), r=me
...
--HG--
extra : rebase_source : a6dd976f23ebdd33dcf6fd26e4752ddb2bbc5363
2013-11-17 13:50:25 -08:00
Brian Smith
f9eb567f1a
Bug 707275, Part 2: Add telemetry for cipher suites and key sizes, r=keeler
...
--HG--
extra : rebase_source : bd5f91877de357b415b6f143eccc87434d72db2b
2013-11-17 13:47:30 -08:00
Brian Smith
d5514d5bd0
Bug 707275, Part 1: Add telemetry for TLS intolerance, r=keeler
...
--HG--
extra : rebase_source : 8331f1486ad764838812ea500742a97fbc025858
2013-11-17 13:47:23 -08:00
Tom Schuster
f311064c6e
Bug 933834 - Rename and handlify JS_ValueToString. r=terrence,bz
2013-11-16 13:31:36 +01:00
Ms2ger
6b38d3ca3d
Backout changesets ded0d64f6786:03f041d03f24 and 30cbd1abde1a (bug 935696, bug 933834 and bug 939194) for build bustage.
2013-11-17 16:39:25 +01:00
Tom Schuster
dd485f9336
Bug 933834 - Rename and handlify JS_ValueToString. r=terrence,bz
2013-11-16 13:31:36 +01:00
Mike Hommey
213db4cc18
Bug 937005 - Install folded import library in the SDK. r=bsmedberg
2013-11-16 13:39:01 +09:00
Chris Peterson
e98e016e4f
Bug 937459 - Remove unused private fields from nsNSSSocketInfo class. r=briansmith
2013-11-11 14:06:29 -08:00
Garrett Robinson
2046aafb3c
Bug 932116 - Allow copying certificate viewer text. r=dkeeler, r=bsmedberg
2013-11-13 17:39:48 -08:00
Brian Smith
f89cf3237b
Bug 932176: Add preference to control whether OCSP GET is used, off by default, r=cviecco
...
--HG--
extra : rebase_source : 4452d8959f22152512ed428184726c9834f6e4c3
2013-11-12 18:28:20 -08:00
Brian Smith
1ffb658968
Bug 898431: Update NSS to NSS 3.15.4 beta 2 (NSS_3_15_4_BETA2) again, r=me
...
--HG--
extra : rebase_source : 52c384c2f55da38d9576414a3c6e07427abd7000
2013-11-12 18:26:49 -08:00
Brian Smith
25f9e0dd0e
Bug 937721, Part 3: Back out cset 61fb80e560de (NSS_3_15_4_BETA1, bug 898431), r=kaie
2013-11-12 11:45:48 -08:00
Brian Smith
ef07cd2e0d
Bug 937721, Part 2: Back out cset 61fb80e560de (NSS_3_15_4_BETA2, bug 898431), r=kaie
...
--HG--
extra : rebase_source : 9b588bc5ba6e6a8ddd630e22ddf27667d6951edd
2013-11-12 11:27:59 -08:00
Brian Smith
30b1565bae
Bug 937721, Part 1: Back out cset 8dbd3f432835 (bug 932176), r=kaie
...
--HG--
extra : rebase_source : 80f4b7ee7e4f77ef92cb42e6163f95074d68d306
2013-11-12 11:25:55 -08:00
David Keeler
351ae40bdc
bug 932519 - (3/3) add an optional additional cert name as a parameter to GetOCSPResponseForType r=cviecco r=briansmith
2013-11-11 13:36:29 -08:00
David Keeler
a2409d20fd
bug 932519 - (2/3) rename OCSP response generation test code to remove "stapling" r=cviecco r=briansmith
2013-11-11 13:42:35 -08:00
David Keeler
05787ee46f
bug 932519 - (1/3) move common OCSP response generation test code for refactoring r=cviecco r=briansmith
...
--HG--
rename : security/manager/ssl/tests/unit/tlsserver/cmd/OCSPStaplingServer.cpp => security/manager/ssl/tests/unit/tlsserver/lib/OCSPCommon.cpp
rename : security/manager/ssl/tests/unit/tlsserver/cmd/OCSPStaplingServer.cpp => security/manager/ssl/tests/unit/tlsserver/lib/OCSPCommon.h
2013-11-11 13:43:04 -08:00
David Keeler
af97bf4e6f
bug 935618 - (2/2) generateCRMFRequest: test using a bad popcert parameter r=cviecco
2013-11-07 13:33:58 -08:00
David Keeler
abf7bbfe3e
bug 935618 - (1/2) check for an ec certificate in nsConvertToActualKeyGenParams r=cviecco
2013-11-07 13:34:59 -08:00
Jacob Acord
cd8b6c36c4
Bug 934673 - Fix nsRandomGenerator::GenerateRandomBytes can leak r=keeler
2013-11-11 14:38:37 -08:00