Brian Smith
|
a33f724e49
|
Bug 1019814: Remove CERTCertificate dependency from TrustDomain::GetCertTrust, r=keeler
--HG--
extra : rebase_source : 9abf0522f02d00ac2f63f2327ddbe8d119ffc64f
|
2014-06-03 10:47:25 -07:00 |
|
Brian Smith
|
d2755d917c
|
Bug 1018633: Simplify the max cert chain length check code in mozilla::pkix and make it more efficient, r=cviecco
--HG--
extra : rebase_source : 7fa4cc6c1b46357abed0c57c6e24c622049c5acb
|
2014-05-31 16:32:58 -07:00 |
|
Brian Smith
|
92e40f8a7d
|
Bug 1001188: Set the error code when the max cert chain length limit is exceeded, r=cviecco
--HG--
extra : rebase_source : ce9e1faa083f5c679e20a2b6d9e8d482462e75b0
|
2014-05-31 16:55:54 -07:00 |
|
Brian Smith
|
d0f950f5b2
|
Bug 1018064: Replace mozilla::pkix::der::Input::Match with mozilla::pkix::der::Input::MatchRest, r=mmc
--HG--
extra : rebase_source : 5c5b14cf23b1e40854d241cbc482de40b01ac494
|
2014-05-29 22:09:45 -07:00 |
|
Brian Smith
|
058c81082c
|
Bug 1018061: Have mozilla::pkix::der::Input::Read use EnsureLength instead of its own checks, r=mmc
--HG--
extra : rebase_source : f46d6b9bdcd7d7a272fb39f22312a89d2695db56
|
2014-05-29 23:36:30 -07:00 |
|
Camilo Viecco
|
553254501f
|
Bug 991815 - Part 1/2 - Allow intermediate OCSP responses up to 1 year old. r=keeler
--HG--
extra : rebase_source : 28d5336da1dc44932b92ce2c59fca5fcb2b8a3d8
|
2014-05-30 16:12:36 -07:00 |
|
Brian Smith
|
03ace1f91a
|
Bug 1018033: Prevent buffer read overflow due to integer overflow in mozilla::pkix::der::Input::EnsureLength, r=keeler
--HG--
extra : rebase_source : e4e88d61e448fa475a106a06b9f32181906fba0f
|
2014-05-29 23:37:40 -07:00 |
|
David Keeler
|
1718a0078a
|
bug 1002814 - OCSP requests: long serial check should be on cert, not issuerCert r=briansmith
|
2014-05-14 10:05:32 -07:00 |
|
Brian Smith
|
726599adbd
|
Bug 1006958: Use mozilla::pkix::der to parse certificate policies instead of NSS, r=keeler
--HG--
extra : rebase_source : fde88efebc1025bc4f825aa38df809d04b1b250a
|
2014-05-15 18:59:52 -07:00 |
|
Brian Smith
|
4aaebcf1b7
|
Bug 1010581: Document Expect/Match/Skip terminology in mozilla::pkix::der and make that code more consistent, r=keeler
--HG--
extra : rebase_source : 12aa2e1e9eed4f32a75732a65cbfaba9789d5d39
|
2014-05-14 19:30:09 -07:00 |
|
Brian Smith
|
ac79ecb683
|
Bug 1006041: Use mozilla::pkix::der for decoding the extended key usage extension, r=keeler
--HG--
extra : rebase_source : b4b62f117d653784eb6ad058554faf520a1bd90b
|
2014-05-14 01:02:34 -07:00 |
|
Brian Smith
|
f9a6cb7aca
|
Bug 989564, Part 2: Remove CERTCertificate dependency from CheckBasicConstraints, r=keeler
--HG--
extra : rebase_source : c0ce62f44109cbcdf65da770a1154814733a6b49
|
2014-04-25 20:27:27 -07:00 |
|
Brian Smith
|
07edc768dc
|
Bug 989564, Part 1: Decode basic constraints extension using mozilla::pkix::der, r=keeler
--HG--
extra : rebase_source : 89560218a69596868cb8a93c69ee72656b0abf77
|
2014-05-05 09:55:57 -07:00 |
|
Gervase Markham
|
d2053b443f
|
Bug 1007195 - Change licensing on mozilla::pkix to dual Apache 2/MPL 2. r=briansmith.
|
2014-05-14 14:37:25 +01:00 |
|
Brian Smith
|
3718837588
|
Bug 1005309, Part 2: Enable extended compiler warnings (-W4 -Wall) in mozilla::pkix, r=mmc
--HG--
extra : rebase_source : 033574a0b26582753baec003becfaf15bbd85003
extra : histedit_source : 2d52c47f92b8f694203c2eb580b37be78ccf2f9c
|
2014-05-03 17:50:26 -07:00 |
|
Brian Smith
|
00e0d8964b
|
Bug 1005309, Part 1: Improve type conversion and error checking for hashing done in mozilla::pkix's pkixocsp.cpp. r=mmc
--HG--
extra : rebase_source : 79c248ebc45d722249ae7adbbd2527dc9985f6f0
extra : histedit_source : 8ea66942cec4252d9d7e625da22b5ad9964485a1
|
2014-05-02 11:53:06 -07:00 |
|
Brian Smith
|
ee7f4a5d76
|
Bug 1005256: Improve parameter validation in mozilla::pkix::der::Input::GetSECItem, r=mmc
--HG--
extra : rebase_source : 93b65e103c86747ddaf463e639aacffdf7ccb08f
extra : histedit_source : 10ef0ab13fb9de710ea3c589600db4632f9cf4a0
|
2014-05-02 11:52:10 -07:00 |
|
Brian Smith
|
d9ebffb937
|
Bug 1005208: Rename issuerKeyHash to keyHash in mozilla::pkix's pkixocsp.cpp, r=mmc
--HG--
extra : rebase_source : ede4ed17cb56e3e52325ecadc2c5ded33c4a6013
extra : histedit_source : b727000e81bbc8afa6b9f8188b97065f59da45ad
|
2014-05-02 10:40:03 -07:00 |
|
Brian Smith
|
92ef8d4244
|
Bug 1003290: Fix OID parser template type, r=keeler
--HG--
extra : rebase_source : c33e450b84234ae7471118c2f8749593a59d9298
|
2014-04-25 16:31:30 -07:00 |
|
Brian Smith
|
5f1d6946ed
|
Bug 1002933: Use Strongly-typed enums more often in mozilla::pkix, r=mmc
--HG--
extra : rebase_source : 3f67f48d1f4150df0830f89e6c07bbbf3a8fc7e8
|
2014-04-25 16:29:26 -07:00 |
|
Brian Smith
|
2ca0ebab0b
|
Bug 1002929: Avoid implicit conversion of Result to boolean in mozilla::der::GeneralizedTime, r=keeler
--HG--
extra : rebase_source : 8966d41f1837611b83ac84b347aeddfade9bc949
|
2014-04-24 16:08:30 -07:00 |
|
Camilo Viecco
|
b3ac77c27f
|
Bug 744204 - Allow Certificate key pinning Part 2 - Certverifier Interface. r=keeler
--HG--
extra : rebase_source : 2f9748ba0b241c697e22b7ff72f2f5a0fad4a2ca
|
2014-02-05 14:49:10 -08:00 |
|
Brian Smith
|
c402b1e960
|
Bug 1000544: Use "Fail(x, y)" instead of "PR_SetError(y, 0); return x;" more consistently, r=mmc
--HG--
extra : rebase_source : 96addac738b8ffe39c7a92d546388d5f13fc2340
|
2014-04-23 14:13:32 -07:00 |
|
Brian Smith
|
5f867b5e5d
|
Bug 1000482: Remove unused stapledOCSPResponse parmaeter from BuildForwardInner, r=mmc, r=keeler
--HG--
extra : rebase_source : b5d67d3488aa3df5690a7dd2b76495ac4986a723
|
2014-04-23 13:42:38 -07:00 |
|
Brian Smith
|
5939fb33ef
|
Bug 1000483: Remove unused isTrustAnchor parameter from CheckKeyUsage, r=cviecco
--HG--
extra : rebase_source : 96e7b76362d6219193c814d35c332aae2ed5b48f
|
2014-04-23 13:38:19 -07:00 |
|
Stefan Arentz
|
c929461f38
|
Bug 968490: Add mozilla::pkix::der unit tests (r=cviecco)
|
2014-03-26 16:00:03 -07:00 |
|
David Keeler
|
284f933831
|
bug 991898 - mozilla::pkix: temporarily allow empty Extensions in OCSP responses r=briansmith
|
2014-04-17 16:01:18 -07:00 |
|
David Keeler
|
63e2eca97a
|
bug 997843 - mozilla::pkix::der::Input::Expect should take a uint16_t as its length argument r=briansmith
|
2014-04-17 09:50:06 -07:00 |
|
David Keeler
|
019398a53c
|
bug 982774 - der::ExpectTagAndGetLength: check that input has enough capacity for the length described r=briansmith
|
2014-04-16 13:30:09 -07:00 |
|
David Keeler
|
d4dd4d5972
|
bug 991209 - mozilla::pkix: allow non-end-entity certs to have OCSP signing EKU r=briansmith
|
2014-04-10 10:15:02 -07:00 |
|
David Keeler
|
e1f4b33afd
|
bug 990603 - mozilla::pkix: defer reporting end-entity cert errors until after path building r=briansmith
|
2014-04-08 09:49:36 -07:00 |
|
David Keeler
|
86d825d798
|
bug 989516 - mozilla::pkix: temporarily allow improper basicConstraint:cA encodings r=cviecco
|
2014-03-31 11:06:43 -07:00 |
|
David Keeler
|
3b98632b58
|
bug 987295 - mozilla::pkix: fix decoding OCSP response extensions r=cviecco
|
2014-03-31 13:24:16 -07:00 |
|
Camilo Viecco
|
0b00313052
|
Bug 986156 - Allow anypolicyoid and reject on inhibitAnypolicy (mozilla::pkix). r=bsmith
--HG--
extra : rebase_source : dd61d4bfa64ed65582f3a1b4662f16740983a3ce
|
2014-03-28 10:00:29 -07:00 |
|
Camilo Viecco
|
5ecf56aaca
|
Bug 982292 - Allow nsSGC to 'nest' TLS Web Server Authentication EKU in moz::pkix. r=bsmith
|
2014-03-13 11:06:44 -07:00 |
|
Brian Smith
|
acad56c360
|
Bug 982778: Initialize parameters of output value of der::AlgorithmIdentifier, r=keeler
|
2014-03-13 21:26:03 -07:00 |
|
Camilo Viecco
|
9f33e0e4e5
|
Bug 969188 - Part 2/3 - mozilla::pkix only decode v3 extensions in v3 certificates. r=briansmith
--HG--
extra : rebase_source : 86e58ccf8538d0f40d3b24b89a92dceac095cb21
|
2014-03-06 10:04:04 -08:00 |
|
Camilo Viecco
|
2d58a01154
|
Bug 969188 - Part 1/3 - Fix mozilla::pkix handling of trusted v1 certificates. r=briansmith
--HG--
extra : rebase_source : 242b4849a7820d23518936a8c86ddcb7d9684394
|
2014-03-06 10:04:04 -08:00 |
|
David Keeler
|
4208771d44
|
bug 987262 - mozilla::pkix: refactor Nested AtEnd() checks in pkixder.h r=briansmith
|
2014-03-24 13:12:56 -07:00 |
|
David Keeler
|
84882df999
|
bug 985021 - mozilla::pkix: temporarily accept pathLenConstraint in EE basic constraints extensions r=briansmith
|
2014-03-21 11:52:01 -07:00 |
|
David Keeler
|
94f596638c
|
backout bug 985021 (8d622f4ec6e9) for another build breakage on a CLOSED TREE r=backout
|
2014-03-21 11:47:06 -07:00 |
|
David Keeler
|
81f6c14f73
|
bug 985021 - mozilla::pkix: temporarily accept pathLenConstraint in EE basic constraints extensions r=briansmith
|
2014-03-21 10:38:36 -07:00 |
|
David Keeler
|
c08f958136
|
backout bug 985021 (de535cd27ee7) for build breakage r=backout
|
2014-03-20 16:06:15 -07:00 |
|
David Keeler
|
d03bb6501c
|
bug 985021 - mozilla::pkix: temporarily accept pathLenConstraint in EE basic constraints extensions r=briansmith
|
2014-03-20 15:50:12 -07:00 |
|
David Keeler
|
f8e657144b
|
bug 985201 - rename insanity::pkix to mozilla::pkix r=cviecco r=briansmith
--HG--
rename : security/insanity/include/insanity/ScopedPtr.h => security/pkix/include/pkix/ScopedPtr.h
rename : security/insanity/include/insanity/bind.h => security/pkix/include/pkix/bind.h
rename : security/insanity/include/insanity/nullptr.h => security/pkix/include/pkix/nullptr.h
rename : security/insanity/include/insanity/pkix.h => security/pkix/include/pkix/pkix.h
rename : security/insanity/include/insanity/pkixtypes.h => security/pkix/include/pkix/pkixtypes.h
rename : security/insanity/lib/pkixbind.cpp => security/pkix/lib/pkixbind.cpp
rename : security/insanity/lib/pkixbuild.cpp => security/pkix/lib/pkixbuild.cpp
rename : security/insanity/lib/pkixcheck.cpp => security/pkix/lib/pkixcheck.cpp
rename : security/insanity/lib/pkixcheck.h => security/pkix/lib/pkixcheck.h
rename : security/insanity/lib/pkixder.cpp => security/pkix/lib/pkixder.cpp
rename : security/insanity/lib/pkixder.h => security/pkix/lib/pkixder.h
rename : security/insanity/lib/pkixkey.cpp => security/pkix/lib/pkixkey.cpp
rename : security/insanity/lib/pkixocsp.cpp => security/pkix/lib/pkixocsp.cpp
rename : security/insanity/lib/pkixutil.h => security/pkix/lib/pkixutil.h
rename : security/insanity/moz.build => security/pkix/moz.build
rename : security/insanity/test/lib/moz.build => security/pkix/test/lib/moz.build
rename : security/insanity/test/lib/pkixtestutil.cpp => security/pkix/test/lib/pkixtestutil.cpp
rename : security/insanity/test/lib/pkixtestutil.h => security/pkix/test/lib/pkixtestutil.h
|
2014-03-20 14:29:21 -07:00 |
|