David Keeler
c637dcccd7
bug 1091232 - update PSM data structures that are affected by root CA changes r=mmc
2014-11-18 16:41:18 -08:00
Cykesiopka
364fdddd4b
Bug 1089305 - Switch EV tests to SQL DB and partially clean up scripts. r=keeler
2014-11-17 21:12:00 +01:00
Monica Chew
a50d73f349
Bug 1092606: Filter out duplicate pinsets as well as domains (r=keeler)
2014-11-17 12:54:42 -08:00
Kai Engert
a319cfa3bb
Bug 1088969
- Upgrade Mozilla 36 to use NSS 3.18 - NSS_3_18_BETA2
2014-11-17 14:57:45 +01:00
Cykesiopka
169234c9f2
Bug 1084606 - Allow overrides for MOZILLA_PKIX_ERROR_INADEQUATE_KEY_SIZE. r=dkeeler
2014-11-11 00:59:00 +01:00
Gregory Szorc
fc49af35ef
Merge inbound to m-c; a=merge
...
--HG--
extra : amend_source : 2e89bf359e356566aee6b04bb864979539e1c90d
2014-11-15 13:57:08 -08:00
ffxbld
e0393c1572
No bug, Automated HPKP preload list update from host b-linux64-ix-0011 - a=hpkp-update
2014-11-15 03:21:19 -08:00
ffxbld
a5a71a3a65
No bug, Automated HSTS preload list update from host b-linux64-ix-0011 - a=hsts-update
2014-11-15 03:21:16 -08:00
David Keeler
e22ff7388d
bug 940994 - follow-up to fix some issues that were missed in review r=mmc
2014-11-14 16:46:23 -08:00
Monica Chew
5a029358aa
Bug 1098288: Enable pinning on spideroak (r=keeler)
2014-11-14 11:17:40 -08:00
Masatoshi Kimura
f2f0a036c8
Bug 1094495 - Disable C4480 in security/pkix. r=keeler
2014-11-12 07:41:42 +09:00
Cykesiopka
9415acbacf
Bug 1057035 - Fix terminology used in the certificate exception dialog. r=keeler
2014-10-27 21:06:00 -04:00
Masatoshi Kimura
aa8411b8a7
Bug 1093595 - Change strings to add a description about weak encryption. r=dolske
2014-11-11 07:29:44 +09:00
Masatoshi Kimura
afe67213d6
Bug 1093595 - Treat SSL3 and RC4 as broken. r=keeler
2014-11-11 07:29:44 +09:00
Carsten "Tomcat" Book
1d9d0ab094
merge mozilla-inbound to mozilla-central a=merge
2014-11-10 14:24:51 +01:00
ffxbld
c47a5e7e72
No bug, Automated HPKP preload list update from host bld-linux64-spot-144 - a=hpkp-update
2014-11-08 03:20:20 -08:00
ffxbld
d3c9b77c3e
No bug, Automated HSTS preload list update from host bld-linux64-spot-144 - a=hsts-update
2014-11-08 03:20:17 -08:00
Monica Chew
9213772797
Bug 1030135: Promote pin for services.mozilla.com to production mode (r=keeler)
2014-11-07 12:00:50 -08:00
Shashank Sabniveesu
417a6677dd
Bug 940994 - Adding '.p7b' to 'known file types' list of 'Certificate Manager'. r=keeler
2014-10-07 14:30:00 +02:00
Chris Peterson
3cc7f37dce
Bug 1095926 - Fix -Wcomment warning in OCSP test and mark some OCSP tests as FAIL_ON_WARNINGS. r=briansmith
2014-10-11 20:13:45 -07:00
Michael Ratcliffe
a82f5ad5b7
Bug 1090913 - Make mochitests fail when it has 0 passes and 0 fails r=jmaher
2014-11-05 16:00:52 +00:00
Jed Davis
40110478bd
Bug 1077057 - Expose Linux sandboxing information to JS via nsSystemInfo. r=kang r=froydnj
...
This adds "hasSeccompBPF" for seccomp-bpf support; other "has" keys
will be added in the future (e.g., user namespaces).
This also adds "canSandboxContent" and "canSandboxMedia", which are
absent if the corresponding type of sandboxing isn't enabled at build
type (or is disabled with environment variables), and otherwise present
as a boolean indicating whether that type of sandboxing is supported.
Currently this is always the same as hasSeccompBPF, but that could change
in the future.
Some changes have been made to the "mozilla/Sandbox.h" interface to
support this; the idea is that the MOZ_DISABLE_*_SANDBOX environment
variables should be equivalent to disabling MOZ_*_SANDBOX at build time.
2014-11-06 13:11:00 +01:00
David Keeler
300db0692c
bug 1039642 - follow-up to fix non-unified build bustage (missing include and namespace) r=bustage a=metered
2014-11-06 14:23:21 -08:00
David Keeler
845d78bfd2
bug 1039642 - clean up the implementation of nsPkcs11 for style and safety r=jcj r=mmc a=metered
2014-11-05 14:05:46 -08:00
David Keeler
5566eb0f2e
bug 1039642 - test that smart card events are no longer emitted after removing a PKCS#11 module r=jcj r=mmc a=metered
...
--HG--
rename : security/manager/ssl/tests/unit/test_pkcs11_insert_remove.js => security/manager/ssl/tests/unit/test_pkcs11_no_events_after_removal.js
2014-11-05 13:54:21 -08:00
David Keeler
036550c543
bug 1039642 - stop PKCS#11 module threads before deleting them r=jcj r=mmc a=metered
2014-11-05 13:53:28 -08:00
Jed Davis
1ca50eeb0d
Bug 1093893 - Fix B2G sandbox for ICS Bionic pthread_kill(). r=kang
2014-11-06 11:04:14 -08:00
Chris Peterson
d1148c0fca
Bug 1092710 - Fix -Wunused-const-variable warning-as-error in non-unified security/certverifier. r=keeler
...
--HG--
extra : rebase_source : c13f7e565c8459263191f9bb16d4221b6f163443
2014-11-01 12:14:41 -07:00
Dragana Damjanovic
3899655299
Bug 1087213 - Implenent bind function in nsNSSIOLayer. r=honza
2014-10-22 02:06:00 +02:00
Monica Chew
162feb18f0
Bug 1004781: Remove unnecessary cert for facebook (r=keeler)
2014-11-04 10:54:26 -08:00
Monica Chew
d7bbb7d49f
Bug 1092606: Don't import Chromium pinsets for domains that are already in our list (r=keeler,jcj)
2014-11-04 10:53:52 -08:00
David Keeler
bdef366a8e
bug 1079658 - follow-up bustage fix (unnecessary multi-line C++-style comment) r=bustage on a CLOSED TREE
2014-11-03 13:48:48 -08:00
David Keeler
2d22d040b2
bug 1079658 - check for the id-pkix-ocsp-nocheck extension when decoding certificates r=briansmith
2014-11-03 11:35:15 -08:00
Bob Owen
b14d64e209
Bug 1076903: Add a Chromium LICENSE file to security/sandbox/win/src. r=gerv
2014-11-03 15:34:26 +00:00
Chris Peterson
01a52e0efe
Bug 1092028 - Fix -Wunused-const-variable warning-as-error in security/pkix/test/gtest. r=bsmith
2014-10-30 23:17:27 -07:00
ffxbld
4789a66b33
No bug, Automated HPKP preload list update from host b-linux64-ix-0009 - a=hpkp-update
2014-11-01 03:19:47 -07:00
ffxbld
4fc941058a
No bug, Automated HSTS preload list update from host b-linux64-ix-0009 - a=hsts-update
2014-11-01 03:19:44 -07:00
Garrett Robinson
e35ae3c8b0
Bug 846489 - Part 1 - Expose error code on TransportSecurityInfo. r=keeler
2014-10-30 12:50:00 +01:00
Carsten "Tomcat" Book
e42a610706
Backed out changeset 5fb2f4662098 (bug 846498) for wrong bug number in commit message
2014-10-31 10:03:53 +01:00
Masatoshi Kimura
a45afaca87
Bug 1088915 - Stop offering RC4 in the first handshakes. r=keeler
2014-10-22 01:11:29 +09:00
Masatoshi Kimura
9d20a17351
Bug 947149 - Remove useless and even misleading word and dead code. r=keeler, dolske
2014-10-30 15:22:00 +01:00
Garrett Robinson
e306036c5a
Bug 846498 - Expose error code on TransportSecurityInfo. r=keeler
2014-10-30 12:50:00 +01:00
Brian Smith
8f74650db9
Reland Bug 1063281, Part 9: Switch Gecko from NSS to CheckCertHostname, r=keeler
...
--HG--
extra : rebase_source : 3a5e3bc2e113035e9c88b571bac68f3dbe2c8f04
2014-10-28 15:28:38 -07:00
Brian Smith
932abd661a
Bug 1089104: Add support for TeletexString-encoded CN-IDs to CheckCertHostname, r=keeler
...
--HG--
extra : rebase_source : 320794deae857a574f509b7277ea64576abd37b3
2014-10-29 17:19:45 -07:00
Brian Smith
06cbe1fe9d
Bug 1089393: Fix hex excape sequences ('\0x' -> '\x') in pkixnames_tests.cpp, r=mmc
...
--HG--
extra : rebase_source : a0136045ce9b957976f8eb2ef8ad6c9eae0a8ad7
2014-10-26 11:29:42 -07:00
Monica Chew
d3ab192815
Bug 1004781: Actually remove the pinset (r=keeler)
2014-10-30 16:21:09 -07:00
Monica Chew
a8f153ca18
Bug 1004781: Remove our pinset for facebook since it's in chromium now (r=keeler)
2014-10-30 16:14:19 -07:00
David Keeler
69bca53cc3
bug 1085509 - follow-up to include forgotten Telemetry.h header (non-unified build bustage) r=bustage
2014-10-30 13:12:01 -07:00
David Keeler
c2579f15fc
bug 1085509 - add telemetry for how many permanent certificate overrides users have r=mmc r=jcj
2014-10-29 16:25:16 -07:00
David Keeler
d5194db4e6
bug 1085509 - fix nsCertOverrideService so its initialization doesn't depend on NSS r=mmc
2014-10-24 10:46:30 -07:00