Commit Graph

248 Commits

Author SHA1 Message Date
Kai Engert
c91389877e Bug 442561, enable Entrust Root Certification Authority for EV
r=rrelyea
2008-07-08 23:27:13 +02:00
Kai Engert
3c85060846 Bug 429794, Lk (trace malloc leaks) test results have become very unstable
r=nelson
2008-07-08 22:42:51 +02:00
Kai Engert
a46e4f3f66 Bug 431819, SSL client auth, repeated prompts for client certificate
r=rrelyea, r=dveditz
2008-06-18 21:36:29 +02:00
Kai Engert
4ca4582de2 Bug 436870, FF3 RC1 loses SSL certificate exceptions
Patch contributed by Honza Bambas
r=kaie
2008-06-18 21:20:16 +02:00
Kai Engert
a6269cffd6 Backout bug 428009 2008-06-18 14:30:29 +02:00
Kai Engert
60cb32844d Bug 428009, hook up ssltunnel to mochitest
Patch contributed by Honza Bambas
r=jwalden, r=kaie
2008-06-18 11:44:19 +02:00
Kai Engert
521a51d53f Bug 426830, remove unused nick_template_with_num
r=rrelyea
2008-06-11 20:20:24 +02:00
Kai Engert
d929cd8588 Bug 426555, nsClientAuthRememberService must be refcounted and implement nsISupportsWeakReference
r+sr=mrbkap
2008-06-27 16:28:08 +02:00
reed@reedloden.com
8443fe7800 Bug 433025 - "Still using windows icon in Security Exception dialog" [p=reed r=kaie a1.9=schrep] 2008-05-09 20:43:45 -07:00
kaie@kuix.de
c0caa44ac4 Bug 431384, Enable Network Solutions Certificate Authority for EV r=rrelyea, a1.9=beltzner 2008-05-03 18:36:46 -07:00
johnath@mozilla.com
aad7aadc1b SSL Error page for domain mismatch should hyperlink to correct site (sometimes). b=402210 r=gavin r=kengert r=axel ui-r=beltzner moa/sr=biesi a=beltzner Significant chunks of p=timeless 2008-04-30 13:10:22 -07:00
kaie@kuix.de
c80da42e1f Bug 406954, Unable to add exception for server certificates with empty subject names r=rrelyea, a1.9=shaver 2008-04-23 19:05:37 -07:00
kaie@kuix.de
1035e5cf99 Bug 429110, Random crashing ( [@ PR_AtomicIncrement] ?) ( [@ nsIOService::NewURI] ?) r=rrelyea, a1.9=shaver 2008-04-22 15:46:44 -07:00
gavin@gavinsharp.com
1f832dc92d Bug 413909: nsCertOverrideService IDN handling is broken, and its port handling is also quite cumbersome, patch by Honza Bambas <honzab@allpeers.com>, r=kaie, a=shaver 2008-04-22 13:03:20 -07:00
mnyromyr@tprac.de
5baf049146 Bug 428491: typo in ssl exceptions dialog; p=Serge Gautherie <sgautherie.bz@free.fr>, r=kaie, a1.9=dsicore 2008-04-20 11:14:30 -07:00
dtownsend@oxymoronical.com
b8b7964a79 Bug 429133: Parts of NSS are not in the SDK. r=bsmedberg, a=damons 2008-04-19 03:37:41 -07:00
kaie@kuix.de
f5086a376e Single patch for 3 overlapping fixes. Bug 420187, hang in nsNSSHttpRequestSession::internal_send_receive_attempt r=rrelyea Bug 383369, fixing a regression from 335801 r=rrelyea Bug 358438, fix proposed by and portions contributed by Honza Bambas r=honzab, r=rrelyea approval1.9 for combined patch = beltzner 2008-04-11 21:47:22 -07:00
kaie@kuix.de
8e1be3a7dd Bug 423002, Incorrect error message with certificates which contain subjectAltName r=rrelyea, a1.9=beltzner 2008-04-10 18:28:09 -07:00
kaie@kuix.de
913a248f1e Bug 428415, Don't pass uninitialized values to NSS CERT_PKIXVerifyCert r=rrelyea, a1.9=dsicore 2008-04-10 18:26:19 -07:00
kaie@kuix.de
97456384a2 Bug 327181, follow up checkin to fix IDL comment r=rrelyea, approval1.9=beltzner 2008-04-08 22:25:44 -07:00
kaie@kuix.de
f9e142e884 Bug 406755, EV certs not recognized as EV with some cross-certification scenarios second landing attempt, earlier EV verification, patch 9 r=rrelyea also landing a regression fix, which applies to debug mode compilation code, only r=rrelyea blocking1.9=dsicore 2008-04-08 18:48:02 -07:00
kaie@kuix.de
ed10ad9a44 Bug 425518, Enable multiple roots for EV (and remove 1): Geotrust, Thawte, Verisign, Trustwave, Comodo r=rrelyea, r=nelson, blocking1.9=dsicore 2008-04-08 17:28:48 -07:00
kaie@kuix.de
37eb9c3367 Backing out the "early ev verification" patch from bug 406755, as an attempt to fix a tinderbox test failure (crash). 2008-04-07 19:22:26 -07:00
kaie@kuix.de
17b2f73120 Bug 406755, EV certs not recognized as EV with some cross-certification scenarios Additional patch for Earlier EV verification, v8 r=wtc, r=nelson, blocking1.9=dsicore 2008-04-07 17:10:41 -07:00
johnath@mozilla.com
6271295a50 More verbose logging of harmless-but-scary-looking exception. b=408697 r=kai a=damon 2008-04-07 13:46:50 -07:00
kaie@kuix.de
a608dfde44 Bug 427081, Allow to override SEC_ERROR_INADEQUATE_KEY_USAGE r=nelson, a1.9=dsicore 2008-04-04 17:02:31 -07:00
reed@reedloden.com
9c779794b7 Bug 426822 - "nick_template needs a localization note" [p=valastiak@mozilla.sk (Vlado Valastiak [wladow]) r=kaie a1.9=beltzner] 2008-04-04 02:11:41 -07:00
kaie@kuix.de
212d02e40b Bug 420246, gBrowser.securityUI doesn't clear invalid cert data after using back button r=rrelyea, r=johnath, sr=gavin, blocking1.9=beltzner 2008-04-01 23:36:16 -07:00
kaie@kuix.de
ffc31711d1 Bug 420187. Backing out all 3 patches from today, because of regressions. a=shaver 2008-03-25 20:06:52 -07:00
kaie@kuix.de
755c32e75f Bug 420187, hang in nsNSSHttpRequestSession::internal_send_receive_attempt Follow up patch to fix leak tinderbox bustage, r=rrelyea 2008-03-25 14:49:35 -07:00
kaie@kuix.de
d9ea85f3b9 Attempt to fix red tinderbox, trivial mismatch between NS_IMETHODIMP and nsresult. Follow up to my fix for bug 420187. 2008-03-25 13:09:18 -07:00
kaie@kuix.de
5e5bffbd65 bug 420187, hang in nsNSSHttpRequestSession::internal_send_receive_attempt r=rrelyea, pending more comments blocking1.9=shaver approval1.9b5=beltzner 2008-03-25 12:34:48 -07:00
reed@reedloden.com
ffb0913b45 Bug 419794 - "work out key API for nsICryptoHMAC" (API use nsIKeyObject + fix nsKeyModule + nsICryptoHMAC usage fix) [p=honzab@allpeers.com (Honza Bambas [mayhemer]) r=rrelyea sr=dveditz a=blocking1.9+] 2008-03-18 12:45:40 -07:00
kaie@kuix.de
e92c6abaf6 Bug 423475, Paypal crashes loading main site r=rrelyea, blocking1.9=beltzner 2008-03-17 11:42:04 -07:00
johnath@mozilla.com
08a8c58978 Show certificate error pages (instead of dialogs) in frames. b=423247, p=kengert, r=rrelyea, r=bzbarsky, a=blocking-1.9 (ted) 2008-03-17 11:13:37 -07:00
kaie@kuix.de
f44acb4d74 Bug 406755, EV certs not recognized as EV with some cross-certification scenarios r=rrelyea, blocking1.9=dsicore 2008-03-16 06:42:32 -07:00
kaie@kuix.de
4a2ac6e90c bug 374336, add knowledge of Extended Validation / EV Certificates to PSM Follow up fix contributed by Neil that fixes allocator mismatch. r=kengert, approval1.9=dsicore 2008-03-14 08:22:50 -07:00
reed@reedloden.com
5e3b4d1415 Bug 418543 - "remove -moz-pre-wrap" [p=taken.spc@gmail.com (KUROSAWA, Takeshi) r+sr=roc a1.9=beltzner] 2008-03-08 01:44:35 -08:00
kaie@kuix.de
e6d6571817 Bug 400085, nsNSSCertificate::hasValidEVOidTag compare DER, not strings Patch contributed by Honza Bambas, r=rrelyea, r=kengert, approval1.9=beltzner 2008-03-06 22:14:33 -08:00
kaie@kuix.de
6eaf163cdf Bug 412456, ###!!! ASSERTION: nsSecureBrowserUIImpl not thread-safe r=rrelyea, blocking1.9=beltzner 2008-03-06 03:21:37 -08:00
gavin@gavinsharp.com
01e48bc351 Bug 419111: unfrozen interfaces listed in SDK_XPIDLSRCS, r=kaie, sr=bzbarsky 2008-03-05 14:08:20 -08:00
reed@reedloden.com
67836dd7e3 Bug 351580 - "Possible null pointer dereferences in |nsCrypto::GenerateCRMFRequest|" (Fixed !NULL checks + GC rooting) [p=honzab@allpeers.com (Honza Bambas [mayhemer]) r=mrbkap a=blocking1.9+] 2008-03-04 03:25:44 -08:00
bent.mozilla@gmail.com
872fe28df5 Bug 419655 - "Refreshing a page leaks an nsGlobalWindow until shutdown". r=peterv, sr=jst, a1.9b4+=schrep. 2008-02-28 18:05:57 -08:00
kaie@kuix.de
1c416620df Bug 418958, Enable Go Daddy root CA certificates for EV use r=rrelyea, a1.9b4=beltzner 2008-02-28 10:00:57 -08:00
dcamp@mozilla.com
44b567a446 Bug 415799: Interface and implementation for HMAC support. p=honzab@allpeers.com (Jan Bambas), r=kaie, r=rrelyea, sr=dveditz, blocking1.9=sayrer 2008-02-26 22:31:13 -08:00
wtc@google.com
c3c311e84b Bug 415033: added a hidden preference (in about:config) for enabling or disabling the TLS session ticket extension. The patch is contributed by Nagendra Modadugu <ngm+mozilla@google.com>. r=wtc,rrelyea,kengert a1.9+=damons Modified Files: netwerk/base/public/security-prefs.js security/manager/ssl/src/nsNSSComponent.cpp 2008-02-26 15:09:39 -08:00
gavin@gavinsharp.com
7f33abb115 Bustage fix from bug 415928, r=ted 2008-02-26 10:30:21 -08:00
ted.mielczarek@gmail.com
9b4bd4025c bug 415928 - fix packaging of CRT with jemalloc - make nspr/nss play along. r=bsmedberg 2008-02-25 12:50:35 -08:00
kaie@kuix.de
af82e17ee3 Bug 416827, Enable Digicert root CA certificate for EV use r=rrelyea, approval1.9=beltzner 2008-02-22 00:54:42 -08:00
kaie@kuix.de
80a24d43b5 Bug 418701, Enable Quo Vadis root CA certificate for EV use r=rrelyea, approval1.9=beltzner 2008-02-22 00:51:59 -08:00
kaie@kuix.de
d8c6f29dcc Bug 416850, Deleting a security exception and then re-adding it causes cert exception to remain valid r=rrelyea, approval1.9=beltzner 2008-02-22 00:50:11 -08:00
kaie@kuix.de
fa2db966c4 Bug 372876, Read from SSL socket leaks memory r=rrelyea, blocking1.9=sayrer 2008-02-21 17:07:16 -08:00
dcamp@mozilla.com
52dfbcb3ee Bug 350873: nsStreamLoader code accessed on secondary thread [ASSERTION: nsStreamLoader not thread-safe]. r=kengert, sr=dveditz, b1.9=sayrer 2008-02-21 17:05:17 -08:00
kaie@kuix.de
4cce4b477d Bug 402574, Identity UI lost when switching between tabs Additional patch v4 to fix false positive EV r=rrelyea, blocking-firefox3=mconnor 2008-02-21 17:04:05 -08:00
jwatt@jwatt.org
0bcadac8f7 Bug 417693. late-l10n. The Add Security Exception dialog text is misleading. r=kengert@redhat.com, a1.9=beltzner@mozilla.com 2008-02-21 09:40:52 -08:00
kaie@kuix.de
6ce364ef47 Bug 415213, uninitialized variables in PSM r=rrelyea, a1.9=dsicore 2008-02-13 08:14:25 -08:00
kaie@kuix.de
156f30d32d Bug 415786, escrow warning dialog is broken r=rrelyea, late-l10=pike, blocking1.9=mtschrep, approval1.9=mtschrep 2008-02-07 06:18:09 -08:00
johnath@mozilla.com
ce9321db68 Add Security Exception dialog is unusable at high dpi. b=413623, r=kengert, blocking1.9=schrep 2008-02-06 10:02:10 -08:00
kaie@kuix.de
2a5945649a Bug 413627, nsCertOverrideService can't register observers (NS_ERROR_UNEXPECTED) intended to fix blocking1.9+ Bug 414808 Patch contributed by Ehsan Akhgari, timeless and some trivial tweaks by myself Thanks to Tomcat for help with testing r=me, a=mtschrep, blocking1.9-on-414808=beltzner 2008-01-31 22:04:56 -08:00
kaie@kuix.de
48937de428 Bug 409091, SSL Client Auth prompt should indicate port number r=rrelyea, a1.9=mtschrep 2008-01-22 15:47:55 -08:00
kaie@kuix.de
aeabf2b45f Bug 405139, EV certs should be treated as providing less certainty of identity if OCSP is disabled. r=rrelyea, a1.9=mtschrep 2008-01-22 15:46:49 -08:00
kaie@kuix.de
a51dd553e9 Bug 412786, uninitialized variable r=rrelyea, a1.9=mtschrep 2008-01-22 15:44:29 -08:00
kaie@kuix.de
66c76f5083 Bug 412455, Regression, EV UI no longer shows up r=rrelyea, a1.9=mtschrep 2008-01-22 15:43:12 -08:00
kaie@kuix.de
6dee00122d Bug 399590, Update Mozilla trunk to use NSS tag NSS_3_12_BETA1 r=rrelyea, a1.9=mtschrep 2008-01-18 02:40:58 -08:00
kaie@kuix.de
8b4324d92b Bug 409280, nsIProtectedAuthThread is not embedding friendly Patch contributed by Christian Persch (GNOME) r=kengert, blocking1.9=mtschrep 2008-01-15 14:41:52 -08:00
kaie@kuix.de
5e3cf887fd Bug 407788, polish Delete Server Certificate Exceptions dialog Patch contributed by Vlado Valastiak r=kengert, a=mtschrep 2008-01-15 13:45:05 -08:00
kaie@kuix.de
be637af89e Bug 407523, Error page should not allow adding an exception for inadequate key usage r=rrelyea, a=mtschrep 2008-01-15 13:41:06 -08:00
benjamin@smedbergs.us
dfc4cee45d Bug 411327 - nsIXPCNativeCallContext should not inherit from nsISupports, r=mrbkap, a=schrep 2008-01-15 07:50:57 -08:00
dtownsend@oxymoronical.com
eef047b68f Bug 404726: Addon compatibility check gives many alerts (toolkit and security portions). r=gavin.sharp, r=kengert 2008-01-15 07:06:34 -08:00
kaie@kuix.de
d2c25c96f2 Bug 408432, Add Exception fails for certs with no DNS names (no CN, no SAN) r=rrelyea, blocking1.9=dsicore 2008-01-14 08:04:00 -08:00
kaie@kuix.de
e277586d41 bug 406999, Enhance EV performance; Never combine EV with Cert Overrides r=rrelyea, blocking1.9=mtschrep 2008-01-14 07:45:07 -08:00
jruderman@hmc.edu
eae9d39258 Add crashtest for keygen 2007-12-16 17:27:11 -08:00
johnath@mozilla.com
a6b4a53d33 Polish delete cert dialog. b=407788 r=kengert a=dsicore 2007-12-14 13:34:06 -08:00
kaie@kuix.de
ee2aa492e9 fixes bug 406290 r=wtc, a=beltzner 2007-12-14 09:39:30 -08:00
kaie@kuix.de
fb49368dc5 Bug 403691, unable to display decoded policies extension in certs from https://www.digicert.com r=kengert, a=beltzner 2007-12-14 08:11:57 -08:00
kaie@kuix.de
18434f216a bug 119500, PKCS#11 CKF_PROTECTED_AUTHENTICATION_PATH token flag not supported Patch contributed by Petr Kostka r=rrelyea, sr=kengert, a=dsicore Addon Patch to provide dummy implementations for gtk-embedding and camino. r=mark, sr=jst 2007-12-04 23:34:55 -08:00
kaie@kuix.de
34143f5ff6 bug 119500, PKCS#11 CKF_PROTECTED_AUTHENTICATION_PATH token flag not supported Patch contributed by Petr Kostka r=rrelyea, sr=kengert, a=dsicore Addon Patch to provide dummy implementations for gtk-embedding and camino. r=mark, sr=jst 2007-12-04 23:31:43 -08:00
kaie@kuix.de
e64d67a61b Bug 378241, Changes from bug 107491 lead to tons of thread-safety asserts r=rrelyea, r=wtc, sr=benjamin, blocking1.9=benjamin 2007-12-04 10:53:14 -08:00
kaie@kuix.de
ca5d681e30 Bug 404059, connection to t-mobile hotspot startup page takes very long Landing workaround patch (shorten timeout) r=rrelyea, blocking1.9=mtschrep 2007-12-03 14:58:06 -08:00
kaie@kuix.de
0b79e16a4b bug 402574, Identity UI lost when switching between tabs r=rrelyea, blocking-ff3=mconnor Also includes merged fix for: Bug 405145, Mixed SSL/non-SSL content reporting inconsistent between standard and EV Certs Patch contributed by Bill Gianopoulos r=kengert, a=dsicore 2007-12-03 14:09:27 -08:00
reed@reedloden.com
3fca62f6a1 Bug 400096 - "In <pippki.properties> (at least), rename "Web Site" to "Server"" ((Bv2a) |importWebSiteCertPrompt| fix) [p=sgautherie.bz@free.fr (Serge Gautherie) r=kaie a1.9=damons] 2007-11-30 23:03:54 -08:00
Olli.Pettay@helsinki.fi
74b6bb3346 Bug 401906, nsCertTreeDispInfo leaks, r=kengert, a=dsicore 2007-11-30 11:55:31 -08:00
cbiesinger@gmx.at
1e54b36be6 bug 262116 make disk cache serialize/deserialize the security info, if present also make nsNSSSocketInfo serializable PSM part: r=kaie sr=darin rest: r+sr=darin 2007-11-30 10:05:54 -08:00
cbiesinger@gmx.at
e8bba4b7e8 bug 405481 add nsISerializable and nsIClassInfo to nsNSSCertificate's QI impl r+sr=bz a=beltzner 2007-11-28 14:22:13 -08:00
reed@reedloden.com
c6d06df230 Bug 373623 - "Unicode … should be used instead of three separate dots: ..." (browser locales) [p=hendrik.maryns@uni-tuebingen.de (Hendrik Maryns) r=mconnor a1.9=beltzner] 2007-11-26 18:44:44 -08:00
johnath@mozilla.com
8d74c586f9 Bug 402207 - SSL error page "Add Exception" support should be pref-controlled. r=gavin r=kengert ui-r=beltzner a=beltzner 2007-11-23 13:59:10 -08:00
philringnalda@gmail.com
3749bde8b7 Bug 404292 - use global/skin/ instead of communicator/skin/ in crl manager, r=kengert, sr=neil, a=schrep 2007-11-21 18:51:09 -08:00
rrelyea@redhat.com
9eb55b8d0e Enable real EV checking. Bug 289520. patch by kai engert. review rrelyea approval mtschrep. 2007-11-21 14:28:13 -08:00
johnath@mozilla.com
a7e6402d8a Fix whitespace in Add Exception dialog. b=404425 r=kaie a=schrep 2007-11-21 13:34:18 -08:00
reed@reedloden.com
303be12e4a Back out patch from bug 373525 now that bug 386202 has been fixed [r=kaie a=blocking1.9+] 2007-11-20 16:46:47 -08:00
kaie@kuix.de
a2fa7d276d Bug 402726, Allow to view cert on SSL protocol errors r=rrelyea, r=neil, r=gavin, a=dsicore 2007-11-20 09:59:33 -08:00
kaie@kuix.de
5199056941 Bug 401755, Cleanup nsNSSIOLayer.cpp->getErrorMessage Patch v3 to address regression r=rrelyea, a=mtschrep 2007-11-20 09:56:04 -08:00
reed@reedloden.com
171fce8e91 Bug 403994 - "Don't install nss headers when system-nss is used" [p=fta+bugzilla@sofaraway.org (Fabien Tassin) r=rrelyea a1.9=schrep] 2007-11-20 02:05:41 -08:00
bzbarsky@mit.edu
66f3331177 Remove some duplicated code. Bug 397651, r=kaie, sr=jst, a=schrep 2007-11-19 20:32:06 -08:00
kaie@kuix.de
9b4f890a7d Bug 404046, File nsIdentityChecking.cpp needs license header r=rrelyea, a=dsicore 2007-11-19 11:33:03 -08:00
kaie@kuix.de
e9b5f29921 bug 399589, PSM + tip of NSS, error ‘SECAlgorithmIDTemplate’ not declared r=rrelyea, a=mtschrep 2007-11-19 09:02:43 -08:00
kaie@kuix.de
5f02721e01 Bug 399696, allow temporary certificate exceptions r=rrelyeea, a=vladimir 2007-11-19 07:32:43 -08:00
kairo@kairo.at
5996b5de07 bug 403301 - Wrong character and accesskey alignment in certManager.dtd, r=kengert a=dsicore 2007-11-19 05:55:35 -08:00
reed@reedloden.com
e7f3ec489c Actually delete files that were removed as part of the patch in bug 327181 2007-11-13 08:55:48 -08:00
reed@reedloden.com
0e938f0973 Bug 403221 - "Fix typo: |explaination| -> |explanation|" [p=sgautherie.bz@free.fr (Serge Gautherie) r=kaie a1.9=schrep] 2007-11-12 22:52:49 -08:00