Phil Ringnalda
786e840e01
Merge m-i to m-c
2014-05-31 20:29:24 -07:00
ffxbld
bec4c38688
No bug, Automated HSTS preload list update from host bld-linux64-spot-176 - a=hsts-update
2014-05-31 03:14:44 -07:00
Cykesiopka
ea035ab7a4
Bug 917510 - Replace SHA-1 fingerprints of EV certs in ExtendedValidation.cpp with SHA-2 fingerprints. r=briansmith, r=kwilson
2014-05-30 00:01:00 -04:00
Camilo Viecco
be441f03f1
Bug 991815 - Part 2/2 - Tests for OCSP responses up to 1 year old. r=keeler
...
--HG--
extra : rebase_source : cc012870da3a165a0a3d0d5c6c9671eeeda37f3f
2014-05-28 14:08:02 -07:00
Camilo Viecco
fc11f7c21d
Bug 991815 - Part 1/2 - Allow intermediate OCSP responses up to 1 year old. r=keeler
...
--HG--
extra : rebase_source : 28d5336da1dc44932b92ce2c59fca5fcb2b8a3d8
2014-05-30 16:12:36 -07:00
Nathan Froyd
c5a3c603c2
Bug 1017661
- remove MOZ_NSS_PATCH functionality; r=glandium
2014-05-29 12:16:58 -04:00
Brian Smith
4c6adb7ede
Bug 1018033: Prevent buffer read overflow due to integer overflow in mozilla::pkix::der::Input::EnsureLength, r=keeler
...
--HG--
extra : rebase_source : e4e88d61e448fa475a106a06b9f32181906fba0f
2014-05-29 23:37:40 -07:00
Brian Smith
b3bb9ea641
Bug 1018041: Fix linking error in pkix_ocsp_request_tests when GTest is enabled on Windows, r=keeler
...
--HG--
extra : rebase_source : 36c5ee4f5cc40adb1079e34bd309147a662fc45f
2014-05-29 23:06:10 -07:00
Brian Smith
8dcde055ad
Bug 1018018: Remove support/mention of proprietary Netscape certificate extensions from PSM, r=cviecco
...
--HG--
extra : rebase_source : 758ff9384c040084b1015f8025a4ff9f33590176
2014-05-29 20:38:25 -07:00
Brian Smith
833425eae1
Bug 1010634, Part 6: Enable -Wall with a few exceptions for certverifier, r=cviecco
...
--HG--
extra : rebase_source : 611f0d65e7edb74345a4a599a6606de37e3da75e
2014-05-15 21:56:23 -07:00
Brian Smith
9eeeb8204b
Bug 1010634, Part 5: Add private destructor to NSSErrorService in line with the XPCOM recommendations, r=cviecco
...
--HG--
extra : rebase_source : 1f8b4558114eef0e1a15f51f0c814f16e05f6f76
2014-05-29 20:18:17 -07:00
Brian Smith
7a871c3cee
Bug 1010634, Part 3: Fix more warnings in CertVerifier, r=cviecco
...
--HG--
extra : rebase_source : 21e79fbc472aeccec7df213e0cd8d99bebfbff75
2014-05-29 20:17:53 -07:00
David Keeler
56379872a2
bug 1006710 - add class of PSM errors to SEC and SSL errors r=briansmith
2014-05-28 15:28:03 -07:00
Camilo Viecco
b3316b8666
Bug 1005142 - Part 2/2 - Basic OCSP fetch method tests. r=keeler
...
--HG--
extra : rebase_source : 364a5d410eb3743ae0a03ebcf0a258e847d71743
2014-05-23 09:47:41 -07:00
Camilo Viecco
44bf536cc4
Bug 1005142 - Part 1/2 - Add OCSP get capabilities to OCSPRequestor. r=keeler
...
--HG--
extra : rebase_source : ee4a86bf02a466a31de8b0b6cd7ce375a7f28c6d
2014-05-21 15:42:21 -07:00
David Keeler
4a93b644f6
bug 995801 - cache nsNSSCertificate::mCachedEVStatus on disk r=mayhemer
2014-01-10 11:13:03 -08:00
Cykesiopka
40f95d5437
Bug 972702 - Make Cert Viewer details tab content resizable. r=keeler
2014-05-27 20:58:00 +02:00
Camilo Viecco
2883e1d4ea
Bug 1016442 - Make mozilla cdn sites production on built-in list. r=mmc
...
--HG--
extra : rebase_source : 5d937b61ab86c974210dcc83735cd4308bff018e
2014-05-27 10:53:40 -07:00
Ryan VanderMeulen
9460f40816
Backed out changeset d5da62e82faf (bug 995801) for test_browserElement_oop_SecurityChange.html failures.
...
CLOSED TREE
2014-05-27 14:27:40 -04:00
David Keeler
bacc5f19c7
bug 995801 - cache nsNSSCertificate::mCachedEVStatus on disk r=mayhemer
2014-01-10 11:13:03 -08:00
Richard Barnes
cf739d773c
Bug 998803 - Add support for RSA encryption and signing to WebCrypto API. r=bz,dkeeler
2014-05-23 15:29:00 +02:00
ffxbld
1b5b7ecfd1
No bug, Automated HSTS preload list update from host bld-linux64-spot-1068 - a=hsts-update
2014-05-24 03:14:12 -07:00
Monica Chew
c21cc7a85f
Bug 1004351: Enable production mode for twitter pins (r=keeler)
2014-05-22 15:11:07 -07:00
Monica Chew
f87b89298d
Bug 1014344: Use Google's root pems in addition to their intermediate certs (r=keeler)
2014-05-22 15:09:45 -07:00
Wan-Teh Chang
c88fddaa3c
Bug 1009794: Update NSS to NSS_3_16_2_BETA2, which also includes fixes
...
for bug 999893, bug 1011090, bug 1009785, bug 421391, and bug 1011229.
2014-05-22 12:31:09 -07:00
Cykesiopka
17e952b63e
Bug 622332 - Show cert SHA-256 fingerprint and remove MD5 fingerprint. r=keeler
2014-05-22 00:52:00 +02:00
Birunthan Mohanathas
76ca8ec617
Bug 869836 - Part 7: Use AppendLiteral instead of Append where possible. r=ehsan
2014-05-22 06:48:51 +03:00
Birunthan Mohanathas
c4568a7085
Bug 869836 - Part 6: Use EqualsLiteral instead of Equals where possible. r=ehsan
2014-05-22 06:48:51 +03:00
Birunthan Mohanathas
807e72372f
Bug 869836 - Part 4: Use EqualsLiteral instead of Equals(NS_LITERAL_STRING(...))
. r=ehsan
2014-05-22 06:48:51 +03:00
Birunthan Mohanathas
411a8639b4
Bug 869836 - Part 3: Use Append('c')
instead of AppendLiteral("c")
. r=ehsan
2014-05-22 06:48:51 +03:00
Birunthan Mohanathas
62570a8716
Bug 869836 - Part 2: Use AppendLiteral instead of Append(NS_LITERAL_STRING(...))
. r=ehsan
2014-05-22 06:48:50 +03:00
Camilo Viecco
a87a54bcc1
Bug 1010594 - Part 2/2 tests - r=keeler
...
--HG--
extra : rebase_source : 4ca9623b815544edc58308544fa85b192c2f31f3
2014-05-19 13:26:23 -07:00
Camilo Viecco
1eac4f4b6c
Bug 1010594 - Part 1/2 OCSP url check - r=briansmith
...
--HG--
extra : rebase_source : 0b26339d33db90722401ae1d8ac255d0390aea30
2014-05-16 13:53:14 -07:00
Camilo Viecco
4eff7cf088
Bug 1009635 - PreloadedHPKP.json should also contain production/exclusion lists. r=keeler
...
--HG--
extra : rebase_source : 46c13e490358f26b21191d6d783d795897ceea63
2014-05-15 08:04:54 -07:00
Richard Barnes
7b6d82be69
Bug 995385 - Ensure that NSS is initialzed for CryptoTasks. r=dkeeler
2014-05-16 15:47:00 -04:00
Bob Owen
2c9a59f64a
Bug 1009452 - inherit stdout and stderr into the content process to allow logging. r=aklotz
2014-05-14 16:09:31 +01:00
Jed Davis
c7dae997a6
Bug 920372 - Fix socketcall whitelisting on i386. r=kang
2014-05-20 18:38:14 -07:00
Jed Davis
1523066770
Bug 920372 - Allow tgkill only for threads of the calling process itself. r=kang
2014-05-20 18:38:06 -07:00
Jed Davis
3a308504da
Bug 920372 - Use Chromium seccomp-bpf compiler to dynamically build sandbox program. r=kang
2014-05-20 18:37:53 -07:00
Jed Davis
3b103d307f
Bug 920372 - Import Chromium seccomp-bpf compiler, rev 4c08f442d2588a2c7cfaa117a55bd87d2ac32f9a. r=kang
...
Newly imported:
* sandbox/linux/seccomp-bpf/
* sandbox/linux/sandbox_export.h
* base/posix/eintr_wrapper.h
Updated:
* base/basictypes.h
* base/macros.h
At the time of this writing (see future patches for this bug) the only
things we're using from sandbox/linux/seccomp-bpf/ are codegen.cc and
basicblock.cc, and the header files they require. However, we may use
more of this code in the future, and it seems cleaner in general to
import the entire subtree.
2014-05-20 18:37:45 -07:00
Monica Chew
b35189dfe7
Bug 1013504: Introduce error file for genHPKPStaticPins.js (r=keeler)
2014-05-20 13:25:02 -07:00
Richard Barnes
ae11832c51
Bug 1005375 - Add an API that allows CryptoTasks to be created without being dispatched
2014-05-03 08:50:00 +02:00
Chris Peterson
7429b133b7
Bug 1007708 - Part 1: Fix warnings in security/pkix/test/ and mark as FAIL_ON_WARNINGS. r=briansmith
2014-05-17 20:12:10 -07:00
Monica Chew
1d542c52b2
Bug 1011269: Forgot to qref to pick up keeler's changes (r=keeler)
2014-05-19 13:24:41 -07:00
Monica Chew
8bc2f051f9
Bug 1011269: Add CertVerifier::pinningEnforceTestMode (r=keeler)
2014-05-19 13:04:40 -07:00
David Keeler
0c382cbab9
bug 986150 - fix some comments in mozilla::pkix DER tests r=mmc
2014-05-19 12:14:51 -07:00
David Keeler
b0685b996f
bug 986150 - test mozilla::pkix::der::OptionalBoolean r=mmc
2014-05-19 12:14:44 -07:00
David Keeler
7490c005ac
bug 1002814 - OCSP requests: long serial check should be on cert, not issuerCert r=briansmith
2014-05-14 10:05:32 -07:00
David Keeler
ca14d7c987
bug 1002814 - retry PK11_GenerateKeyPair when it fails non-fatally r=briansmith
2014-05-19 11:13:04 -07:00
Marco Castelluccio
98f16ffbdc
Bug 972201 - Remove the MOZ_B2G_CERTDATA hack. r=briansmith
2014-05-18 15:42:42 +02:00