Commit Graph

1733 Commits

Author SHA1 Message Date
Ms2ger
6e066deaea Bug 968856 - Move unconditional LOCAL_INCLUDES into moz.build; r=mshal 2014-02-15 21:24:59 +01:00
Phil Ringnalda
045a2cbe55 Merge m-i to m-c 2014-02-15 09:54:57 -08:00
ffxbld
b9dfc6f557 No bug, Automated HSTS preload list update from host bld-linux64-spot-071 - a=hsts-update 2014-02-15 03:20:10 -08:00
Vaibhav Agarwal
d109cb3fc7 Bug 970925 - convert testing/mochitest/android.json into skip-if statements in mochitest.ini files; r=jmaher 2014-02-15 04:53:02 -05:00
Brian Smith
47db3c7a3c Bug 896620: Revert deletion of security/build/b2g-app-root-cert.der, which was intended for bug 972201, r=me (thanks Ehsan) 2014-02-14 19:45:58 -08:00
Brian Smith
83e4eaa908 Bug 896620: Make marketplace certs work on in all products, r=keeler
--HG--
extra : source : 86ec7137a8892f75918c77e605df970f5b96ef62
extra : histedit_source : 33326790804d49e6ec658626116ebf870d94d445
2014-02-14 14:37:07 -08:00
Brian Smith
6f0d9dfd0a Bug 967153: Update to NSS 3.16 beta 2 (NSS_3_16_BETA2), r=me
--HG--
extra : source : e7b156a508d35034735e0cb44e5f73d6e8b76cc7
2014-02-13 16:43:27 -08:00
Brian R. Bondy
c4e16b9b50 Bug 969559 - Set delayed restricted integrity in child process to block off pipe and file access after LowerToken call. r=aklotz 2014-02-14 11:07:16 -05:00
Wes Kocher
ee5da0ab00 Merge m-c to inbound on a CLOSED TREE 2014-02-13 18:50:08 -08:00
David Keeler
30ccf7829f bug 967975 - certificate error override telemetry r=briansmith
--HG--
rename : security/manager/ssl/tests/unit/tlsserver/cmd/OCSPStaplingServer.cpp => security/manager/ssl/tests/unit/tlsserver/cmd/BadCertServer.cpp
2014-02-13 14:53:29 -08:00
Ryan VanderMeulen
41ac0e7e12 Merge m-c to b2g-inbound. 2014-02-13 10:32:21 -05:00
Jed Davis
5ea5299c58 Bug 971370 - Fix seccomp whitelist errors caused by strace bug. r=kang 2014-02-13 09:47:16 -05:00
Guillaume Destuynder
cb244dcc84 bug 948620 - Add env variable MOZ_DISABLE_CONTENT_SANDBOX to disable sandbox at runtime. r=jld 2014-02-13 16:26:28 -08:00
Brian Smith
91ddc1d104 Bug 971178, Part 4: Expand test_intermediates_basic_constraints.js test insanity::pkix, r=cviecco
--HG--
extra : rebase_source : b419a3087b3d327c9a48d984551abeac4943be7a
2014-02-11 16:24:45 -08:00
Brian Smith
f1350c0f8f Bug 971178, Part 3: Expand test_certificate_usages.js test insanity::pkix, r=cviecco
--HG--
extra : rebase_source : 3810925d18767d1b04f8a47004a0ab7a631e5b4b
2014-02-11 01:42:41 -08:00
Brian Smith
6581563f7a Bug 971178, Part 2: Make test_getchains.js test insanity::pkix, r=cviecco
--HG--
extra : rebase_source : ff9620bad6b20a84cf179af7ffa7a74f6ffd6640
2014-02-11 01:42:55 -08:00
Brian Smith
b8f2b8be6a Bug 971178, Part 1: Expand test_cert_signatures.js test insanity::pkix, r=cviecco
--HG--
extra : rebase_source : 90cf68bdb50b8499aeda3e14c476977db9e43c2a
2014-02-11 01:42:24 -08:00
Jeff Walden
2619346f9f Bug 969165 - Convert Atomic<T> where T != bool but is used as a bool over to Atomic<bool>, now that it's supported, in security/manager/. r=bsmith
--HG--
extra : rebase_source : 3632af6471e41d099a0948542d26a7df527efaad
2014-02-06 22:17:07 -08:00
Camilo Viecco
0bca16e9bd Bug 877376: Add tests for intermediate CA basic constraints and KU/EKU, r=briansmith
--HG--
extra : rebase_source : b831ab0e459af4ea0f43a1184e32b333f43b2f01
2013-05-23 10:15:19 -07:00
Brian Smith
84299706e6 Bug 878932, Part 2: Make certificate verification implementation prefs dynamic, r=cviecco
--HG--
extra : rebase_source : 4b413cfd8e122ee4e0fea64d624285856e2cb0cb
2014-01-20 15:55:12 -08:00
Brian Smith
bbf60e0ee9 Bug 878932, Part 1: add insanity::pkix as an option for certificate verification, r=keeler, r=cviecco
--HG--
extra : rebase_source : c1f75dff6ac7f32e082517af701654abebaee250
2014-02-10 11:41:12 -08:00
Brian Smith
0dd915920a Bug 970512: Remove uninteresting cases for certificate usage verification, r=cviecco
--HG--
extra : rebase_source : 6df6dcfb39f8b4e2cd063115470af04675c0f768
extra : source : 56e0904260b417ce181e2a35978f6d77e78ef2c2
2013-10-13 23:34:28 -07:00
Brian Smith
a543241ac1 Bug 969938: Stop adding id-KP-OCSPSigning EKU to CA certificates in tests, r=cviecco
--HG--
extra : rebase_source : 9f5e42ea788e63fb93e3a37632be12093096e63d
2014-02-08 21:01:39 -08:00
Brian Smith
5e604d6a4e Bug 921896: Check name constraints in insanity::pkix, r=cviecco, r=keeler
--HG--
extra : rebase_source : 6d3e77670a5553b477a881609cc30f5f4140294c
extra : source : 2545cd47894a95323b718eb4f82be6d744019c7a
2014-02-10 15:25:23 -08:00
Brian Smith
0770722ba2 Bug 968359: Allow the direct validation of CA certificates in insanity::pkix, r=keeler, r=cviecco
--HG--
extra : rebase_source : f27870f2a648ad012d24b99d9e4f85daf17e9397
extra : source : 002e9043461b40a911903258d723c37133dbc79c
2013-09-13 00:09:08 -07:00
Brian Smith
424eb9d318 Bug 921895: Check extended key usage in insanity::pkix, r=keeler, r=cviecco
--HG--
extra : rebase_source : f8faa0b9269a40dd28850c9444f4723d1dad8451
extra : source : 32ea705bdfd196e037060b3bb7da081c1eed356d
2014-02-08 15:00:32 -08:00
David Keeler
e6f147946b bug 961528 - holepunch chart.apis.google.com from the HSTS preload list r=briansmith 2014-02-11 10:21:57 -08:00
Ehsan Akhgari
4076764251 Bug 970727 - Move DEFFILE to moz.build; r=mshal 2014-02-11 11:28:54 -05:00
Ehsan Akhgari
b870bb3fe9 Bug 969757 - Remove the dead code in our tree which pretends to support OS/2; r=roc,mcmanus,gps,jorendorf,bsmedberg sr=bsmedberg 2014-02-10 17:57:01 -05:00
Jacek Caban
867f117090 Bug 969330 - Fix -Werror=int-to-pointer-cast in windows-only code. r=ehsan 2014-02-10 12:05:22 +01:00
Brian Smith
0494c6f461 Bug 967153: Add name constraint test certs accidentally excluded from commit 9e5d07c8c87b, r=me, a=NPOTB, DONTBUILD
--HG--
extra : amend_source : 1c120e9bfce764f70ea3f1355db6a1bf58332526
2014-02-09 16:33:59 -08:00
Brian Smith
81f80a1f77 Bug 967153: Update NSS to NSS 3.16 beta 1 (NSS_3_16_BETA1), r=me 2014-02-09 16:29:50 -08:00
ffxbld
5c2460d500 No bug, Automated HSTS preload list update from host bld-linux64-ec2-400 - a=hsts-update 2014-02-08 03:17:31 -08:00
Camilo Viecco
a59ac56b87 Bug 790809 - Add callback for in libpkix for extra app checks (in usage sslserver). r=dkeeler 2014-02-05 14:49:14 -08:00
Jed Davis
ebe6274bbf Bug 945504 - Include JS stack in sandbox reporter logs. r=kang 2014-02-07 10:46:38 -05:00
Carsten "Tomcat" Book
1fcb7ff9df merge b2g-inbound to mozilla-central 2014-02-07 09:54:06 +01:00
Brian Smith
df63e59208 Bug 921893: Verify key usage extension in insanity::pkix, r=keeler, r=cviecco
--HG--
extra : rebase_source : 1ea7626ed36cd92cdbf2aea5533e983fc0f58a44
2014-01-28 23:20:11 -08:00
Brian Smith
cc75ab6bde Bug 921892: Check basic constraints in insanity::pkix, r=keeler, r=cviecco
--HG--
extra : rebase_source : 6a5bb14c2ba8ba195dfdb207e86016577ddd836a
2014-02-06 18:13:20 -08:00
Brian Smith
c27359c631 Bug 921891, part 3: Add basic building and verification, r=keeler, r=cviecco
--HG--
extra : rebase_source : 7b01773c47445efc40941ae251d03f505f429be6
extra : source : 2a36da04b931740858d51023b2cc8ef7528ef740
2014-02-02 21:21:00 -08:00
Eric Rahm
c1dd0bb669 Bug 969126 - Fix sandbox build for b2g on OS X. r=kang 2014-02-06 16:11:53 -08:00
Carsten "Tomcat" Book
81787587f6 Merge mozilla-central to mozilla-inbound 2014-02-06 13:22:35 +01:00
Carsten "Tomcat" Book
58429da813 merge fx-team to mozilla-central 2014-02-06 12:51:21 +01:00
Daniel Holbert
9e611f121a Bug 968323: Declare prlog variables inside #ifdef PR_LOGGING instead of MOZ_LOGGING, in /security, to fix build failures in --disable-logging builds. r=briansmith 2014-02-05 22:11:26 -08:00
Daniel Holbert
5473547676 Bug 968491: Mark security/certverifier/ as FAIL_ON_WARNINGS. r=briansmith 2014-02-05 22:11:24 -08:00
Camilo Viecco
6e842a83c4 Bug 968491 helper-patch: Temporarily #ifdef out static function 'insertErrorIntoVerifyLog' to address Wunused-function build warning. r=briansmith 2014-02-05 22:11:16 -08:00
Jed Davis
230a08b7ab Bug 945498 - Use breakpad to report seccomp violations as crashes. r=ted, r=kang
Upstream issue for breakpad patch: https://breakpad.appspot.com/1114003/
2014-02-05 13:29:51 -05:00
Brian Smith
d77c548458 Bug 958916: Update to NSS 3.15.5 release candidate 0, (NSS_3_15_5_RC0), r=me
--HG--
extra : rebase_source : 03eeda2f9f6968811d69c1e44eb8dc00472d7558
2014-02-05 19:32:56 -08:00
Monica Chew
7a7febbd96 Bug 967298: Make nsIX509CertList instantiable (r=briansmith) 2014-02-03 22:25:50 -08:00
Honza Bambas
8abe5e1893 Bug 828183 - disable NTLM generic module, effectively disable arbitrary NTLMv1 in Firefox, r=bsmith 2014-02-04 01:52:55 +01:00
Brian Smith
ccd33163bb Bug 967299: Fix async/sync issue in test_ev_certs.js, r=keeler
--HG--
extra : rebase_source : bb7e0a593205ff95de35cf4eecb65ed9dc91a630
2014-02-03 16:05:33 -08:00