Commit Graph

3702 Commits

Author SHA1 Message Date
Bob Owen
a82bda1031 Bug 1256992: Initialize Windows sandbox BrokerServices before any child processes are created. r=aklotz, r=bholley, a=lizzard 2016-03-23 08:10:43 +00:00
Richard Barnes
f557d18c1b Bug 1254653 - Add telemetry to measure how often we encounter EV certificates r=keeler a=ritu
MozReview-Commit-ID: FvDpMGEJGLQ
2016-03-08 17:30:40 -05:00
ffxbld
bfab5a90cb No bug, Automated HPKP preload list update from host bld-linux64-spot-574 - a=hpkp-update 2016-03-12 04:44:17 -08:00
ffxbld
496b51f67a No bug, Automated HSTS preload list update from host bld-linux64-spot-574 - a=hsts-update 2016-03-12 04:44:14 -08:00
Cykesiopka
a1d3d64ef3 Bug 1253958 - Make getHSTSPreloadList.js and genHPKPStaticPins.js gracefully handle trailing whitespace in URL entries. r=dkeeler, a=ritu DONTBUILD
MozReview-Commit-ID: Kyc7JzxVEo0
2016-03-06 16:02:52 -08:00
Daniel Holbert
b558b91755 Bug 1253194: Suppress -Wimplicit-fallthrough clang warning for intentional fallthrough in icu_utf.cc (which is imported code). r=bobowen 2016-03-04 09:00:40 -08:00
Kai Engert
c184fdbf21 Bug 1245053, NSS_3_23_RTM, only version numbers finalized, no code changes, DONTBUILD 2016-03-03 10:53:54 +01:00
Cykesiopka
47c99a6a51 Bug 1250254 - Enable ESLint "no-throw-literal" rule for PSM. r=dkeeler
MozReview-Commit-ID: LZcitO0FTWH
2016-02-29 20:05:55 -08:00
David Keeler
0124d8c332 bug 1049969 - add symbols file for the test pkcs11 module so it works on Windows r=jcj
MozReview-Commit-ID: KRaAmd7icd8
2016-03-01 17:12:38 -08:00
Cykesiopka
9d878c5380 Bug 1250256 - Partially clean up nsSDR.cpp. r=keeler
MozReview-Commit-ID: FoS4oTjnd7F
2016-03-01 20:07:53 -08:00
Aniket Vyas
f536af3bf5 bug 1197314: Remove PR_snprintf calls in security/manager/ssl/ r=keeler
MozReview-Commit-ID: Kq5kWzC1UHU
2016-02-26 15:31:43 -08:00
David Keeler
48644bf5fb bug 1250818 - remove certificate issuer organization to common name fallback r=Cykesiopka
Before this change, if a certificate's issuer DN did not have an organization
component, nsIX509Cert.issuerOrganization would fall back to using the issuer
common name. This was never a good idea, because this gave misleading
information to consumers of this interface. Furthermore, it appears that all
consumers of this interface already do such a fallback (for display purposes)
when they've determined that it's a reasonable thing to do.

MozReview-Commit-ID: p2gmSP0nZW
2016-02-26 13:18:02 -08:00
Cykesiopka
7f7bacceb6 Bug 1173679 - Add tests for the "security.OCSP.enabled" pref. r=dkeeler
MozReview-Commit-ID: BQurIgVY8os
2016-02-28 17:49:06 -08:00
Carsten "Tomcat" Book
c8d269cfd6 merge mozilla-inbound to mozilla-central a=merge 2016-02-29 11:35:30 +01:00
Cykesiopka
d36ccebcb0 Bug 1249595 - Enable 11 more ESLint rules for PSM. r=keeler
MozReview-Commit-ID: FxS9SPRMMxf
2016-02-26 12:35:34 -08:00
Kai Engert
1f11d8252a Bug 1245053, Upgrade Mozilla 47 to use NSS 3.23, land RC0, r=me 2016-02-26 11:23:11 +01:00
Tim Taubert
230478a40e Bug 1247860 - Enable ChaCha20/Poly1305 cipher suites r=emk,keeler 2016-02-26 12:37:19 +01:00
David Keeler
82b06ed14d bug 1199850 - remove unnecessary PSM xpcshell extended key usage tests r=Cykesiopka,jcj
MozReview-Commit-ID: 8Uz4bN87872
2016-02-24 14:20:01 -08:00
Haik Aftandilian
5e3dc1e103 Bug 1237847 - [e10s] Null deref crash when running test_pluginstream_newstream.html; r=bobowen
Modify the Mac sandbox to allow temporary files to be created in a
parent-specified subdirectory of NS_OS_TEMP_DIR. This is similar to the
Windows approach. The parent provides a UUID in a preference which is
used by the content process to form the subdirectory name.

MozReview-Commit-ID: 6BONpfZz8ZI
2016-02-25 15:26:13 -08:00
Kai Engert
c28e5ae35d backing out c815269c99c8, bug 1245053, CLOSED TREE 2016-02-25 18:51:37 +01:00
Kai Engert
6256167d05 Bug 1245053, test NSS_3_23_BETA7, r=me 2016-02-25 15:35:08 +01:00
Carsten "Tomcat" Book
3379a0fb45 Merge mozilla-central to mozilla-inbound 2016-02-25 11:59:05 +01:00
Carsten "Tomcat" Book
1fd7281917 merge mozilla-inbound to mozilla-central a=merge 2016-02-25 11:57:51 +01:00
Nihanth Subramanya
b8edae8583 Bug 1201437 - Make cert override tests check for STATE_CERT_USER_OVERRIDDEN. r=keeler
MozReview-Commit-ID: G6KQPXHbEPL
2016-02-24 22:45:12 -08:00
Nihanth Subramanya
4ab2924bcd Bug 1201437 - Add new WebProgress state flag for user-overridden cert. r=keeler
MozReview-Commit-ID: cvBYSZykK0
2016-02-24 22:46:52 -08:00
Cykesiopka
4533d8e22a Bug 1248874 - Replace Scoped.h templates used only by PSM in ScopedNSSTypes.h with UniquePtr equivalents. r=dkeeler
MozReview-Commit-ID: 5OClBV522lv
2016-02-18 06:01:39 -08:00
Cykesiopka
ce336e3c96 Bug 1246365 - Enable eslint "comma-spacing" and "semi" rules for PSM. r=keeler
MozReview-Commit-ID: 7FVcD7O9mpG
2016-02-18 21:16:50 -08:00
Cykesiopka
eb7fd9a45b Bug 1220237 - Remove uses of nsIEnumerator from PSM. r=keeler
MozReview-Commit-ID: 3FhBCqnJz4n
2016-02-24 17:42:45 -08:00
Kai Engert
eb1f2b66e9 Bug 1245053, landing NSS_3_23_BETA5, r=mt 2016-02-23 00:50:19 +01:00
Ehsan Akhgari
a07f52bf8f Bug 1188045 - Part 1: Move the definition of sandboxTarget::Instance() out-of-line; r=bobowen,glandium
This is required so that delay-loading xul.dll works with clang-cl.
2016-02-22 09:55:09 -05:00
David Keeler
90740beed3 bug 1248099 - add extended key usage tests for mozilla::pkix r=Cykesiopka,jcj
MozReview-Commit-ID: 9rXn5Q1wsnx
2016-02-12 17:24:54 -08:00
David Keeler
5ae396c14a bug 1241650 - remove nsIX509CertDB.findCertNicknames r=mgoodwin
MozReview-Commit-ID: JtU7H5qGvge
2016-01-21 15:14:31 -08:00
Ben Kelly
dbc26d511e Bug 1247580 P2 Add gtest to ensure we can continue to deserialize old security info strings. r=bz 2016-02-17 07:18:00 -08:00
Ben Kelly
1eb56118ec Bug 1247580 P1 Allow old nsIX509Cert serialized objects to be read off disk. r=bz 2016-02-17 07:18:00 -08:00
Cykesiopka
c4f74176ee Bug 1247847 - Use smart pointers in nsNSSCertHelper.cpp to manage NSS resources. r=keeler
This lets us remove things like gotos in the code, and makes resource ownership slightly clearer.

MozReview-Commit-ID: Kucn7exhLd7
2016-02-16 16:25:09 -08:00
Cykesiopka
9c8c496196 Bug 1244245 - Enable eslint "curly" rule for PSM. r=keeler
Also includes minor cleanup.

MozReview-Commit-ID: CHgbTIa3s2O
2016-02-16 17:27:49 -08:00
ISHIKAWA, Chiaki
72d38a6835 Bug 1248252 - Improper outdated octal constant syntax in M-C tree. Use '0o' prefix. r=dao
Be warned. Do not attemp to change the .js "test" source code in ./js
They are meant to check

 - the outdated 0666 octal constant is still parsed correctly,
 - the outdated 0666 octal constant raises syntax error flag
   in strict mode, etc.

So leave them alone.
2016-02-15 08:57:00 +01:00
Sebastian Hengst
3f4b15c76b Backed out 2 changesets (bug 1247250) for bustage. r=bustage on a CLOSED TREE
Backed out changeset 8aded3a039f5 (bug 1247250)
Backed out changeset 374e6d0abf0e (bug 1247250)
2016-02-12 00:42:48 +01:00
Masatoshi Kimura
b1ba9a24e3 Bug 1247250 - followup: fix comments to reflect the review comment. r=keeler DONTBUILD 2016-02-12 07:43:21 +09:00
Masatoshi Kimura
0326420242 Bug 1247250 - Enable TLS 1.3 draft 11 anti-downgrade on non-secure fallback. r=keeler 2016-02-12 07:36:37 +09:00
Cykesiopka
2cfd55b0ee Bug 1243193 - Use Assert.throws() more in PSM tests. r=keeler 2016-02-10 21:40:00 +01:00
Aidin Gharibnavaz
e084f12c9a Bug 1164581 - Adding an overload for NS_ProxyRelease that accepts already_AddRefed, and removing all the others. r=bobbyholley 2016-02-10 08:23:00 +01:00
David Keeler
9e2e9d205c bug 1241564 - remove EV treatment for TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı SHA-1 root certificate r=Cykesiopka
MozReview-Commit-ID: 9ktEj2kgfYo
2016-02-09 13:30:22 -08:00
David Keeler
bc70ab383c bug 1246765 - remove unnecessary resource://app/ registration from getHSTSPreloadList.js r=Cykesiopka DONTBUILD NPOTB 2016-02-08 12:56:34 -08:00
Cykesiopka
ca95220856 Bug 503515 - Try and ensure exported certificates include an extension by default. r=keeler 2016-02-09 00:17:00 +01:00
Bob Owen
2940f9a060 Bug 1219369: In Windows debug builds allow write access to TEMP for logging purposes. r=tabraldes 2016-02-09 08:31:18 +00:00
Kai Engert
f0dd763283 Bug 1245053, land NSS_3_23_BETA4, r=me, includes a makefile change to adjust for NSS changes, patch by EKR, r=kaie 2016-02-08 16:16:25 +01:00
Carsten "Tomcat" Book
ab60132384 Backed out changeset c18e29c1b369 (bug 1164581) for cpp unit tests test failures 2016-02-08 11:17:38 +01:00
Masatoshi Kimura
eb5aa3e233 Bug 1247250 - Enable TLS 1.3 anti-downgrade on non-secure fallback. r=keeler 2016-02-24 19:35:00 +09:00
Aidin Gharibnavaz
238dcd01fc Bug 1164581 - Adding an overload for NS_ProxyRelease that accepts already_AddRefed, and removing all the others. r=bobbyholley 2016-02-07 10:56:00 +01:00