Commit Graph

1725 Commits

Author SHA1 Message Date
Wes Kocher
d73c5e3013 Backed out changeset 8526c7a38761 (bug 951354) for CPP unittest bustage 2014-01-17 17:50:17 -08:00
David Keeler
e5d8b74d4e bug 951354 - test nsNSSCertificateDB for proper shutdown r=cviecco a=abillings 2014-01-17 16:22:51 -08:00
Raymond Etornam Agbeame(:retornam)
374ffaece6 Bug 950169 - remove unused arguments for LogInvalidCertError r=keeler 2014-01-17 11:57:57 -08:00
David Keeler
9aca2e7e9a bug 950240 - don't do DV fallback for nsIIdentityInfo.isExtendedValidation r=briansmith 2014-01-17 11:04:09 -08:00
David Keeler
a421073e54 bug 947759 - unconditionally add Google sites to the HSTS preload list r=cviecco DONTBUILD NPOTB 2014-01-15 11:22:06 -08:00
David Keeler
d28656fb1a bug 959796 - refactor error reporting in getHSTSPreloadList.js r=cviecco DONTBUILD NPOTB 2014-01-15 11:20:55 -08:00
Brian Smith
8565c44c20 Bug 923304, Part 2: Adjust EV tests, r=keeler
--HG--
extra : rebase_source : f0cfd0089a99dddd8852e0613bc2a31e5c12b1de
2014-01-14 15:22:09 -08:00
Brian Smith
921c2d255a Bug 923304, Part 1: Add test for OCSP response signed by CA that has an OCSP URI, r=keeler, r=briansmith
--HG--
extra : rebase_source : 7cafe0781563382c2221e865201beb023fea3628
2014-01-13 02:33:08 -08:00
Brian Smith
36ee5b6000 Bug 950129: Make OCSP fetching policy for OCSP response signing certificates consistent, r=wtc, r=rrelyea
--HG--
extra : rebase_source : 2369fcd80eb6ed5ec7e96657cdf8b43514c8357b
2014-01-12 23:13:10 -08:00
David Keeler
dc049e658e bug 957368 - standardize and simplify nsNSSShutDownObject implementations r=cviecco r=briansmith 2014-01-14 09:28:43 -08:00
Garrett Robinson
3ceb749a52 Bug 883975 - CSP 1.1 hash-source. r=sstamm, r=dholbert, r=mrbkap 2014-01-02 11:14:06 -08:00
Brian Smith
4268442c28 Bug 957667: Decouple OCSP stapling pref from the OCSP fetching pref, and couple the OCSP required pref to the OCSP fetching pref, r=keeler
--HG--
extra : rebase_source : 86cb86f76f4def579fcf07e479025852849c34f8
extra : source : 08115711a4e6e77971c9e872fb6c68e88ac9693e
2014-01-08 08:51:06 -08:00
Brian Smith
225d0f3c9e Bug 959026: Add telemetry about cases where we don't do OCSP fetching when we expect to, r=keeler
--HG--
extra : rebase_source : f7e9826569325f497273a92eec5127c414baa8bc
extra : source : bb5bb5a1b571e54695a4c8d5be0cc447f29f0358
2014-01-12 19:31:40 -08:00
Ryan VanderMeulen
614d80980a Backed out changesets 1b892043a386 and 0e14b3468b94 (bug 923304) and changeset 2e2c276950b9 (bug 950129) for xpcshell failures. 2014-01-13 18:00:34 -05:00
Ryan VanderMeulen
4d0972315d Merge inbound to m-c. 2014-01-13 17:44:24 -05:00
Brian Smith
0d8a085890 Bug 923304, Part 2: Adjust EV tests, r=keeler
--HG--
extra : source : 97bf218ac3bb44e81074ca95877ca8b6414265b3
2013-12-28 11:28:49 -08:00
Brian Smith
a6fda06c4f Bug 923304, Part 1: Add test for OCSP response signed by CA that has an OCSP URI, r=keeler, r=briansmith
--HG--
extra : source : e7afcba6743e40755d28a296b00c395392864657
2014-01-13 02:33:08 -08:00
Brian Smith
9e081845fc Bug 950129: Make OCSP fetching policy for OCSP response signing certificates consistent, r=wtc, r=rrelyea
--HG--
extra : source : 44afac41de6a81c1e4430afa10e6f2836599ecd8
2014-01-12 23:13:10 -08:00
Brian Smith
8642936ac2 Bug 958916: Update to NSS 3.15.5 beta 1 (NSS_3_15_5_BETA1), r=me
--HG--
extra : rebase_source : 19606540e96bd00b737bc9c5782f8c445e006189
2014-01-12 22:09:19 -08:00
Patrick McManus
fa1a932713 bug 951199 - Interface for Socket Level Access to TLS Version Used r=dkeeler r=bsmith 2013-10-09 17:21:48 -07:00
Nemina Amarasinghe
fe42b2da6d Bug 946075 - Remove extra space from ssl_error_bad_cert_domain error message contains in TransportSecurityInfo.cpp. r=dkeeler 2014-01-13 09:28:14 -05:00
Brian Smith
54577ca0b6 Bug 957665: Add telemetry to measure how many people have OCSP enabled, r=keeler
--HG--
extra : rebase_source : e6dd0d7d06ce0eb5b2f34a77a851dd7c0655ac3e
2014-01-08 08:59:53 -08:00
Jed Davis
81f5ace514 Bug 945330 - Reword and slightly improve sandbox violation log message. r=kang
The main goal is to have a message that unambiguously indicates a crash,
so mozharness can grep for it even if some of the details change later.

Also now includes the entire argument list; most syscalls don't use all
six, so the last few will be meaningless, but it can't hurt to log them.
2014-01-10 08:22:58 -05:00
David Keeler
af14c1e77c bug 950268 - fix leak in nsCertTree::GetDispInfoAtIndex r=cviecco 2014-01-09 10:02:08 -08:00
Phil Ringnalda
b1d0a82ada Back out 2e7e2de7b13e (bug 948574) for b2g mochitest crashes
CLOSED TREE
2014-01-07 21:10:23 -08:00
David Keeler
312c00712f bug 948574 - remote nsISiteSecurityService::IsSecureURI r=bz 2014-01-07 11:31:30 -08:00
Brian Smith
47f12dab81 Bug 952876: Add test for bug 952808 (OCSP stapling not honored when there is a error entry in the OCSP cache), r=keeler 2014-01-06 14:45:35 -08:00
Brian Smith
34c79e6c63 Bug 933109: Add tests to verify that we retry OCSP when we have a cached Unknown response, r=keeler 2014-01-06 14:41:04 -08:00
Wes Kocher
e58ffe9455 Backed out changeset 75e5396d0847 (bug 933109) for xpcshell bustage 2014-01-06 17:50:53 -08:00
Wes Kocher
f21b041b0f Backed out changeset b8f1b1cfc9e2 (bug 952876) 2014-01-06 17:50:23 -08:00
Brian Smith
e5e4f7555e Bug 952876: Add test for bug 952808 (OCSP stapling not honored when there is a error entry in the OCSP cache), r=keeler
--HG--
extra : rebase_source : d83e4b3681b36616441e6fd412969998a19eae4c
extra : amend_source : 475bff5dd333fb54729fdace0f295c6e026c5a18
2014-01-06 14:45:35 -08:00
Brian Smith
1bd1da9540 Bug 933109: Add tests to verify that we retry OCSP when we have a cached Unknown response, r=keeler
--HG--
extra : rebase_source : 4e73c5812e75adf053f2158a88a6a8e58307c9d7
2014-01-06 14:41:04 -08:00
David Keeler
15f6ba41c8 bug 951354 - nsNSSCertificateDB: call shutdown(calledFromObject) in destructor r=cviecco a=abillings 2013-12-19 11:45:50 -08:00
Brian Smith
94ac987daf Bug 898431: Update NSS to NSS 3.15.4 RTM (NSS_3_15_4_RTM), r=me 2014-01-06 14:31:01 -08:00
Ehsan Akhgari
ebd358dfd7 Bug 927728 - Part 1: Replace PRUnichar with char16_t; r=roc
This patch was automatically generated by the following script:

#!/bin/bash
# Command to convert PRUnichar to char16_t

function convert() {
echo "Converting $1 to $2..."
find . ! -wholename "*nsprpub*" \
       ! -wholename "*security/nss*" \
       ! -wholename "*modules/libmar*" \
       ! -wholename "*/.hg*" \
       ! -wholename "obj-ff-dbg*" \
       ! -name prtypes.h \
       ! -name Char16.h \
         -type f \
      \( -iname "*.cpp" \
         -o -iname "*.h" \
         -o -iname "*.c" \
         -o -iname "*.cc" \
         -o -iname "*.idl" \
         -o -iname "*.ipdl" \
         -o -iname "*.ipdlh" \
         -o -iname "*.mm" \) | \
    xargs -n 1 sed -i -e "s/\b$1\b/$2/g"
}

convert PRUnichar char16_t
2014-01-04 10:02:17 -05:00
ffxbld
1e84c8d649 No bug, Automated HSTS preload list update from host bld-linux64-ec2-441 - a=hsts-update 2014-01-04 03:20:04 -08:00
ffxbld
1b45db05aa No bug, Automated HSTS preload list update from host bld-linux64-ec2-018 - a=hsts-update 2013-12-28 03:23:00 -08:00
Brian Smith
e3fcf76058 Bug 898431: Update NSS to NSS 3.15.4 beta 10 (NSS_3_15_4_BETA10), r=me 2013-12-21 23:15:41 -08:00
ffxbld
4b0fae6f2f No bug, Automated HSTS preload list update from host bld-centos6-hp-016 - a=hsts-update 2013-12-21 03:14:20 -08:00
Wan-Teh Chang
d2b3e048e1 Bug 898431: Update NSS to NSS_3_15_4_BETA9. Includes the fixes for
bug 946147, bug 930874, bug 930857, bug 934545, bug 915408.
2013-12-20 12:01:06 -08:00
Gregory Szorc
158ed8b3ec Bug 774572 - Part 2: Define JAR_MANIFESTS in moz.build files; r=glandium
Every directory with a jar.mn now has JAR_MANIFESTS defined in its
moz.build file.

We also removed the may_skip special consideration of jar.mn files
because this information is now available during tier traversal by the
reader courtesy of the variables being present in moz.build files.

--HG--
extra : rebase_source : 21049b15e6bd9cf65b0805ccaccc4ba5aae93c98
extra : amend_source : 0b1ea866d725beef92d37c6f6d475369ac002e19
2013-12-10 16:18:11 +09:00
David Keeler
018e03fe74 bug 887321 - initial OCSP stapling telemetry r=briansmith 2013-12-16 09:32:16 -08:00
Trevor Saunders
907dfc4528 bug 949821 - use MOZ_UTF16 more and NS_LITERAL_STRING less r=froydnj 2013-12-12 20:50:01 -05:00
Raymond Etornam Agbeame
b6a36ce552 Bug 945857: Remove the security.fresh_revocation_info.require preference, r=briansmith 2013-12-16 00:09:21 -08:00
Phil Ringnalda
3a1d0374aa Merge m-i to m-c 2013-12-14 18:20:38 -08:00
ffxbld
f00e1e651f No bug, Automated HSTS preload list update from host bld-linux64-ix-037 - a=hsts-update 2013-12-14 03:18:03 -08:00
David Keeler
183762aa4e bug 950253 - fix typo in getHSTSPreloadList.js r=briansmith DONTBUILD because NPOTB 2013-12-13 16:06:54 -08:00
Bobby Holley
a7395d2ec6 Bug 937317 - Replace all instance of null cx pushing with AutoSystemCaller. r=bz
This is an easy bonus chunk of the work to phase out cx pushing in the browser.
2013-12-11 17:51:58 -08:00
Camilo Viecco
e92b932f63 Bug 938046 - Part 4. Tests for consistency of getchain and getissuer. r=dkeeler 2013-11-21 13:50:51 -08:00
Camilo Viecco
1ee1446f11 Bug 938046 - Part 3. Iterate only through valid users on getchain r=dkeeler 2013-12-11 13:04:07 -08:00
Camilo Viecco
0158164ec2 Bug 938046 - Part 2. Get issuer uses getchain to comput issuer. r=dkeeler 2013-11-21 13:50:49 -08:00
Camilo Viecco
bdf275bc24 Bug 938046 - Part 1. Iterate through variable not over const. r=dkeeler 2013-11-21 13:45:20 -08:00
Cykesiopka
a856c7f1a1 Bug 910986 - Fix cert trust editing in People tab of Cert Manager. r=dkeeler 2013-12-10 10:36:47 -05:00
Cykesiopka
d659aa3ac8 Bug 539710 - Use char16_t ',' instead of NS_LITERAL_STRING in nsNSSCertificate.cpp. r=dkeeler 2013-12-10 10:36:31 -05:00
Ryan VanderMeulen
ca386608b9 Merge b2g-inbound to m-c. 2013-12-09 17:26:11 -05:00
Camilo Viecco
b10aaf2d3e Bug 936808 - Serialize calls to PK11 routines in SSLServerCertVerification. r=briansmith 2013-12-09 09:12:47 -08:00
Birunthan Mohanathas
759ab69b0a Bug 713082 - Part 2: Rename Util.h to ArrayUtils.h. r=Waldo
--HG--
rename : mfbt/Util.h => mfbt/ArrayUtils.h
2013-12-08 21:52:54 -05:00
Brian Smith
d64b1c97c0 Bug 942152, r=dkeeler, r=honzab
--HG--
extra : rebase_source : 7f0bab4efa26e9c185b29fdb14d846035147fd2f
2013-12-05 20:33:49 -08:00
Phil Ringnalda
e2e1627d17 Back out 35371620801a:bf2019278b77 (bug 937317) for gaia-ui-test bustage and frequent timeouts in its own test 2013-12-07 11:08:56 -08:00
ffxbld
3c0a9dc3b1 No bug, Automated HSTS preload list update from host bld-linux64-ec2-351 - a=hsts-update 2013-12-07 03:22:31 -08:00
Camilo Viecco
df14c5d1d1 Bug 945349 - CertVerifier should check early for bad usages. r=briansmith 2013-12-06 13:42:44 -08:00
Vicamo Yang
02b63a0803 Bug 944625 - B2G Emulator-x86: fix undeclared __NR_socketpair, __NR_sendmsg. r=kang,jld 2013-12-09 21:02:54 +08:00
Bobby Holley
4d56f0a83d Bug 937317 - Replace all instance of null cx pushing with AutoSystemCaller. r=bz
This is an easy bonus chunk of the work to phase out cx pushing in the browser.
2013-12-06 12:01:42 -08:00
Raymond Etornam Agbeame
d183132bf1 Bug 945855: Remove the security.first_network_revocation_method pref, r=briansmith
--HG--
extra : rebase_source : e416ba1e78f95234d403c078ad81b5fddcce947a
extra : amend_source : 7adbe291df748b5a6d1f1122573e862bdc5f5f11
2013-12-06 00:55:17 -08:00
Cykesiopka
437fb46beb Bug 945851: Remove pref for showing dialog box when NSS initialization fails, r=briansmith
--HG--
extra : rebase_source : 1142d1775b8846e8bd46109affc62df262e598d4
2013-12-06 00:12:08 -08:00
Carsten "Tomcat" Book
f0d2b953c5 Backed out changeset 374e44c835a8 (bug 937317) WinXP Build Bustage on a CLOSED TREE 2013-12-06 08:41:42 +01:00
Chris Peterson
e77c67135d Bug 946116 - Remove unused isResumedSession variable from nsNSSCallbacks.cpp. r=bsmith 2013-12-03 21:07:29 -08:00
Bobby Holley
c8308277c1 Bug 937317 - Replace all instance of null cx pushing with AutoSystemCaller. r=bz
This is an easy bonus chunk of the work to phase out cx pushing in the browser.
2013-12-05 21:34:17 -08:00
Camilo Viecco
887aa6047d Bug 585122 - In PSM provide EV only with OCSP revocation (Part 2: tests). r=briansmith. 2013-12-02 11:12:21 -08:00
Camilo Viecco
a1040bf48f Bug 585122 - Part 1. EV do not request CRL. r=briansmith. 2013-12-02 11:08:06 -08:00
Brian Smith
218399d1f3 Bug 898431: Update to NSS 3.15.4 beta 8 (NSS_3_15_4_BETA8), r=me 2013-12-05 07:27:11 -08:00
Brian Smith
819884c576 Bug 898431: Update to NSS 3.15.4 beta 7 (NSS_3_15_4_BETA7), r=me
--HG--
extra : rebase_source : 51f5e01db5d8dec46f341e217fa2ba97382c723c
extra : amend_source : 04d8a9e4a861228c217b9d766cd8781d49ed496f
2013-12-04 20:51:58 -08:00
Brian Smith
8dcf3ae739 Bug 898431: Update NSS to NSS 3.15.4 beta 6 (NSS_3_15_4_BETA6), r=me
--HG--
extra : rebase_source : 9f497ceb1c74fbf15938171229f5a7339e277333
2013-12-03 20:04:07 -08:00
Steffen Wilberg
7542ae498f Bug 945871: Remove the security.ssl3.ecdh_* preferences, r=briansmith
--HG--
extra : rebase_source : 39f680c48ae198263af61b8c2cc07bdb7dc829a7
2013-12-03 18:56:33 -08:00
Jed Davis
d1ffa9058b Bug 943774 - Allow sigaction when sandboxed, for the crash reporter. r=kang 2013-12-03 18:45:17 -05:00
Ryan VanderMeulen
375ca823e3 Merge m-c to inbound. 2013-12-03 17:42:20 -05:00
Mike Hommey
2827b48400 Bug 937005 - Make the original fix actually do something. r=ted 2013-12-04 07:15:40 +09:00
Cykesiopka
f5adbcaf50 Bug 915937 - Cleanup #defines in nsNSSComponent.cpp and change them to static consts. r=bsmith 2013-12-03 15:23:27 -05:00
Nathan Froyd
2b73940866 Bug 942109 - constify PLDHashTableOps in security/manager/; r=briansmith 2013-11-20 13:42:08 -05:00
Camilo Viecco
f577979fe4 Bug 942918 - remove ev tests that use crl for revocation check. r=dkeeler 2013-12-02 15:20:24 -08:00
Mike Hommey
bf60896454 Bug 943728 - Replace double quotes with single quotes in Makefiles (or remove them when it makes sense). r=mshal 2013-12-03 06:34:21 +09:00
Brian Smith
7f355c58e6 Bug 945195: Do insecure fallback from TLS 1.0 to SSL 3.0 when we receive a FIN during the initial handshake, r=honzab
--HG--
extra : rebase_source : d10091aea21f7d552f682d54383bf43ece7633ed
2013-12-02 10:48:06 -08:00
Ajitesh Gupta
6b707d4378 Bug 917047: Remove the security.enable_md5_signatures pref, r=briansmith
--HG--
extra : rebase_source : ae721bc7f91b399e61c2efb869e15ab902c810e0
2013-11-19 16:05:26 -08:00
ffxbld
a3292f8191 No bug, Automated HSTS preload list update from host bld-linux64-ec2-170 - a=hsts-update 2013-11-30 03:19:19 -08:00
Ms2ger
f56294acdb Bug 937258 - Part a: Remove empty makefiles; r=gps 2013-11-28 15:25:40 +01:00
Mike Hommey
9245936f8b Bug 874266 - Move all DEFINES that can be moved to moz.build. r=mshal 2013-11-27 22:55:07 +09:00
Mike Hommey
2b828323f2 Backout changeset 3fd4b546eed4 (bug 874266) and changeset a35d2e3a872f (bug 942043) for ASAN build bustage and Windows test bustage
--HG--
extra : amend_source : f20d09aeff1c8b5cbd0f1d24c7ce04e86f3aed1d
2013-11-28 14:24:05 +09:00
Mike Hommey
d210f8ff00 Bug 874266 - Move all DEFINES that can be moved to moz.build. r=mshal 2013-11-28 13:08:16 +09:00
Camilo Viecco
a930076740 Bug 917380 - part2 - test ensure disabled ev root certs remain untrusted. r=briansmith 2013-10-29 14:56:34 -07:00
Camilo Viecco
01b5a10348 Bug 917380 - Part 1 - Add filters for EV root list. r=briansmith 2013-10-21 14:27:46 -07:00
Camilo Viecco
4867756afe Bug 927016 - Create EV testsuite in xpcshell. r=keeler 2013-11-21 13:40:31 -08:00
Brian Smith
4a26265906 Bug 898431: Update NSS to NSS 3.15.4 beta 5 (NSS_3_15_4_BETA5), r=me 2013-11-26 20:21:14 -08:00
David Keeler
4ca8cde553 bug 929617 - disregard expired stapled OCSP responses, acquire fresh ones r=briansmith 2013-11-25 15:40:11 -08:00
David Keeler
199e914302 bug 943115 - return early in CreateCertErrorRunnable for non-overridable errors r=briansmith 2013-11-26 13:49:47 -08:00
Patrick McManus
1cf2a2c447 Bug 942729, Part 2: Remove unused expected symmetric cipher mechanism, r=briansmith
--HG--
extra : rebase_source : 9630808b663d6a670c2e45d242177a640817f2ee
2013-11-25 18:12:40 -05:00
Brian Smith
1af2ea48ab Bug 942729, Part 1: Re-enable TLS False Start, r=mcmanus
--HG--
extra : rebase_source : 9908b1cbc3a30e9868739a10a705de8dbf30c5e1
2013-11-20 13:49:33 -08:00
Ehsan Akhgari
d6792974b0 Bug 942033 - Build security/manager in unified mode; r=bsmith
--HG--
extra : rebase_source : d48b78001772e0421a6dfc2ecd204434c33cd2d4
2013-11-26 13:18:21 -05:00
Mike Hommey
62cde4eed8 Bug 940407 - Kill GTEST_SOURCES. r=gps 2013-11-26 11:48:58 +09:00
Brian Smith
039c1380a4 Bug 898431: Update NSS to NSS 3.15.4 beta 4 (NSS_3_15_4_BETA4), r=me
--HG--
extra : rebase_source : 72f78bad585cdb1e09b5ebd1f7d0ba0e713de677
2013-11-25 17:08:17 -08:00
Brian Smith
d0a8f7663c Bug 942728 - Fix telemetry for cipher suites and crypto algorithms andkey sizes, r=keeler, a=lsblakk
--HG--
extra : rebase_source : bd0bc0d67fe811612df4210b2b5e19f1d5eca5a0
2013-11-21 13:35:23 -08:00
Phil Ringnalda
9710fc9cf4 Merge m-i to m-c 2013-11-23 08:18:35 -08:00
ffxbld
38118fee51 No bug, Automated HSTS preload list update from host bld-linux64-ix-034 - a=hsts-update 2013-11-23 03:17:46 -08:00
David Keeler
c4a1548118 bug 909044 - make generate_certs.sh work on windows r=briansmith DONTBUILD NPOTB 2013-11-22 11:03:34 -08:00
Camilo Viecco
1779a62ab0 Bug 938805 - Create standalone oscpResponseGenerator for testing. r=keeler 2013-10-29 14:02:35 -07:00
Richard Newman
09fc24021c Bug 935831 - Back out Bug 927230 for Android 2.3 startup crash, r=briansmith
--HG--
extra : rebase_source : 5b8ff8da93a882d6c8303c26d234ad63b748389c
2013-11-20 17:05:55 -08:00
Brian Smith
3621df35cd Bug 898431: Clean up security/patches to remove references to the private false start patch that is no longer applied, r=me, a=NPOTB
--HG--
extra : rebase_source : 94ee34c96357666e6c6d266fe9029af1d977a940
2013-11-20 17:05:24 -08:00
Christoph Kerschbaumer
ad08ffe884 Bug 935111 - Enable seccomp-bpf for Linux. r=jld 2013-11-19 16:09:18 -08:00
Patrick McManus
a64352d983 bug 802649 network priority for ocsp r=bsmith r=honzab
--HG--
extra : rebase_source : 17554ab7627e1d42a4736078254f94f36cf9c48b
2013-11-20 09:57:56 -05:00
Camilo Viecco
922b598103 Bug 912155 - Adding new interface in nssCertifcateDB for testing. r=bsmith 2013-11-11 16:37:06 -08:00
Mike Hommey
a65383e1e9 Bug 939632 - Remove LIBRARY_NAME for leaf libraries. r=gps
Landing on a CLOSED TREE.
2013-11-19 11:50:54 +09:00
Mike Hommey
8ceb917350 Bug 939074 - Remove most LIBXUL_LIBRARY. rs=gps 2013-11-19 11:48:10 +09:00
Mike Hommey
b95448fc0b Bug 914245 - Move FORCE_SHARED_LIB to moz.build. r=mshal 2013-11-19 11:47:45 +09:00
Mike Hommey
9fe772e7fd Bug 939044 - Rename remaining MODULE definitions to XPIDL_MODULE. r=mshal 2013-11-19 11:47:43 +09:00
Mike Hommey
bb6779efe3 Bug 939044 - Remove most definitions of MODULE. r=mshal 2013-11-19 11:47:39 +09:00
Mike Hommey
d7b6f95761 Bug 935881 - Use FINAL_LIBRARY for all (fake) libraries that end up linked in a single other library. r=gps 2013-11-19 11:47:14 +09:00
Camilo Viecco
ac92dc4190 Bug 935769: Fix shutdown locks for nssCerList and nssCertListEnumerator. r=bsmith 2013-11-11 15:16:45 -08:00
Landry Breuil
c9b75df3f7 Bug 939498 - Properly include <algorithm> for std::max. r=bsmith 2013-11-18 11:04:13 +01:00
Brian Smith
db5e56dfcb Bug 901718, Part 2: fix comment, r=me 2013-11-17 14:00:00 -08:00
Brian Smith
28c2d9c5d5 Bug 934663 followup: fix unused variable warning, r=me
--HG--
extra : rebase_source : e343b569df4d313f0f5f65fc82de99b9ea5b2ba9
2013-11-17 13:53:18 -08:00
Brian Smith
756bf5d8e7 Bug 901718: Remove TLS intolerance fallback from TLS 1.0 to SSL 3.0 for connection resets, r=honzab
--HG--
extra : rebase_source : 304e73126b66ae2e1a9fa6ae4c0cc3fa803aaac0
2013-11-17 13:51:37 -08:00
Brian Smith
00fb081b00 Bug 898431: Update to NSS 3.15.4 beta 3 (NSS_3_15_4_BETA3), r=me
--HG--
extra : rebase_source : a6dd976f23ebdd33dcf6fd26e4752ddb2bbc5363
2013-11-17 13:50:25 -08:00
Brian Smith
f9eb567f1a Bug 707275, Part 2: Add telemetry for cipher suites and key sizes, r=keeler
--HG--
extra : rebase_source : bd5f91877de357b415b6f143eccc87434d72db2b
2013-11-17 13:47:30 -08:00
Brian Smith
d5514d5bd0 Bug 707275, Part 1: Add telemetry for TLS intolerance, r=keeler
--HG--
extra : rebase_source : 8331f1486ad764838812ea500742a97fbc025858
2013-11-17 13:47:23 -08:00
Tom Schuster
f311064c6e Bug 933834 - Rename and handlify JS_ValueToString. r=terrence,bz 2013-11-16 13:31:36 +01:00
Ms2ger
6b38d3ca3d Backout changesets ded0d64f6786:03f041d03f24 and 30cbd1abde1a (bug 935696, bug 933834 and bug 939194) for build bustage. 2013-11-17 16:39:25 +01:00
Tom Schuster
dd485f9336 Bug 933834 - Rename and handlify JS_ValueToString. r=terrence,bz 2013-11-16 13:31:36 +01:00
Mike Hommey
213db4cc18 Bug 937005 - Install folded import library in the SDK. r=bsmedberg 2013-11-16 13:39:01 +09:00
Chris Peterson
e98e016e4f Bug 937459 - Remove unused private fields from nsNSSSocketInfo class. r=briansmith 2013-11-11 14:06:29 -08:00
Garrett Robinson
2046aafb3c Bug 932116 - Allow copying certificate viewer text. r=dkeeler, r=bsmedberg 2013-11-13 17:39:48 -08:00
Brian Smith
f89cf3237b Bug 932176: Add preference to control whether OCSP GET is used, off by default, r=cviecco
--HG--
extra : rebase_source : 4452d8959f22152512ed428184726c9834f6e4c3
2013-11-12 18:28:20 -08:00
Brian Smith
1ffb658968 Bug 898431: Update NSS to NSS 3.15.4 beta 2 (NSS_3_15_4_BETA2) again, r=me
--HG--
extra : rebase_source : 52c384c2f55da38d9576414a3c6e07427abd7000
2013-11-12 18:26:49 -08:00
Brian Smith
25f9e0dd0e Bug 937721, Part 3: Back out cset 61fb80e560de (NSS_3_15_4_BETA1, bug 898431), r=kaie 2013-11-12 11:45:48 -08:00
Brian Smith
ef07cd2e0d Bug 937721, Part 2: Back out cset 61fb80e560de (NSS_3_15_4_BETA2, bug 898431), r=kaie
--HG--
extra : rebase_source : 9b588bc5ba6e6a8ddd630e22ddf27667d6951edd
2013-11-12 11:27:59 -08:00
Brian Smith
30b1565bae Bug 937721, Part 1: Back out cset 8dbd3f432835 (bug 932176), r=kaie
--HG--
extra : rebase_source : 80f4b7ee7e4f77ef92cb42e6163f95074d68d306
2013-11-12 11:25:55 -08:00
David Keeler
351ae40bdc bug 932519 - (3/3) add an optional additional cert name as a parameter to GetOCSPResponseForType r=cviecco r=briansmith 2013-11-11 13:36:29 -08:00
David Keeler
a2409d20fd bug 932519 - (2/3) rename OCSP response generation test code to remove "stapling" r=cviecco r=briansmith 2013-11-11 13:42:35 -08:00
David Keeler
05787ee46f bug 932519 - (1/3) move common OCSP response generation test code for refactoring r=cviecco r=briansmith
--HG--
rename : security/manager/ssl/tests/unit/tlsserver/cmd/OCSPStaplingServer.cpp => security/manager/ssl/tests/unit/tlsserver/lib/OCSPCommon.cpp
rename : security/manager/ssl/tests/unit/tlsserver/cmd/OCSPStaplingServer.cpp => security/manager/ssl/tests/unit/tlsserver/lib/OCSPCommon.h
2013-11-11 13:43:04 -08:00
David Keeler
af97bf4e6f bug 935618 - (2/2) generateCRMFRequest: test using a bad popcert parameter r=cviecco 2013-11-07 13:33:58 -08:00
David Keeler
abf7bbfe3e bug 935618 - (1/2) check for an ec certificate in nsConvertToActualKeyGenParams r=cviecco 2013-11-07 13:34:59 -08:00
Jacob Acord
cd8b6c36c4 Bug 934673 - Fix nsRandomGenerator::GenerateRandomBytes can leak r=keeler 2013-11-11 14:38:37 -08:00
Jed Davis
bdf5094b93 Bug 936163 - Fix profiling-specific sandbox whitelist for x86_64. r=kang
There is no sigaction, only rt_sigaction.
2013-11-08 13:30:05 -08:00
Jed Davis
7a807d7a56 Bug 936252 - Augment seccomp whitelist for b2g mochitests. r=kang
FormHistory invokes sqlite3, which calls fsync and geteuid.
A form test calls nsIFile's remove method, which uses lstat.
The crash reporter uses socketpair/sendmsg, to send a pipe back to the parent.
2013-11-11 09:11:43 -05:00
Brian Smith
bf931cd331 Bug 934378, Bug 898431: Update NSS to NSS 3.15.4 beta 2 (NSS_3_15_4_BETA2), r=me
--HG--
extra : rebase_source : 079854e8533b46d24184547c1424078cfb68852f
2013-11-09 11:02:17 -08:00
Brian Smith
44c48384aa Bug 934663: Enable AES-GCM cipher suites; disable SEED, ECDH_*, and FIPS, and DSS+Camellia cipher suites, r=cviecco
--HG--
extra : rebase_source : a1542ba09258448e571109bc4aa6423cd9ad616a
2013-11-01 05:20:03 -07:00
Brian Smith
8f278c6de0 Bug 934327: Give OCSP-related NSS errors symbolic names in xpcshell tests, r=keeler
--HG--
extra : rebase_source : 10bd4842f16a6a4e1cbd8d50505a70a6502d9581
2013-10-14 21:36:18 -07:00
Garrett Robinson
fcd3642ac2 Bug 855326 - CSP 1.1 nonce-source for scripts and styles r=mrbkap r=dholbert r=geekboy 2013-11-08 15:44:39 -08:00
Carsten "Tomcat" Book
15d2893d44 Merge mozilla-central to mozilla-inbound 2013-11-09 12:25:41 +01:00
ffxbld
8f25c19a66 No bug, Automated HSTS preload list update from host bld-linux64-ec2-173 - a=hsts-update 2013-11-09 03:19:13 -08:00
Jed Davis
5b0c9a29cf Bug 936145 - Clean up architecture-specific parts of seccomp whitelist. r=kang 2013-11-08 15:31:20 -05:00
Daniel Holbert
a943af2236 backout 57213b64023b (bug 855326) for build bustage in debug builds
CLOSED TREE
2013-11-08 11:22:36 -08:00