Vicamo Yang
459e5b28cf
Bug 944625 - B2G Emulator-x86: fix undeclared __NR_sendto, __NR_recvfrom. r=jld,kang
2014-03-13 13:44:43 +09:00
Wes Kocher
a07bbe4b3e
Merge m-c to b-i
2014-03-12 21:22:36 -07:00
Jed Davis
8518d7e52b
Bug 977859 - Drop uid 0 in all content processes immediately after fork. r=bent r=kang
...
Now all regular child processes, including preallocated, are deprivileged.
Only Nuwa needs uid 0, because each of its children has a different uid/gid.
2014-03-12 15:48:15 -07:00
David Keeler
10839e2fec
bug 915932 - cache OCSP responses when using insanity::pkix r=cviecco r=briansmith
2014-03-12 13:08:48 -07:00
David Keeler
d11318bf9c
bug 982403 - separate the compilation of certverifier and insanity::pkix r=cviecco r=briansmith
...
--HG--
rename : security/certverifier/moz.build => security/insanity/moz.build
2014-03-12 13:08:18 -07:00
Camilo Viecco
5d919b2c6e
Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
2014-02-26 14:41:02 -08:00
Brian Smith
b7633c8def
Bug 982761 - Fix linkage of _1 placeholder in std::bind polyfill. r=briansmith
2014-03-13 16:55:28 -07:00
David Keeler
593fdbe455
Bug 974715 - Create more flexible OCSP response generation code. r=briansmith, r=cviecco
2014-03-10 14:04:31 -07:00
Brian Smith
d0a2191cd6
Bug 947584: Use official IANA names for cipher suites in PSM, r=cviecco
...
--HG--
extra : rebase_source : fafec912dc96480cb4f00bddec00d40e5e9db088
2014-03-09 20:21:12 -07:00
Brian Smith
82177fc272
Bug 967153: Update to NSS 3.16 beta 5 (NSS_3_16_BETA5), r=me
...
--HG--
extra : rebase_source : 8dfdcd121214b084acc01025a2cd989ccf6a603c
2014-03-09 19:40:25 -07:00
ffxbld
e00ef3a7af
No bug, Automated HSTS preload list update from host bld-linux64-spot-041 - a=hsts-update
2014-03-08 04:29:12 -08:00
Landry Breuil
576df297f4
Bug 980848: use c-style comments in c files r=cviecco DONTBUILD
2014-03-07 18:32:11 +01:00
Jed Davis
bd32e9135c
Bug 979686 - Fix the non-(ARM|x86|x86_64) desktop build. r=kang
2014-03-06 12:23:06 -08:00
Luke Wagner
af4251da97
Bug 980180 - remove principals as an argument to compilation, part 2 (r=terrence)
...
--HG--
extra : rebase_source : 86791b50b4293ba5506f1e0f5c64730338f552e6
2014-03-06 16:28:07 -06:00
Vaibhav Agarwal
f0bd81877d
Bug 970925 - convert testing/mochitest/android.json into skip-if statements in mochitest.ini files; r=jmaher
2014-03-06 13:42:47 -05:00
Brian R. Bondy
ff0c2873b4
Bug 941110 - Make the Windows sandbox code compile without the Win8 SDK. r=jimm
2014-03-06 12:53:24 -05:00
Ted Mielczarek
f65444d5b1
Bug 977699 - Move the few remaining mochitests to manifests. r=jmaher
2014-03-04 15:54:31 -05:00
Jed Davis
f6ffcce7a8
Bug 946407 - Disable sandbox when DMDing. r=njn r=kang
...
See also bug 956961.
2014-03-04 18:27:14 -08:00
Ehsan Akhgari
444a26ed8e
Bug 976896 - Port STL_FLAGS to moz.build; r=mshal
2014-03-04 19:39:06 -05:00
David Keeler
e8ea24a4a6
bug 978797 - stop classifying SEC_ERROR_INADEQUATE_KEY_USAGE as a "bad cert" error r=briansmith
2014-03-03 15:39:07 -08:00
Brian Smith
15433c7191
Bug 967153: Update to NSS 3.16 beta 4 (NSS 3_16_BETA4), r=me
...
--HG--
extra : rebase_source : 192fdf657daa1aae51d9f163b074b8eb6a7aac13
2014-03-02 17:30:39 -08:00
Brian Smith
06c3b6575e
Bug 978117: Enable test_signed_apps.js and test_signed_apps-marketplace.js on Android and B2G, r=cviecco
...
--HG--
extra : rebase_source : acc33b667f19583d94d300d4e4a73cb3e225bbd6
2014-03-01 20:55:57 -08:00
Brian Smith
7b3fbf17ce
Bug 978528: Return the correct error message when no potential issuers are found during path bulding in insanitY::pkix, r=cviecco
...
--HG--
extra : rebase_source : 71f806312ad322bc2971e7efaea2da217b07efad
2014-03-01 20:55:51 -08:00
Brian Smith
9774eaf9ce
Bug 978120: Enable more PSM xpcshell tests on Android and B2G, r=keeler
...
--HG--
extra : rebase_source : 439914322f2b2f2ebd7bf529e3a4a59f36831a7e
2014-03-01 19:02:58 -08:00
Brian Smith
ae6b048991
Bug 978120: Make nsIX509Cert.setCerttrust, and nsIX509CertDB.addCert, and nsIX509CertDB2.addCertFromBase64 work on Android and B2G, r=keeler
...
--HG--
extra : rebase_source : 5582716fe0c650366e3cf5e85a30748a7d22b156
2014-03-01 19:01:23 -08:00
Ed Morley
8362582b2a
Merge latest green inbound changeset and mozilla-central
2014-03-03 14:44:44 +00:00
ffxbld
242b919b95
No bug, Automated HSTS preload list update from host bld-linux64-spot-483 - a=hsts-update
2014-03-01 03:17:30 -08:00
Ryan VanderMeulen
433c5de893
Merge m-c to inbound.
2014-02-28 10:15:57 -05:00
Carsten "Tomcat" Book
67109b9a5c
merge b2g-inbound to mozilla-central
2014-02-28 14:42:11 +01:00
Wes Kocher
45d489c9d5
Merge m-c to b2g-inbound
2014-02-27 17:47:32 -08:00
Jed Davis
cffac485ff
Bug 970676 - Turn on sandboxing on all relevant threads. r=dhylands r=bent f=kang
2014-02-27 13:18:01 -08:00
Brian Smith
57f5275a64
Bug 978111, Bug 978426: Disable test_sts_preloadlist_perwindowpb.js on B2G/ARM, a=bustage
...
--HG--
extra : rebase_source : 434af7dc53cf57eca1335a6e0ad0a4785c547e72
2014-02-28 21:12:07 -08:00
Brian Smith
632820cb94
Bug 978185: Improve error codes returned from nsIX509CertDB.addCert and nsIX50CertDB.setCertTrust, r=keeler
...
--HG--
extra : rebase_source : e32a913f085524d113b17d03917c10ad92c7f6e1
2014-02-28 11:19:38 -08:00
Brian Smith
d13619f4f5
Bug 978111: Enable already-working PSM xpcshell tests on Android and B2G, r=cviecco
...
--HG--
extra : rebase_source : c14ef67870f2b40a3319e6bc8df0ddfe9dd222e3
2014-02-28 11:16:16 -08:00
Ehsan Akhgari
5df2a9cacc
Bug 976898 - Move the sdkdecls.h force-include out of the build system; r=bbondy,glandium
2014-02-28 08:17:22 -05:00
Brian Smith
41a03326ab
Bug 967153: Update to NSS 3.16 beta 3 (NSS_3_16_BETA3), r=me
...
--HG--
extra : rebase_source : 75c78b361f887c2cb820bc41913bcf68de15f83f
extra : histedit_source : 7c8e8a79c9dde7c702ceb5ce1e4a73f2a77fbea5
2014-02-27 16:06:22 -08:00
Andrew McCreight
c479f2a541
Bug 962608 - Make PL_DHashTableInit infallible by default. r=briansmith,bsmedberg,ehsan,froydnj,jduell,jfkthame,roc,smaug
2014-02-27 10:04:09 -08:00
Brian Smith
6dedccaf4a
Bug 921885: Use insanity::pkix for EV cert verification when insanity::pkix is the selected implementation, r=cviecco, r=keeler
...
--HG--
extra : rebase_source : b1fd1f8eace675484b3c2d568e5e74f767f1d2ad
2014-02-23 22:15:53 -08:00
Brian Smith
8f77f9a85d
Bug 921886: Add certificate policiy support to insanity::pkix, r=keeler, r=cviecco
...
--HG--
extra : rebase_source : 6522e2c2f57f59fe23c0ed0c838f1f54236bdafc
2014-02-24 12:37:45 -08:00
Brian Smith
95531c3f3b
Bug 970810: Expand name constraint tests to test insanity::pkix, r=cviecco
...
--HG--
extra : rebase_source : b8190690743a12623c7524429215fc7d8a8dea49
extra : histedit_source : fd9877f98303dd237b302e6c606ca11f4c36fd7c
2014-02-25 01:15:52 -08:00
Camilo Viecco
28701723f5
Bug 900727: Add name constraints to psm in xpcshell. r=bsmith
2013-12-12 10:28:06 -08:00
Brian Smith
26540bda32
Bug 975122: Allow cert error overrides when insanity::pkix is used, r?cviecco, r?keeler
...
--HG--
extra : rebase_source : 47f5e779a16c462e40baa2d9cec2e83946c9076c
2014-02-22 19:08:06 -08:00
Raymond Etornam Agbeame(:retornam)
9e9e8b80a4
Bug 970614 - Remove code wrapped in #if 0 ... #endif blocks in PSM. r=keeler
2014-02-24 09:41:55 -05:00
Jed Davis
971a5e4c91
Bug 971128 - Add sched_yield to seccomp whitelist. r=kang
2014-02-22 18:58:59 -08:00
Jed Davis
5fbea02293
Bug 970562 - Add sched_getscheduler to seccomp whitelist. r=kang
2014-02-22 18:58:59 -08:00
Ehsan Akhgari
790a3e8ead
Bug 935778 - Part 0.3: Spray some more MOZ_DECLARE_REFCOUNTED_TYPENAME across the tree
2014-02-20 23:07:24 -05:00
David Keeler
a3a30a42d7
bug 969479 - only prevent TLS fallback for STARTTLS r=briansmith
2014-02-20 15:14:32 -08:00
Brian R. Bondy
281d63981a
Bug 974979 - Browser crashes after trying to restart a crashed e10s process. r=aklotz
2014-02-20 12:58:04 -05:00
Brian R. Bondy
c4729b25c5
Bug 928061 - Enable separate Desktop in Windows sandbox policy. r=aklotz
2014-02-20 12:37:22 -05:00
Jed Davis
b66661141a
Bug 974230 - Adjust sandbox so that socket() simply fails. r=kang
...
This is a workaround for issues with the SCTP code (bug 969715) and
NSPR's IPv6 support (bug 936320).
2014-02-20 09:35:44 -05:00
Jed Davis
bebcd8c470
Bug 966547 - Switch sipcc from named to anonymous sockets on Unix. r=jesup, r=kang
2014-02-20 09:35:26 -05:00
Jed Davis
3c6de73e43
Bug 974227 - Allow readlink while sandboxed to work around bug 964455. r=kang
2014-02-19 15:55:42 -05:00
Brian Smith
8870f2d542
Bug 915931, Part 4: Expand OCSP xpcshell tests to test insanity::pkix, r=keeler
...
--HG--
extra : rebase_source : e645de251c459d6fa38996bb7bfd35e21eaf3b72
2014-02-17 13:19:54 -08:00
Brian Smith
7865b702d2
Bug 973268: Return better error codes and make simple cert error override processing work for insanity::pkix, r=keeler, r=cviecco
...
--HG--
extra : rebase_source : 596e7a67b8631bb6a52c20d569fe433aa5e86cec
2014-02-11 00:46:05 -08:00
Brian Smith
5fce01773e
Bug 915931, Part 3: Integrate insanity::pkix OCSP support, r=keeler, r=cviecco
...
--HG--
extra : rebase_source : 4b54682ca6d97e2ec7709b9a5c93ddea71126f8b
2014-02-16 17:35:40 -08:00
Brian Smith
5c056032ea
Bug 915931, Part 2: Add OCSP request encoding to insanity::pkix, r=keeler
...
--HG--
extra : rebase_source : c07713a417c2bc03d4c18f0c7dbddd19b4532390
2014-02-06 16:57:49 -08:00
Brian Smith
c1391a29b0
Bug 878932, Part 1: Add OCSP response parsing & validation to insanity::pkix, r=keeler
...
--HG--
extra : rebase_source : 23771eaf97f67e5feb69d50a0c96dd4da31ae964
extra : source : b0511882e4c94c0960ef8533b381e8d72706172e
2014-02-16 18:09:06 -08:00
Ehsan Akhgari
0ec6497e74
Bug 973405 - Move some misc LOCAL_INCLUDES to moz.build; r=glandium
2014-02-18 08:49:12 -05:00
Ms2ger
aa9d7b52b4
Bug 968856 - Move unconditional LOCAL_INCLUDES into moz.build; r=mshal
2014-02-15 21:24:59 +01:00
Phil Ringnalda
fb92f57395
Merge m-i to m-c
2014-02-15 09:54:57 -08:00
ffxbld
79edf741a1
No bug, Automated HSTS preload list update from host bld-linux64-spot-071 - a=hsts-update
2014-02-15 03:20:10 -08:00
Vaibhav Agarwal
81f1ea0a18
Bug 970925 - convert testing/mochitest/android.json into skip-if statements in mochitest.ini files; r=jmaher
2014-02-15 04:53:02 -05:00
Brian Smith
26f58a2368
Bug 896620: Revert deletion of security/build/b2g-app-root-cert.der, which was intended for bug 972201, r=me (thanks Ehsan)
2014-02-14 19:45:58 -08:00
Brian Smith
08696b7fd7
Bug 896620: Make marketplace certs work on in all products, r=keeler
...
--HG--
extra : source : 86ec7137a8892f75918c77e605df970f5b96ef62
extra : histedit_source : 33326790804d49e6ec658626116ebf870d94d445
2014-02-14 14:37:07 -08:00
Brian Smith
58ebf88141
Bug 967153: Update to NSS 3.16 beta 2 (NSS_3_16_BETA2), r=me
...
--HG--
extra : source : e7b156a508d35034735e0cb44e5f73d6e8b76cc7
2014-02-13 16:43:27 -08:00
Brian R. Bondy
49164e195d
Bug 969559 - Set delayed restricted integrity in child process to block off pipe and file access after LowerToken call. r=aklotz
2014-02-14 11:07:16 -05:00
Wes Kocher
cb9ae2a2b7
Merge m-c to inbound on a CLOSED TREE
2014-02-13 18:50:08 -08:00
David Keeler
e80e27537c
bug 967975 - certificate error override telemetry r=briansmith
...
--HG--
rename : security/manager/ssl/tests/unit/tlsserver/cmd/OCSPStaplingServer.cpp => security/manager/ssl/tests/unit/tlsserver/cmd/BadCertServer.cpp
2014-02-13 14:53:29 -08:00
Ryan VanderMeulen
0e311b4331
Merge m-c to b2g-inbound.
2014-02-13 10:32:21 -05:00
Jed Davis
e0e22b713f
Bug 971370 - Fix seccomp whitelist errors caused by strace bug. r=kang
2014-02-13 09:47:16 -05:00
Guillaume Destuynder
5b32db4f17
bug 948620 - Add env variable MOZ_DISABLE_CONTENT_SANDBOX to disable sandbox at runtime. r=jld
2014-02-13 16:26:28 -08:00
Brian Smith
9a32819b71
Bug 971178, Part 4: Expand test_intermediates_basic_constraints.js test insanity::pkix, r=cviecco
...
--HG--
extra : rebase_source : b419a3087b3d327c9a48d984551abeac4943be7a
2014-02-11 16:24:45 -08:00
Brian Smith
c5f75b4ab3
Bug 971178, Part 3: Expand test_certificate_usages.js test insanity::pkix, r=cviecco
...
--HG--
extra : rebase_source : 3810925d18767d1b04f8a47004a0ab7a631e5b4b
2014-02-11 01:42:41 -08:00
Brian Smith
5380137967
Bug 971178, Part 2: Make test_getchains.js test insanity::pkix, r=cviecco
...
--HG--
extra : rebase_source : ff9620bad6b20a84cf179af7ffa7a74f6ffd6640
2014-02-11 01:42:55 -08:00
Brian Smith
eda1dac53f
Bug 971178, Part 1: Expand test_cert_signatures.js test insanity::pkix, r=cviecco
...
--HG--
extra : rebase_source : 90cf68bdb50b8499aeda3e14c476977db9e43c2a
2014-02-11 01:42:24 -08:00
Jeff Walden
5226a7ab14
Bug 969165 - Convert Atomic<T> where T != bool but is used as a bool over to Atomic<bool>, now that it's supported, in security/manager/. r=bsmith
...
--HG--
extra : rebase_source : 3632af6471e41d099a0948542d26a7df527efaad
2014-02-06 22:17:07 -08:00
Camilo Viecco
1aba9afb97
Bug 877376: Add tests for intermediate CA basic constraints and KU/EKU, r=briansmith
...
--HG--
extra : rebase_source : b831ab0e459af4ea0f43a1184e32b333f43b2f01
2013-05-23 10:15:19 -07:00
Brian Smith
cab43a3bfd
Bug 878932, Part 2: Make certificate verification implementation prefs dynamic, r=cviecco
...
--HG--
extra : rebase_source : 4b413cfd8e122ee4e0fea64d624285856e2cb0cb
2014-01-20 15:55:12 -08:00
Brian Smith
ff6bc14650
Bug 878932, Part 1: add insanity::pkix as an option for certificate verification, r=keeler, r=cviecco
...
--HG--
extra : rebase_source : c1f75dff6ac7f32e082517af701654abebaee250
2014-02-10 11:41:12 -08:00
Brian Smith
2658e5f7ad
Bug 970512: Remove uninteresting cases for certificate usage verification, r=cviecco
...
--HG--
extra : rebase_source : 6df6dcfb39f8b4e2cd063115470af04675c0f768
extra : source : 56e0904260b417ce181e2a35978f6d77e78ef2c2
2013-10-13 23:34:28 -07:00
Brian Smith
655014f3d4
Bug 969938: Stop adding id-KP-OCSPSigning EKU to CA certificates in tests, r=cviecco
...
--HG--
extra : rebase_source : 9f5e42ea788e63fb93e3a37632be12093096e63d
2014-02-08 21:01:39 -08:00
Brian Smith
4fc39ce273
Bug 921896: Check name constraints in insanity::pkix, r=cviecco, r=keeler
...
--HG--
extra : rebase_source : 6d3e77670a5553b477a881609cc30f5f4140294c
extra : source : 2545cd47894a95323b718eb4f82be6d744019c7a
2014-02-10 15:25:23 -08:00
Brian Smith
d07841f4f7
Bug 968359: Allow the direct validation of CA certificates in insanity::pkix, r=keeler, r=cviecco
...
--HG--
extra : rebase_source : f27870f2a648ad012d24b99d9e4f85daf17e9397
extra : source : 002e9043461b40a911903258d723c37133dbc79c
2013-09-13 00:09:08 -07:00
Brian Smith
4430109984
Bug 921895: Check extended key usage in insanity::pkix, r=keeler, r=cviecco
...
--HG--
extra : rebase_source : f8faa0b9269a40dd28850c9444f4723d1dad8451
extra : source : 32ea705bdfd196e037060b3bb7da081c1eed356d
2014-02-08 15:00:32 -08:00
David Keeler
8d4a3a1e43
bug 961528 - holepunch chart.apis.google.com from the HSTS preload list r=briansmith
2014-02-11 10:21:57 -08:00
Ehsan Akhgari
d1964b92f6
Bug 970727 - Move DEFFILE to moz.build; r=mshal
2014-02-11 11:28:54 -05:00
Ehsan Akhgari
82ebdc883f
Bug 969757 - Remove the dead code in our tree which pretends to support OS/2; r=roc,mcmanus,gps,jorendorf,bsmedberg sr=bsmedberg
2014-02-10 17:57:01 -05:00
Jacek Caban
561e839426
Bug 969330 - Fix -Werror=int-to-pointer-cast in windows-only code. r=ehsan
2014-02-10 12:05:22 +01:00
Brian Smith
2e61dec135
Bug 967153: Add name constraint test certs accidentally excluded from commit 9e5d07c8c87b, r=me, a=NPOTB, DONTBUILD
...
--HG--
extra : amend_source : 1c120e9bfce764f70ea3f1355db6a1bf58332526
2014-02-09 16:33:59 -08:00
Brian Smith
eca3e2b377
Bug 967153: Update NSS to NSS 3.16 beta 1 (NSS_3_16_BETA1), r=me
2014-02-09 16:29:50 -08:00
ffxbld
20838cbe86
No bug, Automated HSTS preload list update from host bld-linux64-ec2-400 - a=hsts-update
2014-02-08 03:17:31 -08:00
Camilo Viecco
da9d0dec0c
Bug 790809 - Add callback for in libpkix for extra app checks (in usage sslserver). r=dkeeler
2014-02-05 14:49:14 -08:00
Jed Davis
7e6db2be33
Bug 945504 - Include JS stack in sandbox reporter logs. r=kang
2014-02-07 10:46:38 -05:00
Carsten "Tomcat" Book
69627ca737
merge b2g-inbound to mozilla-central
2014-02-07 09:54:06 +01:00
Brian Smith
43ed0a2efe
Bug 921893: Verify key usage extension in insanity::pkix, r=keeler, r=cviecco
...
--HG--
extra : rebase_source : 1ea7626ed36cd92cdbf2aea5533e983fc0f58a44
2014-01-28 23:20:11 -08:00
Brian Smith
0c073be21f
Bug 921892: Check basic constraints in insanity::pkix, r=keeler, r=cviecco
...
--HG--
extra : rebase_source : 6a5bb14c2ba8ba195dfdb207e86016577ddd836a
2014-02-06 18:13:20 -08:00
Brian Smith
b7e81d69b7
Bug 921891, part 3: Add basic building and verification, r=keeler, r=cviecco
...
--HG--
extra : rebase_source : 7b01773c47445efc40941ae251d03f505f429be6
extra : source : 2a36da04b931740858d51023b2cc8ef7528ef740
2014-02-02 21:21:00 -08:00
Eric Rahm
f3b451f0fe
Bug 969126 - Fix sandbox build for b2g on OS X. r=kang
2014-02-06 16:11:53 -08:00
Carsten "Tomcat" Book
7dbd13a7f9
Merge mozilla-central to mozilla-inbound
2014-02-06 13:22:35 +01:00
Carsten "Tomcat" Book
117533e244
merge fx-team to mozilla-central
2014-02-06 12:51:21 +01:00