Cykesiopka
49c1e300ef
Bug 1197644 - Remove the security.ssl.warn_missing_rfc5746 pref. r=keeler
2015-08-24 22:53:42 -07:00
Makoto Kato
ecd6727eab
Bug 1196403 - Apply crbug/522201 to support Windows 10 build 10525. r=bobowen
2015-08-25 19:21:08 +09:00
Xidorn Quan
4ccdd6c2ca
Bug 1188468 - Allow script to force updating a generated file even if the file is actually not changed. r=gps
2015-08-25 10:07:43 +10:00
David Keeler
532e32633c
bug 1194013 - convert test_name_constraints.js to generate certificates at build time r=Cykesiopka,mgoodwin
2015-08-11 16:40:38 -07:00
Ryan VanderMeulen
a7890c1d6f
Merge inbound to m-c. a=merge
2015-08-23 17:18:36 -04:00
Fabrice Desré
21c4e1bceb
Bug 1196988 - Remove THA support. r=gwagner
2015-08-21 10:00:54 -07:00
Jonathan Griffin
411013ed53
Bug 1136892 - Create an xpcshell-addons tag for running addon-specific xpcshell tests, r=chmanchester
2015-08-18 11:26:14 -07:00
Kai Engert
e2dccd155b
Bug 1194135, set NSS version to final 3.20 tag, no code change, DONTBUILD
2015-08-19 18:41:53 +02:00
Wes Kocher
878dfeff75
Backed out changeset 688775a8227f (bug 1136892) for mass bustage prompting a CLOSED TREE
2015-08-18 11:58:05 -07:00
Christoph Kerschbaumer
eaa13b8628
Bug 1195606 - Use channel->ascynOpen2 in security/manager/ssl/nsNSSCallbacks.cpp (r=sicking)
2015-08-18 09:54:09 -07:00
Mark Goodwin
ad85d9ff0a
Bug 1153444 - Fix up Key Pinning Telemetry (r=keeler)
2015-08-21 15:14:08 +01:00
Mike Hommey
dbd56c6b19
Bug 1189891 - Avoid including <cstring> from pkix/Input.h. r=bsmith
2015-08-21 15:27:22 +09:00
Mike Hommey
7993f5c59b
Backout changesets af1b36497559 and 1d52ab626597 (bug 1189891) for pkix bustage
2015-08-21 15:05:38 +09:00
Mike Hommey
cedfc6a289
Bug 1189891 - Avoid including <cstring> from pkix/Input.h. r=bsmith
2015-08-21 14:29:19 +09:00
Ben Hearsum
18aa36116c
bug 1116409: switch update server to sha2 cert; update in-tree pinning. r=rstrong,snorp,mfinkle,dkeeler
2015-08-20 17:50:51 -04:00
Cykesiopka
35e8cd70ba
Bug 1195615 - Log a web console warning when a HPKP header is ignored due to a non-built in root cert. r=keeler
2015-08-20 14:33:29 -07:00
Jonathan Griffin
070361dd89
Bug 1136892 - Create an xpcshell-addons tag for running addon-specific xpcshell tests, r=chmanchester
2015-08-18 11:26:14 -07:00
Arnaud Bienner
d99c4429a7
Bug 1190086 - Use new String::Contains(char) method more widely r=froydnj
2015-08-14 00:49:15 +02:00
David Keeler
4e8ed8ea72
bug 1190603 - rename prime256v1 to secp256r1 in test_keysize.js to reduce confusion r=Cykesiopka
...
OpenSSL refers to the curve in question as 'prime256v1', but rfc 5480,
mozilla::pkix, and the test framework refer to it as secp256r1, so we
should be consistent.
2015-08-05 13:39:11 -07:00
David Keeler
0277e3473a
bug 1190603 - convert test_keysize.js to generate certificates at build time r=Cykesiopka
2015-08-03 17:02:58 -07:00
Aryeh Gregor
ade09cc060
Bug 1193298 - Part 2: Use .get() to convert from RefPtr to raw pointer. r=froydnj
2015-08-11 06:45:00 -04:00
Jed Davis
f1b06fa82d
Bug 1004011 - Support SECCOMP_FILTER_FLAG_TSYNC if available. r=kang
2015-08-11 16:30:00 -04:00
Tanvi Vyas
2579bcdd22
Bug 1182551 - Updating nsSecureBrowserUIImpl so that insecure pages with mixed content iframes don't get marked as broken. r=keeler
2015-08-13 17:13:48 -07:00
Kai Engert
e836e00cc1
Bug 1194135, Update Mozilla to NSS 3.20, r=mt
2015-08-13 11:31:23 +02:00
Nathan Froyd
73b79d2955
Bug 1193021 - clean up reference-counting in security/; r=keeler
2015-07-01 13:10:53 -04:00
David Keeler
47e3233d86
bug 1190532 - change default key specification from implicit to explicit in pycert.py r=Cykesiopka
...
Previously using an empty string would result in pycert.py returning the
default shared RSA key. This resulted in empty keyspec files being added
to the tree, which was confusing. This should end the confusion by making
the key specification process explicit rather than implicit.
2015-08-06 11:35:40 -07:00
David Keeler
eca74d5823
bug 1189427 - convert test_ocsp_fetch_method.js to generate certificates at build time r=mgoodwin
2015-07-30 10:20:52 -07:00
Kai Engert
0337cdec67
Bug 1190794, land final NSS_3_19_3_RTM tag, no code change, DONTBUILD
2015-08-07 20:19:06 +02:00
Makoto Kato
181db2c563
Bug 1166323 - Fix unexpcetd changed on previous landed. r=dkeeler
2015-08-07 13:41:49 +09:00
Cykesiopka
580d488671
Bug 1164609 - Remove EV treatment for expired Buypass Class 3 CA 1 root certificate. r=keeler
2015-08-07 00:21:00 +02:00
Carsten "Tomcat" Book
ba06f030c1
Backed out changeset 9618f92995ab (bug 1166323) for linux x64 test bustage on a CLOSED TREE
2015-08-07 07:24:40 +02:00
Makoto Kato
8d6953bc01
Bug 1166323 - Fix unexpcetd changed on previous landed. r=dkeeler
2015-08-07 13:41:49 +09:00
Carsten "Tomcat" Book
cd95acc091
Backed out 2 changesets (bug 1016555, bug 1189427) for making Android 4.3 API11+ debug X3 perma fail in test_ev_certs.js
...
Backed out changeset ebd4e3880403 (bug 1189427)
Backed out changeset 331e489c7534 (bug 1016555)
2015-08-06 11:51:27 +02:00
Cykesiopka
eb30e6e4e1
Bug 1124649 - Part 1 - Add specific error messages for various types of STS and PKP header failures. r=keeler,hurley
2015-08-05 07:51:00 +02:00
David Keeler
42db57ddd0
bug 1189427 - convert test_ocsp_fetch_method.js to generate certificates at build time r=mgoodwin
2015-07-30 10:20:52 -07:00
Birunthan Mohanathas
9b6236a10a
Bug 1191100 - Remove XPIDL signature comments in .cpp files. r=ehsan
...
Comment-only so DONTBUILD.
2015-08-04 16:17:36 -07:00
Kai Engert
eff4fc7c12
Bug 1190794, Update to NSS 3.19.3 to pick up ca-certificates v 2.5, landing NSS_3_19_3_RC0, r=kwilson
2015-08-04 22:37:05 +02:00
David Keeler
9db6074701
bug 1188100 - fold PSM's test_client_cert.js into necko's test_tls_server.js r=mcmanus
2015-07-29 14:27:54 -07:00
Carsten "Tomcat" Book
49f2789e77
Merge mozilla-central to mozilla-inbound
2015-08-03 15:45:57 +02:00
Carsten "Tomcat" Book
e016c33f6e
merge mozilla-inbound to mozilla-central a=merge
2015-08-03 13:56:39 +02:00
Makoto Kato
e92450872e
Bug 830801 - Part 2. Remove NOMINMAX define from moz.build. r=mshal
2015-08-03 10:07:09 +09:00
ffxbld
250a2cff29
No bug, Automated HPKP preload list update from host bld-linux64-spot-317 - a=hpkp-update
2015-08-01 03:34:19 -07:00
ffxbld
4d748c510a
No bug, Automated HSTS preload list update from host bld-linux64-spot-317 - a=hsts-update
2015-08-01 03:34:17 -07:00
ffxbld
a7aba8d86a
No bug, Automated HPKP preload list update from host bld-linux64-spot-010 - a=hpkp-update
2015-07-30 13:51:28 -07:00
ffxbld
b8f6c15369
No bug, Automated HSTS preload list update from host bld-linux64-spot-010 - a=hsts-update
2015-07-30 13:51:26 -07:00
Cykesiopka
e365bb83c0
Bug 1189166 - Cleanup some PSM test generation files post Bug 1181823. r=dkeeler
2015-07-29 23:56:33 -07:00
Bob Owen
f9cb6a4fda
Bug 1171796: Add sandbox rule for child process NSPR log file on Windows. r=bbondy
...
This also moves the initialization of the sandbox TargetServices to earlier in
plugin-container.cpp content_process_main, because it needs to happen before
xul.dll loads.
2015-07-30 10:04:42 +01:00
David Keeler
77182daa23
bug 1181823 - convert test_ev_certs.js, test_keysize_ev.js, and test_validity.js to generate certificates at build time r=Cykesiopka r=mgoodwin
2015-06-17 16:02:08 -07:00
Bobby Holley
106e778c81
Bug 1188696 - Hoist nsRefPtr.h into MFBT. r=froydnj
2015-07-29 10:44:59 -07:00
Douglas Bagnall
5c0b4667d0
Bug 1046421 - Do not disclose the system hostname via NTLM handler. r=honzab
...
The hostname here is matched on the AD DC to the userWorkstations
attribute, however this is on a total trust basis in terms of what the
client specifies here.
The impact of this patch is that a user who is restricted by this
attribute to log on to only certain (Windows, in reality)
workstations, may not be able to perform a manual NTLM logon to an
intranet site, unless they set network.generic-ntlm-auth.workstation
to the name of their workstation (actually, any host in that list).
The default value is set to WORKSTATION.
This patch was originally written by Andrew Bartlett, and modified by
Douglas Bagnall following review feedback from Honza Bambas and Tim
Brown.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
2015-07-24 13:36:11 +12:00
