Commit Graph

254 Commits

Author SHA1 Message Date
Dave Townsend
9cb6773784 Backed out changeset cf3eae029913 2008-08-18 15:08:14 +01:00
honzab@allpeers.com
a19d587018 Bug 135007, Transfer mode of images should be relevant for shown lock icon state (mixed content)
Based on ideas from Stuart Parmenter and experimental code from Kai Engert
Patch contributed by Honza Bambas
r=kaie, r=pavlov, sr=bz
2008-08-16 09:12:42 +02:00
Kai Engert
b896a8b0e7 Backed out changeset 3770c42e3118 2008-08-16 08:00:17 +02:00
honzab@allpeers.com
4a11f328e4 Bug 428009, hook up ssltunnel to mochitest
Initial work by Jeff Walden, Patch contributed by Honza Bambas
r=jwalden, r=cbiesinger, r=sayrer, r=ted.mielczarek, r=kaie
2008-08-16 07:38:03 +02:00
Kai Engert
ea6862a090 Bug 443284, crash on login to ActivIdentity/ActivClient smartcard using acpkcs211.dll
Patches contributed by timeless and Dani Church
r=kaie, r=rrelyea
2008-08-14 18:42:40 +02:00
Kai Engert
d39c2d2778 Bug 307319 - Certificate details show incorrect public key information
r=rrelyea
2008-07-17 13:14:54 -04:00
Kai Engert
c91389877e Bug 442561, enable Entrust Root Certification Authority for EV
r=rrelyea
2008-07-08 23:27:13 +02:00
Kai Engert
3c85060846 Bug 429794, Lk (trace malloc leaks) test results have become very unstable
r=nelson
2008-07-08 22:42:51 +02:00
Kai Engert
a46e4f3f66 Bug 431819, SSL client auth, repeated prompts for client certificate
r=rrelyea, r=dveditz
2008-06-18 21:36:29 +02:00
Kai Engert
4ca4582de2 Bug 436870, FF3 RC1 loses SSL certificate exceptions
Patch contributed by Honza Bambas
r=kaie
2008-06-18 21:20:16 +02:00
Kai Engert
a6269cffd6 Backout bug 428009 2008-06-18 14:30:29 +02:00
Kai Engert
60cb32844d Bug 428009, hook up ssltunnel to mochitest
Patch contributed by Honza Bambas
r=jwalden, r=kaie
2008-06-18 11:44:19 +02:00
Kai Engert
521a51d53f Bug 426830, remove unused nick_template_with_num
r=rrelyea
2008-06-11 20:20:24 +02:00
Kai Engert
d929cd8588 Bug 426555, nsClientAuthRememberService must be refcounted and implement nsISupportsWeakReference
r+sr=mrbkap
2008-06-27 16:28:08 +02:00
reed@reedloden.com
8443fe7800 Bug 433025 - "Still using windows icon in Security Exception dialog" [p=reed r=kaie a1.9=schrep] 2008-05-09 20:43:45 -07:00
kaie@kuix.de
c0caa44ac4 Bug 431384, Enable Network Solutions Certificate Authority for EV r=rrelyea, a1.9=beltzner 2008-05-03 18:36:46 -07:00
johnath@mozilla.com
aad7aadc1b SSL Error page for domain mismatch should hyperlink to correct site (sometimes). b=402210 r=gavin r=kengert r=axel ui-r=beltzner moa/sr=biesi a=beltzner Significant chunks of p=timeless 2008-04-30 13:10:22 -07:00
kaie@kuix.de
c80da42e1f Bug 406954, Unable to add exception for server certificates with empty subject names r=rrelyea, a1.9=shaver 2008-04-23 19:05:37 -07:00
kaie@kuix.de
1035e5cf99 Bug 429110, Random crashing ( [@ PR_AtomicIncrement] ?) ( [@ nsIOService::NewURI] ?) r=rrelyea, a1.9=shaver 2008-04-22 15:46:44 -07:00
gavin@gavinsharp.com
1f832dc92d Bug 413909: nsCertOverrideService IDN handling is broken, and its port handling is also quite cumbersome, patch by Honza Bambas <honzab@allpeers.com>, r=kaie, a=shaver 2008-04-22 13:03:20 -07:00
mnyromyr@tprac.de
5baf049146 Bug 428491: typo in ssl exceptions dialog; p=Serge Gautherie <sgautherie.bz@free.fr>, r=kaie, a1.9=dsicore 2008-04-20 11:14:30 -07:00
dtownsend@oxymoronical.com
b8b7964a79 Bug 429133: Parts of NSS are not in the SDK. r=bsmedberg, a=damons 2008-04-19 03:37:41 -07:00
kaie@kuix.de
f5086a376e Single patch for 3 overlapping fixes. Bug 420187, hang in nsNSSHttpRequestSession::internal_send_receive_attempt r=rrelyea Bug 383369, fixing a regression from 335801 r=rrelyea Bug 358438, fix proposed by and portions contributed by Honza Bambas r=honzab, r=rrelyea approval1.9 for combined patch = beltzner 2008-04-11 21:47:22 -07:00
kaie@kuix.de
8e1be3a7dd Bug 423002, Incorrect error message with certificates which contain subjectAltName r=rrelyea, a1.9=beltzner 2008-04-10 18:28:09 -07:00
kaie@kuix.de
913a248f1e Bug 428415, Don't pass uninitialized values to NSS CERT_PKIXVerifyCert r=rrelyea, a1.9=dsicore 2008-04-10 18:26:19 -07:00
kaie@kuix.de
97456384a2 Bug 327181, follow up checkin to fix IDL comment r=rrelyea, approval1.9=beltzner 2008-04-08 22:25:44 -07:00
kaie@kuix.de
f9e142e884 Bug 406755, EV certs not recognized as EV with some cross-certification scenarios second landing attempt, earlier EV verification, patch 9 r=rrelyea also landing a regression fix, which applies to debug mode compilation code, only r=rrelyea blocking1.9=dsicore 2008-04-08 18:48:02 -07:00
kaie@kuix.de
ed10ad9a44 Bug 425518, Enable multiple roots for EV (and remove 1): Geotrust, Thawte, Verisign, Trustwave, Comodo r=rrelyea, r=nelson, blocking1.9=dsicore 2008-04-08 17:28:48 -07:00
kaie@kuix.de
37eb9c3367 Backing out the "early ev verification" patch from bug 406755, as an attempt to fix a tinderbox test failure (crash). 2008-04-07 19:22:26 -07:00
kaie@kuix.de
17b2f73120 Bug 406755, EV certs not recognized as EV with some cross-certification scenarios Additional patch for Earlier EV verification, v8 r=wtc, r=nelson, blocking1.9=dsicore 2008-04-07 17:10:41 -07:00
johnath@mozilla.com
6271295a50 More verbose logging of harmless-but-scary-looking exception. b=408697 r=kai a=damon 2008-04-07 13:46:50 -07:00
kaie@kuix.de
a608dfde44 Bug 427081, Allow to override SEC_ERROR_INADEQUATE_KEY_USAGE r=nelson, a1.9=dsicore 2008-04-04 17:02:31 -07:00
reed@reedloden.com
9c779794b7 Bug 426822 - "nick_template needs a localization note" [p=valastiak@mozilla.sk (Vlado Valastiak [wladow]) r=kaie a1.9=beltzner] 2008-04-04 02:11:41 -07:00
kaie@kuix.de
212d02e40b Bug 420246, gBrowser.securityUI doesn't clear invalid cert data after using back button r=rrelyea, r=johnath, sr=gavin, blocking1.9=beltzner 2008-04-01 23:36:16 -07:00
kaie@kuix.de
ffc31711d1 Bug 420187. Backing out all 3 patches from today, because of regressions. a=shaver 2008-03-25 20:06:52 -07:00
kaie@kuix.de
755c32e75f Bug 420187, hang in nsNSSHttpRequestSession::internal_send_receive_attempt Follow up patch to fix leak tinderbox bustage, r=rrelyea 2008-03-25 14:49:35 -07:00
kaie@kuix.de
d9ea85f3b9 Attempt to fix red tinderbox, trivial mismatch between NS_IMETHODIMP and nsresult. Follow up to my fix for bug 420187. 2008-03-25 13:09:18 -07:00
kaie@kuix.de
5e5bffbd65 bug 420187, hang in nsNSSHttpRequestSession::internal_send_receive_attempt r=rrelyea, pending more comments blocking1.9=shaver approval1.9b5=beltzner 2008-03-25 12:34:48 -07:00
reed@reedloden.com
ffb0913b45 Bug 419794 - "work out key API for nsICryptoHMAC" (API use nsIKeyObject + fix nsKeyModule + nsICryptoHMAC usage fix) [p=honzab@allpeers.com (Honza Bambas [mayhemer]) r=rrelyea sr=dveditz a=blocking1.9+] 2008-03-18 12:45:40 -07:00
kaie@kuix.de
e92c6abaf6 Bug 423475, Paypal crashes loading main site r=rrelyea, blocking1.9=beltzner 2008-03-17 11:42:04 -07:00
johnath@mozilla.com
08a8c58978 Show certificate error pages (instead of dialogs) in frames. b=423247, p=kengert, r=rrelyea, r=bzbarsky, a=blocking-1.9 (ted) 2008-03-17 11:13:37 -07:00
kaie@kuix.de
f44acb4d74 Bug 406755, EV certs not recognized as EV with some cross-certification scenarios r=rrelyea, blocking1.9=dsicore 2008-03-16 06:42:32 -07:00
kaie@kuix.de
4a2ac6e90c bug 374336, add knowledge of Extended Validation / EV Certificates to PSM Follow up fix contributed by Neil that fixes allocator mismatch. r=kengert, approval1.9=dsicore 2008-03-14 08:22:50 -07:00
reed@reedloden.com
5e3b4d1415 Bug 418543 - "remove -moz-pre-wrap" [p=taken.spc@gmail.com (KUROSAWA, Takeshi) r+sr=roc a1.9=beltzner] 2008-03-08 01:44:35 -08:00
kaie@kuix.de
e6d6571817 Bug 400085, nsNSSCertificate::hasValidEVOidTag compare DER, not strings Patch contributed by Honza Bambas, r=rrelyea, r=kengert, approval1.9=beltzner 2008-03-06 22:14:33 -08:00
kaie@kuix.de
6eaf163cdf Bug 412456, ###!!! ASSERTION: nsSecureBrowserUIImpl not thread-safe r=rrelyea, blocking1.9=beltzner 2008-03-06 03:21:37 -08:00
gavin@gavinsharp.com
01e48bc351 Bug 419111: unfrozen interfaces listed in SDK_XPIDLSRCS, r=kaie, sr=bzbarsky 2008-03-05 14:08:20 -08:00
reed@reedloden.com
67836dd7e3 Bug 351580 - "Possible null pointer dereferences in |nsCrypto::GenerateCRMFRequest|" (Fixed !NULL checks + GC rooting) [p=honzab@allpeers.com (Honza Bambas [mayhemer]) r=mrbkap a=blocking1.9+] 2008-03-04 03:25:44 -08:00
bent.mozilla@gmail.com
872fe28df5 Bug 419655 - "Refreshing a page leaks an nsGlobalWindow until shutdown". r=peterv, sr=jst, a1.9b4+=schrep. 2008-02-28 18:05:57 -08:00
kaie@kuix.de
1c416620df Bug 418958, Enable Go Daddy root CA certificates for EV use r=rrelyea, a1.9b4=beltzner 2008-02-28 10:00:57 -08:00
dcamp@mozilla.com
44b567a446 Bug 415799: Interface and implementation for HMAC support. p=honzab@allpeers.com (Jan Bambas), r=kaie, r=rrelyea, sr=dveditz, blocking1.9=sayrer 2008-02-26 22:31:13 -08:00
wtc@google.com
c3c311e84b Bug 415033: added a hidden preference (in about:config) for enabling or disabling the TLS session ticket extension. The patch is contributed by Nagendra Modadugu <ngm+mozilla@google.com>. r=wtc,rrelyea,kengert a1.9+=damons Modified Files: netwerk/base/public/security-prefs.js security/manager/ssl/src/nsNSSComponent.cpp 2008-02-26 15:09:39 -08:00
gavin@gavinsharp.com
7f33abb115 Bustage fix from bug 415928, r=ted 2008-02-26 10:30:21 -08:00
ted.mielczarek@gmail.com
9b4bd4025c bug 415928 - fix packaging of CRT with jemalloc - make nspr/nss play along. r=bsmedberg 2008-02-25 12:50:35 -08:00
kaie@kuix.de
af82e17ee3 Bug 416827, Enable Digicert root CA certificate for EV use r=rrelyea, approval1.9=beltzner 2008-02-22 00:54:42 -08:00
kaie@kuix.de
80a24d43b5 Bug 418701, Enable Quo Vadis root CA certificate for EV use r=rrelyea, approval1.9=beltzner 2008-02-22 00:51:59 -08:00
kaie@kuix.de
d8c6f29dcc Bug 416850, Deleting a security exception and then re-adding it causes cert exception to remain valid r=rrelyea, approval1.9=beltzner 2008-02-22 00:50:11 -08:00
kaie@kuix.de
fa2db966c4 Bug 372876, Read from SSL socket leaks memory r=rrelyea, blocking1.9=sayrer 2008-02-21 17:07:16 -08:00
dcamp@mozilla.com
52dfbcb3ee Bug 350873: nsStreamLoader code accessed on secondary thread [ASSERTION: nsStreamLoader not thread-safe]. r=kengert, sr=dveditz, b1.9=sayrer 2008-02-21 17:05:17 -08:00
kaie@kuix.de
4cce4b477d Bug 402574, Identity UI lost when switching between tabs Additional patch v4 to fix false positive EV r=rrelyea, blocking-firefox3=mconnor 2008-02-21 17:04:05 -08:00
jwatt@jwatt.org
0bcadac8f7 Bug 417693. late-l10n. The Add Security Exception dialog text is misleading. r=kengert@redhat.com, a1.9=beltzner@mozilla.com 2008-02-21 09:40:52 -08:00
kaie@kuix.de
6ce364ef47 Bug 415213, uninitialized variables in PSM r=rrelyea, a1.9=dsicore 2008-02-13 08:14:25 -08:00
kaie@kuix.de
156f30d32d Bug 415786, escrow warning dialog is broken r=rrelyea, late-l10=pike, blocking1.9=mtschrep, approval1.9=mtschrep 2008-02-07 06:18:09 -08:00
johnath@mozilla.com
ce9321db68 Add Security Exception dialog is unusable at high dpi. b=413623, r=kengert, blocking1.9=schrep 2008-02-06 10:02:10 -08:00
kaie@kuix.de
2a5945649a Bug 413627, nsCertOverrideService can't register observers (NS_ERROR_UNEXPECTED) intended to fix blocking1.9+ Bug 414808 Patch contributed by Ehsan Akhgari, timeless and some trivial tweaks by myself Thanks to Tomcat for help with testing r=me, a=mtschrep, blocking1.9-on-414808=beltzner 2008-01-31 22:04:56 -08:00
kaie@kuix.de
48937de428 Bug 409091, SSL Client Auth prompt should indicate port number r=rrelyea, a1.9=mtschrep 2008-01-22 15:47:55 -08:00
kaie@kuix.de
aeabf2b45f Bug 405139, EV certs should be treated as providing less certainty of identity if OCSP is disabled. r=rrelyea, a1.9=mtschrep 2008-01-22 15:46:49 -08:00
kaie@kuix.de
a51dd553e9 Bug 412786, uninitialized variable r=rrelyea, a1.9=mtschrep 2008-01-22 15:44:29 -08:00
kaie@kuix.de
66c76f5083 Bug 412455, Regression, EV UI no longer shows up r=rrelyea, a1.9=mtschrep 2008-01-22 15:43:12 -08:00
kaie@kuix.de
6dee00122d Bug 399590, Update Mozilla trunk to use NSS tag NSS_3_12_BETA1 r=rrelyea, a1.9=mtschrep 2008-01-18 02:40:58 -08:00
kaie@kuix.de
8b4324d92b Bug 409280, nsIProtectedAuthThread is not embedding friendly Patch contributed by Christian Persch (GNOME) r=kengert, blocking1.9=mtschrep 2008-01-15 14:41:52 -08:00
kaie@kuix.de
5e3cf887fd Bug 407788, polish Delete Server Certificate Exceptions dialog Patch contributed by Vlado Valastiak r=kengert, a=mtschrep 2008-01-15 13:45:05 -08:00
kaie@kuix.de
be637af89e Bug 407523, Error page should not allow adding an exception for inadequate key usage r=rrelyea, a=mtschrep 2008-01-15 13:41:06 -08:00
benjamin@smedbergs.us
dfc4cee45d Bug 411327 - nsIXPCNativeCallContext should not inherit from nsISupports, r=mrbkap, a=schrep 2008-01-15 07:50:57 -08:00
dtownsend@oxymoronical.com
eef047b68f Bug 404726: Addon compatibility check gives many alerts (toolkit and security portions). r=gavin.sharp, r=kengert 2008-01-15 07:06:34 -08:00
kaie@kuix.de
d2c25c96f2 Bug 408432, Add Exception fails for certs with no DNS names (no CN, no SAN) r=rrelyea, blocking1.9=dsicore 2008-01-14 08:04:00 -08:00
kaie@kuix.de
e277586d41 bug 406999, Enhance EV performance; Never combine EV with Cert Overrides r=rrelyea, blocking1.9=mtschrep 2008-01-14 07:45:07 -08:00
jruderman@hmc.edu
eae9d39258 Add crashtest for keygen 2007-12-16 17:27:11 -08:00
johnath@mozilla.com
a6b4a53d33 Polish delete cert dialog. b=407788 r=kengert a=dsicore 2007-12-14 13:34:06 -08:00
kaie@kuix.de
ee2aa492e9 fixes bug 406290 r=wtc, a=beltzner 2007-12-14 09:39:30 -08:00
kaie@kuix.de
fb49368dc5 Bug 403691, unable to display decoded policies extension in certs from https://www.digicert.com r=kengert, a=beltzner 2007-12-14 08:11:57 -08:00
kaie@kuix.de
18434f216a bug 119500, PKCS#11 CKF_PROTECTED_AUTHENTICATION_PATH token flag not supported Patch contributed by Petr Kostka r=rrelyea, sr=kengert, a=dsicore Addon Patch to provide dummy implementations for gtk-embedding and camino. r=mark, sr=jst 2007-12-04 23:34:55 -08:00
kaie@kuix.de
34143f5ff6 bug 119500, PKCS#11 CKF_PROTECTED_AUTHENTICATION_PATH token flag not supported Patch contributed by Petr Kostka r=rrelyea, sr=kengert, a=dsicore Addon Patch to provide dummy implementations for gtk-embedding and camino. r=mark, sr=jst 2007-12-04 23:31:43 -08:00
kaie@kuix.de
e64d67a61b Bug 378241, Changes from bug 107491 lead to tons of thread-safety asserts r=rrelyea, r=wtc, sr=benjamin, blocking1.9=benjamin 2007-12-04 10:53:14 -08:00
kaie@kuix.de
ca5d681e30 Bug 404059, connection to t-mobile hotspot startup page takes very long Landing workaround patch (shorten timeout) r=rrelyea, blocking1.9=mtschrep 2007-12-03 14:58:06 -08:00
kaie@kuix.de
0b79e16a4b bug 402574, Identity UI lost when switching between tabs r=rrelyea, blocking-ff3=mconnor Also includes merged fix for: Bug 405145, Mixed SSL/non-SSL content reporting inconsistent between standard and EV Certs Patch contributed by Bill Gianopoulos r=kengert, a=dsicore 2007-12-03 14:09:27 -08:00
reed@reedloden.com
3fca62f6a1 Bug 400096 - "In <pippki.properties> (at least), rename "Web Site" to "Server"" ((Bv2a) |importWebSiteCertPrompt| fix) [p=sgautherie.bz@free.fr (Serge Gautherie) r=kaie a1.9=damons] 2007-11-30 23:03:54 -08:00
Olli.Pettay@helsinki.fi
74b6bb3346 Bug 401906, nsCertTreeDispInfo leaks, r=kengert, a=dsicore 2007-11-30 11:55:31 -08:00
cbiesinger@gmx.at
1e54b36be6 bug 262116 make disk cache serialize/deserialize the security info, if present also make nsNSSSocketInfo serializable PSM part: r=kaie sr=darin rest: r+sr=darin 2007-11-30 10:05:54 -08:00
cbiesinger@gmx.at
e8bba4b7e8 bug 405481 add nsISerializable and nsIClassInfo to nsNSSCertificate's QI impl r+sr=bz a=beltzner 2007-11-28 14:22:13 -08:00
reed@reedloden.com
c6d06df230 Bug 373623 - "Unicode … should be used instead of three separate dots: ..." (browser locales) [p=hendrik.maryns@uni-tuebingen.de (Hendrik Maryns) r=mconnor a1.9=beltzner] 2007-11-26 18:44:44 -08:00
johnath@mozilla.com
8d74c586f9 Bug 402207 - SSL error page "Add Exception" support should be pref-controlled. r=gavin r=kengert ui-r=beltzner a=beltzner 2007-11-23 13:59:10 -08:00
philringnalda@gmail.com
3749bde8b7 Bug 404292 - use global/skin/ instead of communicator/skin/ in crl manager, r=kengert, sr=neil, a=schrep 2007-11-21 18:51:09 -08:00
rrelyea@redhat.com
9eb55b8d0e Enable real EV checking. Bug 289520. patch by kai engert. review rrelyea approval mtschrep. 2007-11-21 14:28:13 -08:00
johnath@mozilla.com
a7e6402d8a Fix whitespace in Add Exception dialog. b=404425 r=kaie a=schrep 2007-11-21 13:34:18 -08:00
reed@reedloden.com
303be12e4a Back out patch from bug 373525 now that bug 386202 has been fixed [r=kaie a=blocking1.9+] 2007-11-20 16:46:47 -08:00
kaie@kuix.de
a2fa7d276d Bug 402726, Allow to view cert on SSL protocol errors r=rrelyea, r=neil, r=gavin, a=dsicore 2007-11-20 09:59:33 -08:00
kaie@kuix.de
5199056941 Bug 401755, Cleanup nsNSSIOLayer.cpp->getErrorMessage Patch v3 to address regression r=rrelyea, a=mtschrep 2007-11-20 09:56:04 -08:00
reed@reedloden.com
171fce8e91 Bug 403994 - "Don't install nss headers when system-nss is used" [p=fta+bugzilla@sofaraway.org (Fabien Tassin) r=rrelyea a1.9=schrep] 2007-11-20 02:05:41 -08:00
bzbarsky@mit.edu
66f3331177 Remove some duplicated code. Bug 397651, r=kaie, sr=jst, a=schrep 2007-11-19 20:32:06 -08:00