Commit Graph

1546 Commits

Author SHA1 Message Date
Brian Smith
60bd09c93f Bug 932176: Add preference to control whether OCSP GET is used, off by default, r=cviecco
--HG--
extra : rebase_source : 4452d8959f22152512ed428184726c9834f6e4c3
2013-11-12 18:28:20 -08:00
Brian Smith
5cce2d3d3f Bug 898431: Update NSS to NSS 3.15.4 beta 2 (NSS_3_15_4_BETA2) again, r=me
--HG--
extra : rebase_source : 52c384c2f55da38d9576414a3c6e07427abd7000
2013-11-12 18:26:49 -08:00
Brian Smith
7007178a15 Bug 937721, Part 3: Back out cset 61fb80e560de (NSS_3_15_4_BETA1, bug 898431), r=kaie 2013-11-12 11:45:48 -08:00
Brian Smith
e529563450 Bug 937721, Part 2: Back out cset 61fb80e560de (NSS_3_15_4_BETA2, bug 898431), r=kaie
--HG--
extra : rebase_source : 9b588bc5ba6e6a8ddd630e22ddf27667d6951edd
2013-11-12 11:27:59 -08:00
Brian Smith
1e15b44fa5 Bug 937721, Part 1: Back out cset 8dbd3f432835 (bug 932176), r=kaie
--HG--
extra : rebase_source : 80f4b7ee7e4f77ef92cb42e6163f95074d68d306
2013-11-12 11:25:55 -08:00
David Keeler
979f562dfd bug 932519 - (3/3) add an optional additional cert name as a parameter to GetOCSPResponseForType r=cviecco r=briansmith 2013-11-11 13:36:29 -08:00
David Keeler
3189c3e838 bug 932519 - (2/3) rename OCSP response generation test code to remove "stapling" r=cviecco r=briansmith 2013-11-11 13:42:35 -08:00
David Keeler
373b5ea9bf bug 932519 - (1/3) move common OCSP response generation test code for refactoring r=cviecco r=briansmith
--HG--
rename : security/manager/ssl/tests/unit/tlsserver/cmd/OCSPStaplingServer.cpp => security/manager/ssl/tests/unit/tlsserver/lib/OCSPCommon.cpp
rename : security/manager/ssl/tests/unit/tlsserver/cmd/OCSPStaplingServer.cpp => security/manager/ssl/tests/unit/tlsserver/lib/OCSPCommon.h
2013-11-11 13:43:04 -08:00
David Keeler
78a5e9e6f5 bug 935618 - (2/2) generateCRMFRequest: test using a bad popcert parameter r=cviecco 2013-11-07 13:33:58 -08:00
David Keeler
be9934f8aa bug 935618 - (1/2) check for an ec certificate in nsConvertToActualKeyGenParams r=cviecco 2013-11-07 13:34:59 -08:00
Jacob Acord
d01a66c71a Bug 934673 - Fix nsRandomGenerator::GenerateRandomBytes can leak r=keeler 2013-11-11 14:38:37 -08:00
Jed Davis
0575f79039 Bug 936163 - Fix profiling-specific sandbox whitelist for x86_64. r=kang
There is no sigaction, only rt_sigaction.
2013-11-08 13:30:05 -08:00
Jed Davis
bf53218b36 Bug 936252 - Augment seccomp whitelist for b2g mochitests. r=kang
FormHistory invokes sqlite3, which calls fsync and geteuid.
A form test calls nsIFile's remove method, which uses lstat.
The crash reporter uses socketpair/sendmsg, to send a pipe back to the parent.
2013-11-11 09:11:43 -05:00
Brian Smith
3156fc687b Bug 934378, Bug 898431: Update NSS to NSS 3.15.4 beta 2 (NSS_3_15_4_BETA2), r=me
--HG--
extra : rebase_source : 079854e8533b46d24184547c1424078cfb68852f
2013-11-09 11:02:17 -08:00
Brian Smith
5561c4b35b Bug 934663: Enable AES-GCM cipher suites; disable SEED, ECDH_*, and FIPS, and DSS+Camellia cipher suites, r=cviecco
--HG--
extra : rebase_source : a1542ba09258448e571109bc4aa6423cd9ad616a
2013-11-01 05:20:03 -07:00
Brian Smith
780de23203 Bug 934327: Give OCSP-related NSS errors symbolic names in xpcshell tests, r=keeler
--HG--
extra : rebase_source : 10bd4842f16a6a4e1cbd8d50505a70a6502d9581
2013-10-14 21:36:18 -07:00
Garrett Robinson
e97987f422 Bug 855326 - CSP 1.1 nonce-source for scripts and styles r=mrbkap r=dholbert r=geekboy 2013-11-08 15:44:39 -08:00
Carsten "Tomcat" Book
b65d0a157a Merge mozilla-central to mozilla-inbound 2013-11-09 12:25:41 +01:00
ffxbld
6795532ada No bug, Automated HSTS preload list update from host bld-linux64-ec2-173 - a=hsts-update 2013-11-09 03:19:13 -08:00
Jed Davis
8a6912c5a8 Bug 936145 - Clean up architecture-specific parts of seccomp whitelist. r=kang 2013-11-08 15:31:20 -05:00
Daniel Holbert
0d7ef379ad backout 57213b64023b (bug 855326) for build bustage in debug builds
CLOSED TREE
2013-11-08 11:22:36 -08:00
Garrett Robinson
7cbc01f239 Bug 855326 - CSP 1.1 nonce-source for scripts and styles. r=mrbkap r=dholbert r=geekboy 2013-11-08 09:20:43 -08:00
Mike Hommey
425071163a Bug 934864 - Add option to make INSTALL_TARGETS and PP_TARGETS keep the original path when copying/preprocessing. r=gps
Also, refactored them for more debuggability and clarity.
2013-11-09 10:32:53 +09:00
David Keeler
9a14744725 bug 934716 - generateCRMFRequest: accept only the first repeated keygen parameter r=cviecco 2013-11-07 10:42:59 -08:00
Kai Engert
8322c5cd60 Bug 898431, Bug 935959, pick up NSS 3.15.4 beta1 in order to test recent NSS fixes, rs=me 2013-11-07 15:31:39 +01:00
Michael Shuen
88afe268b2 Bug 933995 - Check return value of ImportCertsIntoPermanentStorage and CERT_ImportCerts. r=dkeeler 2013-11-06 12:30:45 -05:00
Brian R. Bondy
6ceb592a81 Bug 935042 - Allow more than one process to be sandboxed from a single sandboxbroker. r=aklotz 2013-11-05 13:07:40 -05:00
Ryan VanderMeulen
41e603833c Merge m-c to inbound. 2013-11-04 16:31:13 -05:00
Carsten "Tomcat" Book
dc3520d4b7 merge b2g-inbound to mozilla-central 2013-11-04 13:52:18 +01:00
Brian R. Bondy
7b8c0a47a1 Bug 934445 - Fix Windows linking error in Release mode only when MOZ_CONTENT_SANDBOX is defined. r=aklotz 2013-11-04 15:35:03 -05:00
Michael Shuen
4bbdb5bd61 Bug 933998 - Prevent leak in nsNSSCertificateDB::ConstructX509FromBase64. r=bsmith 2013-11-04 14:22:37 -05:00
Meadhbh Hamrick
d9c9da76b7 Bug 861266: Enable TLS 1.2 by default, r=briansmith
--HG--
extra : rebase_source : 4f28724d58791e1ee0e281ff48232f5aaca2048f
2013-11-01 04:48:57 -07:00
Brian Smith
8ba7715f0f Bug 932176: Add preference to control whether OCSP GET is used, off by default, r=cviecco
--HG--
extra : rebase_source : 7cbc273155d04bc64a110eda9216c6f727ce0c18
2013-10-24 14:32:09 -07:00
Brian Smith
29ae1ad3b1 Bug 898431: Update NSS to NSS 3.15.3 Beta 2 (NSS_3_15_3_BETA2), r=me
--HG--
extra : rebase_source : e0c24dc8228477fc0647a9e1f534dcf96a355095
2013-11-01 04:08:28 -07:00
Brian Smith
1f07bf5b3c Bug 934171: Fix OCSP stapling test, r=mcmanus
--HG--
extra : rebase_source : 4f77b595b2004dabf3444187424ac4426fb7a41a
2013-11-02 19:57:26 -07:00
ffxbld
abf5d58b4c No bug, Automated HSTS preload list update from host bld-linux64-ec2-406 - a=hsts-update 2013-11-02 03:19:53 -07:00
Mike Hommey
0b53da458d Bug 933135 - Treat SIMPLE_PROGRAMS more like PROGRAM. r=mshal 2013-11-02 08:43:55 +09:00
Brian R. Bondy
423a5df4f3 Bug 925571 - Packaging for Sandboxing dll. r=bsmedberg 2013-10-30 16:58:56 -07:00
Brian R. Bondy
af6005bb38 Bug 925571 - Initial Windows content process sandbox broker code. r=aklotz 2013-10-30 16:58:52 -07:00
Brian R. Bondy
cc0884e81f Bug 925571 - Build config for plugin_container windows sandboxing. r=bsmedberg 2013-10-30 16:58:45 -07:00
Brian Smith
1e9e2670cc Bug 733647: Enable TLS 1.1 by default, r=wtc
--HG--
extra : rebase_source : 539406fa06a715e60d84b207a6112257262817f6
2013-10-26 01:01:37 -07:00
David Keeler
f957c2f300 bug 930209 - differentiate empty OCSP response from no OCSP response in tests r=cviecco 2013-10-28 13:15:53 -07:00
Brian R. Bondy
28868558b4 Bug 922756 - Changes to import of Chromium sandbox so that it's buildable. r=aklotz 2013-10-28 14:54:46 -07:00
Brian R. Bondy
d223207229 Bug 922756 - Initial import of subset of Chromium sandbox. r=aklotz 2013-10-28 14:54:42 -07:00
Brian R. Bondy
d8605953fb Bug 922756 - Build config for Chromium sandbox. r=bsmedberg
--HG--
rename : security/sandbox/LICENSE => security/sandbox/linux/LICENSE
rename : security/sandbox/Makefile.in => security/sandbox/linux/Makefile.in
rename : security/sandbox/Sandbox.cpp => security/sandbox/linux/Sandbox.cpp
rename : security/sandbox/Sandbox.h => security/sandbox/linux/Sandbox.h
rename : security/sandbox/android_arm_ucontext.h => security/sandbox/linux/android_arm_ucontext.h
rename : security/sandbox/android_i386_ucontext.h => security/sandbox/linux/android_i386_ucontext.h
rename : security/sandbox/android_ucontext.h => security/sandbox/linux/android_ucontext.h
rename : security/sandbox/arm_linux_syscalls.h => security/sandbox/linux/arm_linux_syscalls.h
rename : security/sandbox/linux_seccomp.h => security/sandbox/linux/linux_seccomp.h
rename : security/sandbox/linux_syscalls.h => security/sandbox/linux/linux_syscalls.h
rename : security/sandbox/moz.build => security/sandbox/linux/moz.build
rename : security/sandbox/seccomp_filter.h => security/sandbox/linux/seccomp_filter.h
rename : security/sandbox/x86_32_linux_syscalls.h => security/sandbox/linux/x86_32_linux_syscalls.h
rename : security/sandbox/x86_64_linux_syscalls.h => security/sandbox/linux/x86_64_linux_syscalls.h
2013-10-28 14:54:36 -07:00
Brian R. Bondy
fcf90538ed Bug 931429 - Fix PR_LOG compiling error for sandbox code on Linux. r=kang 2013-10-28 14:42:26 -07:00
Birunthan Mohanathas
54a21686df Bug 784739 - Switch from NULL to nullptr in security/; r=ehsan 2013-10-28 10:05:19 -04:00
Eddy Bruel
5f638b637c Bug 880330 - Refactor crypto to use the new options API; r=bholley 2013-10-28 12:57:08 +01:00
Phil Ringnalda
76cf34210d Merge m-c to m-i 2013-10-26 11:19:17 -07:00
ffxbld
5fa4c03bd1 No bug, Automated HSTS preload list update from host bld-linux64-ec2-441 - a=hsts-update 2013-10-26 03:17:16 -07:00
Mike Hommey
f1c0c07862 Bug 929905 - Consolidate sources in moz.build. r=gps 2013-10-25 08:23:05 +09:00
Brian Smith
8d40e0fc06 Bug 754356: Remove TLS intolerance timeout logic, r=honzab
--HG--
extra : rebase_source : 49c4563800ce9727e11e08d857db44c1294a074b
2013-10-15 01:14:50 -07:00
Brian Smith
27a06c2895 Backed out changeset 673ca84a9171 because of wrong bug number in commit message
--HG--
extra : rebase_source : 32c92c4cb98097caf8805fdae98d9c435580c8c9
2013-10-26 00:51:47 -07:00
Brian Smith
098fe5e9a2 Bug 450280: Remove timeout logic for TLS intolerance, r=honzab 2013-10-15 01:14:50 -07:00
Patrick Wang
b15a55689d Bug 881761 - Part 2: Exposing configureMD5 in nsNSSComponent. r=bsmith 2013-10-11 11:27:51 +08:00
Patrick Wang
08406ce3d3 Bug 881761 - Part 1: Move initializing cipher suite to public function. r=keeler,honzab 2013-09-17 15:29:15 +08:00
Brian O'Keefe
0cbcd904c7 Bug 928709 - Convert chromium-config.mk to mozbuild, r=mshal 2013-10-02 13:17:55 -04:00
Michael Harrison
d5fa5504ca Bug 917049 - Remove the security.enable_tls_session_tickets pref. r=keeler 2013-10-22 12:33:00 +01:00
Carsten "Tomcat" Book
daa4f1689c Merge mozilla-inbound to Mozilla-Central 2013-10-24 07:05:29 +02:00
Mike Hommey
80c623bb6a Bug 921492 - Make StrictOrderingOnAppendList use actual alphabetical sorting. r=mshal,r=gps 2013-10-24 08:05:43 +09:00
Mike Hommey
5072f65f8c Bug 913268 - Make CPP_SOURCES a StrictOrderingOnAppendList. r=mshal 2013-10-24 08:00:23 +09:00
Paolo Amadini
173b4dfb03 Bug 928349 - Add a build-time setting to use only the JavaScript API for downloads, and enable it in Firefox for Desktop. r=enn 2013-10-23 21:46:47 +02:00
Camilo Viecco
18b771cc8b Bug 918120: reduce soft fail ocsp timeouts to 3 secs. r=bsmith. 2013-09-23 09:25:53 -07:00
Camilo Viecco
b6082bd39c Bug 911336: nsNSSCertificateDB does not lock nssShutdown correctly. r=keeler. 2013-08-29 16:15:35 -07:00
Ms2ger
07dff61e68 Bug 908142 - Part b: Move FAIL_ON_WARNINGS to moz.build in security/sandbox/; r=gps 2013-10-20 09:25:19 +02:00
ffxbld
e2bd992f45 No bug, Automated HSTS preload list update from host bld-linux64-ec2-326 - a=hsts-update 2013-10-19 03:22:40 -07:00
Camilo Viecco
abbecf2ab0 Bug 895601: Add tests to cert verification in psm. r=keeler. 2013-07-30 11:18:40 -07:00
Chris Peterson
db3e2e4971 Bug 927209 - Fix -Wunused-function and -Wreorder warnings in nsNSSIOLayer.cpp. r=bsmith 2013-10-15 16:22:13 -07:00
Mike Hommey
5badab1842 Bug 926906 - Kill core_abspath, core_realpath and core_winabspath. r=gps 2013-10-17 07:55:16 +09:00
Mike Hommey
c193f8915c Bug 925605 - Allow to build with a special build of GNU make on windows. r=gps 2013-10-16 08:34:18 +09:00
Wes Kocher
7bb1f5f924 Backed out changeset 5f0bfb16fa4a (bug 925605) 2013-10-15 16:57:00 -07:00
Mike Hommey
1ce72be793 Bug 925605 - Allow to build with a special build of GNU make on windows. r=gps 2013-10-16 08:34:18 +09:00
Brian Smith
0e1e03df3a Bug 839310: Expand TLS intolerance logic to work for versions beyond TLS 1.0, r=keeler, r=wtc
--HG--
extra : rebase_source : b83a610d08abb428f0f6894fa935712f820ddfe8
2013-10-11 00:17:19 -07:00
ffxbld
501e896168 No bug, Automated HSTS preload list update from host bld-linux64-ec2-391 - a=hsts-update 2013-10-12 03:18:11 -07:00
Ed Morley
60acc422da Backed out changeset cff5a22acb7c (bug 924992) for breaking upload_symbolds on Nightlies 2013-10-11 17:49:25 +01:00
Honza Bambas
991cb8a142 Bug 923248 - Fix typo in proxy/direct NTLM module telemetry accumulation, r=jduell 2013-10-10 19:10:45 +02:00
Mike Hommey
dcb5764ee4 Bug 924992 - Use an absolute path for DIST; r=gps 2013-10-10 18:00:44 +09:00
Jed Davis
6a41b94bbb Bug 912822 - Enable sandbox logging on Android without setting NSPR_LOG_MODULES. r=kang 2013-10-06 15:15:50 -04:00
Phil Ringnalda
19f32cbe23 Merge m-i to m-c 2013-10-05 17:39:34 -07:00
ffxbld
947dda8fb9 No bug, Automated HSTS preload list update from host bld-linux64-ec2-165 - a=hsts-update 2013-10-05 03:24:02 -07:00
Jed Davis
cafbb08ba8 Bug 919090 - Let content processes use sigaction and tgkill if profiling enabled. r=kang 2013-10-04 13:29:48 -04:00
Ms2ger
ae8c899faf Merge m-c to inbound. 2013-10-03 11:09:17 +02:00
Ms2ger
df62fb8b0f Bug 900980 - Part a: Move unconditional assignments to EXPORT_LIBRARY to moz.build; rs=gps 2013-10-03 09:11:13 +02:00
Ms2ger
6b293d77c2 Bug 922288 - Remove some unnecessary boilerplate from Makefile.ins; r=mshal 2013-10-03 09:10:00 +02:00
Ms2ger
9d5ce8dfb7 Bug 922268 - Remove empty makefiles; r=gps 2013-10-03 09:10:00 +02:00
Gregory Szorc
f0bcf1241b Bug 920223 - Part 3: Mass convert MOCHITEST_BROWSER_FILES to manifests; rs=Ms2ger 2013-09-30 09:52:06 +02:00
Gregory Szorc
89c902c7b2 Bug 920223 - Part 2: Mass convert MOCHITEST_CHROME_FILES to manifests; rs=Ms2ger 2013-09-30 09:52:01 +02:00
Gregory Szorc
c44d9c8614 Bug 920223 - Part 1: Mass convert MOCHITEST_FILES to manifests; rs=Ms2ger 2013-09-30 09:51:57 +02:00
Ed Morley
eae8f15a4a Backed out changeset 77bff106b704 (bug 920223) 2013-09-30 12:50:12 +01:00
Ed Morley
74e3d6ce30 Backed out changeset 68b6b152f51a (bug 920223) 2013-09-30 12:50:09 +01:00
Ed Morley
5e3c678fac Backed out changeset 8b02873ee07e (bug 920223) 2013-09-30 12:50:05 +01:00
Gregory Szorc
18c2c27094 Bug 920223 - Part 3: Mass convert MOCHITEST_BROWSER_FILES to manifests; rs=Ms2ger 2013-09-30 09:52:06 +02:00
Gregory Szorc
47e946bebe Bug 920223 - Part 2: Mass convert MOCHITEST_CHROME_FILES to manifests; rs=Ms2ger 2013-09-30 09:52:01 +02:00
Gregory Szorc
3d0a157ac2 Bug 920223 - Part 1: Mass convert MOCHITEST_FILES to manifests; rs=Ms2ger 2013-09-30 09:51:57 +02:00
David Keeler
e9308a75cf bug 914034 - cache stapled OCSP responses on the cert verification thread r=briansmith 2013-10-02 15:08:07 -07:00
Ehsan Akhgari
019f6a95dd Backed out changeset a73ffb0d0c97 because of build bustage 2013-09-29 17:20:07 -04:00
Ehsan Akhgari
996fe50ca8 Remove a number of unused variables, no bug 2013-09-29 16:42:12 -04:00
ffxbld
ed706caed7 No bug, Automated HSTS preload list update from host bld-linux64-ec2-318 - a=hsts-update 2013-09-28 03:30:01 -07:00
Wes Kocher
baa377603f Merge b2g-inbound to m-c 2013-09-27 19:35:44 -07:00
Martijn Wargers
febeb562f6 Bug 918604 - Remove more enablePrivilege calls. r=jmaher 2013-09-25 19:32:20 +02:00