Commit Graph

39 Commits

Author SHA1 Message Date
Patrick McManus
c88a96db57 bug 658222 - Enable TLS False Start (PSM) r=bsmith
--HG--
extra : rebase_source : ac9f77ba73a0a902f4b6aa8d52add7d52efb1b53
2013-06-28 16:58:28 -04:00
David Keeler
a176617f97 bug 700693 - OCSP stapling PSM changes r=bsmith 2013-06-17 16:45:49 -07:00
Ryan VanderMeulen
55d8634607 Backed out changesets 448ba56d9ba4 and 8cea4b4646ef (bug 700693) for intermittent failures. 2013-06-20 19:50:13 -04:00
David Keeler
a7700e80cc bug 700693 - OCSP stapling PSM changes r=bsmith 2013-06-17 16:45:49 -07:00
Brian Smith
b0048e524e Bug 733642: Allow the user to enable any version of TLS that libssl supports, maintaining our current defaults, r=dolske
--HG--
extra : rebase_source : 3484236a9d357b70a88387e0f27d3757db79bd4b
2013-04-11 11:02:51 -07:00
Brian Smith
63175cf75b Bug 799009: Remove unneeded SSL-related security alerts, r=honzab, r=dao 2012-11-10 20:49:44 -08:00
Brian Smith
6a43df62c6 Bug 799007: Remove support for low/weak/null cipher suites, r=honzab, r=dao 2012-11-10 20:49:29 -08:00
Brian Smith
b78a4cfb46 backout cset b36d5c933092 due to orange 2012-11-10 19:09:07 -08:00
Brian Smith
5b7b090005 backout cset 30f8e29f9cd1 due to orange 2012-11-10 19:08:26 -08:00
Brian Smith
b3f665df00 Bug 799009: Remove unneeded SSL-related security alerts, r=honzab, r=dao
--HG--
extra : rebase_source : b6216bf3163f63f1eb4f16901943d9f351bca2cf
2012-11-10 18:19:55 -08:00
Brian Smith
741fc10ba2 Bug 799007: Remove support for low/weak/null cipher suites, r=honzab, r=dao
--HG--
extra : rebase_source : 822ef336a5cdeb7d6693dbe46844a26465600854
2012-11-10 18:18:14 -08:00
Brian Smith
e4441d0ef3 Bug 650355 - Stop accepting MD5 as a hash algorithm in signatures, r=johnath 2012-07-12 15:38:43 -07:00
Gervase Markham
87620f5676 Bug 716478 - update licence to MPL 2. 2012-05-21 12:12:37 +01:00
Kai Engert
7f18ba6efe backout bug 650355, r=wtc 2012-05-03 12:38:29 +02:00
Kai Engert
33b07ad87b Bug 650355, Stop accepting MD5 as a hash algorithm in certificate signatures, r=johnath 2012-03-16 16:42:51 +01:00
Kai Engert
c31cb0817e Bug 732390, Add preference to configure acceptance of MD5 in signatures, still accept by default, NSS calls r+=rrelyea, PSM pref code r+=honzab, pref name feedback+=dveditz 2012-03-10 22:18:13 +01:00
Brian Smith
60e886946e Bug 593077: Remove SSL 2.0 Support and Fortezza Cipher Suites, r=kaie 2011-08-15 22:38:56 -07:00
Ed Morley
d460b89ece Bug 654552 - Remove WinCE code from netwerk/* ; r=cbiesinger 2011-05-07 10:03:16 +02:00
Wan-Teh Chang
42d2fa87f3 Bug 591523: Disable SSL false start by default.
r=sayrer a=blocking2.0:beta7
2010-09-21 14:57:09 -07:00
Wan-Teh Chang
10e2a2f4b6 Bug 580679: remove preference security.ssl.enable_compression because
the change to build NSS with NSS_ENABLE_ZLIB=1 was reverted.  Will try
again after mozilla 2.0.  review+ and approval2.0+ by bsmedberg.
2010-09-02 13:40:19 -07:00
Wan-Teh Chang
17b96c0c9b Bug 580679: Build NSS with the TLS zlib compression code.
Add the security.ssl.enable_compression preference to
enable TLS compression, disabled by default.
r=khuey,kaie,sayrer,ted.  approval2.0+ by bsmedberg.
2010-08-12 14:12:05 -07:00
Wan-Teh Chang
3888ee5a98 Bug 583908 - Enable TLS false start in Mozilla. r/a=sayrer. (CLOSED TREE) 2010-08-03 23:36:53 -07:00
Wan-Teh Chang
bced390ee5 bustage fix for test_bug329869.html failure (undo pref flip from bug 583908) 2010-08-02 23:41:11 -07:00
Wan-Teh Chang
fb34c59071 Bug 583908: Enable TLS false start by default. Add the preference
security.ssl.enable_false_start to disable it.  r=sayrer.
approval2.0+ by sayrer.
2010-08-02 22:10:52 -07:00
Saint Wesonga
f8842ec6aa Bug 572668. Don't send the useless crypto token in the UA string. r=bzbarsky 2010-07-02 16:56:09 -04:00
Kai Engert
3171f40058 Bug 549641, Firefox raises alarm (in error console) about SSL servers being vulnerable to CVE-2009-3555
r=rrelyea, r=honzab
2010-05-03 13:34:16 +02:00
Kai Engert
5e46a26c8d Bug 535649 - Implement UI around CVE-2009-3555 and draft-rescorla-tls-renegotiation, r=rrelyea
== NSS 3.12.6 will block some renegotiation attempts on SSL sockets by default
== This patch does not yet implement new UI by default, but adds 4 new prefs to get fine grained control (blocking/allowing, displaying broken state)
== One of the prefs is a temporary pref that is supposed to go away at some point in the future
2010-02-07 13:09:51 +01:00
Vladimir Vukicevic
8025aafe1c b=511808, disable Camellia on Windows CE until alignment bug is fixed; r=jduell 2009-08-24 11:07:48 -07:00
Kai Engert
fd9b2056dc Bug 478839 - Support South Korean SEED crypto cipher suites. r=nelson 2009-08-09 09:19:06 +02:00
Kai Engert
361a0c664d Bug 431819, IMAP/POP/SMTP/LDAP with SSL client auth, Thunderbird repeatedly prompts for client certificate
(applies to firefox with SSL client auth, too)
r=relyea for an earlier patch that was checked in to mozilla-1.8.x more than a year ago
r=honzab on the diff on top of that earlier patch
a=beltzner for landing on restricted trunk
2009-05-21 00:21:51 +02:00
Reed Loden
93534d0ac8 Bug 454406 - "SSL handshakes fail after asking PSM to remember user's choice of client auth cert" (backed out changeset 6615b044bcd8 from bug 431819) 2008-10-01 01:01:39 -05:00
Kai Engert
a46e4f3f66 Bug 431819, SSL client auth, repeated prompts for client certificate
r=rrelyea, r=dveditz
2008-06-18 21:36:29 +02:00
dveditz@cruzio.com
6eaa1f8b0e bug 295922 change default for "select cert automatically", r/sr=biesi, blocking1.9+ 2008-03-07 02:52:21 -08:00
wtc@google.com
c3c311e84b Bug 415033: added a hidden preference (in about:config) for enabling or disabling the TLS session ticket extension. The patch is contributed by Nagendra Modadugu <ngm+mozilla@google.com>. r=wtc,rrelyea,kengert a1.9+=damons Modified Files: netwerk/base/public/security-prefs.js security/manager/ssl/src/nsNSSComponent.cpp 2008-02-26 15:09:39 -08:00
dtownsend@oxymoronical.com
7daec3138e Bug 341472: ship with fewer security warnings showing by default. p=Adam Guthrie <ispiked@gmail.com>, r=darin.moz@gmail.com, ui-r=beltzner, a=wanted-firefox3 2007-08-20 07:22:42 -07:00
kaie@kuix.de
931bb87869 Bug 382223, Add support for Camellia to PSM
Patch contributed by okazaki
r=kengert
2007-07-25 15:53:30 -07:00
kaie@kuix.de
4847498bb8 Bug 110161, enable OCSP by defaultr=cbiesinger, sr=mconnor 2007-06-05 12:27:42 -07:00
kaie@kuix.de
06f32215fd Bug 110161. Code related to the plan to enable OCSP by default.r=rrelyea, toolkit r=mconnor 2007-05-30 16:13:28 -07:00
hg@mozilla.com
465265d0d4 Free the (distributed) Lizard! Automatic merge from CVS: Module mozilla: tag HG_REPO_INITIAL_IMPORT at 22 Mar 2007 10:30 PDT, 2007-03-22 10:30:00 -07:00