Commit Graph

1585 Commits

Author SHA1 Message Date
Camilo Viecco
4867756afe Bug 927016 - Create EV testsuite in xpcshell. r=keeler 2013-11-21 13:40:31 -08:00
Brian Smith
4a26265906 Bug 898431: Update NSS to NSS 3.15.4 beta 5 (NSS_3_15_4_BETA5), r=me 2013-11-26 20:21:14 -08:00
David Keeler
4ca8cde553 bug 929617 - disregard expired stapled OCSP responses, acquire fresh ones r=briansmith 2013-11-25 15:40:11 -08:00
David Keeler
199e914302 bug 943115 - return early in CreateCertErrorRunnable for non-overridable errors r=briansmith 2013-11-26 13:49:47 -08:00
Patrick McManus
1cf2a2c447 Bug 942729, Part 2: Remove unused expected symmetric cipher mechanism, r=briansmith
--HG--
extra : rebase_source : 9630808b663d6a670c2e45d242177a640817f2ee
2013-11-25 18:12:40 -05:00
Brian Smith
1af2ea48ab Bug 942729, Part 1: Re-enable TLS False Start, r=mcmanus
--HG--
extra : rebase_source : 9908b1cbc3a30e9868739a10a705de8dbf30c5e1
2013-11-20 13:49:33 -08:00
Ehsan Akhgari
d6792974b0 Bug 942033 - Build security/manager in unified mode; r=bsmith
--HG--
extra : rebase_source : d48b78001772e0421a6dfc2ecd204434c33cd2d4
2013-11-26 13:18:21 -05:00
Mike Hommey
62cde4eed8 Bug 940407 - Kill GTEST_SOURCES. r=gps 2013-11-26 11:48:58 +09:00
Brian Smith
039c1380a4 Bug 898431: Update NSS to NSS 3.15.4 beta 4 (NSS_3_15_4_BETA4), r=me
--HG--
extra : rebase_source : 72f78bad585cdb1e09b5ebd1f7d0ba0e713de677
2013-11-25 17:08:17 -08:00
Brian Smith
d0a8f7663c Bug 942728 - Fix telemetry for cipher suites and crypto algorithms andkey sizes, r=keeler, a=lsblakk
--HG--
extra : rebase_source : bd0bc0d67fe811612df4210b2b5e19f1d5eca5a0
2013-11-21 13:35:23 -08:00
Phil Ringnalda
9710fc9cf4 Merge m-i to m-c 2013-11-23 08:18:35 -08:00
ffxbld
38118fee51 No bug, Automated HSTS preload list update from host bld-linux64-ix-034 - a=hsts-update 2013-11-23 03:17:46 -08:00
David Keeler
c4a1548118 bug 909044 - make generate_certs.sh work on windows r=briansmith DONTBUILD NPOTB 2013-11-22 11:03:34 -08:00
Camilo Viecco
1779a62ab0 Bug 938805 - Create standalone oscpResponseGenerator for testing. r=keeler 2013-10-29 14:02:35 -07:00
Richard Newman
09fc24021c Bug 935831 - Back out Bug 927230 for Android 2.3 startup crash, r=briansmith
--HG--
extra : rebase_source : 5b8ff8da93a882d6c8303c26d234ad63b748389c
2013-11-20 17:05:55 -08:00
Brian Smith
3621df35cd Bug 898431: Clean up security/patches to remove references to the private false start patch that is no longer applied, r=me, a=NPOTB
--HG--
extra : rebase_source : 94ee34c96357666e6c6d266fe9029af1d977a940
2013-11-20 17:05:24 -08:00
Christoph Kerschbaumer
ad08ffe884 Bug 935111 - Enable seccomp-bpf for Linux. r=jld 2013-11-19 16:09:18 -08:00
Patrick McManus
a64352d983 bug 802649 network priority for ocsp r=bsmith r=honzab
--HG--
extra : rebase_source : 17554ab7627e1d42a4736078254f94f36cf9c48b
2013-11-20 09:57:56 -05:00
Camilo Viecco
922b598103 Bug 912155 - Adding new interface in nssCertifcateDB for testing. r=bsmith 2013-11-11 16:37:06 -08:00
Mike Hommey
a65383e1e9 Bug 939632 - Remove LIBRARY_NAME for leaf libraries. r=gps
Landing on a CLOSED TREE.
2013-11-19 11:50:54 +09:00
Mike Hommey
8ceb917350 Bug 939074 - Remove most LIBXUL_LIBRARY. rs=gps 2013-11-19 11:48:10 +09:00
Mike Hommey
b95448fc0b Bug 914245 - Move FORCE_SHARED_LIB to moz.build. r=mshal 2013-11-19 11:47:45 +09:00
Mike Hommey
9fe772e7fd Bug 939044 - Rename remaining MODULE definitions to XPIDL_MODULE. r=mshal 2013-11-19 11:47:43 +09:00
Mike Hommey
bb6779efe3 Bug 939044 - Remove most definitions of MODULE. r=mshal 2013-11-19 11:47:39 +09:00
Mike Hommey
d7b6f95761 Bug 935881 - Use FINAL_LIBRARY for all (fake) libraries that end up linked in a single other library. r=gps 2013-11-19 11:47:14 +09:00
Camilo Viecco
ac92dc4190 Bug 935769: Fix shutdown locks for nssCerList and nssCertListEnumerator. r=bsmith 2013-11-11 15:16:45 -08:00
Landry Breuil
c9b75df3f7 Bug 939498 - Properly include <algorithm> for std::max. r=bsmith 2013-11-18 11:04:13 +01:00
Brian Smith
db5e56dfcb Bug 901718, Part 2: fix comment, r=me 2013-11-17 14:00:00 -08:00
Brian Smith
28c2d9c5d5 Bug 934663 followup: fix unused variable warning, r=me
--HG--
extra : rebase_source : e343b569df4d313f0f5f65fc82de99b9ea5b2ba9
2013-11-17 13:53:18 -08:00
Brian Smith
756bf5d8e7 Bug 901718: Remove TLS intolerance fallback from TLS 1.0 to SSL 3.0 for connection resets, r=honzab
--HG--
extra : rebase_source : 304e73126b66ae2e1a9fa6ae4c0cc3fa803aaac0
2013-11-17 13:51:37 -08:00
Brian Smith
00fb081b00 Bug 898431: Update to NSS 3.15.4 beta 3 (NSS_3_15_4_BETA3), r=me
--HG--
extra : rebase_source : a6dd976f23ebdd33dcf6fd26e4752ddb2bbc5363
2013-11-17 13:50:25 -08:00
Brian Smith
f9eb567f1a Bug 707275, Part 2: Add telemetry for cipher suites and key sizes, r=keeler
--HG--
extra : rebase_source : bd5f91877de357b415b6f143eccc87434d72db2b
2013-11-17 13:47:30 -08:00
Brian Smith
d5514d5bd0 Bug 707275, Part 1: Add telemetry for TLS intolerance, r=keeler
--HG--
extra : rebase_source : 8331f1486ad764838812ea500742a97fbc025858
2013-11-17 13:47:23 -08:00
Tom Schuster
f311064c6e Bug 933834 - Rename and handlify JS_ValueToString. r=terrence,bz 2013-11-16 13:31:36 +01:00
Ms2ger
6b38d3ca3d Backout changesets ded0d64f6786:03f041d03f24 and 30cbd1abde1a (bug 935696, bug 933834 and bug 939194) for build bustage. 2013-11-17 16:39:25 +01:00
Tom Schuster
dd485f9336 Bug 933834 - Rename and handlify JS_ValueToString. r=terrence,bz 2013-11-16 13:31:36 +01:00
Mike Hommey
213db4cc18 Bug 937005 - Install folded import library in the SDK. r=bsmedberg 2013-11-16 13:39:01 +09:00
Chris Peterson
e98e016e4f Bug 937459 - Remove unused private fields from nsNSSSocketInfo class. r=briansmith 2013-11-11 14:06:29 -08:00
Garrett Robinson
2046aafb3c Bug 932116 - Allow copying certificate viewer text. r=dkeeler, r=bsmedberg 2013-11-13 17:39:48 -08:00
Brian Smith
f89cf3237b Bug 932176: Add preference to control whether OCSP GET is used, off by default, r=cviecco
--HG--
extra : rebase_source : 4452d8959f22152512ed428184726c9834f6e4c3
2013-11-12 18:28:20 -08:00
Brian Smith
1ffb658968 Bug 898431: Update NSS to NSS 3.15.4 beta 2 (NSS_3_15_4_BETA2) again, r=me
--HG--
extra : rebase_source : 52c384c2f55da38d9576414a3c6e07427abd7000
2013-11-12 18:26:49 -08:00
Brian Smith
25f9e0dd0e Bug 937721, Part 3: Back out cset 61fb80e560de (NSS_3_15_4_BETA1, bug 898431), r=kaie 2013-11-12 11:45:48 -08:00
Brian Smith
ef07cd2e0d Bug 937721, Part 2: Back out cset 61fb80e560de (NSS_3_15_4_BETA2, bug 898431), r=kaie
--HG--
extra : rebase_source : 9b588bc5ba6e6a8ddd630e22ddf27667d6951edd
2013-11-12 11:27:59 -08:00
Brian Smith
30b1565bae Bug 937721, Part 1: Back out cset 8dbd3f432835 (bug 932176), r=kaie
--HG--
extra : rebase_source : 80f4b7ee7e4f77ef92cb42e6163f95074d68d306
2013-11-12 11:25:55 -08:00
David Keeler
351ae40bdc bug 932519 - (3/3) add an optional additional cert name as a parameter to GetOCSPResponseForType r=cviecco r=briansmith 2013-11-11 13:36:29 -08:00
David Keeler
a2409d20fd bug 932519 - (2/3) rename OCSP response generation test code to remove "stapling" r=cviecco r=briansmith 2013-11-11 13:42:35 -08:00
David Keeler
05787ee46f bug 932519 - (1/3) move common OCSP response generation test code for refactoring r=cviecco r=briansmith
--HG--
rename : security/manager/ssl/tests/unit/tlsserver/cmd/OCSPStaplingServer.cpp => security/manager/ssl/tests/unit/tlsserver/lib/OCSPCommon.cpp
rename : security/manager/ssl/tests/unit/tlsserver/cmd/OCSPStaplingServer.cpp => security/manager/ssl/tests/unit/tlsserver/lib/OCSPCommon.h
2013-11-11 13:43:04 -08:00
David Keeler
af97bf4e6f bug 935618 - (2/2) generateCRMFRequest: test using a bad popcert parameter r=cviecco 2013-11-07 13:33:58 -08:00
David Keeler
abf7bbfe3e bug 935618 - (1/2) check for an ec certificate in nsConvertToActualKeyGenParams r=cviecco 2013-11-07 13:34:59 -08:00
Jacob Acord
cd8b6c36c4 Bug 934673 - Fix nsRandomGenerator::GenerateRandomBytes can leak r=keeler 2013-11-11 14:38:37 -08:00
Jed Davis
bdf5094b93 Bug 936163 - Fix profiling-specific sandbox whitelist for x86_64. r=kang
There is no sigaction, only rt_sigaction.
2013-11-08 13:30:05 -08:00
Jed Davis
7a807d7a56 Bug 936252 - Augment seccomp whitelist for b2g mochitests. r=kang
FormHistory invokes sqlite3, which calls fsync and geteuid.
A form test calls nsIFile's remove method, which uses lstat.
The crash reporter uses socketpair/sendmsg, to send a pipe back to the parent.
2013-11-11 09:11:43 -05:00
Brian Smith
bf931cd331 Bug 934378, Bug 898431: Update NSS to NSS 3.15.4 beta 2 (NSS_3_15_4_BETA2), r=me
--HG--
extra : rebase_source : 079854e8533b46d24184547c1424078cfb68852f
2013-11-09 11:02:17 -08:00
Brian Smith
44c48384aa Bug 934663: Enable AES-GCM cipher suites; disable SEED, ECDH_*, and FIPS, and DSS+Camellia cipher suites, r=cviecco
--HG--
extra : rebase_source : a1542ba09258448e571109bc4aa6423cd9ad616a
2013-11-01 05:20:03 -07:00
Brian Smith
8f278c6de0 Bug 934327: Give OCSP-related NSS errors symbolic names in xpcshell tests, r=keeler
--HG--
extra : rebase_source : 10bd4842f16a6a4e1cbd8d50505a70a6502d9581
2013-10-14 21:36:18 -07:00
Garrett Robinson
fcd3642ac2 Bug 855326 - CSP 1.1 nonce-source for scripts and styles r=mrbkap r=dholbert r=geekboy 2013-11-08 15:44:39 -08:00
Carsten "Tomcat" Book
15d2893d44 Merge mozilla-central to mozilla-inbound 2013-11-09 12:25:41 +01:00
ffxbld
8f25c19a66 No bug, Automated HSTS preload list update from host bld-linux64-ec2-173 - a=hsts-update 2013-11-09 03:19:13 -08:00
Jed Davis
5b0c9a29cf Bug 936145 - Clean up architecture-specific parts of seccomp whitelist. r=kang 2013-11-08 15:31:20 -05:00
Daniel Holbert
a943af2236 backout 57213b64023b (bug 855326) for build bustage in debug builds
CLOSED TREE
2013-11-08 11:22:36 -08:00
Garrett Robinson
99a316d224 Bug 855326 - CSP 1.1 nonce-source for scripts and styles. r=mrbkap r=dholbert r=geekboy 2013-11-08 09:20:43 -08:00
Mike Hommey
1595ce6870 Bug 934864 - Add option to make INSTALL_TARGETS and PP_TARGETS keep the original path when copying/preprocessing. r=gps
Also, refactored them for more debuggability and clarity.
2013-11-09 10:32:53 +09:00
David Keeler
5f61d804d5 bug 934716 - generateCRMFRequest: accept only the first repeated keygen parameter r=cviecco 2013-11-07 10:42:59 -08:00
Kai Engert
d310b709e8 Bug 898431, Bug 935959, pick up NSS 3.15.4 beta1 in order to test recent NSS fixes, rs=me 2013-11-07 15:31:39 +01:00
Michael Shuen
d283cd36a9 Bug 933995 - Check return value of ImportCertsIntoPermanentStorage and CERT_ImportCerts. r=dkeeler 2013-11-06 12:30:45 -05:00
Brian R. Bondy
e6fe7374c3 Bug 935042 - Allow more than one process to be sandboxed from a single sandboxbroker. r=aklotz 2013-11-05 13:07:40 -05:00
Ryan VanderMeulen
f204ac27b3 Merge m-c to inbound. 2013-11-04 16:31:13 -05:00
Carsten "Tomcat" Book
f10da167db merge b2g-inbound to mozilla-central 2013-11-04 13:52:18 +01:00
Brian R. Bondy
2edaa77988 Bug 934445 - Fix Windows linking error in Release mode only when MOZ_CONTENT_SANDBOX is defined. r=aklotz 2013-11-04 15:35:03 -05:00
Michael Shuen
8cc948db31 Bug 933998 - Prevent leak in nsNSSCertificateDB::ConstructX509FromBase64. r=bsmith 2013-11-04 14:22:37 -05:00
Meadhbh Hamrick
873b00084f Bug 861266: Enable TLS 1.2 by default, r=briansmith
--HG--
extra : rebase_source : 4f28724d58791e1ee0e281ff48232f5aaca2048f
2013-11-01 04:48:57 -07:00
Brian Smith
303d322823 Bug 932176: Add preference to control whether OCSP GET is used, off by default, r=cviecco
--HG--
extra : rebase_source : 7cbc273155d04bc64a110eda9216c6f727ce0c18
2013-10-24 14:32:09 -07:00
Brian Smith
84fc62b0e0 Bug 898431: Update NSS to NSS 3.15.3 Beta 2 (NSS_3_15_3_BETA2), r=me
--HG--
extra : rebase_source : e0c24dc8228477fc0647a9e1f534dcf96a355095
2013-11-01 04:08:28 -07:00
Brian Smith
b20d734e51 Bug 934171: Fix OCSP stapling test, r=mcmanus
--HG--
extra : rebase_source : 4f77b595b2004dabf3444187424ac4426fb7a41a
2013-11-02 19:57:26 -07:00
ffxbld
1394251eca No bug, Automated HSTS preload list update from host bld-linux64-ec2-406 - a=hsts-update 2013-11-02 03:19:53 -07:00
Mike Hommey
ff4fa14954 Bug 933135 - Treat SIMPLE_PROGRAMS more like PROGRAM. r=mshal 2013-11-02 08:43:55 +09:00
Brian R. Bondy
9b594b1851 Bug 925571 - Packaging for Sandboxing dll. r=bsmedberg 2013-10-30 16:58:56 -07:00
Brian R. Bondy
038d21bf1d Bug 925571 - Initial Windows content process sandbox broker code. r=aklotz 2013-10-30 16:58:52 -07:00
Brian R. Bondy
b77c4127db Bug 925571 - Build config for plugin_container windows sandboxing. r=bsmedberg 2013-10-30 16:58:45 -07:00
Brian Smith
49651e60b3 Bug 733647: Enable TLS 1.1 by default, r=wtc
--HG--
extra : rebase_source : 539406fa06a715e60d84b207a6112257262817f6
2013-10-26 01:01:37 -07:00
David Keeler
77da53a2c2 bug 930209 - differentiate empty OCSP response from no OCSP response in tests r=cviecco 2013-10-28 13:15:53 -07:00
Brian R. Bondy
4d159c0649 Bug 922756 - Changes to import of Chromium sandbox so that it's buildable. r=aklotz 2013-10-28 14:54:46 -07:00
Brian R. Bondy
5763932590 Bug 922756 - Initial import of subset of Chromium sandbox. r=aklotz 2013-10-28 14:54:42 -07:00
Brian R. Bondy
f0bbd6b4f3 Bug 922756 - Build config for Chromium sandbox. r=bsmedberg
--HG--
rename : security/sandbox/LICENSE => security/sandbox/linux/LICENSE
rename : security/sandbox/Makefile.in => security/sandbox/linux/Makefile.in
rename : security/sandbox/Sandbox.cpp => security/sandbox/linux/Sandbox.cpp
rename : security/sandbox/Sandbox.h => security/sandbox/linux/Sandbox.h
rename : security/sandbox/android_arm_ucontext.h => security/sandbox/linux/android_arm_ucontext.h
rename : security/sandbox/android_i386_ucontext.h => security/sandbox/linux/android_i386_ucontext.h
rename : security/sandbox/android_ucontext.h => security/sandbox/linux/android_ucontext.h
rename : security/sandbox/arm_linux_syscalls.h => security/sandbox/linux/arm_linux_syscalls.h
rename : security/sandbox/linux_seccomp.h => security/sandbox/linux/linux_seccomp.h
rename : security/sandbox/linux_syscalls.h => security/sandbox/linux/linux_syscalls.h
rename : security/sandbox/moz.build => security/sandbox/linux/moz.build
rename : security/sandbox/seccomp_filter.h => security/sandbox/linux/seccomp_filter.h
rename : security/sandbox/x86_32_linux_syscalls.h => security/sandbox/linux/x86_32_linux_syscalls.h
rename : security/sandbox/x86_64_linux_syscalls.h => security/sandbox/linux/x86_64_linux_syscalls.h
2013-10-28 14:54:36 -07:00
Brian R. Bondy
66dccd9d5b Bug 931429 - Fix PR_LOG compiling error for sandbox code on Linux. r=kang 2013-10-28 14:42:26 -07:00
Birunthan Mohanathas
5d748e0ca5 Bug 784739 - Switch from NULL to nullptr in security/; r=ehsan 2013-10-28 10:05:19 -04:00
Eddy Bruel
14baac685a Bug 880330 - Refactor crypto to use the new options API; r=bholley 2013-10-28 12:57:08 +01:00
Phil Ringnalda
482514a7e6 Merge m-c to m-i 2013-10-26 11:19:17 -07:00
ffxbld
36f17102a2 No bug, Automated HSTS preload list update from host bld-linux64-ec2-441 - a=hsts-update 2013-10-26 03:17:16 -07:00
Mike Hommey
1d566f7586 Bug 929905 - Consolidate sources in moz.build. r=gps 2013-10-25 08:23:05 +09:00
Brian Smith
26cbddf5a5 Bug 754356: Remove TLS intolerance timeout logic, r=honzab
--HG--
extra : rebase_source : 49c4563800ce9727e11e08d857db44c1294a074b
2013-10-15 01:14:50 -07:00
Brian Smith
65651fe591 Backed out changeset 673ca84a9171 because of wrong bug number in commit message
--HG--
extra : rebase_source : 32c92c4cb98097caf8805fdae98d9c435580c8c9
2013-10-26 00:51:47 -07:00
Brian Smith
db090c14ff Bug 450280: Remove timeout logic for TLS intolerance, r=honzab 2013-10-15 01:14:50 -07:00
Patrick Wang
a7d87f751d Bug 881761 - Part 2: Exposing configureMD5 in nsNSSComponent. r=bsmith 2013-10-11 11:27:51 +08:00
Patrick Wang
d59e23d5c6 Bug 881761 - Part 1: Move initializing cipher suite to public function. r=keeler,honzab 2013-09-17 15:29:15 +08:00
Brian O'Keefe
4c98f61956 Bug 928709 - Convert chromium-config.mk to mozbuild, r=mshal 2013-10-02 13:17:55 -04:00
Michael Harrison
ba6232742c Bug 917049 - Remove the security.enable_tls_session_tickets pref. r=keeler 2013-10-22 12:33:00 +01:00
Carsten "Tomcat" Book
5b11b4cbda Merge mozilla-inbound to Mozilla-Central 2013-10-24 07:05:29 +02:00
Mike Hommey
61124c1afc Bug 921492 - Make StrictOrderingOnAppendList use actual alphabetical sorting. r=mshal,r=gps 2013-10-24 08:05:43 +09:00
Mike Hommey
e2ae65f67a Bug 913268 - Make CPP_SOURCES a StrictOrderingOnAppendList. r=mshal 2013-10-24 08:00:23 +09:00