Cykesiopka
f21804994b
Bug 1167254 - Convert test_bug234856.html mochitest to an xpcshell test. r=keeler
2015-05-28 02:22:00 +02:00
Makoto Kato
edc1420150
Bug 1166323 - Remove IME sequence number. r=masayuki,nchen
2015-05-28 13:51:40 +09:00
Birunthan Mohanathas
b71747de61
Bug 1164714 - Fix unified compilation bustage on Windows. r=me
...
CLOSED TREE
2015-05-27 19:37:09 -07:00
Birunthan Mohanathas
2e77719e3d
Bug 1164714 - Move netwerk/base/nsISiteSecurityService.idl into security/manager/ssl. r=keeler,mcmanus
2015-05-26 10:31:30 -07:00
Birunthan Mohanathas
37d96edab0
Bug 1164714 - Move and flatten security/manager/boot/{public,src}/ into security/manager/ssl/. r=keeler
2015-05-26 10:31:25 -07:00
Birunthan Mohanathas
a7011ffde2
Bug 1164714 - Flatten security/manager/ssl/src/ directory. r=keeler
2015-05-26 10:31:23 -07:00
Birunthan Mohanathas
2befc8e59a
Bug 1164714 - Flatten security/manager/ssl/public/ directory. r=keeler
2015-05-26 10:30:46 -07:00
Mike Hommey
2c863b9fe4
Bug 991983 - Define SOURCES as SourcePath. r=gps
2015-05-28 07:34:15 +09:00
Kaspar Brand
d8d1910516
Bug 1168048 - Avoid potential null-pointer dereferencing in nsNSSCertificateDB r=keeler
2015-05-27 14:12:26 -07:00
Cykesiopka
6cc0362091
Bug 1167866 - Add result strings to PSM test_cert* xpcshell tests. r=keeler
2015-05-23 19:57:32 -07:00
Phil Ringnalda
199f7ab4ef
Merge m-i to m-c, a=merge
2015-05-23 13:31:21 -07:00
ffxbld
d0c500bd71
No bug, Automated HPKP preload list update from host bld-linux64-spot-023 - a=hpkp-update
2015-05-23 03:32:23 -07:00
ffxbld
4a12cdd4e2
No bug, Automated HSTS preload list update from host bld-linux64-spot-023 - a=hsts-update
2015-05-23 03:32:21 -07:00
Makoto Kato
d62075c412
Bug 958421 - XUL dialog for certificate is security/manager/pki/resouces is unnecessary on Firefox Android. r=snorp
2015-05-22 14:28:04 +09:00
Nathan Froyd
f61c010661
Bug 1160485 - remove implicit conversion from RefPtr<T> to TemporaryRef<T>; r=ehsan
...
Having this implicit conversion means that we can silently do extra
refcounting when it's completely unnecessary. It's also an obstacle to
making RefPtr more nsRefPtr-like, so let's get rid of it.
2015-05-01 09:14:16 -04:00
Tim Taubert
66b896c92f
Bug 1060112 - Don't treat OCSP responses omitting the requested certificate status as "unknown certificate" responses blocking the connection r=keeler
2015-05-21 13:39:34 -04:00
Eric Rahm
ccf1ec07c6
Bug 1165515 - Part 1: Convert PR_LOG to MOZ_LOG. r=froydnj
2015-05-21 13:22:04 -07:00
Nicholas Nethercote
5990994dda
Bug 1166586 (part 2) - Convert some easy PL_DHashTable{Init,Finish} cases. r=froydnj.
...
This patch converts easy cases, i.e. where the PL_DHashTableInit() call occurs
in a constructor and the PL_DHashTableFinish() call occurs in a destructor.
2015-05-04 22:59:24 -07:00
Ryan VanderMeulen
995bebec24
Backed out changeset 38ff380719e4 (bug 1166031) for test_WebCrypto_DH.html failures.
2015-05-20 22:05:15 -04:00
Ryan VanderMeulen
224bdbec3e
Bug 1166031 - Update NSS to NSS_3_19_1_BETA1. r=mt
2015-05-20 21:06:06 -04:00
David Keeler
0f00f328f3
Bug 1166031 - Update PSM xpcshell small RSA key test to reflect new error. r=Cykesiopka
...
Previously NSS would accept smaller RSA key sizes than PSM would in TLS handshakes. Now that the limit is the same, NSS handles the handshake termination with a different error code before PSM can make its own policy decision.
2015-05-21 12:57:03 -07:00
Ryan VanderMeulen
b1647b5e41
Bug 1166031 - Update NSS to NSS_3_19_1_BETA1. r=mt
2015-05-20 21:06:06 -04:00
Cykesiopka
06e1f43ea2
Bug 1166078 - Clean up and add expected result strings to test_hmac.js. r=keeler
2015-05-18 15:22:54 -07:00
Birunthan Mohanathas
9f65019493
Bug 1164714 - Flatten security/manager/pki/src/ directory. r=keeler
2015-05-19 10:47:42 -07:00
Birunthan Mohanathas
e9750de36b
Bug 1164714 - Flatten security/manager/pki/public/ directory. r=keeler
2015-05-19 10:47:38 -07:00
Eric Rahm
c5e63515bf
Bug 1165518 - Part 2: Replace prlog.h with Logging.h. rs=froydnj
2015-05-19 11:15:34 -07:00
David Keeler
af988c6fc0
bug 1165911 - do more safety checks when gathering successful TLS connection telemetry r=Cykesiopka
2015-05-18 10:37:38 -07:00
Nicholas Nethercote
35fffb1333
Back out a1f7ae44c7bb (bug 1164373) for causing intermittent test failures.
2015-05-18 19:00:54 -07:00
Carsten "Tomcat" Book
e5535efc49
merge mozilla-inbound to mozilla-central a=merge
2015-05-18 13:43:01 +02:00
cedric
b48a2260ab
Bug 1152842 - Remove legacy Download Manager support from test_bug383369.html. r=paolo
2015-05-11 17:43:15 -07:00
Richard Barnes
84216a7c40
Backed out changeset fe10feec1ede because of OCSP test failures
2015-05-16 16:38:34 -04:00
Richard Barnes
6384ecbf90
Bug 1010068 - Disable OCSP for DV certificates in Firefox for Android r=keeler
2015-05-15 16:17:47 -04:00
Phil Ringnalda
01393a8965
Merge m-c to m-i
2015-05-16 09:49:14 -07:00
Phil Ringnalda
66b8e8f803
Merge m-i to m-c, a=merge
2015-05-16 08:50:37 -07:00
ffxbld
fb722a1b1e
No bug, Automated HPKP preload list update from host bld-linux64-spot-152 - a=hpkp-update
2015-05-16 03:30:30 -07:00
ffxbld
4aece5ec95
No bug, Automated HSTS preload list update from host bld-linux64-spot-152 - a=hsts-update
2015-05-16 03:30:28 -07:00
Neil Rashbrook
441960eebc
Bug 1155963 Only allow NS_LITERAL_CSTRING to be used on compile-time literals r=froydnj,ehsan
2015-05-16 09:07:10 +01:00
Nicholas Nethercote
0addd071a9
Back out all four patches from bug 1161377. r=me.
...
Due to Android startup regressions (bug 1163066) and plugin crashes (bug
1165155).
2015-05-14 21:48:43 -07:00
Wes Kocher
484229a7ff
Backed out changeset 17cfad44e12b (bug 1155963) for breaking b2g builds
2015-05-14 16:35:18 -07:00
Jed Davis
22bcabd0af
Bug 1162965 - Use /dev/shm instead of /tmp for sandbox chroot if possible. r=kang
2015-05-14 16:19:08 -07:00
Neil Rashbrook
5b5c002aaf
Bug 1155963 Only allow NS_LITERAL_CSTRING to be used on compile-time literals r=froydnj,ehsan
2015-05-15 00:00:33 +01:00
Cykesiopka
d7bf2e4a0b
Bug 1164409 - Reduce PSM xpcshell script code duplication. r=keeler
2015-05-15 02:28:00 -04:00
David Keeler
77060a5e28
bug 1141189 - implement skipping expensive revocation checks (OCSP fetching) for short-lived certificates r=rbarnes
2015-04-06 16:10:28 -07:00
Nicholas Nethercote
8d5e9cca79
Bug 1164373 - Remove two static constructors involving PR_NewLogModule(). r=froydnj.
2015-05-13 18:02:56 -07:00
Nicholas Nethercote
37a9035e51
Bug 1161377 (part 3, attempt 2) - Convert some easy PL_DHashTable{Init,Finish} cases. r=froydnj.
2015-05-12 17:33:26 -07:00
David Major
68b0dee7c5
Bug 1149718: Fix wow_helper lib path for VS2015. r=glandium
2015-05-12 18:20:28 -04:00
David Keeler
8924191348
bug 1102436 - remove PublicKeyPinningService::CheckChainAgainstAllNames r=Cykesiopka
2015-05-07 11:06:07 -07:00
Cykesiopka
8f0e75f3c3
Bug 1163358 - Add "psm" tag to PSM xpcshell and mochitest manifests. r=dkeeler
2015-05-09 18:21:00 +02:00
Mike Hommey
ec07b959e5
Bug 1043692 - Add a DIST_INSTALL variable to moz.build, and replace NO_DIST_INSTALL with it. r=gps
2015-05-12 07:55:21 +09:00
Bob Owen
6bab3a7af4
Bug 1146874 Part 1: Check that Windows sandboxed process starts correctly. r=tabraldes
2015-05-11 08:24:39 +01:00
Nicholas Nethercote
bdb7128dd1
Backout c375efe78e07 (bug 1161377 part 3) for (probably) increasing the static constructor count and regressing Fennec start-up time. r=me.
2015-05-10 22:16:18 -07:00
Phil Ringnalda
cd38d9b5e8
Merge m-c to m-c, a=merge
2015-05-09 14:16:58 -07:00
ffxbld
ab2219f9d0
No bug, Automated HPKP preload list update from host bld-linux64-spot-270 - a=hpkp-update
2015-05-09 03:31:59 -07:00
ffxbld
b463f10047
No bug, Automated HSTS preload list update from host bld-linux64-spot-270 - a=hsts-update
2015-05-09 03:31:58 -07:00
Wes Kocher
fa0da51ac6
Merge fx-team to m-c a=merge
2015-05-08 10:29:41 -07:00
Eric Rahm
c0f39382bd
Bug 1162691 - Part 2: Wrap expensive calls in PR_LOG_TEST. r=froydnj
...
Check that logging is enabled before performing potentially expensive
operations.
2015-05-08 14:36:34 -07:00
Eric Rahm
3c0f5bf63e
Bug 1162691 - Part 1: Remove instances of #ifdef PR_LOGGING in security. r=froydnj
...
PR_LOGGING is now always defined, we can remove #ifdefs checking for it.
2015-05-08 14:36:33 -07:00
Daniel Veditz
3bab854bdd
Bug 1038072 - signature verification for JAR files unpacked into a directory. r=keeler
2015-05-05 20:21:00 +02:00
Bob Owen
46c30cdbd5
Bug 1158773: Use the same initial and delayed integrity level for Windows content sandbox level 0. r=tabraldes
2015-05-06 10:11:56 +01:00
L. David Baron
ffb6e08be2
Back out changeset a02ea85607a2 (bug 1038072) for widespread test failures (at least Linux, Android, and Mulet), on a CLOSED TREE.
2015-05-06 09:58:55 +02:00
Daniel Veditz
d2b1ef4d0e
Bug 1038072 - signature verification for JAR files unpacked into a directory. r=keeler
2015-05-05 20:21:00 +02:00
Nicholas Nethercote
02e9b810da
Bug 1161377 (part 3) - Convert some easy PL_DHashTable{Init,Finish} cases. r=froydnj.
...
This patch converts easy cases, i.e. where the PL_DHashTableInit() call occurs
in a constructor and the PL_DHashTableFinish() call occurs in a destructor.
2015-05-04 22:59:24 -07:00
Mark Goodwin
de6b7028f1
Bug 1128607 - Test the freshness check for OneCRL (r=keeler)
2015-05-07 18:54:07 +01:00
Mark Goodwin
9e5913dddb
Bug 1128607 - Add freshness check for OneCRL (r=keeler)
2015-05-07 18:54:05 +01:00
Patrick McManus
726e9673d3
bug 1153212 - 2/2 Necko explicitly track origin vs routed host and give psm only origin r=dkeeler r=hurley IGNORE IDL
...
Allow necko to simultaneously track the dual concept of routed host
and origin (authenticated host). The origin is given to the socket
provider and the routed host is inserted at DNS lookup time as if it
were a SRV or CNAME.
2015-04-09 11:31:59 -04:00
Patrick McManus
a2982caa07
bug 1153212 - 1/2 revert 90d6a38931fa to make room for better fix r=backout
2015-05-07 13:16:26 -04:00
Kai Engert
8ea2fcf08e
Bug 1144055, Upgrade Firefox to use NSS 3.19, landing NSS_3_19_RTM
2015-05-04 21:34:38 +02:00
Cykesiopka
fa466bc83d
Bug 1153446 - Replace instances of double spacing with single spacing in nsserrors.properties. r=dkeeler
2015-05-01 02:40:00 +02:00
Phil Ringnalda
48398662cf
Merge m-i to m-c, a=merge
2015-05-02 10:02:17 -07:00
ffxbld
904d847525
No bug, Automated HPKP preload list update from host bld-linux64-spot-137 - a=hpkp-update
2015-05-02 03:30:49 -07:00
ffxbld
9a9af4a556
No bug, Automated HSTS preload list update from host bld-linux64-spot-137 - a=hsts-update
2015-05-02 03:30:48 -07:00
Mike Hommey
b673a97a25
Bug 1134923 - Remove NS_Alloc/NS_Realloc/NS_Free. r=nfroyd
...
They are kept around for the sake of the standalone glue, which is used
for e.g. webapprt, which doesn't have direct access to jemalloc, and thus
still needs a wrapper to go through the xpcom function list and get to
jemalloc from there.
2015-05-01 09:40:30 +09:00
Nicholas Nethercote
29a54c9b3b
Bug 1159972 - Remove the fallible version of PL_DHashTableInit(). r=froydnj.
...
It's no longer needed now that entry storage isn't allocated there. (The other
possible causes of failures in that function are less interesting and simply
crashing is a reasonable thing to do for them.)
This also makes PL_DNewHashTable() infallible, so I removed some
now-unnecessary checks of its result.
2015-04-29 16:38:29 -07:00
Bob Owen
0693a1dc83
Bug 1150515: Set the subsystem to WINDOWS,5.02 for wow_helper so that it runs on WinXP 64-bit. r=glandium
2015-04-30 09:48:03 +01:00
Masatoshi Kimura
931590121a
Bug 1145844 - Update fallback whitelist. r=keeler
2015-04-29 13:48:53 +09:00
Andrew Bartlett
0b2e75f4be
Bug 734229 - Partially address by refusing to re-negotiate on NTLM. r=mayhemer, r=keeler
...
Now only one NTLM Negotiate packet will be sent per connection, rather
than again after a failed authentication. The problem situation is
triggered due to failed Negotiate authentication, and is probably more
complex.
Pair-programmed-with: Garming Sam <garming@catalyst.net.nz>
2014-11-28 11:34:06 +13:00
David Major
c92c020b89
Bug 1157835: Remove the MSVC_ENABLE_PGO flag from the build system. r=glandium
2015-04-27 19:59:27 -04:00
Carsten "Tomcat" Book
3923c05342
merge fx-team to mozilla-central a=merge
2015-04-27 12:34:03 +02:00
Carsten "Tomcat" Book
18a440fd0e
merge mozilla-inbound to mozilla-central a=merge
2015-04-27 12:00:14 +02:00
ffxbld
bbd9aed0be
No bug, Automated HPKP preload list update from host bld-linux64-spot-039 - a=hpkp-update
2015-04-25 03:32:33 -07:00
ffxbld
9fd30e6020
No bug, Automated HSTS preload list update from host bld-linux64-spot-039 - a=hsts-update
2015-04-25 03:32:31 -07:00
Jed Davis
8f10995d7b
Bug 1154184 - Don't use Linux sandbox gtest dir if not building tests. r=gps
2015-04-24 17:36:08 -07:00
Dave Townsend
80ce794097
Bug 1038068: Check add-on signatures and refuse to install unsigned or broken add-ons (preffed off for now). r=dveditz
2015-03-31 11:32:40 -07:00
Carsten "Tomcat" Book
1a74144837
merge mozilla-inbound to mozilla-central a=merge
2015-04-24 14:37:13 +02:00
Richard Barnes
20b75325f3
Bug 1121982 - Update PSM to use NSS name constraints
2015-04-23 20:26:29 -04:00
Fabrice Desré
854266d52c
Bug 1144600 - Don't crash when submitting <keygen> on b2g r=dkeeler
2015-04-23 13:35:49 -07:00
Blake Kaplan
1047b7458f
Bug 1124076 - Properly detect certs when loaded and prompt to import them. r=sworkman/dkeeler
2015-04-22 12:55:23 -07:00
Steven Michaud
2bb57bcd7a
Bug 1153809 - Loosen Mac content process sandbox rules for NVidia and Intel HD 3000 graphics hardware. r=areinald
2015-04-22 14:56:09 -05:00
David Keeler
f9b93560f0
bug 1157873 - remove certificates from CNNIC whitelist that aren't in the Pilot Certificate Transparency log r=rbarnes
...
Also remove certificates where notBefore is on or after 1 April 2015.
2015-04-21 16:07:33 -07:00
Nathan Toone
1b81ed134e
Bug 1124076 followup - fix the build when PR_LOGGING is not defined. r=mrbkap
2015-04-23 13:24:57 -07:00
David Keeler
7783f33c8b
bug 1081128 - test_pinning.js takes ~300 seconds on b2g debug emulator - request a longer timeout for it r=Cykesiopka
2015-04-22 11:06:36 -07:00
Kai Engert
d7a44b34ec
Bug 1144055 - Upgrade Firefox 39 to use NSS 3.19, r=nss-confcall
2015-04-23 21:16:20 +02:00
Francois Marier
29cbc60a12
Bug 1147212 - Add support for goog-unwanted-shavar. r=gcp,r=matej,r=smaug
2015-04-22 21:01:37 +12:00
Carsten "Tomcat" Book
407c282220
Backed out changeset 7f3cf84c11a9 (bug 1124076) for bustage on a CLOSED TREE
2015-04-22 13:44:23 +02:00
Blake Kaplan
87c47ee4e8
Bug 1124076 - Properly detect certs when loaded and prompt to import them. r=sworkman/dkeeler
2015-04-21 14:56:00 +02:00
Ehsan Akhgari
d278570d19
Bug 1153348 - Add an analysis to prohibit operator bools which aren't marked as either explicit or MOZ_IMPLICIT; r=jrmuizel
...
This is the counterpart to the existing analysis to catch
constructors which aren't marked as either explicit or
MOZ_IMPLICIT.
2015-04-21 21:40:49 -04:00
André Reinald
12017521df
Bug 1150765 - Add sandbox rules to allow hardware rendering of OpenGL on Mac. r=smichaud
2015-04-21 11:17:16 +02:00
Patrick McManus
d428323d51
bug 1153212 - Alt-Svc Fixes r=dkeeler r=hurley
2015-04-13 17:11:59 -04:00
Kai Engert
ce1263979f
Bug 1144055, Upgrade Firefox 39 to use NSS 3.19, NSS_3_19_BETA4 to pick up bug 1155279
2015-04-20 21:46:19 +02:00
Phil Ringnalda
842c8df579
Merge m-i to m-c, a=merge
2015-04-18 16:36:32 -07:00
