2016-10-15 09:45:05 +03:00
|
|
|
# This Source Code Form is subject to the terms of the Mozilla Public
|
|
|
|
|
# License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
|
|
|
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
|
|
|
{
|
|
|
|
|
'includes': [
|
|
|
|
|
'coreconf/config.gypi'
|
|
|
|
|
],
|
2018-10-01 17:44:32 +03:00
|
|
|
'conditions': [
|
|
|
|
|
[ 'mozpkix_only==0', {
|
|
|
|
|
'targets': [
|
|
|
|
|
{
|
|
|
|
|
'target_name': 'nss_libs',
|
|
|
|
|
'type': 'none',
|
2016-10-15 09:45:05 +03:00
|
|
|
'dependencies': [
|
2018-10-01 17:44:32 +03:00
|
|
|
'lib/ckfw/builtins/builtins.gyp:nssckbi',
|
|
|
|
|
'lib/softoken/softoken.gyp:softokn3',
|
2016-10-15 09:45:05 +03:00
|
|
|
],
|
2018-10-01 17:44:32 +03:00
|
|
|
'conditions': [
|
2019-06-07 20:51:08 +03:00
|
|
|
[ 'OS=="solaris" and target_arch=="sparc64"', {
|
|
|
|
|
'dependencies': [
|
|
|
|
|
'lib/freebl/freebl.gyp:freebl_64int_3',
|
|
|
|
|
'lib/freebl/freebl.gyp:freebl_64fpu_3',
|
|
|
|
|
],
|
|
|
|
|
}, {
|
|
|
|
|
'dependencies': [
|
|
|
|
|
'lib/freebl/freebl.gyp:freebl3',
|
|
|
|
|
],
|
|
|
|
|
}],
|
2018-10-01 17:44:32 +03:00
|
|
|
[ 'moz_fold_libs==0', {
|
|
|
|
|
'dependencies': [
|
|
|
|
|
'lib/nss/nss.gyp:nss3',
|
|
|
|
|
'lib/smime/smime.gyp:smime3',
|
|
|
|
|
'lib/sqlite/sqlite.gyp:sqlite3',
|
|
|
|
|
'lib/ssl/ssl.gyp:ssl3',
|
|
|
|
|
'lib/util/util.gyp:nssutil3',
|
|
|
|
|
],
|
|
|
|
|
}],
|
|
|
|
|
[ 'OS=="linux"', {
|
|
|
|
|
'dependencies': [
|
|
|
|
|
'lib/freebl/freebl.gyp:freeblpriv3',
|
2019-02-04 19:29:50 +03:00
|
|
|
],
|
|
|
|
|
}],
|
|
|
|
|
[ 'OS=="linux" and mozilla_client==0', {
|
|
|
|
|
'dependencies': [
|
2018-10-01 17:44:32 +03:00
|
|
|
'lib/sysinit/sysinit.gyp:nsssysinit',
|
|
|
|
|
],
|
|
|
|
|
}],
|
|
|
|
|
[ 'disable_dbm==0', {
|
|
|
|
|
'dependencies': [
|
|
|
|
|
'lib/softoken/legacydb/legacydb.gyp:nssdbm3',
|
|
|
|
|
],
|
|
|
|
|
}],
|
2016-10-15 09:45:05 +03:00
|
|
|
],
|
2018-10-01 17:44:32 +03:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
'target_name': 'nss_static_libs',
|
|
|
|
|
'type': 'none',
|
2016-10-15 09:45:05 +03:00
|
|
|
'dependencies': [
|
2018-10-01 17:44:32 +03:00
|
|
|
'cmd/lib/lib.gyp:sectool',
|
|
|
|
|
'lib/base/base.gyp:nssb',
|
|
|
|
|
'lib/certdb/certdb.gyp:certdb',
|
|
|
|
|
'lib/certhigh/certhigh.gyp:certhi',
|
|
|
|
|
'lib/ckfw/ckfw.gyp:nssckfw',
|
|
|
|
|
'lib/crmf/crmf.gyp:crmf',
|
|
|
|
|
'lib/cryptohi/cryptohi.gyp:cryptohi',
|
|
|
|
|
'lib/dev/dev.gyp:nssdev',
|
|
|
|
|
'lib/freebl/freebl.gyp:freebl',
|
|
|
|
|
'lib/jar/jar.gyp:jar',
|
|
|
|
|
'lib/libpkix/libpkix.gyp:libpkix',
|
|
|
|
|
# mozpkix and mozpkix-testlib are static C++ libs
|
|
|
|
|
'lib/mozpkix/mozpkix.gyp:mozpkix',
|
|
|
|
|
'lib/mozpkix/mozpkix.gyp:mozpkix-testlib',
|
|
|
|
|
'lib/nss/nss.gyp:nss_static',
|
|
|
|
|
'lib/pk11wrap/pk11wrap.gyp:pk11wrap',
|
|
|
|
|
'lib/pkcs12/pkcs12.gyp:pkcs12',
|
|
|
|
|
'lib/pkcs7/pkcs7.gyp:pkcs7',
|
|
|
|
|
'lib/pki/pki.gyp:nsspki',
|
|
|
|
|
'lib/smime/smime.gyp:smime',
|
|
|
|
|
'lib/softoken/softoken.gyp:softokn',
|
|
|
|
|
'lib/ssl/ssl.gyp:ssl',
|
|
|
|
|
'lib/util/util.gyp:nssutil',
|
2016-10-15 09:45:05 +03:00
|
|
|
],
|
2018-10-01 17:44:32 +03:00
|
|
|
'conditions': [
|
2019-02-04 19:29:50 +03:00
|
|
|
[ 'OS=="linux" and mozilla_client==0', {
|
2018-10-01 17:44:32 +03:00
|
|
|
'dependencies': [
|
|
|
|
|
'lib/sysinit/sysinit.gyp:nsssysinit_static',
|
|
|
|
|
],
|
|
|
|
|
}],
|
|
|
|
|
[ 'disable_dbm==0', {
|
|
|
|
|
'dependencies': [
|
|
|
|
|
'lib/dbm/src/src.gyp:dbm',
|
|
|
|
|
'lib/softoken/legacydb/legacydb.gyp:nssdbm',
|
|
|
|
|
],
|
|
|
|
|
}],
|
|
|
|
|
[ 'use_system_sqlite==0', {
|
|
|
|
|
'dependencies': [
|
|
|
|
|
'lib/sqlite/sqlite.gyp:sqlite',
|
|
|
|
|
],
|
|
|
|
|
}],
|
|
|
|
|
[ 'moz_fold_libs==1', {
|
|
|
|
|
'dependencies': [
|
|
|
|
|
'lib/nss/nss.gyp:nss3_static',
|
|
|
|
|
'lib/smime/smime.gyp:smime3_static',
|
|
|
|
|
],
|
|
|
|
|
}],
|
2016-10-15 09:45:05 +03:00
|
|
|
],
|
2018-10-01 17:44:32 +03:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
'target_name': 'nss_cmds',
|
|
|
|
|
'type': 'none',
|
2016-10-15 09:45:05 +03:00
|
|
|
'dependencies': [
|
2018-10-01 17:44:32 +03:00
|
|
|
'cmd/certutil/certutil.gyp:certutil',
|
|
|
|
|
'cmd/modutil/modutil.gyp:modutil',
|
|
|
|
|
'cmd/pk12util/pk12util.gyp:pk12util',
|
|
|
|
|
'cmd/shlibsign/shlibsign.gyp:shlibsign',
|
2016-10-15 09:45:05 +03:00
|
|
|
],
|
2019-03-01 18:42:49 +03:00
|
|
|
'conditions': [
|
|
|
|
|
[ 'comm_client==1', {
|
|
|
|
|
'dependencies': [
|
|
|
|
|
'cmd/smimetools/smimetools.gyp:cmsutil',
|
Bug 1577822 - land NSS a3ee4f26b4c1 UPGRADE_NSS_RELEASE, r=kjacobs
2019-09-18 Kevin Jacobs <kjacobs@mozilla.com>
* cmd/lib/derprint.c:
Bug 1581024 - Check for pointer wrap in derprint.c. r=jcj
Check for pointer wrap on output-length check in the derdump
utility.
[a3ee4f26b4c1] [tip]
2019-09-18 Giulio Benetti <giulio.benetti@micronovasrl.com>
* lib/freebl/gcm-aarch64.c:
Bug 1580126 - Fix build failure on aarch64_be while building
freebl/gcm r=kjacobs
Build failure is caused by different #ifdef conditions in gcm.c and
gcm-aarch64.c that leads to double declaration of the same gcm_*
functions.
Fix #ifdef condition in gcm-aarch64.c making it the same as the one
in gcm.c.
Signed-off-by: Giulio Benetti <giulio.benetti@micronovasrl.com>
[fa0d958de0c3]
2019-09-17 Kai Engert <kaie@kuix.de>
* automation/taskcluster/graph/src/extend.js:
Bug 1385039 - Build NSPR tests as part of NSS continuous
integration. r=kjacobs
[cc97f1a93038]
2019-09-17 Landry Breuil <landry@openbsd.org>
* lib/freebl/Makefile:
Bug 1581391 - include gcm-aarch64 on all unices, not only linux
r=kjacobs
[e7b4f293fa4e]
2019-09-17 Martin Thomson <mt@lowentropy.net>
* mach:
Bug 1581041 - Rename mach-commands to mach-completion, r=jcj
This means that we can point our completion at the gecko one.
[bc91272fcbdc]
2019-09-16 Jenine <jenine_c@outlook.com>
* cmd/pk11importtest/pk11importtest.c, lib/softoken/pkcs11.c:
Bug 1558313 - Fix clang warnings in pk11importtest.c and pkcs11.c
r=marcusburghardt
[4569b745f74e]
2019-09-13 Daiki Ueno <dueno@redhat.com>
* lib/certhigh/certvfy.c:
Bug 1542207, fix policy check on signature algorithms, r=rrelyea
Reviewers: rrelyea
Reviewed By: rrelyea
Bug #: 1542207
[ed8a41d16c1c]
2019-09-05 Daiki Ueno <dueno@redhat.com>
* lib/freebl/drbg.c:
Bug 1560329, drbg: perform continuous test on entropy source,
r=rrelyea
Summary: FIPS 140-2 section 4.9.2 requires a conditional self test
to check that consecutive entropy blocks from the system are
different. As neither getentropy() nor /dev/urandom provides that
check on the output, this adds the self test at caller side.
Reviewers: rrelyea
Reviewed By: rrelyea
Bug #: 1560329
[c66dd879d16a]
2019-09-06 Martin Thomson <mt@lowentropy.net>
* automation/taskcluster/graph/src/queue.js:
Bug 1579290 - Disable LSAN during builds, r=ueno
Summary: See the bug description for details.
[f28f3d7b7cf0]
2019-09-13 Kai Engert <kaie@kuix.de>
* Makefile, build.sh, coreconf/nspr.sh, help.txt:
Bug 1385061 - Build NSPR tests with NSS make; Add gyp parameters to
build/run NSPR tests. r=jcj
[8b4a226f7d23]
2019-09-11 Kai Engert <kaie@kuix.de>
* nss.gyp:
Bug 1577359 - Build atob and btoa for Thunderbird. r=jcj
[1fe61aadaf57]
2019-09-10 Marcus Burghardt <mburghardt@mozilla.com>
* cmd/pk12util/pk12util.c:
Bug 1579036 - Define error when trying to export non-existent cert
with pk12util. r=jcj
[65ab97f03c89]
2019-09-04 Martin Thomson <mt@lowentropy.net>
* gtests/mozpkix_gtest/pkixder_input_tests.cpp:
Bug 1578626 - Remove undefined nullptr decrement, r=keeler
Summary: This uses uintptr_t to avoid the worst. It still looks
terrible and might trip static analysis warnings, but the
reinterpret_cast should hide that.
This assumes that sizeof(uintptr_t) == sizeof(void*), so I've added
an assertion so that we'll at least fail the test on those systems.
(We could use GTEST_SKIP instead, but we don't have that in the
version of gtest that we use.)
Reviewers: keeler
Tags: #secure-revision
Bug #: 1578626
[d2485b1c997e]
2019-09-05 Marcus Burghardt <mburghardt@mozilla.com>
* gtests/pk11_gtest/pk11_find_certs_unittest.cc:
Bug 1578751 - Ensure a consistent style for
pk11_find_certs_unittest.cc. r=jcj
Adjusted the style and clang-format after the changes in some var
names.
[e95fee7f59e5]
Differential Revision: https://phabricator.services.mozilla.com/D46246
--HG--
extra : moz-landing-system : lando
2019-09-18 06:27:20 +03:00
|
|
|
'cmd/atob/atob.gyp:atob',
|
|
|
|
|
'cmd/btoa/btoa.gyp:btoa',
|
2019-03-01 18:42:49 +03:00
|
|
|
],
|
|
|
|
|
}],
|
2018-10-01 17:44:32 +03:00
|
|
|
[ 'mozilla_client==0', {
|
|
|
|
|
'dependencies': [
|
|
|
|
|
'cmd/crlutil/crlutil.gyp:crlutil',
|
|
|
|
|
'cmd/pwdecrypt/pwdecrypt.gyp:pwdecrypt',
|
|
|
|
|
'cmd/signtool/signtool.gyp:signtool',
|
|
|
|
|
'cmd/signver/signver.gyp:signver',
|
|
|
|
|
'cmd/smimetools/smimetools.gyp:cmsutil',
|
|
|
|
|
'cmd/ssltap/ssltap.gyp:ssltap',
|
|
|
|
|
'cmd/symkeyutil/symkeyutil.gyp:symkeyutil',
|
|
|
|
|
'nss-tool/nss_tool.gyp:nss',
|
|
|
|
|
'nss-tool/nss_tool.gyp:hw-support',
|
|
|
|
|
],
|
|
|
|
|
}],
|
2016-10-15 09:45:05 +03:00
|
|
|
],
|
2018-10-01 17:44:32 +03:00
|
|
|
},
|
2016-10-15 09:45:05 +03:00
|
|
|
],
|
2018-10-01 17:44:32 +03:00
|
|
|
}, { # else, i.e. mozpkix_only==1
|
|
|
|
|
# Build only mozpkix.
|
|
|
|
|
'targets': [
|
|
|
|
|
{
|
|
|
|
|
'target_name': 'nss_mozpkix_libs',
|
|
|
|
|
'type': 'none',
|
2016-10-15 09:45:05 +03:00
|
|
|
'dependencies': [
|
2018-10-01 17:44:32 +03:00
|
|
|
# mozpkix and mozpkix-testlib are static C++ libs
|
|
|
|
|
'lib/mozpkix/mozpkix.gyp:mozpkix',
|
|
|
|
|
'lib/mozpkix/mozpkix.gyp:mozpkix-testlib',
|
2016-10-15 09:45:05 +03:00
|
|
|
],
|
2018-10-01 17:44:32 +03:00
|
|
|
},
|
2016-10-15 09:45:05 +03:00
|
|
|
],
|
2018-10-01 17:44:32 +03:00
|
|
|
}],
|
2016-10-15 09:45:05 +03:00
|
|
|
[ 'disable_tests==0', {
|
|
|
|
|
'targets': [
|
|
|
|
|
{
|
|
|
|
|
'target_name': 'nss_tests',
|
|
|
|
|
'type': 'none',
|
|
|
|
|
'dependencies': [
|
|
|
|
|
'cmd/addbuiltin/addbuiltin.gyp:addbuiltin',
|
|
|
|
|
'cmd/atob/atob.gyp:atob',
|
|
|
|
|
'cmd/bltest/bltest.gyp:bltest',
|
|
|
|
|
'cmd/btoa/btoa.gyp:btoa',
|
|
|
|
|
'cmd/chktest/chktest.gyp:chktest',
|
|
|
|
|
'cmd/crmftest/crmftest.gyp:crmftest',
|
|
|
|
|
'cmd/dbtest/dbtest.gyp:dbtest',
|
|
|
|
|
'cmd/derdump/derdump.gyp:derdump',
|
|
|
|
|
'cmd/digest/digest.gyp:digest',
|
|
|
|
|
'cmd/ecperf/ecperf.gyp:ecperf',
|
|
|
|
|
'cmd/fbectest/fbectest.gyp:fbectest',
|
|
|
|
|
'cmd/httpserv/httpserv.gyp:httpserv',
|
|
|
|
|
'cmd/listsuites/listsuites.gyp:listsuites',
|
|
|
|
|
'cmd/makepqg/makepqg.gyp:makepqg',
|
|
|
|
|
'cmd/multinit/multinit.gyp:multinit',
|
2018-07-25 16:17:58 +03:00
|
|
|
'cmd/nss-policy-check/nss-policy-check.gyp:nss-policy-check',
|
2016-10-15 09:45:05 +03:00
|
|
|
'cmd/ocspclnt/ocspclnt.gyp:ocspclnt',
|
|
|
|
|
'cmd/ocspresp/ocspresp.gyp:ocspresp',
|
|
|
|
|
'cmd/oidcalc/oidcalc.gyp:oidcalc',
|
|
|
|
|
'cmd/p7content/p7content.gyp:p7content',
|
|
|
|
|
'cmd/p7env/p7env.gyp:p7env',
|
|
|
|
|
'cmd/p7sign/p7sign.gyp:p7sign',
|
|
|
|
|
'cmd/p7verify/p7verify.gyp:p7verify',
|
|
|
|
|
'cmd/pk11ectest/pk11ectest.gyp:pk11ectest',
|
|
|
|
|
'cmd/pk11gcmtest/pk11gcmtest.gyp:pk11gcmtest',
|
|
|
|
|
'cmd/pk11mode/pk11mode.gyp:pk11mode',
|
2019-02-20 19:24:29 +03:00
|
|
|
'cmd/pk11importtest/pk11importtest.gyp:pk11importtest',
|
2016-10-15 09:45:05 +03:00
|
|
|
'cmd/pk1sign/pk1sign.gyp:pk1sign',
|
|
|
|
|
'cmd/pp/pp.gyp:pp',
|
|
|
|
|
'cmd/rsaperf/rsaperf.gyp:rsaperf',
|
2017-11-01 17:38:36 +03:00
|
|
|
'cmd/rsapoptst/rsapoptst.gyp:rsapoptst',
|
2016-10-15 09:45:05 +03:00
|
|
|
'cmd/sdrtest/sdrtest.gyp:sdrtest',
|
|
|
|
|
'cmd/selfserv/selfserv.gyp:selfserv',
|
|
|
|
|
'cmd/shlibsign/mangle/mangle.gyp:mangle',
|
|
|
|
|
'cmd/strsclnt/strsclnt.gyp:strsclnt',
|
|
|
|
|
'cmd/tests/tests.gyp:baddbdir',
|
|
|
|
|
'cmd/tests/tests.gyp:conflict',
|
|
|
|
|
'cmd/tests/tests.gyp:dertimetest',
|
|
|
|
|
'cmd/tests/tests.gyp:encodeinttest',
|
|
|
|
|
'cmd/tests/tests.gyp:nonspr10',
|
|
|
|
|
'cmd/tests/tests.gyp:remtest',
|
|
|
|
|
'cmd/tests/tests.gyp:secmodtest',
|
|
|
|
|
'cmd/tstclnt/tstclnt.gyp:tstclnt',
|
|
|
|
|
'cmd/vfychain/vfychain.gyp:vfychain',
|
|
|
|
|
'cmd/vfyserv/vfyserv.gyp:vfyserv',
|
2019-05-21 23:39:24 +03:00
|
|
|
'cmd/mpitests/mpitests.gyp:mpi_tests',
|
2017-05-16 18:12:24 +03:00
|
|
|
'gtests/certhigh_gtest/certhigh_gtest.gyp:certhigh_gtest',
|
2017-11-01 17:38:36 +03:00
|
|
|
'gtests/cryptohi_gtest/cryptohi_gtest.gyp:cryptohi_gtest',
|
2016-11-02 12:29:58 +03:00
|
|
|
'gtests/der_gtest/der_gtest.gyp:der_gtest',
|
2017-05-16 18:12:24 +03:00
|
|
|
'gtests/certdb_gtest/certdb_gtest.gyp:certdb_gtest',
|
2017-03-08 10:40:46 +03:00
|
|
|
'gtests/freebl_gtest/freebl_gtest.gyp:prng_gtest',
|
2017-09-12 15:46:59 +03:00
|
|
|
'gtests/freebl_gtest/freebl_gtest.gyp:blake2b_gtest',
|
2019-05-04 03:18:13 +03:00
|
|
|
'gtests/freebl_gtest/freebl_gtest.gyp:freebl_gtest',
|
2018-10-01 17:44:32 +03:00
|
|
|
'gtests/mozpkix_gtest/mozpkix_gtest.gyp:mozpkix_gtest',
|
|
|
|
|
'gtests/nss_bogo_shim/nss_bogo_shim.gyp:nss_bogo_shim',
|
Bug 1592007 - land NSS 87f35ba4c82f UPGRADE_NSS_RELEASE, r=keeler
2019-11-13 J.C. Jones <jjones@mozilla.com>
* lib/softoken/pkcs11c.c:
Bug 1591363 - Fixup double-free of params in nsc_SetupPBEKeyGen
r=keeler
Caused in commit 7ef8d2604494.
[87f35ba4c82f] [tip]
2019-11-07 Makoto Kato <m_kato@ga2.so-net.ne.jp>
* lib/freebl/ctr.c:
Bug 1592869 - Use NEON for ctr_xor. r=kjacobs
Using NEON for ctr_xor, aes_ctr can improve 30%-40%i decode/encode
time on Cortex-A72.
[d244c7287908]
2019-11-12 Marcus Burghardt <mburghardt@mozilla.com>
* gtests/pk11_gtest/pk11_pbkdf2_unittest.cc, lib/pk11wrap/pk11pbe.c,
lib/pk11wrap/pk11skey.c, lib/softoken/pkcs11c.c:
Bug 1591363 - PBKDF2 memory leaks in NSC_GenerateKey. r=jcj
A memory leak was reported and confirmed in this bug. However,
during the "manual" analysis of the flow, another possible leak was
found. I created a patch for both leaks, added gtests for unexpected
keySizes and adjusted the general syntax of the gtest file.
[7ef8d2604494]
2019-11-11 Tom Prince <mozilla@hocat.ca>
* automation/taskcluster/graph/src/extend.js,
automation/taskcluster/windows/setup.sh:
Bug 1594891 - Use tc-proxy for nss tooltool; r=dustin,jcj
[c33b214b2ec8]
2019-11-08 Daiki Ueno <dueno@redhat.com>
* gtests/ssl_gtest/ssl_dhe_unittest.cc,
gtests/ssl_gtest/ssl_ecdh_unittest.cc,
gtests/ssl_gtest/tls_connect.h, lib/ssl/ssl3con.c:
Bug 1566131, check policy against hash algorithms used for
ServerKeyExchange, r=mt
Summary: This adds necessary policy checks in
`ssl3_ComputeCommonKeyHash()`, right before calculating hashes. Note
that it currently doesn't check MD5 as it still needs to be allowed
in TLS 1.1 or earlier and many tests fail if we change that.
Reviewers: mt
Reviewed By: mt
Bug #: 1566131
[c08947c6af57]
2019-11-08 Kai Engert <kaie@kuix.de>
* coreconf/coreconf.dep:
Dummy change, trigger a build to test latest NSPR commits.
[e766899c72a5]
* automation/taskcluster/graph/src/extend.js:
Bug 1579836 - Execute NSPR tests as part of NSS continuous
integration. r=jcj
[46bfbabf7e75]
2019-11-08 Dustin J. Mitchell <dustin@mozilla.com>
* automation/taskcluster/graph/npm-shrinkwrap.json,
automation/taskcluster/graph/package.json,
automation/taskcluster/graph/src/image_builder.js,
automation/taskcluster/graph/src/queue.js,
automation/taskcluster/scripts/tools.sh,
automation/taskcluster/windows/gen_certs.sh,
automation/taskcluster/windows/run_tests.sh:
Bug 1594891 - Updates to run correctly on the new TC deployment
r=jcj
* Update the Taskcluster client used in the decision task to one
that understands Taskcluster rootUrls.
* Update scripts that fetch content to use the TASKCLUSTER_ROOT_URL
* the absence of this variale signals an "old" worker so we use an
"old" URL
[67d630e7cb7c]
2019-11-07 Tom Prince <mozilla@hocat.ca>
* .taskcluster.yml, automation/taskcluster/graph/src/extend.js,
automation/taskcluster/graph/src/queue.js:
Bug 1591275: Switch workers to use AWS Provder; r=kjacobs
[a2bebaad41dd]
2019-11-06 Daiki Ueno <dueno@redhat.com>
* gtests/pk11_gtest/pk11_module_unittest.cc:
Bug 1577803, clang-format, a=bustage
[c9014b2892d5]
* gtests/pk11_gtest/pk11_module_unittest.cc,
gtests/pkcs11testmodule/pkcs11testmodule.cpp,
lib/pk11wrap/debug_module.c, lib/pk11wrap/pk11obj.c,
lib/pk11wrap/pk11slot.c, lib/pk11wrap/secmodti.h,
lib/util/pkcs11t.h:
Bug 1577803, pk11wrap: set friendly flag if token implements
CKP_PUBLIC_CERTIFICATES_TOKEN, r=rrelyea
Summary: This makes NSS look for CKO_PROFILE object at token
initialization time to check if it implements the [[ https://docs
.oasis-open.org/pkcs11/pkcs11-profiles/v3.0/pkcs11-profiles-v3.0.pdf
| Public Certificates Token profile ]] as defined in PKCS #11 v3.0.
If it is found, the token is automatically marked as friendly so no
authentication attempts will be made when accessing certificates.
Reviewers: rrelyea
Reviewed By: rrelyea
Subscribers: reviewbot
Bug #: 1577803
[b39c8eeabe6a]
2019-11-06 Martin Thomson <mt@lowentropy.net>
* lib/freebl/blinit.c, lib/freebl/gcm-ppc.c:
Bug 1566126 - clang-format, a=bustage
[6125200fbc88]
2019-11-06 Lauri Kasanen <cand@gmx.com>
* lib/freebl/Makefile, lib/freebl/altivec-types.h,
lib/freebl/blapii.h, lib/freebl/blinit.c, lib/freebl/freebl.gyp,
lib/freebl/gcm-ppc.c, lib/freebl/gcm.c, lib/freebl/gcm.h:
Bug 1566126 - freebl: POWER GHASH Vector Acceleration, r=mt
Implementation for POWER8 adapted from the ARM paper:
https://conradoplg.cryptoland.net/files/2010/12/gcm14.pdf
Benchmark of `bltest -E -m aes_gcm -i tests/aes_gcm/plaintext10 \
-v tests/aes_gcm/iv10 -k tests/aes_gcm/key10 -5 10` on POWER8 3.3GHz.
NSS_DISABLE_HW_CRYPTO=1 mode in symmkey opreps cxreps context op
time(sec) thrgput aes_gcm_e 309Mb 192 5M 0 0.000 10000.000 10.001
30Mb
mode in symmkey opreps cxreps context op time(sec) thrgput
aes_gcm_e 829Mb 192 14M 0 0.000 10000.000 10.001 82Mb
Notable operf results, sw: samples % image name symbol name 226033
59.3991 libfreeblpriv3.so bmul 80606 21.1824 libfreeblpriv3.so
rijndael_encryptBlock128 28851 7.5817 libfreeblpriv3.so
gcm_HashMult_sftw
hw: 213899 56.2037 libfreeblpriv3.so rijndael_encryptBlock128 45233
11.8853 libfreeblpriv3.so gcm_HashMult_hw
So the ghash part is ~5.6x faster.
Signed-off-by: Lauri Kasanen <cand@gmx.com>
[3d7e509d6d20]
2019-11-05 Marcus Burghardt <mburghardt@mozilla.com>
* lib/certdb/certdb.c, lib/util/secport.h:
Bug 1589073 - Use of new PR_ASSERT_ARG in certdb.c. r=mt
Bug 1588015 introduced in NSPR a new way to ASSERT values where the
arguments are always used avoiding "unused variable" errors. This
was implemented in NSS, at certdb.c.
[73c28cad3dbb]
2019-11-05 Daiki Ueno <dueno@redhat.com>
* cpputil/nss_scoped_ptrs.h, gtests/manifest.mn,
gtests/pk11_gtest/manifest.mn, gtests/pk11_gtest/pk11_gtest.gyp,
gtests/pk11_gtest/pk11_module_unittest.cc,
gtests/pkcs11testmodule/Makefile, gtests/pkcs11testmodule/config.mk,
gtests/pkcs11testmodule/manifest.mn,
gtests/pkcs11testmodule/pkcs11testmodule.cpp,
gtests/pkcs11testmodule/pkcs11testmodule.def,
gtests/pkcs11testmodule/pkcs11testmodule.gyp,
gtests/pkcs11testmodule/pkcs11testmodule.rc, nss.gyp:
Bug 1577803, gtests: import pkcs11testmodule from Firefox, r=rrelyea
Summary: This adds a mock PKCS #11 module from Firefox and add basic
tests around it. This is needed for proper testing of PKCS #11 v3.0
profile objects (D45669).
Reviewers: rrelyea
Reviewed By: rrelyea
Subscribers: reviewbot
Bug #: 1577803
[0a86945adf74]
Differential Revision: https://phabricator.services.mozilla.com/D52779
--HG--
extra : moz-landing-system : lando
2019-11-14 20:32:27 +03:00
|
|
|
'gtests/pkcs11testmodule/pkcs11testmodule.gyp:pkcs11testmodule',
|
2016-11-02 12:29:58 +03:00
|
|
|
'gtests/pk11_gtest/pk11_gtest.gyp:pk11_gtest',
|
2019-03-07 00:10:05 +03:00
|
|
|
'gtests/smime_gtest/smime_gtest.gyp:smime_gtest',
|
2017-08-04 15:13:06 +03:00
|
|
|
'gtests/softoken_gtest/softoken_gtest.gyp:softoken_gtest',
|
2016-11-02 12:29:58 +03:00
|
|
|
'gtests/ssl_gtest/ssl_gtest.gyp:ssl_gtest',
|
|
|
|
|
'gtests/util_gtest/util_gtest.gyp:util_gtest',
|
Bug 1577822 - land NSS NSS_3_47_BETA3 UPGRADE_NSS_RELEASE, r=kjacobs
2019-10-16 J.C. Jones <jjones@mozilla.com>
* lib/softoken/pkcs11c.c:
Bug 1459141 - Backed out changeset 474d62c9d0db for PK11_Wrap/Unwrap
issues r=me
[f10c3e0757b7] [NSS_3_47_BETA3]
2019-10-15 J.C. Jones <jjones@mozilla.com>
* .hgtags:
Added tag NSS_3_47_BETA2 for changeset f657d65428c6
[3ca8b20b24ee]
* cmd/addbuiltin/addbuiltin.c:
Bug 1465613 - Fixup clang format a=bustage
[f657d65428c6] [NSS_3_47_BETA2]
2019-10-11 Marcus Burghardt <mburghardt@mozilla.com>
* automation/abi-check/expected-report-libnss3.so.txt, automation/abi-
check/expected-report-libsmime3.so.txt, automation/abi-check
/expected-report-libssl3.so.txt, cmd/addbuiltin/addbuiltin.c,
cmd/lib/secutil.c, gtests/softoken_gtest/manifest.mn,
gtests/softoken_gtest/softoken_gtest.gyp,
gtests/softoken_gtest/softoken_nssckbi_testlib_gtest.cc,
lib/certdb/certdb.c, lib/certdb/certt.h, lib/ckfw/builtins/README,
lib/ckfw/builtins/certdata.txt, lib/ckfw/builtins/manifest.mn,
lib/ckfw/builtins/nssckbi.h, lib/ckfw/builtins/testlib/Makefile,
lib/ckfw/builtins/testlib/builtins-testlib.gyp,
lib/ckfw/builtins/testlib/certdata-testlib.txt,
lib/ckfw/builtins/testlib/config.mk,
lib/ckfw/builtins/testlib/manifest.mn, lib/ckfw/builtins/testlib
/nssckbi-testlib.rc,
lib/ckfw/builtins/testlib/testcert_err_distrust.txt,
lib/ckfw/builtins/testlib/testcert_no_distrust.txt,
lib/ckfw/builtins/testlib/testcert_ok_distrust.txt,
lib/ckfw/manifest.mn, lib/nss/nss.def, lib/pki/pki3hack.c,
lib/softoken/sdb.c, lib/util/pkcs11n.h, nss.gyp, tests/cert/cert.sh:
Bug 1465613 - Created two new fields for scheduled distrust from
builtins and updated support commands. r=jcj,kjacobs,mt
Added two new fields do scheduled distrust of CAs in
nssckbi/builtins. Also, created a testlib to validate these fields
with gtests.
[52024949df95]
2019-10-14 Martin Thomson <martin.thomson@gmail.com>
* lib/ssl/tls13con.c:
Bug 1588557 - Fix debug statement, r=jcj
[0f563a2571c3]
2019-10-15 Dana Keeler <dkeeler@mozilla.com>
* gtests/mozpkix_gtest/pkixder_universal_types_tests.cpp,
lib/mozpkix/include/pkix/pkixder.h, lib/mozpkix/lib/pkixcert.cpp:
bug 1579060 - fix handling of issuerUniqueID and subjectUniqueID in
mozilla::pkix::BackCert r=jcj
According to RFC 5280, the definitions of issuerUniqueID and
subjectUniqueID in TBSCertificate are as follows:
issuerUniqueID [1] IMPLICIT UniqueIdentifier OPTIONAL,
subjectUniqueID [2] IMPLICIT UniqueIdentifier OPTIONAL,
where UniqueIdentifier is a BIT STRING.
IMPLICIT tags replace the tag of the underlying type. For these
fields, there is no specified class (just a tag number within the
class), and the underlying type of BIT STRING is "primitive" (i.e.
not constructed). Thus, the tags should be of the form CONTEXT
SPECIFIC | [number in class], which comes out to 0x81 and 0x82,
respectively.
When originally implemented, mozilla::pkix incorrectly required that
the CONSTRUCTED bit also be set for these fields. Consequently, the
library would reject any certificate that actually contained these
fields. Evidently such certificates are rare.
[c50f933d37a5]
2019-10-14 Deian Stefan <deian@cs.ucsd.edu>
* lib/softoken/pkcs11c.c:
Bug 1459141 - Rewrite softoken CBC pad check to be constant time.
r=kjacobs,jcj
[474d62c9d0db]
2019-10-11 J.C. Jones <jjones@mozilla.com>
* .hgtags:
Added tag NSS_3_47_BETA1 for changeset 93245f5733b3
[f60dbafbc182]
Differential Revision: https://phabricator.services.mozilla.com/D49470
--HG--
extra : moz-landing-system : lando
2019-10-16 22:12:50 +03:00
|
|
|
'lib/ckfw/builtins/testlib/builtins-testlib.gyp:nssckbi-testlib',
|
2016-10-15 09:45:05 +03:00
|
|
|
],
|
|
|
|
|
'conditions': [
|
|
|
|
|
[ 'OS=="linux"', {
|
|
|
|
|
'dependencies': [
|
|
|
|
|
'cmd/lowhashtest/lowhashtest.gyp:lowhashtest',
|
2019-02-04 19:29:50 +03:00
|
|
|
],
|
|
|
|
|
}],
|
|
|
|
|
[ 'OS=="linux" and mozilla_client==0', {
|
|
|
|
|
'dependencies': [
|
2019-01-18 20:48:59 +03:00
|
|
|
'gtests/sysinit_gtest/sysinit_gtest.gyp:sysinit_gtest',
|
2016-10-15 09:45:05 +03:00
|
|
|
],
|
|
|
|
|
}],
|
|
|
|
|
[ 'disable_libpkix==0', {
|
|
|
|
|
'dependencies': [
|
|
|
|
|
'cmd/pkix-errcodes/pkix-errcodes.gyp:pkix-errcodes',
|
|
|
|
|
],
|
|
|
|
|
}],
|
2017-08-25 10:37:32 +03:00
|
|
|
[ 'disable_fips==0', {
|
|
|
|
|
'dependencies': [
|
|
|
|
|
'cmd/fipstest/fipstest.gyp:fipstest',
|
|
|
|
|
],
|
|
|
|
|
}],
|
2016-11-16 16:06:23 +03:00
|
|
|
],
|
|
|
|
|
},
|
|
|
|
|
],
|
|
|
|
|
}],
|
|
|
|
|
[ 'sign_libs==1', {
|
|
|
|
|
'targets': [
|
|
|
|
|
{
|
|
|
|
|
'target_name': 'nss_sign_shared_libs',
|
|
|
|
|
'type': 'none',
|
|
|
|
|
'dependencies': [
|
|
|
|
|
'cmd/shlibsign/shlibsign.gyp:shlibsign',
|
|
|
|
|
],
|
|
|
|
|
'actions': [
|
|
|
|
|
{
|
|
|
|
|
'action_name': 'shlibsign',
|
|
|
|
|
'msvs_cygwin_shell': 0,
|
|
|
|
|
'inputs': [
|
|
|
|
|
'<(nss_dist_obj_dir)/lib/<(dll_prefix)freebl3.<(dll_suffix)',
|
|
|
|
|
'<(nss_dist_obj_dir)/lib/<(dll_prefix)freeblpriv3.<(dll_suffix)',
|
|
|
|
|
'<(nss_dist_obj_dir)/lib/<(dll_prefix)nssdbm3.<(dll_suffix)',
|
|
|
|
|
'<(nss_dist_obj_dir)/lib/<(dll_prefix)softokn3.<(dll_suffix)',
|
|
|
|
|
],
|
|
|
|
|
'outputs': [
|
|
|
|
|
'<(nss_dist_obj_dir)/lib/<(dll_prefix)freebl3.chk',
|
|
|
|
|
'<(nss_dist_obj_dir)/lib/<(dll_prefix)freeblpriv3.chk',
|
|
|
|
|
'<(nss_dist_obj_dir)/lib/<(dll_prefix)nssdbm3.chk',
|
|
|
|
|
'<(nss_dist_obj_dir)/lib/<(dll_prefix)softokn3.chk'
|
|
|
|
|
],
|
|
|
|
|
'conditions': [
|
|
|
|
|
['OS!="linux"', {
|
|
|
|
|
'inputs/': [['exclude', 'freeblpriv']],
|
|
|
|
|
'outputs/': [['exclude', 'freeblpriv']]
|
|
|
|
|
}],
|
2019-05-07 23:39:31 +03:00
|
|
|
['disable_dbm==1', {
|
|
|
|
|
'inputs/': [['exclude', 'nssdbm3']],
|
|
|
|
|
'outputs/': [['exclude', 'nssdbm3']]
|
|
|
|
|
}],
|
2016-11-16 16:06:23 +03:00
|
|
|
],
|
|
|
|
|
'action': ['<(python)', '<(DEPTH)/coreconf/shlibsign.py', '<@(_inputs)']
|
|
|
|
|
}
|
2016-10-15 09:45:05 +03:00
|
|
|
],
|
|
|
|
|
},
|
|
|
|
|
],
|
|
|
|
|
}],
|
2017-01-21 16:23:56 +03:00
|
|
|
[ 'fuzz_tls==1', {
|
2016-11-02 12:29:58 +03:00
|
|
|
'targets': [
|
|
|
|
|
{
|
2016-11-16 16:06:23 +03:00
|
|
|
'target_name': 'fuzz_warning',
|
2016-11-02 12:29:58 +03:00
|
|
|
'type': 'none',
|
|
|
|
|
'actions': [
|
|
|
|
|
{
|
2016-11-16 16:06:23 +03:00
|
|
|
'action_name': 'fuzz_warning',
|
2016-11-02 12:29:58 +03:00
|
|
|
'action': ['cat', 'fuzz/warning.txt'],
|
|
|
|
|
'inputs': ['fuzz/warning.txt'],
|
|
|
|
|
'ninja_use_console': 1,
|
|
|
|
|
'outputs': ['dummy'],
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
},
|
2017-01-21 16:23:56 +03:00
|
|
|
],
|
|
|
|
|
}],
|
|
|
|
|
[ 'fuzz==1', {
|
|
|
|
|
'targets': [
|
2016-11-16 16:06:23 +03:00
|
|
|
{
|
|
|
|
|
'target_name': 'fuzz',
|
|
|
|
|
'type': 'none',
|
|
|
|
|
'dependencies': [
|
|
|
|
|
'fuzz/fuzz.gyp:nssfuzz',
|
2017-01-21 16:23:56 +03:00
|
|
|
],
|
2016-11-16 16:06:23 +03:00
|
|
|
},
|
2016-11-02 12:29:58 +03:00
|
|
|
],
|
|
|
|
|
}],
|
2016-10-15 09:45:05 +03:00
|
|
|
],
|
|
|
|
|
}
|
