Camilo Viecco
|
828e5f79ad
|
Bug 987816 - certificateUsageVerifyCA is OK verifcation option. r=dkeeler
--HG--
extra : rebase_source : 0e000dc85705e1c61773e8fc73425fe80e0b9134
|
2014-03-28 10:21:30 -07:00 |
David Keeler
|
b1405bc489
|
bug 985201 - rename insanity::pkix to mozilla::pkix r=cviecco r=briansmith
--HG--
rename : security/insanity/include/insanity/ScopedPtr.h => security/pkix/include/pkix/ScopedPtr.h
rename : security/insanity/include/insanity/bind.h => security/pkix/include/pkix/bind.h
rename : security/insanity/include/insanity/nullptr.h => security/pkix/include/pkix/nullptr.h
rename : security/insanity/include/insanity/pkix.h => security/pkix/include/pkix/pkix.h
rename : security/insanity/include/insanity/pkixtypes.h => security/pkix/include/pkix/pkixtypes.h
rename : security/insanity/lib/pkixbind.cpp => security/pkix/lib/pkixbind.cpp
rename : security/insanity/lib/pkixbuild.cpp => security/pkix/lib/pkixbuild.cpp
rename : security/insanity/lib/pkixcheck.cpp => security/pkix/lib/pkixcheck.cpp
rename : security/insanity/lib/pkixcheck.h => security/pkix/lib/pkixcheck.h
rename : security/insanity/lib/pkixder.cpp => security/pkix/lib/pkixder.cpp
rename : security/insanity/lib/pkixder.h => security/pkix/lib/pkixder.h
rename : security/insanity/lib/pkixkey.cpp => security/pkix/lib/pkixkey.cpp
rename : security/insanity/lib/pkixocsp.cpp => security/pkix/lib/pkixocsp.cpp
rename : security/insanity/lib/pkixutil.h => security/pkix/lib/pkixutil.h
rename : security/insanity/moz.build => security/pkix/moz.build
rename : security/insanity/test/lib/moz.build => security/pkix/test/lib/moz.build
rename : security/insanity/test/lib/pkixtestutil.cpp => security/pkix/test/lib/pkixtestutil.cpp
rename : security/insanity/test/lib/pkixtestutil.h => security/pkix/test/lib/pkixtestutil.h
|
2014-03-20 14:29:21 -07:00 |
David Keeler
|
09232f13e6
|
bug 969048 - adjust OCSP stapling telemetry for insanity::pkix r=briansmith r=cviecco
|
2014-03-13 09:41:03 -07:00 |
David Keeler
|
5e64bb5ea4
|
bug 915932 - cache OCSP responses when using insanity::pkix r=cviecco r=briansmith
|
2014-03-12 13:08:48 -07:00 |
David Keeler
|
a0bbe0c0fb
|
bug 982403 - separate the compilation of certverifier and insanity::pkix r=cviecco r=briansmith
--HG--
rename : security/certverifier/moz.build => security/insanity/moz.build
|
2014-03-12 13:08:18 -07:00 |
Camilo Viecco
|
0e5ef28180
|
Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
|
2014-02-26 14:41:02 -08:00 |
David Keeler
|
954d7d0bfb
|
Bug 974715 - Create more flexible OCSP response generation code. r=briansmith, r=cviecco
|
2014-03-10 14:04:31 -07:00 |
Brian Smith
|
dbb4eb51fe
|
Bug 978528: Return the correct error message when no potential issuers are found during path bulding in insanitY::pkix, r=cviecco
--HG--
extra : rebase_source : 71f806312ad322bc2971e7efaea2da217b07efad
|
2014-03-01 20:55:51 -08:00 |
Brian Smith
|
485e9d1aab
|
Bug 921885: Use insanity::pkix for EV cert verification when insanity::pkix is the selected implementation, r=cviecco, r=keeler
--HG--
extra : rebase_source : b1fd1f8eace675484b3c2d568e5e74f767f1d2ad
|
2014-02-23 22:15:53 -08:00 |
Brian Smith
|
605160af41
|
Bug 921886: Add certificate policiy support to insanity::pkix, r=keeler, r=cviecco
--HG--
extra : rebase_source : 6522e2c2f57f59fe23c0ed0c838f1f54236bdafc
|
2014-02-24 12:37:45 -08:00 |
Brian Smith
|
c3a50adf07
|
Bug 975122: Allow cert error overrides when insanity::pkix is used, r?cviecco, r?keeler
--HG--
extra : rebase_source : 47f5e779a16c462e40baa2d9cec2e83946c9076c
|
2014-02-22 19:08:06 -08:00 |
Brian Smith
|
46ac0ca312
|
Bug 915931, Part 3: Integrate insanity::pkix OCSP support, r=keeler, r=cviecco
--HG--
extra : rebase_source : 4b54682ca6d97e2ec7709b9a5c93ddea71126f8b
|
2014-02-16 17:35:40 -08:00 |
Brian Smith
|
3a9c1abfb2
|
Bug 878932, Part 1: Add OCSP response parsing & validation to insanity::pkix, r=keeler
--HG--
extra : rebase_source : 23771eaf97f67e5feb69d50a0c96dd4da31ae964
extra : source : b0511882e4c94c0960ef8533b381e8d72706172e
|
2014-02-16 18:09:06 -08:00 |
Brian Smith
|
2f3036a251
|
Bug 896620: Make marketplace certs work on in all products, r=keeler
--HG--
extra : source : 86ec7137a8892f75918c77e605df970f5b96ef62
extra : histedit_source : 33326790804d49e6ec658626116ebf870d94d445
|
2014-02-14 14:37:07 -08:00 |
Brian Smith
|
6195eb652a
|
Bug 878932, Part 1: add insanity::pkix as an option for certificate verification, r=keeler, r=cviecco
--HG--
extra : rebase_source : c1f75dff6ac7f32e082517af701654abebaee250
|
2014-02-10 11:41:12 -08:00 |
Camilo Viecco
|
2111455ed0
|
Bug 790809 - Add callback for in libpkix for extra app checks (in usage sslserver). r=dkeeler
|
2014-02-05 14:49:14 -08:00 |
Brian Smith
|
af88fb50b0
|
Bug 921891, part 3: Add basic building and verification, r=keeler, r=cviecco
--HG--
extra : rebase_source : 7b01773c47445efc40941ae251d03f505f429be6
extra : source : 2a36da04b931740858d51023b2cc8ef7528ef740
|
2014-02-02 21:21:00 -08:00 |
Daniel Holbert
|
6dabf48731
|
Bug 968323: Declare prlog variables inside #ifdef PR_LOGGING instead of MOZ_LOGGING, in /security, to fix build failures in --disable-logging builds. r=briansmith
|
2014-02-05 22:11:26 -08:00 |
Daniel Holbert
|
e75f701087
|
Bug 968491: Mark security/certverifier/ as FAIL_ON_WARNINGS. r=briansmith
|
2014-02-05 22:11:24 -08:00 |
Camilo Viecco
|
be133e87b2
|
Bug 968491 helper-patch: Temporarily #ifdef out static function 'insertErrorIntoVerifyLog' to address Wunused-function build warning. r=briansmith
|
2014-02-05 22:11:16 -08:00 |
Brian Smith
|
d5d6180d11
|
Bug 921887: Add minimal DER decoder to insanity::pkix, r=keeler
--HG--
extra : rebase_source : 12becc63c3f1d4f04f0164d236b6759e9f4e81cc
extra : source : 6db5ba057f8d557eaf238d35d539e4c3dc08be1a
|
2013-09-29 12:08:33 -07:00 |
Brian Smith
|
5abecfbefe
|
Bug 921890: Add key extraction and signature verification to insanity::pkix, r=keeler, r=cviecco
--HG--
extra : rebase_source : c94380aedc563b3eecddb9bcac60b532f5799eee
extra : source : e33ed267eeee330807dff6c6347e11c0a4e86809
|
2013-10-01 01:08:42 -07:00 |
Brian Smith
|
2944942221
|
Bug 967175: Remove EV entries for ValiCert (Go Daddy) roots removed in bug 936304, r=kwilson
--HG--
extra : rebase_source : b87998d88f38057d37b7518cf1f4fb485c505b31
|
2014-02-03 14:29:05 -08:00 |
Camilo Viecco
|
97ab153856
|
Bug 962693: Add function to add arbitrary errors to tail of verifylog. r=keeler
|
2014-01-24 14:13:25 -08:00 |
Camilo Viecco
|
7257212a64
|
Bug 962833: ensure-certverify-returns secfailure on MUST_BE_EV and no ev certificate. r=dkeeler
|
2014-01-24 13:57:35 -08:00 |
Brian Smith
|
ccb3f48598
|
Bug 891066, Part 9: Move DisableMD5 to NSSCertDBTrustDomain, r=dkeeler
--HG--
extra : rebase_source : aaf658c12a74fc53f1591333f10d54e78fe1d992
|
2014-01-20 01:30:25 -08:00 |
Brian Smith
|
9d23ee7fc7
|
Bug 891066, Part 8: Add stapled OCSP response to CertVerifier, r=cviecco
--HG--
extra : rebase_source : ffe0762228d1217cb51e2f8fad2e0605d7d61344
extra : source : f721d60b6bf74467381590457ce3542f83a2f43a
|
2013-09-27 19:53:36 -07:00 |
Brian Smith
|
12a2ffda37
|
Bug 891066, Part 7: Give CertVerifier its own NSPR logging module, r=cviecco
--HG--
extra : rebase_source : a6b38c4026fe70c9789cbe4830df57c943382f5b
extra : source : 591daff856840016c979ed9b4fdbed4ed68f22a6
|
2013-07-10 23:47:09 -07:00 |
Brian Smith
|
213974a8d4
|
Bug 891066, Part 6: Move SSL server cert verification logic to security/certverifier, r=cviecco
--HG--
extra : rebase_source : e30b5b46e075c52651bb5320b17660f85a50abbb
extra : source : ef41444d0a7d1f6697c7a4d431fffe8db1724605
|
2013-07-08 16:30:59 -07:00 |
Brian Smith
|
4488103b73
|
Bug 891066, Part 5: Switch to security::pkix::ScopedCERTCertList, r=cviecco
--HG--
extra : rebase_source : 59015f864e612f18a2f7bb62092b692ae8d47853
extra : source : 31f68b8a192b45720fe931176cdc0565e8c6fd80
|
2014-01-22 17:13:19 -08:00 |
Brian Smith
|
5ce3726857
|
Bug 891066, Part 4: Fix indention, r=me, a=whitespace-only
--HG--
extra : rebase_source : 0b9dad2a331b729f614b9b3ee29793a3c89ae053
extra : source : 651a8ef41d0611f0dbc72cbd663071958fea649b
|
2013-09-19 13:39:36 -07:00 |
Brian Smith
|
3091f37853
|
Bug 891066, Part 3: Move more initialization of NSS to security/certverifier, r=keeler
--HG--
extra : rebase_source : 33aad105028f849d0bbe1c37b60eab50f2f22c88
|
2014-01-20 22:10:33 -08:00 |
Brian Smith
|
c1583f22ce
|
Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
--HG--
extra : rebase_source : dd59a391825b776b075e855660c2488105e2d741
|
2014-01-26 19:36:28 -08:00 |