e3428d6b2f
merge autoland to mozilla-central a=merge
2016-12-08 16:14:47 +01:00
2201a515fd
No bug, Automated HPKP preload list update from host bld-linux64-spot-536 - a=hpkp-update
2016-12-08 06:24:27 -08:00
aea8dfc9c6
No bug, Automated HSTS preload list update from host bld-linux64-spot-536 - a=hsts-update
2016-12-08 06:24:25 -08:00
b9c9d25736
No bug, Automated HPKP preload list update from host bld-linux64-spot-570 - a=hpkp-update
2016-12-07 06:27:07 -08:00
7435b5e48a
No bug, Automated HSTS preload list update from host bld-linux64-spot-570 - a=hsts-update
2016-12-07 06:27:04 -08:00
3711e05144
merge mozilla-inbound to mozilla-central a=merge
2016-12-07 11:30:43 +01:00
a8b5f53e7d
No bug, Automated HPKP preload list update from host bld-linux64-spot-436 - a=hpkp-update
2016-12-06 07:40:37 -08:00
a3ce7e8f1b
No bug, Automated HSTS preload list update from host bld-linux64-spot-436 - a=hsts-update
2016-12-06 07:40:35 -08:00
eefe030798
Bug 1321783 - Make updater be networking conservative r=dkeeler r=rstrong r=dragana
2016-12-02 16:49:23 -05:00
416e1ecb8f
Bug 1257361 - Simplify detecting threads that already have seccomp-bpf applied. r=tedd r=gcp
2016-12-06 12:38:22 -10:00
b54e4ad90d
Merge mozilla-central to autoland
2016-12-07 11:40:35 +01:00
a74b90b3f3
No bug, Automated HPKP preload list update from host bld-linux64-spot-486 - a=hpkp-update
2016-12-05 06:26:31 -08:00
3eef2baf49
No bug, Automated HSTS preload list update from host bld-linux64-spot-486 - a=hsts-update
2016-12-05 06:26:28 -08:00
7577ca5acd
No bug, Automated HPKP preload list update from host bld-linux64-spot-304 - a=hpkp-update
2016-12-04 06:31:58 -08:00
972131b969
No bug, Automated HSTS preload list update from host bld-linux64-spot-304 - a=hsts-update
2016-12-04 06:31:56 -08:00
3188d133bf
No bug, Automated HPKP preload list update from host bld-linux64-spot-305 - a=hpkp-update
2016-12-03 06:28:37 -08:00
399a5aa3a6
No bug, Automated HSTS preload list update from host bld-linux64-spot-305 - a=hsts-update
2016-12-03 06:28:35 -08:00
e9e921d4f4
Merge inbound to central, a=merge
2016-12-02 13:06:38 -08:00
2d48dd6760
Merge autoland to central, a=merge
2016-12-02 12:26:55 -08:00
c62600abb7
No bug, Automated HPKP preload list update from host bld-linux64-spot-1071 - a=hpkp-update
2016-12-02 06:38:45 -08:00
32d22c3670
No bug, Automated HSTS preload list update from host bld-linux64-spot-1071 - a=hsts-update
2016-12-02 06:38:42 -08:00
c483cb248d
Bug 1130670 - Remove vestigial RC4 fallback backend. r=keeler
...
MozReview-Commit-ID: 9YRVgnymndI
--HG--
extra : rebase_source : bdbb2b008336aece4b970cd25d0d283cf63f21d4
extra : intermediate-source : ffebf3ebf9f15223ff4b68efe3c15d9d3427df36
extra : source : 7cace2994af1116a957e13259440ccb9722343d1
2016-12-02 22:09:38 +09:00
12beb018dd
Bug 1317947 - land NSS 0x5f2db99c258f, r=me
...
--HG--
extra : rebase_source : 6afc6f20c26a9a32afa42c6b47f2775ca7fd91a3
2016-12-02 12:20:41 +01:00
ca5083ce4d
bug 857627 - 4/4: remove nickname-related APIs from nsIX509CertDB r=Cykesiopka,jcj
...
This removes findCertByNickname, findEmailEncryptionCert, and
findEmailSigningCert.
MozReview-Commit-ID: KOxWHJm3GNX
--HG--
extra : rebase_source : c67a65ce71b25c6502bad012c48aa1c30e71f334
2016-11-18 16:35:27 -08:00
05e56a2501
bug 857627 - 3/4: have nsIX509CertDB.addCert* functions return the added certificate r=Cykesiopka,jcj
...
This obviates some uses of nsIX509CertDB.findCertByNickname. Other uses are
replaced by equivalent functionality.
MozReview-Commit-ID: 5NCy9mww560
--HG--
extra : rebase_source : cc8506da86e86ae2edef1309e3eb2fddbf8f757e
2016-11-18 15:32:58 -08:00
858957f033
bug 857627 - 2/4: remove nsIX509Cert.nickname r=Cykesiopka,jcj
...
In general, any code that was using nsIX509Cert.nickname should be able to use
the attribute displayName (if using nickname for display purposes) or the
attribute dbKey (if using nickname as a unique identifier for a certificate).
MozReview-Commit-ID: G9CfMJDfLqe
--HG--
extra : rebase_source : 1c464dab8f028568cedd5a42cf87428b8bb63fc0
2016-11-18 13:12:29 -08:00
b92dd26f47
bug 857627 - 1/4: improve nsIX509Cert.windowTitle (and rename to displayName) r=Cykesiopka,jcj
...
This patch makes the following changes:
1. renames nsIX509Cert.windowTitle to displayName
2. removes (most of*) displayName's use of the NSS certificate nickname API
3. adds additional fields that displayName will attempt to use to find a good
name to return (namely, organizationalUnitName and organizationName)
*except for built-in roots, where we have a good hard-coded value for the name
MozReview-Commit-ID: Bt864GnOu7D
--HG--
extra : rebase_source : 5d85aaf68fd4fbe563596354a5ed50e541689934
2016-11-18 11:18:23 -08:00
d360bdebf5
Merge inbound to central, a=merge
2016-12-01 15:31:47 -08:00
535607e577
Merge autoland to central, a=merge
2016-12-01 15:07:11 -08:00
6de4b39f14
No bug, Automated HPKP preload list update from host bld-linux64-spot-391 - a=hpkp-update
2016-12-01 06:33:44 -08:00
624b5c29f2
No bug, Automated HSTS preload list update from host bld-linux64-spot-391 - a=hsts-update
2016-12-01 06:33:42 -08:00
7af8f38714
Merge m-c to autoland on a CLOSED TREE. a=merge
2016-11-30 13:27:46 -05:00
474dbc7f10
No bug, Automated HPKP preload list update from host bld-linux64-spot-228 - a=hpkp-update
2016-11-30 06:51:53 -08:00
64e5403603
No bug, Automated HSTS preload list update from host bld-linux64-spot-228 - a=hsts-update
2016-11-30 06:51:51 -08:00
430ec9a870
Merge m-c to autoland
2016-11-29 19:31:34 -08:00
6ffb692b13
bug 1301956 - add more Mozilla resources to preloaded pins r=keeler,rbarnes DONTBUILD NPOTB
...
Also trims the pinset for said Mozilla resources to just DigiCert and Let's
Encrypt (as a backup).
2016-11-29 13:15:32 -08:00
2f25df5d1e
Bug 1320085 - Allow the getrlimit-equivalent subset of prlimit64. r=tedd
...
This applies only to content processes, where we already allow getrlimit
(but not setrlimit). The rule added here does not allow using prlimit64
to set any resource limits or interact with any other process.
MozReview-Commit-ID: nMry3t6QPj
--HG--
extra : rebase_source : ecf792077a672ab1f2c5edf9fbeb915a0d8dd30e
2016-11-28 12:05:28 -07:00
19e9f4d7ed
Bug 1317951, part 2 - Certificate Transparency - basic support for disqualified logs. r=keeler
...
MozReview-Commit-ID: 4y2JYFnO9Xm
--HG--
extra : rebase_source : 3d6dbfa4d0a6a24dbd8907f42071943895ba068a
2016-11-29 22:51:46 +02:00
08a30eac51
Bug 1317951, part 1 - Certificate Transparency - extracted verification related fields from SCT to a separate struct. r=keeler
...
MozReview-Commit-ID: 3iHUdZrzyXB
--HG--
extra : rebase_source : d5590733c87c3a8a525eb29dabfdb9be2822a0a6
2016-11-23 15:37:31 +02:00
941b9d35f6
merge autoland to mozilla-central a=merge
2016-11-29 16:45:56 +01:00
9cc5790ab3
No bug, Automated HPKP preload list update from host bld-linux64-spot-471 - a=hpkp-update
2016-11-29 06:28:54 -08:00
65e583ffa5
No bug, Automated HSTS preload list update from host bld-linux64-spot-471 - a=hsts-update
2016-11-29 06:28:51 -08:00
1987bbf1a9
bug 1320510 - clamp the default enabled TLS version range to what NSS supports r=keeler
...
In particular, this fixes the case where Firefox is compiled with TLS 1.3
enabled by default with the option --with-system-nss against NSS 3.28, which has
TLS 1.3 compile-time disabled by default.
2016-11-28 13:15:34 -08:00
b1d487a44b
No bug, Automated HPKP preload list update from host bld-linux64-spot-488 - a=hpkp-update
2016-11-28 06:23:59 -08:00
1fc4ec756d
No bug, Automated HSTS preload list update from host bld-linux64-spot-488 - a=hsts-update
2016-11-28 06:23:57 -08:00
f00cf77ea1
No bug, Automated HPKP preload list update from host bld-linux64-spot-409 - a=hpkp-update
2016-11-27 06:22:25 -08:00
d11829b65d
No bug, Automated HSTS preload list update from host bld-linux64-spot-409 - a=hsts-update
2016-11-27 06:22:22 -08:00
a7167d4fb1
No bug, Automated HPKP preload list update from host bld-linux64-spot-470 - a=hpkp-update
2016-11-26 06:26:21 -08:00
c63fb4dbba
No bug, Automated HSTS preload list update from host bld-linux64-spot-470 - a=hsts-update
2016-11-26 06:26:19 -08:00
a666835bf5
merge mozilla-inbound to mozilla-central a=merge
...
--HG--
extra : rebase_source : 7f6b0f633da54f747b30496110e5260a226fe249
2016-11-25 15:36:56 +01:00
Carsten "Tomcat" Book
ffxbld
Patrick McManus
Jed Davis
Wes Kocher
Masatoshi Kimura
Franziskus Kiefer
David Keeler
Ryan VanderMeulen
Phil Ringnalda
Julien Vehent
Sergei Chernov
EKR