Граф коммитов

13237 Коммитов

Автор SHA1 Сообщение Дата
shindli 68a1ed26ac Merge autoland to mozilla-central. a=merge 2018-03-03 01:05:23 +02:00
ffxbld 4744487bf0 No bug, Automated HPKP preload list update from host bld-linux64-spot-030 - a=hpkp-update 2018-03-02 12:57:40 -08:00
ffxbld 7bd2ace171 No bug, Automated HSTS preload list update from host bld-linux64-spot-030 - a=hsts-update 2018-03-02 12:57:36 -08:00
Dorel Luca 3ccafa2b66 Merge mozilla-inbound to mozilla-central. a=merge 2018-03-02 00:09:29 +02:00
Dorel Luca 109ad47bbf Merge autoland to mozilla-central. a=merge 2018-03-02 00:05:07 +02:00
ffxbld 84c76716c7 No bug, Automated HPKP preload list update from host bld-linux64-spot-302 - a=hpkp-update 2018-03-01 12:02:34 -08:00
ffxbld e775e30412 No bug, Automated HSTS preload list update from host bld-linux64-spot-302 - a=hsts-update 2018-03-01 12:02:30 -08:00
Sebastian Hengst 118e03a936 merge mozilla-central to mozilla-inbound 2018-03-01 20:32:20 +02:00
Masatoshi Kimura b1b043af08 Bug 1442266 - Stop including unnecessary <iostream>. r=froydnj
MozReview-Commit-ID: B0JDqyBanFE

--HG--
extra : rebase_source : dec1e2678083e3fb2b9a6b89322d1fa747ed6d4a
2018-03-01 23:07:56 +09:00
J.C. Jones 8144e93399 Bug 1442075 - Enforce Symantec distrust in Firefox 60 r=keeler
Per the Consensus plan, this patch enforces the distrust of Syamntec roots from
Bug 1409257. It is ultimately destined for Firefox 60.

MozReview-Commit-ID: 8Vpxdflk9Wu

--HG--
extra : rebase_source : 39dddbdc5fd18a692c0588c57c7fd8c4604ea76c
2018-03-01 17:09:21 -07:00
David Keeler 83942e01e1 bug 1441223 - add a new (overridable) error code to describe extra policy constraint failures r=jcj
Certificate verification failures that result from additional policy constraint
failures now use the error code
"MOZILLA_PKIX_ERROR_ADDITIONAL_POLICY_CONSTRAINT_FAILED" (also known as
"Result::ERROR_ADDITIONAL_POLICY_CONSTRAINT_FAILED", depending on the context).

MozReview-Commit-ID: 9rE7gRBapRF

--HG--
extra : rebase_source : 9a60900a86f9eebab58b973f3e8f776b2481a1ff
2018-02-27 11:21:51 -08:00
Bob Owen 8efbee5948 Bug 1441801 Part 2: Fix line endings in sandboxBroker.cpp. r=jimm 2018-03-01 14:37:26 +00:00
Bob Owen be5a4dadac Bug 1441801 Part 1: Stop using the chromium sandbox DLL blocking mechanism on Nightly. r=jimm 2018-03-01 14:37:25 +00:00
Cosmin Sabou a97105ec0d Merge inbound to mozilla-central. a=merge 2018-02-28 23:48:29 +02:00
ffxbld 08a7733d6d No bug, Automated HPKP preload list update from host bld-linux64-spot-302 - a=hpkp-update 2018-02-28 12:02:20 -08:00
ffxbld 0799f9b06e No bug, Automated HSTS preload list update from host bld-linux64-spot-302 - a=hsts-update 2018-02-28 12:02:16 -08:00
Florian Quèze c714053d73 Bug 1433175 - scripted patch to replace Components.classes[, Components.interfaces.nsI, Components.utils. and Components.results. with Cc, Ci, Cu and Cr, r=Mossop. 2018-02-28 18:51:33 +01:00
Sebastian Hengst 769222fadf merge mozilla-inbound to mozilla-central. a=merge
--HG--
rename : browser/base/content/tabbrowser.xml => browser/base/content/tabbrowser.js
2018-02-28 12:54:12 +02:00
Sebastian Hengst 1761ef65c7 merge mozilla-central to mozilla-inbound. CLOSED TREE 2018-02-28 20:19:28 +02:00
Sebastian Hengst 1ded4e973b merge mozilla-central to mozilla-inbound 2018-02-28 12:58:05 +02:00
J.C. Jones c1babbf4e1 Bug 1437754 - Add a pref and disable the Symantec distrust algorithm r=keeler
This adds the pref "security.pki.distrust_ca_policy" which, if set to 1,
enforces the graduated distrust from Bug 1409257, and if set to 0 (as it is in
this patch) disables that distrust.

This pref is intended to outlast the Symantec distrust, and instead be able to
extend to enable/disable future root policy actions. It would need its own
tests for that, in the future.

MozReview-Commit-ID: BAZfkapysfX

--HG--
extra : rebase_source : 02b00aa486e9f8efb81b32d38d80db5cae86bc6e
2018-02-27 16:04:51 -07:00
Kai Engert 16cfaba763 Bug 1432177, uplift NSS_3_36_BETA3, r=me
UPGRADE_NSS_RELEASE
2018-02-28 11:13:28 +01:00
Honza Bambas 281502cac6 Bug 1363284 - HTTP/2 anonymous/onymous session (connection) coalescing, r=mayhemer
--HG--
extra : rebase_source : 66192a32668de8a9cd99722d1e0860cce2f84030
2018-02-15 09:10:00 +02:00
J.C. Jones 4bc9fe0d27 Bug 1439378 - Re-enable the imminent distrust browser-console test r=fkiefer,keeler
This patch does a few things:
1) It removes the symantecRoot and symantec_affected certs from build/pgo/certs'
   DB.
2) It upgrades that DB from the old format to SQLite (and this 8/3 to 9/4).
3) It adds a new cert "imminently_distrusted" to that DB for the bc test.
4) It changes the Subject of the immient distrust test to only have the CN
   field: this is because certutil reorders C to come after CN, and just like
   with the real Symantec certs, I had put C first. So rather than deal with
   importing the end entity for the pgo tests, I decided to just make things
   simple and change the tested subject.
5) Finally, it re-enables the test that was disabled in Bug 1434300.

MozReview-Commit-ID: Bt2RKyInJje

--HG--
rename : build/pgo/certs/cert8.db => build/pgo/certs/cert9.db
rename : build/pgo/certs/key3.db => build/pgo/certs/key4.db
extra : rebase_source : efceb67ae16f0af617bbd8bec201d52eee0f467d
2018-02-26 15:55:35 -07:00
Franziskus Kiefer 2842796e4c Bug 1435713 - fix linter errors, a=bustage 2018-02-28 10:28:11 +01:00
Franziskus Kiefer 49889960b6 Bug 1435713 - collect cert fingerprints for failed CS verifications, r=keeler,francois
Reviewers: keeler, francois

Reviewed By: keeler, francois

Subscribers: francois, ulfr

Bug #: 1435713

Differential Revision: https://phabricator.services.mozilla.com/D623

--HG--
extra : rebase_source : 0142e9d970eb289cf9814ae2c9bdc1f0a2a4ac46
extra : amend_source : bc4b4ca15d167ee9f0574efad7934458e2facd9b
2018-02-28 09:26:30 +01:00
Valentin Gosu ed218f0a19 Bug 1433958 - Change code that sets nsIURI.scheme to use nsIURIMutator r=mayhemer
MozReview-Commit-ID: GgyIkZSG2y3

--HG--
extra : rebase_source : 5398a29d8cb910c909ed88e1a6cbd9fd63e6b745
2018-02-26 20:43:47 +01:00
Valentin Gosu 7f3b09b694 Bug 1433958 - Change code that sets nsIURI.port to use nsIURIMutator r=mayhemer
MozReview-Commit-ID: 7Lu7JJvDUGF

--HG--
extra : rebase_source : 8d5a9bb1c4a5a525f7c5bc8d07c1e7029d2029a3
2018-02-26 20:43:46 +01:00
J.C. Jones 6d19459740 Bug 1440029 - Add a test for TrustOverrideUtils.h r=keeler
This is the test originally from Bug 1434300 that was pulled due to
Bug 1433015.

MozReview-Commit-ID: IEPCRVdS2v4

--HG--
extra : rebase_source : 843222f36b9fffe73cdf02aebb3f263897a943de
2018-02-21 16:54:52 -05:00
Tiberius Oros 22d5a6c371 Merge autoland to mozilla-central. a=merge 2018-02-27 00:18:03 +02:00
ffxbld 876968b0bb No bug, Automated HPKP preload list update from host bld-linux64-spot-030 - a=hpkp-update 2018-02-26 12:44:28 -08:00
ffxbld 92e1462566 No bug, Automated HSTS preload list update from host bld-linux64-spot-030 - a=hsts-update 2018-02-26 12:44:24 -08:00
ffxbld f3a601c889 No bug, Automated HPKP preload list update from host bld-linux64-spot-302 - a=hpkp-update 2018-02-25 11:53:31 -08:00
ffxbld a8acc056c9 No bug, Automated HSTS preload list update from host bld-linux64-spot-302 - a=hsts-update 2018-02-25 11:53:27 -08:00
Patrick McManus 4ece6279ba Bug 1439105 - Ban H2 Client Certs Post Handshake r=bagder,keeler
MozReview-Commit-ID: Dfx5bB5NOBp

--HG--
extra : rebase_source : ec0984aec6625950b139c06a4ae3da69f49afdf3
2018-02-17 08:10:13 -05:00
ffxbld dbacae538a No bug, Automated HPKP preload list update from host bld-linux64-spot-324 - a=hpkp-update 2018-02-24 12:01:40 -08:00
ffxbld da2f635f78 No bug, Automated HSTS preload list update from host bld-linux64-spot-324 - a=hsts-update 2018-02-24 12:01:36 -08:00
Sebastian Hengst 7be9fed7d0 merge mozilla-inbound to mozilla-central. a=merge 2018-02-24 02:58:35 +02:00
Florian Quèze 682b1ec3b2 Bug 1440284 - change this.EXPORTED_SYMBOLS back to var EXPORTED_SYMBOLS in JS modules, r=mccr8. 2018-02-23 20:50:01 +01:00
ffxbld 57247f5331 No bug, Automated HPKP preload list update from host bld-linux64-spot-302 - a=hpkp-update 2018-02-23 11:48:18 -08:00
ffxbld 37e4f549d7 No bug, Automated HSTS preload list update from host bld-linux64-spot-302 - a=hsts-update 2018-02-23 11:48:14 -08:00
ffxbld 0b6ee32aee No bug, Automated HPKP preload list update from host bld-linux64-spot-324 - a=hpkp-update 2018-02-22 11:50:18 -08:00
ffxbld b779a894df No bug, Automated HSTS preload list update from host bld-linux64-spot-324 - a=hsts-update 2018-02-22 11:50:13 -08:00
Csoregi Natalia dd63683685 Merge mozilla-central to autoland. a=merge CLOSED TREE 2018-02-21 23:52:24 +02:00
Csoregi Natalia 3011413f82 Merge inbound to mozilla-central. a=merge 2018-02-21 23:50:20 +02:00
Csoregi Natalia 4ae2fa641b Merge autoland to mozilla-central. a=merge 2018-02-21 23:49:19 +02:00
ffxbld 36baa4e37e No bug, Automated HPKP preload list update from host bld-linux64-spot-326 - a=hpkp-update 2018-02-21 11:46:16 -08:00
ffxbld 9c7bbae0ca No bug, Automated HSTS preload list update from host bld-linux64-spot-326 - a=hsts-update 2018-02-21 11:46:12 -08:00
Felipe Gomes d261cc7c57 Bug 1429148 - Policy: Don't let a Master Password to be set. r=keeler
MozReview-Commit-ID: 8Adqg0KU7cZ

--HG--
extra : rebase_source : ec20e2f117d974edaa5df844091a086d12607771
2018-02-20 20:46:11 -03:00
Felipe Gomes 254ff126ef Bug 1429148 - Add nsIPK11Token.isInternalKeyToken. r=keeler,MattN
MozReview-Commit-ID: Gdd7MxDXoTC

--HG--
extra : rebase_source : a367c07755046657d7f2133d4858ea6e6b0c219a
2018-02-20 20:43:41 -03:00