70551ded71
Bug 1258375, NSS_3_24_BETA6 and required adjustments to PSM and packaging, r=martin.thomson, r=glandium
2016-04-12 14:40:44 +02:00
f8da0365fd
Backout revision 36f75c2863a1, bug 1258375
2016-04-11 17:00:39 +02:00
b471460db8
Bug 1258375, NSS_3_24_BETA5 and required adjustments to PSM and packaging, r=martin.thomson, r=glandium
2016-04-11 16:40:36 +02:00
2f0004e1be
bug 1228175 - fix IsCertBuiltInRoot r=Cykesiopka,mgoodwin
...
When a built-in root certificate has its trust changed from the default value,
the platform has to essentially create a copy of it in the read/write
certificate database with the new trust settings. At that point, the desired
behavior is that the platform still considers that certificate a built-in root.
Before this patch, this would indeed happen for the duration of that run of the
platform, but as soon as it restarted, the certificate in question would only
appear to be from the read/write database, and thus was not considered a
built-in root. This patch changes the test of built-in-ness to explicitly
search the built-in certificate slot for the certificate in question. If found,
it is considered a built-in root.
MozReview-Commit-ID: HCtZpPQVEGZ
--HG--
extra : rebase_source : 759e9c5a7bb14f14a77e62eae2ba40c085f04ccd
2016-03-04 17:06:33 -08:00
68bd5e8c4d
bug 1244743 - Replace MOZ_NATIVE_X with MOZ_SYSTEM_X. r=gps
...
MozReview-Commit-ID: 9ip3qeAXFEe
--HG--
extra : commitid : H6aEkHprVyX
extra : rebase_source : e20d5f4b297caf66711c72cd55dd76f7f9ef9d9c
extra : histedit_source : 47545e0ea61eb66f16545f70e6d3792a389bedb1
2016-02-01 10:49:34 -05:00
7c3a491022
Bug 1247250 - Enable TLS 1.3 anti-downgrade on non-secure fallback. r=keeler
2016-02-24 19:35:00 +09:00
be7b0e4539
Backed out 2 changesets (bug 1247250) for bustage. r=bustage on a CLOSED TREE
...
Backed out changeset 8aded3a039f5 (bug 1247250)
Backed out changeset 374e6d0abf0e (bug 1247250)
2016-02-12 00:42:48 +01:00
e40094eb48
Bug 1247250 - Enable TLS 1.3 draft 11 anti-downgrade on non-secure fallback. r=keeler
2016-02-12 07:36:37 +09:00
fa11eb2db7
Bug 1243233 - Test ALLOW_COMPILER_WARNINGS instead of WARNINGS_AS_ERRORS, and move it to after it is set, r=glandium
...
ALLOW_COMPILERS_WARNINGS is set in moz.build files, which end up producing backend.mk files, which are loaded as part of config/rules.mk.
--HG--
extra : rebase_source : 75643ff0a30be733216d5572668a52ab365d7c59
2016-01-29 12:08:26 -08:00
880b7f8386
Bug 1245053, land NSS_3_23_BETA4, r=me, includes a makefile change to adjust for NSS changes, patch by EKR, r=kaie
2016-02-08 16:16:25 +01:00
26f7b04705
bug 1243349 - fix NSPR link paths for NSS. r=mshal
...
--HG--
extra : commitid : 4eavO61nNKX
extra : rebase_source : f5ddf4c1df5105f6f46b7780b0c49d89970fc47e
extra : amend_source : e5d3d5b809c27608c3d897373c0ea888ebfceaa1
2016-01-27 09:28:40 -05:00
10d60e258b
Backed out changeset b538734b6a17 (bug 1243349) for bustage on a CLOSED TREE
2016-01-27 16:13:12 +01:00
c2b6bb1e3b
bug 1243349 - fix NSPR link paths for NSS. r=glandium
...
--HG--
extra : commitid : 7MNlvrCCE6W
extra : rebase_source : a2919eef6b02edc31682ba1a9a12f66b19b66814
extra : amend_source : 394e2b0a5f7e3fb89ffc88f12a186628745b202b
2016-01-27 09:28:40 -05:00
5f9099964c
backout bug 1237863 - Silence linker errors from MOZ_FOLD_LIBS on Windows for causing shutdown crashes on Windows (bug 1242802). r=me
...
--HG--
extra : commitid : MyxCmKoAoo
extra : rebase_source : 71a96437207f93ff1f7def8fba4f07c9bbdf1f1c
2016-01-26 12:57:48 -05:00
38e4db6e5e
Bug 1191936 - Implement RSA-PSS signing and verification r=rbarnes,smaug
2015-10-13 20:22:43 +02:00
76f0fb5769
bug 1230117 - Stop using NSPR's configure. r=glandium
...
--HG--
extra : commitid : 3xfupwYWRJC
extra : rebase_source : 157a22a7d50b0ea61c0ba24c0c9163f1c0f5a806
2016-01-21 06:04:11 -05:00
94ce7f3a5c
bug 1237863 - Silence linker errors from MOZ_FOLD_LIBS on Windows. r=glandium
...
--HG--
extra : commitid : KLNhVJ5A5z7
extra : rebase_source : 52ea2b119cc68ff386d1939f51ee28c4fbc1a315
2016-01-15 05:58:22 -05:00
46c64642e1
Bug 1155198 - export symbols used by Java from Firefox-built NSS library; r=glandium
2016-01-14 11:22:07 -05:00
3c783859f9
Bug 1237140 - Pass NSS_EXTRA_SYMBOLS_FILE down to nss.symbols processing. r=gps
2016-01-20 07:24:40 +09:00
f45414c2f0
Bug 1133073 - Use PR_DuplicateEnvironment to avoid post-fork malloc on all Linux platforms. r=dhylands
2016-01-11 14:17:01 -08:00
64f3bc56b6
Back out 7f6bb9f7e60d (bug 1133073) for bustage. Sorry about that.
2016-01-11 13:29:53 -08:00
a73c98c3e5
Bug 1133073 - Use PR_DuplicateEnvironment to avoid post-fork malloc on all Linux platforms. r=dhylands
2016-01-11 12:46:50 -08:00
2fcd7f7524
Bug 1235676 - Add a global ABS_DIST variable for a non-relative version of DIST, based on topobjdir. r=mshal
...
This replaces multiple local definitions of ABS_DIST.
2015-12-31 08:10:02 +09:00
60fde7dd14
Bug 1235132 - Remove _PR_* symbols from nss.symbols. r=gps
...
The only affected symbols are
_PR_<architecture>_Atomic{Decrement,Set,Add,Increment}, they are not exposed in
public headers, have a different name on each architecture, and have a public
API: PR_Atomic{Decrement,Set,Add,Increment}.
2015-12-31 07:25:42 +09:00
e6c2b71205
Bug 1235132 - Convert sqlite and nss to SYMBOLS_FILE. r=gps
...
--HG--
rename : config/external/nss/nss.def => config/external/nss/nss.symbols
rename : db/sqlite3/src/sqlite.def => db/sqlite3/src/sqlite.symbols
2015-12-31 07:22:08 +09:00
826cd3d4e3
Bug 1211568, land NSS_3_21_RTM r=martin.thomson, and adjust Makefiles r=mh
2015-11-13 18:03:01 +01:00
4b8e5ced0f
Bug 1223131 - Don't remove a host from the whitelist if the version fallback was needed. r=keeler
2015-11-12 07:18:37 +09:00
7c5e9caf26
Back out changeset bda43f333e1a (bug 1211568) for "Could not find EV root in NSS storage" assertion failures
...
CLOSED TREE
2015-11-10 08:18:47 -08:00
a24d95bb6d
Bug 1211568, land NSS_3_21_RTM r=martin.thomson, and adjust Makefiles r=mh
2015-11-10 16:24:15 +01:00
9507291e59
Bug 1211568 - Update NSS to 3.21 Beta 3, r=kaie
...
--HG--
extra : commitid : 2fCIZ27Gd2I
extra : rebase_source : 57ff0dcc9361618ea53aac7ebea83460cba1c390
2015-10-23 11:39:23 -07:00
9460c550eb
Bug 1216318 - Disable warnings as errors in NSS by default, r=ted
...
--HG--
extra : commitid : Fbqzl2hboW
extra : rebase_source : 373523f1b092e9343060e52613e7b3b9abb2857c
2015-10-23 11:41:49 -07:00
f21d36e95a
Bug 1215779 - Remove broken (non-EC) DSA keygen code. r=keeler
2015-10-19 22:54:00 +02:00
9f2c4e94ba
Bug 1209875 - Get rid of XULPPFLAGS. r=gps
...
The flags added in toolkit/locales/Makefile.in turn out not to be actually
used, so just remove that.
The remaining uses of XULPPFLAGS are to set debug flags depending on whether
MOZ_DEBUG is set or not. Just set a dedicated variable with the right value
from configure.
2015-10-01 07:30:48 +09:00
f44287005f
Bug 1198334 (part 1) - Replace the opt-in FAIL_ON_WARNINGS with the opt-out ALLOW_COMPILER_WARNINGS. r=glandium.
...
The patch removes 455 occurrences of FAIL_ON_WARNINGS from moz.build files, and
adds 78 instances of ALLOW_COMPILER_WARNINGS. About half of those 78 are in
code we control and which should be removable with a little effort.
--HG--
extra : rebase_source : 82e3387abfbd5f1471e953961d301d3d97ed2973
2015-08-27 20:44:53 -07:00
da30b32ccd
Bug 856404 - Enable libraries folding on mingw. r=glandium
2015-08-06 13:26:33 +02:00
93f1797507
Bug 1172785 - RTCCertificate implementation, r=rbarnes
...
--HG--
extra : commitid : CBco7h85lO6
extra : rebase_source : 9cec281dd07e6d503a19a0ea57e5d4ceee98197c
2015-07-06 10:40:04 -07:00
482cce28c3
bug 1173070 - expose VFY_EndWithSignature from NSS r=keeler
2015-06-09 15:51:38 -07:00
6e7e3f4399
Bug 1165442: Fix LIBPATH for NSS after bug 1138824. r=glandium
...
--HG--
extra : rebase_source : f18e2a6792f396e26f992bf3dbee70a52b8c1d9d
2015-05-21 07:58:23 -04:00
ee333796b2
Bug 1121982 - Update PSM to use NSS name constraints
2015-04-23 20:26:29 -04:00
c0f36f2bf0
Bug 1138824 - Don't install import libraries in $(DIST)/lib. r=gps
...
However, still keep copying nss there, because its build system needs it to link
programs such as certutil.
2015-03-27 09:42:11 +09:00
171babfad4
Bug 1139177 - RSA public key size checking cleanups. r=keeler
2015-03-05 16:41:00 +01:00
6cb15b84a0
Bug 1012549 - 0004. Support read private key in keystore. r=dkeeler r=qdot
2015-02-28 21:54:24 +08:00
ce50eac5c5
Bug 1012549 - 0001. Support import PKCS12 certificate. r=dkeeler r=vchang
2015-02-28 21:54:16 +08:00
a89b90ea7f
Bug 1130754: Avoid recalculating tbsCertificate digest, r=keeler
...
--HG--
extra : rebase_source : 85266413568df928cb1eaf1cd59b52ee9d4259e6
extra : histedit_source : 767e3263d28926435c6d2f4610c7d8b01e9ba87d
2015-02-07 12:14:31 -08:00
aeda384b1a
Bug 1073867, Part 4: Test that DSS end-entity certificates are rejected, r=mmc
...
--HG--
extra : rebase_source : 7cfdcdf08f2ae8909062b8803de6702ab47ec65a
2014-12-26 11:40:51 -08:00
301128304a
Bug 1103816 - Add support for gonk-L to android_stub.h, r=glandium
2014-12-16 21:35:09 -05:00
5167dadd93
Bug 1093724 - Add a range check to the TLS version prefs loading code. r=keeler
2014-12-09 21:48:29 +09:00
e2e6d53153
Bug 1083572 - Apply some make black magic to make the fix actually work
2014-10-31 18:09:06 -04:00
2d31127cff
Reland Bug 1063281, Part 9: Switch Gecko from NSS to CheckCertHostname, r=keeler
...
--HG--
extra : rebase_source : 3a5e3bc2e113035e9c88b571bac68f3dbe2c8f04
2014-10-28 15:28:38 -07:00
47c853314f
Bug 1077148 part 4 - Add and use new moz.build templates for Gecko programs and libraries. r=gps
...
There are, sadly, many combinations of linkage in use throughout the tree.
The main differentiator, though, is between program/libraries related to
Gecko or not. Kind of. Some need mozglue, some don't. Some need dependent
linkage, some standalone.
Anyways, these new templates remove the need to manually define the
right dependencies against xpcomglue, nspr, mozalloc and mozglue
in most cases.
Places that build programs and were resetting MOZ_GLUE_PROGRAM_LDFLAGS
or that build libraries and were resetting MOZ_GLUE_LDFLAGS can now
just not use those Gecko-specific templates.
2014-10-30 13:06:12 +09:00
Kai Engert
David Keeler
Ted Mielczarek
Masatoshi Kimura
Sebastian Hengst
Steve Fink
Carsten "Tomcat" Book
Tim Taubert
Nathan Froyd
Mike Hommey
Jed Davis
Phil Ringnalda
Martin Thomson
Cykesiopka
Nicholas Nethercote
Jacek Caban
Rex Hung
David Major
Richard Barnes
Chuck Lee
Brian Smith
Michael Wu
Ehsan Akhgari