Граф коммитов

2561 Коммитов

Автор SHA1 Сообщение Дата
Wes Kocher 234ae028ab Backed out changeset f693f6c91b23 (bug 860076) for browser_-certViewer.js failures on a CLOSED TREE 2014-01-30 18:33:31 -08:00
David Keeler a5df241b98 bug 860076 - remove SkipOcsp for being totally bogus r=briansmith
--HG--
rename : security/manager/ssl/tests/mochitest/browser/browser_certificateManagerLeak.js => security/manager/ssl/tests/mochitest/browser/browser_certViewer.js
2014-01-30 14:55:51 -08:00
Camilo Viecco 7257212a64 Bug 962833: ensure-certverify-returns secfailure on MUST_BE_EV and no ev certificate. r=dkeeler 2014-01-24 13:57:35 -08:00
Ehsan Akhgari c13db2bd52 Bug 964061 - Part 2: Remove nsIDOMCRMFObject; r=bzbarsky
--HG--
extra : rebase_source : 888e33d68bdcd6e03b56f75036ea00142831961d
2014-01-27 08:27:06 -08:00
Ehsan Akhgari 1b7fdc23c8 Bug 964061 - Part 1: Convert CRMFObject to WebIDL bindings; r=bzbarsky
--HG--
extra : rebase_source : 39a2b35df50cdd42624fb0e7a14383e8d40cea4b
2014-01-27 08:27:04 -08:00
Nathan Froyd ad56e71a7e Bug 938786 - notify the secure browser UI, if any, first in NotifySubmitObservers; r=bz 2014-01-23 15:06:20 -05:00
Brian Smith ccb3f48598 Bug 891066, Part 9: Move DisableMD5 to NSSCertDBTrustDomain, r=dkeeler
--HG--
extra : rebase_source : aaf658c12a74fc53f1591333f10d54e78fe1d992
2014-01-20 01:30:25 -08:00
Brian Smith 9d23ee7fc7 Bug 891066, Part 8: Add stapled OCSP response to CertVerifier, r=cviecco
--HG--
extra : rebase_source : ffe0762228d1217cb51e2f8fad2e0605d7d61344
extra : source : f721d60b6bf74467381590457ce3542f83a2f43a
2013-09-27 19:53:36 -07:00
Brian Smith 12a2ffda37 Bug 891066, Part 7: Give CertVerifier its own NSPR logging module, r=cviecco
--HG--
extra : rebase_source : a6b38c4026fe70c9789cbe4830df57c943382f5b
extra : source : 591daff856840016c979ed9b4fdbed4ed68f22a6
2013-07-10 23:47:09 -07:00
Brian Smith 213974a8d4 Bug 891066, Part 6: Move SSL server cert verification logic to security/certverifier, r=cviecco
--HG--
extra : rebase_source : e30b5b46e075c52651bb5320b17660f85a50abbb
extra : source : ef41444d0a7d1f6697c7a4d431fffe8db1724605
2013-07-08 16:30:59 -07:00
Brian Smith 4488103b73 Bug 891066, Part 5: Switch to security::pkix::ScopedCERTCertList, r=cviecco
--HG--
extra : rebase_source : 59015f864e612f18a2f7bb62092b692ae8d47853
extra : source : 31f68b8a192b45720fe931176cdc0565e8c6fd80
2014-01-22 17:13:19 -08:00
Brian Smith b92b30b8cf Bug 733454: Remove hard-coded blocklisting in PSM for Comodo and DigiNotar, r=cviecco
--HG--
extra : rebase_source : 3a3ab5246bd6e2af4a0952c64181cad6feb5c424
extra : source : 2e540dd35edfa0ef3549ed4dd8f0b15b57cb2806
2013-07-01 11:39:16 -07:00
Brian Smith 3091f37853 Bug 891066, Part 3: Move more initialization of NSS to security/certverifier, r=keeler
--HG--
extra : rebase_source : 33aad105028f849d0bbe1c37b60eab50f2f22c88
2014-01-20 22:10:33 -08:00
Brian Smith c1583f22ce Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
--HG--
extra : rebase_source : dd59a391825b776b075e855660c2488105e2d741
2014-01-26 19:36:28 -08:00
Brian Smith efdf583668 Bug 891066, Part 1: Remove CertVerifier's dependency on nsNSSComponent, r=keeler, r=cviecco
--HG--
extra : rebase_source : 3242f78d6d4d68080997dd56dae1fd0675750d5e
extra : source : 965c9f30e9b87e418bbf6ab43657257e94992223
2014-01-19 14:05:40 -08:00
Brian Smith 188876d1dc Bug 961454: Clean up whitespace in key PSM files, r=keeler, r=cviecco
--HG--
extra : rebase_source : 53f14cc6f97814eb9913a1ddad1a19631e2af08a
2014-01-21 17:30:44 -08:00
ffxbld 95fed55276 No bug, Automated HSTS preload list update from host bld-centos6-hp-006 - a=hsts-update 2014-01-25 03:14:57 -08:00
David Keeler a3dd98815d bug 951354 - test nsNSSCertificateDB for proper shutdown r=cviecco a=abillings 2014-01-21 16:47:47 -08:00
Ms2ger 384f5ca9e3 Merge latest PGO-green changeset from inbound to central. 2014-01-20 09:30:38 +01:00
Ms2ger 4f1e9b830b Bug 956015 - Add an infallible nsIDocShellTreeItem::ItemType; r=bz 2014-01-20 08:58:26 +01:00
Brian Smith 18f9a21219 Bug 952874: Fix telemetry for RSA/DHE key sizes of 1025-1280 bits and fix misspelling, r=keeler 2014-01-18 17:59:24 -08:00
Brian Smith d1287a15a2 Bug 950858: Make cipher suite telemetry code less crash-prone, r=keeler 2014-01-18 16:52:16 -08:00
Phil Ringnalda 74c9eb6feb Merge m-i to m-c 2014-01-18 15:17:10 -08:00
ffxbld 6d2f3012ee No bug, Automated HSTS preload list update from host bld-linux64-ec2-438 - a=hsts-update 2014-01-18 03:20:19 -08:00
Brian Smith 3824df981f Bug 960714: Make NPN and ALPN prefs dynamic, r=keeler, r=mcmanus
--HG--
extra : rebase_source : 42ff8c05b682e755d51ec79e2cb26db7cedd382f
2014-01-16 21:38:59 -08:00
David Keeler 2ffb88c0b9 bug 960723 - fix failingOCSPResponder in test_ev_certs.js r=briansmith 2014-01-16 13:18:38 -08:00
Patrick McManus ff9c9eca9f Bug 890994: ALPN support for Gecko, r=briansmith 2014-01-14 15:34:23 -05:00
Wes Kocher 44b44b413c Backed out changeset 8526c7a38761 (bug 951354) for CPP unittest bustage 2014-01-17 17:50:17 -08:00
David Keeler 88d7f1342f bug 951354 - test nsNSSCertificateDB for proper shutdown r=cviecco a=abillings 2014-01-17 16:22:51 -08:00
Raymond Etornam Agbeame(:retornam) 5aa30a620f Bug 950169 - remove unused arguments for LogInvalidCertError r=keeler 2014-01-17 11:57:57 -08:00
David Keeler a7bcf97cfc bug 950240 - don't do DV fallback for nsIIdentityInfo.isExtendedValidation r=briansmith 2014-01-17 11:04:09 -08:00
David Keeler b8f6622e6b bug 947759 - unconditionally add Google sites to the HSTS preload list r=cviecco DONTBUILD NPOTB 2014-01-15 11:22:06 -08:00
David Keeler cb931af8e3 bug 959796 - refactor error reporting in getHSTSPreloadList.js r=cviecco DONTBUILD NPOTB 2014-01-15 11:20:55 -08:00
Brian Smith 2bf2f0ce5a Bug 923304, Part 2: Adjust EV tests, r=keeler
--HG--
extra : rebase_source : f0cfd0089a99dddd8852e0613bc2a31e5c12b1de
2014-01-14 15:22:09 -08:00
Brian Smith ae750cc925 Bug 923304, Part 1: Add test for OCSP response signed by CA that has an OCSP URI, r=keeler, r=briansmith
--HG--
extra : rebase_source : 7cafe0781563382c2221e865201beb023fea3628
2014-01-13 02:33:08 -08:00
David Keeler 648d25a19a bug 957368 - standardize and simplify nsNSSShutDownObject implementations r=cviecco r=briansmith 2014-01-14 09:28:43 -08:00
Garrett Robinson eabe1d0a0f Bug 883975 - CSP 1.1 hash-source. r=sstamm, r=dholbert, r=mrbkap 2014-01-02 11:14:06 -08:00
Brian Smith b6cabfc2be Bug 957667: Decouple OCSP stapling pref from the OCSP fetching pref, and couple the OCSP required pref to the OCSP fetching pref, r=keeler
--HG--
extra : rebase_source : 86cb86f76f4def579fcf07e479025852849c34f8
extra : source : 08115711a4e6e77971c9e872fb6c68e88ac9693e
2014-01-08 08:51:06 -08:00
Brian Smith 4f7ae6c58b Bug 959026: Add telemetry about cases where we don't do OCSP fetching when we expect to, r=keeler
--HG--
extra : rebase_source : f7e9826569325f497273a92eec5127c414baa8bc
extra : source : bb5bb5a1b571e54695a4c8d5be0cc447f29f0358
2014-01-12 19:31:40 -08:00
Ryan VanderMeulen de8f18e28c Backed out changesets 1b892043a386 and 0e14b3468b94 (bug 923304) and changeset 2e2c276950b9 (bug 950129) for xpcshell failures. 2014-01-13 18:00:34 -05:00
Ryan VanderMeulen e7b8f32115 Merge inbound to m-c. 2014-01-13 17:44:24 -05:00
Brian Smith 3a3061758d Bug 923304, Part 2: Adjust EV tests, r=keeler
--HG--
extra : source : 97bf218ac3bb44e81074ca95877ca8b6414265b3
2013-12-28 11:28:49 -08:00
Brian Smith effee37c95 Bug 923304, Part 1: Add test for OCSP response signed by CA that has an OCSP URI, r=keeler, r=briansmith
--HG--
extra : source : e7afcba6743e40755d28a296b00c395392864657
2014-01-13 02:33:08 -08:00
Patrick McManus 0ef97ed6fd bug 951199 - Interface for Socket Level Access to TLS Version Used r=dkeeler r=bsmith 2013-10-09 17:21:48 -07:00
Nemina Amarasinghe 76f959e6f5 Bug 946075 - Remove extra space from ssl_error_bad_cert_domain error message contains in TransportSecurityInfo.cpp. r=dkeeler 2014-01-13 09:28:14 -05:00
Brian Smith 367c980791 Bug 957665: Add telemetry to measure how many people have OCSP enabled, r=keeler
--HG--
extra : rebase_source : e6dd0d7d06ce0eb5b2f34a77a851dd7c0655ac3e
2014-01-08 08:59:53 -08:00
David Keeler 02ba1423d9 bug 950268 - fix leak in nsCertTree::GetDispInfoAtIndex r=cviecco 2014-01-09 10:02:08 -08:00
Phil Ringnalda 1dddb1a066 Back out 2e7e2de7b13e (bug 948574) for b2g mochitest crashes
CLOSED TREE
2014-01-07 21:10:23 -08:00
David Keeler 12478c7858 bug 948574 - remote nsISiteSecurityService::IsSecureURI r=bz 2014-01-07 11:31:30 -08:00
Brian Smith 7a3a090854 Bug 952876: Add test for bug 952808 (OCSP stapling not honored when there is a error entry in the OCSP cache), r=keeler 2014-01-06 14:45:35 -08:00