f16ca73e4c
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D158942
2022-10-10 13:14:27 +00:00
7da0562237
Bug 1792135 - land NSS NSS_3_84_BETA1 UPGRADE_NSS_RELEASE, r=nss-reviewers,nkulatova
...
Differential Revision: https://phabricator.services.mozilla.com/D158772
2022-10-06 22:47:02 +00:00
62cd9065c3
Bug 1720601 - Allow token cache to store more than one token per key, r=necko-reviewers,dragana
...
1. Allow to store more than one token per key.
2. Allow to use the token only once. The token will be removed after reading it.
3. Add a gtest.
Differential Revision: https://phabricator.services.mozilla.com/D153605
2022-10-06 12:56:01 +00:00
22a6ff72e5
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=pascalc
...
Differential Revision: https://phabricator.services.mozilla.com/D158756
2022-10-06 12:19:24 +00:00
644aa7999c
Bug 1716082 - clear all ongoing connections when removing certificate error overrides r=jschanck
...
Differential Revision: https://phabricator.services.mozilla.com/D158613
2022-10-05 20:15:02 +00:00
d71d3c19ed
Bug 1792809 - Make library and other windows keep stretching after bug 1665476. r=eemeli
...
Much like the dialog changes in bug 1792730.
Differential Revision: https://phabricator.services.mozilla.com/D158351
2022-10-04 10:21:05 +00:00
c6a00ce965
No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=dmeehan
...
Differential Revision: https://phabricator.services.mozilla.com/D158497
2022-10-03 13:20:51 +00:00
87d48b75dd
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D158326
2022-09-29 16:44:52 +00:00
8d1ebcb9d6
Bug 1792365 - Convert toolkit/modules consumers to use ES module imports directly. r=webdriver-reviewers,perftest-reviewers,geckoview-reviewers,extension-reviewers,preferences-reviewers,desktop-theme-reviewers,application-update-reviewers,pip-reviewers,credential-management-reviewers,robwu,Gijs,sgalich,bytesized,AlexandruIonescu,dao,m_kato
...
Differential Revision: https://phabricator.services.mozilla.com/D158094
2022-09-29 06:52:34 +00:00
4af4ff2e5b
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D158124
2022-09-27 16:27:33 +00:00
4e99c68740
No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=dmeehan
...
Differential Revision: https://phabricator.services.mozilla.com/D157923
2022-09-22 12:46:23 +00:00
4c4438b4f7
Bug 1536208 - removing old aarch64 manifest annotations. r=aryx,application-update-reviewers,bytesized
...
Differential Revision: https://phabricator.services.mozilla.com/D157677
2022-09-21 15:35:02 +00:00
9f24806607
Backed out 2 changesets (bug 1768250, bug 1720601) for multiple failures CLOSED TREE
...
Backed out changeset d6caea480d4d (bug 1768250)
Backed out changeset 97eccf466bf3 (bug 1720601)
2022-09-20 16:50:29 +03:00
137b76a861
Bug 1720601 - Allow token cache to store more than one token per key, r=necko-reviewers,dragana
...
1. Allow to store more than one token per key.
2. Allow to use the token only once. The token will be removed after reading it.
3. Add a gtest.
Differential Revision: https://phabricator.services.mozilla.com/D153605
2022-09-20 12:58:06 +00:00
bdb75eecd3
Bug 1790451 - remove now-unnecessary QueryInterface(Ci.nsITransportSecurityInfo) calls r=jschanck,webdriver-reviewers,necko-reviewers,application-update-reviewers,nalexander,valentin
...
Differential Revision: https://phabricator.services.mozilla.com/D157166
2022-09-20 03:58:50 +00:00
26a22933ed
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D157632
2022-09-19 13:30:31 +00:00
0316dc51b9
Bug 1790614 - Part 2: Use {ASSERT,ENSURE}_NS_{SUCCEEEDED,FAILED} in gtests, r=ahal,necko-reviewers
...
These macros will produce better outputs when they fail than these existing
patterns using `ENSURE_TRUE(NS_SUCCEEDED(...))` or similar, so this is a bulk
rewrite of existing tests to use them.
It should also help with discoverability when people base their tests off of
other existing tests.
Differential Revision: https://phabricator.services.mozilla.com/D157214
2022-09-15 14:51:50 +00:00
2bddac315a
No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D157441
2022-09-15 13:07:24 +00:00
0d0b51d1e4
Bug 1790152 - use nsIX509Cert directly in IPC in AddCertException r=nika
...
This avoids unnecessarily serializing the certificate to a string before
sending it over IPC.
Depends on D157007
Differential Revision: https://phabricator.services.mozilla.com/D157008
2022-09-14 21:49:53 +00:00
3d9a6d0374
Bug 1789902 - Part 2: Use XPCOM static components instead of Services in Rust, r=xpcom-reviewers,necko-reviewers,barret,valentin
...
Differential Revision: https://phabricator.services.mozilla.com/D156891
2022-09-13 13:47:13 +00:00
d7cbba5f61
No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D157108
2022-09-12 12:48:53 +00:00
400f4a73bf
Bug 1789458 - Backout asserts from 1788290. r=keeler
...
Differential Revision: https://phabricator.services.mozilla.com/D156944
2022-09-09 17:15:10 +00:00
1f2d882e17
No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D156815
2022-09-08 13:47:22 +00:00
dcae9a94c1
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D156422
2022-09-06 03:01:37 +00:00
8c1204afeb
Bug 1788856 - initialize NSS as needed in nsNSSCertificate r=jschanck
...
Previously, instantiating an nsIX509Cert (implemented by nsNSSCertificate)
would cause NSS to be initialized. However, if 'new nsNSSCertificate()' was
called directly (rather than going through XPCOM), NSS would not be
initialized. This didn't seem to be a problem until bug 1787942 changed how
nsITransportSecurityInfo was sent between processes for PHttpChannel and
HttpChannelOnStartRequestArgs (namely, by using the direct IPC support rather
than first serializing to a string, sending it over IPC, and then deserializing
it). That direct IPC implementation uses 'new nsNSSCertificate()', which is now
a problem.
nsNSSCertificate used to make extensive use of NSS, which warranted ensuring
NSS was initialized before creating one at all. Now, as of bug 1748341, the
cases where nsNSSCertificate uses NSS are limited and clearly delineated.
Accordinly, this change makes it so nsNSSCertificate only initializes NSS if
and when it needs it, rather than relying on the XPCOM boilerplate to
initialize NSS first.
Differential Revision: https://phabricator.services.mozilla.com/D156353
2022-09-02 22:26:37 +00:00
a7c2f2a620
Bug 1788290 - Add the telemetry for Web Privacy. r=keeler.
...
Differential Revision: https://phabricator.services.mozilla.com/D156107
2022-09-02 20:59:35 +00:00
97f4470f70
Bug 1788290 - Record whether Private DNS was used for a TLS Connection. r=keeler,necko-reviewers,valentin.
...
Differential Revision: https://phabricator.services.mozilla.com/D156106
2022-09-02 20:59:35 +00:00
a0e440195f
Bug 1788290 - Record whether OCSP requests were made whilst making a TLS connection. r=keeler,necko-reviewers.
...
Differential Revision: https://phabricator.services.mozilla.com/D156105
2022-09-02 20:59:34 +00:00
7fed5a7ef2
Backed out 3 changesets (bug 1788290) for causing build bustages. CLOSED TREE
...
Backed out changeset 52d5a06be477 (bug 1788290)
Backed out changeset a3b5d214b5d4 (bug 1788290)
Backed out changeset e94a38b79965 (bug 1788290)
2022-09-02 19:13:34 +03:00
ea92d08e39
Bug 1788290 - Add the telemetry for Web Privacy. r=keeler.
...
Differential Revision: https://phabricator.services.mozilla.com/D156107
2022-09-02 14:16:08 +00:00
4b3a179797
Bug 1788290 - Record whether Private DNS was used for a TLS Connection. r=keeler,necko-reviewers,valentin.
...
Differential Revision: https://phabricator.services.mozilla.com/D156106
2022-09-02 14:16:07 +00:00
0e389c049e
Bug 1788290 - Record whether OCSP requests were made whilst making a TLS connection. r=keeler,necko-reviewers.
...
Differential Revision: https://phabricator.services.mozilla.com/D156105
2022-09-02 14:16:07 +00:00
865a8ba6b7
Bug 1778997 - provide pkcs11 rust bindings in-tree r=jschanck,supply-chain-reviewers
...
Differential Revision: https://phabricator.services.mozilla.com/D154258
2022-09-01 20:48:25 +00:00
e57987e3d0
No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D156168
2022-09-01 13:14:23 +00:00
353baa4945
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D155828
2022-08-29 13:18:01 +00:00
26ac918f96
Backed out changeset 8feed89ecea4 (bug 1787268) for causing build bustages. CLOSED TREE
2022-08-27 01:31:43 +03:00
7871c25d95
Bug 1787268 - avoid once_cell in ipcclientcerts. r=keeler
...
Differential Revision: https://phabricator.services.mozilla.com/D155611
2022-08-26 19:58:46 +00:00
56e7ae8648
Bug 1781104 - replace error type booleans with error category in nsITransportSecurityInfo r=necko-reviewers,mixedpuppy,jschanck,mccr8
...
Differential Revision: https://phabricator.services.mozilla.com/D154561
2022-08-26 18:48:38 +00:00
b4c45d4248
Bug 1781104 - remove unnecessary bits parameter from nsICertOverrideService r=djackson,necko-reviewers,geckoview-reviewers,extension-reviewers,kershaw,calu
...
Differential Revision: https://phabricator.services.mozilla.com/D152826
2022-08-26 18:48:38 +00:00
40cd3d5efd
Bug 1781104 - remove unused 'add override by fingerprint' API from nsICertOverrideService r=djackson
...
`rememberTemporaryValidityOverrideUsingFingerprint` is no longer used in
`nsICertOverrideService` and can be removed.
Differential Revision: https://phabricator.services.mozilla.com/D152825
2022-08-26 18:48:37 +00:00
e3bad2d44a
Bug 1786197 - Turn on ESLint rule for prefer-boolean-length-check for security. r=keeler
...
Differential Revision: https://phabricator.services.mozilla.com/D155165
2022-08-26 13:39:34 +00:00
7de1940b30
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D155573
2022-08-25 14:49:54 +00:00
4955e3dc0f
No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D155332
2022-08-23 13:01:05 +00:00
9c30613d90
Bug 1784098 - make nsISocketTransport.securityInfo explicit as nsISSLSocketControl r=necko-reviewers,kershaw
...
Differential Revision: https://phabricator.services.mozilla.com/D154257
2022-08-23 03:37:17 +00:00
e7fe86c6a0
Bug 1784098 - move nsITLSServerConnectionInfo from nsISocketTransport.securityInfo to securityCallbacks r=necko-reviewers,kershaw
...
In preparation for making nsISocketTransport.securityInfo a concrete type
(nsITransportSecurityInfo), nsITLSServerConnectionInfo needs to be moved off of
securityInfo. securityCallbacks seems like a reasonable place.
Differential Revision: https://phabricator.services.mozilla.com/D154256
2022-08-23 03:37:17 +00:00
5fb7ed6946
Backed out 4 changesets (bug 1784098) for bustages on nsCOMPtr.h . CLOSED TREE
...
Backed out changeset d22ac7bcb472 (bug 1784098)
Backed out changeset a97052238dba (bug 1784098)
Backed out changeset a2bb8ecd6170 (bug 1784098)
Backed out changeset 16ab6547619c (bug 1784098)
2022-08-22 20:50:21 +03:00
5a1655a87d
Bug 1784098 - make nsISocketTransport.securityInfo explicit as nsISSLSocketControl r=necko-reviewers,kershaw
...
Differential Revision: https://phabricator.services.mozilla.com/D154257
2022-08-22 16:32:01 +00:00
0142f6d701
Bug 1784098 - move nsITLSServerConnectionInfo from nsISocketTransport.securityInfo to securityCallbacks r=necko-reviewers,kershaw
...
In preparation for making nsISocketTransport.securityInfo a concrete type
(nsITransportSecurityInfo), nsITLSServerConnectionInfo needs to be moved off of
securityInfo. securityCallbacks seems like a reasonable place.
Differential Revision: https://phabricator.services.mozilla.com/D154256
2022-08-22 16:32:01 +00:00
6cb19f9e34
No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D155203
2022-08-22 13:44:16 +00:00
ff257fb43c
Bug 1786076 - Enable ESlint rule no-unused-vars on the global scope for security/manager/ssl/ xpcshell-tests. r=keeler
...
Differential Revision: https://phabricator.services.mozilla.com/D155101
2022-08-19 20:44:02 +00:00
ffxbld
Dennis Jackson
Kershaw Chang
Dana Keeler
Emilio Cobos Álvarez
Mark Banner
Joel Maher
Andreea Pavel
Nika Layzell
Butkovits Atila
Iulian Moraru
John Schanck
Narcis Beleuzu