Граф коммитов

16871 Коммитов

Автор SHA1 Сообщение Дата
Mike Hommey 5fd296e7b8 Bug 1804595 - Update osclientcerts to libloading 0.7. r=keeler,supply-chain-reviewers
Differential Revision: https://phabricator.services.mozilla.com/D164177
2022-12-13 00:37:50 +00:00
Mark Banner 53ce0faad1 Bug 1804661 - Convert browser/components/BrowserGlue.jsm to an ES module. r=Gijs,settings-reviewers,perftest-reviewers,sparky
Differential Revision: https://phabricator.services.mozilla.com/D164204
2022-12-12 14:59:18 +00:00
ffxbld fbbfc74875 No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D164446
2022-12-12 13:48:29 +00:00
John Schanck 7f3ed4068d Bug 1802996 - land NSS NSS_3_86_RTM UPGRADE_NSS_RELEASE, r=bbeurdouche
Differential Revision: https://phabricator.services.mozilla.com/D164263
2022-12-08 20:51:52 +00:00
ffxbld 255408cc51 No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D164198
2022-12-08 14:23:48 +00:00
Dana Keeler 88838b311a Bug 1801016: remove expiring telemetry "security.psm_ui_interaction" r=djackson
Differential Revision: https://phabricator.services.mozilla.com/D163972
2022-12-07 17:30:21 +00:00
Natalia Kulatova 9e6457328f Bug 1802319 - Modification of the bug "Consider removing ECDSA_SHA1 signature algorithm". r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D162999
2022-12-07 11:34:55 +00:00
Mark Banner ff47c36f9b Bug 1803914 - Automatically replace Cu.reportError with console.error (misc). r=mossop
Differential Revision: https://phabricator.services.mozilla.com/D163772
2022-12-06 14:34:57 +00:00
Valentin Gosu c5dcc9435f Bug 1797279 - Add nsINSSComponent.asyncClearSSLExternalAndInternalSessionCache that waits for socket process to clear the cache r=keeler,necko-reviewers,kershaw
This is a test only method, and the fact that the operation is not sync
with socket process can possibly cause racy tests.
This patch adds an async version of clearSSLExternalAndInternalSessionCache
that returns a promise.

Differential Revision: https://phabricator.services.mozilla.com/D162153
2022-12-06 10:36:10 +00:00
Jed Davis 21e1f65696 Bug 1784517 - Explicitly skip sandboxing tests on unsandboxed build types. r=jmaher
There are tools which consume `moz.build` files by reading every one in
the tree, rather than traversing `DIRS` for a specific build type (see
bug 1667271 comment #89 for background); as a result, we can end up with
CI test jobs that try to run sandboxing tests on build types like Linux
ASan where `security/sandbox` isn't built, and fail.

This patch applies a suggested workaround: add an otherwise redundant
`skip-if` declaration to the test manifests to skip them on the platforms
where they're not part of the build.

Note that sandboxing is disabled in the presence of Linux ASan or TSan
by logic in `toolkit/moz.configure`, but for code coverage builds it's
done via the CI mozconfig files adding `--disable-sandbox`.

Differential Revision: https://phabricator.services.mozilla.com/D163411
2022-12-05 21:23:32 +00:00
ffxbld 3026e10680 No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D163821
2022-12-05 14:05:21 +00:00
John Schanck 282382a80f Bug 1802996 - land NSS NSS_3_86_BETA1 UPGRADE_NSS_RELEASE, r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D163641
2022-12-03 21:47:31 +00:00
John M. Schanck 06c7606fd3 Bug 1803704 - Disable EV Treatment for "Network Solutions Certificate Authority". r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D163735
2022-12-02 18:41:39 +00:00
Cristian Tuns 5eaed27bd7 Backed out changeset 4534fc16cb5c (bug 1802996) for causing multiple failures UPGRADE_NSS_RELEASE CLOSED TREE 2022-12-01 18:47:20 -05:00
John Schanck 399c57a914 Bug 1802996 - land NSS NSS_3_86_BETA1 UPGRADE_NSS_RELEASE, r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D163641
2022-12-01 21:41:21 +00:00
Yannis Juglaret 8b95e44d5b Bug 1800933 - Let ACG in RDD and WMF ride the trains. r=bobowen
Differential Revision: https://phabricator.services.mozilla.com/D163585
2022-12-01 14:11:15 +00:00
ffxbld 7f88fb67c4 No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D163574
2022-12-01 13:09:16 +00:00
Mike Hommey 94c0c63594 Bug 1801029 - Upgrade bindgen to 0.63.0. r=emilio,necko-reviewers,supply-chain-reviewers,kershaw
Differential Revision: https://phabricator.services.mozilla.com/D163375
2022-11-30 22:06:50 +00:00
Marian-Vasile Laza 9414231a2f Backed out 3 changesets (bug 1797279, bug 1800758) for causing xpcshell failures on test_httpssvc_retry_with_ech.js. CLOSED TREE
Backed out changeset 8de777d3d624 (bug 1797279)
Backed out changeset daf5d55079db (bug 1797279)
Backed out changeset 40c7d48e81f6 (bug 1800758)
2022-11-30 21:08:34 +02:00
Valentin Gosu bee1b0905e Bug 1797279 - Add nsINSSComponent.asyncClearSSLExternalAndInternalSessionCache that waits for socket process to clear the cache r=keeler,necko-reviewers,kershaw
This is a test only method, and the fact that the operation is not sync
with socket process can possibly cause racy tests.
This patch adds an async version of clearSSLExternalAndInternalSessionCache
that returns a promise.

Differential Revision: https://phabricator.services.mozilla.com/D162153
2022-11-30 13:37:11 +00:00
Alexandre Lissy 225f9f94b2 Bug 1802513 - Allow readlink(/proc/self/exe) in Utility sandbox for FFVPX r=gcp
Differential Revision: https://phabricator.services.mozilla.com/D163227
2022-11-30 10:10:22 +00:00
Dana Keeler e3836395ba Bug 1795831 - fix checkHandshake in PSM to correctly handle zero-length reads r=jschanck,necko-reviewers
This also restructures checkHandshake to be more clear and understandable, to
simplify maintenance going forward.

Differential Revision: https://phabricator.services.mozilla.com/D162799
2022-11-29 22:12:46 +00:00
Butkovits Atila 5258bae36b Backed out changeset 99ed42b2349b (bug 1795831) for causing build bustages at nsNSSIOLayer.cpp. CLOSED TREE 2022-11-29 04:05:41 +02:00
Dana Keeler ce55b5d5de Bug 1795831 - fix checkHandshake in PSM to correctly handle zero-length reads r=jschanck,necko-reviewers
This also restructures checkHandshake to be more clear and understandable, to
simplify maintenance going forward.

Differential Revision: https://phabricator.services.mozilla.com/D162799
2022-11-28 21:50:50 +00:00
ffxbld 501d9124e3 No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=diannaS
Differential Revision: https://phabricator.services.mozilla.com/D163210
2022-11-28 13:42:23 +00:00
Barret Rennie 59bf1539b1 Bug 1541508 - Use Services.env in security/ r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D160145
2022-11-25 19:09:10 +00:00
Marco Castelluccio 5c8c82f4e5 Bug 1790816 - Reformat security/ with isort. r=linter-reviewers,ahal DONTBUILD
# ignore-this-changeset

Differential Revision: https://phabricator.services.mozilla.com/D162666
2022-11-24 17:22:21 +00:00
ffxbld ad2bde721e No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=dmeehan
Differential Revision: https://phabricator.services.mozilla.com/D162979
2022-11-24 14:36:58 +00:00
ffxbld 70b662d1ff No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D162552
2022-11-21 14:06:35 +00:00
Chris H-C fc358ad992 Bug 1799442 - Update Glean to v51.8.2, rkv to 0.18 r=janerik,supply-chain-reviewers
Differential Revision: https://phabricator.services.mozilla.com/D162345
2022-11-18 13:56:27 +00:00
Jan Andre Ikenmeyer 9ac9619c3c Bug 1600437 - Disable CBC-mode ECDSA ciphers and stop advertising ECDSA+SHA1 signature algorithm. r=nkulatova
Differential Revision: https://phabricator.services.mozilla.com/D65197
2022-11-18 13:13:52 +00:00
Marian-Vasile Laza 023eed4276 Backed out changeset 75acc8e81d81 (bug 1799442) for causing WR tidy bustage. CLOSED TREE 2022-11-18 14:23:58 +02:00
Chris H-C 7655a12f65 Bug 1799442 - Update Glean to v51.8.2, rkv to 0.18 r=janerik,supply-chain-reviewers
Differential Revision: https://phabricator.services.mozilla.com/D162345
2022-11-18 10:15:40 +00:00
ffxbld d538db87cb No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D162281
2022-11-17 13:28:42 +00:00
Mark Banner 1ecc61f91d Bug 1799314 - Convert consumers of testing modules to import ES modules direct (security/manager/). r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D161912
2022-11-17 12:00:30 +00:00
Dana Keeler 1a2ff46b6e Bug 1791633 - separate nsITLSSocketControl from nsITransportSecurityInfo r=necko-reviewers,kershaw,jschanck
Depends on D160311

Differential Revision: https://phabricator.services.mozilla.com/D160313
2022-11-16 16:37:29 +00:00
Dana Keeler d8c65c4b8b Bug 1791633 - rename nsISSLSocketControl to nsITLSSocketControl and move it and nsITransportSecurityInfo to PSM r=necko-reviewers,kershaw
Depends on D160310

Differential Revision: https://phabricator.services.mozilla.com/D160311
2022-11-16 16:37:29 +00:00
Dana Keeler d1189f7803 Bug 1791633 - rename nsNSSSocketInfo to NSSSocketControl and move to its own file r=jschanck
Differential Revision: https://phabricator.services.mozilla.com/D160310
2022-11-16 16:37:28 +00:00
Marian-Vasile Laza 9c44d165bb Backed out 3 changesets (bug 1791633) for causing bustages on TransportSecurityInfo.cpp. CLOSED TREE
Backed out changeset 23b864e14db0 (bug 1791633)
Backed out changeset 0bcba3375ec0 (bug 1791633)
Backed out changeset ab0ea0d68f5c (bug 1791633)
2022-11-15 23:51:58 +02:00
Dana Keeler 0a13b94a8f Bug 1791633 - separate nsITLSSocketControl from nsITransportSecurityInfo r=necko-reviewers,kershaw,jschanck
Depends on D160311

Differential Revision: https://phabricator.services.mozilla.com/D160313
2022-11-15 20:03:29 +00:00
Dana Keeler 21ac70dabe Bug 1791633 - rename nsISSLSocketControl to nsITLSSocketControl and move it and nsITransportSecurityInfo to PSM r=necko-reviewers,kershaw
Depends on D160310

Differential Revision: https://phabricator.services.mozilla.com/D160311
2022-11-15 20:03:29 +00:00
Dana Keeler bd6502dc63 Bug 1791633 - rename nsNSSSocketInfo to NSSSocketControl and move to its own file r=jschanck
Differential Revision: https://phabricator.services.mozilla.com/D160310
2022-11-15 20:03:28 +00:00
Haik Aftandilian e78d11eccf Bug 1799922 - Remove codesign.bash r=mstange
Remove the unmaintained codesign.bash script.

Production builds are signed in automation using the Release Engineering script scriptworker-scripts/iscript.

Differential Revision: https://phabricator.services.mozilla.com/D161710
2022-11-15 16:03:31 +00:00
Butkovits Atila f3f66bf7e5 Backed out 3 changesets (bug 1791633) for causing build bustages at nsHttpConnectionMgr.cpp:. CLOSED TREE
Backed out changeset ee9744982673 (bug 1791633)
Backed out changeset f5a4bfdaba40 (bug 1791633)
Backed out changeset f57131b9cfe2 (bug 1791633)
2022-11-15 08:07:16 +02:00
Dana Keeler a7fbd7a3a0 Bug 1791633 - separate nsITLSSocketControl from nsITransportSecurityInfo r=necko-reviewers,kershaw,jschanck
Depends on D160311

Differential Revision: https://phabricator.services.mozilla.com/D160313
2022-11-15 05:34:40 +00:00
Dana Keeler e5e2d15c2f Bug 1791633 - rename nsISSLSocketControl to nsITLSSocketControl and move it and nsITransportSecurityInfo to PSM r=necko-reviewers,kershaw
Depends on D160310

Differential Revision: https://phabricator.services.mozilla.com/D160311
2022-11-15 05:34:40 +00:00
Dana Keeler 0da2ba4f53 Bug 1791633 - rename nsNSSSocketInfo to NSSSocketControl and move to its own file r=jschanck
Differential Revision: https://phabricator.services.mozilla.com/D160310
2022-11-15 05:34:39 +00:00
Mark Banner 47eab692fd Bug 1800247 - Replace incorrect uses of two-argument Cu.reportError with console.error or equivalent (RemoteSecuritySettings.jsm). r=keeler
Depends on D161922

Differential Revision: https://phabricator.services.mozilla.com/D161923
2022-11-14 21:27:47 +00:00
ffxbld e5f90c385f No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=diannaS
Differential Revision: https://phabricator.services.mozilla.com/D161990
2022-11-14 12:46:03 +00:00
Dana Keeler 4bd07dc4ca Bug 1799976 - onecrl: clean up the old versions of updated blocklisted entries r=jschanck
When a onecrl revocation gets updated, the entry corresponding to its previous
value needs to be unset.

Differential Revision: https://phabricator.services.mozilla.com/D161827
2022-11-10 21:53:33 +00:00