mozilla
/
gecko-dev
зеркало из https://github.com/mozilla/gecko-dev.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
583 391 коммит 613 Ветки 98 Теги 5,8 GiB
Граф коммитов

388 Коммитов

Автор SHA1 Сообщение Дата
Brian Smith 1b4e9f681c Bug 1019770, Part 2: modify existing GeneralizedTime tests to test TimeChoice too, r=cviecco 
--HG--
extra : rebase_source : 8c891cc5269482d1ccf4c1c688e5576a2b8864f8
 2014-06-24 10:51:53 -07:00
Brian Smith 7f7734a4ba Bug 1019770: Use mozilla::pkix::der to decode times and certificate validity period, r=cviecco 
--HG--
extra : rebase_source : 05e348b4ae9bb88fdd0895ec5dcec55993ca17c4
 2014-06-24 21:48:12 -07:00
Brian Smith af3daeff63 Bug 1031542: Add test case for key usage without any value bits, r=keeler 
--HG--
extra : rebase_source : 25bdc0db6b042fe6fbba61b80cb8a4ac7cb588eb
 2014-06-27 15:21:48 -07:00
Brian Smith a1d6f81702 Bug 1030475: Use a valid id-ce-inhibitAnyPolicy extension value for test pkix_cert_extensions.KnownCriticalCEExtension, r=keeler 
--HG--
extra : rebase_source : 34972b2842d65ad6d716b0fbccf4984f9efd1fbf
 2014-06-25 17:14:32 -07:00
Brian Smith a73a0dc5d2 Bug 1030478: Make the AIA extension used in pkix_cert_extensions.CriticalAIAExtension less invalid, r=keeler 
--HG--
extra : rebase_source : 42241cb4c8d2ba4e3e0ccc937059f9510765314b
 2014-06-25 16:42:50 -07:00
Brian Smith fcdcfb823b Bug 1031022: Go back to accepting explicit encoding of v1 for certificates and OCSP responses, r=cviecco 
--HG--
extra : rebase_source : f0adf63879a48db6c036cce1a3e9a7b65e44fc4e
 2014-06-26 17:03:48 -07:00
Brian Smith f97af56e30 Bug 1029341: Factor out decoding of certificate/OCSP extensions, r=keeler 
--HG--
extra : rebase_source : a1d66b75838e9dfad486f5654db6d977e5c1d97a
extra : histedit_source : 34e05d8b3d94500b9cb4f1e311f8fe526b97ba6e
 2014-06-24 21:52:50 -07:00
Brian Smith 73c952f2fb Bug 1029364: Centralize version parsing in BackCert::Init, r=cviecco 
--HG--
extra : rebase_source : 7e91710ed7cd6e68875c2d26f0b503835968e1f2
extra : histedit_source : e07446cad5edbf6cbb048304bc2b2af4395410db
 2014-06-25 01:32:06 -07:00
Brian Smith e88af673ae Bug 1029992, Improve AlgorithmIdentifier decoding in mozilla::pkix, r=cviecco 
--HG--
extra : rebase_source : dec7d3e00afe3a9e433f789baf09c0c41679b0e2
extra : histedit_source : 47657cfde7a266b5d5322b024800abe316e9dbd6
 2014-06-24 21:47:50 -07:00
Carsten "Tomcat" Book ec63c69c72 Backed out changeset 4f21e9bc729a (bug 1029364) for B2G Device and Emulator Bustage on a CLOSED TREE 2014-06-25 10:01:17 +02:00
Carsten "Tomcat" Book a198d5204e Backed out changeset a10da316a35f (bug 1029341) 2014-06-25 10:00:42 +02:00
Brian Smith abcf9d2012 Bug 1029341: Factor out decoding of certificate/OCSP extensions, r=keeler 
--HG--
extra : rebase_source : e307bea95d29cf78c9eaa7ddb1f2b2c195a59dc9
 2014-06-24 21:52:50 -07:00
Brian Smith f9aac2f45e Bug 1029364: Centralize version parsing in BackCert::Init, r=cviecco 
--HG--
extra : rebase_source : 79d5f29c2af1ec77d6bb8a7936bb0a17f28e8d52
 2014-06-19 16:17:28 -07:00
Brian Smith ca4f473450 Bug 1026261: Remove CERTCertificate from mozilla::pkix revocation checking API, r=keeler 
--HG--
extra : rebase_source : 6798f494bd351961ea02abba07b5860839bbc418
 2014-06-20 10:10:51 -07:00
David Keeler c13f6d39c7 bug 997509 - heed expired Revoked or Unknown OCSP responses r=briansmith 2014-06-20 09:01:57 -07:00
Brian Smith b76e937c55 Bug 1006812: Use mozilla::pkix::der to decode the key usage extension, r=keeler 
--HG--
extra : rebase_source : e445c913994dc027e1179543d7b6cab2505e734d
 2014-06-19 00:13:20 -07:00
Brian Smith 2858e7b2a9 Bug 1027255: Add ASSERT_/EXPECT_ GTest helpers for mozilla::pkix::Result, r=mmc 
--HG--
extra : rebase_source : 2fb8807724ba59028ec32e8d287296a905bd3615
 2014-06-18 23:40:34 -07:00
Brian Smith d779fddb49 Bug 1022970: Switch from UNIFIED_SOURCES back to SOURCES in security/pkix, security/certverifier, and security/manager/ssl/src, r=keeler 
--HG--
extra : rebase_source : 7d45d018be6b23af199c1e9c858fb5bb3bb5a01b
 2014-06-16 22:57:55 -07:00
Camilo Viecco a8ba8291e3 Bug 998513 - Test GeneralizedTime encodings in mozilla::pkix. r=keeler. 2014-06-13 12:50:11 -07:00
David Keeler 8bf1ded425 bug 1020993 - properly handle unknown critical extensions in BackCert::Init r=briansmith 2014-06-09 13:57:44 -07:00
Camilo Viecco ec7f60ff2a Bug 1021797 - Rename ArenaFalseCleaner to PORT_FreeArena_false. r=keeler 
--HG--
extra : rebase_source : e7316ee06f58f42afbaf68d7e5f7948277fd15fd
 2014-06-06 14:11:08 -07:00
Brian Smith 8b0f8d773d Bug 1020683, Part 3: Fix build bustage, a=BUSTAGE on a CLOSED TREE 
--HG--
extra : rebase_source : 8eaa3eae911b0e75129988d58a19e5e76257b369
 2014-06-06 12:04:36 -07:00
Brian Smith e0cd7eb210 Bug 1020682: Simplify mozilla::pkix results cert chain construction and make it more efficient, r=cviecco 
--HG--
extra : rebase_source : 69cb8ea66e075c89bbcbab3ca115cc2ccc95fa4f
 2014-06-04 01:28:44 -07:00
Brian Smith f9aa591c9a Bug 1020683, Part 2: Remove more references to CERTCertificate from mozilla::pkix, r=keeler 
--HG--
extra : rebase_source : 9dce7585975fb23fe04f5714ece18645b22b2261
 2014-06-04 00:03:28 -07:00
Brian Smith 67bd0799fb Bug 1020683, Part 1: Remove internal uses of CERTCertificate from mozilla::pkix::VerifyEncodedOCSPResponse, r=keeler 
--HG--
extra : rebase_source : 416938498080c4d44874025f1da4562ab1c7c3c8
 2014-06-05 15:18:32 -07:00
Brian Smith 86f062c18f Bug 1018411: Factor out signed data parsing in mozilla::pkix into a reusable and separately-testable function, r=keeler 
--HG--
extra : rebase_source : d65a760f9f8efb656f238794019bd451ca163c0b
 2014-05-31 18:54:34 -07:00
Camilo Viecco de303fb49e Bug 1000548 - Leaking arenas allocated in mozilla::pkix r=keeler 
--HG--
extra : rebase_source : 6b0aaef098a4fa4d5749013a332b6b7602640b36
 2014-06-05 16:28:46 -07:00
Brian Smith 279c66a9b8 Bug 1019814: Remove CERTCertificate dependency from TrustDomain::GetCertTrust, r=keeler 
--HG--
extra : rebase_source : 9abf0522f02d00ac2f63f2327ddbe8d119ffc64f
 2014-06-03 10:47:25 -07:00
Brian Smith ecfed7ae84 Bug 1019109: Add DottedOIDToCode.py tool, r=keeler 
--HG--
extra : rebase_source : 44a92234f884af4500bc6eb5a1fc4dd4cfd38dc2
 2014-06-02 10:50:04 -07:00
Brian Smith d7a28e81d0 Bug 1018633: Simplify the max cert chain length check code in mozilla::pkix and make it more efficient, r=cviecco 
--HG--
extra : rebase_source : 7fa4cc6c1b46357abed0c57c6e24c622049c5acb
 2014-05-31 16:32:58 -07:00
Brian Smith 151ad4b5a6 Bug 1001188: Set the error code when the max cert chain length limit is exceeded, r=cviecco 
--HG--
extra : rebase_source : ce9e1faa083f5c679e20a2b6d9e8d482462e75b0
 2014-05-31 16:55:54 -07:00
Brian Smith e508e0ac8a Bug 1018642: Factor out reusable NSS GTest infrastructure into a new NSSTest class, r=cviecco 
--HG--
extra : rebase_source : 101c316c1ea54f5092a21af4d7a1be349c504800
 2014-05-30 16:46:49 -07:00
Brian Smith efadae2e83 Bug 1018064: Replace mozilla::pkix::der::Input::Match with mozilla::pkix::der::Input::MatchRest, r=mmc 
--HG--
extra : rebase_source : 5c5b14cf23b1e40854d241cbc482de40b01ac494
 2014-05-29 22:09:45 -07:00
Brian Smith 4c65ffea41 Bug 1018061: Have mozilla::pkix::der::Input::Read use EnsureLength instead of its own checks, r=mmc 
--HG--
extra : rebase_source : f46d6b9bdcd7d7a272fb39f22312a89d2695db56
 2014-05-29 23:36:30 -07:00
Camilo Viecco 5bce267045 Bug 991815 - Part 1/2 - Allow intermediate OCSP responses up to 1 year old. r=keeler 
--HG--
extra : rebase_source : 28d5336da1dc44932b92ce2c59fca5fcb2b8a3d8
 2014-05-30 16:12:36 -07:00
Brian Smith 3b00a198b6 Bug 1018033: Prevent buffer read overflow due to integer overflow in mozilla::pkix::der::Input::EnsureLength, r=keeler 
--HG--
extra : rebase_source : e4e88d61e448fa475a106a06b9f32181906fba0f
 2014-05-29 23:37:40 -07:00
Brian Smith 30d9839f83 Bug 1018041: Fix linking error in pkix_ocsp_request_tests when GTest is enabled on Windows, r=keeler 
--HG--
extra : rebase_source : 36c5ee4f5cc40adb1079e34bd309147a662fc45f
 2014-05-29 23:06:10 -07:00
Chris Peterson 84e89d2fa5 Bug 1007708 - Part 1: Fix warnings in security/pkix/test/ and mark as FAIL_ON_WARNINGS. r=briansmith 2014-05-17 20:12:10 -07:00
David Keeler cc40dbbc9d bug 986150 - fix some comments in mozilla::pkix DER tests r=mmc 2014-05-19 12:14:51 -07:00
David Keeler 3a148b5121 bug 986150 - test mozilla::pkix::der::OptionalBoolean r=mmc 2014-05-19 12:14:44 -07:00
David Keeler c7191763ea bug 1002814 - OCSP requests: long serial check should be on cert, not issuerCert r=briansmith 2014-05-14 10:05:32 -07:00
David Keeler 1793f7acdc bug 1002814 - retry PK11_GenerateKeyPair when it fails non-fatally r=briansmith 2014-05-19 11:13:04 -07:00
Brian Smith 2912321bc5 Bug 1006958: Use mozilla::pkix::der to parse certificate policies instead of NSS, r=keeler 
--HG--
extra : rebase_source : fde88efebc1025bc4f825aa38df809d04b1b250a
 2014-05-15 18:59:52 -07:00
Brian Smith f834909bb0 Bug 1010581: Document Expect/Match/Skip terminology in mozilla::pkix::der and make that code more consistent, r=keeler 
--HG--
extra : rebase_source : 12aa2e1e9eed4f32a75732a65cbfaba9789d5d39
 2014-05-14 19:30:09 -07:00
Brian Smith 077fb4cfcf Bug 1006041: Use mozilla::pkix::der for decoding the extended key usage extension, r=keeler 
--HG--
extra : rebase_source : b4b62f117d653784eb6ad058554faf520a1bd90b
 2014-05-14 01:02:34 -07:00
Brian Smith 921579aca0 Bug 989564, Part 2: Remove CERTCertificate dependency from CheckBasicConstraints, r=keeler 
--HG--
extra : rebase_source : c0ce62f44109cbcdf65da770a1154814733a6b49
 2014-04-25 20:27:27 -07:00
Brian Smith 33238b8f26 Bug 989564, Part 1: Decode basic constraints extension using mozilla::pkix::der, r=keeler 
--HG--
extra : rebase_source : 89560218a69596868cb8a93c69ee72656b0abf77
 2014-05-05 09:55:57 -07:00
Gervase Markham a28ceb8833 Bug 1007195 - Change licensing on mozilla::pkix to dual Apache 2/MPL 2. r=briansmith. 2014-05-14 14:37:25 +01:00
Jacek Caban 729caf70d4 Bug 1005309 - Fixed MSVC detection. 
--HG--
extra : rebase_source : 0b61de1270eb861234539de675c2d381e217f55c
 2014-05-12 11:01:22 +02:00
David Keeler 675aff56b2 bug 1007962 - CreateEncodedCertificate should take a SECItem as its serialNumber argument r=mmc 2014-05-08 15:33:38 -07:00
David Keeler ea0182ae63 bug 1007813 - match CreateEncodedCertificate declaration to its definition r=mmc 2014-05-08 11:51:50 -07:00
Monica Chew baff68ca81 Bug 1000354: Fix comment and make test clearer (r=keeler) 2014-05-07 15:48:23 -07:00
Brian Smith c92ecd7e9b Bug 1005667: Fix build warning due to buggy test code in pkixtestutil.cpp, r=dholbert 2014-05-04 11:04:48 -07:00
Brian Smith 75f6d3a530 Bug 1005309, Part 2: Enable extended compiler warnings (-W4 -Wall) in mozilla::pkix, r=mmc 
--HG--
extra : rebase_source : 033574a0b26582753baec003becfaf15bbd85003
extra : histedit_source : 2d52c47f92b8f694203c2eb580b37be78ccf2f9c
 2014-05-03 17:50:26 -07:00
Brian Smith fc861849bc Bug 1005309, Part 1: Improve type conversion and error checking for hashing done in mozilla::pkix's pkixocsp.cpp. r=mmc 
--HG--
extra : rebase_source : 79c248ebc45d722249ae7adbbd2527dc9985f6f0
extra : histedit_source : 8ea66942cec4252d9d7e625da22b5ad9964485a1
 2014-05-02 11:53:06 -07:00
Brian Smith f0a3398f72 Bug 1005256: Improve parameter validation in mozilla::pkix::der::Input::GetSECItem, r=mmc 
--HG--
extra : rebase_source : 93b65e103c86747ddaf463e639aacffdf7ccb08f
extra : histedit_source : 10ef0ab13fb9de710ea3c589600db4632f9cf4a0
 2014-05-02 11:52:10 -07:00
Brian Smith a46aa03484 Bug 1005208: Rename issuerKeyHash to keyHash in mozilla::pkix's pkixocsp.cpp, r=mmc 
--HG--
extra : rebase_source : ede4ed17cb56e3e52325ecadc2c5ded33c4a6013
extra : histedit_source : b727000e81bbc8afa6b9f8188b97065f59da45ad
 2014-05-02 10:40:03 -07:00
Brian Smith 20a90d85b4 Bug 1005198: Make it easy to create test certificates in GTest tests, r=keeler 
--HG--
extra : rebase_source : 0b1ec263a5a1ce1856afb12f11ea4c35c2aa55d0
extra : histedit_source : 40a3a3fc1993de0fcdeb5593a1a1df4dc94832b8
 2014-04-25 19:57:40 -07:00
Brian Smith 6c43d7c225 Bug 1003290: Fix OID parser template type, r=keeler 
--HG--
extra : rebase_source : c33e450b84234ae7471118c2f8749593a59d9298
 2014-04-25 16:31:30 -07:00
Brian Smith 9ae1a34e11 Bug 1002933: Use Strongly-typed enums more often in mozilla::pkix, r=mmc 
--HG--
extra : rebase_source : 3f67f48d1f4150df0830f89e6c07bbbf3a8fc7e8
 2014-04-25 16:29:26 -07:00
Brian Smith 456d4f8a4d Bug 1002929: Avoid implicit conversion of Result to boolean in mozilla::der::GeneralizedTime, r=keeler 
--HG--
extra : rebase_source : 8966d41f1837611b83ac84b347aeddfade9bc949
 2014-04-24 16:08:30 -07:00
Camilo Viecco a54a4f05cf Bug 744204 - Allow Certificate key pinning Part 2 - Certverifier Interface. r=keeler 
--HG--
extra : rebase_source : 2f9748ba0b241c697e22b7ff72f2f5a0fad4a2ca
 2014-02-05 14:49:10 -08:00
Brian Smith 4cbf0ef630 Bug 998067: Add utility code for making it easier to create GTests based on NSS, r=keeler 
--HG--
extra : rebase_source : 8ae08d1ccc9329aa567cfc7ac590ddb026155bae
 2014-04-16 21:38:01 -07:00
Brian Smith 8c0e54d6a8 Bug 1000544: Use "Fail(x, y)" instead of "PR_SetError(y, 0); return x;" more consistently, r=mmc 
--HG--
extra : rebase_source : 96addac738b8ffe39c7a92d546388d5f13fc2340
 2014-04-23 14:13:32 -07:00
Brian Smith bd4b0a0668 Bug 1000482: Remove unused stapledOCSPResponse parmaeter from BuildForwardInner, r=mmc, r=keeler 
--HG--
extra : rebase_source : b5d67d3488aa3df5690a7dd2b76495ac4986a723
 2014-04-23 13:42:38 -07:00
Brian Smith d6bedee1bf Bug 1000483: Remove unused isTrustAnchor parameter from CheckKeyUsage, r=cviecco 
--HG--
extra : rebase_source : 96e7b76362d6219193c814d35c332aae2ed5b48f
 2014-04-23 13:38:19 -07:00
Stefan Arentz 4c3ba2b965 Bug 968490: Add mozilla::pkix::der unit tests (r=cviecco) 2014-03-26 16:00:03 -07:00
David Keeler ca673b66f0 bug 991898 - mozilla::pkix: temporarily allow empty Extensions in OCSP responses r=briansmith 2014-04-17 16:01:18 -07:00
David Keeler 0860109f89 bug 997843 - mozilla::pkix::der::Input::Expect should take a uint16_t as its length argument r=briansmith 2014-04-17 09:50:06 -07:00
David Keeler 5490002e36 bug 982774 - der::ExpectTagAndGetLength: check that input has enough capacity for the length described r=briansmith 2014-04-16 13:30:09 -07:00
David Keeler b3c8e42deb bug 972753 - OCSP testing: delegated responses and including multiple certificates r=cviecco 2014-04-16 09:31:27 -07:00
David Keeler e23cf356dc bug 991209 - mozilla::pkix: allow non-end-entity certs to have OCSP signing EKU r=briansmith 2014-04-10 10:15:02 -07:00
David Keeler 281f1bd79b bug 990603 - mozilla::pkix: defer reporting end-entity cert errors until after path building r=briansmith 2014-04-08 09:49:36 -07:00
David Keeler dd61cf2b05 bug 989516 - mozilla::pkix: temporarily allow improper basicConstraint:cA encodings r=cviecco 2014-03-31 11:06:43 -07:00
David Keeler be06439979 bug 987295 - mozilla::pkix: test ocsp extension decoding r=cviecco 2014-03-31 10:54:53 -07:00
David Keeler 8c4f3cc754 bug 987295 - mozilla::pkix: fix decoding OCSP response extensions r=cviecco 2014-03-31 13:24:16 -07:00
Camilo Viecco 95b0ba15e7 Bug 986156 - Allow anypolicyoid and reject on inhibitAnypolicy (mozilla::pkix). r=bsmith 
--HG--
extra : rebase_source : dd61d4bfa64ed65582f3a1b4662f16740983a3ce
 2014-03-28 10:00:29 -07:00
Camilo Viecco d130bf6c69 Bug 982292 - Allow nsSGC to 'nest' TLS Web Server Authentication EKU in moz::pkix. r=bsmith 2014-03-13 11:06:44 -07:00
Brian Smith 6a59538495 Bug 982778: Initialize parameters of output value of der::AlgorithmIdentifier, r=keeler 2014-03-13 21:26:03 -07:00
Camilo Viecco 0b1f14ef5a Bug 969188 - Part 2/3 - mozilla::pkix only decode v3 extensions in v3 certificates. r=briansmith 
--HG--
extra : rebase_source : 86e58ccf8538d0f40d3b24b89a92dceac095cb21
 2014-03-06 10:04:04 -08:00
Camilo Viecco a97f568c99 Bug 969188 - Part 1/3 - Fix mozilla::pkix handling of trusted v1 certificates. r=briansmith 
--HG--
extra : rebase_source : 242b4849a7820d23518936a8c86ddcb7d9684394
 2014-03-06 10:04:04 -08:00
David Keeler 26057e30a1 bug 987262 - mozilla::pkix: refactor Nested AtEnd() checks in pkixder.h r=briansmith 2014-03-24 13:12:56 -07:00
David Keeler d20d064223 bug 985021 - mozilla::pkix: temporarily accept pathLenConstraint in EE basic constraints extensions r=briansmith 2014-03-21 11:52:01 -07:00
David Keeler e79c0e95dc backout bug 985021 (8d622f4ec6e9) for another build breakage on a CLOSED TREE r=backout 2014-03-21 11:47:06 -07:00
David Keeler 26eb4bc123 bug 985021 - mozilla::pkix: temporarily accept pathLenConstraint in EE basic constraints extensions r=briansmith 2014-03-21 10:38:36 -07:00
David Keeler 5e94cb110d backout bug 985021 (de535cd27ee7) for build breakage r=backout 2014-03-20 16:06:15 -07:00
David Keeler 4f8a213abd bug 985021 - mozilla::pkix: temporarily accept pathLenConstraint in EE basic constraints extensions r=briansmith 2014-03-20 15:50:12 -07:00
David Keeler b1405bc489 bug 985201 - rename insanity::pkix to mozilla::pkix r=cviecco r=briansmith 
--HG--
rename : security/insanity/include/insanity/ScopedPtr.h => security/pkix/include/pkix/ScopedPtr.h
rename : security/insanity/include/insanity/bind.h => security/pkix/include/pkix/bind.h
rename : security/insanity/include/insanity/nullptr.h => security/pkix/include/pkix/nullptr.h
rename : security/insanity/include/insanity/pkix.h => security/pkix/include/pkix/pkix.h
rename : security/insanity/include/insanity/pkixtypes.h => security/pkix/include/pkix/pkixtypes.h
rename : security/insanity/lib/pkixbind.cpp => security/pkix/lib/pkixbind.cpp
rename : security/insanity/lib/pkixbuild.cpp => security/pkix/lib/pkixbuild.cpp
rename : security/insanity/lib/pkixcheck.cpp => security/pkix/lib/pkixcheck.cpp
rename : security/insanity/lib/pkixcheck.h => security/pkix/lib/pkixcheck.h
rename : security/insanity/lib/pkixder.cpp => security/pkix/lib/pkixder.cpp
rename : security/insanity/lib/pkixder.h => security/pkix/lib/pkixder.h
rename : security/insanity/lib/pkixkey.cpp => security/pkix/lib/pkixkey.cpp
rename : security/insanity/lib/pkixocsp.cpp => security/pkix/lib/pkixocsp.cpp
rename : security/insanity/lib/pkixutil.h => security/pkix/lib/pkixutil.h
rename : security/insanity/moz.build => security/pkix/moz.build
rename : security/insanity/test/lib/moz.build => security/pkix/test/lib/moz.build
rename : security/insanity/test/lib/pkixtestutil.cpp => security/pkix/test/lib/pkixtestutil.cpp
rename : security/insanity/test/lib/pkixtestutil.h => security/pkix/test/lib/pkixtestutil.h
 2014-03-20 14:29:21 -07:00