b92b30b8cf
Bug 733454: Remove hard-coded blocklisting in PSM for Comodo and DigiNotar, r=cviecco
...
--HG--
extra : rebase_source : 3a3ab5246bd6e2af4a0952c64181cad6feb5c424
extra : source : 2e540dd35edfa0ef3549ed4dd8f0b15b57cb2806
2013-07-01 11:39:16 -07:00
5ce3726857
Bug 891066, Part 4: Fix indention, r=me, a=whitespace-only
...
--HG--
extra : rebase_source : 0b9dad2a331b729f614b9b3ee29793a3c89ae053
extra : source : 651a8ef41d0611f0dbc72cbd663071958fea649b
2013-09-19 13:39:36 -07:00
3091f37853
Bug 891066, Part 3: Move more initialization of NSS to security/certverifier, r=keeler
...
--HG--
extra : rebase_source : 33aad105028f849d0bbe1c37b60eab50f2f22c88
2014-01-20 22:10:33 -08:00
c1583f22ce
Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
...
--HG--
extra : rebase_source : dd59a391825b776b075e855660c2488105e2d741
2014-01-26 19:36:28 -08:00
efdf583668
Bug 891066, Part 1: Remove CertVerifier's dependency on nsNSSComponent, r=keeler, r=cviecco
...
--HG--
extra : rebase_source : 3242f78d6d4d68080997dd56dae1fd0675750d5e
extra : source : 965c9f30e9b87e418bbf6ab43657257e94992223
2014-01-19 14:05:40 -08:00
188876d1dc
Bug 961454: Clean up whitespace in key PSM files, r=keeler, r=cviecco
...
--HG--
extra : rebase_source : 53f14cc6f97814eb9913a1ddad1a19631e2af08a
2014-01-21 17:30:44 -08:00
4a27519edf
Bug 916632 (insanity::pkix::ScopedPtr), Part 3: Work around old GCC's lack of nullptr, r=briansmith
...
--HG--
extra : rebase_source : 4b212aad2968101717be1e2af9f17d54939bba46
extra : source : 39a083dfd00dd95fafd6444e9ea69ff1257e5eca
2013-06-28 16:16:56 -07:00
d5c243899e
Bug 916632 (insanity::pkix::ScopedPtr), Part 2: Add insanity::pkix's pkixtypes.h, r=cviecco
...
--HG--
extra : rebase_source : a621a91751a57117a02696e9159e9cedc40883ff
extra : source : 04a20c24c869c848a191d0553f636fe27fe88ee8
2013-07-08 12:30:32 -07:00
06536e76c8
Bug 916632 (insanity::pkix::ScopedPtr), Part 1: Add insanity::pkix::ScopedPtr, r=cviecco
...
--HG--
extra : rebase_source : 57180ed742a0ae16ea662ce2fdf1f79bad0f8dda
extra : source : e92633f954bcff92b47621337b3c8d8ad83ac543
2013-09-05 02:01:58 -07:00
95fed55276
No bug, Automated HSTS preload list update from host bld-centos6-hp-006 - a=hsts-update
2014-01-25 03:14:57 -08:00
a3dd98815d
bug 951354 - test nsNSSCertificateDB for proper shutdown r=cviecco a=abillings
2014-01-21 16:47:47 -08:00
7ee34b3db7
Bug 960365 - Whitelist uname for nsSystemInfo. r=kang
2014-01-21 15:48:00 -05:00
384f5ca9e3
Merge latest PGO-green changeset from inbound to central.
2014-01-20 09:30:38 +01:00
4f1e9b830b
Bug 956015 - Add an infallible nsIDocShellTreeItem::ItemType; r=bz
2014-01-20 08:58:26 +01:00
18f9a21219
Bug 952874: Fix telemetry for RSA/DHE key sizes of 1025-1280 bits and fix misspelling, r=keeler
2014-01-18 17:59:24 -08:00
d1287a15a2
Bug 950858: Make cipher suite telemetry code less crash-prone, r=keeler
2014-01-18 16:52:16 -08:00
74c9eb6feb
Merge m-i to m-c
2014-01-18 15:17:10 -08:00
6d2f3012ee
No bug, Automated HSTS preload list update from host bld-linux64-ec2-438 - a=hsts-update
2014-01-18 03:20:19 -08:00
3824df981f
Bug 960714: Make NPN and ALPN prefs dynamic, r=keeler, r=mcmanus
...
--HG--
extra : rebase_source : 42ff8c05b682e755d51ec79e2cb26db7cedd382f
2014-01-16 21:38:59 -08:00
2ffb88c0b9
bug 960723 - fix failingOCSPResponder in test_ev_certs.js r=briansmith
2014-01-16 13:18:38 -08:00
ff9c9eca9f
Bug 890994: ALPN support for Gecko, r=briansmith
2014-01-14 15:34:23 -05:00
fcda5c306b
Bug 958916: Update NSS to NSS 3.15.5 beta 2 (NSS_3_15_5_BETA2) plus private patch for bug 950129, CLOBBER, r=me
...
--HG--
extra : rebase_source : a0a28ba744ecf81510a4c5bec3a353e4fe275f5a
extra : amend_source : e8b89e0560fc75de5557b8e4543269363f417132
2014-01-16 13:18:55 -08:00
44b44b413c
Backed out changeset 8526c7a38761 (bug 951354) for CPP unittest bustage
2014-01-17 17:50:17 -08:00
88d7f1342f
bug 951354 - test nsNSSCertificateDB for proper shutdown r=cviecco a=abillings
2014-01-17 16:22:51 -08:00
5aa30a620f
Bug 950169 - remove unused arguments for LogInvalidCertError r=keeler
2014-01-17 11:57:57 -08:00
a7bcf97cfc
bug 950240 - don't do DV fallback for nsIIdentityInfo.isExtendedValidation r=briansmith
2014-01-17 11:04:09 -08:00
b8f6622e6b
bug 947759 - unconditionally add Google sites to the HSTS preload list r=cviecco DONTBUILD NPOTB
2014-01-15 11:22:06 -08:00
cb931af8e3
bug 959796 - refactor error reporting in getHSTSPreloadList.js r=cviecco DONTBUILD NPOTB
2014-01-15 11:20:55 -08:00
2bf2f0ce5a
Bug 923304, Part 2: Adjust EV tests, r=keeler
...
--HG--
extra : rebase_source : f0cfd0089a99dddd8852e0613bc2a31e5c12b1de
2014-01-14 15:22:09 -08:00
ae750cc925
Bug 923304, Part 1: Add test for OCSP response signed by CA that has an OCSP URI, r=keeler, r=briansmith
...
--HG--
extra : rebase_source : 7cafe0781563382c2221e865201beb023fea3628
2014-01-13 02:33:08 -08:00
8282e4ae96
Bug 950129: Make OCSP fetching policy for OCSP response signing certificates consistent, r=wtc, r=rrelyea
...
--HG--
extra : rebase_source : 2369fcd80eb6ed5ec7e96657cdf8b43514c8357b
2014-01-12 23:13:10 -08:00
648d25a19a
bug 957368 - standardize and simplify nsNSSShutDownObject implementations r=cviecco r=briansmith
2014-01-14 09:28:43 -08:00
eabe1d0a0f
Bug 883975 - CSP 1.1 hash-source. r=sstamm, r=dholbert, r=mrbkap
2014-01-02 11:14:06 -08:00
b6cabfc2be
Bug 957667: Decouple OCSP stapling pref from the OCSP fetching pref, and couple the OCSP required pref to the OCSP fetching pref, r=keeler
...
--HG--
extra : rebase_source : 86cb86f76f4def579fcf07e479025852849c34f8
extra : source : 08115711a4e6e77971c9e872fb6c68e88ac9693e
2014-01-08 08:51:06 -08:00
4f7ae6c58b
Bug 959026: Add telemetry about cases where we don't do OCSP fetching when we expect to, r=keeler
...
--HG--
extra : rebase_source : f7e9826569325f497273a92eec5127c414baa8bc
extra : source : bb5bb5a1b571e54695a4c8d5be0cc447f29f0358
2014-01-12 19:31:40 -08:00
de8f18e28c
Backed out changesets 1b892043a386 and 0e14b3468b94 (bug 923304) and changeset 2e2c276950b9 (bug 950129) for xpcshell failures.
2014-01-13 18:00:34 -05:00
e7b8f32115
Merge inbound to m-c.
2014-01-13 17:44:24 -05:00
3a3061758d
Bug 923304, Part 2: Adjust EV tests, r=keeler
...
--HG--
extra : source : 97bf218ac3bb44e81074ca95877ca8b6414265b3
2013-12-28 11:28:49 -08:00
effee37c95
Bug 923304, Part 1: Add test for OCSP response signed by CA that has an OCSP URI, r=keeler, r=briansmith
...
--HG--
extra : source : e7afcba6743e40755d28a296b00c395392864657
2014-01-13 02:33:08 -08:00
ad7961afde
Bug 950129: Make OCSP fetching policy for OCSP response signing certificates consistent, r=wtc, r=rrelyea
...
--HG--
extra : source : 44afac41de6a81c1e4430afa10e6f2836599ecd8
2014-01-12 23:13:10 -08:00
bb80c6ec24
Bug 958916: Update to NSS 3.15.5 beta 1 (NSS_3_15_5_BETA1), r=me
...
--HG--
extra : rebase_source : 19606540e96bd00b737bc9c5782f8c445e006189
2014-01-12 22:09:19 -08:00
0ef97ed6fd
bug 951199 - Interface for Socket Level Access to TLS Version Used r=dkeeler r=bsmith
2013-10-09 17:21:48 -07:00
76f959e6f5
Bug 946075 - Remove extra space from ssl_error_bad_cert_domain error message contains in TransportSecurityInfo.cpp. r=dkeeler
2014-01-13 09:28:14 -05:00
367c980791
Bug 957665: Add telemetry to measure how many people have OCSP enabled, r=keeler
...
--HG--
extra : rebase_source : e6dd0d7d06ce0eb5b2f34a77a851dd7c0655ac3e
2014-01-08 08:59:53 -08:00
1acb8c0912
Bug 945330 - Reword and slightly improve sandbox violation log message. r=kang
...
The main goal is to have a message that unambiguously indicates a crash,
so mozharness can grep for it even if some of the details change later.
Also now includes the entire argument list; most syscalls don't use all
six, so the last few will be meaningless, but it can't hurt to log them.
2014-01-10 08:22:58 -05:00
02ba1423d9
bug 950268 - fix leak in nsCertTree::GetDispInfoAtIndex r=cviecco
2014-01-09 10:02:08 -08:00
1dddb1a066
Back out 2e7e2de7b13e (bug 948574) for b2g mochitest crashes
...
CLOSED TREE
2014-01-07 21:10:23 -08:00
12478c7858
bug 948574 - remote nsISiteSecurityService::IsSecureURI r=bz
2014-01-07 11:31:30 -08:00
7a3a090854
Bug 952876: Add test for bug 952808 (OCSP stapling not honored when there is a error entry in the OCSP cache), r=keeler
2014-01-06 14:45:35 -08:00
e78c9d7289
Bug 933109: Add tests to verify that we retry OCSP when we have a cached Unknown response, r=keeler
2014-01-06 14:41:04 -08:00
Brian Smith
Brian Smith
Camilo Viecco
ffxbld
David Keeler
Jed Davis
Ms2ger
Phil Ringnalda
Patrick McManus
Wes Kocher
Raymond Etornam Agbeame(:retornam)
Garrett Robinson
Ryan VanderMeulen
Nemina Amarasinghe