Граф коммитов

287 Коммитов

Автор SHA1 Сообщение Дата
Kevin Jacobs e4e3559e1b Bug 1629594 - land NSS aae226c20dfd UPGRADE_NSS_RELEASE, r=jcj
2020-04-24  Kevin Jacobs  <kjacobs@mozilla.com>

	* automation/abi-check/expected-report-libnss3.so.txt,
	gtests/softoken_gtest/softoken_gtest.cc, lib/nss/nss.def,
	lib/pk11wrap/pk11obj.c, lib/pk11wrap/pk11pub.h, lib/softoken/sdb.c:
	Bug 1612881 - Maintain PKCS11 C_GetAttributeValue semantics on
	attributes that lack NSS database columns r=keeler,rrelyea

	`sdb_GetAttributeValueNoLock` builds a query string from a list of
	attributes in the input template. Unfortunately,
	`sqlite3_prepare_v2` will fail the entire query if one of the
	attributes is missing from the underlying table. The PKCS #11 spec
	[[ https://www.cryptsoft.com/pkcs11doc/v220/pkcs11__all_8h.html#aC_G
	etAttributeValue | requires ]] setting the output `ulValueLen` field
	to -1 for such invalid attributes.

	This patch reads and stores the columns of nssPublic/nssPrivate when
	opened, then filters an input template in
	`sdb_GetAttributeValueNoLock` for unbacked/invalid attributes,
	removing them from the query and setting their template output
	lengths to -1.

	[aae226c20dfd] [tip]

2020-04-23  Kevin Jacobs  <kjacobs@mozilla.com>

	* lib/ssl/sslnonce.c:
	Bug 1531906 - Relax ssl3_SetSIDSessionTicket assertions to permit
	valid, evicted or externally-cached sids. r=mt

	This patch relaxes an overzealous assertion for the case where: 1)
	Two sockets start connections with a shared SID. 2) One receives an
	empty session ticket in the SH, and evicts the SID from cache. 3)
	The second socket receives a new session ticket, and attempts to set
	it in the SID.

	We currently assert that the sid is `in_client_cache` at 3), but
	clearly it cannot be. The outstanding reference remains valid
	despite the eviction.

	This also solves a related assertion failure after
	https://hg.mozilla.org/mozilla-central/rev/c5a8b641d905 where the
	same scenario occurs, but instead of being `in_client_cache` or
	evicted, the SID is `in_external_cache`.

	[a68de0859582]

2020-04-16  Robert Relyea  <rrelyea@redhat.com>

	* gtests/common/testvectors/kwp-vectors.h,
	gtests/pk11_gtest/manifest.mn,
	gtests/pk11_gtest/pk11_aeskeywrapkwp_unittest.cc,
	gtests/pk11_gtest/pk11_gtest.gyp, lib/freebl/aeskeywrap.c,
	lib/freebl/blapi.h, lib/freebl/blapit.h, lib/freebl/hmacct.c,
	lib/freebl/ldvector.c, lib/freebl/loader.c, lib/freebl/loader.h,
	lib/pk11wrap/pk11mech.c, lib/softoken/lowpbe.c,
	lib/softoken/pkcs11.c, lib/softoken/pkcs11c.c,
	lib/softoken/pkcs11i.h, lib/softoken/pkcs11u.c, lib/ssl/ssl3con.c,
	lib/util/secport.h:
	Bug 1630721 Softoken Functions for FIPS missing r=mt

	For FIPS we need the following:

	 1. NIST official Key padding for AES Key Wrap. 2. Combined
	Hash/Sign mechanisms for DSA and ECDSA.

	In the first case our AES_KEY_WRAP_PAD function addes pkcs8 padding
	to the normal AES_KEY_WRAP, which is a different algorithm then the
	padded key wrap specified by NIST. PKCS #11 recognized this and
	created a special mechanism to handle NIST padding. That is why we
	don't have industry test vectors for CKM_NSS_AES_KEY_WRAP_PAD. This
	patch implements that NIST version (while maintaining our own). Also
	PKCS #11 v3.0 specified PKCS #11 mechanism for AES_KEY_WRAP which
	are compatible (semantically) with the NSS vendor specific versions,
	but with non-vendor specific numbers. Softoken now accepts both
	numbers.

	This patch also updates softoken to handle DSA and ECDSA combined
	hash algorithms other than just SHA1 (which is no longer validated).

	Finally this patch uses the NIST KWP test vectors in new gtests for
	the AES_KEY_WRAP_KWP wrapping algorithm.

	As part of the AES_KEY_WRAP_KWP code, the Constant time macros have
	been generalized and moved to secport. Old macros scattered
	throughout the code have been deleted and existing contant time code
	has been updated to use the new macros.

	[3682d5ef3db5]

2020-04-21  Lauri Kasanen  <cand@gmx.com>

	* lib/freebl/Makefile, lib/freebl/freebl.gyp,
	lib/freebl/freebl_base.gypi, lib/freebl/gcm.h, lib/freebl/ppc-
	crypto.h, lib/freebl/scripts/LICENSE, lib/freebl/scripts/gen.sh,
	lib/freebl/scripts/ppc-xlate.pl, lib/freebl/scripts/sha512p8-ppc.pl,
	lib/freebl/sha512-p8.s, lib/freebl/sha512.c:
	Bug 1613238 - POWER SHA-2 digest vector acceleration. r=jcj,kjacobs

	[2d66bd9dcad4]

2020-04-18  Robert Relyea  <rrelyea@redhat.com>

	* coreconf/Linux.mk, coreconf/config.gypi, lib/softoken/sdb.c:
	Bug 1603801 [patch] Avoid dcache pollution from sdb_measureAccess()
	r=mt

	As implemented, when sdb_measureAccess() runs it creates up to
	10,000 negative dcache entries (cached nonexistent filenames).

	There is no advantage to leaving these particular filenames in the
	cache; they will never be searched again. Subsequent runs will run a
	new test with an intentionally different set of filenames. This can
	have detrimental effects on some systems; a massive negative dcache
	can lead to memory or performance problems.

	Since not all platforms have a problem with negative dcache entries,
	this patch is limitted to those platforms that request it at
	compilie time (Linux is current the only patch that does.)

	[928721f70164]

2020-04-16  Kevin Jacobs  <kjacobs@mozilla.com>

	* coreconf/config.gypi:
	Bug 1630458 - Produce debug symbols in GYP/MSVC debug builds. r=mt

	[25006e23a777]

2020-04-13  Robert Relyea  <rrelyea@redhat.com>

	* lib/ckfw/object.c, lib/ckfw/session.c:
	Bug 1629655 ckfw needs to support temporary session objects.
	r=kjacobs

	libckfw needs to create temporary objects whose space will to be
	freed after use (rather than at token shutdown). Currently only
	token objects are supported and they are allocated out of a global
	arena owned by the slot, so the objects only go away when the slot
	is closed.

	This patch sets the arena to NULL in nssCKFWObject_Create() if the
	object is a session object. This tells nssCKFWObject_Create() to
	create a new arena specifically for this object. That arena is
	stored in localArena. When the object is destroyed, any localArena's
	will be freed.

	[808ec0e6fd77]

2020-04-14  Robert Relyea  <rrelyea@redhat.com>

	* cmd/selfserv/selfserv.c, lib/ssl/sslsnce.c, tests/ssl/ssl.sh:
	Bug 1629661 MPConfig calls in SSL initializes policy before NSS is
	initialized. r=mt

	NSS has several config functions that multiprocess servers must call
	before NSS is initialized to set up shared memory caches between the
	processes. These functions call ssl_init(), which initializes the
	ssl policy. The ssl policy initialization, however needs to happen
	after NSS itself is initialized. Doing so before hand causes (in the
	best case) policy to be ignored by these servers, and crashes (in
	the worst case).

	Instead, these cache functions should just initialize those things
	it needs (that is the NSPR ssl error codes).

	This patch does: 1) fixes the cache init code to only initialize
	error codes. 2) fixes the selfserv MP code to 1) be compatible with
	ssl.sh's selfserv management (at least on Unix), and 2) mimic the
	way real servers handle the MP_Cache init code (calling NSS_Init
	after the cache set up). 3) update ssl.sh server policy test to test
	policy usage on an MP server. This is only done for non-windows like
	OS's because they can't catch the kill signal to force their
	children to shutdown.

	I've verified that the test fails if 2 and 3 are included but 1 is
	not (and succeeds if all three are included).

	[a252957a3805]

Differential Revision: https://phabricator.services.mozilla.com/D72409
2020-04-27 16:56:13 +00:00
Kevin Jacobs 7d42f279f2 Bug 1629594 - land NSS 50dcc34d470d UPGRADE_NSS_RELEASE, r=jcj
2020-04-13  Kevin Jacobs  <kjacobs@mozilla.com>

	* lib/pk11wrap/debug_module.c, lib/pk11wrap/pk11load.c:
	Bug 1629105 - Update PKCS11 module debug logger for v3.0 r=rrelyea

	Differential Revision:
	https://phabricator.services.mozilla.com/D70582
	[50dcc34d470d] [tip]

2020-04-07  Robert Relyea  <rrelyea@redhat.com>

        * lib/ckfw/builtins/testlib/Makefile:
        Bug 1465613 Fix gmake issue create by the patch which adds ability
        to distrust certificates issued after a certain date for a specified
        root cert r=jcj

        I've been trying to run down an issue I've been having, and I think
        this bug is the source. Whenever I build ('gmake' build), I get the
        following untracted files: ? lib/ckfw/builtins/testlib/anchor.o ?
        lib/ckfw/builtins/testlib/bfind.o ?
        lib/ckfw/builtins/testlib/binst.o ?
        lib/ckfw/builtins/testlib/bobject.o ?
        lib/ckfw/builtins/testlib/bsession.o ?
        lib/ckfw/builtins/testlib/bslot.o ?
        lib/ckfw/builtins/testlib/btoken.o ?
        lib/ckfw/builtins/testlib/ckbiver.o ?
        lib/ckfw/builtins/testlib/constants.o

        This is because of the way lib/ckfw/builtins/testlib works, it uses
        the sources from the directory below, and explicitly reference them
        with ../{source_name}.c. The object file then becomes
        lib/ckfw/builtins/testlib/{OBJDIR}/../{source_name}.o.

        The simple fix would be to paper over the issue and just add these
        to .hgignore, but that would break our ability to build multiple
        platforms on a single source directory. I'll include a patch that
        fixes this issue.

        bob

        Differential Revision:
        https://phabricator.services.mozilla.com/D70077
        [92058f185316]

2020-04-06  Robert Relyea  <rrelyea@redhat.com>

	* automation/abi-check/expected-report-libnss3.so.txt,
	gtests/ssl_gtest/tls_hkdf_unittest.cc, lib/nss/nss.def,
	lib/pk11wrap/pk11pub.h, lib/pk11wrap/pk11skey.c,
	lib/ssl/sslprimitive.c, lib/ssl/tls13con.c, lib/ssl/tls13con.h,
	lib/ssl/tls13hkdf.c, lib/ssl/tls13replay.c, tests/ssl/ssl.sh:
	Bug 1561637 TLS 1.3 does not work in FIPS mode r=mt

	Part 2 of 2

	Use the official PKCS #11 HKDF mechanism to implement tls 1.3.

	1) The new mechanism is a single derive mechanism, so we no longer
	need to pick it based on the underlying hmac (Note, we still need to
	know the underlying hmac, which is passed in as a mechanism
	parameter).

	2) Use the new keygen to generate CKK_HKDF keys rather than doing it
	by hand with the random number generator (never was really the best
	way of doing this).

	3) modify tls13hkdf.c to use the new mechanisms: 1) Extract: use the
	new key handle in the mechanism parameters to pass the salt when the
	salt is a key handle. Extract: use the explicit NULL salt parameter
	if for the hash len salt of zeros. 2) Expand: Expand is mostly a
	helper function which takes a mechanism. For regular expand, the
	mechanism is the normal _Derive, for the Raw version its the _Data
	function. That creates a data object, which is extractable in FIPS
	mode.

	4) update slot handling in tls13hkdf.c: 1) we need to make sure that
	the key and the salt key are in the same slot. Provide a PK11wrap
	function to make that guarrentee (and use that function in
	PK11_WrapKey, which already has to do the same function). 2) When
	importing a 'data' key for the zero key case, make sure we import
	into the salt key's slot. If there is no salt key, use
	PK11_GetBestSlot() rather than PK11_GetInternal slot.

	Differential Revision:
	https://phabricator.services.mozilla.com/D69899
	[3d2b1738e064]

2020-04-06  Kevin Jacobs  <kjacobs@mozilla.com>

	* gtests/common/testvectors/curve25519-vectors.h,
	gtests/common/testvectors/p256ecdh-vectors.h,
	gtests/common/testvectors/p384ecdh-vectors.h,
	gtests/common/testvectors/p521ecdh-vectors.h,
	gtests/common/testvectors/rsa_oaep_2048_sha1_mgf1sha1-vectors.h,
	gtests/common/testvectors/rsa_oaep_2048_sha256_mgf1sha1-vectors.h,
	gtests/common/testvectors/rsa_oaep_2048_sha256_mgf1sha256-vectors.h,
	gtests/common/testvectors/rsa_oaep_2048_sha384_mgf1sha1-vectors.h,
	gtests/common/testvectors/rsa_oaep_2048_sha384_mgf1sha384-vectors.h,
	gtests/common/testvectors/rsa_oaep_2048_sha512_mgf1sha1-vectors.h,
	gtests/common/testvectors/rsa_oaep_2048_sha512_mgf1sha512-vectors.h,
	gtests/common/testvectors/rsa_pkcs1_2048_test-vectors.h,
	gtests/common/testvectors/rsa_pkcs1_3072_test-vectors.h,
	gtests/common/testvectors/rsa_pkcs1_4096_test-vectors.h,
	gtests/common/testvectors/rsa_pss_2048_sha1_mgf1_20-vectors.h,
	gtests/common/testvectors/rsa_pss_2048_sha256_mgf1_0-vectors.h,
	gtests/common/testvectors/rsa_pss_2048_sha256_mgf1_32-vectors.h,
	gtests/common/testvectors/rsa_pss_3072_sha256_mgf1_32-vectors.h,
	gtests/common/testvectors/rsa_pss_4096_sha256_mgf1_32-vectors.h,
	gtests/common/testvectors/rsa_pss_4096_sha512_mgf1_32-vectors.h,
	gtests/common/testvectors/rsa_pss_misc-vectors.h,
	gtests/common/testvectors/rsa_signature-vectors.h,
	gtests/common/testvectors/rsa_signature_2048_sha224-vectors.h,
	gtests/common/testvectors/rsa_signature_2048_sha256-vectors.h,
	gtests/common/testvectors/rsa_signature_2048_sha512-vectors.h,
	gtests/common/testvectors/rsa_signature_3072_sha256-vectors.h,
	gtests/common/testvectors/rsa_signature_3072_sha384-vectors.h,
	gtests/common/testvectors/rsa_signature_3072_sha512-vectors.h,
	gtests/common/testvectors/rsa_signature_4096_sha384-vectors.h,
	gtests/common/testvectors/rsa_signature_4096_sha512-vectors.h,
	gtests/common/testvectors_base/rsa_signature-vectors_base.txt,
	gtests/common/testvectors_base/test-structs.h,
	gtests/common/wycheproof/genTestVectors.py,
	gtests/pk11_gtest/manifest.mn, gtests/pk11_gtest/pk11_gtest.gyp,
	gtests/pk11_gtest/pk11_rsaencrypt_unittest.cc,
	gtests/pk11_gtest/pk11_rsaoaep_unittest.cc,
	gtests/pk11_gtest/pk11_rsapkcs1_unittest.cc,
	gtests/pk11_gtest/pk11_rsapss_unittest.cc:
	Bug 1612260 - Add Wycheproof vectors for RSA PKCS1 and PSS signing,
	PKCS1 and OEAP decryption. r=bbeurdouche

	This patch updates the Wycheproof script to build RSA test vectors
	(covering PKCS1 decryption/verification, as well as PSS and OAEP)
	and adds the appropriate test drivers.

	Differential Revision:
	https://phabricator.services.mozilla.com/D69847
	[469fd8633757]

2020-04-01  Kevin Jacobs  <kjacobs@mozilla.com>

	* automation/taskcluster/docker-fuzz32/Dockerfile:
	Bug 1626751 - Add apt-transport-https & apt-utils to fuzz32 docker
	image r=jcj

	We already install these packages on the image_builder image itself.
	It seems they're now required on the fuzz32 image as well.

	Differential Revision:
	https://phabricator.services.mozilla.com/D69274
	[c7a8195e3072]

2020-04-01  Giulio Benetti  <giulio.benetti@benettiengineering.com>

	* lib/freebl/Makefile:
	Bug 1624864 - Don't force ARMv7 for gcm-arm32-neon r=jcj
	[858209235972]

	* coreconf/config.gypi, coreconf/config.mk, lib/freebl/Makefile,
	lib/freebl/freebl.gyp, lib/freebl/gcm.c:
	Bug 1620799 - Introduce NSS_DISABLE_ARM32_NEON r=jcj

	Only some Arm32 supports neon, so let's introduce
	NSS_DISABLE_ARM32_NEON to allow disabling Neon acceleration when
	building for Arm32.

	Signed-off-by: Giulio Benetti
	<giulio.benetti@benettiengineering.com>
	[b47b2c35aa64]

2020-04-01  Kevin Jacobs  <kjacobs@mozilla.com>

	* automation/abi-check/expected-report-libnss3.so.txt, automation/abi-
	check/expected-report-libsoftokn3.so.txt, automation/abi-check
	/expected-report-libssl3.so.txt:
	Fixup ABI checks after libabigail update and Delegated Credentials
	backport. r=me
	[7f50f6ca7658]

2020-03-31  hajma  <tropikhajma@gmail.com>

	* coreconf/SunOS5.mk:
	Bug 1625133 - Fix implicit declaration of function 'getopt' on SunOS
	r=jcj
	[744788dd18dc]

2020-03-30  Robert Relyea  <rrelyea@redhat.com>

	* automation/abi-check/expected-report-libnss3.so.txt,
	gtests/pk11_gtest/pk11_hkdf_unittest.cc, lib/nss/nss.def,
	lib/pk11wrap/pk11mech.c, lib/pk11wrap/pk11obj.c,
	lib/pk11wrap/pk11pub.h, lib/softoken/pkcs11.c,
	lib/softoken/pkcs11c.c:
	Bug 1561637 TLS 1.3 does not work in FIPS mode

	Patch 1 of 2. This patch updates softoken and helper functions with
	the new PKCS #11 v3 HKDF, which handles all the correct key
	management so that we can work in FIPS mode

	1) Salts can be passed in as data, as and explicit NULL (which per
	spec means a zero filled buffer of length of the underlying HMAC),
	or through a key handle 2) A Data object can be used as a key
	(explicitly allowed for this mechanism by the spec). 3) A special
	mechansism produces a data object rather than a key, the latter
	which can be exported. Softoken does not do the optional validation
	on the pInfo to verify that the requested values are supposed to be
	data rather than keys. Some other tokens may.

	The old hkdf mechanism has been retained for compatibility (well
	namely until patch 2 is created, tls is still using it). The hkdf
	function has been broken off into it's own function rather than
	inline in the derive function.

	Note: because the base key and/or the export key could really be a
	data object, our explicit handling of sensitive and extractable are
	adjusted to take into account that those flags do not exist in data
	objects.

	Differential Revision:
	https://phabricator.services.mozilla.com/D68940
	[e0922aac5267]

2020-03-26  Hans Petter Jansson  <hpj@cl.no>

	* cmd/lowhashtest/lowhashtest.c:
	Bug 1622555 - Fix lowhashtest argument parsing. r=kjacobs
	[f3c5ab41c972]

2020-03-26  Benjamin Beurdouche  <bbeurdouche@mozilla.com>

	* lib/freebl/Makefile, lib/freebl/freebl.gyp:
	Bug 1624377 - Replace freebl flag -msse4 by -msse4.1 -msse4.2 which
	are supported by older compilers r=kjacobs

	Differential Revision:
	https://phabricator.services.mozilla.com/D68407
	[16ee7cb36fff]

2020-03-26  Robert Relyea  <rrelyea@redhat.com>

	* gtests/ssl_gtest/libssl_internals.c, lib/pk11wrap/exports.gyp,
	lib/pk11wrap/manifest.mn, lib/ssl/ssl3con.c, lib/ssl/sslprimitive.c,
	lib/ssl/sslspec.h, lib/ssl/tls13con.c, lib/ssl/tls13con.h,
	lib/ssl/tls13esni.c, lib/ssl/tls13exthandle.c:
	Bug 1623374 Need to support the new PKCS #11 Message interface for
	AES GCM and ChaCha Poly r=mt

	Update ssl to use the new PK11_AEADOp() interface. 1. We restore the
	use of PK11Context_Create() for AEAD operations. 2. AES GCM and
	CHACHA/Poly specific functions are no longer needed as PK11_AEADOp()
	handles all the mechanism specific processing. 3. TLS semantic
	differences between the two algorithms is handled by their
	parameters: 1. Nonce length is the length of the nonce counter. If
	it's zero, then XOR_Counter is used (and the nonce length is the
	sizeof(sslSequenceNumber)). 2. IV length is the full IV length -
	nonce length. 3. TLS 1.3 always uses XOR_Counter. 4. The IV is
	returned from the token in the encrypt case. Only in the explict
	nonce case is it examined. (The code depends on the fact that the
	count in the token will match sslSequenceNumber). I did have assert
	code to verify this was happening for testing, but it's removed from
	this patch it can be added back. 5. All the decrypt instances of
	XOR_Counter IV creation have been colapsed into tls13_WriteNonce().
	6. Even tough PK11_AEADOp returns and accepts the tag separately
	(for encrypt and decrypt respectively). The SSL code still returns
	the values as buffer||tag. 7. tls13_AEAD() has been enhanced so all
	uses of AEAD outside of the TLS stream can use it instead of their
	own wrapped version. It can handle streams (CreateContext()
	tls13_AEAD() tls13_AEAD() DestroyContext()) or single shot
	tls13_AEAD(context=NULL). In the later case, the keys for the single
	shot operation should not be resued. 8. libssl_internals.c in the
	gtests directory has been updated to handle advancing the internal
	iv counter when we artifically advance the seqNum. Since we don't
	have access to any token iv counter (including softoken), The code
	switches to simulated message mode, and updates the simulated state
	as appropriate. (obviously this is for testing only code as it
	reaches into normally private data structures).

	Differential Revision:
	https://phabricator.services.mozilla.com/D68480
	[e7c7f305078e]

2020-03-26  Robert Relyea  <rrelyea@redhat.com>

        * gtests/ssl_gtest/libssl_internals.c, lib/pk11wrap/exports.gyp,
        lib/pk11wrap/manifest.mn, lib/ssl/ssl3con.c, lib/ssl/sslprimitive.c,
        lib/ssl/sslspec.h, lib/ssl/tls13con.c, lib/ssl/tls13con.h,
        lib/ssl/tls13esni.c, lib/ssl/tls13exthandle.c:
        Bug 1623374 Need to support the new PKCS #11 Message interface for
        AES GCM and ChaCha Poly r=mt

        Update ssl to use the new PK11_AEADOp() interface. 1. We restore the
        use of PK11Context_Create() for AEAD operations. 2. AES GCM and
        CHACHA/Poly specific functions are no longer needed as PK11_AEADOp()
        handles all the mechanism specific processing. 3. TLS semantic
        differences between the two algorithms is handled by their
        parameters: 1. Nonce length is the length of the nonce counter. If
        it's zero, then XOR_Counter is used (and the nonce length is the
        sizeof(sslSequenceNumber)). 2. IV length is the full IV length -
        nonce length. 3. TLS 1.3 always uses XOR_Counter. 4. The IV is
        returned from the token in the encrypt case. Only in the explict
        nonce case is it examined. (The code depends on the fact that the
        count in the token will match sslSequenceNumber). I did have assert
        code to verify this was happening for testing, but it's removed from
        this patch it can be added back. 5. All the decrypt instances of
        XOR_Counter IV creation have been colapsed into tls13_WriteNonce().
        6. Even tough PK11_AEADOp returns and accepts the tag separately
        (for encrypt and decrypt respectively). The SSL code still returns
        the values as buffer||tag. 7. tls13_AEAD() has been enhanced so all
        uses of AEAD outside of the TLS stream can use it instead of their
        own wrapped version. It can handle streams (CreateContext()
        tls13_AEAD() tls13_AEAD() DestroyContext()) or single shot
        tls13_AEAD(context=NULL). In the later case, the keys for the single
        shot operation should not be resued. 8. libssl_internals.c in the
        gtests directory has been updated to handle advancing the internal
        iv counter when we artifically advance the seqNum. Since we don't
        have access to any token iv counter (including softoken), The code
        switches to simulated message mode, and updates the simulated state
        as appropriate. (obviously this is for testing only code as it
        reaches into normally private data structures).

        Differential Revision:
        https://phabricator.services.mozilla.com/D68480
        [e7c7f305078e]


2020-03-23  Kevin Jacobs  <kjacobs@mozilla.com>

	* lib/softoken/pkcs11.c:
	Bug 1624402 - Fix compilation error when NO_FORK_CHECK and
	CHECK_FORK_* are defined r=rrelyea

	Differential Revision:
	https://phabricator.services.mozilla.com/D67911
	[0225889e5292]

2020-03-23  Kevin Jacobs  <kjacobs@mozilla.com>

    * lib/util/pkcs11.h:
    Bug 1624130 - Require CK_FUNCTION_LIST structs to be packed.
    r=rrelyea

    Differential Revision:
    https://phabricator.services.mozilla.com/D67741
    [7ab62d3d0445]

2020-03-19  Robert Relyea  <rrelyea@redhat.com>

	* automation/abi-check/expected-report-libnss3.so.txt,
	gtests/pk11_gtest/pk11_aes_gcm_unittest.cc,
	gtests/pk11_gtest/pk11_chacha20poly1305_unittest.cc,
	lib/freebl/blapi.h, lib/freebl/blapii.h, lib/freebl/blapit.h,
	lib/freebl/chacha20poly1305.c, lib/freebl/gcm.c, lib/freebl/gcm.h,
	lib/freebl/intel-gcm-wrap.c, lib/freebl/intel-gcm.h,
	lib/freebl/ldvector.c, lib/freebl/loader.c, lib/freebl/loader.h,
	lib/freebl/rijndael.c, lib/freebl/rijndael.h, lib/nss/nss.def,
	lib/pk11wrap/pk11cxt.c, lib/pk11wrap/pk11mech.c,
	lib/pk11wrap/pk11priv.h, lib/pk11wrap/pk11pub.h,
	lib/pk11wrap/pk11skey.c, lib/pk11wrap/pk11slot.c,
	lib/pk11wrap/secmodti.h, lib/softoken/fipstokn.c,
	lib/softoken/pkcs11.c, lib/softoken/pkcs11c.c,
	lib/softoken/pkcs11i.h, lib/softoken/pkcs11u.c,
	lib/softoken/sftkmessage.c, lib/util/pkcs11n.h, lib/util/pkcs11t.h,
	lib/util/secport.h:
	Bug 1623374 Need to support the new PKCS #11 Message interface for
	AES GCM and ChaCha Poly

	PKCS #11 defines a new interface for handling AEAD type ciphers that
	allow multiple AEAD operations without repeating the key schedule.
	It also allows tokens to keep track of the number of operations, and
	generate IVs (depending on the cipher).

	This patch: 1. implement those new functions in softoken. With the
	addition of CKF_MESSAGE_* flags to various mechanism, we need to
	strip them when using the version 2 API of softoken (since there are
	no C_Message* function in version 2). For that we need a separate
	C_GetMechanismInfo function. We use the same trick we used to have a
	separate version function for the V2 interface. Also now that the
	new message functions are in their own file, they still need access
	to the common Session state processing functions. those have gone
	from static to exported within softoken to accomidate that. Same
	with sftk_MapDecryptError() (sftk_MapVerifyError() was also made
	global, though nothing else is yet using it). Only
	C_MessageEncrptInit(), C_EncryptMessage(), C_MessageEncryptFinal,
	C_MessageDecryptInit(), C_DecryptMessage(), and
	C_MessageDecryptFinal are implemented. C_EncryptMessageBegin(),
	C_EncryptMessageNext(), C_DecryptMessageBegin(), and
	C_DecryptMessageNext() are all part of the multi-part withing a
	multi-part operation and are only necessary for things like S/MIME
	(potentially). If we wanted to implement them, we would need more
	functions exported from freebl (and initaead, updateaead, finalaead
	for each mechanism type). 2. make those interfaces call aes_gcm and
	chacha20_poly1503 (and make adjustments for those ciphers). For AES,
	I added a new function AES_AEAD, which handles both encrypt and
	decrypt. Internally, the gcm functions (both the generic gcm and the
	intel gcm wrapper) had their init functions split into key
	scheduling and counter mode/tag initialization. The latter is still
	called from init, but the former is now for each update call. IV
	generation is handled by a single function in gcm.c, and shared with
	intel_gcm_wrapper.c Since the AES functions already know about the
	underlying PKCS #11 mechanism parameters, the new AEAD functions
	also parse the PKCS #11 GCM parameters. For Chacha/Poly new aead
	update functions were created called ChaChaPoly1305_Encrypt and
	ChaChaChaPoly1305_Decrypt. There was no Message specific
	initialization in the existing chacha_init, so no changes were
	needed there. The primary difference between _Encrypt/_Decrypt and
	_Seal/_Open is the fact that the tag is put at the end of the
	encrypted data buffer in the latter, and in a generic buffer in the
	former. 3. create new pk11wrap interfaces that also squash the api
	differences between the various mechanisms for aead (similiar to the
	way we do it for CBC and ECB crypto today). To accomplish this I
	added PK11_AEADOp() and PK11_AEADRawOp(). Both functions handle the
	case where the token only supports the single shot interface, by
	using the single short interface to simulate the Message interface.
	The PK11_AEADOp() also smooths out the differences in the parameters
	and symantics of the various mechanism so the application does not
	need to worry about the PKCS #11 differences in the mechanism. Both
	use contexts from the standard PK11_CreateContext(), so key
	schedules are done once for each key rather than once for each
	message. MESSAGE/AEAD operations are selected by adding the psuedo
	attribute flag CKA_NSS_MESSAGE to the requested operation
	(CKA_ENCRYPT, CKA_DECRYPT, CKA_SIGN, CKA_VERIFY). 4. write tests for
	the new interfaces Tests were added to make sure the PK11_AEADRawOp
	interface works, The single shot interface is used to test output of
	the message interface we also use two test only functions to force
	the connection to use the simulation interface, which is also
	compared to the non-simulate inteface. The AES_GCM also tests
	various IV generators.

	Differential Revision:
	https://phabricator.services.mozilla.com/D67552
	[293ac3688ced]

2020-03-18  Kevin Jacobs  <kjacobs@mozilla.com>

	* lib/freebl/mpi/mpcpucache.c:
	Bug 1623184 - Clear ECX prior to cpuid, fixing query for Extended
	Features r=bbeurdouche

	While trying to benchmark the recent HACL* AVX2 code, I noticed that
	it was not being called on two machines (that both support AVX2),
	instead using only the AVX version.

	In order to query for Extended Features (cpuid with EAX=7), we also
	need to set ECX to 0: https://www.intel.com/content/www/us/en
	/architecture-and-technology/64-ia-32-architectures-software-
	developer-vol-2a-manual.html. The current code fails to do this,
	resulting in flags that show no support.

	Initially, I wrote a separate `freebl_cpuid_ex` function that
	accepted a value for ECX as a separate input argument. However, some
	definitions of `freebl_cpuid` already zero ECX, so making this
	consistent is the simplest way to get the desired behavior.

	With this patch, the two test machines (MacOS and Linux x64)
	correctly use the AVX2 ChaCha20Poly1305 code.

	Differential Revision:
	https://phabricator.services.mozilla.com/D67235
	[06d41fe87c58]

2020-03-17  Robert Relyea  <rrelyea@redhat.com>

	* automation/abi-check/expected-report-libnss3.so.txt, automation/abi-
	check/expected-report-libsoftokn3.so.txt, cmd/pk11mode/pk11mode.c,
	lib/pk11wrap/pk11load.c, lib/pk11wrap/secmodi.h,
	lib/pk11wrap/secmodt.h, lib/softoken/fipstokn.c,
	lib/softoken/manifest.mn, lib/softoken/pkcs11.c,
	lib/softoken/pkcs11c.c, lib/softoken/pkcs11i.h,
	lib/softoken/sftkmessage.c, lib/softoken/softoken.gyp,
	lib/softoken/softoken.h, lib/softoken/softokn.def,
	lib/util/pkcs11.h, lib/util/pkcs11f.h, lib/util/pkcs11n.h,
	nss/automation/abi-check/new-report-libnss3.so.txt, nss/automation
	/abi-check/new-report-libsoftokn3.so.txt:
	Bug 1603628 Update NSS to handle PKCS #11 v3.0 r=ueno r=mt

	Update to PKCS #11 v3.0 part 2.

	Create the functions and switch to the C_Interface() function to
	fetch the PKCS #11 function table. Also PKCS #11 v3.0 uses a new
	fork safe interface. NSS can already handle the case if the PKCS #11
	module happens to be fork safe (when asked by the application to
	refresh the tokens in the child process, NSS can detect that such a
	refresh is not necessary and continue. Softoken could also be put in
	fork_safe mode with an environment variable. With this patch it's
	the default, and NSS asks for the fork safe API by default.
	Technically softoken should implement the old non-fork safe
	interface when PKCS #11 v2.0 is called, but NSS no longer needs it,
	and doing so would double the number of PKCS #11 interfaces are
	needed. You can still compile with fork unsafe semantics, and the
	PKCS #11 V3.0 module will do the right thing and not include the
	fork safe flag. Firefox does not fork(), so for firefox this is
	simply code that is no longer compilied.

	We now use C_GetInterface, which allows us to specify what kind of
	interface we want (PKCS #11 v3.0, PKCS #11 v2.0, fork safe, etc.).
	Vendor specific functions can now be accessed through the
	C_GetInterface. If the C_GetInterface function does not exists, we
	fall bak to the old C_GetFunctionList.

	There are 24 new functions in PKCS #11 v3.0: C_GetInterfaceList -
	return a table of all the supported interfaces C_GetInterface -
	return a specific interface. You can specify interface name, version
	and flags separately. You can leave off any of these and you will
	get what the token thinks is the best match of the interfaces that
	meet the criteria. We do this in softoken by the order of the
	interface list. C_SessionCancel - Cancel one or more multipart
	operation C_LoginUser - Supply a user name to C_Login(). This
	function has no meaning for softoken, so it just returns
	CKR_OPERATION_NOT_INITIALIZED under the theory that if we in the
	future want to support usernames, the NSS db would need special
	initialization to make that happen. C_Message* and C_*Message* (20
	functions in all) are the new AEAD interface (they are written
	generally so that it can be used for things other than AEAD). In
	this patch they are unimplemented (see the next patch).

	This patch adds regular (NSC_) and FIPS (FC_) versions of these
	functions. Also when creating the PKCS #11 v2.0 interface, we had to
	create a 2.0 specific version of C_GetInfo so that it can return a
	2.40 in the CK_VERSION field rather than 3.00. We do this with
	#defines since all the function tables are generated automagically
	with pkcs11f.h.

	Differential Revision:
	https://phabricator.services.mozilla.com/D67240
	[2364598f8a36]

2020-03-09  Benjamin Beurdouche  <bbeurdouche@mozilla.com>

	* automation/taskcluster/scripts/run_hacl.sh,
	lib/freebl/verified/Hacl_Poly1305_128.c,
	lib/freebl/verified/Hacl_Poly1305_256.c:
	Bug 1612493 - Fix Firefox build for Windows 2012 x64. r=kjacobs

	Differential Revision:
	https://phabricator.services.mozilla.com/D65945
	[7e09cdab32d0]

2020-03-02  Kurt Miller  <kurt@intricatesoftware.com>

        * lib/freebl/blinit.c:
        Bug 1618400 - Fix unused variable 'getauxval' on OpenBSD/arm64 r=jcj

        https://bugzilla.mozilla.org/show_bug.cgi?id=1618400
        [2c989888dee7]

2020-03-02  Giulio Benetti  <giulio.benetti@benettiengineering.com>

        * lib/freebl/blinit.c:
        Bug 1614183 - Check if PPC __has_include(<sys/auxv.h>). r=kjacobs
        Some build environment doesn't provide <sys/auxv.h> and this causes
        build failure, so let's check if that header exists by using
        __has_include() helper.

        Signed-off-by: Giulio Benetti
        <giulio.benetti@benettiengineering.com>
        [bb7c46049f26]

2020-02-28  Benjamin Beurdouche  <bbeurdouche@mozilla.com>

        * automation/taskcluster/scripts/run_hacl.sh,
        lib/freebl/verified/Hacl_Chacha20.c,
        lib/freebl/verified/Hacl_Chacha20Poly1305_128.c,
        lib/freebl/verified/Hacl_Chacha20Poly1305_32.c,
        lib/freebl/verified/Hacl_Chacha20_Vec128.c,
        lib/freebl/verified/Hacl_Curve25519_51.c,
        lib/freebl/verified/Hacl_Kremlib.h,
        lib/freebl/verified/Hacl_Poly1305_128.c,
        lib/freebl/verified/Hacl_Poly1305_32.c,
        lib/freebl/verified/kremlin/include/kremlin/internal/types.h,
        lib/freebl/verified/kremlin/kremlib/dist/minimal/FStar_UInt128.h, li
        b/freebl/verified/kremlin/kremlib/dist/minimal/FStar_UInt128_Verifie
        d.h, lib/freebl/verified/kremlin/kremlib/dist/minimal/FStar_UInt_8_1
        6_32_64.h, lib/freebl/verified/kremlin/kremlib/dist/minimal/LowStar_
        Endianness.h, lib/freebl/verified/kremlin/kremlib/dist/minimal/fstar
        _uint128_gcc64.h, lib/freebl/verified/libintvector.h:
        Bug 1617533 - Update of HACL* after libintvector.h and coding style
        changes. r=kjacobs

        *** Bug 1617533 - Clang format

        *** Bug 1617533 - Update HACL* commit for job in Taskcluster

        *** Bug 1617533 - Update HACL* Kremlin code

        Differential Revision:
        https://phabricator.services.mozilla.com/D63829
        [b6677ae9067e]

        * automation/taskcluster/graph/src/extend.js, coreconf/arch.mk,
        coreconf/config.mk, lib/freebl/Makefile, lib/freebl/blapii.h,
        lib/freebl/blinit.c, lib/freebl/chacha20poly1305.c,
        lib/freebl/freebl.gyp,
        lib/freebl/verified/Hacl_Chacha20Poly1305_256.c,
        lib/freebl/verified/Hacl_Chacha20Poly1305_256.h,
        lib/freebl/verified/Hacl_Chacha20_Vec256.c,
        lib/freebl/verified/Hacl_Chacha20_Vec256.h,
        lib/freebl/verified/Hacl_Poly1305_256.c,
        lib/freebl/verified/Hacl_Poly1305_256.h, nss-tool/hw-support.c:
        Bug 1612493 - Support for HACL* AVX2 code for Chacha20, Poly1305 and
        Chacha20Poly1305. r=kjacobs

        *** Bug 1612493 - Import AVX2 code from HACL*
        *** Bug 1612493 - Add CPU detection for AVX2, BMI1, BMI2, FMA, MOVBE
        *** Bug 1612493 - New flag NSS_DISABLE_AVX2 for freebl/Makefile and
        freebl.gyp
        *** Bug 1612493 - Disable use of AVX2 on GCC 4.4 which doesn’t
        support -mavx2
        *** Bug 1612493 - Disable tests when the platform doesn't have
        support for AVX2

        Differential Revision:
        https://phabricator.services.mozilla.com/D64718
        [d5deac55f543]


2020-02-18  Robert Relyea  <rrelyea@redhat.com>

	* cmd/bltest/blapitest.c, cmd/fipstest/fipstest.c,
	cmd/lib/pk11table.c, cmd/pk11gcmtest/pk11gcmtest.c,
	cmd/shlibsign/shlibsign.c,
	gtests/pk11_gtest/pk11_aes_gcm_unittest.cc,
	gtests/pk11_gtest/pk11_cbc_unittest.cc, lib/certdb/crl.c,
	lib/ckfw/dbm/db.c, lib/dev/devslot.c, lib/dev/devtoken.c,
	lib/dev/devutil.c, lib/freebl/fipsfreebl.c, lib/freebl/gcm.c,
	lib/freebl/intel-gcm-wrap.c, lib/pk11wrap/debug_module.c,
	lib/pk11wrap/dev3hack.c, lib/pk11wrap/pk11akey.c,
	lib/pk11wrap/pk11auth.c, lib/pk11wrap/pk11cert.c,
	lib/pk11wrap/pk11err.c, lib/pk11wrap/pk11load.c,
	lib/pk11wrap/pk11mech.c, lib/pk11wrap/pk11merge.c,
	lib/pk11wrap/pk11nobj.c, lib/pk11wrap/pk11obj.c,
	lib/pk11wrap/pk11pbe.c, lib/pk11wrap/pk11pk12.c,
	lib/pk11wrap/pk11pqg.c, lib/pk11wrap/pk11skey.c,
	lib/pk11wrap/pk11slot.c, lib/pk11wrap/pk11util.c, lib/pkcs12/p12d.c,
	lib/pkcs12/p12e.c, lib/softoken/fipstokn.c,
	lib/softoken/legacydb/lgattr.c, lib/softoken/legacydb/lgcreate.c,
	lib/softoken/legacydb/lgfind.c, lib/softoken/legacydb/lginit.c,
	lib/softoken/pkcs11.c, lib/softoken/pkcs11c.c,
	lib/softoken/pkcs11u.c, lib/softoken/sdb.c, lib/softoken/sftkdb.c,
	lib/softoken/sftkpwd.c, lib/ssl/ssl3con.c, lib/ssl/sslprimitive.c,
	lib/ssl/tls13con.c, lib/util/pkcs11.h, lib/util/pkcs11f.h,
	lib/util/pkcs11n.h, lib/util/pkcs11t.h, lib/util/secoid.c, nss-
	tool/enc/enctool.cc:
	Bug 1603628 Update NSS to handle PKCS #11 v3.0 r=daiki r=mhoye

	https://phabricator.services.mozilla.com/D63241

	This patch implements the first phase: updating the headers.

	lib/util/pkcs11.h lib/util/pkcs11f.h lib/util/pkcs11t.h

	Were updated using the released OASIS PKCS #11 v3.0 header files.
	lib/util/pkcs11n.h was updated to finally deprecate all uses of
	CK?_NETSCAPE_?.

	A new define as added: NSS_PKCS11_2_0_COMPAT. If it's defined, the
	small semantic changes (including the removal of deprecated defines)
	between the NSS PKCS #11 v2 header file and the new PKCS #11 v3 are
	reverted in favor of the PKCS #11 v2 definitions. This include the
	removal of CK?_NETSCAPE_? in favor of CK?_NSS_?.

	One notable change was caused by an inconsistancy between the spec
	and the released headers in PKCS #11 v2.40. CK_GCM_PARAMS had an
	extra field in the header that was not in the spec. OASIS considers
	the header file to be normative, so PKCS #11 v3.0 resolved the issue
	in favor of the header file definition. NSS had the spec definition,
	so now there are 2 defines for this structure:

	CK_NSS_GCM_PARAMS - the old nss define. Still used internally in
	freebl. CK_GCM_PARAMS_V3 - the new define. CK_GCM_PARAMS - no longer
	referenced in NSS itself. It's defined as CK_GCM_PARAMS_V3 if
	NSS_PKCS11_2_0_COMPAT is *not* defined, and it's defined as
	CKM_NSS_GCM_PARAMS if NSS_PKCS11_2_0_COMPAT is defined.

	Softoken has been updated to accept either CK_NSS_GCM_PARAMS or
	CK_GCM_PARAMS_V3. In a future patch NSS will be updated to use
	CK_GCM_PARAMS_V3 and fall back to CK_NSS_GMC_PARAMS.

	 One other semantic difference between the 3.0 version of pkcs11f.h
	and the version here: In the oasis version of the header, you must
	define CK_PKCS11_2_0_ONLY to get just the PKCS #11 v2 defines. In
	our version you must define CK_PKCS11_3 to get the PCKS #11 v3
	defines.

	Most of this patch is to handle changing the deprecated defines that
	have been removed in PCKS #11 v3 from NSS.

	Differential Revision:
	https://phabricator.services.mozilla.com/D63241
	[b5d90a7fe217]

Differential Revision: https://phabricator.services.mozilla.com/D70773

--HG--
extra : moz-landing-system : lando
2020-04-14 17:53:38 +00:00
Kevin Jacobs fe5361807e Bug 1621350 - land NSS 581ed41d0a8d UPGRADE_NSS_RELEASE, r=jcj
Differential Revision: https://phabricator.services.mozilla.com/D68665

--HG--
extra : moz-landing-system : lando
2020-03-30 21:06:07 +00:00
Kevin Jacobs c36703e663 Bug 1621350 - land NSS 0225889e5292 UPGRADE_NSS_RELEASE, r=jcj
2020-03-23  Kevin Jacobs  <kjacobs@mozilla.com>

	* lib/softoken/pkcs11.c:
	Bug 1624402 - Fix compilation error when NO_FORK_CHECK and
	CHECK_FORK_* are defined r=rrelyea

	[0225889e5292] [tip]

	* lib/util/pkcs11.h:
	Bug 1624130 - Require CK_FUNCTION_LIST structs to be packed.
	r=rrelyea

	[7ab62d3d0445]

2020-03-17  Robert Relyea  <rrelyea@redhat.com>

	* automation/abi-check/expected-report-libnss3.so.txt, automation/abi-
	check/expected-report-libsoftokn3.so.txt, cmd/pk11mode/pk11mode.c,
	lib/pk11wrap/pk11load.c, lib/pk11wrap/secmodi.h,
	lib/pk11wrap/secmodt.h, lib/softoken/fipstokn.c,
	lib/softoken/manifest.mn, lib/softoken/pkcs11.c,
	lib/softoken/pkcs11c.c, lib/softoken/pkcs11i.h,
	lib/softoken/sftkmessage.c, lib/softoken/softoken.gyp,
	lib/softoken/softoken.h, lib/softoken/softokn.def,
	lib/util/pkcs11.h, lib/util/pkcs11f.h, lib/util/pkcs11n.h,
	nss/automation/abi-check/new-report-libnss3.so.txt, nss/automation
	/abi-check/new-report-libsoftokn3.so.txt:
	Bug 1603628 Update NSS to handle PKCS #11 v3.0 r=ueno r=mt

	Update to PKCS #11 v3.0 part 2.

	Create the functions and switch to the C_Interface() function to
	fetch the PKCS #11 function table. Also PKCS #11 v3.0 uses a new
	fork safe interface. NSS can already handle the case if the PKCS #11
	module happens to be fork safe (when asked by the application to
	refresh the tokens in the child process, NSS can detect that such a
	refresh is not necessary and continue. Softoken could also be put in
	fork_safe mode with an environment variable. With this patch it's
	the default, and NSS asks for the fork safe API by default.
	Technically softoken should implement the old non-fork safe
	interface when PKCS #11 v2.0 is called, but NSS no longer needs it,
	and doing so would double the number of PKCS #11 interfaces are
	needed. You can still compile with fork unsafe semantics, and the
	PKCS #11 V3.0 module will do the right thing and not include the
	fork safe flag. Firefox does not fork(), so for firefox this is
	simply code that is no longer compilied.

	We now use C_GetInterface, which allows us to specify what kind of
	interface we want (PKCS #11 v3.0, PKCS #11 v2.0, fork safe, etc.).
	Vendor specific functions can now be accessed through the
	C_GetInterface. If the C_GetInterface function does not exists, we
	fall bak to the old C_GetFunctionList.

	There are 24 new functions in PKCS #11 v3.0: C_GetInterfaceList -
	return a table of all the supported interfaces C_GetInterface -
	return a specific interface. You can specify interface name, version
	and flags separately. You can leave off any of these and you will
	get what the token thinks is the best match of the interfaces that
	meet the criteria. We do this in softoken by the order of the
	interface list. C_SessionCancel - Cancel one or more multipart
	operation C_LoginUser - Supply a user name to C_Login(). This
	function has no meaning for softoken, so it just returns
	CKR_OPERATION_NOT_INITIALIZED under the theory that if we in the
	future want to support usernames, the NSS db would need special
	initialization to make that happen. C_Message* and C_*Message* (20
	functions in all) are the new AEAD interface (they are written
	generally so that it can be used for things other than AEAD). In
	this patch they are unimplemented (see the next patch).

	This patch adds regular (NSC_) and FIPS (FC_) versions of these
	functions. Also when creating the PKCS #11 v2.0 interface, we had to
	create a 2.0 specific version of C_GetInfo so that it can return a
	2.40 in the CK_VERSION field rather than 3.00. We do this with
	#defines since all the function tables are generated automagically
	with pkcs11f.h.

	[2364598f8a36]

2020-03-18  Kevin Jacobs  <kjacobs@mozilla.com>

	* lib/freebl/mpi/mpcpucache.c:
	Bug 1623184 - Clear ECX prior to cpuid, fixing query for Extended
	Features r=bbeurdouche

	While trying to benchmark the recent HACL* AVX2 code, I noticed that
	it was not being called on two machines (that both support AVX2),
	instead using only the AVX version.

	In order to query for Extended Features (cpuid with EAX=7), we also
	need to set ECX to 0: https://www.intel.com/content/www/us/en
	/architecture-and-technology/64-ia-32-architectures-software-
	developer-vol-2a-manual.html. The current code fails to do this,
	resulting in flags that show no support.

	Initially, I wrote a separate `freebl_cpuid_ex` function that
	accepted a value for ECX as a separate input argument. However, some
	definitions of `freebl_cpuid` already zero ECX, so making this
	consistent is the simplest way to get the desired behavior.

	With this patch, the two test machines (MacOS and Linux x64)
	correctly use the AVX2 ChaCha20Poly1305 code.

	[06d41fe87c58]

2020-02-18  Robert Relyea  <rrelyea@redhat.com>

	* cmd/bltest/blapitest.c, cmd/fipstest/fipstest.c,
	cmd/lib/pk11table.c, cmd/pk11gcmtest/pk11gcmtest.c,
	cmd/shlibsign/shlibsign.c,
	gtests/pk11_gtest/pk11_aes_gcm_unittest.cc,
	gtests/pk11_gtest/pk11_cbc_unittest.cc, lib/certdb/crl.c,
	lib/ckfw/dbm/db.c, lib/dev/devslot.c, lib/dev/devtoken.c,
	lib/dev/devutil.c, lib/freebl/fipsfreebl.c, lib/freebl/gcm.c,
	lib/freebl/intel-gcm-wrap.c, lib/pk11wrap/debug_module.c,
	lib/pk11wrap/dev3hack.c, lib/pk11wrap/pk11akey.c,
	lib/pk11wrap/pk11auth.c, lib/pk11wrap/pk11cert.c,
	lib/pk11wrap/pk11err.c, lib/pk11wrap/pk11load.c,
	lib/pk11wrap/pk11mech.c, lib/pk11wrap/pk11merge.c,
	lib/pk11wrap/pk11nobj.c, lib/pk11wrap/pk11obj.c,
	lib/pk11wrap/pk11pbe.c, lib/pk11wrap/pk11pk12.c,
	lib/pk11wrap/pk11pqg.c, lib/pk11wrap/pk11skey.c,
	lib/pk11wrap/pk11slot.c, lib/pk11wrap/pk11util.c, lib/pkcs12/p12d.c,
	lib/pkcs12/p12e.c, lib/softoken/fipstokn.c,
	lib/softoken/legacydb/lgattr.c, lib/softoken/legacydb/lgcreate.c,
	lib/softoken/legacydb/lgfind.c, lib/softoken/legacydb/lginit.c,
	lib/softoken/pkcs11.c, lib/softoken/pkcs11c.c,
	lib/softoken/pkcs11u.c, lib/softoken/sdb.c, lib/softoken/sftkdb.c,
	lib/softoken/sftkpwd.c, lib/ssl/ssl3con.c, lib/ssl/sslprimitive.c,
	lib/ssl/tls13con.c, lib/util/pkcs11.h, lib/util/pkcs11f.h,
	lib/util/pkcs11n.h, lib/util/pkcs11t.h, lib/util/secoid.c, nss-
	tool/enc/enctool.cc:
	Bug 1603628 Update NSS to handle PKCS #11 v3.0 r=daiki r=mhoye


	This patch implements the first phase: updating the headers.

	lib/util/pkcs11.h lib/util/pkcs11f.h lib/util/pkcs11t.h

	Were updated using the released OASIS PKCS #11 v3.0 header files.
	lib/util/pkcs11n.h was updated to finally deprecate all uses of
	CK?_NETSCAPE_?.

	A new define as added: NSS_PKCS11_2_0_COMPAT. If it's defined, the
	small semantic changes (including the removal of deprecated defines)
	between the NSS PKCS #11 v2 header file and the new PKCS #11 v3 are
	reverted in favor of the PKCS #11 v2 definitions. This include the
	removal of CK?_NETSCAPE_? in favor of CK?_NSS_?.

	One notable change was caused by an inconsistancy between the spec
	and the released headers in PKCS #11 v2.40. CK_GCM_PARAMS had an
	extra field in the header that was not in the spec. OASIS considers
	the header file to be normative, so PKCS #11 v3.0 resolved the issue
	in favor of the header file definition. NSS had the spec definition,
	so now there are 2 defines for this structure:

	CK_NSS_GCM_PARAMS - the old nss define. Still used internally in
	freebl. CK_GCM_PARAMS_V3 - the new define. CK_GCM_PARAMS - no longer
	referenced in NSS itself. It's defined as CK_GCM_PARAMS_V3 if
	NSS_PKCS11_2_0_COMPAT is *not* defined, and it's defined as
	CKM_NSS_GCM_PARAMS if NSS_PKCS11_2_0_COMPAT is defined.

	Softoken has been updated to accept either CK_NSS_GCM_PARAMS or
	CK_GCM_PARAMS_V3. In a future patch NSS will be updated to use
	CK_GCM_PARAMS_V3 and fall back to CK_NSS_GMC_PARAMS.

	One other semantic difference between the 3.0 version of pkcs11f.h
	and the version here: In the oasis version of the header, you must
	define CK_PKCS11_2_0_ONLY to get just the PKCS #11 v2 defines. In
	our version you must define CK_PKCS11_3 to get the PCKS #11 v3
	defines.

	Most of this patch is to handle changing the deprecated defines that
	have been removed in PCKS #11 v3 from NSS.

	[b5d90a7fe217]

2020-03-16  Kevin Jacobs  <kjacobs@mozilla.com>

	* automation/abi-check/expected-report-libssl3.so.txt,
	gtests/ssl_gtest/libssl_internals.c,
	gtests/ssl_gtest/libssl_internals.h, gtests/ssl_gtest/tls_agent.cc,
	gtests/ssl_gtest/tls_agent.h,
	gtests/ssl_gtest/tls_subcerts_unittest.cc, lib/ssl/SSLerrs.h,
	lib/ssl/ssl.h, lib/ssl/ssl3con.c, lib/ssl/ssl3ext.c,
	lib/ssl/ssl3ext.h, lib/ssl/sslerr.h, lib/ssl/sslimpl.h,
	lib/ssl/sslt.h, lib/ssl/tls13exthandle.c, lib/ssl/tls13subcerts.c,
	tests/common/certsetup.sh, tests/ssl_gtests/ssl_gtests.sh:
	Bug 1617968 - Update Delegated Credentials implementation to
	draft-07 r=mt

	Remove support for RSAE in delegated credentials (both in DC
	signatures and SPKIs), add SignatureScheme list functionality to
	initial DC extension.

	[44eb9e27d946]

2020-03-13  Robert Relyea  <rrelyea@redhat.com>

	* cmd/fipstest/fipstest.c:
	Bug 1608250 KBKDF - broken fipstest handling of KI_len r=rrelyea
	p=cipherboy


	When testing Bug 1608245, I realized that I had inadvertently broken
	fipstest.c's handling of KI and KI_len. This lead to it passing
	bogus keys (with unusually large lengths exceeding the bounds of
	sizeof KI) to kbkdf_Dispatch(...).

	This uses Bob Relyea's suggestion on how to handle this: detect the
	size of KI when processing the mech selection, storing KI_len there.
	This simplifies reading of the KI value in later code.
	[d7b12847a650]

	* lib/softoken/kbkdf.c:
	Bug 1608245 KBKDF - Consistently handle NULL slot/session r=kjacobs
	Patch by cipherboy, review by kjacobs.


	Per Bug 1607955, the KBKDF code introduced in Bug 1599603 confused
	Coverity with a elided NULL check on
	sftk_SlotFromSessionHandle(...). While Coverity is incorrect (and
	the behavior is fine as-is), it isn't consistent with the KBKDF
	code's handling of sftk_SessionFromHandle(...) (which is NULL
	checked).

	This brings these two call sites into internal consistency.
	[4c43bc0998f3]

Differential Revision: https://phabricator.services.mozilla.com/D67966

--HG--
extra : moz-landing-system : lando
2020-03-24 16:39:11 +00:00
J.C. Jones 62db00e902 Bug 1592007 - land NSS NSS_3_48_BETA1 UPGRADE_NSS_RELEASE, r=kjacobs
2019-12-02  Kevin Jacobs  <kjacobs@mozilla.com>

	* lib/ssl/sslsnce.c:
	Bug 1593401 - Fix race condition in self-encrypt functions r=mt,jcj

	[77976f3fefca] [NSS_3_48_BETA1]

2019-12-02  J.C. Jones  <jjones@mozilla.com>

	* automation/release/nspr-version.txt:
	Bug 1600775 - Require NSPR 4.24 for NSS 3.48 r=kaie,kjacobs

	[b6141fb86799]

	* gtests/ssl_gtest/tls_filter.h:
	Bug 1599545 - fixup, clang-format r=me
	[8ffef87ef51b]

2019-12-02  Kevin Jacobs  <kjacobs@mozilla.com>

	* cpputil/tls_parser.h, gtests/ssl_gtest/ssl_keyupdate_unittest.cc,
	gtests/ssl_gtest/tls_filter.h, lib/ssl/tls13con.c:
	Bug 1599545 - Fix assertion and add test for early Key Update
	message r=mt

	Remove an overzealous assertion when a Key Update message is
	received too early, and add a test for the expected alert condition.

	Also adds `TlsEncryptedHandshakeMessageReplacer` for replacing TLS
	1.3 encrypted handshake messages. This is a simple implementation
	where only the first byte of the message is changed to the new type
	(so as to trigger the desired handler).

	[a5dbf68d182d]

2019-11-27  J.C. Jones  <jjones@mozilla.com>

	* lib/ckfw/object.c:
	Bug 1597799 - Guard against null ptrs in NSSCKFWObject r=kjacobs

	There's a bunch of similar code that could use guards in here, but I
	wanted to be minimal for this patch.

	[eab4d3c8c76d]

Differential Revision: https://phabricator.services.mozilla.com/D55581

--HG--
extra : moz-landing-system : lando
2019-12-03 04:19:08 +00:00
J.C. Jones fb11dfa746 Bug 1592007 - land NSS 10722c590949 UPGRADE_NSS_RELEASE, r=kjacobs
2019-11-26  J.C. Jones  <jjones@mozilla.com>

	* lib/ckfw/builtins/certdata.txt, lib/ckfw/builtins/nssckbi.h:
	Bug 1591178 - Add Entrust Root Certification Authority - G4
	r=kjacobs

	Friendly Name: Entrust Root Certification Authority - G4 Cert
	Location:
	https://bug1480510.bmoattachments.org/attachment.cgi?id=8997105
	SHA-256 Fingerprint:
	DB3517D1F6732A2D5AB97C533EC70779EE3270A62FB4AC4238372460E6F01E88
	Trust Flags: Email; Websites Test URL: https://validg4.entrust.net/

	[10722c590949] [tip]

Differential Revision: https://phabricator.services.mozilla.com/D54785

--HG--
extra : moz-landing-system : lando
2019-11-26 19:59:11 +00:00
J.C. Jones dd40266492 Bug 1592007 - land NSS fcdda17cdc36 UPGRADE_NSS_RELEASE, r=kjacobs
2019-10-28  Kevin Jacobs  <kjacobs@mozilla.com>

        * automation/abi-check/expected-report-libssl3.so.txt,
        gtests/ssl_gtest/libssl_internals.c,
        gtests/ssl_gtest/libssl_internals.h, gtests/ssl_gtest/tls_agent.cc,
        gtests/ssl_gtest/tls_agent.h, gtests/ssl_gtest/tls_filter.h,
        gtests/ssl_gtest/tls_subcerts_unittest.cc, lib/ssl/ssl3con.c,
        lib/ssl/sslimpl.h, lib/ssl/sslinfo.c, lib/ssl/sslt.h,
        lib/ssl/tls13con.c:
        Bug 1588244 - Store TLS 1.3 peerDelegCred, authKeyBits, and scheme
        in SSLPreliminaryChannelInfo. r=mt

        This patch adjusts where we set `authKeyBits` (Et al.) for TLS 1.3,
        such that `CertVerifier` can check the strength of a delegated
        credential keypair.

         The corresponding PSM changeset is in D47181.

        [fcdda17cdc36] [tip]

2019-10-28  Kai Engert  <kaie@kuix.de>

        * coreconf/coreconf.dep:
        Dummy change, trigger a build after bustage to test latest NSPR
        commit
        [ec2adf31fb8c]

2019-10-26  Martin Thomson  <mt@lowentropy.net>

        * lib/ssl/sslauth.c, lib/ssl/sslcon.c, lib/ssl/tls13esni.c:
        Bug 1590970 - Use ssl_Time consistently, r=kjacobs

        I missed a few places that used PR_Now() before.

        [c6021063e64a]

2019-10-22  Deian Stefan  <deian@cs.ucsd.edu>

        * gtests/pk11_gtest/pk11_cbc_unittest.cc:
        Bug 1459141 - A few more CBC padding tests. r=jcj

        This patch adds more test vectors for AES-CBC and 3DES-CBC padding.

        [38f1c92a5e11]

2019-10-22  Marcus Burghardt  <mburghardt@mozilla.com>

        * cmd/btoa/btoa.c:
        Bug 1590339 - Fix MemoryLeak in btoa.c. r=kjacobs

        [5feab64d2d20]

2019-10-21  Marcus Burghardt  <mburghardt@mozilla.com>

        * lib/ckfw/builtins/testlib/certdata-testlib.txt:
        Bug 1589810 - Uninitialized variable warnings from certdata.perl.
        r=mt

        [3f40060ca7b3]

2019-10-19  Martin Thomson  <martin.thomson@gmail.com>

        * gtests/ssl_gtest/ssl_version_unittest.cc:
        Bug 1573118 - Fix busted unit tests, r=jcj

        These unit tests were broken by the change to TLS version defaults.

        In retrospect, this shouldn't have been surprising, but now that it
        I'm seeing bustage, I'm somewhat surprised that there are so few
        failures.

        [7e0b8364687b]

        * lib/ssl/sslsock.c:
        Bug 1573118 - Enable TLS 1.3 by default, r=jcj

        As planned for 3.47, but now for 3.48.

        [bc77cf318f38]

2019-10-18  J.C. Jones  <jjones@mozilla.com>

        * automation/abi-check/expected-report-libnss3.so.txt, automation/abi-
        check/expected-report-libsmime3.so.txt, automation/abi-check
        /expected-report-libssl3.so.txt, automation/abi-check/previous-nss-
        release, lib/nss/nss.h, lib/softoken/softkver.h, lib/util/nssutil.h:
        Set version numbers to 3.48 beta
        [0e7dd2050d09]

        * .hgtags:
        Added tag NSS_3_47_RTM for changeset 7ccb4ade5577
        [dcadb95b9d77] <NSS_3_47_BRANCH>

        * lib/nss/nss.h, lib/softoken/softkver.h, lib/util/nssutil.h:
        Set version numbers to 3.47 final
        [7ccb4ade5577] [NSS_3_47_RTM] <NSS_3_47_BRANCH>

Differential Revision: https://phabricator.services.mozilla.com/D50840

--HG--
extra : moz-landing-system : lando
2019-10-31 04:14:33 +00:00
J.C. Jones ab56e5f10e Bug 1577822 - land NSS NSS_3_47_BETA3 UPGRADE_NSS_RELEASE, r=kjacobs
2019-10-16  J.C. Jones  <jjones@mozilla.com>

	* lib/softoken/pkcs11c.c:
	Bug 1459141 - Backed out changeset 474d62c9d0db for PK11_Wrap/Unwrap
	issues r=me
	[f10c3e0757b7] [NSS_3_47_BETA3]

2019-10-15  J.C. Jones  <jjones@mozilla.com>

	* .hgtags:
	Added tag NSS_3_47_BETA2 for changeset f657d65428c6
	[3ca8b20b24ee]

	* cmd/addbuiltin/addbuiltin.c:
	Bug 1465613 - Fixup clang format a=bustage
	[f657d65428c6] [NSS_3_47_BETA2]

2019-10-11  Marcus Burghardt  <mburghardt@mozilla.com>

	* automation/abi-check/expected-report-libnss3.so.txt, automation/abi-
	check/expected-report-libsmime3.so.txt, automation/abi-check
	/expected-report-libssl3.so.txt, cmd/addbuiltin/addbuiltin.c,
	cmd/lib/secutil.c, gtests/softoken_gtest/manifest.mn,
	gtests/softoken_gtest/softoken_gtest.gyp,
	gtests/softoken_gtest/softoken_nssckbi_testlib_gtest.cc,
	lib/certdb/certdb.c, lib/certdb/certt.h, lib/ckfw/builtins/README,
	lib/ckfw/builtins/certdata.txt, lib/ckfw/builtins/manifest.mn,
	lib/ckfw/builtins/nssckbi.h, lib/ckfw/builtins/testlib/Makefile,
	lib/ckfw/builtins/testlib/builtins-testlib.gyp,
	lib/ckfw/builtins/testlib/certdata-testlib.txt,
	lib/ckfw/builtins/testlib/config.mk,
	lib/ckfw/builtins/testlib/manifest.mn, lib/ckfw/builtins/testlib
	/nssckbi-testlib.rc,
	lib/ckfw/builtins/testlib/testcert_err_distrust.txt,
	lib/ckfw/builtins/testlib/testcert_no_distrust.txt,
	lib/ckfw/builtins/testlib/testcert_ok_distrust.txt,
	lib/ckfw/manifest.mn, lib/nss/nss.def, lib/pki/pki3hack.c,
	lib/softoken/sdb.c, lib/util/pkcs11n.h, nss.gyp, tests/cert/cert.sh:
	Bug 1465613 - Created two new fields for scheduled distrust from
	builtins and updated support commands. r=jcj,kjacobs,mt

	Added two new fields do scheduled distrust of CAs in
	nssckbi/builtins. Also, created a testlib to validate these fields
	with gtests.

	[52024949df95]

2019-10-14  Martin Thomson  <martin.thomson@gmail.com>

	* lib/ssl/tls13con.c:
	Bug 1588557 - Fix debug statement, r=jcj

	[0f563a2571c3]

2019-10-15  Dana Keeler  <dkeeler@mozilla.com>

	* gtests/mozpkix_gtest/pkixder_universal_types_tests.cpp,
	lib/mozpkix/include/pkix/pkixder.h, lib/mozpkix/lib/pkixcert.cpp:
	bug 1579060 - fix handling of issuerUniqueID and subjectUniqueID in
	mozilla::pkix::BackCert r=jcj

	According to RFC 5280, the definitions of issuerUniqueID and
	subjectUniqueID in TBSCertificate are as follows:

	 issuerUniqueID [1] IMPLICIT UniqueIdentifier OPTIONAL,
	subjectUniqueID [2] IMPLICIT UniqueIdentifier OPTIONAL,

	where UniqueIdentifier is a BIT STRING.

	IMPLICIT tags replace the tag of the underlying type. For these
	fields, there is no specified class (just a tag number within the
	class), and the underlying type of BIT STRING is "primitive" (i.e.
	not constructed). Thus, the tags should be of the form CONTEXT
	SPECIFIC | [number in class], which comes out to 0x81 and 0x82,
	respectively.

	When originally implemented, mozilla::pkix incorrectly required that
	the CONSTRUCTED bit also be set for these fields. Consequently, the
	library would reject any certificate that actually contained these
	fields. Evidently such certificates are rare.

	[c50f933d37a5]

2019-10-14  Deian Stefan  <deian@cs.ucsd.edu>

	* lib/softoken/pkcs11c.c:
	Bug 1459141 - Rewrite softoken CBC pad check to be constant time.
	r=kjacobs,jcj
	[474d62c9d0db]

2019-10-11  J.C. Jones  <jjones@mozilla.com>

	* .hgtags:
	Added tag NSS_3_47_BETA1 for changeset 93245f5733b3
	[f60dbafbc182]

Differential Revision: https://phabricator.services.mozilla.com/D49470

--HG--
extra : moz-landing-system : lando
2019-10-16 19:12:50 +00:00
J.C. Jones 962e9e53a9 Backed out changeset 3eb63c112f5a (Bug 1577822) for breaking WebAuthn mochitests UPGRADE_NSS_RELEASE
Differential Revision: https://phabricator.services.mozilla.com/D49374

--HG--
extra : moz-landing-system : lando
2019-10-16 04:36:58 +00:00
J.C. Jones 4309dccf1b Bug 1577822 - land NSS NSS_3_47_BETA2 UPGRADE_NSS_RELEASE, r=kjacobs
2019-10-15  J.C. Jones  <jjones@mozilla.com>

	* cmd/addbuiltin/addbuiltin.c:
	Bug 1465613 - Fixup clang format a=bustage
	[f657d65428c6] [NSS_3_47_BETA2]

2019-10-11  Marcus Burghardt  <mburghardt@mozilla.com>

	* automation/abi-check/expected-report-libnss3.so.txt, automation/abi-
	check/expected-report-libsmime3.so.txt, automation/abi-check
	/expected-report-libssl3.so.txt, cmd/addbuiltin/addbuiltin.c,
	cmd/lib/secutil.c, gtests/softoken_gtest/manifest.mn,
	gtests/softoken_gtest/softoken_gtest.gyp,
	gtests/softoken_gtest/softoken_nssckbi_testlib_gtest.cc,
	lib/certdb/certdb.c, lib/certdb/certt.h, lib/ckfw/builtins/README,
	lib/ckfw/builtins/certdata.txt, lib/ckfw/builtins/manifest.mn,
	lib/ckfw/builtins/nssckbi.h, lib/ckfw/builtins/testlib/Makefile,
	lib/ckfw/builtins/testlib/builtins-testlib.gyp,
	lib/ckfw/builtins/testlib/certdata-testlib.txt,
	lib/ckfw/builtins/testlib/config.mk,
	lib/ckfw/builtins/testlib/manifest.mn, lib/ckfw/builtins/testlib
	/nssckbi-testlib.rc,
	lib/ckfw/builtins/testlib/testcert_err_distrust.txt,
	lib/ckfw/builtins/testlib/testcert_no_distrust.txt,
	lib/ckfw/builtins/testlib/testcert_ok_distrust.txt,
	lib/ckfw/manifest.mn, lib/nss/nss.def, lib/pki/pki3hack.c,
	lib/softoken/sdb.c, lib/util/pkcs11n.h, nss.gyp, tests/cert/cert.sh:
	Bug 1465613 - Created two new fields for scheduled distrust from
	builtins and updated support commands. r=jcj,kjacobs,mt

	Added two new fields do scheduled distrust of CAs in
	nssckbi/builtins. Also, created a testlib to validate these fields
	with gtests.

	[52024949df95]

2019-10-14  Martin Thomson  <martin.thomson@gmail.com>

	* lib/ssl/tls13con.c:
	Bug 1588557 - Fix debug statement, r=jcj

	[0f563a2571c3]

2019-10-15  Dana Keeler  <dkeeler@mozilla.com>

	* gtests/mozpkix_gtest/pkixder_universal_types_tests.cpp,
	lib/mozpkix/include/pkix/pkixder.h, lib/mozpkix/lib/pkixcert.cpp:
	bug 1579060 - fix handling of issuerUniqueID and subjectUniqueID in
	mozilla::pkix::BackCert r=jcj

	According to RFC 5280, the definitions of issuerUniqueID and
	subjectUniqueID in TBSCertificate are as follows:

	 issuerUniqueID [1] IMPLICIT UniqueIdentifier OPTIONAL,
	subjectUniqueID [2] IMPLICIT UniqueIdentifier OPTIONAL,

	where UniqueIdentifier is a BIT STRING.

	IMPLICIT tags replace the tag of the underlying type. For these
	fields, there is no specified class (just a tag number within the
	class), and the underlying type of BIT STRING is "primitive" (i.e.
	not constructed). Thus, the tags should be of the form CONTEXT
	SPECIFIC | [number in class], which comes out to 0x81 and 0x82,
	respectively.

	When originally implemented, mozilla::pkix incorrectly required that
	the CONSTRUCTED bit also be set for these fields. Consequently, the
	library would reject any certificate that actually contained these
	fields. Evidently such certificates are rare.

	[c50f933d37a5]

2019-10-14  Deian Stefan  <deian@cs.ucsd.edu>

	* lib/softoken/pkcs11c.c:
	Bug 1459141 - Rewrite softoken CBC pad check to be constant time.
	r=kjacobs,jcj
	[474d62c9d0db]

2019-10-11  J.C. Jones  <jjones@mozilla.com>

	* .hgtags:
	Added tag NSS_3_47_BETA1 for changeset 93245f5733b3
	[f60dbafbc182]

Differential Revision: https://phabricator.services.mozilla.com/D49365

--HG--
extra : moz-landing-system : lando
2019-10-16 00:57:04 +00:00
J.C. Jones 6d66ec3bef Bug 1564499 - land NSS eeb9a6715a93 UPGRADE_NSS_RELEASE, r=kjacobs
2019-08-20  Marcus Burghardt  <mburghardt@mozilla.com>

	* lib/ckfw/builtins/certdata.txt:
	Bug 1574670 - Remove Expired root certificates - Class 2 Primary,
	UTN-USERFirst-Client, Deutsche Telekom Root CA 2.
	r=jcj,KathleenWilson

	[eeb9a6715a93] [tip]

2019-08-12  Kevin Jacobs  <kjacobs@mozilla.com>

	* lib/softoken/pkcs11c.c:
	Bug 1572164 - Don't unnecessarily free session in NSC_WrapKey r=jcj

	[b306ff3d6f4d]

Differential Revision: https://phabricator.services.mozilla.com/D42768

--HG--
extra : moz-landing-system : lando
2019-08-21 15:56:17 +00:00
J.C. Jones c8cf90a75f Bug 1564499 - land NSS ea8bc9f43de3 UPGRADE_NSS_RELEASE, r=kjacobs
Revset: reverse(bbfc55939d75~-1::ea8bc9f43de3)

2019-08-19  Kai Engert  <kaie@kuix.de>

	* automation/release/nspr-version.txt:
	Bug 1562330 - require NSPR version 4.22 r=jcj
	[ea8bc9f43de3] [tip]

2019-08-16  J.C. Jones  <jjones@mozilla.com>

	* cmd/selfserv/selfserv.c:
	Bug 1574220 - Fixup clang-format r=bustage
	[165664ff322c]

2019-08-15  Marcus Burghardt  <mburghardt@mozilla.com>

	* cmd/selfserv/selfserv.c, cmd/tstclnt/tstclnt.c,
	cmd/vfyserv/vfyserv.c:
	Bug 1574220 - Improve controls after errors in tstcln, selfserv and
	vfyserv cmds. r=kjacobs

	Differential Revision:
	https://phabricator.services.mozilla.com/D42165
	[32766e60ffa8]

2019-08-16  Marcus Burghardt  <mburghardt@mozilla.com>

	* lib/sqlite/README, lib/sqlite/sqlite3.c, lib/sqlite/sqlite3.h:
	Bug 1550636 - Upgrade SQLite in NSS to v3.29 (2019-07-10). r=jcj

	#define SQLITE_VERSION "3.29.0" #define SQLITE_VERSION_NUMBER
	3029000 #define SQLITE_SOURCE_ID "2019-07-10 17:32:03
	fc82b73eaac8b36950e527f12c4b5dc1e147e6f4ad2217ae43ad82882a88bfa6"

	Differential Revision:
	https://phabricator.services.mozilla.com/D42332
	[ed55badc848d]

2019-08-15  Marcus Burghardt  <mburghardt@mozilla.com>

	* lib/ckfw/builtins/certdata.txt, lib/ckfw/builtins/nssckbi.h:
	Bug 1566569 - Remove Swisscom Root CA 2 root certificate. r=jcj

	Differential Revision:
	https://phabricator.services.mozilla.com/D42161
	[660d7c210878]

Differential Revision: https://phabricator.services.mozilla.com/D42554

--HG--
extra : moz-landing-system : lando
2019-08-20 14:59:04 +00:00
J.C. Jones 2f955dea5e Bug 1550889 - land NSS 8082be3a6363 UPGRADE_NSS_RELEASE, r=me
--HG--
extra : rebase_source : 84cb27998d0b4e36d9a7d388e3a8b2a4fc3bb886
2019-06-04 19:39:40 +00:00
J.C. Jones 129044424e Bug 1523175 - land NSS a306d84e4c70 UPGRADE_NSS_RELEASE, r=me
--HG--
extra : rebase_source : bef6e6945c8f62707a5daa51bd1a1092769c9c20
2019-03-06 21:10:05 +00:00
J.C. Jones 575ca0635e Bug 1501587 - land NSS 59ef418bf925 UPGRADE_NSS_RELEASE, r=me
--HG--
extra : rebase_source : eaecdaf6823452cc8bf1a90d714f29817aea677d
2018-11-16 18:24:27 +00:00
J.C. Jones 0e1d7b0f31 Bug 1488622 - land NSS dc4500650617 UPGRADE_NSS_RELEASE, r=me
--HG--
extra : rebase_source : 9872909728a147458f9abc4da053eb934e6b9fc2
2018-10-04 08:39:38 -07:00
J.C. Jones 9ddc263762 Bug 1470914 - land NSS d3f512d4f76e UPGRADE_NSS_RELEASE, r=me
--HG--
extra : rebase_source : b1659503f5e91eae88beb66f129719960303c7fa
2018-08-21 11:07:22 -07:00
Franziskus Kiefer 83ef3e317f Bug 1470914 - land NSS 01d970fe9048 UPGRADE_NSS_RELEASE, r=me 2018-08-10 10:13:05 +02:00
Franziskus Kiefer e279c84c4e Bug 1470914 - land NSS e2a0d66b122f UPGRADE_NSS_RELEASE, r=me
--HG--
extra : rebase_source : 078fe0962637a3888c6a874e2f5d3690ae5aaaab
2018-08-02 12:53:56 +02:00
Kai Engert d31699eaa2 Bug 1460617, land NSS 30a4b03cd9d1 UPGRADE_NSS_RELEASE, r=me 2018-06-11 20:12:02 +02:00
J.C. Jones 61f85fbe96 Bug 1445731 - land NSS NSS_3_37_BETA2 UPGRADE_NSS_RELEASE, r=me
--HG--
extra : rebase_source : b68bb60ebd5ac7037d71c8db6acec29802220a5c
2018-04-26 15:32:24 +02:00
Kai Engert 45369f09f3 Bug 1445731, land NSS 2eefd697d661 UPGRADE_NSS_RELEASE, r=me 2018-04-11 12:54:08 +02:00
J.C. Jones 7c82a66a30 Bug 1445731 - land NSS f0d4789c8916 UPGRADE_NSS_RELEASE, r=me
--HG--
extra : rebase_source : e5f6d2e5e607bc624847e5b95904be2901832368
2018-03-15 09:00:48 -07:00
Andreea Pavel 6806e8f5fb Backed out changeset 4ea43e2a1cfe (bug 1445731) for build bustages at /src/security/nss/lib/freebl/verified/Hacl_Poly1305_32 UPGRADE_NSS_RELEASE on a CLOSED TREE
--HG--
extra : amend_source : e796e93d1564e3e2b027706bc1ceecb3ba522658
2018-03-14 23:40:59 +02:00
J.C. Jones 1dff7556da Bug 1445731 - land NSS 1053cc7b45a2 UPGRADE_NSS_RELEASE, r=me
--HG--
extra : rebase_source : 1733d079f1f028e6f7fc04c62072586f0821d590
2018-03-14 12:34:59 -07:00
Kai Engert 14be89415f Bug 1420060, NSS_3_35_BETA1, r=franziskus
UPGRADE_NSS_RELEASE
2018-01-11 14:09:34 +01:00
Andreea Pavel 5967533f02 Backed out 4 changesets (bug 1428538, bug 1420060) for mochitest mass failures UPGRADE_NSS_RELEASE on a CLOSED TREE
Backed out changeset 7604bcd50b63 (bug 1420060)
Backed out changeset 7ce1e0ca10e1 (bug 1420060)
Backed out changeset 617446a093ba (bug 1428538)
Backed out changeset fb3c27bdee46 (bug 1420060)
2018-01-11 17:35:54 +02:00
Kai Engert d0abca54ea Bug 1420060, NSS_3_35_BETA1, r=franziskus
UPGRADE_NSS_RELEASE
2018-01-11 14:09:34 +01:00
Franziskus Kiefer 34900c8a57 Bug 1420060 - land NSS ceb8b9290b35 UPGRADE_NSS_RELEASE, r=me
MozReview-Commit-ID: KprUV50uNDs

--HG--
extra : rebase_source : d67b83423351ac6581889cc95ec979a6f12adc07
2017-11-24 09:00:26 +01:00
Narcis Beleuzu 7a3fd77e08 Backed out 1 changesets (bug 1420060) for xpcshell failures on test_pkcs11_module.js UPGRADE_NSS_RELEASE r=backout on a CLOSED TREE
Backed out changeset 40f90a8fd17d (bug 1420060)

--HG--
extra : amend_source : ea50b2af35e98b81b44cf1d0819d4c532337620e
2017-11-23 14:01:48 +02:00
Franziskus Kiefer 792a2a70b1 Bug 1420060 - land NSS ff7594d3dc94 UPGRADE_NSS_RELEASE, r=me
MozReview-Commit-ID: HHsghX4dI4v

--HG--
extra : rebase_source : 69b01777bfd8d43f4c46fb07638f58dd5b1a496c
2017-11-23 08:11:33 +01:00
Franziskus Kiefer 1db8f13af3 Bug 1401594 - land NSS NSS_3_34_BETA1 UPGRADE_NSS_RELEASE, r=me
MozReview-Commit-ID: 8ckNdJ29KWZ

--HG--
extra : rebase_source : 9766af247842aabce5e46c4a8d1d03c3f70d21f7
2017-11-01 15:38:36 +01:00
Franziskus Kiefer 84cdbc91a3 Bug 1370890 - land NSS f212be04f3d0 UPGRADE_NSS_RELEASE, r=me
--HG--
extra : rebase_source : 82c0c1e7b6487693fb0ace15edb374f95a9c0208
2017-07-24 10:12:57 +02:00
Franziskus Kiefer 747a09639e Bug 1345368 - land NSS NSS_3_31_BETA2 UPGRADE_NSS_RELEASE, r=me
--HG--
extra : rebase_source : 3999b2f4d1c47a92c19c39cafd6d9c4c45a85383
2017-06-07 09:21:08 +02:00
Franziskus Kiefer 8cab0b55cc Bug 1345368 - land NSS 7228445b43ac, r=me 2017-04-10 06:00:57 +02:00
Franziskus Kiefer 6d466422fe Bug 1334127 - land NSS 01d6c0dff06f, r=me
--HG--
extra : rebase_source : 37ce5889894c3a0208c91c2fa254ab6a8c9ba080
2017-02-13 14:27:06 +01:00
Iris Hsiao a6c34c64b9 Backed out changeset e9dca250a3d3 (bug 1334127) for bustage
CLOSED TREE

--HG--
extra : amend_source : 02d5e0e8325bc48c3db78028eaf7f76e2ac49918
2017-02-10 13:59:10 +08:00
Franziskus Kiefer d091075635 Bug 1334127 - land NSS 2acb84c21d9d, r=me
--HG--
extra : rebase_source : f58e2cfc0cd395556fe778d173c24304f31381e7
2017-02-10 06:00:45 +01:00
Franziskus Kiefer 3594725777 Bug 1317947 - land NSS ee21c9892907, r=me 2017-01-21 14:23:56 +01:00
Carsten "Tomcat" Book 54bb953576 Backed out changeset 2164277367cc (bug 1317947) for causing timeouts in devtools tests on a CLOSED TREE
--HG--
extra : amend_source : f93373ccd4b50914ad5ef3fdf64cceab78d66c37
2017-01-19 10:08:33 +01:00
Franziskus Kiefer e37236bc1f Bug 1317947 - land NSS ea43fcc316e1, r=me
--HG--
extra : rebase_source : dcb24fa91fba4e99e4bc2cb254fe4f7d3a66be2f
2017-01-19 08:52:18 +01:00
Franziskus Kiefer c1dcd56a7f Bug 1317947 - land NSS 0x5b7a40ced8c5, r=me
--HG--
rename : security/nss/lib/freebl/mpi/mpi-test.c => security/nss/cmd/mpitests/mpi-test.c
rename : security/nss/fuzz/nssfuzz/nssfuzz.cc => security/nss/fuzz/nssfuzz.cc
rename : security/nss/fuzz/nssfuzz/pkcs8_target.cc => security/nss/fuzz/pkcs8_target.cc
rename : security/nss/fuzz/nssfuzz/registry.h => security/nss/fuzz/registry.h
rename : security/nss/fuzz/nssfuzz/shared.h => security/nss/fuzz/shared.h
rename : security/nss/fuzz/nssfuzz/spki_target.cc => security/nss/fuzz/spki_target.cc
extra : rebase_source : ef621e66851a468310a99393ce93ba485f2fc532
2016-11-16 14:06:23 +01:00
Franziskus Kiefer 41795a76c0 Bug 1305970 - land NSS 0x0cccc59d04dd, r=me
--HG--
rename : security/nss/external_tests/.clang-format => security/nss/gtests/.clang-format
rename : security/nss/external_tests/Makefile => security/nss/gtests/Makefile
rename : security/nss/external_tests/README => security/nss/gtests/README
rename : security/nss/external_tests/common/Makefile => security/nss/gtests/common/Makefile
rename : security/nss/external_tests/common/gtest.mk => security/nss/gtests/common/gtest.mk
rename : security/nss/external_tests/common/gtests.cc => security/nss/gtests/common/gtests.cc
rename : security/nss/external_tests/common/scoped_ptrs.h => security/nss/gtests/common/scoped_ptrs.h
rename : security/nss/external_tests/der_gtest/Makefile => security/nss/gtests/der_gtest/Makefile
rename : security/nss/external_tests/der_gtest/der_getint_unittest.cc => security/nss/gtests/der_gtest/der_getint_unittest.cc
rename : security/nss/external_tests/der_gtest/der_private_key_import_unittest.cc => security/nss/gtests/der_gtest/der_private_key_import_unittest.cc
rename : security/nss/external_tests/google_test/Makefile => security/nss/gtests/google_test/Makefile
rename : security/nss/external_tests/google_test/google_test.gyp => security/nss/gtests/google_test/google_test.gyp
rename : security/nss/external_tests/google_test/gtest/CHANGES => security/nss/gtests/google_test/gtest/CHANGES
rename : security/nss/external_tests/google_test/gtest/CMakeLists.txt => security/nss/gtests/google_test/gtest/CMakeLists.txt
rename : security/nss/external_tests/google_test/gtest/CONTRIBUTORS => security/nss/gtests/google_test/gtest/CONTRIBUTORS
rename : security/nss/external_tests/google_test/gtest/LICENSE => security/nss/gtests/google_test/gtest/LICENSE
rename : security/nss/external_tests/google_test/gtest/Makefile.am => security/nss/gtests/google_test/gtest/Makefile.am
rename : security/nss/external_tests/google_test/gtest/README => security/nss/gtests/google_test/gtest/README
rename : security/nss/external_tests/google_test/gtest/cmake/internal_utils.cmake => security/nss/gtests/google_test/gtest/cmake/internal_utils.cmake
rename : security/nss/external_tests/google_test/gtest/codegear/gtest.cbproj => security/nss/gtests/google_test/gtest/codegear/gtest.cbproj
rename : security/nss/external_tests/google_test/gtest/codegear/gtest.groupproj => security/nss/gtests/google_test/gtest/codegear/gtest.groupproj
rename : security/nss/external_tests/google_test/gtest/codegear/gtest_all.cc => security/nss/gtests/google_test/gtest/codegear/gtest_all.cc
rename : security/nss/external_tests/google_test/gtest/codegear/gtest_link.cc => security/nss/gtests/google_test/gtest/codegear/gtest_link.cc
rename : security/nss/external_tests/google_test/gtest/codegear/gtest_main.cbproj => security/nss/gtests/google_test/gtest/codegear/gtest_main.cbproj
rename : security/nss/external_tests/google_test/gtest/codegear/gtest_unittest.cbproj => security/nss/gtests/google_test/gtest/codegear/gtest_unittest.cbproj
rename : security/nss/external_tests/google_test/gtest/configure.ac => security/nss/gtests/google_test/gtest/configure.ac
rename : security/nss/external_tests/google_test/gtest/include/gtest/gtest-death-test.h => security/nss/gtests/google_test/gtest/include/gtest/gtest-death-test.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/gtest-message.h => security/nss/gtests/google_test/gtest/include/gtest/gtest-message.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/gtest-param-test.h => security/nss/gtests/google_test/gtest/include/gtest/gtest-param-test.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/gtest-param-test.h.pump => security/nss/gtests/google_test/gtest/include/gtest/gtest-param-test.h.pump
rename : security/nss/external_tests/google_test/gtest/include/gtest/gtest-printers.h => security/nss/gtests/google_test/gtest/include/gtest/gtest-printers.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/gtest-spi.h => security/nss/gtests/google_test/gtest/include/gtest/gtest-spi.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/gtest-test-part.h => security/nss/gtests/google_test/gtest/include/gtest/gtest-test-part.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/gtest-typed-test.h => security/nss/gtests/google_test/gtest/include/gtest/gtest-typed-test.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/gtest.h => security/nss/gtests/google_test/gtest/include/gtest/gtest.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/gtest_pred_impl.h => security/nss/gtests/google_test/gtest/include/gtest/gtest_pred_impl.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/gtest_prod.h => security/nss/gtests/google_test/gtest/include/gtest/gtest_prod.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-death-test-internal.h => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-death-test-internal.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-filepath.h => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-filepath.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-internal.h => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-internal.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-linked_ptr.h => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-linked_ptr.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-param-util-generated.h => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-param-util-generated.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-param-util-generated.h.pump => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-param-util-generated.h.pump
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-param-util.h => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-param-util.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-port.h => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-port.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-string.h => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-string.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-tuple.h => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-tuple.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-tuple.h.pump => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-tuple.h.pump
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-type-util.h => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-type-util.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-type-util.h.pump => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-type-util.h.pump
rename : security/nss/external_tests/google_test/gtest/m4/acx_pthread.m4 => security/nss/gtests/google_test/gtest/m4/acx_pthread.m4
rename : security/nss/external_tests/google_test/gtest/m4/gtest.m4 => security/nss/gtests/google_test/gtest/m4/gtest.m4
rename : security/nss/external_tests/google_test/gtest/make/Makefile => security/nss/gtests/google_test/gtest/make/Makefile
rename : security/nss/external_tests/google_test/gtest/msvc/gtest-md.sln => security/nss/gtests/google_test/gtest/msvc/gtest-md.sln
rename : security/nss/external_tests/google_test/gtest/msvc/gtest-md.vcproj => security/nss/gtests/google_test/gtest/msvc/gtest-md.vcproj
rename : security/nss/external_tests/google_test/gtest/msvc/gtest.sln => security/nss/gtests/google_test/gtest/msvc/gtest.sln
rename : security/nss/external_tests/google_test/gtest/msvc/gtest.vcproj => security/nss/gtests/google_test/gtest/msvc/gtest.vcproj
rename : security/nss/external_tests/google_test/gtest/msvc/gtest_main-md.vcproj => security/nss/gtests/google_test/gtest/msvc/gtest_main-md.vcproj
rename : security/nss/external_tests/google_test/gtest/msvc/gtest_main.vcproj => security/nss/gtests/google_test/gtest/msvc/gtest_main.vcproj
rename : security/nss/external_tests/google_test/gtest/msvc/gtest_prod_test-md.vcproj => security/nss/gtests/google_test/gtest/msvc/gtest_prod_test-md.vcproj
rename : security/nss/external_tests/google_test/gtest/msvc/gtest_prod_test.vcproj => security/nss/gtests/google_test/gtest/msvc/gtest_prod_test.vcproj
rename : security/nss/external_tests/google_test/gtest/msvc/gtest_unittest-md.vcproj => security/nss/gtests/google_test/gtest/msvc/gtest_unittest-md.vcproj
rename : security/nss/external_tests/google_test/gtest/msvc/gtest_unittest.vcproj => security/nss/gtests/google_test/gtest/msvc/gtest_unittest.vcproj
rename : security/nss/external_tests/google_test/gtest/samples/prime_tables.h => security/nss/gtests/google_test/gtest/samples/prime_tables.h
rename : security/nss/external_tests/google_test/gtest/samples/sample1.cc => security/nss/gtests/google_test/gtest/samples/sample1.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample1.h => security/nss/gtests/google_test/gtest/samples/sample1.h
rename : security/nss/external_tests/google_test/gtest/samples/sample10_unittest.cc => security/nss/gtests/google_test/gtest/samples/sample10_unittest.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample1_unittest.cc => security/nss/gtests/google_test/gtest/samples/sample1_unittest.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample2.cc => security/nss/gtests/google_test/gtest/samples/sample2.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample2.h => security/nss/gtests/google_test/gtest/samples/sample2.h
rename : security/nss/external_tests/google_test/gtest/samples/sample2_unittest.cc => security/nss/gtests/google_test/gtest/samples/sample2_unittest.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample3-inl.h => security/nss/gtests/google_test/gtest/samples/sample3-inl.h
rename : security/nss/external_tests/google_test/gtest/samples/sample3_unittest.cc => security/nss/gtests/google_test/gtest/samples/sample3_unittest.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample4.cc => security/nss/gtests/google_test/gtest/samples/sample4.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample4.h => security/nss/gtests/google_test/gtest/samples/sample4.h
rename : security/nss/external_tests/google_test/gtest/samples/sample4_unittest.cc => security/nss/gtests/google_test/gtest/samples/sample4_unittest.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample5_unittest.cc => security/nss/gtests/google_test/gtest/samples/sample5_unittest.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample6_unittest.cc => security/nss/gtests/google_test/gtest/samples/sample6_unittest.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample7_unittest.cc => security/nss/gtests/google_test/gtest/samples/sample7_unittest.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample8_unittest.cc => security/nss/gtests/google_test/gtest/samples/sample8_unittest.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample9_unittest.cc => security/nss/gtests/google_test/gtest/samples/sample9_unittest.cc
rename : security/nss/external_tests/google_test/gtest/scripts/common.py => security/nss/gtests/google_test/gtest/scripts/common.py
rename : security/nss/external_tests/google_test/gtest/scripts/fuse_gtest_files.py => security/nss/gtests/google_test/gtest/scripts/fuse_gtest_files.py
rename : security/nss/external_tests/google_test/gtest/scripts/gen_gtest_pred_impl.py => security/nss/gtests/google_test/gtest/scripts/gen_gtest_pred_impl.py
rename : security/nss/external_tests/google_test/gtest/scripts/gtest-config.in => security/nss/gtests/google_test/gtest/scripts/gtest-config.in
rename : security/nss/external_tests/google_test/gtest/scripts/pump.py => security/nss/gtests/google_test/gtest/scripts/pump.py
rename : security/nss/external_tests/google_test/gtest/scripts/release_docs.py => security/nss/gtests/google_test/gtest/scripts/release_docs.py
rename : security/nss/external_tests/google_test/gtest/scripts/test/Makefile => security/nss/gtests/google_test/gtest/scripts/test/Makefile
rename : security/nss/external_tests/google_test/gtest/scripts/upload.py => security/nss/gtests/google_test/gtest/scripts/upload.py
rename : security/nss/external_tests/google_test/gtest/scripts/upload_gtest.py => security/nss/gtests/google_test/gtest/scripts/upload_gtest.py
rename : security/nss/external_tests/google_test/gtest/src/gtest-all.cc => security/nss/gtests/google_test/gtest/src/gtest-all.cc
rename : security/nss/external_tests/google_test/gtest/src/gtest-death-test.cc => security/nss/gtests/google_test/gtest/src/gtest-death-test.cc
rename : security/nss/external_tests/google_test/gtest/src/gtest-filepath.cc => security/nss/gtests/google_test/gtest/src/gtest-filepath.cc
rename : security/nss/external_tests/google_test/gtest/src/gtest-internal-inl.h => security/nss/gtests/google_test/gtest/src/gtest-internal-inl.h
rename : security/nss/external_tests/google_test/gtest/src/gtest-port.cc => security/nss/gtests/google_test/gtest/src/gtest-port.cc
rename : security/nss/external_tests/google_test/gtest/src/gtest-printers.cc => security/nss/gtests/google_test/gtest/src/gtest-printers.cc
rename : security/nss/external_tests/google_test/gtest/src/gtest-test-part.cc => security/nss/gtests/google_test/gtest/src/gtest-test-part.cc
rename : security/nss/external_tests/google_test/gtest/src/gtest-typed-test.cc => security/nss/gtests/google_test/gtest/src/gtest-typed-test.cc
rename : security/nss/external_tests/google_test/gtest/src/gtest.cc => security/nss/gtests/google_test/gtest/src/gtest.cc
rename : security/nss/external_tests/google_test/gtest/src/gtest_main.cc => security/nss/gtests/google_test/gtest/src/gtest_main.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-death-test_ex_test.cc => security/nss/gtests/google_test/gtest/test/gtest-death-test_ex_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-death-test_test.cc => security/nss/gtests/google_test/gtest/test/gtest-death-test_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-filepath_test.cc => security/nss/gtests/google_test/gtest/test/gtest-filepath_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-linked_ptr_test.cc => security/nss/gtests/google_test/gtest/test/gtest-linked_ptr_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-listener_test.cc => security/nss/gtests/google_test/gtest/test/gtest-listener_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-message_test.cc => security/nss/gtests/google_test/gtest/test/gtest-message_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-options_test.cc => security/nss/gtests/google_test/gtest/test/gtest-options_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-param-test2_test.cc => security/nss/gtests/google_test/gtest/test/gtest-param-test2_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-param-test_test.cc => security/nss/gtests/google_test/gtest/test/gtest-param-test_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-param-test_test.h => security/nss/gtests/google_test/gtest/test/gtest-param-test_test.h
rename : security/nss/external_tests/google_test/gtest/test/gtest-port_test.cc => security/nss/gtests/google_test/gtest/test/gtest-port_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-printers_test.cc => security/nss/gtests/google_test/gtest/test/gtest-printers_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-test-part_test.cc => security/nss/gtests/google_test/gtest/test/gtest-test-part_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-tuple_test.cc => security/nss/gtests/google_test/gtest/test/gtest-tuple_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-typed-test2_test.cc => security/nss/gtests/google_test/gtest/test/gtest-typed-test2_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-typed-test_test.cc => security/nss/gtests/google_test/gtest/test/gtest-typed-test_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-typed-test_test.h => security/nss/gtests/google_test/gtest/test/gtest-typed-test_test.h
rename : security/nss/external_tests/google_test/gtest/test/gtest-unittest-api_test.cc => security/nss/gtests/google_test/gtest/test/gtest-unittest-api_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_all_test.cc => security/nss/gtests/google_test/gtest/test/gtest_all_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_break_on_failure_unittest.py => security/nss/gtests/google_test/gtest/test/gtest_break_on_failure_unittest.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_break_on_failure_unittest_.cc => security/nss/gtests/google_test/gtest/test/gtest_break_on_failure_unittest_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_catch_exceptions_test.py => security/nss/gtests/google_test/gtest/test/gtest_catch_exceptions_test.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_catch_exceptions_test_.cc => security/nss/gtests/google_test/gtest/test/gtest_catch_exceptions_test_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_color_test.py => security/nss/gtests/google_test/gtest/test/gtest_color_test.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_color_test_.cc => security/nss/gtests/google_test/gtest/test/gtest_color_test_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_env_var_test.py => security/nss/gtests/google_test/gtest/test/gtest_env_var_test.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_env_var_test_.cc => security/nss/gtests/google_test/gtest/test/gtest_env_var_test_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_environment_test.cc => security/nss/gtests/google_test/gtest/test/gtest_environment_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_filter_unittest.py => security/nss/gtests/google_test/gtest/test/gtest_filter_unittest.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_filter_unittest_.cc => security/nss/gtests/google_test/gtest/test/gtest_filter_unittest_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_help_test.py => security/nss/gtests/google_test/gtest/test/gtest_help_test.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_help_test_.cc => security/nss/gtests/google_test/gtest/test/gtest_help_test_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_list_tests_unittest.py => security/nss/gtests/google_test/gtest/test/gtest_list_tests_unittest.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_list_tests_unittest_.cc => security/nss/gtests/google_test/gtest/test/gtest_list_tests_unittest_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_main_unittest.cc => security/nss/gtests/google_test/gtest/test/gtest_main_unittest.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_no_test_unittest.cc => security/nss/gtests/google_test/gtest/test/gtest_no_test_unittest.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_output_test.py => security/nss/gtests/google_test/gtest/test/gtest_output_test.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_output_test_.cc => security/nss/gtests/google_test/gtest/test/gtest_output_test_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_output_test_golden_lin.txt => security/nss/gtests/google_test/gtest/test/gtest_output_test_golden_lin.txt
rename : security/nss/external_tests/google_test/gtest/test/gtest_pred_impl_unittest.cc => security/nss/gtests/google_test/gtest/test/gtest_pred_impl_unittest.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_premature_exit_test.cc => security/nss/gtests/google_test/gtest/test/gtest_premature_exit_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_prod_test.cc => security/nss/gtests/google_test/gtest/test/gtest_prod_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_repeat_test.cc => security/nss/gtests/google_test/gtest/test/gtest_repeat_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_shuffle_test.py => security/nss/gtests/google_test/gtest/test/gtest_shuffle_test.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_shuffle_test_.cc => security/nss/gtests/google_test/gtest/test/gtest_shuffle_test_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_sole_header_test.cc => security/nss/gtests/google_test/gtest/test/gtest_sole_header_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_stress_test.cc => security/nss/gtests/google_test/gtest/test/gtest_stress_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_test_utils.py => security/nss/gtests/google_test/gtest/test/gtest_test_utils.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_throw_on_failure_ex_test.cc => security/nss/gtests/google_test/gtest/test/gtest_throw_on_failure_ex_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_throw_on_failure_test.py => security/nss/gtests/google_test/gtest/test/gtest_throw_on_failure_test.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_throw_on_failure_test_.cc => security/nss/gtests/google_test/gtest/test/gtest_throw_on_failure_test_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_uninitialized_test.py => security/nss/gtests/google_test/gtest/test/gtest_uninitialized_test.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_uninitialized_test_.cc => security/nss/gtests/google_test/gtest/test/gtest_uninitialized_test_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_unittest.cc => security/nss/gtests/google_test/gtest/test/gtest_unittest.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_xml_outfile1_test_.cc => security/nss/gtests/google_test/gtest/test/gtest_xml_outfile1_test_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_xml_outfile2_test_.cc => security/nss/gtests/google_test/gtest/test/gtest_xml_outfile2_test_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_xml_outfiles_test.py => security/nss/gtests/google_test/gtest/test/gtest_xml_outfiles_test.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_xml_output_unittest.py => security/nss/gtests/google_test/gtest/test/gtest_xml_output_unittest.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_xml_output_unittest_.cc => security/nss/gtests/google_test/gtest/test/gtest_xml_output_unittest_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_xml_test_utils.py => security/nss/gtests/google_test/gtest/test/gtest_xml_test_utils.py
rename : security/nss/external_tests/google_test/gtest/test/production.cc => security/nss/gtests/google_test/gtest/test/production.cc
rename : security/nss/external_tests/google_test/gtest/test/production.h => security/nss/gtests/google_test/gtest/test/production.h
rename : security/nss/external_tests/google_test/gtest/xcode/Config/DebugProject.xcconfig => security/nss/gtests/google_test/gtest/xcode/Config/DebugProject.xcconfig
rename : security/nss/external_tests/google_test/gtest/xcode/Config/FrameworkTarget.xcconfig => security/nss/gtests/google_test/gtest/xcode/Config/FrameworkTarget.xcconfig
rename : security/nss/external_tests/google_test/gtest/xcode/Config/General.xcconfig => security/nss/gtests/google_test/gtest/xcode/Config/General.xcconfig
rename : security/nss/external_tests/google_test/gtest/xcode/Config/ReleaseProject.xcconfig => security/nss/gtests/google_test/gtest/xcode/Config/ReleaseProject.xcconfig
rename : security/nss/external_tests/google_test/gtest/xcode/Config/StaticLibraryTarget.xcconfig => security/nss/gtests/google_test/gtest/xcode/Config/StaticLibraryTarget.xcconfig
rename : security/nss/external_tests/google_test/gtest/xcode/Config/TestTarget.xcconfig => security/nss/gtests/google_test/gtest/xcode/Config/TestTarget.xcconfig
rename : security/nss/external_tests/google_test/gtest/xcode/Resources/Info.plist => security/nss/gtests/google_test/gtest/xcode/Resources/Info.plist
rename : security/nss/external_tests/google_test/gtest/xcode/Samples/FrameworkSample/Info.plist => security/nss/gtests/google_test/gtest/xcode/Samples/FrameworkSample/Info.plist
rename : security/nss/external_tests/google_test/gtest/xcode/Samples/FrameworkSample/WidgetFramework.xcodeproj/project.pbxproj => security/nss/gtests/google_test/gtest/xcode/Samples/FrameworkSample/WidgetFramework.xcodeproj/project.pbxproj
rename : security/nss/external_tests/google_test/gtest/xcode/Samples/FrameworkSample/runtests.sh => security/nss/gtests/google_test/gtest/xcode/Samples/FrameworkSample/runtests.sh
rename : security/nss/external_tests/google_test/gtest/xcode/Samples/FrameworkSample/widget.cc => security/nss/gtests/google_test/gtest/xcode/Samples/FrameworkSample/widget.cc
rename : security/nss/external_tests/google_test/gtest/xcode/Samples/FrameworkSample/widget.h => security/nss/gtests/google_test/gtest/xcode/Samples/FrameworkSample/widget.h
rename : security/nss/external_tests/google_test/gtest/xcode/Samples/FrameworkSample/widget_test.cc => security/nss/gtests/google_test/gtest/xcode/Samples/FrameworkSample/widget_test.cc
rename : security/nss/external_tests/google_test/gtest/xcode/Scripts/runtests.sh => security/nss/gtests/google_test/gtest/xcode/Scripts/runtests.sh
rename : security/nss/external_tests/google_test/gtest/xcode/Scripts/versiongenerate.py => security/nss/gtests/google_test/gtest/xcode/Scripts/versiongenerate.py
rename : security/nss/external_tests/google_test/gtest/xcode/gtest.xcodeproj/project.pbxproj => security/nss/gtests/google_test/gtest/xcode/gtest.xcodeproj/project.pbxproj
rename : security/nss/external_tests/google_test/manifest.mn => security/nss/gtests/google_test/manifest.mn
rename : security/nss/external_tests/manifest.mn => security/nss/gtests/manifest.mn
rename : security/nss/external_tests/nss_bogo_shim/Makefile => security/nss/gtests/nss_bogo_shim/Makefile
rename : security/nss/external_tests/nss_bogo_shim/config.cc => security/nss/gtests/nss_bogo_shim/config.cc
rename : security/nss/external_tests/nss_bogo_shim/config.h => security/nss/gtests/nss_bogo_shim/config.h
rename : security/nss/external_tests/nss_bogo_shim/config.json => security/nss/gtests/nss_bogo_shim/config.json
rename : security/nss/external_tests/nss_bogo_shim/manifest.mn => security/nss/gtests/nss_bogo_shim/manifest.mn
rename : security/nss/external_tests/nss_bogo_shim/nss_bogo_shim.cc => security/nss/gtests/nss_bogo_shim/nss_bogo_shim.cc
rename : security/nss/external_tests/nss_bogo_shim/nsskeys.cc => security/nss/gtests/nss_bogo_shim/nsskeys.cc
rename : security/nss/external_tests/nss_bogo_shim/nsskeys.h => security/nss/gtests/nss_bogo_shim/nsskeys.h
rename : security/nss/external_tests/der_gtest/Makefile => security/nss/gtests/pk11_gtest/Makefile
rename : security/nss/external_tests/pk11_gtest/pk11_aeskeywrap_unittest.cc => security/nss/gtests/pk11_gtest/pk11_aeskeywrap_unittest.cc
rename : security/nss/external_tests/pk11_gtest/pk11_chacha20poly1305_unittest.cc => security/nss/gtests/pk11_gtest/pk11_chacha20poly1305_unittest.cc
rename : security/nss/external_tests/pk11_gtest/pk11_export_unittest.cc => security/nss/gtests/pk11_gtest/pk11_export_unittest.cc
rename : security/nss/external_tests/pk11_gtest/pk11_pbkdf2_unittest.cc => security/nss/gtests/pk11_gtest/pk11_pbkdf2_unittest.cc
rename : security/nss/external_tests/pk11_gtest/pk11_prf_unittest.cc => security/nss/gtests/pk11_gtest/pk11_prf_unittest.cc
rename : security/nss/external_tests/pk11_gtest/pk11_rsapss_unittest.cc => security/nss/gtests/pk11_gtest/pk11_rsapss_unittest.cc
rename : security/nss/external_tests/ssl_gtest/Makefile => security/nss/gtests/ssl_gtest/Makefile
rename : security/nss/external_tests/ssl_gtest/databuffer.h => security/nss/gtests/ssl_gtest/databuffer.h
rename : security/nss/external_tests/ssl_gtest/gtest_utils.h => security/nss/gtests/ssl_gtest/gtest_utils.h
rename : security/nss/external_tests/ssl_gtest/libssl_internals.c => security/nss/gtests/ssl_gtest/libssl_internals.c
rename : security/nss/external_tests/ssl_gtest/libssl_internals.h => security/nss/gtests/ssl_gtest/libssl_internals.h
rename : security/nss/external_tests/ssl_gtest/ssl_0rtt_unittest.cc => security/nss/gtests/ssl_gtest/ssl_0rtt_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_agent_unittest.cc => security/nss/gtests/ssl_gtest/ssl_agent_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_auth_unittest.cc => security/nss/gtests/ssl_gtest/ssl_auth_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_cert_ext_unittest.cc => security/nss/gtests/ssl_gtest/ssl_cert_ext_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_ciphersuite_unittest.cc => security/nss/gtests/ssl_gtest/ssl_ciphersuite_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_damage_unittest.cc => security/nss/gtests/ssl_gtest/ssl_damage_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_dhe_unittest.cc => security/nss/gtests/ssl_gtest/ssl_dhe_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_drop_unittest.cc => security/nss/gtests/ssl_gtest/ssl_drop_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_ecdh_unittest.cc => security/nss/gtests/ssl_gtest/ssl_ecdh_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_ems_unittest.cc => security/nss/gtests/ssl_gtest/ssl_ems_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_extension_unittest.cc => security/nss/gtests/ssl_gtest/ssl_extension_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_gtest.cc => security/nss/gtests/ssl_gtest/ssl_gtest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_hrr_unittest.cc => security/nss/gtests/ssl_gtest/ssl_hrr_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_loopback_unittest.cc => security/nss/gtests/ssl_gtest/ssl_loopback_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_record_unittest.cc => security/nss/gtests/ssl_gtest/ssl_record_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_resumption_unittest.cc => security/nss/gtests/ssl_gtest/ssl_resumption_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_skip_unittest.cc => security/nss/gtests/ssl_gtest/ssl_skip_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_staticrsa_unittest.cc => security/nss/gtests/ssl_gtest/ssl_staticrsa_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_v2_client_hello_unittest.cc => security/nss/gtests/ssl_gtest/ssl_v2_client_hello_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_version_unittest.cc => security/nss/gtests/ssl_gtest/ssl_version_unittest.cc
rename : security/nss/external_tests/ssl_gtest/test_io.cc => security/nss/gtests/ssl_gtest/test_io.cc
rename : security/nss/external_tests/ssl_gtest/test_io.h => security/nss/gtests/ssl_gtest/test_io.h
rename : security/nss/external_tests/ssl_gtest/tls_agent.cc => security/nss/gtests/ssl_gtest/tls_agent.cc
rename : security/nss/external_tests/ssl_gtest/tls_agent.h => security/nss/gtests/ssl_gtest/tls_agent.h
rename : security/nss/external_tests/ssl_gtest/tls_connect.cc => security/nss/gtests/ssl_gtest/tls_connect.cc
rename : security/nss/external_tests/ssl_gtest/tls_connect.h => security/nss/gtests/ssl_gtest/tls_connect.h
rename : security/nss/external_tests/ssl_gtest/tls_filter.cc => security/nss/gtests/ssl_gtest/tls_filter.cc
rename : security/nss/external_tests/ssl_gtest/tls_filter.h => security/nss/gtests/ssl_gtest/tls_filter.h
rename : security/nss/external_tests/ssl_gtest/tls_hkdf_unittest.cc => security/nss/gtests/ssl_gtest/tls_hkdf_unittest.cc
rename : security/nss/external_tests/ssl_gtest/tls_parser.cc => security/nss/gtests/ssl_gtest/tls_parser.cc
rename : security/nss/external_tests/ssl_gtest/tls_parser.h => security/nss/gtests/ssl_gtest/tls_parser.h
rename : security/nss/external_tests/util_gtest/Makefile => security/nss/gtests/util_gtest/Makefile
rename : security/nss/external_tests/util_gtest/util_utf8_unittest.cc => security/nss/gtests/util_gtest/util_utf8_unittest.cc
extra : rebase_source : 526ff9352caf7c59048807e9606388ac2240840e
2016-11-02 10:29:58 +01:00
Franziskus Kiefer 2255a68eb0 Backed out changeset a1b7ab570480 (bug 1305970) for bustage 2016-10-31 14:49:43 +01:00
Franziskus Kiefer 428a6b19bb Bug 1305970 - land NSS 0xb9bf17853004, r=me
--HG--
rename : security/nss/external_tests/.clang-format => security/nss/gtests/.clang-format
rename : security/nss/external_tests/Makefile => security/nss/gtests/Makefile
rename : security/nss/external_tests/README => security/nss/gtests/README
rename : security/nss/external_tests/common/Makefile => security/nss/gtests/common/Makefile
rename : security/nss/external_tests/common/gtest.mk => security/nss/gtests/common/gtest.mk
rename : security/nss/external_tests/common/gtests.cc => security/nss/gtests/common/gtests.cc
rename : security/nss/external_tests/common/scoped_ptrs.h => security/nss/gtests/common/scoped_ptrs.h
rename : security/nss/external_tests/pk11_gtest/Makefile => security/nss/gtests/der_gtest/Makefile
rename : security/nss/external_tests/der_gtest/der_getint_unittest.cc => security/nss/gtests/der_gtest/der_getint_unittest.cc
rename : security/nss/external_tests/der_gtest/der_private_key_import_unittest.cc => security/nss/gtests/der_gtest/der_private_key_import_unittest.cc
rename : security/nss/external_tests/google_test/Makefile => security/nss/gtests/google_test/Makefile
rename : security/nss/external_tests/google_test/google_test.gyp => security/nss/gtests/google_test/google_test.gyp
rename : security/nss/external_tests/google_test/gtest/CHANGES => security/nss/gtests/google_test/gtest/CHANGES
rename : security/nss/external_tests/google_test/gtest/CMakeLists.txt => security/nss/gtests/google_test/gtest/CMakeLists.txt
rename : security/nss/external_tests/google_test/gtest/CONTRIBUTORS => security/nss/gtests/google_test/gtest/CONTRIBUTORS
rename : security/nss/external_tests/google_test/gtest/LICENSE => security/nss/gtests/google_test/gtest/LICENSE
rename : security/nss/external_tests/google_test/gtest/Makefile.am => security/nss/gtests/google_test/gtest/Makefile.am
rename : security/nss/external_tests/google_test/gtest/README => security/nss/gtests/google_test/gtest/README
rename : security/nss/external_tests/google_test/gtest/cmake/internal_utils.cmake => security/nss/gtests/google_test/gtest/cmake/internal_utils.cmake
rename : security/nss/external_tests/google_test/gtest/codegear/gtest.cbproj => security/nss/gtests/google_test/gtest/codegear/gtest.cbproj
rename : security/nss/external_tests/google_test/gtest/codegear/gtest.groupproj => security/nss/gtests/google_test/gtest/codegear/gtest.groupproj
rename : security/nss/external_tests/google_test/gtest/codegear/gtest_all.cc => security/nss/gtests/google_test/gtest/codegear/gtest_all.cc
rename : security/nss/external_tests/google_test/gtest/codegear/gtest_link.cc => security/nss/gtests/google_test/gtest/codegear/gtest_link.cc
rename : security/nss/external_tests/google_test/gtest/codegear/gtest_main.cbproj => security/nss/gtests/google_test/gtest/codegear/gtest_main.cbproj
rename : security/nss/external_tests/google_test/gtest/codegear/gtest_unittest.cbproj => security/nss/gtests/google_test/gtest/codegear/gtest_unittest.cbproj
rename : security/nss/external_tests/google_test/gtest/configure.ac => security/nss/gtests/google_test/gtest/configure.ac
rename : security/nss/external_tests/google_test/gtest/include/gtest/gtest-death-test.h => security/nss/gtests/google_test/gtest/include/gtest/gtest-death-test.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/gtest-message.h => security/nss/gtests/google_test/gtest/include/gtest/gtest-message.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/gtest-param-test.h => security/nss/gtests/google_test/gtest/include/gtest/gtest-param-test.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/gtest-param-test.h.pump => security/nss/gtests/google_test/gtest/include/gtest/gtest-param-test.h.pump
rename : security/nss/external_tests/google_test/gtest/include/gtest/gtest-printers.h => security/nss/gtests/google_test/gtest/include/gtest/gtest-printers.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/gtest-spi.h => security/nss/gtests/google_test/gtest/include/gtest/gtest-spi.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/gtest-test-part.h => security/nss/gtests/google_test/gtest/include/gtest/gtest-test-part.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/gtest-typed-test.h => security/nss/gtests/google_test/gtest/include/gtest/gtest-typed-test.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/gtest.h => security/nss/gtests/google_test/gtest/include/gtest/gtest.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/gtest_pred_impl.h => security/nss/gtests/google_test/gtest/include/gtest/gtest_pred_impl.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/gtest_prod.h => security/nss/gtests/google_test/gtest/include/gtest/gtest_prod.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-death-test-internal.h => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-death-test-internal.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-filepath.h => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-filepath.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-internal.h => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-internal.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-linked_ptr.h => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-linked_ptr.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-param-util-generated.h => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-param-util-generated.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-param-util-generated.h.pump => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-param-util-generated.h.pump
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-param-util.h => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-param-util.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-port.h => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-port.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-string.h => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-string.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-tuple.h => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-tuple.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-tuple.h.pump => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-tuple.h.pump
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-type-util.h => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-type-util.h
rename : security/nss/external_tests/google_test/gtest/include/gtest/internal/gtest-type-util.h.pump => security/nss/gtests/google_test/gtest/include/gtest/internal/gtest-type-util.h.pump
rename : security/nss/external_tests/google_test/gtest/m4/acx_pthread.m4 => security/nss/gtests/google_test/gtest/m4/acx_pthread.m4
rename : security/nss/external_tests/google_test/gtest/m4/gtest.m4 => security/nss/gtests/google_test/gtest/m4/gtest.m4
rename : security/nss/external_tests/google_test/gtest/make/Makefile => security/nss/gtests/google_test/gtest/make/Makefile
rename : security/nss/external_tests/google_test/gtest/msvc/gtest-md.sln => security/nss/gtests/google_test/gtest/msvc/gtest-md.sln
rename : security/nss/external_tests/google_test/gtest/msvc/gtest-md.vcproj => security/nss/gtests/google_test/gtest/msvc/gtest-md.vcproj
rename : security/nss/external_tests/google_test/gtest/msvc/gtest.sln => security/nss/gtests/google_test/gtest/msvc/gtest.sln
rename : security/nss/external_tests/google_test/gtest/msvc/gtest.vcproj => security/nss/gtests/google_test/gtest/msvc/gtest.vcproj
rename : security/nss/external_tests/google_test/gtest/msvc/gtest_main-md.vcproj => security/nss/gtests/google_test/gtest/msvc/gtest_main-md.vcproj
rename : security/nss/external_tests/google_test/gtest/msvc/gtest_main.vcproj => security/nss/gtests/google_test/gtest/msvc/gtest_main.vcproj
rename : security/nss/external_tests/google_test/gtest/msvc/gtest_prod_test-md.vcproj => security/nss/gtests/google_test/gtest/msvc/gtest_prod_test-md.vcproj
rename : security/nss/external_tests/google_test/gtest/msvc/gtest_prod_test.vcproj => security/nss/gtests/google_test/gtest/msvc/gtest_prod_test.vcproj
rename : security/nss/external_tests/google_test/gtest/msvc/gtest_unittest-md.vcproj => security/nss/gtests/google_test/gtest/msvc/gtest_unittest-md.vcproj
rename : security/nss/external_tests/google_test/gtest/msvc/gtest_unittest.vcproj => security/nss/gtests/google_test/gtest/msvc/gtest_unittest.vcproj
rename : security/nss/external_tests/google_test/gtest/samples/prime_tables.h => security/nss/gtests/google_test/gtest/samples/prime_tables.h
rename : security/nss/external_tests/google_test/gtest/samples/sample1.cc => security/nss/gtests/google_test/gtest/samples/sample1.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample1.h => security/nss/gtests/google_test/gtest/samples/sample1.h
rename : security/nss/external_tests/google_test/gtest/samples/sample10_unittest.cc => security/nss/gtests/google_test/gtest/samples/sample10_unittest.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample1_unittest.cc => security/nss/gtests/google_test/gtest/samples/sample1_unittest.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample2.cc => security/nss/gtests/google_test/gtest/samples/sample2.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample2.h => security/nss/gtests/google_test/gtest/samples/sample2.h
rename : security/nss/external_tests/google_test/gtest/samples/sample2_unittest.cc => security/nss/gtests/google_test/gtest/samples/sample2_unittest.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample3-inl.h => security/nss/gtests/google_test/gtest/samples/sample3-inl.h
rename : security/nss/external_tests/google_test/gtest/samples/sample3_unittest.cc => security/nss/gtests/google_test/gtest/samples/sample3_unittest.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample4.cc => security/nss/gtests/google_test/gtest/samples/sample4.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample4.h => security/nss/gtests/google_test/gtest/samples/sample4.h
rename : security/nss/external_tests/google_test/gtest/samples/sample4_unittest.cc => security/nss/gtests/google_test/gtest/samples/sample4_unittest.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample5_unittest.cc => security/nss/gtests/google_test/gtest/samples/sample5_unittest.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample6_unittest.cc => security/nss/gtests/google_test/gtest/samples/sample6_unittest.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample7_unittest.cc => security/nss/gtests/google_test/gtest/samples/sample7_unittest.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample8_unittest.cc => security/nss/gtests/google_test/gtest/samples/sample8_unittest.cc
rename : security/nss/external_tests/google_test/gtest/samples/sample9_unittest.cc => security/nss/gtests/google_test/gtest/samples/sample9_unittest.cc
rename : security/nss/external_tests/google_test/gtest/scripts/common.py => security/nss/gtests/google_test/gtest/scripts/common.py
rename : security/nss/external_tests/google_test/gtest/scripts/fuse_gtest_files.py => security/nss/gtests/google_test/gtest/scripts/fuse_gtest_files.py
rename : security/nss/external_tests/google_test/gtest/scripts/gen_gtest_pred_impl.py => security/nss/gtests/google_test/gtest/scripts/gen_gtest_pred_impl.py
rename : security/nss/external_tests/google_test/gtest/scripts/gtest-config.in => security/nss/gtests/google_test/gtest/scripts/gtest-config.in
rename : security/nss/external_tests/google_test/gtest/scripts/pump.py => security/nss/gtests/google_test/gtest/scripts/pump.py
rename : security/nss/external_tests/google_test/gtest/scripts/release_docs.py => security/nss/gtests/google_test/gtest/scripts/release_docs.py
rename : security/nss/external_tests/google_test/gtest/scripts/test/Makefile => security/nss/gtests/google_test/gtest/scripts/test/Makefile
rename : security/nss/external_tests/google_test/gtest/scripts/upload.py => security/nss/gtests/google_test/gtest/scripts/upload.py
rename : security/nss/external_tests/google_test/gtest/scripts/upload_gtest.py => security/nss/gtests/google_test/gtest/scripts/upload_gtest.py
rename : security/nss/external_tests/google_test/gtest/src/gtest-all.cc => security/nss/gtests/google_test/gtest/src/gtest-all.cc
rename : security/nss/external_tests/google_test/gtest/src/gtest-death-test.cc => security/nss/gtests/google_test/gtest/src/gtest-death-test.cc
rename : security/nss/external_tests/google_test/gtest/src/gtest-filepath.cc => security/nss/gtests/google_test/gtest/src/gtest-filepath.cc
rename : security/nss/external_tests/google_test/gtest/src/gtest-internal-inl.h => security/nss/gtests/google_test/gtest/src/gtest-internal-inl.h
rename : security/nss/external_tests/google_test/gtest/src/gtest-port.cc => security/nss/gtests/google_test/gtest/src/gtest-port.cc
rename : security/nss/external_tests/google_test/gtest/src/gtest-printers.cc => security/nss/gtests/google_test/gtest/src/gtest-printers.cc
rename : security/nss/external_tests/google_test/gtest/src/gtest-test-part.cc => security/nss/gtests/google_test/gtest/src/gtest-test-part.cc
rename : security/nss/external_tests/google_test/gtest/src/gtest-typed-test.cc => security/nss/gtests/google_test/gtest/src/gtest-typed-test.cc
rename : security/nss/external_tests/google_test/gtest/src/gtest.cc => security/nss/gtests/google_test/gtest/src/gtest.cc
rename : security/nss/external_tests/google_test/gtest/src/gtest_main.cc => security/nss/gtests/google_test/gtest/src/gtest_main.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-death-test_ex_test.cc => security/nss/gtests/google_test/gtest/test/gtest-death-test_ex_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-death-test_test.cc => security/nss/gtests/google_test/gtest/test/gtest-death-test_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-filepath_test.cc => security/nss/gtests/google_test/gtest/test/gtest-filepath_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-linked_ptr_test.cc => security/nss/gtests/google_test/gtest/test/gtest-linked_ptr_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-listener_test.cc => security/nss/gtests/google_test/gtest/test/gtest-listener_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-message_test.cc => security/nss/gtests/google_test/gtest/test/gtest-message_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-options_test.cc => security/nss/gtests/google_test/gtest/test/gtest-options_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-param-test2_test.cc => security/nss/gtests/google_test/gtest/test/gtest-param-test2_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-param-test_test.cc => security/nss/gtests/google_test/gtest/test/gtest-param-test_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-param-test_test.h => security/nss/gtests/google_test/gtest/test/gtest-param-test_test.h
rename : security/nss/external_tests/google_test/gtest/test/gtest-port_test.cc => security/nss/gtests/google_test/gtest/test/gtest-port_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-printers_test.cc => security/nss/gtests/google_test/gtest/test/gtest-printers_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-test-part_test.cc => security/nss/gtests/google_test/gtest/test/gtest-test-part_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-tuple_test.cc => security/nss/gtests/google_test/gtest/test/gtest-tuple_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-typed-test2_test.cc => security/nss/gtests/google_test/gtest/test/gtest-typed-test2_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-typed-test_test.cc => security/nss/gtests/google_test/gtest/test/gtest-typed-test_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest-typed-test_test.h => security/nss/gtests/google_test/gtest/test/gtest-typed-test_test.h
rename : security/nss/external_tests/google_test/gtest/test/gtest-unittest-api_test.cc => security/nss/gtests/google_test/gtest/test/gtest-unittest-api_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_all_test.cc => security/nss/gtests/google_test/gtest/test/gtest_all_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_break_on_failure_unittest.py => security/nss/gtests/google_test/gtest/test/gtest_break_on_failure_unittest.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_break_on_failure_unittest_.cc => security/nss/gtests/google_test/gtest/test/gtest_break_on_failure_unittest_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_catch_exceptions_test.py => security/nss/gtests/google_test/gtest/test/gtest_catch_exceptions_test.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_catch_exceptions_test_.cc => security/nss/gtests/google_test/gtest/test/gtest_catch_exceptions_test_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_color_test.py => security/nss/gtests/google_test/gtest/test/gtest_color_test.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_color_test_.cc => security/nss/gtests/google_test/gtest/test/gtest_color_test_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_env_var_test.py => security/nss/gtests/google_test/gtest/test/gtest_env_var_test.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_env_var_test_.cc => security/nss/gtests/google_test/gtest/test/gtest_env_var_test_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_environment_test.cc => security/nss/gtests/google_test/gtest/test/gtest_environment_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_filter_unittest.py => security/nss/gtests/google_test/gtest/test/gtest_filter_unittest.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_filter_unittest_.cc => security/nss/gtests/google_test/gtest/test/gtest_filter_unittest_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_help_test.py => security/nss/gtests/google_test/gtest/test/gtest_help_test.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_help_test_.cc => security/nss/gtests/google_test/gtest/test/gtest_help_test_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_list_tests_unittest.py => security/nss/gtests/google_test/gtest/test/gtest_list_tests_unittest.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_list_tests_unittest_.cc => security/nss/gtests/google_test/gtest/test/gtest_list_tests_unittest_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_main_unittest.cc => security/nss/gtests/google_test/gtest/test/gtest_main_unittest.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_no_test_unittest.cc => security/nss/gtests/google_test/gtest/test/gtest_no_test_unittest.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_output_test.py => security/nss/gtests/google_test/gtest/test/gtest_output_test.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_output_test_.cc => security/nss/gtests/google_test/gtest/test/gtest_output_test_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_output_test_golden_lin.txt => security/nss/gtests/google_test/gtest/test/gtest_output_test_golden_lin.txt
rename : security/nss/external_tests/google_test/gtest/test/gtest_pred_impl_unittest.cc => security/nss/gtests/google_test/gtest/test/gtest_pred_impl_unittest.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_premature_exit_test.cc => security/nss/gtests/google_test/gtest/test/gtest_premature_exit_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_prod_test.cc => security/nss/gtests/google_test/gtest/test/gtest_prod_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_repeat_test.cc => security/nss/gtests/google_test/gtest/test/gtest_repeat_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_shuffle_test.py => security/nss/gtests/google_test/gtest/test/gtest_shuffle_test.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_shuffle_test_.cc => security/nss/gtests/google_test/gtest/test/gtest_shuffle_test_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_sole_header_test.cc => security/nss/gtests/google_test/gtest/test/gtest_sole_header_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_stress_test.cc => security/nss/gtests/google_test/gtest/test/gtest_stress_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_test_utils.py => security/nss/gtests/google_test/gtest/test/gtest_test_utils.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_throw_on_failure_ex_test.cc => security/nss/gtests/google_test/gtest/test/gtest_throw_on_failure_ex_test.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_throw_on_failure_test.py => security/nss/gtests/google_test/gtest/test/gtest_throw_on_failure_test.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_throw_on_failure_test_.cc => security/nss/gtests/google_test/gtest/test/gtest_throw_on_failure_test_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_uninitialized_test.py => security/nss/gtests/google_test/gtest/test/gtest_uninitialized_test.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_uninitialized_test_.cc => security/nss/gtests/google_test/gtest/test/gtest_uninitialized_test_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_unittest.cc => security/nss/gtests/google_test/gtest/test/gtest_unittest.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_xml_outfile1_test_.cc => security/nss/gtests/google_test/gtest/test/gtest_xml_outfile1_test_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_xml_outfile2_test_.cc => security/nss/gtests/google_test/gtest/test/gtest_xml_outfile2_test_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_xml_outfiles_test.py => security/nss/gtests/google_test/gtest/test/gtest_xml_outfiles_test.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_xml_output_unittest.py => security/nss/gtests/google_test/gtest/test/gtest_xml_output_unittest.py
rename : security/nss/external_tests/google_test/gtest/test/gtest_xml_output_unittest_.cc => security/nss/gtests/google_test/gtest/test/gtest_xml_output_unittest_.cc
rename : security/nss/external_tests/google_test/gtest/test/gtest_xml_test_utils.py => security/nss/gtests/google_test/gtest/test/gtest_xml_test_utils.py
rename : security/nss/external_tests/google_test/gtest/test/production.cc => security/nss/gtests/google_test/gtest/test/production.cc
rename : security/nss/external_tests/google_test/gtest/test/production.h => security/nss/gtests/google_test/gtest/test/production.h
rename : security/nss/external_tests/google_test/gtest/xcode/Config/DebugProject.xcconfig => security/nss/gtests/google_test/gtest/xcode/Config/DebugProject.xcconfig
rename : security/nss/external_tests/google_test/gtest/xcode/Config/FrameworkTarget.xcconfig => security/nss/gtests/google_test/gtest/xcode/Config/FrameworkTarget.xcconfig
rename : security/nss/external_tests/google_test/gtest/xcode/Config/General.xcconfig => security/nss/gtests/google_test/gtest/xcode/Config/General.xcconfig
rename : security/nss/external_tests/google_test/gtest/xcode/Config/ReleaseProject.xcconfig => security/nss/gtests/google_test/gtest/xcode/Config/ReleaseProject.xcconfig
rename : security/nss/external_tests/google_test/gtest/xcode/Config/StaticLibraryTarget.xcconfig => security/nss/gtests/google_test/gtest/xcode/Config/StaticLibraryTarget.xcconfig
rename : security/nss/external_tests/google_test/gtest/xcode/Config/TestTarget.xcconfig => security/nss/gtests/google_test/gtest/xcode/Config/TestTarget.xcconfig
rename : security/nss/external_tests/google_test/gtest/xcode/Resources/Info.plist => security/nss/gtests/google_test/gtest/xcode/Resources/Info.plist
rename : security/nss/external_tests/google_test/gtest/xcode/Samples/FrameworkSample/Info.plist => security/nss/gtests/google_test/gtest/xcode/Samples/FrameworkSample/Info.plist
rename : security/nss/external_tests/google_test/gtest/xcode/Samples/FrameworkSample/WidgetFramework.xcodeproj/project.pbxproj => security/nss/gtests/google_test/gtest/xcode/Samples/FrameworkSample/WidgetFramework.xcodeproj/project.pbxproj
rename : security/nss/external_tests/google_test/gtest/xcode/Samples/FrameworkSample/runtests.sh => security/nss/gtests/google_test/gtest/xcode/Samples/FrameworkSample/runtests.sh
rename : security/nss/external_tests/google_test/gtest/xcode/Samples/FrameworkSample/widget.cc => security/nss/gtests/google_test/gtest/xcode/Samples/FrameworkSample/widget.cc
rename : security/nss/external_tests/google_test/gtest/xcode/Samples/FrameworkSample/widget.h => security/nss/gtests/google_test/gtest/xcode/Samples/FrameworkSample/widget.h
rename : security/nss/external_tests/google_test/gtest/xcode/Samples/FrameworkSample/widget_test.cc => security/nss/gtests/google_test/gtest/xcode/Samples/FrameworkSample/widget_test.cc
rename : security/nss/external_tests/google_test/gtest/xcode/Scripts/runtests.sh => security/nss/gtests/google_test/gtest/xcode/Scripts/runtests.sh
rename : security/nss/external_tests/google_test/gtest/xcode/Scripts/versiongenerate.py => security/nss/gtests/google_test/gtest/xcode/Scripts/versiongenerate.py
rename : security/nss/external_tests/google_test/gtest/xcode/gtest.xcodeproj/project.pbxproj => security/nss/gtests/google_test/gtest/xcode/gtest.xcodeproj/project.pbxproj
rename : security/nss/external_tests/google_test/manifest.mn => security/nss/gtests/google_test/manifest.mn
rename : security/nss/external_tests/manifest.mn => security/nss/gtests/manifest.mn
rename : security/nss/external_tests/nss_bogo_shim/Makefile => security/nss/gtests/nss_bogo_shim/Makefile
rename : security/nss/external_tests/nss_bogo_shim/config.cc => security/nss/gtests/nss_bogo_shim/config.cc
rename : security/nss/external_tests/nss_bogo_shim/config.h => security/nss/gtests/nss_bogo_shim/config.h
rename : security/nss/external_tests/nss_bogo_shim/config.json => security/nss/gtests/nss_bogo_shim/config.json
rename : security/nss/external_tests/nss_bogo_shim/manifest.mn => security/nss/gtests/nss_bogo_shim/manifest.mn
rename : security/nss/external_tests/nss_bogo_shim/nss_bogo_shim.cc => security/nss/gtests/nss_bogo_shim/nss_bogo_shim.cc
rename : security/nss/external_tests/nss_bogo_shim/nsskeys.cc => security/nss/gtests/nss_bogo_shim/nsskeys.cc
rename : security/nss/external_tests/nss_bogo_shim/nsskeys.h => security/nss/gtests/nss_bogo_shim/nsskeys.h
rename : security/nss/external_tests/pk11_gtest/Makefile => security/nss/gtests/pk11_gtest/Makefile
rename : security/nss/external_tests/pk11_gtest/pk11_aeskeywrap_unittest.cc => security/nss/gtests/pk11_gtest/pk11_aeskeywrap_unittest.cc
rename : security/nss/external_tests/pk11_gtest/pk11_chacha20poly1305_unittest.cc => security/nss/gtests/pk11_gtest/pk11_chacha20poly1305_unittest.cc
rename : security/nss/external_tests/pk11_gtest/pk11_export_unittest.cc => security/nss/gtests/pk11_gtest/pk11_export_unittest.cc
rename : security/nss/external_tests/pk11_gtest/pk11_pbkdf2_unittest.cc => security/nss/gtests/pk11_gtest/pk11_pbkdf2_unittest.cc
rename : security/nss/external_tests/pk11_gtest/pk11_prf_unittest.cc => security/nss/gtests/pk11_gtest/pk11_prf_unittest.cc
rename : security/nss/external_tests/pk11_gtest/pk11_rsapss_unittest.cc => security/nss/gtests/pk11_gtest/pk11_rsapss_unittest.cc
rename : security/nss/external_tests/ssl_gtest/Makefile => security/nss/gtests/ssl_gtest/Makefile
rename : security/nss/external_tests/ssl_gtest/databuffer.h => security/nss/gtests/ssl_gtest/databuffer.h
rename : security/nss/external_tests/ssl_gtest/gtest_utils.h => security/nss/gtests/ssl_gtest/gtest_utils.h
rename : security/nss/external_tests/ssl_gtest/libssl_internals.c => security/nss/gtests/ssl_gtest/libssl_internals.c
rename : security/nss/external_tests/ssl_gtest/libssl_internals.h => security/nss/gtests/ssl_gtest/libssl_internals.h
rename : security/nss/external_tests/ssl_gtest/ssl_0rtt_unittest.cc => security/nss/gtests/ssl_gtest/ssl_0rtt_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_agent_unittest.cc => security/nss/gtests/ssl_gtest/ssl_agent_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_auth_unittest.cc => security/nss/gtests/ssl_gtest/ssl_auth_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_cert_ext_unittest.cc => security/nss/gtests/ssl_gtest/ssl_cert_ext_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_ciphersuite_unittest.cc => security/nss/gtests/ssl_gtest/ssl_ciphersuite_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_damage_unittest.cc => security/nss/gtests/ssl_gtest/ssl_damage_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_dhe_unittest.cc => security/nss/gtests/ssl_gtest/ssl_dhe_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_drop_unittest.cc => security/nss/gtests/ssl_gtest/ssl_drop_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_ecdh_unittest.cc => security/nss/gtests/ssl_gtest/ssl_ecdh_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_ems_unittest.cc => security/nss/gtests/ssl_gtest/ssl_ems_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_extension_unittest.cc => security/nss/gtests/ssl_gtest/ssl_extension_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_gtest.cc => security/nss/gtests/ssl_gtest/ssl_gtest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_hrr_unittest.cc => security/nss/gtests/ssl_gtest/ssl_hrr_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_loopback_unittest.cc => security/nss/gtests/ssl_gtest/ssl_loopback_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_record_unittest.cc => security/nss/gtests/ssl_gtest/ssl_record_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_resumption_unittest.cc => security/nss/gtests/ssl_gtest/ssl_resumption_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_skip_unittest.cc => security/nss/gtests/ssl_gtest/ssl_skip_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_staticrsa_unittest.cc => security/nss/gtests/ssl_gtest/ssl_staticrsa_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_v2_client_hello_unittest.cc => security/nss/gtests/ssl_gtest/ssl_v2_client_hello_unittest.cc
rename : security/nss/external_tests/ssl_gtest/ssl_version_unittest.cc => security/nss/gtests/ssl_gtest/ssl_version_unittest.cc
rename : security/nss/external_tests/ssl_gtest/test_io.cc => security/nss/gtests/ssl_gtest/test_io.cc
rename : security/nss/external_tests/ssl_gtest/test_io.h => security/nss/gtests/ssl_gtest/test_io.h
rename : security/nss/external_tests/ssl_gtest/tls_agent.cc => security/nss/gtests/ssl_gtest/tls_agent.cc
rename : security/nss/external_tests/ssl_gtest/tls_agent.h => security/nss/gtests/ssl_gtest/tls_agent.h
rename : security/nss/external_tests/ssl_gtest/tls_connect.cc => security/nss/gtests/ssl_gtest/tls_connect.cc
rename : security/nss/external_tests/ssl_gtest/tls_connect.h => security/nss/gtests/ssl_gtest/tls_connect.h
rename : security/nss/external_tests/ssl_gtest/tls_filter.cc => security/nss/gtests/ssl_gtest/tls_filter.cc
rename : security/nss/external_tests/ssl_gtest/tls_filter.h => security/nss/gtests/ssl_gtest/tls_filter.h
rename : security/nss/external_tests/ssl_gtest/tls_hkdf_unittest.cc => security/nss/gtests/ssl_gtest/tls_hkdf_unittest.cc
rename : security/nss/external_tests/ssl_gtest/tls_parser.cc => security/nss/gtests/ssl_gtest/tls_parser.cc
rename : security/nss/external_tests/ssl_gtest/tls_parser.h => security/nss/gtests/ssl_gtest/tls_parser.h
rename : security/nss/external_tests/util_gtest/Makefile => security/nss/gtests/util_gtest/Makefile
rename : security/nss/external_tests/util_gtest/util_utf8_unittest.cc => security/nss/gtests/util_gtest/util_utf8_unittest.cc
2016-10-31 11:40:35 +01:00
Franziskus Kiefer 4c1797bf92 Bug 1305970 - land NSS 0x3e7b53b18112, r=me
--HG--
extra : rebase_source : ef363dba56df3ca76c43cfb20702ddef13d0f855
2016-10-25 20:38:17 +02:00
Franziskus Kiefer 98c145b965 Bug 1305970 - land NSS 0x0c845c900217, r=me
--HG--
rename : security/nss/cmd/ectest/Makefile => security/nss/cmd/fbectest/Makefile
rename : security/nss/cmd/ectest/testvecs.h => security/nss/cmd/fbectest/testvecs.h
rename : security/nss/cmd/ectest/Makefile => security/nss/cmd/pk11ectest/Makefile
rename : security/nss/cmd/ectest/testvecs.h => security/nss/cmd/pk11ectest/testvecs.h
extra : rebase_source : 8940367fd4abef08cd4074ae180a7eb7e69d0351
2016-10-15 08:45:05 +02:00
Martin Thomson eb1023f573 Bug 1304919 - Update NSS to trunk, r=ekr
MozReview-Commit-ID: g0XqOwNzkz

--HG--
extra : rebase_source : f3b55831f927074846ce3def0e72941ba3c93ebf
2016-09-26 10:47:58 +10:00
Sebastian Hengst 070829618f Backed out changeset d7e412fddbbc (bug 1304919) for mass test failures on OS X 10.10 opt in tests which mock (encrypted?) connections. r=backout on a CLOSED TREE 2016-09-24 18:01:22 +02:00
EKR b37900f083 Bug 1304919 - Update Firefox to NSS trunk, r=mt
MozReview-Commit-ID: HQnqWmGClov

--HG--
extra : rebase_source : 6c247556f611d7186ca4bcbdd30bb0c869b9e9a6
2016-09-23 12:01:34 +10:00