gecko-dev/security
Dana Keeler 2b759dabbe bug 1601227 - offer to use CA certificates as client authentication certificates r=kjacobs
Bug 1267643 changed how gecko finds client certificates to offer to the user to
use. This change was too permissive, so we reintroduced some filtering in bug
1590888 and bug 1592532. All of these changes together were too restrictive and
filtered out CA certificates, which some users evidently use as client
certificates. This bug removes the restriction that client certificates not be
CA certificates and hopefully arrives at pre-bug 1267643 behavior.

Differential Revision: https://phabricator.services.mozilla.com/D56618

--HG--
extra : moz-landing-system : lando
2019-12-11 17:46:35 +00:00
..
apps Bug 1600545 - Remove useless inclusions of header files generated from IDL files in modules/, netwerk/, parser/, security/, startupcache/, storage/, toolkit/, tools/, uriloader/, widget/, xpcom/ and xpfe/ r=Ehsan 2019-12-06 09:17:57 +00:00
certverifier bug 1602641 - add CRLite/OCSP timing comparison telemetry r=jcj 2019-12-10 23:32:51 +00:00
ct bug 1594510 - update all TrustDomain implementations in mozilla-central due to the mozilla::pkix API change in bug 1593141 r=mbirghan 2019-11-15 18:26:45 +00:00
mac/hardenedruntime Bug 1516367 - Move the minidump-analyzer out of the crash reporter application bundle r=spohl,dmajor 2019-11-14 21:11:59 +00:00
manager bug 1601227 - offer to use CA certificates as client authentication certificates r=kjacobs 2019-12-11 17:46:35 +00:00
nss Bug 1592007 - land NSS NSS_3_48_RTM UPGRADE_NSS_RELEASE, r=kjacobs 2019-12-05 17:16:00 +00:00
sandbox Bug 1601681 - Switch recently added files with Windows line endings to Unix. r=mossop 2019-12-11 08:12:49 +00:00
.eslintrc.js Bug 1558517 - Pre 3.0: Remove conflicting eslint rules, and turn on "curly: all" everywhere, r=standard8 2019-06-28 17:14:01 +02:00
generate_certdata.py
generate_mapfile.py
moz.build Bug 1535226 - Remove uses of XP_WIN32 in Gecko. r=glandium 2019-03-21 01:28:50 +00:00
nss.symbols bug 1573542 - be more efficient about finding client certificates r=jcj,kjacobs 2019-09-18 23:28:05 +00:00