gecko-dev/build
Dana Keeler 2a64c08522 Bug 1724072 - allow enabling 3DES only when deprecated versions of TLS are enabled r=rmf
Chrome has removed 3DES completely[0], but we're still seeing some uses of it
in telemetry. Our assumption is that this is either due to old devices that
can't be upgraded, and hence probably use TLS 1.0, or servers that bafflingly
choose 3DES when there are other, better, ciphersuites in common.
This patch allows 3DES to only be enabled when deprecated versions of TLS are
enabled. This should protect users against the latter case (where 3DES is
unnecessary) while allowing them to use it in the former case (where it may be
necessary).

NB: The only 3DES ciphersuite gecko makes possible to enable is
TLS_RSA_WITH_3DES_EDE_CBC_SHA. This patch also changes the preference
corresponding to this ciphersuite from "security.ssl3.rsa_des_ede3_sha" to
"security.ssl3.deprecated.rsa_des_ede3_sha".

[0] https://www.chromestatus.com/feature/6678134168485888

Differential Revision: https://phabricator.services.mozilla.com/D121797
2021-08-10 15:25:37 +00:00
..
autoconf Bug 1722652 - Setup bindgen flags for servo similarly to cranelift and neqo. r=emilio 2021-07-28 20:37:48 +00:00
build-clang Bug 1722438 - Add support for wasm32-wasi targets in clang toolchains for mac and windows. r=firefox-build-system-reviewers,andi 2021-07-29 23:43:01 +00:00
build-infer
build-rust Bug 1723016 - Update builders to rustc 1.54. r=firefox-build-system-reviewers,nalexander 2021-08-03 02:03:32 +00:00
clang-plugin Bug 1717887 Part 2: Make RenderThread backed by nsIThread, with a hang monitor. r=gfx-reviewers,jrmuizel 2021-07-19 17:35:55 +00:00
compare-mozconfig
debian-packages Bug 1719426 - Build glibc_2.27-3ubuntu1.2 ourselves. r=taskgraph-reviewers,bhearsum 2021-07-08 22:15:37 +00:00
docs Bug 1714788 - Fixed more Sphinx warnings in 'mach doc' r=sylvestre DONTBUILD 2021-06-10 19:33:53 +00:00
gyp_includes
liblowercase Bug 1703223 - Hook stat/stat64 in liblowercase. r=glandium 2021-04-13 09:23:54 +00:00
macosx
moz.configure Backed out changeset a1a730897df8 (bug 1723956) for causing build bustages. CLOSED TREE 2021-08-10 01:38:42 +03:00
package/mac_osx
pgo Bug 1724072 - allow enabling 3DES only when deprecated versions of TLS are enabled r=rmf 2021-08-10 15:25:37 +00:00
sanitizers Bug 1695285 - Pass ASan/UBSan flags to cargo for native builds. r=firefox-build-system-reviewers,glandium 2021-03-18 20:46:55 +00:00
sparse-profiles Bug 1717051: Move global mach dependencies to requirements definition r=ahal 2021-08-05 15:14:20 +00:00
tests/cram
unix Bug 1723869 - Setup X11-only Linux builds. r=sylvestre 2021-08-06 07:12:03 +00:00
valgrind Bug 1723016 - Update builders to rustc 1.54. r=firefox-build-system-reviewers,nalexander 2021-08-03 02:03:32 +00:00
win32 Bug 1710473 - Remove hal::SetProcessPrioritySupported(). r=gsvelto,geckoview-reviewers,aklotz 2021-05-10 19:59:24 +00:00
win64 Bug 1710473 - Remove hal::SetProcessPrioritySupported(). r=gsvelto,geckoview-reviewers,aklotz 2021-05-10 19:59:24 +00:00
win64-aarch64
workspace-hack Bug 1705376: Synchronize workspace-hack features and usage r=firefox-build-system-reviewers,glandium 2021-04-29 15:19:27 +00:00
.gdbinit
.gdbinit.loader
.gdbinit.py.in
.lldbinit.in Bug 1695051 - Add /security to .lldbinit. r=aklotz 2021-03-02 20:39:12 +00:00
RunCbindgen.py
__init__.py
appini_header.py
application.ini.in Bug 1675676 - Add --with-crashreporter-url for ac_add_options to allow specifying alternative crash-stats server url. r=glandium,gsvelto 2021-02-24 09:46:59 +00:00
binary-location.mk
build_virtualenv_packages.txt Bug 1712133: Remove "pth" name customization r=ahal 2021-06-17 14:58:16 +00:00
buildconfig.py
cargo-host-linker
cargo-host-linker.bat
cargo-linker
cargo-linker.bat
checksums.py
common_virtualenv_packages.txt Bug 1717051: Remove obsolete python module paths r=ahal 2021-08-05 15:14:19 +00:00
defines.sh
dumbmake-dependencies
gecko_templates.mozbuild
gen_symverscript.py
gen_test_packages_manifest.py
gn.mozbuild
gyp.mozbuild
gyp_base.mozbuild Bug 1698669 - Fix gyp target_arch for little-endian powerpc64. r=firefox-build-system-reviewers,mhentges 2021-04-16 01:01:11 +00:00
mach_bootstrap.py Bug 1717051: Move global mach dependencies to requirements definition r=ahal 2021-08-05 15:14:20 +00:00
mach_virtualenv_packages.txt Bug 1717051: Move global mach dependencies to requirements definition r=ahal 2021-08-05 15:14:20 +00:00
midl.py
moz-automation.mk
moz.build Bug 1675676 - Add --with-crashreporter-url for ac_add_options to allow specifying alternative crash-stats server url. r=glandium,gsvelto 2021-02-24 09:46:59 +00:00
mozconfig.artifact
mozconfig.artifact.automation
mozconfig.automation
mozconfig.cache
mozconfig.clang-cl
mozconfig.comm-support
mozconfig.common Bug 1712633 - Set MOZ_REQUIRE_SIGNING appropriately by default. r=firefox-build-system-reviewers,mhentges 2021-05-25 20:00:05 +00:00
mozconfig.common.override
mozconfig.lld-link
mozconfig.no-compile
mozconfig.rust
mozconfig.wasm-sandboxing Bug 1653659 - Part 4: Turn on Wasm sandboxing for hunspell r=tjr 2021-06-09 15:01:03 +00:00
mozconfig.win-common
non-unified-compat Bug 1720846 - Add mozglue/baseprofiler and tools/profiler to non-unified-compat - r=florian 2021-07-20 09:31:17 +00:00
psutil_requirements.in Backed out 3 changesets (bug 1717051) for causing gecko decision failure. CLOSED TREE 2021-07-30 02:15:50 +03:00
psutil_requirements.txt Backed out 3 changesets (bug 1717051) for causing gecko decision failure. CLOSED TREE 2021-07-30 02:15:50 +03:00
qemu-wrap
templates.mozbuild Bug 1700534 - Coalesce RLBox wasmboxed libraries. r=firefox-build-system-reviewers,shravanrn,bholley,andi,mhentges 2021-06-22 05:31:33 +00:00
update-settings.ini
upload.py
upload_generated_sources.py
variables.py
windows_toolchain.py Bug 1696285 - update windows_toolchain.py to run with Python 3. r=firefox-build-system-reviewers,andi,mhentges 2021-03-05 16:19:35 +00:00
zstandard_requirements.in Backed out 3 changesets (bug 1717051) for causing gecko decision failure. CLOSED TREE 2021-07-30 02:15:50 +03:00
zstandard_requirements.txt Bug 1695773 - Upgrade python-zstandard to 0.15.2. r=firefox-build-system-reviewers,mhentges 2021-03-09 00:19:12 +00:00