gecko-dev/security/certverifier
David Keeler 3fed4e5ecc bug 1272858 - use a name-agnostic method to find the built-in root PKCS#11 slot r=Cykesiopka
Previously this implementation would use the expected names of the built-in
module and slot to get a handle on them. This doesn't work on distributions that
use other names. The new implementation searches through the slots from the
default module list for one where PK11_HasRootCerts returns true (which
indicates that NSS considers that slot to contain the default built-in root
list).

MozReview-Commit-ID: LmX27hQfFJU

--HG--
extra : rebase_source : 50383dcc77257fe08ce2c7d908e95cda7c4bbe9d
2016-06-23 15:43:47 -07:00
..
tests/gtest Bug 1241574 - Certificate Transparency - base definitions and serialization to/from TLS wire format. r=keeler, r=Cykesiopka 2016-04-11 16:17:25 +03:00
BRNameMatchingPolicy.cpp bug 1267463 - add a more nuanced subject common name fallback option for prerelease channels r=Cykesiopka,jcj 2016-04-25 15:55:18 -07:00
BRNameMatchingPolicy.h bug 1267463 - add a more nuanced subject common name fallback option for prerelease channels r=Cykesiopka,jcj 2016-04-25 15:55:18 -07:00
CNNICHashWhitelist.inc bug 1157873 - remove certificates from CNNIC whitelist that aren't in the Pilot Certificate Transparency log r=rbarnes 2015-04-21 16:07:33 -07:00
CTSerialization.cpp Bug 1241574 - Certificate Transparency - base definitions and serialization to/from TLS wire format. r=keeler, r=Cykesiopka 2016-04-11 16:17:25 +03:00
CTSerialization.h Bug 1241574 - Certificate Transparency - base definitions and serialization to/from TLS wire format. r=keeler, r=Cykesiopka 2016-04-11 16:17:25 +03:00
CertVerifier.cpp bug 1272858 - use a name-agnostic method to find the built-in root PKCS#11 slot r=Cykesiopka 2016-06-23 15:43:47 -07:00
CertVerifier.h bug 982932 - only allow Netscape-stepUp to be used for serverAuth for old CA certificates r=Cykesiopka,jcj 2016-05-05 16:11:11 -07:00
ExtendedValidation.cpp bug 1236964 - enable Certum Trusted Network CA 2 root certificate for EV treatment r=jcj 2016-03-15 16:08:15 -07:00
ExtendedValidation.h
NSSCertDBTrustDomain.cpp bug 1277240 - don't import trust anchors in SaveIntermediateCerts r=Cykesiopka 2016-06-02 13:17:14 -07:00
NSSCertDBTrustDomain.h bug 982932 - only allow Netscape-stepUp to be used for serverAuth for old CA certificates r=Cykesiopka,jcj 2016-05-05 16:11:11 -07:00
OCSPCache.cpp Bug 1271495 - Replace uses of ScopedPK11Context with UniquePK11Context. r=keeler,mcmanus 2016-05-13 05:53:57 -07:00
OCSPCache.h
OCSPRequestor.cpp Bug 1271501 - Use mozilla::BitwiseCast instead of reinterpret_cast in PSM. r=keeler 2016-05-18 21:20:56 -07:00
OCSPRequestor.h Bug 1260644 - Use UniquePLArenaPool to manage PLArenaPools in PSM. r=keeler 2016-04-04 17:35:24 -07:00
OCSPVerificationTrustDomain.cpp bug 982932 - only allow Netscape-stepUp to be used for serverAuth for old CA certificates r=Cykesiopka,jcj 2016-05-05 16:11:11 -07:00
OCSPVerificationTrustDomain.h bug 982932 - only allow Netscape-stepUp to be used for serverAuth for old CA certificates r=Cykesiopka,jcj 2016-05-05 16:11:11 -07:00
SignedCertificateTimestamp.cpp Bug 1241574 - Certificate Transparency - base definitions and serialization to/from TLS wire format. r=keeler, r=Cykesiopka 2016-04-11 16:17:25 +03:00
SignedCertificateTimestamp.h Bug 1241574 - Certificate Transparency - base definitions and serialization to/from TLS wire format. r=keeler, r=Cykesiopka 2016-04-11 16:17:25 +03:00
SignedTreeHead.h Bug 1241574 - Certificate Transparency - base definitions and serialization to/from TLS wire format. r=keeler, r=Cykesiopka 2016-04-11 16:17:25 +03:00
moz.build Bug 1241574 - Certificate Transparency - base definitions and serialization to/from TLS wire format. r=keeler, r=Cykesiopka 2016-04-11 16:17:25 +03:00