David Keeler 83942e01e1 bug 1441223 - add a new (overridable) error code to describe extra policy constraint failures r=jcj ... Certificate verification failures that result from additional policy constraint failures now use the error code "MOZILLA_PKIX_ERROR_ADDITIONAL_POLICY_CONSTRAINT_FAILED" (also known as "Result::ERROR_ADDITIONAL_POLICY_CONSTRAINT_FAILED", depending on the context). MozReview-Commit-ID: 9rE7gRBapRF --HG-- extra : rebase_source : 9a60900a86f9eebab58b973f3e8f776b2481a1ff		2018-02-27 11:21:51 -08:00
..
tests/gtest	Bug 1440029 - Add a test for TrustOverrideUtils.h r=keeler	2018-02-21 16:54:52 -05:00
BRNameMatchingPolicy.cpp	…
BRNameMatchingPolicy.h	…
BTInclusionProof.h	Bug 1343202 - Utility function for decoding an InclusionProof structure; r=ckerschb,keeler	2017-08-18 09:50:49 +02:00
BTVerifier.cpp	Bug 1343202 - Utility function for decoding an InclusionProof structure; r=ckerschb,keeler	2017-08-18 09:50:49 +02:00
BTVerifier.h	Bug 1343202 - Utility function for decoding an InclusionProof structure; r=ckerschb,keeler	2017-08-18 09:50:49 +02:00
Buffer.cpp	Bug 1343202 - Move Buffer definition into its own file; r=keeler,rbarnes	2017-08-17 09:23:29 +02:00
Buffer.h	Bug 1343202 - Move Buffer definition into its own file; r=keeler,rbarnes	2017-08-17 09:23:29 +02:00
CTDiversityPolicy.cpp	…
CTDiversityPolicy.h	…
CTKnownLogs.h	bug 1349312 - part 1/2: patch CT implementation to include debug-only test logs r=Cykesiopka,jcj	2017-04-19 14:02:26 -07:00
CTLog.h	…
CTLogVerifier.cpp	bug 1357226 - work around a library inefficiency with EC keys when verifying ECDSA signatures r=fkiefer,jcj	2017-04-11 14:11:28 -07:00
CTLogVerifier.h	bug 1357226 - work around a library inefficiency with EC keys when verifying ECDSA signatures r=fkiefer,jcj	2017-04-11 14:11:28 -07:00
CTObjectsExtractor.cpp	…
CTObjectsExtractor.h	…
CTPolicyEnforcer.cpp	…
CTPolicyEnforcer.h	…
CTSerialization.cpp	Bug 1343202 - Utility function for decoding an InclusionProof structure; r=ckerschb,keeler	2017-08-18 09:50:49 +02:00
CTSerialization.h	…
CTUtils.h	Bug 1343202 - Utility function for decoding an InclusionProof structure; r=ckerschb,keeler	2017-08-18 09:50:49 +02:00
CTVerifyResult.cpp	…
CTVerifyResult.h	…
CertVerifier.cpp	Bug 1437754 - Add a pref and disable the Symantec distrust algorithm r=keeler	2018-02-27 16:04:51 -07:00
CertVerifier.h	Bug 1437754 - Add a pref and disable the Symantec distrust algorithm r=keeler	2018-02-27 16:04:51 -07:00
ExtendedValidation.cpp	bug 1421084 - part 1/4 - remove now-unnecessary nsNSSShutDownPreventionLock r=mt,ttaubert	2018-01-23 10:37:47 -08:00
ExtendedValidation.h	bug 1421084 - part 4/4 - remove nsNSSShutDown.h and (hopefully) all references to it r=mt,ttaubert	2018-01-24 14:44:01 -08:00
MultiLogCTVerifier.cpp	…
MultiLogCTVerifier.h	…
NSSCertDBTrustDomain.cpp	bug 1441223 - add a new (overridable) error code to describe extra policy constraint failures r=jcj	2018-02-27 11:21:51 -08:00
NSSCertDBTrustDomain.h	Bug 1437754 - Add a pref and disable the Symantec distrust algorithm r=keeler	2018-02-27 16:04:51 -07:00
OCSPCache.cpp	…
OCSPCache.h	…
OCSPRequestor.cpp	Bug 870698 - Part 1: Replace Assign("") with AssignLiteral(""). r=erahm	2017-09-03 22:12:56 -07:00
OCSPRequestor.h	…
OCSPVerificationTrustDomain.cpp	bug 1349762 - handle two GlobalSign EV root transfers r=Cykesiopka,jcj	2017-04-03 17:17:38 -07:00
OCSPVerificationTrustDomain.h	bug 1349762 - handle two GlobalSign EV root transfers r=Cykesiopka,jcj	2017-04-03 17:17:38 -07:00
SignedCertificateTimestamp.cpp	Bug 1343202 - Move Buffer definition into its own file; r=keeler,rbarnes	2017-08-17 09:23:29 +02:00
SignedCertificateTimestamp.h	Bug 1343202 - Move Buffer definition into its own file; r=keeler,rbarnes	2017-08-17 09:23:29 +02:00
SignedTreeHead.h	…
TrustOverride-AppleGoogleDigiCertData.inc	Bug 1434300 - Add the DigiCert whitelisted SPKIs r=keeler	2018-02-21 14:08:59 -05:00
TrustOverride-GlobalSignData.inc	Bug 1409259 - Refactor "TrustOverrides" header for existing trust overrides r=keeler	2017-10-16 23:17:52 -07:00
TrustOverride-StartComAndWoSignData.inc	Bug 1409259 - Refactor "TrustOverrides" header for existing trust overrides r=keeler	2017-10-16 23:17:52 -07:00
TrustOverride-SymantecData.inc	Bug 1434300 - Add a utility to match certificates based on SPKI r=fkiefer,keeler	2018-02-21 14:08:44 -05:00
TrustOverride-TestImminentDistrustData.inc	Bug 1439378 - Re-enable the imminent distrust browser-console test r=fkiefer,keeler	2018-02-26 15:55:35 -07:00
TrustOverrideUtils.h	Bug 1434300 - Change Symantec Distrust Algorithm's whitelist to SPKI-matching r=fkiefer,keeler	2018-02-21 14:08:47 -05:00
moz.build	Bug 785440 - Disable warning C4324 when building security/certverifier. r=keeler	2018-02-11 00:32:14 -05:00