gecko-dev/security/certverifier
Dana Keeler 51ad07b3b9 Bug 1705360 - "hide" NSS DBs from meddling third party software r=jschanck,bbeurdouche,perftest-reviewers,sparky
Some crash reports appear to be indicating that initializing NSS' certificate
and key databases is taking on the order of minutes in some cases, which is
unexpected. One hypothesis is that third-party software is opening these DBs at
the same time that NSS is operating on them, causing contention and thus
slowness. This patch experimentally (in Nightly only) renames these DBs in the
hopes that third-party software might not recognize them as the DBs it's
looking for, and will thus leave them alone.

Differential Revision: https://phabricator.services.mozilla.com/D126028
2021-10-08 18:33:46 +00:00
..
tests/gtest Bug 1713602 - Use NSS only on the socket thread in NSSCertDBTrustDomain::IsChainValid r=keeler 2021-08-14 02:11:30 +00:00
BRNameMatchingPolicy.cpp
BRNameMatchingPolicy.h
CertVerifier.cpp Bug 1713605 - Avoid NSS usage in CertVerifier::VerifySSLServerCert r=keeler 2021-09-14 18:11:05 +00:00
CertVerifier.h Bug 1713605 - Avoid NSS usage in CertVerifier::VerifySSLServerCert r=keeler 2021-09-14 18:11:05 +00:00
ExtendedValidation.cpp Bug 1717711 - Enable EV Treatment for HARICA's 2015 and 2021 root certificates r=rmf,keeler 2021-10-07 16:22:49 +00:00
ExtendedValidation.h Bug 1694649 - Rewrite GetFirstEVPolicy with pkix r=keeler 2021-04-16 22:32:35 +00:00
NSSCertDBTrustDomain.cpp Bug 1705360 - "hide" NSS DBs from meddling third party software r=jschanck,bbeurdouche,perftest-reviewers,sparky 2021-10-08 18:33:46 +00:00
NSSCertDBTrustDomain.h Bug 1705360 - "hide" NSS DBs from meddling third party software r=jschanck,bbeurdouche,perftest-reviewers,sparky 2021-10-08 18:33:46 +00:00
OCSPCache.cpp Bug 1664995 - Part 1: Make OCSP cache to be aware of the partitionKey in the originAttributes. r=keeler 2021-09-16 09:20:39 +00:00
OCSPCache.h
OCSPVerificationTrustDomain.cpp Bug 1605273 - only run CRLite on certificates with a CT SCT available r=jcj 2020-09-24 18:10:05 +00:00
OCSPVerificationTrustDomain.h Bug 1605273 - only run CRLite on certificates with a CT SCT available r=jcj 2020-09-24 18:10:05 +00:00
TrustOverride-AppleGoogleDigiCertData.inc
TrustOverride-SymantecData.inc Bug 1686856 - Remove GeoTrust PCA-G2 and VeriSign Universal root certs from TrustOverride-SymantecData.inc. r=keeler 2021-03-08 07:43:55 +00:00
TrustOverrideUtils.h Bug 1713602 - Use NSS only on the socket thread in NSSCertDBTrustDomain::IsChainValid r=keeler 2021-08-14 02:11:30 +00:00
moz.build Bug 1725145 - Preparation for the hybrid build env. r=necko-reviewers,firefox-build-system-reviewers,valentin,glandium 2021-08-25 10:46:17 +00:00