gecko-dev/uriloader
J.C. Jones 0e002bccbd Bug 1409259 - Add a console warning for soon-to-be-distrusted roots r=keeler,ttaubert
This patch adds a new diagnostic status flag to nsIWebProgressListener,
STATE_CERT_DISTRUST_IMMINENT, which indicates that the certificate chain is
going to change validity due to an upcoming distrust event. The first of
these events is this bug, affecting various roots from Symantec.

The STATE_CERT_DISTRUST_IMMINENT flag is set by nsNSSCallbacks and passed,
via nsSecureBrowserUIImpl, to browser.js where it is used to alert the console.

Adding this sort of diagnostic printing to be accessible to browser.js is a
long-desired goal, as future functionality can start doing more decision-making
there. We may, for example, also want to degrade the lock icon, which will be
straightforward with this flag.

This commit does not implement the IsCertificateDistrustImminent method. That is
follow-on work.

MozReview-Commit-ID: 75IOdc24XIV

--HG--
extra : rebase_source : e6a95d0be65f667eff0b131274272f0df91f8732
2017-10-18 22:29:42 -07:00
..
base Bug 1409259 - Add a console warning for soon-to-be-distrusted roots r=keeler,ttaubert 2017-10-18 22:29:42 -07:00
exthandler Bug 1413044 - Move DBusHelper.h in uriloader/exthandler, r=smaug 2017-11-01 23:24:38 +01:00
prefetch Bug 1411416 - Don't leak nsOfflineCacheUpdateService::mAllowedDomains. r=mayhemer 2017-10-25 09:55:02 -07:00
moz.build Bug 1345506 - add BUG_COMPONENT to uriloader/* files. r=paolo 2017-03-09 15:06:25 -05:00