зеркало из https://github.com/mozilla/gecko-dev.git
e9ae922ddc
2020-06-12 Kevin Jacobs <kjacobs@mozilla.com>
* cmd/lib/secutil.c:
Bug 1645479 - Use SECITEM_CopyItem instead of SECITEM_MakeItem in
secutil.c. r=jcj
This patch converts a call to `SECITEM_MakeItem` to use
`SECITEM_CopyItem` instead. Using the former works fine in NSS CI,
but causes build failures in mozilla-central due to differences in
how both symbols are exported (i.e. when folding nssutil into nss).
[cbf75aedf480] [tip]
2020-06-11 Kevin Jacobs <kjacobs@mozilla.com>
* gtests/ssl_gtest/libssl_internals.c,
gtests/ssl_gtest/ssl_resumption_unittest.cc:
Bug 1644774 - Use ClearServerCache instead of
SSLInt_ClearSelfEncryptKey for ticket invalidation. r=mt
[7b2413d80ce3]
2020-06-10 Kevin Jacobs <kjacobs@mozilla.com>
* cmd/lib/basicutil.c, cmd/lib/secutil.c, cmd/lib/secutil.h,
cmd/selfserv/selfserv.c, cmd/tstclnt/tstclnt.c, lib/ssl/tls13psk.c:
Bug 1603042 - Support external PSKs in tstclnt/selfserv. r=jcj
This patch adds support for TLS 1.3 external PSKs in tstclnt and
selfserv with the `-z` option.
Command examples:
- `selfserv -D -p 4443 -d . -n localhost.localdomain -w nss -V tls1.3:
-H 1 -z 0xAAAAAAAABBBBBBBBCCCCCCCCDDDDDDDD[:label] -m`
- `tstclnt -h 127.0.0.1 -p 4443 -z
0xAAAAAAAABBBBBBBBCCCCCCCCDDDDDDDD[:label] -d . -w nss`
For OpenSSL interop:
- `openssl s_server -nocert -port 4433 -psk
AAAAAAAABBBBBBBBCCCCCCCCDDDDDDDD [-psk_identity label]`
Note: If the optional label is omitted, both NSS tools and OpenSSL
default to "Client_identity".
[c1b1112af415]
2020-06-09 Kevin Jacobs <kjacobs@mozilla.com>
* lib/ssl/tls13con.c:
Bug
|
||
|---|---|---|
| .. | ||
| addbuiltin | ||
| atob | ||
| bltest | ||
| btoa | ||
| certutil | ||
| chktest | ||
| crlutil | ||
| crmf-cgi | ||
| crmftest | ||
| dbck | ||
| dbtest | ||
| derdump | ||
| digest | ||
| ecperf | ||
| fbectest | ||
| fipstest | ||
| httpserv | ||
| lib | ||
| libpkix | ||
| listsuites | ||
| lowhashtest | ||
| makepqg | ||
| modutil | ||
| mpitests | ||
| multinit | ||
| nss-policy-check | ||
| ocspclnt | ||
| ocspresp | ||
| oidcalc | ||
| p7content | ||
| p7env | ||
| p7sign | ||
| p7verify | ||
| pk1sign | ||
| pk11ectest | ||
| pk11gcmtest | ||
| pk11importtest | ||
| pk11mode | ||
| pk11util | ||
| pk12util | ||
| pkix-errcodes | ||
| pp | ||
| ppcertdata | ||
| pwdecrypt | ||
| rsaperf | ||
| rsapoptst | ||
| samples | ||
| sdrtest | ||
| selfserv | ||
| shlibsign | ||
| signtool | ||
| signver | ||
| smimetools | ||
| ssltap | ||
| strsclnt | ||
| symkeyutil | ||
| tests | ||
| tstclnt | ||
| vfychain | ||
| vfyserv | ||
| Makefile | ||
| manifest.mn | ||
| platlibs.gypi | ||
| platlibs.mk | ||
| platrules.mk | ||