gecko-dev/uriloader/base
J.C. Jones 0e002bccbd Bug 1409259 - Add a console warning for soon-to-be-distrusted roots r=keeler,ttaubert
This patch adds a new diagnostic status flag to nsIWebProgressListener,
STATE_CERT_DISTRUST_IMMINENT, which indicates that the certificate chain is
going to change validity due to an upcoming distrust event. The first of
these events is this bug, affecting various roots from Symantec.

The STATE_CERT_DISTRUST_IMMINENT flag is set by nsNSSCallbacks and passed,
via nsSecureBrowserUIImpl, to browser.js where it is used to alert the console.

Adding this sort of diagnostic printing to be accessible to browser.js is a
long-desired goal, as future functionality can start doing more decision-making
there. We may, for example, also want to degrade the lock icon, which will be
straightforward with this flag.

This commit does not implement the IsCertificateDistrustImminent method. That is
follow-on work.

MozReview-Commit-ID: 75IOdc24XIV

--HG--
extra : rebase_source : e6a95d0be65f667eff0b131274272f0df91f8732
2017-10-18 22:29:42 -07:00
..
moz.build
nsCURILoader.idl
nsDocLoader.cpp Bug 1401379 - Part 4: Be consistent with nsDocLoader's canonical ISupports, r=smaug 2017-11-01 11:06:30 -04:00
nsDocLoader.h Bug 1401379 - Part 1: Make nsDocShell and nsDocLoader cycle collected, r=smaug 2017-11-01 11:06:24 -04:00
nsIContentHandler.idl
nsIDocumentLoader.idl
nsITransfer.idl
nsIURIContentListener.idl
nsIURILoader.idl
nsIWebProgress.idl
nsIWebProgressListener.idl Bug 1409259 - Add a console warning for soon-to-be-distrusted roots r=keeler,ttaubert 2017-10-18 22:29:42 -07:00
nsIWebProgressListener2.idl
nsURILoader.cpp
nsURILoader.h