David Keeler 6bbfc835f0 bug 1406396 - work around NSS utils potentially loading spurious root cert modules r=mgoodwin ... NSS command-line utilities may add a built-in root certificate module with the name "Root Certs" if run on a profile that has a copy of the module file (which is an unexpected configuration in general for Firefox). This can cause breakage. To work around this, PSM now simply deletes any module named "Root Certs" at startup. In an effort to prevent PSM from deleting unrelated modules coincidentally named "Root Certs", we also prevent the user from using the Firefox UI to name modules "Root Certs". MozReview-Commit-ID: ABja3wpShO9 --HG-- extra : rebase_source : cfc62fb3fabf491a72f009601f3ec6973244642e		2017-10-13 11:27:30 -07:00
..
tests/gtest	Bug 1366511: Part 3 - Add mozilla::ToResult() to convert other result types to equivalent Result. r=nbp,ehsan	2017-08-29 21:28:31 -07:00
BRNameMatchingPolicy.cpp	…
BRNameMatchingPolicy.h	…
BTInclusionProof.h	Bug 1343202 - Utility function for decoding an InclusionProof structure; r=ckerschb,keeler	2017-08-18 09:50:49 +02:00
BTVerifier.cpp	Bug 1343202 - Utility function for decoding an InclusionProof structure; r=ckerschb,keeler	2017-08-18 09:50:49 +02:00
BTVerifier.h	Bug 1343202 - Utility function for decoding an InclusionProof structure; r=ckerschb,keeler	2017-08-18 09:50:49 +02:00
Buffer.cpp	Bug 1343202 - Move Buffer definition into its own file; r=keeler,rbarnes	2017-08-17 09:23:29 +02:00
Buffer.h	Bug 1343202 - Move Buffer definition into its own file; r=keeler,rbarnes	2017-08-17 09:23:29 +02:00
CTDiversityPolicy.cpp	Bug 1320566 - Certificate Transparency - implement CT Policy. r=Dolske,keeler	2017-01-09 08:22:28 +02:00
CTDiversityPolicy.h	Bug 1320566 - Certificate Transparency - implement CT Policy. r=Dolske,keeler	2017-01-09 08:22:28 +02:00
CTKnownLogs.h	bug 1349312 - part 1/2: patch CT implementation to include debug-only test logs r=Cykesiopka,jcj	2017-04-19 14:02:26 -07:00
CTLog.h	Bug 1320566 - Certificate Transparency - implement CT Policy. r=Dolske,keeler	2017-01-09 08:22:28 +02:00
CTLogVerifier.cpp	bug 1357226 - work around a library inefficiency with EC keys when verifying ECDSA signatures r=fkiefer,jcj	2017-04-11 14:11:28 -07:00
CTLogVerifier.h	bug 1357226 - work around a library inefficiency with EC keys when verifying ECDSA signatures r=fkiefer,jcj	2017-04-11 14:11:28 -07:00
CTObjectsExtractor.cpp	…
CTObjectsExtractor.h	…
CTPolicyEnforcer.cpp	Bug 1320566 - Certificate Transparency - implement CT Policy. r=Dolske,keeler	2017-01-09 08:22:28 +02:00
CTPolicyEnforcer.h	Bug 1320566 - Certificate Transparency - implement CT Policy. r=Dolske,keeler	2017-01-09 08:22:28 +02:00
CTSerialization.cpp	Bug 1343202 - Utility function for decoding an InclusionProof structure; r=ckerschb,keeler	2017-08-18 09:50:49 +02:00
CTSerialization.h	…
CTUtils.h	Bug 1343202 - Utility function for decoding an InclusionProof structure; r=ckerschb,keeler	2017-08-18 09:50:49 +02:00
CTVerifyResult.cpp	Bug 1317951, part 2 - Certificate Transparency - basic support for disqualified logs. r=keeler	2016-11-29 22:51:46 +02:00
CTVerifyResult.h	Bug 1317951, part 2 - Certificate Transparency - basic support for disqualified logs. r=keeler	2016-11-29 22:51:46 +02:00
CertVerifier.cpp	bug 1257403 - don't bother verifying CA or email certificates when importing r=Cykesiopka	2017-09-22 15:42:20 -07:00
CertVerifier.h	bug 1400913 - back out the functionality changes from bug 1364159 (but keep the test) r=jcj	2017-09-18 10:28:58 -07:00
ExtendedValidation.cpp	Bug 1392852 - Disable EV treatment for old StartCom root certificates r=keeler	2017-10-16 16:14:06 -07:00
ExtendedValidation.h	bug 1372656 - load loadable roots on a background thread r=Cykesiopka,jcj	2017-06-08 16:10:00 -07:00
MultiLogCTVerifier.cpp	Bug 1317951, part 2 - Certificate Transparency - basic support for disqualified logs. r=keeler	2016-11-29 22:51:46 +02:00
MultiLogCTVerifier.h	Bug 1317951, part 1 - Certificate Transparency - extracted verification related fields from SCT to a separate struct. r=keeler	2016-11-23 15:37:31 +02:00
NSSCertDBTrustDomain.cpp	bug 1406396 - work around NSS utils potentially loading spurious root cert modules r=mgoodwin	2017-10-13 11:27:30 -07:00
NSSCertDBTrustDomain.h	bug 1400913 - back out the functionality changes from bug 1364159 (but keep the test) r=jcj	2017-09-18 10:28:58 -07:00
OCSPCache.cpp	Bug 1328653 - Merging all the various *OriginAttributes to just one, r=huseby	2017-01-12 17:38:48 +01:00
OCSPCache.h	Bug 1328653 - Merging all the various *OriginAttributes to just one, r=huseby	2017-01-12 17:38:48 +01:00
OCSPRequestor.cpp	Bug 870698 - Part 1: Replace Assign("") with AssignLiteral(""). r=erahm	2017-09-03 22:12:56 -07:00
OCSPRequestor.h	Bug 1330365 - Use mozilla::TimeStamp instead of NSPR's PRIntervalTime for OCSP timeout code. r=keeler	2017-01-14 13:12:43 +08:00
OCSPVerificationTrustDomain.cpp	bug 1349762 - handle two GlobalSign EV root transfers r=Cykesiopka,jcj	2017-04-03 17:17:38 -07:00
OCSPVerificationTrustDomain.h	bug 1349762 - handle two GlobalSign EV root transfers r=Cykesiopka,jcj	2017-04-03 17:17:38 -07:00
SignedCertificateTimestamp.cpp	Bug 1343202 - Move Buffer definition into its own file; r=keeler,rbarnes	2017-08-17 09:23:29 +02:00
SignedCertificateTimestamp.h	Bug 1343202 - Move Buffer definition into its own file; r=keeler,rbarnes	2017-08-17 09:23:29 +02:00
SignedTreeHead.h	…
StartComAndWoSignData.inc	…
moz.build	bug 1398932 - add a preference for enabling the sqlite-backed NSS databases r=Cykesiopka,jcj	2017-09-06 14:31:27 -07:00