gecko-dev/security
David Keeler 0c092c0ffe bug 1428498 - don't require importing the server certificate for overrides to succeed r=jcj
Previously, adding a permanent certificate error override would depend on
successfully importing the server's certificate into the user's certificate
database. Consequently, if the user's database were in read-only mode (or if the
database couldn't be created due to code page issues on Windows), this would
prevent adding new certificate error overrides. It turns out this isn't even
necessary, because the implementation relies on the stored hash of the
certificate rather than the certificate itself. The stored certificate is only
for display purposes (and there's a fallback if the certificate can't be
stored).

There are remaining issues with non-ASCII characters in 8.3 paths on Windows
when the code page isn't western, but this is a larger issue that must be
addressed in other layers (i.e. NSS/NSPR).

MozReview-Commit-ID: KEzjxtAoeb4

--HG--
rename : security/manager/ssl/tests/unit/test_cert_overrides.js => security/manager/ssl/tests/unit/test_cert_overrides_read_only.js
extra : rebase_source : b41e863d8c85d80335dd56c8f5765b19b1de4e0c
2018-01-04 11:31:22 -08:00
..
apps bug 1421413 - add a preference to control which add-on signature algorithms are valid r=jcj 2017-11-28 14:24:11 -08:00
certverifier Bug 1394734 - Replace CONFIG['MSVC'] by CONFIG['CC_TYPE'] r=glandium 2017-12-08 13:46:13 +01:00
manager bug 1428498 - don't require importing the server certificate for overrides to succeed r=jcj 2018-01-04 11:31:22 -08:00
nss Bug 1420060 - land NSS 04fc9a90997b UPGRADE_NSS_RELEASE, r=me 2017-12-19 15:26:12 +01:00
pkix Bug 1198481 - Fixed typo 'id_pk_serverAuth' to 'id_kp_serverAuth'. r=keeler 2017-12-02 18:03:18 +05:30
sandbox Bug 1297740. r=jld 2018-01-08 10:07:16 +01:00
.eslintrc.js Bug 1392119 - Enable the ESLint no-caller rule across mozilla-central r=standard8 2017-08-23 13:38:24 +01:00
generate_certdata.py Bug 1402012 - Update buildconfig.py to use PartialConfigEnvironment; r=glandium 2017-08-24 22:52:01 -04:00
generate_mapfile.py Bug 1350362 Fix NSS Build System for MinGW r=ted 2017-05-12 11:39:00 -05:00
moz.build Bug 1394734 - Simplify various corner cases r=glandium 2017-12-07 22:10:19 +01:00
nss.symbols Bug 1401594 - land NSS NSS_3_34_BETA1 UPGRADE_NSS_RELEASE, r=me 2017-11-01 15:38:36 +01:00