mirror of
https://repo.dactyloidae.xyz/Dactyloidae/UXP.git
synced 2026-09-22 08:27:31 +09:00
Update NSS to 3.35-RTM
This commit is contained in:
parent
fe49ad404e
commit
66dd670b60
388 changed files with 39075 additions and 20752 deletions
|
|
@ -66,7 +66,6 @@ class TlsAgent : public PollTarget {
|
|||
static const std::string kServerRsaSign;
|
||||
static const std::string kServerRsaPss;
|
||||
static const std::string kServerRsaDecrypt;
|
||||
static const std::string kServerRsaChain; // A cert that requires a chain.
|
||||
static const std::string kServerEcdsa256;
|
||||
static const std::string kServerEcdsa384;
|
||||
static const std::string kServerEcdsa521;
|
||||
|
|
@ -81,9 +80,11 @@ class TlsAgent : public PollTarget {
|
|||
adapter_->SetPeer(peer->adapter_);
|
||||
}
|
||||
|
||||
// Set a filter that can access plaintext (TLS 1.3 only).
|
||||
void SetTlsRecordFilter(std::shared_ptr<TlsRecordFilter> filter) {
|
||||
filter->SetAgent(this);
|
||||
adapter_->SetPacketFilter(filter);
|
||||
filter->EnableDecryption();
|
||||
}
|
||||
|
||||
void SetPacketFilter(std::shared_ptr<PacketFilter> filter) {
|
||||
|
|
@ -95,6 +96,7 @@ class TlsAgent : public PollTarget {
|
|||
void StartConnect(PRFileDesc* model = nullptr);
|
||||
void CheckKEA(SSLKEAType kea_type, SSLNamedGroup group,
|
||||
size_t kea_size = 0) const;
|
||||
void CheckOriginalKEA(SSLNamedGroup kea_group) const;
|
||||
void CheckAuthType(SSLAuthType auth_type,
|
||||
SSLSignatureScheme sig_scheme) const;
|
||||
|
||||
|
|
@ -121,12 +123,10 @@ class TlsAgent : public PollTarget {
|
|||
void SetupClientAuth();
|
||||
void RequestClientAuth(bool requireAuth);
|
||||
|
||||
void SetOption(int32_t option, int value);
|
||||
void ConfigureSessionCache(SessionResumptionMode mode);
|
||||
void SetSessionTicketsEnabled(bool en);
|
||||
void SetSessionCacheEnabled(bool en);
|
||||
void Set0RttEnabled(bool en);
|
||||
void SetFallbackSCSVEnabled(bool en);
|
||||
void SetShortHeadersEnabled();
|
||||
void SetVersionRange(uint16_t minver, uint16_t maxver);
|
||||
void GetVersionRange(uint16_t* minver, uint16_t* maxver);
|
||||
void CheckPreliminaryInfo();
|
||||
|
|
@ -136,7 +136,6 @@ class TlsAgent : public PollTarget {
|
|||
void ExpectReadWriteError();
|
||||
void EnableFalseStart();
|
||||
void ExpectResumption();
|
||||
void ExpectShortHeaders();
|
||||
void SkipVersionChecks();
|
||||
void SetSignatureSchemes(const SSLSignatureScheme* schemes, size_t count);
|
||||
void EnableAlpn(const uint8_t* val, size_t len);
|
||||
|
|
@ -149,15 +148,17 @@ class TlsAgent : public PollTarget {
|
|||
// Send data on the socket, encrypting it.
|
||||
void SendData(size_t bytes, size_t blocksize = 1024);
|
||||
void SendBuffer(const DataBuffer& buf);
|
||||
bool SendEncryptedRecord(const std::shared_ptr<TlsCipherSpec>& spec,
|
||||
uint16_t wireVersion, uint64_t seq, uint8_t ct,
|
||||
const DataBuffer& buf);
|
||||
// Send data directly to the underlying socket, skipping the TLS layer.
|
||||
void SendDirect(const DataBuffer& buf);
|
||||
void SendRecordDirect(const TlsRecord& record);
|
||||
void ReadBytes(size_t max = 16384U);
|
||||
void ResetSentBytes(); // Hack to test drops.
|
||||
void EnableExtendedMasterSecret();
|
||||
void CheckExtendedMasterSecret(bool expected);
|
||||
void CheckEarlyDataAccepted(bool expected);
|
||||
void DisableRollbackDetection();
|
||||
void EnableCompression();
|
||||
void SetDowngradeCheckVersion(uint16_t version);
|
||||
void CheckSecretsDestroyed();
|
||||
void ConfigNamedGroups(const std::vector<SSLNamedGroup>& groups);
|
||||
|
|
@ -170,6 +171,8 @@ class TlsAgent : public PollTarget {
|
|||
Role role() const { return role_; }
|
||||
std::string role_str() const { return role_ == SERVER ? "server" : "client"; }
|
||||
|
||||
SSLProtocolVariant variant() const { return variant_; }
|
||||
|
||||
State state() const { return state_; }
|
||||
|
||||
const CERTCertificate* peer_cert() const {
|
||||
|
|
@ -253,6 +256,7 @@ class TlsAgent : public PollTarget {
|
|||
const static char* states[];
|
||||
|
||||
void SetState(State state);
|
||||
void ValidateCipherSpecs();
|
||||
|
||||
// Dummy auth certificate hook.
|
||||
static SECStatus AuthCertificateHook(void* arg, PRFileDesc* fd,
|
||||
|
|
@ -388,7 +392,6 @@ class TlsAgent : public PollTarget {
|
|||
HandshakeCallbackFunction handshake_callback_;
|
||||
AuthCertificateCallbackFunction auth_certificate_callback_;
|
||||
SniCallbackFunction sni_callback_;
|
||||
bool expect_short_headers_;
|
||||
bool skip_version_checks_;
|
||||
};
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue