wuggy/Dactyloidae
wuggy/Dactyloidae
1
0
Fork 0
mirror of https://repo.dactyloidae.xyz/Dactyloidae/UXP.git synced 2026-09-30 12:27:29 +09:00
Code Issues Projects Releases Packages Wiki Activity

Issue #2180 - Follow-up: Move sentinel check up a bit.

Browse source
This commit is contained in:
Moonchild 2023-03-28 17:59:19 +02:00 • committed by roytam1
commit f6f0a495a7
1 changed files with 7 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

12
security/manager/ssl/nsNSSComponent.cpp
View file

@ -1859,6 +1859,12 @@ nsNSSComponent::InitializeNSS()
SSL_OptionSetDefault(SSL_ENABLE_EXTENDED_MASTER_SECRET, true); SSL_OptionSetDefault(SSL_ENABLE_EXTENDED_MASTER_SECRET, true);
// Set TLS 1.3 hello downgrade sentinel?
bool enableDowngradeCheck =
Preferences::GetBool("security.tls.hello_downgrade_check",
HELLO_DOWNGRADE_CHECK_DEFAULT);
SSL_OptionSetDefault(SSL_ENABLE_HELLO_DOWNGRADE_CHECK, enableDowngradeCheck);
SSL_OptionSetDefault(SSL_ENABLE_FALSE_START, SSL_OptionSetDefault(SSL_ENABLE_FALSE_START,
Preferences::GetBool("security.ssl.enable_false_start", Preferences::GetBool("security.ssl.enable_false_start",
FALSE_START_ENABLED_DEFAULT)); FALSE_START_ENABLED_DEFAULT));
@ -1883,12 +1889,6 @@ nsNSSComponent::InitializeNSS()
Preferences::GetBool("security.ssl.enable_tls13_compat_mode", Preferences::GetBool("security.ssl.enable_tls13_compat_mode",
TLS13_COMPAT_MODE_DEFAULT)); TLS13_COMPAT_MODE_DEFAULT));
// Set TLS 1.3 hello downgrade sentinel?
bool enableDowngradeCheck =
Preferences::GetBool("security.tls.hello_downgrade_check",
HELLO_DOWNGRADE_CHECK_DEFAULT);
SSL_OptionSetDefault(SSL_ENABLE_HELLO_DOWNGRADE_CHECK, enableDowngradeCheck);
if (NS_FAILED(InitializeCipherSuite())) { if (NS_FAILED(InitializeCipherSuite())) {