wuggy
3a838106b9
re-introduce old nss im too tired for this
2026-06-30 06:37:32 +01:00
wuggy
8c2e376f94
Replace NSS with Pale Moon's
2026-06-29 21:29:25 +01:00
roytam1
f5307ea861
nss: update certdata and bump ckbi version to 2.80
...
- Bug 1974511 - Add SwissSign 2022 Roots to NSS r=jschanck
- Bug 1972391 - Add TrustAsia Dedicated Roots to NSS r=jschanck
- Bug 1961848 - Remove expired Baltimore CyberTrust Root r=jschanck
- Bug 1978677 - remove expired explicitly distrusted DigiNotar lookalike root r=nss-reviewers,jschanck
2025-08-21 15:54:50 +08:00
roytam1
bde8fbbb5f
nss: merge changes from upstream UXP
2025-06-28 06:31:32 +08:00
roytam1
cd1840493f
nss: update certdata and bump ckbi version to 2.78
2025-06-28 00:41:36 +08:00
roytam1
5384bb6d14
nss: update builtin certstore and bump ckbi version
2025-04-30 23:07:58 +08:00
roytam1
0a18b05efd
nss: update nssckbi to 2.74
2025-02-13 21:22:34 +08:00
roytam1
e26468c8a2
nss: update nssckbi to 2.72
2024-11-29 21:04:06 +08:00
roytam1
b794ec0afd
nss: update nssckbi to 2.68
2024-06-09 07:15:57 +08:00
roytam1
ab39f724a8
nss: update nssckbi to 2.66
2024-05-26 06:58:33 +08:00
roytam1
96524cc3c5
nss: update nssckbi to 2.64
2023-11-16 10:15:29 +08:00
roytam1
e7c19e1155
nss: update nssckbi to 2.62
2023-08-24 10:08:25 +08:00
roytam1
58af5d4b99
imported changes from mozilla NSS:
...
- Bug 1794495 - Remove Network Solutions Certificate Authority. r=KathleenWilson (64a28c8d60)
- Bug 1794507 - Remove SwissSign Platinum CA - G2 from NSS. r=KathleenWilson (f2c2308403)
- Bug 1797559 - Remove EC-ACC root cert from NSS. r=KathleenWilson (4f1985c8dd)
- Bug 1799038 - Remove Staat der Nederlanden EV Root CA from NSS. r=KathleenWilson (9151be4c45)
- Bug 1794506 - Set nssckbi version number to 2.60. r=nss-reviewers,bbeurdouche (39fc42e136)
- Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates. r=KathleenWilson (a871902c05)
2022-12-07 13:24:50 +08:00
roytam1
29846d1e4d
update NSS builtin certstore to Sep 2022 version from mozilla upstream.
2022-09-19 15:11:02 +08:00
roytam1
43cfc69b25
imported changes from mozilla NSS:
...
- Bug 1759794 - protect SFTKSlot needLogin with slotLock. r=rrelyea (1bbd8d8c)
- Bug 1771497 - Uninitialized value in cert_VerifyCertChainOld. r=nss-reviewers,djackson (23be110c)
- Bug 1771495 - unchecked return code in sec_DecodeSigAlg. r=nss-reviewers,djackson (d4fb4b83)
- Bug 1771498 - Uninitialized value in cert_ComputeCertType. r=djackson (b28bc4cd)
- Bug 1764392 - Add DigitCert Roots r=nss-reviewers,jschanck (0863d9ec)
- Bug 1768970 - Add Certainly Roots. r=nss-reviewers,jschanck (6307e75b)
- Bug 1770267 - Add E-Tugra Roots. r=nss-reviewers,jschanck (9555008f)
- Bug 1759815 - Remove Hellenic Academic 2011 Root. r=nss-reviewers,jschanck (9c2cbf14)
- Bug 1764206 - Bump nssckbi version number for June. r=nss-reviewers,jschanck (b3acf3d9)
2022-06-17 11:00:44 +08:00
roytam1
3336114a36
[NSS] ported mozilla upstream changes:
...
- Bug 1552254 internal_error alert on Certificate Request with sha1+ecdsa in TLS 1.3 (be6a9782)
- Bug 1753535 - Remove obsolete stateEnd check in SEC_ASN1DecoderUpdate. r=rrelyea (800111fa)
- Bug 1756271 - Remove token member from NSSSlot struct. r=rrelyea (55052f78)
- Bug 1396616 - Update nssUTF8_Length to RFC 3629 and fix buffer overrun. r=nss-reviewers,jschanck (2f2c8564)
- Bug 1755264 - TLS 1.3 Illegal legacy_version handling/alerts. r=djackson (7d931c59)
- Bug 1751305 - Remove expired explicitly distrusted certificates from certdata.txt. r=KathleenWilson (b722e523)
- Bug 1751298 - Add Telia Root CA v2 root certificate. r=KathleenWilson (1fcbbd7e)
- Bug 1754890 - Add two D-TRUST 2020 root certificates. r=KathleenWilson (f63fb86d)
2022-03-25 23:38:11 +08:00
roytam1
fceddf74e6
update NSS builtin certstore to Dec 2021 version from mozilla upstream.
2021-12-20 09:20:26 +08:00
roytam1
423d61a6f8
import changes from mozilla nss repo:
...
- Bug 1662515 - Fix incorrect alert after successful decryption r=djackson
- Bug 1721476 sqlite 3.34 changed it's open semantics, causing nss failures.
- Bug 1728394 - Add TunTrust Root CA certificate to NSS. r=KathleenWilson
- Bug 1717707 - Add HARICA TLS RSA Root CA 2021. r=KathleenWilson
- Bug 1717707 - Add HARICA TLS ECC Root CA 2021. r=KathleenWilson
- Bug 1717707 - Add HARICA Client RSA Root CA 2021. r=KathleenWilson
- Bug 1717707 - Add HARICA Client ECC Root CA 2021. r=KathleenWilson
2021-09-10 11:57:20 +08:00
roytam1
6026e19d20
update NSS builtin certstore to May 2021 version from mozilla upstream.
2021-05-31 10:23:28 +08:00
roytam1
ee3eabdb1e
sync NSS builtin cert store up to mozilla nss hg rev f8c49b33:
...
- Bug 1670769 - Remove 10 GeoTrust, thawte, and VeriSign root certs from NSS. r=kjacobs,KathleenWilson
- Bug 1678166 - Add NAVER Global Root Certification Authority root cert to NSS. r=bbeurdouche,KathleenWilson
- Bug 1678189 - December 2020 batch of root changes, NSS_BUILTINS_LIBRARY_VERSION 2.46. r=bbeurdouche
2020-12-02 10:04:43 +08:00
roytam1
ee11f1749b
Merge remote-tracking branch 'origin/master' into custom
2020-12-02 09:58:28 +08:00
Moonchild
b71804f4a3
[NSS] Update root certificates.
2020-12-02 09:57:48 +08:00
roytam1
06a2891ef7
import certdata changes from NSS upstream:
...
- Bug 1651211 - Remove EE Certification Centre Root CA root cert. r=KathleenWilson,jcj
- Bug 1653092 - Disable server trust bit for OISTE WISeKey Global Root GA CA root cert. r=KathleenWilson,jcj
- Bug 1656077 - Remove Taiwan Government Root Certification Authority root cert. r=KathleenWilson,jcj
- Bug 1663049 - Add SecureTrust's Trustwave Global root certificates to NSS. r=KathleenWilson,jcj
- Bug 1663049 - September 2020 batch of root changes, NSS_BUILTINS_LIBRARY_VERSION 2.44. r=jcj
2020-09-19 07:05:30 +08:00
Roy Tam
8015bb7004
update NSS as-of pm27 rev 7606140ee
2020-09-04 22:55:34 +08:00
wolfbeast
c57cac24e8
Issue #1338 - Part 2: Update NSS to 3.48-RTM
2020-01-05 11:42:29 +08:00
Roy Tam
171849c8e5
Update NSS to 3.48 while keeping vc2013 hackfix and no-sslkeylogfile intact.
2020-01-03 13:36:26 +08:00
Roy Tam
dcdc5d70e0
nss: update nss to hg rev e5e10a46b9ad with vc2013 hackfix
2019-04-06 10:14:46 +08:00
wolfbeast
5f0986e66f
Update NSS to 3.41
2019-02-16 00:22:24 +08:00
wolfbeast
d36d4eb674
Update NSS to 3.38
...
- Added HACL*Poly1305 32-bit (INRIA/Microsoft)
- Updated to final TLS 1.3 draft version (28)
- Removed TLS 1.3 prerelease draft limit check
- Removed NPN code
- Enabled dev/urandom-only RNG on Linux with NSS_SEED_ONLY_DEV_URANDOM for non-standard environments
- Fixed several bugs with TLS 1.3 negotiation
- Updated internal certificate store
- Added support for the TLS Record Size Limit Extension.
- Fixed CVE-2018-0495
- Various security fixes in the ASN.1 code.
2019-02-16 00:11:10 +08:00
wolfbeast
608f9fca02
Update NSS to 3.35-RTM
2019-02-16 00:01:03 +08:00
wolfbeast
9e32522120
Revert "Update NSS to 3.35-RTM"
...
This reverts commit f1a0f0a56fdd0fc39f255174ce08c06b91c66c94.
2019-02-15 23:50:26 +08:00
wolfbeast
66dd670b60
Update NSS to 3.35-RTM
2019-02-15 23:33:36 +08:00
wolfbeast
c91ef9012b
Update NSS to 3.32.1-RTM
2019-02-15 23:29:46 +08:00
Roy Tam
dcd9973243
import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo
2018-01-19 03:59:58 +08:00