Commit graph

53 commits

Author SHA1 Message Date
wuggy
3a838106b9 re-introduce old nss im too tired for this 2026-06-30 06:37:32 +01:00
wuggy
81e97bbe4d Change (UXP) to (Dactylic) to avoid confusion 2026-06-29 21:32:34 +01:00
wuggy
8c2e376f94 Replace NSS with Pale Moon's 2026-06-29 21:29:25 +01:00
wuggy
9194104449 add SECStatus 2026-06-29 21:06:33 +01:00
wuggy
4548345ecc Add SECSuccess to PBECommonCacheItemsKDFLocked 2026-06-29 21:00:41 +01:00
roytam1
24413daff9 [NSS] revert "sync with https://github.com/roytam1/NSS/tree/NSS_3_48_UXP_BRANCH", this should fix a crash when browsing 2023-11-17 14:29:07 +08:00
roytam1
4e45ee69e0 [NSS] sync with https://github.com/roytam1/NSS/tree/NSS_3_48_UXP_BRANCH, notably:
- Bug 1665715 - (1/2) revert e8f2720c8254 (bug 1593141) because it's no longer necessary r=jcj (a9bca998)
- Bug 1665715 - (2/2) pass encoded signed certificate timestamp extension (if present) in CheckRevocation r=jcj (429f9ef9)
2023-11-17 11:01:12 +08:00
roytam1
1822f2031e Merge remote-tracking branch 'origin/tracking' into custom 2022-07-30 08:49:22 +08:00
Moonchild
a77cf423c2 [NSS] Avoid potential data race on primary password change. 2022-07-30 08:43:44 +08:00
Moonchild
b9084ea29d [NSS] protect SFTKSlot needLogin with slotLock. 2022-07-30 08:43:44 +08:00
roytam1
206c9dcbbf Merge remote-tracking branch 'origin/tracking' into custom 2022-07-05 17:28:42 +08:00
Moonchild
2706ef696d Update NSS 2022-07-05 17:21:07 +08:00
roytam1
43cfc69b25 imported changes from mozilla NSS:
- Bug 1759794 - protect SFTKSlot needLogin with slotLock. r=rrelyea (1bbd8d8c)
- Bug 1771497 - Uninitialized value in cert_VerifyCertChainOld. r=nss-reviewers,djackson (23be110c)
- Bug 1771495 - unchecked return code in sec_DecodeSigAlg. r=nss-reviewers,djackson (d4fb4b83)
- Bug 1771498 - Uninitialized value in cert_ComputeCertType. r=djackson (b28bc4cd)
- Bug 1764392 - Add DigitCert Roots r=nss-reviewers,jschanck (0863d9ec)
- Bug 1768970 - Add Certainly Roots. r=nss-reviewers,jschanck (6307e75b)
- Bug 1770267 - Add E-Tugra Roots. r=nss-reviewers,jschanck (9555008f)
- Bug 1759815 - Remove Hellenic Academic 2011 Root. r=nss-reviewers,jschanck (9c2cbf14)
- Bug 1764206 - Bump nssckbi version number for June. r=nss-reviewers,jschanck (b3acf3d9)
2022-06-17 11:00:44 +08:00
roytam1
5b0d1f871a imported changes from mozilla NSS:
- Bug 1737470 - Ensure DER encoded signatures are within size limits. r=jschanck,mt,bbeurdouche,rrelyea
- Bug 1735028 - check for missing signedData field r=keeler
and bump patch version.
2021-12-27 10:42:03 +08:00
roytam1
423d61a6f8 import changes from mozilla nss repo:
- Bug 1662515 - Fix incorrect alert after successful decryption r=djackson
- Bug 1721476 sqlite 3.34 changed it's open semantics, causing nss failures.
- Bug 1728394 - Add TunTrust Root CA certificate to NSS. r=KathleenWilson
- Bug 1717707 - Add HARICA TLS RSA Root CA 2021. r=KathleenWilson
- Bug 1717707 - Add HARICA TLS ECC Root CA 2021. r=KathleenWilson
- Bug 1717707 - Add HARICA Client RSA Root CA 2021. r=KathleenWilson
- Bug 1717707 - Add HARICA Client ECC Root CA 2021. r=KathleenWilson
2021-09-10 11:57:20 +08:00
roytam1
ee11f1749b Merge remote-tracking branch 'origin/master' into custom 2020-12-02 09:58:28 +08:00
Moonchild
d8fdbcd88c [NSS] Version and build bump 2020-12-02 09:57:49 +08:00
roytam1
75e16e5121 partly import changes from tenfourfox:
- #627: M1631583 M1631597 M1636771 M1637222 M1649316 M1651520 (2373458b5)
- #627: M1631573 (0abd0fc5d)
2020-10-09 21:23:26 +08:00
Roy Tam
eeb44de4a1 Merge remote-tracking branch 'origin/master' into custom 2020-09-04 22:34:20 +08:00
Moonchild
38470e4fe9 [NSS] Version and build bump 2020-09-04 22:30:57 +08:00
J.C. Jones
0e23c7cc48 [NSS] Prevent slotLock race in NSC_GetTokenInfo
Basically, NSC_GetTokenInfo doesn't lock slot->slotLock before accessing slot
after obtaining it, even though slotLock is defined as its lock.
2020-09-04 22:30:55 +08:00
Roy Tam
3d5ac98e9d Merge remote-tracking branch 'origin/master' into custom 2020-07-10 22:22:14 +08:00
Moonchild
9890572c8e [NSS] Version and build bump 2020-07-10 22:18:56 +08:00
Roy Tam
5c4cee240f Merge remote-tracking branch 'origin/master' into custom 2020-06-06 07:27:53 +08:00
Moonchild
ca3ce88bd1 [NSS] Bump NSS version 2020-06-06 07:21:18 +08:00
Roy Tam
678ad26488 Merge remote-tracking branch 'origin/master' into custom 2020-01-24 09:39:16 +08:00
Kai Engert
a8daf97de0 Issue #1338 - Follow-up: Also cache the most recent PBKDF1 hash
This rewrites the caching mechanism to apply to both PBKDF1 and PBKDF2
2020-01-24 09:36:33 +08:00
wolfbeast
abb2afe2a7 Issue #1338 - Bump NSS version
Our NSS version is closer to the currently-released .1, so bump version
to that.
Note: we still have some additional patches to the in-tree version in
place so this isn't a 100% match to the RTM one.
2020-01-24 09:28:39 +08:00
Roy Tam
969d239b65 Merge remote-tracking branch 'origin/master' into custom 2020-01-17 09:24:31 +08:00
Kai Engert
3d75257e8d Issue #1338: Follow-up: Cache the most recent PBKDF2 password hash,
to speed up repeated SDR operations.

Landed on NSS-3.48 for Bug 1606992
2020-01-17 09:15:04 +08:00
wolfbeast
c57cac24e8 Issue #1338 - Part 2: Update NSS to 3.48-RTM 2020-01-05 11:42:29 +08:00
Roy Tam
9778f15c7d import NSS tip revs: bug1594965, bug1593167, bug1603027, bug1600144, bug1590001, bug1603257, bug1605545, bug1513586 2020-01-03 22:08:56 +08:00
Roy Tam
171849c8e5 Update NSS to 3.48 while keeping vc2013 hackfix and no-sslkeylogfile intact. 2020-01-03 13:36:26 +08:00
Roy Tam
8c7f5dcc57 Merge remote-tracking branch 'origin/master' into custom 2019-12-07 06:55:51 +08:00
Craig Disselkoen
b7f6024e34 [NSS] Bug 1586176 - EncryptUpdate should use maxout not block size. 2019-12-07 06:55:10 +08:00
J.C. Jones
0916deba59 [NSS] Bug 1508776 - Remove unneeded refcounting from SFTKSession
SFTKSession objects are only ever actually destroyed at PK11 session
closure, as the session is always the final holder -- and asserting
refCount == 1 shows that to be true. Because of that, NSC_CloseSession
can just call `sftk_DestroySession` directly and leave
`sftk_FreeSession` as a no-op to be removed in the future.
2019-12-07 06:55:07 +08:00
Roy Tam
eb4044be79 updated to nss-3.44.3 2019-11-22 11:14:22 +08:00
Roy Tam
240ca3c878 update NSS to 3.44.2 2019-10-22 10:23:28 +08:00
Roy Tam
d4b834111b nss: update to 3.44.1, with vc2013 fix and gyp fix 2019-06-24 21:44:17 +08:00
Roy Tam
b314cfa402 nss: go back to 3.43 release 2019-04-25 12:03:02 +08:00
Roy Tam
0daf4d9cc9 nss: update nss to hg rev 2d6adc7d8bfc with vc2013 hackfix 2019-04-19 13:08:07 +08:00
Roy Tam
dcdc5d70e0 nss: update nss to hg rev e5e10a46b9ad with vc2013 hackfix 2019-04-06 10:14:46 +08:00
Roy Tam
b0e724dc85 nss: update nss to hg rev 395a93dbc02e with vc2013 patch applied 2019-02-22 22:05:00 +08:00
wolfbeast
5f0986e66f Update NSS to 3.41 2019-02-16 00:22:24 +08:00
wolfbeast
d36d4eb674 Update NSS to 3.38
- Added HACL*Poly1305 32-bit (INRIA/Microsoft)
- Updated to final TLS 1.3 draft version (28)
- Removed TLS 1.3 prerelease draft limit check
- Removed NPN code
- Enabled dev/urandom-only RNG on Linux with NSS_SEED_ONLY_DEV_URANDOM for non-standard environments
- Fixed several bugs with TLS 1.3 negotiation
- Updated internal certificate store
- Added support for the TLS Record Size Limit Extension.
- Fixed CVE-2018-0495
- Various security fixes in the ASN.1 code.
2019-02-16 00:11:10 +08:00
JustOff
fe96962962 Update NSS to 3.36.4-RTM 2019-02-16 00:02:32 +08:00
wolfbeast
608f9fca02 Update NSS to 3.35-RTM 2019-02-16 00:01:03 +08:00
NTD
da15587e4a Partially revert 1ef526f0f - sftkpwd.c
#82 #265
2019-02-15 23:51:37 +08:00
wolfbeast
9e32522120 Revert "Update NSS to 3.35-RTM"
This reverts commit f1a0f0a56fdd0fc39f255174ce08c06b91c66c94.
2019-02-15 23:50:26 +08:00
wolfbeast
522a346ef8 Strengthen the use of the Master Password.
- Use 30k iterations instead of 1.
- Enforce minimum password length of 8 characters.
- Adjust strength meter accordingly.

This resolves #82.
2019-02-15 23:46:38 +08:00