Commit graph

264 commits

Author SHA1 Message Date
wuggy
786d6395a5 Remove the damn shim, causing issues and I will fix it later (13.3 plan) 2026-07-11 18:51:29 +01:00
wuggy
b725d2f0e0 shim pt 2 or whatever 2026-07-06 12:59:25 +01:00
wuggy
60bc7b282e Change to ulwDecodePointer 2026-07-06 12:53:50 +01:00
wuggy
bf743d6699 Compatibility shim for DecodePointer 2026-07-06 12:50:16 +01:00
wuggy
3a838106b9 re-introduce old nss im too tired for this 2026-06-30 06:37:32 +01:00
wuggy
81e97bbe4d Change (UXP) to (Dactylic) to avoid confusion 2026-06-29 21:32:34 +01:00
wuggy
8c2e376f94 Replace NSS with Pale Moon's 2026-06-29 21:29:25 +01:00
wuggy
9194104449 add SECStatus 2026-06-29 21:06:33 +01:00
wuggy
4548345ecc Add SECSuccess to PBECommonCacheItemsKDFLocked 2026-06-29 21:00:41 +01:00
wuggy
29bfa4fc7f IT LAUNCHES ON OS X 2026-04-05 02:08:42 +01:00
Moonchild
96a9380208 [NSS] Update NSS 2026-03-06 04:32:10 +00:00
roytam1
e5ea29554a Merge remote-tracking branch 'origin/tracking' into custom 2025-08-21 16:07:53 +08:00
Moonchild
fe21538da4 [NSS] Avoid leak in pkcs12 decoder. 2025-08-21 16:07:31 +08:00
roytam1
f5307ea861 nss: update certdata and bump ckbi version to 2.80
- Bug 1974511 - Add SwissSign 2022 Roots to NSS r=jschanck
- Bug 1972391 - Add TrustAsia Dedicated Roots to NSS r=jschanck
- Bug 1961848 - Remove expired Baltimore CyberTrust Root r=jschanck
- Bug 1978677 - remove expired explicitly distrusted DigiNotar lookalike root r=nss-reviewers,jschanck
2025-08-21 15:54:50 +08:00
roytam1
bde8fbbb5f nss: merge changes from upstream UXP 2025-06-28 06:31:32 +08:00
roytam1
cd1840493f nss: update certdata and bump ckbi version to 2.78 2025-06-28 00:41:36 +08:00
roytam1
6414271c91 Merge remote-tracking branch 'origin/tracking' into custom 2025-06-17 09:32:50 +08:00
Moonchild
5960178802 Issue #2723 - Remove obsolete NPN prefs and callbacks.
NPN was removed from NSS a long time ago, this effectively does nothing.
ALPN also should be default-enabled (we do this by pref but the component
itself should have a sane default) so this was flipped as a drive-by fix.

Resolves #2723
2025-06-17 09:29:57 +08:00
roytam1
e72f8a3a81 Merge remote-tracking branch 'origin/tracking' into custom 2025-05-14 14:36:05 +08:00
Brian Smith
e8b3077d4f No Issue - Fixes for building with LLVM 19 included with FreeBSD 13.5. Fix a conflict with libc++ 19 and the old Mozilla (re)alloc macros. LLVM 18+ does not allow std::char_traits<unsigned char> so avoid it. https://bugzilla.mozilla.org/show_bug.cgi?id=1849070 Partial NSS upgrade to replace ByteString with a class. https://bugzilla.mozilla.org/show_bug.cgi?id=1851092 2025-05-14 14:20:07 +08:00
roytam1
5384bb6d14 nss: update builtin certstore and bump ckbi version 2025-04-30 23:07:58 +08:00
roytam1
6792dc4b66 Merge remote-tracking branch 'origin/tracking' into custom 2025-04-30 23:06:47 +08:00
Moonchild
be9a6ed2ac [NSS] Improve locking in nssPKIObject_GetInstances. 2025-04-30 23:03:04 +08:00
roytam1
0a18b05efd nss: update nssckbi to 2.74 2025-02-13 21:22:34 +08:00
roytam1
f7298813f9 Merge remote-tracking branch 'origin/tracking' into custom 2025-02-06 09:30:57 +08:00
Moonchild
dcb76fe0f7 [NSS] Ensure zero-initialization of collectArgs.cert 2025-02-06 09:25:33 +08:00
Moonchild
ecb18ddf57 [NSS] Simplify error handling in get_token_objects_for_cache. 2025-02-06 09:25:01 +08:00
roytam1
e26468c8a2 nss: update nssckbi to 2.72 2024-11-29 21:04:06 +08:00
roytam1
c6517989ab Merge remote-tracking branch 'origin/tracking' into custom 2024-11-29 21:00:51 +08:00
Kai Engert
e825209039 [NSS] Bug 1899402 - Correctly destroy bulkkey in error scenario. r=jschanck
Differential Revision: https://phabricator.services.mozilla.com/D223837

--HG--
extra : rebase_source : d06a6bb8d51bb844c814c5ee682a1b24de3e2e69
2024-11-29 20:55:45 +08:00
roytam1
b794ec0afd nss: update nssckbi to 2.68 2024-06-09 07:15:57 +08:00
roytam1
ab39f724a8 nss: update nssckbi to 2.66 2024-05-26 06:58:33 +08:00
roytam1
35252384aa Merge remote-tracking branch 'origin/tracking' into custom 2024-01-25 12:22:19 +08:00
Moonchild
462aac7d98 [HSTS] Let parent hosts determine whether HSTS subs should be applied.
This aligns with the wording in RFC 6797.
2024-01-25 12:14:06 +08:00
John Schanck
266b96a53a [NSS] add a defensive check for large ssl_DefSend return values. 2024-01-25 12:13:04 +08:00
roytam1
24413daff9 [NSS] revert "sync with https://github.com/roytam1/NSS/tree/NSS_3_48_UXP_BRANCH", this should fix a crash when browsing 2023-11-17 14:29:07 +08:00
roytam1
4e45ee69e0 [NSS] sync with https://github.com/roytam1/NSS/tree/NSS_3_48_UXP_BRANCH, notably:
- Bug 1665715 - (1/2) revert e8f2720c8254 (bug 1593141) because it's no longer necessary r=jcj (a9bca998)
- Bug 1665715 - (2/2) pass encoded signed certificate timestamp extension (if present) in CheckRevocation r=jcj (429f9ef9)
2023-11-17 11:01:12 +08:00
roytam1
96524cc3c5 nss: update nssckbi to 2.64 2023-11-16 10:15:29 +08:00
roytam1
c32aeee874 partly import changes from tenfourfox:
- update ESR base to 115; update EV roots, pins, TLDs, TZs; security pullup (55284dd80)
2023-09-01 10:07:24 +08:00
roytam1
e7c19e1155 nss: update nssckbi to 2.62 2023-08-24 10:08:25 +08:00
roytam1
e70aa9a4a1 Merge remote-tracking branch 'origin/tracking' into custom 2023-05-10 11:57:40 +08:00
Brian Smith
fae36a95ec No Issue - Updates to Mac packaging for notarization. Add Mac entitlements. Switch to using "create" instead of "makehybrid" when creating the disk image. This fixes bogus extended attributes which interfere with the code signature. Finally add any -bin or dylibs in the Resources folder since --deep skips that folder. 2023-05-10 11:57:07 +08:00
roytam1
725b27a0f5 Merge remote-tracking branch 'origin/tracking' into custom 2023-05-05 23:02:05 +08:00
Moonchild
a39fd9e75f Issue #1656 - Remove more vim control lines.
Vim control lines were re-introduced or not entirely cleaned up.
This nukes them again.
Removing from modules, netwerk, security, storage, testing, toolkit, and
a few scattered misc files. More to come.
2023-05-05 22:59:16 +08:00
roytam1
ead737cb49 Merge remote-tracking branch 'origin/tracking' into custom 2023-03-29 11:07:18 +08:00
Moonchild
f6f0a495a7 Issue #2180 - Follow-up: Move sentinel check up a bit. 2023-03-29 11:05:39 +08:00
Moonchild
dc4bf9b823 Issue #2180 - Add pref to control NSS TLS 1.3 protocol downgrade sentinel 2023-03-29 11:05:16 +08:00
Moonchild
ca93d4b42d Issue #1831 - Add an option to enable TLS 1.3 "compatibility" mode.
Critical note: this potentially reduces the strength of TLS 1.3 and
should only be enabled if absolutely necessary to access a site.
A browser restart is required for the pref change to take effect as it
is set on NSS initialization.

Resolves #1831
2023-03-29 11:04:44 +08:00
roytam1
85f6a49297 Merge remote-tracking branch 'origin/tracking' into custom 2023-03-15 22:52:23 +08:00
FranklinDM
0365f940fe Issue #2148 - Make Vector not use AlignedStorage for its inline element storage
See Bug 1338374 1/2
2023-03-15 22:50:40 +08:00