wuggy/Dactyloidae
wuggy/Dactyloidae
1
0
Fork 0
mirror of https://repo.dactyloidae.xyz/Dactyloidae/UXP.git synced 2026-09-06 07:48:38 +09:00
Code Issues Projects Releases Packages Wiki Activity
4,888 commits 7 branches 15 tags 557 MiB
Commit graph

65 commits

Author SHA1 Message Date
roytam1
a140666918 imported changes from mozilla NSS: 
- Bug 966856 - mozilla::pkix: support SHA-2 hashes in CertIDs in OCSP responses r=jschanck,djackson (78d2f4a3)
 2021-12-17 16:54:54 +08:00
roytam1
423d61a6f8 import changes from mozilla nss repo: 
- Bug 1662515 - Fix incorrect alert after successful decryption r=djackson
- Bug 1721476 sqlite 3.34 changed it's open semantics, causing nss failures.
- Bug 1728394 - Add TunTrust Root CA certificate to NSS. r=KathleenWilson
- Bug 1717707 - Add HARICA TLS RSA Root CA 2021. r=KathleenWilson
- Bug 1717707 - Add HARICA TLS ECC Root CA 2021. r=KathleenWilson
- Bug 1717707 - Add HARICA Client RSA Root CA 2021. r=KathleenWilson
- Bug 1717707 - Add HARICA Client ECC Root CA 2021. r=KathleenWilson
 2021-09-10 11:57:20 +08:00
roytam1
6026e19d20 update NSS builtin certstore to May 2021 version from mozilla upstream. 2021-05-31 10:23:28 +08:00
roytam1
c082741e8a import changes from mozilla nss repo: 
- Bug 1682863 - Revert nssSlot_IsTokenPresent to 3.58 after ongoing Fx hangs with slow PKCS11 devices. r=bbeurdouche
- Bug 1680400 - Fix memory leak in PK11_UnwrapPrivKey. r=bbeurdouche
 2020-12-30 08:33:37 +08:00
roytam1
ecf2071a46 import changes from mozilla nss repo: 
- Bug 1641480, TLS 1.3: tighten CCS handling in compatibility mode, r=mt
- Bug 1672703, always tolerate the first CCS in TLS 1.3, r=mt
- Bug 1663661 - Guard against NULL token in nssSlot_IsTokenPresent. r=jcj
- Bug 1607449 - Lock cert->nssCertificate to prevent data race. r=jcj,keeler
- Bug 1679290 - Don't hold slot lock when taking session lock r=bbeurdouche
 2020-12-02 10:52:47 +08:00
roytam1
ee3eabdb1e sync NSS builtin cert store up to mozilla nss hg rev f8c49b33: 
- Bug 1670769 - Remove 10 GeoTrust, thawte, and VeriSign root certs from NSS. r=kjacobs,KathleenWilson
- Bug 1678166 - Add NAVER Global Root Certification Authority root cert to NSS. r=bbeurdouche,KathleenWilson
- Bug 1678189 - December 2020 batch of root changes, NSS_BUILTINS_LIBRARY_VERSION 2.46. r=bbeurdouche
 2020-12-02 10:04:43 +08:00
roytam1
ee11f1749b Merge remote-tracking branch 'origin/master' into custom 2020-12-02 09:58:28 +08:00
Moonchild
d8fdbcd88c [NSS] Version and build bump 2020-12-02 09:57:49 +08:00
Moonchild
b71804f4a3 [NSS] Update root certificates. 2020-12-02 09:57:48 +08:00
roytam1
75e16e5121 partly import changes from tenfourfox: 
- #627: M1631583 M1631597 M1636771 M1637222 M1649316 M1651520 (2373458b5)
- #627: M1631573 (0abd0fc5d)
 2020-10-09 21:23:26 +08:00
roytam1
56aaf6a15a Merge remote-tracking branch 'origin/master' into custom 2020-09-25 22:18:48 +08:00
Moonchild
9305760571 Issue #1656 - Part 9: Single-line-comment style. 2020-09-25 22:07:00 +08:00
Moonchild
538b420319 Issue #1656 - Part 4: Manual cleanup 2020-09-25 22:04:20 +08:00
Moonchild
d7a4abc3d4 Issue #1656 - Part 4: Tackle *.idl, *.css, *.ipdlh, *.webidl, *.cc 2020-09-25 22:04:18 +08:00
Moonchild
8c395520d9 Issue #1656 - Part 1: Nuke most vim config lines in the tree. 
Since these are just interpreted comments, there's 0 impact on actual code.
This removes all lines that match /* vim: set(.*)tw=80: */ with S&R -- there are
a few others scattered around which will be removed manually in a second part.
 2020-09-25 22:04:12 +08:00
roytam1
06a2891ef7 import certdata changes from NSS upstream: 
- Bug 1651211 - Remove EE Certification Centre Root CA root cert. r=KathleenWilson,jcj
- Bug 1653092 - Disable server trust bit for OISTE WISeKey Global Root GA CA root cert. r=KathleenWilson,jcj
- Bug 1656077 - Remove Taiwan Government Root Certification Authority root cert. r=KathleenWilson,jcj
- Bug 1663049 - Add SecureTrust's Trustwave Global root certificates to NSS. r=KathleenWilson,jcj
- Bug 1663049 - September 2020 batch of root changes, NSS_BUILTINS_LIBRARY_VERSION 2.44. r=jcj
 2020-09-19 07:05:30 +08:00
roytam1
1455a4fcbd import change from tenfourfox: 
- fix overzealous assertion (M1531906) (af9a8236e)
 2020-09-19 07:05:02 +08:00
Roy Tam
8015bb7004 update NSS as-of pm27 rev 7606140ee 2020-09-04 22:55:34 +08:00
Roy Tam
eeb44de4a1 Merge remote-tracking branch 'origin/master' into custom 2020-09-04 22:34:20 +08:00
Moonchild
38470e4fe9 [NSS] Version and build bump 2020-09-04 22:30:57 +08:00
J.C. Jones
0e23c7cc48 [NSS] Prevent slotLock race in NSC_GetTokenInfo 
Basically, NSC_GetTokenInfo doesn't lock slot->slotLock before accessing slot
after obtaining it, even though slotLock is defined as its lock.
 2020-09-04 22:30:55 +08:00
Roy Tam
3d5ac98e9d Merge remote-tracking branch 'origin/master' into custom 2020-07-10 22:22:14 +08:00
Moonchild
9890572c8e [NSS] Version and build bump 2020-07-10 22:18:56 +08:00
Sohaib ul Hassan
62467c473d [NSS] Implement constant-time GCD and modular inversion 
The implementation is based on the work by Bernstein and Yang
(https://eprint.iacr.org/2019/266)
"Fast constant-time gcd computation and modular inversion".

It fixes the old mp_gcd and s_mp_invmod_odd_m functions. The patch also fixes
mpl_significant_bits s_mp_div_2d and s_mp_mul_2d by having less control flow to
reduce side-channel leaks.

Co-authored by : Billy Bob Brumley
 2020-07-10 22:18:52 +08:00
Roy Tam
5c4cee240f Merge remote-tracking branch 'origin/master' into custom 2020-06-06 07:27:53 +08:00
Moonchild
ca3ce88bd1 [NSS] Bump NSS version 2020-06-06 07:21:18 +08:00
Moonchild
4789fee7cf [NSS] Force a fixed length for DSA exponentiation 2020-06-06 07:21:15 +08:00
Roy Tam
4ecaa49dd0 Merge remote-tracking branch 'origin/master' into custom 2020-04-03 09:57:28 +08:00
athenian200
768fad9864 Issue #1501 - Un-bust building of NSS after update to 3.48 on Solaris. 2020-04-03 09:30:25 +08:00
Roy Tam
678ad26488 Merge remote-tracking branch 'origin/master' into custom 2020-01-24 09:39:16 +08:00
Kai Engert
a8daf97de0 Issue #1338 - Follow-up: Also cache the most recent PBKDF1 hash 
This rewrites the caching mechanism to apply to both PBKDF1 and PBKDF2
 2020-01-24 09:36:33 +08:00
wolfbeast
abb2afe2a7 Issue #1338 - Bump NSS version 
Our NSS version is closer to the currently-released .1, so bump version
to that.
Note: we still have some additional patches to the in-tree version in
place so this isn't a 100% match to the RTM one.
 2020-01-24 09:28:39 +08:00
Roy Tam
969d239b65 Merge remote-tracking branch 'origin/master' into custom 2020-01-17 09:24:31 +08:00
Kai Engert
3d75257e8d Issue #1338: Follow-up: Cache the most recent PBKDF2 password hash, 
to speed up repeated SDR operations.

Landed on NSS-3.48 for Bug 1606992
 2020-01-17 09:15:04 +08:00
Roy Tam
f9aa123602 Merge remote-tracking branch 'origin/master' into custom 2020-01-11 06:48:56 +08:00
Daiki Ueno
75fdf9c3b0 Issue #1338 - Followup: certdb: propagate trust information if trust 
module is loaded afterwards,

Summary: When the builtin trust module is loaded after some temp certs
being created, these temp certs are usually not accompanied by trust
information. This causes a problem in UXP as it loads the module from a
separate thread while accessing the network cache which populates temp
certs.

This change makes it properly roll up the trust information, if a temp
cert doesn't have trust information.
 2020-01-11 06:47:38 +08:00
wolfbeast
b299b34492 Issue #1338 - Un-bust building of NSS after update to 3.48 on Linux. 2020-01-11 06:47:34 +08:00
wolfbeast
c57cac24e8 Issue #1338 - Part 2: Update NSS to 3.48-RTM 2020-01-05 11:42:29 +08:00
Roy Tam
9778f15c7d import NSS tip revs: bug1594965, bug1593167, bug1603027, bug1600144, bug1590001, bug1603257, bug1605545, bug1513586 2020-01-03 22:08:56 +08:00
Roy Tam
171849c8e5 Update NSS to 3.48 while keeping vc2013 hackfix and no-sslkeylogfile intact. 2020-01-03 13:36:26 +08:00
Roy Tam
8c7f5dcc57 Merge remote-tracking branch 'origin/master' into custom 2019-12-07 06:55:51 +08:00
Craig Disselkoen
b7f6024e34 [NSS] Bug 1586176 - EncryptUpdate should use maxout not block size. 2019-12-07 06:55:10 +08:00
J.C. Jones
0916deba59 [NSS] Bug 1508776 - Remove unneeded refcounting from SFTKSession 
SFTKSession objects are only ever actually destroyed at PK11 session
closure, as the session is always the final holder -- and asserting
refCount == 1 shows that to be true. Because of that, NSC_CloseSession
can just call `sftk_DestroySession` directly and leave
`sftk_FreeSession` as a no-op to be removed in the future.
 2019-12-07 06:55:07 +08:00
Roy Tam
eb4044be79 updated to nss-3.44.3 2019-11-22 11:14:22 +08:00
Roy Tam
240ca3c878 update NSS to 3.44.2 2019-10-22 10:23:28 +08:00
Roy Tam
d4b834111b nss: update to 3.44.1, with vc2013 fix and gyp fix 2019-06-24 21:44:17 +08:00
Roy Tam
b314cfa402 nss: go back to 3.43 release 2019-04-25 12:03:02 +08:00
Roy Tam
0daf4d9cc9 nss: update nss to hg rev 2d6adc7d8bfc with vc2013 hackfix 2019-04-19 13:08:07 +08:00
Roy Tam
dcdc5d70e0 nss: update nss to hg rev e5e10a46b9ad with vc2013 hackfix 2019-04-06 10:14:46 +08:00
Roy Tam
b0e724dc85 nss: update nss to hg rev 395a93dbc02e with vc2013 patch applied 2019-02-22 22:05:00 +08:00