Matt A. Tobin
5010fed2fd
Take nsSiteSecurityService out of UNIFIED_SOURCES
...
It exceeded the obj file sections limit because of the HSTS preload list so it cannot be built in UNIFIED mode.
2020-04-03 09:16:53 +08:00
wolfbeast
2c18f6df31
Issue #447 - Update HSTS preload list
2020-04-03 09:16:50 +08:00
wolfbeast
8778ddfc52
Issue #1467 - Part 4: Rename NSS_SQLSTORE to MOZ_SECURITY_SQLSTORE.
...
Rename the build config option accordingly.
2020-04-03 09:14:07 +08:00
wolfbeast
ff29b77edc
Issue #1467 - Part 3: Use UTF-8 file paths for NSS-SQL database.
2020-04-03 09:14:04 +08:00
wolfbeast
5efa1a9e43
Issue #1467 - Part 1: Set up conditional NSS-SQL builds.
...
- Adds buildconfig option --enable-nss-sqlstore
- Prefixes NSS dbinit with either sql: or dbm: depending on config
- Pre-initializes mozStorage when NSS-SQL storage is used to prevent
an sqlite3_config race in NSS Init
2020-04-03 09:12:04 +08:00
Matt A. Tobin
56f64bd775
Issue #1053 - Remove android support from nsNSSComponent.cpp
2020-03-05 09:38:27 +08:00
wolfbeast
ed6f10f477
Issue #447 - Update HSTS preload list & reduce debug spew
...
Commented out spewing dump() statements in loops. With the ever growing
HSTS list it takes too much time and is pointless to display.
2020-02-07 07:52:21 +08:00
wolfbeast
d12d260c6a
Be more consistent about decoding IP addresses in PSM.
2020-01-10 17:06:58 +08:00
wolfbeast
b753aec164
Issue #1118 - Part 6: Fix various tests that are no longer correct.
...
The behavior change of document.open() requires these tests to be
changed to account for the new spec behavior.
2019-12-28 21:20:04 +08:00
wolfbeast
a9481b02f7
Issue #447 - Update HSTS preload list
2019-11-22 10:53:07 +08:00
wolfbeast
08a2dbad4c
Issue #1289 - Part 3: Update tests.
2019-11-15 14:24:07 +08:00
wolfbeast
79593d40e1
Issue #1289 - Part 2: Clear out the preload list except for test
...
domains.
2019-11-15 14:24:05 +08:00
wolfbeast
e7ab106190
Issue #1289 - Part 1: Add a pref to disable HPKP header processing.
2019-11-15 14:24:03 +08:00
wolfbeast
c3dc56af72
Properly implement various HSTS states.
...
Previously, HSTS preload list values could be overridden temporarily due
to counter-intuitive behavior of the API's removeState function.
This adds an explicit flag to the API for writing knockout values to
the Site Security Service, with the default resetting to whatever the
preload list state is.
2019-09-06 23:50:01 +08:00
trav90
d5703962e7
Update HSTS preload list
...
Tag #447
2019-06-28 07:02:09 +08:00
wolfbeast
3a613f462d
Update HSTS preload list
...
Tag #447
2019-05-31 07:21:57 +08:00
adeshkp
6a0abd1cd5
Remove SecurityUI telemetry.
2019-04-27 08:23:50 +08:00
adeshkp
5193311ea5
Fix order of member variables in a couple of initializer lists
2019-03-16 07:04:11 +08:00
trav90
7c9325064a
Update HSTS preload list
...
Tag #447
2019-02-16 00:27:43 +08:00
Ascrod
b85fb498d9
Fix check for HSTS when service is disabled.
2019-02-16 00:24:25 +08:00
Ascrod
57ca286478
Add preference for fully disabling HSTS.
2019-02-16 00:24:23 +08:00
adeshkp
813140d8c7
Remove a pointless switch after telemetry cleanup
2019-02-16 00:24:07 +08:00
adeshkp
aea50f182f
Telemetry: Remove stubs and related code
2019-02-16 00:24:04 +08:00
trav90
651f0bfce6
Update HSTS preload list
...
Tag #447
2019-02-16 00:23:51 +08:00
trav90
cad597caf0
Update HSTS preload list
...
Tag #447
2019-02-16 00:22:33 +08:00
trav90
fa5aa7b3d8
Update HSTS preload list
...
Tag #447
2019-02-16 00:20:30 +08:00
wolfbeast
d8ccdaa0d9
Remove AccumulateCipherSuite()
...
This resolves #858
2019-02-16 00:19:07 +08:00
wolfbeast
64a8472788
Remove ancient workaround in client certificate code
...
Apparently a prehistoric server implementation would send a certificate_authorities field
that didn't include the outer DER SEQUENCE tag, so PSM attempted to detect this and
work around it.
This prehistoric server implementation isn't in use anywhere anymore, so this 18-yo
server bug workaround can be removed.
2019-02-16 00:18:40 +08:00
wolfbeast
6c4b9ec3ce
Make sure nsNSSCertList handling checks for valid certs.
2019-02-16 00:18:31 +08:00
trav90
37fe93abff
Update HSTS preload list
...
Tag #447
2019-02-16 00:18:13 +08:00
trav90
2bce502df7
Update HSTS preload list
...
Tag #447
2019-02-16 00:15:49 +08:00
wolfbeast
55c45dc7f2
Ensure we got an nsISSLStatus when deserializing in TransportSecurityInfo.
2019-02-16 00:15:09 +08:00
trav90
c576139ef2
Update HSTS preload list
...
Tag #447
2019-02-16 00:14:42 +08:00
wolfbeast
bd525435bf
Get rid of the incorrect mechanism to remove insecure fallback hosts.
...
This fixes #797 .
2019-02-16 00:14:39 +08:00
trav90
4f41aebb67
Update HSTS preload list
...
Tag #447
2019-02-16 00:13:42 +08:00
wolfbeast
8c8145e620
Remove all C++ Telemetry Accumulation calls.
...
This creates a number of stubs and leaves some surrounding code that may be irrelevant (eg. recorded time stamps, status variables).
Stub resolution/removal should be a follow-up to this.
2019-02-16 00:12:32 +08:00
wolfbeast
e2e197cada
Remove support for TLS session caches in TLSServerSocket.
...
This resolves #738
2019-02-16 00:12:22 +08:00
trav90
450c242d9f
Update HSTS preload list
...
Tag #447
2019-02-16 00:12:12 +08:00
wolfbeast
4debc9246e
Fix missed in32->int64 in df852120098dc7ba5df4a76126c6297c6d2d1b7b
...
Tag #709 .
2019-02-16 00:11:26 +08:00
wolfbeast
8effb3030e
Reinstate RC4 and mark 3DES weak.
...
Tag #709
2019-02-16 00:11:24 +08:00
wolfbeast
7f72783c00
Extend {EnabledWeakCiphers} bit field to allow more cipher suites.
...
Tag #709 .
2019-02-16 00:11:23 +08:00
trav90
b266e5e349
Update HSTS preload list
...
Tag #447
2019-02-16 00:10:17 +08:00
yami
4470fb65f3
replace "certErrorCodePrefix2" with "certErrorCodePrefix"
2019-02-16 00:09:37 +08:00
trav90
d8992204e1
Update HSTS preload list
...
Tag #447
2019-02-16 00:08:57 +08:00
wolfbeast
7b82a2ece4
Remove SSL Error Reporting telemetry
2019-02-16 00:06:16 +08:00
trav90
a179019413
Update HSTS preload list
...
Tag #447
2019-02-16 00:03:49 +08:00
wolfbeast
624aa2c581
Fix SSL status ambiguity.
...
- Adds CipherSuite string with the full suite
- Changes CipherName to be the actual cipher name instead of the (erroneous) full suite like Firefox does.
2019-02-16 00:03:48 +08:00
trav90
0c4e5ff00d
Regenerate the HSTS preload list
2019-02-16 00:01:48 +08:00
trav90
70b28bf2ee
Restore clearly-delimited format for the HSTS preload list
2019-02-16 00:01:46 +08:00
JustOff
7ff80ee648
Request NSS to use DBM as the storage file format
2019-02-16 00:01:09 +08:00