athenian200
768fad9864
Issue #1501 - Un-bust building of NSS after update to 3.48 on Solaris.
2020-04-03 09:30:25 +08:00
wolfbeast
052b2e70a3
Issue #1280 - Un-bust certerror pages and ForgetAboutSite
2020-04-03 09:30:07 +08:00
wolfbeast
593ea86a68
Issue #1280 - Part 2: Remove HPKP tests.
2020-04-03 09:27:13 +08:00
wolfbeast
cf5f069080
Issue #1280 - Part 1: Remove HPKP components.
...
This also removes leftover plumbing for storing preload information
in SiteSecurityService since no service still uses it.
2020-04-03 09:27:11 +08:00
wolfbeast
ff8c58e8db
Issue #1498 - Part 6: Remove STS preloadlist pref.
2020-04-03 09:22:00 +08:00
wolfbeast
be0246f8e4
Issue #1498 - Part 5: Update SSService CID and correct mismatch.
2020-04-03 09:21:57 +08:00
wolfbeast
6fe7731e5e
Issue #1498 - Part 4: Remove clearPreloads.
...
Also tag #1280
2020-04-03 09:21:53 +08:00
wolfbeast
bcfc5b3a88
Issue #1498 - Part 3: Remove support for storing "knockout" values.
2020-04-03 09:21:49 +08:00
wolfbeast
786480c19c
Issue #1498 - Part 1: Stop persisting preload states.
...
Since we don't use preloading anymore for either HPKP or HSTS, we no
longer need persistent storage in the profile for preload states.
Tag #1280 also
2020-04-03 09:17:35 +08:00
wolfbeast
7d012bfdc0
Issue #1498 - Part 1: Stop using HSTS preload lists.
2020-04-03 09:17:28 +08:00
Matt A. Tobin
5010fed2fd
Take nsSiteSecurityService out of UNIFIED_SOURCES
...
It exceeded the obj file sections limit because of the HSTS preload list so it cannot be built in UNIFIED mode.
2020-04-03 09:16:53 +08:00
wolfbeast
2c18f6df31
Issue #447 - Update HSTS preload list
2020-04-03 09:16:50 +08:00
wolfbeast
8778ddfc52
Issue #1467 - Part 4: Rename NSS_SQLSTORE to MOZ_SECURITY_SQLSTORE.
...
Rename the build config option accordingly.
2020-04-03 09:14:07 +08:00
wolfbeast
ff29b77edc
Issue #1467 - Part 3: Use UTF-8 file paths for NSS-SQL database.
2020-04-03 09:14:04 +08:00
wolfbeast
5efa1a9e43
Issue #1467 - Part 1: Set up conditional NSS-SQL builds.
...
- Adds buildconfig option --enable-nss-sqlstore
- Prefixes NSS dbinit with either sql: or dbm: depending on config
- Pre-initializes mozStorage when NSS-SQL storage is used to prevent
an sqlite3_config race in NSS Init
2020-04-03 09:12:04 +08:00
Matt A. Tobin
56f64bd775
Issue #1053 - Remove android support from nsNSSComponent.cpp
2020-03-05 09:38:27 +08:00
wolfbeast
ed6f10f477
Issue #447 - Update HSTS preload list & reduce debug spew
...
Commented out spewing dump() statements in loops. With the ever growing
HSTS list it takes too much time and is pointless to display.
2020-02-07 07:52:21 +08:00
Kai Engert
a8daf97de0
Issue #1338 - Follow-up: Also cache the most recent PBKDF1 hash
...
This rewrites the caching mechanism to apply to both PBKDF1 and PBKDF2
2020-01-24 09:36:33 +08:00
wolfbeast
abb2afe2a7
Issue #1338 - Bump NSS version
...
Our NSS version is closer to the currently-released .1, so bump version
to that.
Note: we still have some additional patches to the in-tree version in
place so this isn't a 100% match to the RTM one.
2020-01-24 09:28:39 +08:00
Kai Engert
3d75257e8d
Issue #1338 : Follow-up: Cache the most recent PBKDF2 password hash,
...
to speed up repeated SDR operations.
Landed on NSS-3.48 for Bug 1606992
2020-01-17 09:15:04 +08:00
Daiki Ueno
75fdf9c3b0
Issue #1338 - Followup: certdb: propagate trust information if trust
...
module is loaded afterwards,
Summary: When the builtin trust module is loaded after some temp certs
being created, these temp certs are usually not accompanied by trust
information. This causes a problem in UXP as it loads the module from a
separate thread while accessing the network cache which populates temp
certs.
This change makes it properly roll up the trust information, if a temp
cert doesn't have trust information.
2020-01-11 06:47:38 +08:00
wolfbeast
b299b34492
Issue #1338 - Un-bust building of NSS after update to 3.48 on Linux.
2020-01-11 06:47:34 +08:00
wolfbeast
d12d260c6a
Be more consistent about decoding IP addresses in PSM.
2020-01-10 17:06:58 +08:00
wolfbeast
c57cac24e8
Issue #1338 - Part 2: Update NSS to 3.48-RTM
2020-01-05 11:42:29 +08:00
wolfbeast
b753aec164
Issue #1118 - Part 6: Fix various tests that are no longer correct.
...
The behavior change of document.open() requires these tests to be
changed to account for the new spec behavior.
2019-12-28 21:20:04 +08:00
Craig Disselkoen
b7f6024e34
[NSS] Bug 1586176 - EncryptUpdate should use maxout not block size.
2019-12-07 06:55:10 +08:00
J.C. Jones
0916deba59
[NSS] Bug 1508776 - Remove unneeded refcounting from SFTKSession
...
SFTKSession objects are only ever actually destroyed at PK11 session
closure, as the session is always the final holder -- and asserting
refCount == 1 shows that to be true. Because of that, NSC_CloseSession
can just call `sftk_DestroySession` directly and leave
`sftk_FreeSession` as a no-op to be removed in the future.
2019-12-07 06:55:07 +08:00
wolfbeast
a9481b02f7
Issue #447 - Update HSTS preload list
2019-11-22 10:53:07 +08:00
wolfbeast
08a2dbad4c
Issue #1289 - Part 3: Update tests.
2019-11-15 14:24:07 +08:00
wolfbeast
79593d40e1
Issue #1289 - Part 2: Clear out the preload list except for test
...
domains.
2019-11-15 14:24:05 +08:00
wolfbeast
e7ab106190
Issue #1289 - Part 1: Add a pref to disable HPKP header processing.
2019-11-15 14:24:03 +08:00
wolfbeast
24645d4b58
Issue #1064 - Part 3: Fix notifyObservers() call.
2019-11-08 20:24:03 +08:00
wolfbeast
db9333e3c8
Issue #1064 - Part 2: Fix shorthand and services module import.
2019-11-08 20:24:01 +08:00
wolfbeast
6c3b83022a
No issue: Clean up exceptionDialog.js
...
- Fix some quoting, comments and inconsistencies and code style
- Swap manually grabbing service components out for using `Services.*`
2019-11-08 20:24:00 +08:00
wolfbeast
b09c92a90a
Issue #1064 : Don't get certificate details synchronously.
...
This avoids getting data synchronously on the main thread in an XHR
(which has been deprecated for a long time and _may_ actually be blocked
in our networking) and attempts to be more predictable by always firing
an update request for the dialog from the XHR request handlers.
2019-11-08 20:23:58 +08:00
wolfbeast
c3dc56af72
Properly implement various HSTS states.
...
Previously, HSTS preload list values could be overridden temporarily due
to counter-intuitive behavior of the API's removeState function.
This adds an explicit flag to the API for writing knockout values to
the Site Security Service, with the default resetting to whatever the
preload list state is.
2019-09-06 23:50:01 +08:00
trav90
d5703962e7
Update HSTS preload list
...
Tag #447
2019-06-28 07:02:09 +08:00
wolfbeast
3a613f462d
Update HSTS preload list
...
Tag #447
2019-05-31 07:21:57 +08:00
Matt A. Tobin
97059c1b48
Issue #1053 - Drop support Android and remove Fennec - Part 1b: Remove MOZ_FENNEC
2019-04-27 08:51:55 +08:00
adeshkp
6a0abd1cd5
Remove SecurityUI telemetry.
2019-04-27 08:23:50 +08:00
adeshkp
5193311ea5
Fix order of member variables in a couple of initializer lists
2019-03-16 07:04:11 +08:00
trav90
7c9325064a
Update HSTS preload list
...
Tag #447
2019-02-16 00:27:43 +08:00
Ascrod
b85fb498d9
Fix check for HSTS when service is disabled.
2019-02-16 00:24:25 +08:00
Ascrod
57ca286478
Add preference for fully disabling HSTS.
2019-02-16 00:24:23 +08:00
adeshkp
813140d8c7
Remove a pointless switch after telemetry cleanup
2019-02-16 00:24:07 +08:00
adeshkp
aea50f182f
Telemetry: Remove stubs and related code
2019-02-16 00:24:04 +08:00
trav90
651f0bfce6
Update HSTS preload list
...
Tag #447
2019-02-16 00:23:51 +08:00
trav90
cad597caf0
Update HSTS preload list
...
Tag #447
2019-02-16 00:22:33 +08:00
wolfbeast
5f0986e66f
Update NSS to 3.41
2019-02-16 00:22:24 +08:00
trav90
fa5aa7b3d8
Update HSTS preload list
...
Tag #447
2019-02-16 00:20:30 +08:00