Commit graph

124 commits

Author SHA1 Message Date
Roy Tam
c9f0b81b06 Merge remote-tracking branch 'origin/master' into custom 2020-02-07 08:01:35 +08:00
wolfbeast
ed6f10f477 Issue #447 - Update HSTS preload list & reduce debug spew
Commented out spewing dump() statements in loops. With the ever growing
HSTS list it takes too much time and is pointless to display.
2020-02-07 07:52:21 +08:00
Roy Tam
678ad26488 Merge remote-tracking branch 'origin/master' into custom 2020-01-24 09:39:16 +08:00
Kai Engert
a8daf97de0 Issue #1338 - Follow-up: Also cache the most recent PBKDF1 hash
This rewrites the caching mechanism to apply to both PBKDF1 and PBKDF2
2020-01-24 09:36:33 +08:00
wolfbeast
abb2afe2a7 Issue #1338 - Bump NSS version
Our NSS version is closer to the currently-released .1, so bump version
to that.
Note: we still have some additional patches to the in-tree version in
place so this isn't a 100% match to the RTM one.
2020-01-24 09:28:39 +08:00
Roy Tam
969d239b65 Merge remote-tracking branch 'origin/master' into custom 2020-01-17 09:24:31 +08:00
Kai Engert
3d75257e8d Issue #1338: Follow-up: Cache the most recent PBKDF2 password hash,
to speed up repeated SDR operations.

Landed on NSS-3.48 for Bug 1606992
2020-01-17 09:15:04 +08:00
Roy Tam
f9aa123602 Merge remote-tracking branch 'origin/master' into custom 2020-01-11 06:48:56 +08:00
Daiki Ueno
75fdf9c3b0 Issue #1338 - Followup: certdb: propagate trust information if trust
module is loaded afterwards,

Summary: When the builtin trust module is loaded after some temp certs
being created, these temp certs are usually not accompanied by trust
information. This causes a problem in UXP as it loads the module from a
separate thread while accessing the network cache which populates temp
certs.

This change makes it properly roll up the trust information, if a temp
cert doesn't have trust information.
2020-01-11 06:47:38 +08:00
wolfbeast
b299b34492 Issue #1338 - Un-bust building of NSS after update to 3.48 on Linux. 2020-01-11 06:47:34 +08:00
Roy Tam
239002b5c9 Merge remote-tracking branch 'origin/master' into custom 2020-01-10 17:07:32 +08:00
wolfbeast
d12d260c6a Be more consistent about decoding IP addresses in PSM. 2020-01-10 17:06:58 +08:00
wolfbeast
c57cac24e8 Issue #1338 - Part 2: Update NSS to 3.48-RTM 2020-01-05 11:42:29 +08:00
Roy Tam
9778f15c7d import NSS tip revs: bug1594965, bug1593167, bug1603027, bug1600144, bug1590001, bug1603257, bug1605545, bug1513586 2020-01-03 22:08:56 +08:00
Roy Tam
171849c8e5 Update NSS to 3.48 while keeping vc2013 hackfix and no-sslkeylogfile intact. 2020-01-03 13:36:26 +08:00
Roy Tam
b74770e3f1 Merge remote-tracking branch 'origin/master' into custom 2019-12-28 21:20:53 +08:00
wolfbeast
b753aec164 Issue #1118 - Part 6: Fix various tests that are no longer correct.
The behavior change of document.open() requires these tests to be
changed to account for the new spec behavior.
2019-12-28 21:20:04 +08:00
Roy Tam
91821d6b92 partly imported from tenfourfox: #578: M1579060 M1586176 2019-12-10 10:53:09 +08:00
Roy Tam
8c7f5dcc57 Merge remote-tracking branch 'origin/master' into custom 2019-12-07 06:55:51 +08:00
Craig Disselkoen
b7f6024e34 [NSS] Bug 1586176 - EncryptUpdate should use maxout not block size. 2019-12-07 06:55:10 +08:00
J.C. Jones
0916deba59 [NSS] Bug 1508776 - Remove unneeded refcounting from SFTKSession
SFTKSession objects are only ever actually destroyed at PK11 session
closure, as the session is always the final holder -- and asserting
refCount == 1 shows that to be true. Because of that, NSC_CloseSession
can just call `sftk_DestroySession` directly and leave
`sftk_FreeSession` as a no-op to be removed in the future.
2019-12-07 06:55:07 +08:00
Roy Tam
eb4044be79 updated to nss-3.44.3 2019-11-22 11:14:22 +08:00
Roy Tam
01a4bc1e3b Merge remote-tracking branch 'origin/master' into custom 2019-11-22 10:59:44 +08:00
wolfbeast
a9481b02f7 Issue #447 - Update HSTS preload list 2019-11-22 10:53:07 +08:00
Roy Tam
d2b5ffafc2 Merge remote-tracking branch 'origin/master' into custom 2019-11-15 15:03:49 +08:00
wolfbeast
08a2dbad4c Issue #1289 - Part 3: Update tests. 2019-11-15 14:24:07 +08:00
wolfbeast
79593d40e1 Issue #1289 - Part 2: Clear out the preload list except for test
domains.
2019-11-15 14:24:05 +08:00
wolfbeast
e7ab106190 Issue #1289 - Part 1: Add a pref to disable HPKP header processing. 2019-11-15 14:24:03 +08:00
wolfbeast
cdd4aecfbb Issue #447 - Improve the getHSTSPreloadList script
- Use HEAD instead of GET for probe to avoid loading pages
- Reduce retries to 2
- Reduce timeout to 10 s (since we're just getting a HEAD this is royal)
- Identify ourselves to websites as an automated tool
- Improve performance of list merging (O(n^2) was getting too expensive)
- Add a total counter and perform GC every 200 requests
2019-11-10 07:13:07 +08:00
wolfbeast
945250b485 Issue #447 - Update HSTS preload list. 2019-11-10 07:13:03 +08:00
Roy Tam
27884ac351 Merge remote-tracking branch 'origin/master' into custom 2019-11-08 20:30:31 +08:00
wolfbeast
24645d4b58 Issue #1064 - Part 3: Fix notifyObservers() call. 2019-11-08 20:24:03 +08:00
wolfbeast
db9333e3c8 Issue #1064 - Part 2: Fix shorthand and services module import. 2019-11-08 20:24:01 +08:00
wolfbeast
6c3b83022a No issue: Clean up exceptionDialog.js
- Fix some quoting, comments and inconsistencies and code style
- Swap manually grabbing service components out for using `Services.*`
2019-11-08 20:24:00 +08:00
wolfbeast
b09c92a90a Issue #1064: Don't get certificate details synchronously.
This avoids getting data synchronously on the main thread in an XHR
(which has been deprecated for a long time and _may_ actually be blocked
in our networking) and attempts to be more predictable by always firing
an update request for the dialog from the XHR request handlers.
2019-11-08 20:23:58 +08:00
Roy Tam
41dd9e2994 partly import change from tenfourfox: update pins, TLDs, miners 2019-10-22 14:14:28 +08:00
Roy Tam
240ca3c878 update NSS to 3.44.2 2019-10-22 10:23:28 +08:00
Roy Tam
6d191b58d4 Merge remote-tracking branch 'origin/master' into custom 2019-09-06 23:57:22 +08:00
wolfbeast
c3dc56af72 Properly implement various HSTS states.
Previously, HSTS preload list values could be overridden temporarily due
to counter-intuitive behavior of the API's removeState function.
This adds an explicit flag to the API for writing knockout values to
the Site Security Service, with the default resetting to whatever the
preload list state is.
2019-09-06 23:50:01 +08:00
Roy Tam
058ed959e5 import change from tenfourfox:
- #568: update certs, pins, TLDs, miners (fe73f72f7)
and added -bigobj compile switch to ssl/moz.build.
2019-09-04 23:28:16 +08:00
Roy Tam
679eb8464d Merge remote-tracking branch 'origin/master' into custom 2019-06-28 07:04:39 +08:00
trav90
d5703962e7 Update HSTS preload list
Tag #447
2019-06-28 07:02:09 +08:00
Roy Tam
d4b834111b nss: update to 3.44.1, with vc2013 fix and gyp fix 2019-06-24 21:44:17 +08:00
Roy Tam
6431b85501 Merge remote-tracking branch 'origin/master' into custom 2019-05-31 07:28:33 +08:00
wolfbeast
3a613f462d Update HSTS preload list
Tag #447
2019-05-31 07:21:57 +08:00
Roy Tam
11ce2e06e8 ported changes from mozilla upstream:
bug1351303, bug1352235, bug1371508, bug1430268, bug1352734
2019-05-22 22:24:16 +08:00
Roy Tam
2cb30a238c Merge remote-tracking branch 'origin/master' into custom 2019-04-27 09:01:02 +08:00
Matt A. Tobin
97059c1b48 Issue #1053 - Drop support Android and remove Fennec - Part 1b: Remove MOZ_FENNEC 2019-04-27 08:51:55 +08:00
adeshkp
6a0abd1cd5 Remove SecurityUI telemetry. 2019-04-27 08:23:50 +08:00
Roy Tam
b314cfa402 nss: go back to 3.43 release 2019-04-25 12:03:02 +08:00