wuggy
3a838106b9
re-introduce old nss im too tired for this
2026-06-30 06:37:32 +01:00
wuggy
8c2e376f94
Replace NSS with Pale Moon's
2026-06-29 21:29:25 +01:00
roytam1
24413daff9
[NSS] revert "sync with https://github.com/roytam1/NSS/tree/NSS_3_48_UXP_BRANCH ", this should fix a crash when browsing
2023-11-17 14:29:07 +08:00
roytam1
4e45ee69e0
[NSS] sync with https://github.com/roytam1/NSS/tree/NSS_3_48_UXP_BRANCH , notably:
...
- Bug 1665715 - (1/2) revert e8f2720c8254 (bug 1593141) because it's no longer necessary r=jcj (a9bca998)
- Bug 1665715 - (2/2) pass encoded signed certificate timestamp extension (if present) in CheckRevocation r=jcj (429f9ef9)
2023-11-17 11:01:12 +08:00
roytam1
1822f2031e
Merge remote-tracking branch 'origin/tracking' into custom
2022-07-30 08:49:22 +08:00
Moonchild
10fdf0e1c5
[NSS] Fix uninitialized value in cert_ComputeCertType.
2022-07-30 08:43:45 +08:00
roytam1
43cfc69b25
imported changes from mozilla NSS:
...
- Bug 1759794 - protect SFTKSlot needLogin with slotLock. r=rrelyea (1bbd8d8c)
- Bug 1771497 - Uninitialized value in cert_VerifyCertChainOld. r=nss-reviewers,djackson (23be110c)
- Bug 1771495 - unchecked return code in sec_DecodeSigAlg. r=nss-reviewers,djackson (d4fb4b83)
- Bug 1771498 - Uninitialized value in cert_ComputeCertType. r=djackson (b28bc4cd)
- Bug 1764392 - Add DigitCert Roots r=nss-reviewers,jschanck (0863d9ec)
- Bug 1768970 - Add Certainly Roots. r=nss-reviewers,jschanck (6307e75b)
- Bug 1770267 - Add E-Tugra Roots. r=nss-reviewers,jschanck (9555008f)
- Bug 1759815 - Remove Hellenic Academic 2011 Root. r=nss-reviewers,jschanck (9c2cbf14)
- Bug 1764206 - Bump nssckbi version number for June. r=nss-reviewers,jschanck (b3acf3d9)
2022-06-17 11:00:44 +08:00
roytam1
3336114a36
[NSS] ported mozilla upstream changes:
...
- Bug 1552254 internal_error alert on Certificate Request with sha1+ecdsa in TLS 1.3 (be6a9782)
- Bug 1753535 - Remove obsolete stateEnd check in SEC_ASN1DecoderUpdate. r=rrelyea (800111fa)
- Bug 1756271 - Remove token member from NSSSlot struct. r=rrelyea (55052f78)
- Bug 1396616 - Update nssUTF8_Length to RFC 3629 and fix buffer overrun. r=nss-reviewers,jschanck (2f2c8564)
- Bug 1755264 - TLS 1.3 Illegal legacy_version handling/alerts. r=djackson (7d931c59)
- Bug 1751305 - Remove expired explicitly distrusted certificates from certdata.txt. r=KathleenWilson (b722e523)
- Bug 1751298 - Add Telia Root CA v2 root certificate. r=KathleenWilson (1fcbbd7e)
- Bug 1754890 - Add two D-TRUST 2020 root certificates. r=KathleenWilson (f63fb86d)
2022-03-25 23:38:11 +08:00
roytam1
c403014cbe
imported changes from mozilla NSS:
...
- Bug 1755555 - Hold tokensLock through nssToken_GetSlot calls in nssTrustDomain_GetActiveSlots. r=rrelyea (a36477f0)
- Bug 1370866 - Check return value of PK11Slot_GetNSSToken. r=djackson (d7e8c2df)
- Bug 1751157 - Throw illegal_parameter alert for illegal extensions in handshake message. r=djackson (8fd5ca0c)
2022-02-25 13:02:18 +08:00
roytam1
ecf2071a46
import changes from mozilla nss repo:
...
- Bug 1641480, TLS 1.3: tighten CCS handling in compatibility mode, r=mt
- Bug 1672703, always tolerate the first CCS in TLS 1.3, r=mt
- Bug 1663661 - Guard against NULL token in nssSlot_IsTokenPresent. r=jcj
- Bug 1607449 - Lock cert->nssCertificate to prevent data race. r=jcj,keeler
- Bug 1679290 - Don't hold slot lock when taking session lock r=bbeurdouche
2020-12-02 10:52:47 +08:00
wolfbeast
c57cac24e8
Issue #1338 - Part 2: Update NSS to 3.48-RTM
2020-01-05 11:42:29 +08:00
Roy Tam
171849c8e5
Update NSS to 3.48 while keeping vc2013 hackfix and no-sslkeylogfile intact.
2020-01-03 13:36:26 +08:00
Roy Tam
d4b834111b
nss: update to 3.44.1, with vc2013 fix and gyp fix
2019-06-24 21:44:17 +08:00
Roy Tam
b314cfa402
nss: go back to 3.43 release
2019-04-25 12:03:02 +08:00
Roy Tam
dcdc5d70e0
nss: update nss to hg rev e5e10a46b9ad with vc2013 hackfix
2019-04-06 10:14:46 +08:00
wolfbeast
5f0986e66f
Update NSS to 3.41
2019-02-16 00:22:24 +08:00
wolfbeast
d36d4eb674
Update NSS to 3.38
...
- Added HACL*Poly1305 32-bit (INRIA/Microsoft)
- Updated to final TLS 1.3 draft version (28)
- Removed TLS 1.3 prerelease draft limit check
- Removed NPN code
- Enabled dev/urandom-only RNG on Linux with NSS_SEED_ONLY_DEV_URANDOM for non-standard environments
- Fixed several bugs with TLS 1.3 negotiation
- Updated internal certificate store
- Added support for the TLS Record Size Limit Extension.
- Fixed CVE-2018-0495
- Various security fixes in the ASN.1 code.
2019-02-16 00:11:10 +08:00
JustOff
fe96962962
Update NSS to 3.36.4-RTM
2019-02-16 00:02:32 +08:00
wolfbeast
608f9fca02
Update NSS to 3.35-RTM
2019-02-16 00:01:03 +08:00
wolfbeast
9e32522120
Revert "Update NSS to 3.35-RTM"
...
This reverts commit f1a0f0a56fdd0fc39f255174ce08c06b91c66c94.
2019-02-15 23:50:26 +08:00
wolfbeast
66dd670b60
Update NSS to 3.35-RTM
2019-02-15 23:33:36 +08:00
wolfbeast
c91ef9012b
Update NSS to 3.32.1-RTM
2019-02-15 23:29:46 +08:00
Roy Tam
dcd9973243
import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo
2018-01-19 03:59:58 +08:00