Moonchild
a39fd9e75f
Issue #1656 - Remove more vim control lines.
...
Vim control lines were re-introduced or not entirely cleaned up.
This nukes them again.
Removing from modules, netwerk, security, storage, testing, toolkit, and
a few scattered misc files. More to come.
2023-05-05 22:59:16 +08:00
Moonchild
f6f0a495a7
Issue #2180 - Follow-up: Move sentinel check up a bit.
2023-03-29 11:05:39 +08:00
Moonchild
dc4bf9b823
Issue #2180 - Add pref to control NSS TLS 1.3 protocol downgrade sentinel
2023-03-29 11:05:16 +08:00
Moonchild
ca93d4b42d
Issue #1831 - Add an option to enable TLS 1.3 "compatibility" mode.
...
Critical note: this potentially reduces the strength of TLS 1.3 and
should only be enabled if absolutely necessary to access a site.
A browser restart is required for the pref change to take effect as it
is set on NSS initialization.
Resolves #1831
2023-03-29 11:04:44 +08:00
Moonchild
eaf9e756a0
Issue #21 - Remove remaining telemetry structs, callers and flags.
2022-04-28 10:33:44 +08:00
Moonchild
8d800b1cb0
Issue #21 - Remove Telemetry plumbing and fix build.
...
Note this won't give working applications. Requires FE changes and
additional js module changes (next part).
2022-04-28 10:25:48 +08:00
FranklinDM
031a928950
Issue #738 - Follow-up: Remove explicit session cache cleanup routine from ShutdownNSS
...
This is no longer needed because the call to SSL_ConfigServerSessionIDCache on startup was already removed (see 1425f020c47b3cbe134f71717299714aead28502), meaning LocksInitializedEarly does not become true and only causes an assertion on debug builds.
On the other hand, SSL_ClearSessionCache is already called on XPCOM shutdown and calling it again here is redundant.
Additional context: https://bugzilla.mozilla.org/show_bug.cgi?id=1485087#c5
Based on https://bugzilla.mozilla.org/show_bug.cgi?id=1485087
2022-04-21 21:46:24 +08:00
Moonchild
ed26fe34af
Issue #1746 - Update pkix code with later NSS code.
2021-03-16 09:49:44 +08:00
Moonchild
9fd40b1c93
Issue #457 - Remove duplicate PKCS11 definitions
2021-02-25 09:26:44 +08:00
Moonchild
ef29cca224
[security] Hold mutex when accessing TSI fields.
2021-02-25 09:26:42 +08:00
adesh
2924d30a83
Issue #1280 - Follow-up: Get rid of HPKP pinning mode.
...
This was a leftover from HPKP removal.
Also remove a couple of unused variables from security/manager/ssl/nsSiteSecurityService.cpp.
2020-11-19 21:11:43 +08:00
Moonchild
a77ab3da7f
Issue #1656 - Nuke the remaining vim lines in UXP
...
Closes #1656
2020-10-30 09:09:20 +08:00
Moonchild
d5919942ff
Issue #1656 - Part 8: Devtools and misc.
2020-09-25 22:06:55 +08:00
Moonchild
0cd673d720
Issue #1656 - Part 6: Clean up the build files
2020-09-25 22:04:23 +08:00
Moonchild
30df895eb2
Issue #1656 - Part 3: Nuke more vim config lines in the tree.
...
Another S&R run with some smarter matching.
2020-09-25 22:04:17 +08:00
Moonchild
8c395520d9
Issue #1656 - Part 1: Nuke most vim config lines in the tree.
...
Since these are just interpreted comments, there's 0 impact on actual code.
This removes all lines that match /* vim: set(.*)tw=80: */ with S&R -- there are
a few others scattered around which will be removed manually in a second part.
2020-09-25 22:04:12 +08:00
Moonchild
594c930eca
Issue #439 - Remove, fix and clean up automated tests
...
With the big amount of code churn around DOM a lot of tests
broke severely enough that they caused build bustage.
This commit cleans up, removes or otherwise fixes tests
that are broken, no longer relevant or obsolete.
2020-06-10 21:00:09 +08:00
wolfbeast
052b2e70a3
Issue #1280 - Un-bust certerror pages and ForgetAboutSite
2020-04-03 09:30:07 +08:00
wolfbeast
593ea86a68
Issue #1280 - Part 2: Remove HPKP tests.
2020-04-03 09:27:13 +08:00
wolfbeast
cf5f069080
Issue #1280 - Part 1: Remove HPKP components.
...
This also removes leftover plumbing for storing preload information
in SiteSecurityService since no service still uses it.
2020-04-03 09:27:11 +08:00
wolfbeast
ff8c58e8db
Issue #1498 - Part 6: Remove STS preloadlist pref.
2020-04-03 09:22:00 +08:00
wolfbeast
be0246f8e4
Issue #1498 - Part 5: Update SSService CID and correct mismatch.
2020-04-03 09:21:57 +08:00
wolfbeast
6fe7731e5e
Issue #1498 - Part 4: Remove clearPreloads.
...
Also tag #1280
2020-04-03 09:21:53 +08:00
wolfbeast
bcfc5b3a88
Issue #1498 - Part 3: Remove support for storing "knockout" values.
2020-04-03 09:21:49 +08:00
wolfbeast
786480c19c
Issue #1498 - Part 1: Stop persisting preload states.
...
Since we don't use preloading anymore for either HPKP or HSTS, we no
longer need persistent storage in the profile for preload states.
Tag #1280 also
2020-04-03 09:17:35 +08:00
wolfbeast
7d012bfdc0
Issue #1498 - Part 1: Stop using HSTS preload lists.
2020-04-03 09:17:28 +08:00
Matt A. Tobin
5010fed2fd
Take nsSiteSecurityService out of UNIFIED_SOURCES
...
It exceeded the obj file sections limit because of the HSTS preload list so it cannot be built in UNIFIED mode.
2020-04-03 09:16:53 +08:00
wolfbeast
2c18f6df31
Issue #447 - Update HSTS preload list
2020-04-03 09:16:50 +08:00
wolfbeast
8778ddfc52
Issue #1467 - Part 4: Rename NSS_SQLSTORE to MOZ_SECURITY_SQLSTORE.
...
Rename the build config option accordingly.
2020-04-03 09:14:07 +08:00
wolfbeast
ff29b77edc
Issue #1467 - Part 3: Use UTF-8 file paths for NSS-SQL database.
2020-04-03 09:14:04 +08:00
wolfbeast
5efa1a9e43
Issue #1467 - Part 1: Set up conditional NSS-SQL builds.
...
- Adds buildconfig option --enable-nss-sqlstore
- Prefixes NSS dbinit with either sql: or dbm: depending on config
- Pre-initializes mozStorage when NSS-SQL storage is used to prevent
an sqlite3_config race in NSS Init
2020-04-03 09:12:04 +08:00
Matt A. Tobin
56f64bd775
Issue #1053 - Remove android support from nsNSSComponent.cpp
2020-03-05 09:38:27 +08:00
wolfbeast
ed6f10f477
Issue #447 - Update HSTS preload list & reduce debug spew
...
Commented out spewing dump() statements in loops. With the ever growing
HSTS list it takes too much time and is pointless to display.
2020-02-07 07:52:21 +08:00
wolfbeast
d12d260c6a
Be more consistent about decoding IP addresses in PSM.
2020-01-10 17:06:58 +08:00
wolfbeast
b753aec164
Issue #1118 - Part 6: Fix various tests that are no longer correct.
...
The behavior change of document.open() requires these tests to be
changed to account for the new spec behavior.
2019-12-28 21:20:04 +08:00
wolfbeast
a9481b02f7
Issue #447 - Update HSTS preload list
2019-11-22 10:53:07 +08:00
wolfbeast
08a2dbad4c
Issue #1289 - Part 3: Update tests.
2019-11-15 14:24:07 +08:00
wolfbeast
79593d40e1
Issue #1289 - Part 2: Clear out the preload list except for test
...
domains.
2019-11-15 14:24:05 +08:00
wolfbeast
e7ab106190
Issue #1289 - Part 1: Add a pref to disable HPKP header processing.
2019-11-15 14:24:03 +08:00
wolfbeast
c3dc56af72
Properly implement various HSTS states.
...
Previously, HSTS preload list values could be overridden temporarily due
to counter-intuitive behavior of the API's removeState function.
This adds an explicit flag to the API for writing knockout values to
the Site Security Service, with the default resetting to whatever the
preload list state is.
2019-09-06 23:50:01 +08:00
trav90
d5703962e7
Update HSTS preload list
...
Tag #447
2019-06-28 07:02:09 +08:00
wolfbeast
3a613f462d
Update HSTS preload list
...
Tag #447
2019-05-31 07:21:57 +08:00
adeshkp
6a0abd1cd5
Remove SecurityUI telemetry.
2019-04-27 08:23:50 +08:00
adeshkp
5193311ea5
Fix order of member variables in a couple of initializer lists
2019-03-16 07:04:11 +08:00
trav90
7c9325064a
Update HSTS preload list
...
Tag #447
2019-02-16 00:27:43 +08:00
Ascrod
b85fb498d9
Fix check for HSTS when service is disabled.
2019-02-16 00:24:25 +08:00
Ascrod
57ca286478
Add preference for fully disabling HSTS.
2019-02-16 00:24:23 +08:00
adeshkp
813140d8c7
Remove a pointless switch after telemetry cleanup
2019-02-16 00:24:07 +08:00
adeshkp
aea50f182f
Telemetry: Remove stubs and related code
2019-02-16 00:24:04 +08:00
trav90
651f0bfce6
Update HSTS preload list
...
Tag #447
2019-02-16 00:23:51 +08:00
