wuggy/Dactyloidae
wuggy/Dactyloidae
1
0
Fork 0
mirror of https://repo.dactyloidae.xyz/Dactyloidae/UXP.git synced 2026-08-15 08:53:07 +09:00
Code Issues Projects Releases Packages Wiki Activity
6,664 commits 7 branches 15 tags 557 MiB
Commit graph

234 commits

Author SHA1 Message Date
roytam1
b794ec0afd nss: update nssckbi to 2.68 2024-06-09 07:15:57 +08:00
roytam1
ab39f724a8 nss: update nssckbi to 2.66 2024-05-26 06:58:33 +08:00
roytam1
35252384aa Merge remote-tracking branch 'origin/tracking' into custom 2024-01-25 12:22:19 +08:00
Moonchild
462aac7d98 [HSTS] Let parent hosts determine whether HSTS subs should be applied. 
This aligns with the wording in RFC 6797.
 2024-01-25 12:14:06 +08:00
John Schanck
266b96a53a [NSS] add a defensive check for large ssl_DefSend return values. 2024-01-25 12:13:04 +08:00
roytam1
24413daff9 [NSS] revert "sync with https://github.com/roytam1/NSS/tree/NSS_3_48_UXP_BRANCH", this should fix a crash when browsing 2023-11-17 14:29:07 +08:00
roytam1
4e45ee69e0 [NSS] sync with https://github.com/roytam1/NSS/tree/NSS_3_48_UXP_BRANCH, notably: 
- Bug 1665715 - (1/2) revert e8f2720c8254 (bug 1593141) because it's no longer necessary r=jcj (a9bca998)
- Bug 1665715 - (2/2) pass encoded signed certificate timestamp extension (if present) in CheckRevocation r=jcj (429f9ef9)
 2023-11-17 11:01:12 +08:00
roytam1
96524cc3c5 nss: update nssckbi to 2.64 2023-11-16 10:15:29 +08:00
roytam1
c32aeee874 partly import changes from tenfourfox: 
- update ESR base to 115; update EV roots, pins, TLDs, TZs; security pullup (55284dd80)
 2023-09-01 10:07:24 +08:00
roytam1
e7c19e1155 nss: update nssckbi to 2.62 2023-08-24 10:08:25 +08:00
roytam1
e70aa9a4a1 Merge remote-tracking branch 'origin/tracking' into custom 2023-05-10 11:57:40 +08:00
Brian Smith
fae36a95ec No Issue - Updates to Mac packaging for notarization. Add Mac entitlements. Switch to using "create" instead of "makehybrid" when creating the disk image. This fixes bogus extended attributes which interfere with the code signature. Finally add any -bin or dylibs in the Resources folder since --deep skips that folder. 2023-05-10 11:57:07 +08:00
roytam1
725b27a0f5 Merge remote-tracking branch 'origin/tracking' into custom 2023-05-05 23:02:05 +08:00
Moonchild
a39fd9e75f Issue #1656 - Remove more vim control lines. 
Vim control lines were re-introduced or not entirely cleaned up.
This nukes them again.
Removing from modules, netwerk, security, storage, testing, toolkit, and
a few scattered misc files. More to come.
 2023-05-05 22:59:16 +08:00
roytam1
ead737cb49 Merge remote-tracking branch 'origin/tracking' into custom 2023-03-29 11:07:18 +08:00
Moonchild
f6f0a495a7 Issue #2180 - Follow-up: Move sentinel check up a bit. 2023-03-29 11:05:39 +08:00
Moonchild
dc4bf9b823 Issue #2180 - Add pref to control NSS TLS 1.3 protocol downgrade sentinel 2023-03-29 11:05:16 +08:00
Moonchild
ca93d4b42d Issue #1831 - Add an option to enable TLS 1.3 "compatibility" mode. 
Critical note: this potentially reduces the strength of TLS 1.3 and
should only be enabled if absolutely necessary to access a site.
A browser restart is required for the pref change to take effect as it
is set on NSS initialization.

Resolves #1831
 2023-03-29 11:04:44 +08:00
roytam1
85f6a49297 Merge remote-tracking branch 'origin/tracking' into custom 2023-03-15 22:52:23 +08:00
FranklinDM
0365f940fe Issue #2148 - Make Vector not use AlignedStorage for its inline element storage 
See Bug 1338374 1/2
 2023-03-15 22:50:40 +08:00
roytam1
16926c542d Merge remote-tracking branch 'origin/tracking' into custom 2023-02-20 12:02:40 +08:00
Moonchild
cdda874cff [NSS] Update NSS to pick up fixes. 2023-02-20 12:01:55 +08:00
roytam1
58af5d4b99 imported changes from mozilla NSS: 
- Bug 1794495 - Remove Network Solutions Certificate Authority. r=KathleenWilson (64a28c8d60)
- Bug 1794507 - Remove SwissSign Platinum CA - G2 from NSS. r=KathleenWilson (f2c2308403)
- Bug 1797559 - Remove EC-ACC root cert from NSS. r=KathleenWilson (4f1985c8dd)
- Bug 1799038 - Remove Staat der Nederlanden EV Root CA from NSS. r=KathleenWilson (9151be4c45)
- Bug 1794506 - Set nssckbi version number to 2.60. r=nss-reviewers,bbeurdouche (39fc42e136)
- Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates. r=KathleenWilson (a871902c05)
 2022-12-07 13:24:50 +08:00
roytam1
a9c379217d partly import changes from tenfourfox: 
- 102ESR: rev EV roots, TLDs, tzdata (c47bef11f)
 2022-09-19 15:13:43 +08:00
roytam1
29846d1e4d update NSS builtin certstore to Sep 2022 version from mozilla upstream. 2022-09-19 15:11:02 +08:00
roytam1
1822f2031e Merge remote-tracking branch 'origin/tracking' into custom 2022-07-30 08:49:22 +08:00
Moonchild
10fdf0e1c5 [NSS] Fix uninitialized value in cert_ComputeCertType. 2022-07-30 08:43:45 +08:00
Moonchild
a77cf423c2 [NSS] Avoid potential data race on primary password change. 2022-07-30 08:43:44 +08:00
Moonchild
b9084ea29d [NSS] protect SFTKSlot needLogin with slotLock. 2022-07-30 08:43:44 +08:00
roytam1
206c9dcbbf Merge remote-tracking branch 'origin/tracking' into custom 2022-07-05 17:28:42 +08:00
Moonchild
2706ef696d Update NSS 2022-07-05 17:21:07 +08:00
roytam1
43cfc69b25 imported changes from mozilla NSS: 
- Bug 1759794 - protect SFTKSlot needLogin with slotLock. r=rrelyea (1bbd8d8c)
- Bug 1771497 - Uninitialized value in cert_VerifyCertChainOld. r=nss-reviewers,djackson (23be110c)
- Bug 1771495 - unchecked return code in sec_DecodeSigAlg. r=nss-reviewers,djackson (d4fb4b83)
- Bug 1771498 - Uninitialized value in cert_ComputeCertType. r=djackson (b28bc4cd)
- Bug 1764392 - Add DigitCert Roots r=nss-reviewers,jschanck (0863d9ec)
- Bug 1768970 - Add Certainly Roots. r=nss-reviewers,jschanck (6307e75b)
- Bug 1770267 - Add E-Tugra Roots. r=nss-reviewers,jschanck (9555008f)
- Bug 1759815 - Remove Hellenic Academic 2011 Root. r=nss-reviewers,jschanck (9c2cbf14)
- Bug 1764206 - Bump nssckbi version number for June. r=nss-reviewers,jschanck (b3acf3d9)
 2022-06-17 11:00:44 +08:00
roytam1
5618d02caf import from nss upstream: Bug 1767590 - Initialize pointers passed to NSS_CMSDigestContext_FinishMultiple r=#nss-reviewers,kaie (118b893f8e) 2022-06-02 10:10:47 +08:00
roytam1
6de07653b9 Merge remote-tracking branch 'origin/tracking' into custom 2022-04-28 10:45:19 +08:00
Moonchild
eaf9e756a0 Issue #21 - Remove remaining telemetry structs, callers and flags. 2022-04-28 10:33:44 +08:00
Moonchild
8d800b1cb0 Issue #21 - Remove Telemetry plumbing and fix build. 
Note this won't give working applications. Requires FE changes and
additional js module changes (next part).
 2022-04-28 10:25:48 +08:00
roytam1
059e35a463 Merge remote-tracking branch 'origin/tracking' into custom 2022-04-21 21:59:16 +08:00
FranklinDM
031a928950 Issue #738 - Follow-up: Remove explicit session cache cleanup routine from ShutdownNSS 
This is no longer needed because the call to SSL_ConfigServerSessionIDCache on startup was already removed (see 1425f020c47b3cbe134f71717299714aead28502), meaning LocksInitializedEarly does not become true and only causes an assertion on debug builds.

On the other hand, SSL_ClearSessionCache is already called on XPCOM shutdown and calling it again here is redundant.

Additional context: https://bugzilla.mozilla.org/show_bug.cgi?id=1485087#c5

Based on https://bugzilla.mozilla.org/show_bug.cgi?id=1485087
 2022-04-21 21:46:24 +08:00
roytam1
eb6e4fbafe zlib: also pick up 4346a16853 2022-04-10 23:05:55 +08:00
roytam1
21d56c9c93 nss: update in-tree zlib to 1.2.11 with CVE-2018-25032 fix 2022-04-01 23:56:16 +08:00
roytam1
3336114a36 [NSS] ported mozilla upstream changes: 
- Bug 1552254 internal_error alert on Certificate Request with sha1+ecdsa in TLS 1.3 (be6a9782)
- Bug 1753535 - Remove obsolete stateEnd check in SEC_ASN1DecoderUpdate. r=rrelyea (800111fa)
- Bug 1756271 - Remove token member from NSSSlot struct. r=rrelyea (55052f78)
- Bug 1396616 - Update nssUTF8_Length to RFC 3629 and fix buffer overrun. r=nss-reviewers,jschanck (2f2c8564)
- Bug 1755264 - TLS 1.3 Illegal legacy_version handling/alerts. r=djackson (7d931c59)
- Bug 1751305 - Remove expired explicitly distrusted certificates from certdata.txt. r=KathleenWilson (b722e523)
- Bug 1751298 - Add Telia Root CA v2 root certificate. r=KathleenWilson (1fcbbd7e)
- Bug 1754890 - Add two D-TRUST 2020 root certificates. r=KathleenWilson (f63fb86d)
 2022-03-25 23:38:11 +08:00
roytam1
c403014cbe imported changes from mozilla NSS: 
- Bug 1755555 - Hold tokensLock through nssToken_GetSlot calls in nssTrustDomain_GetActiveSlots. r=rrelyea (a36477f0)
- Bug 1370866 - Check return value of PK11Slot_GetNSSToken. r=djackson (d7e8c2df)
- Bug 1751157 - Throw illegal_parameter alert for illegal extensions in handshake message. r=djackson (8fd5ca0c)
 2022-02-25 13:02:18 +08:00
roytam1
e3fb994063 Bug 1735028 - check for missing signedData field r=keeler 2022-01-19 10:25:05 +08:00
roytam1
5b0d1f871a imported changes from mozilla NSS: 
- Bug 1737470 - Ensure DER encoded signatures are within size limits. r=jschanck,mt,bbeurdouche,rrelyea
- Bug 1735028 - check for missing signedData field r=keeler
and bump patch version.
 2021-12-27 10:42:03 +08:00
roytam1
fceddf74e6 update NSS builtin certstore to Dec 2021 version from mozilla upstream. 2021-12-20 09:20:26 +08:00
roytam1
b7cc29620e security/pkix: align pkix with nss' mozpkix bug966856 fix 2021-12-17 22:10:56 +08:00
roytam1
2a8bbf94bb security/pkix: align pkix with nss' mozpkix and fix CheckRevocation API type in application codes 2021-12-17 22:09:38 +08:00
roytam1
a140666918 imported changes from mozilla NSS: 
- Bug 966856 - mozilla::pkix: support SHA-2 hashes in CertIDs in OCSP responses r=jschanck,djackson (78d2f4a3)
 2021-12-17 16:54:54 +08:00
roytam1
190b620c2d partly import changes from tenfourfox: 
- first rolling release: update to 91ESR EV and roots, TZs, TLDs (d7c93b6cf)
- security: M1730935, M1735152, M1730048 (1603b00d0)
 2021-11-01 10:39:52 +08:00
roytam1
423d61a6f8 import changes from mozilla nss repo: 
- Bug 1662515 - Fix incorrect alert after successful decryption r=djackson
- Bug 1721476 sqlite 3.34 changed it's open semantics, causing nss failures.
- Bug 1728394 - Add TunTrust Root CA certificate to NSS. r=KathleenWilson
- Bug 1717707 - Add HARICA TLS RSA Root CA 2021. r=KathleenWilson
- Bug 1717707 - Add HARICA TLS ECC Root CA 2021. r=KathleenWilson
- Bug 1717707 - Add HARICA Client RSA Root CA 2021. r=KathleenWilson
- Bug 1717707 - Add HARICA Client ECC Root CA 2021. r=KathleenWilson
 2021-09-10 11:57:20 +08:00