wuggy
bf743d6699
Compatibility shim for DecodePointer
2026-07-06 12:50:16 +01:00
wuggy
3a838106b9
re-introduce old nss im too tired for this
2026-06-30 06:37:32 +01:00
wuggy
81e97bbe4d
Change (UXP) to (Dactylic) to avoid confusion
2026-06-29 21:32:34 +01:00
wuggy
8c2e376f94
Replace NSS with Pale Moon's
2026-06-29 21:29:25 +01:00
wuggy
9194104449
add SECStatus
2026-06-29 21:06:33 +01:00
wuggy
4548345ecc
Add SECSuccess to PBECommonCacheItemsKDFLocked
2026-06-29 21:00:41 +01:00
wuggy
29bfa4fc7f
IT LAUNCHES ON OS X
2026-04-05 02:08:42 +01:00
Moonchild
96a9380208
[NSS] Update NSS
2026-03-06 04:32:10 +00:00
roytam1
e5ea29554a
Merge remote-tracking branch 'origin/tracking' into custom
2025-08-21 16:07:53 +08:00
Moonchild
fe21538da4
[NSS] Avoid leak in pkcs12 decoder.
2025-08-21 16:07:31 +08:00
roytam1
f5307ea861
nss: update certdata and bump ckbi version to 2.80
...
- Bug 1974511 - Add SwissSign 2022 Roots to NSS r=jschanck
- Bug 1972391 - Add TrustAsia Dedicated Roots to NSS r=jschanck
- Bug 1961848 - Remove expired Baltimore CyberTrust Root r=jschanck
- Bug 1978677 - remove expired explicitly distrusted DigiNotar lookalike root r=nss-reviewers,jschanck
2025-08-21 15:54:50 +08:00
roytam1
bde8fbbb5f
nss: merge changes from upstream UXP
2025-06-28 06:31:32 +08:00
roytam1
cd1840493f
nss: update certdata and bump ckbi version to 2.78
2025-06-28 00:41:36 +08:00
roytam1
6414271c91
Merge remote-tracking branch 'origin/tracking' into custom
2025-06-17 09:32:50 +08:00
Moonchild
5960178802
Issue #2723 - Remove obsolete NPN prefs and callbacks.
...
NPN was removed from NSS a long time ago, this effectively does nothing.
ALPN also should be default-enabled (we do this by pref but the component
itself should have a sane default) so this was flipped as a drive-by fix.
Resolves #2723
2025-06-17 09:29:57 +08:00
roytam1
e72f8a3a81
Merge remote-tracking branch 'origin/tracking' into custom
2025-05-14 14:36:05 +08:00
Brian Smith
e8b3077d4f
No Issue - Fixes for building with LLVM 19 included with FreeBSD 13.5. Fix a conflict with libc++ 19 and the old Mozilla (re)alloc macros. LLVM 18+ does not allow std::char_traits<unsigned char> so avoid it. https://bugzilla.mozilla.org/show_bug.cgi?id=1849070 Partial NSS upgrade to replace ByteString with a class. https://bugzilla.mozilla.org/show_bug.cgi?id=1851092
2025-05-14 14:20:07 +08:00
roytam1
5384bb6d14
nss: update builtin certstore and bump ckbi version
2025-04-30 23:07:58 +08:00
roytam1
6792dc4b66
Merge remote-tracking branch 'origin/tracking' into custom
2025-04-30 23:06:47 +08:00
Moonchild
be9a6ed2ac
[NSS] Improve locking in nssPKIObject_GetInstances.
2025-04-30 23:03:04 +08:00
roytam1
0a18b05efd
nss: update nssckbi to 2.74
2025-02-13 21:22:34 +08:00
roytam1
f7298813f9
Merge remote-tracking branch 'origin/tracking' into custom
2025-02-06 09:30:57 +08:00
Moonchild
dcb76fe0f7
[NSS] Ensure zero-initialization of collectArgs.cert
2025-02-06 09:25:33 +08:00
Moonchild
ecb18ddf57
[NSS] Simplify error handling in get_token_objects_for_cache.
2025-02-06 09:25:01 +08:00
roytam1
e26468c8a2
nss: update nssckbi to 2.72
2024-11-29 21:04:06 +08:00
roytam1
c6517989ab
Merge remote-tracking branch 'origin/tracking' into custom
2024-11-29 21:00:51 +08:00
Kai Engert
e825209039
[NSS] Bug 1899402 - Correctly destroy bulkkey in error scenario. r=jschanck
...
Differential Revision: https://phabricator.services.mozilla.com/D223837
--HG--
extra : rebase_source : d06a6bb8d51bb844c814c5ee682a1b24de3e2e69
2024-11-29 20:55:45 +08:00
roytam1
b794ec0afd
nss: update nssckbi to 2.68
2024-06-09 07:15:57 +08:00
roytam1
ab39f724a8
nss: update nssckbi to 2.66
2024-05-26 06:58:33 +08:00
roytam1
35252384aa
Merge remote-tracking branch 'origin/tracking' into custom
2024-01-25 12:22:19 +08:00
Moonchild
462aac7d98
[HSTS] Let parent hosts determine whether HSTS subs should be applied.
...
This aligns with the wording in RFC 6797.
2024-01-25 12:14:06 +08:00
John Schanck
266b96a53a
[NSS] add a defensive check for large ssl_DefSend return values.
2024-01-25 12:13:04 +08:00
roytam1
24413daff9
[NSS] revert "sync with https://github.com/roytam1/NSS/tree/NSS_3_48_UXP_BRANCH ", this should fix a crash when browsing
2023-11-17 14:29:07 +08:00
roytam1
4e45ee69e0
[NSS] sync with https://github.com/roytam1/NSS/tree/NSS_3_48_UXP_BRANCH , notably:
...
- Bug 1665715 - (1/2) revert e8f2720c8254 (bug 1593141) because it's no longer necessary r=jcj (a9bca998)
- Bug 1665715 - (2/2) pass encoded signed certificate timestamp extension (if present) in CheckRevocation r=jcj (429f9ef9)
2023-11-17 11:01:12 +08:00
roytam1
96524cc3c5
nss: update nssckbi to 2.64
2023-11-16 10:15:29 +08:00
roytam1
c32aeee874
partly import changes from tenfourfox:
...
- update ESR base to 115; update EV roots, pins, TLDs, TZs; security pullup (55284dd80)
2023-09-01 10:07:24 +08:00
roytam1
e7c19e1155
nss: update nssckbi to 2.62
2023-08-24 10:08:25 +08:00
roytam1
e70aa9a4a1
Merge remote-tracking branch 'origin/tracking' into custom
2023-05-10 11:57:40 +08:00
Brian Smith
fae36a95ec
No Issue - Updates to Mac packaging for notarization. Add Mac entitlements. Switch to using "create" instead of "makehybrid" when creating the disk image. This fixes bogus extended attributes which interfere with the code signature. Finally add any -bin or dylibs in the Resources folder since --deep skips that folder.
2023-05-10 11:57:07 +08:00
roytam1
725b27a0f5
Merge remote-tracking branch 'origin/tracking' into custom
2023-05-05 23:02:05 +08:00
Moonchild
a39fd9e75f
Issue #1656 - Remove more vim control lines.
...
Vim control lines were re-introduced or not entirely cleaned up.
This nukes them again.
Removing from modules, netwerk, security, storage, testing, toolkit, and
a few scattered misc files. More to come.
2023-05-05 22:59:16 +08:00
roytam1
ead737cb49
Merge remote-tracking branch 'origin/tracking' into custom
2023-03-29 11:07:18 +08:00
Moonchild
f6f0a495a7
Issue #2180 - Follow-up: Move sentinel check up a bit.
2023-03-29 11:05:39 +08:00
Moonchild
dc4bf9b823
Issue #2180 - Add pref to control NSS TLS 1.3 protocol downgrade sentinel
2023-03-29 11:05:16 +08:00
Moonchild
ca93d4b42d
Issue #1831 - Add an option to enable TLS 1.3 "compatibility" mode.
...
Critical note: this potentially reduces the strength of TLS 1.3 and
should only be enabled if absolutely necessary to access a site.
A browser restart is required for the pref change to take effect as it
is set on NSS initialization.
Resolves #1831
2023-03-29 11:04:44 +08:00
roytam1
85f6a49297
Merge remote-tracking branch 'origin/tracking' into custom
2023-03-15 22:52:23 +08:00
FranklinDM
0365f940fe
Issue #2148 - Make Vector not use AlignedStorage for its inline element storage
...
See Bug 1338374 1/2
2023-03-15 22:50:40 +08:00
roytam1
16926c542d
Merge remote-tracking branch 'origin/tracking' into custom
2023-02-20 12:02:40 +08:00
Moonchild
cdda874cff
[NSS] Update NSS to pick up fixes.
2023-02-20 12:01:55 +08:00
roytam1
58af5d4b99
imported changes from mozilla NSS:
...
- Bug 1794495 - Remove Network Solutions Certificate Authority. r=KathleenWilson (64a28c8d60)
- Bug 1794507 - Remove SwissSign Platinum CA - G2 from NSS. r=KathleenWilson (f2c2308403)
- Bug 1797559 - Remove EC-ACC root cert from NSS. r=KathleenWilson (4f1985c8dd)
- Bug 1799038 - Remove Staat der Nederlanden EV Root CA from NSS. r=KathleenWilson (9151be4c45)
- Bug 1794506 - Set nssckbi version number to 2.60. r=nss-reviewers,bbeurdouche (39fc42e136)
- Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates. r=KathleenWilson (a871902c05)
2022-12-07 13:24:50 +08:00