Roy Tam
4ecaa49dd0
Merge remote-tracking branch 'origin/master' into custom
2020-04-03 09:57:28 +08:00
athenian200
768fad9864
Issue #1501 - Un-bust building of NSS after update to 3.48 on Solaris.
2020-04-03 09:30:25 +08:00
wolfbeast
052b2e70a3
Issue #1280 - Un-bust certerror pages and ForgetAboutSite
2020-04-03 09:30:07 +08:00
wolfbeast
593ea86a68
Issue #1280 - Part 2: Remove HPKP tests.
2020-04-03 09:27:13 +08:00
wolfbeast
cf5f069080
Issue #1280 - Part 1: Remove HPKP components.
...
This also removes leftover plumbing for storing preload information
in SiteSecurityService since no service still uses it.
2020-04-03 09:27:11 +08:00
wolfbeast
ff8c58e8db
Issue #1498 - Part 6: Remove STS preloadlist pref.
2020-04-03 09:22:00 +08:00
wolfbeast
be0246f8e4
Issue #1498 - Part 5: Update SSService CID and correct mismatch.
2020-04-03 09:21:57 +08:00
wolfbeast
6fe7731e5e
Issue #1498 - Part 4: Remove clearPreloads.
...
Also tag #1280
2020-04-03 09:21:53 +08:00
wolfbeast
bcfc5b3a88
Issue #1498 - Part 3: Remove support for storing "knockout" values.
2020-04-03 09:21:49 +08:00
wolfbeast
786480c19c
Issue #1498 - Part 1: Stop persisting preload states.
...
Since we don't use preloading anymore for either HPKP or HSTS, we no
longer need persistent storage in the profile for preload states.
Tag #1280 also
2020-04-03 09:17:35 +08:00
wolfbeast
7d012bfdc0
Issue #1498 - Part 1: Stop using HSTS preload lists.
2020-04-03 09:17:28 +08:00
Matt A. Tobin
5010fed2fd
Take nsSiteSecurityService out of UNIFIED_SOURCES
...
It exceeded the obj file sections limit because of the HSTS preload list so it cannot be built in UNIFIED mode.
2020-04-03 09:16:53 +08:00
wolfbeast
2c18f6df31
Issue #447 - Update HSTS preload list
2020-04-03 09:16:50 +08:00
wolfbeast
8778ddfc52
Issue #1467 - Part 4: Rename NSS_SQLSTORE to MOZ_SECURITY_SQLSTORE.
...
Rename the build config option accordingly.
2020-04-03 09:14:07 +08:00
wolfbeast
ff29b77edc
Issue #1467 - Part 3: Use UTF-8 file paths for NSS-SQL database.
2020-04-03 09:14:04 +08:00
wolfbeast
5efa1a9e43
Issue #1467 - Part 1: Set up conditional NSS-SQL builds.
...
- Adds buildconfig option --enable-nss-sqlstore
- Prefixes NSS dbinit with either sql: or dbm: depending on config
- Pre-initializes mozStorage when NSS-SQL storage is used to prevent
an sqlite3_config race in NSS Init
2020-04-03 09:12:04 +08:00
Roy Tam
bd46990741
Merge remote-tracking branch 'origin/master' into custom
2020-03-05 09:48:44 +08:00
Matt A. Tobin
56f64bd775
Issue #1053 - Remove android support from nsNSSComponent.cpp
2020-03-05 09:38:27 +08:00
Roy Tam
c9f0b81b06
Merge remote-tracking branch 'origin/master' into custom
2020-02-07 08:01:35 +08:00
wolfbeast
ed6f10f477
Issue #447 - Update HSTS preload list & reduce debug spew
...
Commented out spewing dump() statements in loops. With the ever growing
HSTS list it takes too much time and is pointless to display.
2020-02-07 07:52:21 +08:00
Roy Tam
678ad26488
Merge remote-tracking branch 'origin/master' into custom
2020-01-24 09:39:16 +08:00
Kai Engert
a8daf97de0
Issue #1338 - Follow-up: Also cache the most recent PBKDF1 hash
...
This rewrites the caching mechanism to apply to both PBKDF1 and PBKDF2
2020-01-24 09:36:33 +08:00
wolfbeast
abb2afe2a7
Issue #1338 - Bump NSS version
...
Our NSS version is closer to the currently-released .1, so bump version
to that.
Note: we still have some additional patches to the in-tree version in
place so this isn't a 100% match to the RTM one.
2020-01-24 09:28:39 +08:00
Roy Tam
969d239b65
Merge remote-tracking branch 'origin/master' into custom
2020-01-17 09:24:31 +08:00
Kai Engert
3d75257e8d
Issue #1338 : Follow-up: Cache the most recent PBKDF2 password hash,
...
to speed up repeated SDR operations.
Landed on NSS-3.48 for Bug 1606992
2020-01-17 09:15:04 +08:00
Roy Tam
f9aa123602
Merge remote-tracking branch 'origin/master' into custom
2020-01-11 06:48:56 +08:00
Daiki Ueno
75fdf9c3b0
Issue #1338 - Followup: certdb: propagate trust information if trust
...
module is loaded afterwards,
Summary: When the builtin trust module is loaded after some temp certs
being created, these temp certs are usually not accompanied by trust
information. This causes a problem in UXP as it loads the module from a
separate thread while accessing the network cache which populates temp
certs.
This change makes it properly roll up the trust information, if a temp
cert doesn't have trust information.
2020-01-11 06:47:38 +08:00
wolfbeast
b299b34492
Issue #1338 - Un-bust building of NSS after update to 3.48 on Linux.
2020-01-11 06:47:34 +08:00
Roy Tam
239002b5c9
Merge remote-tracking branch 'origin/master' into custom
2020-01-10 17:07:32 +08:00
wolfbeast
d12d260c6a
Be more consistent about decoding IP addresses in PSM.
2020-01-10 17:06:58 +08:00
wolfbeast
c57cac24e8
Issue #1338 - Part 2: Update NSS to 3.48-RTM
2020-01-05 11:42:29 +08:00
Roy Tam
9778f15c7d
import NSS tip revs: bug1594965, bug1593167, bug1603027, bug1600144, bug1590001, bug1603257, bug1605545, bug1513586
2020-01-03 22:08:56 +08:00
Roy Tam
171849c8e5
Update NSS to 3.48 while keeping vc2013 hackfix and no-sslkeylogfile intact.
2020-01-03 13:36:26 +08:00
Roy Tam
b74770e3f1
Merge remote-tracking branch 'origin/master' into custom
2019-12-28 21:20:53 +08:00
wolfbeast
b753aec164
Issue #1118 - Part 6: Fix various tests that are no longer correct.
...
The behavior change of document.open() requires these tests to be
changed to account for the new spec behavior.
2019-12-28 21:20:04 +08:00
Roy Tam
91821d6b92
partly imported from tenfourfox: #578 : M1579060 M1586176
2019-12-10 10:53:09 +08:00
Roy Tam
8c7f5dcc57
Merge remote-tracking branch 'origin/master' into custom
2019-12-07 06:55:51 +08:00
Craig Disselkoen
b7f6024e34
[NSS] Bug 1586176 - EncryptUpdate should use maxout not block size.
2019-12-07 06:55:10 +08:00
J.C. Jones
0916deba59
[NSS] Bug 1508776 - Remove unneeded refcounting from SFTKSession
...
SFTKSession objects are only ever actually destroyed at PK11 session
closure, as the session is always the final holder -- and asserting
refCount == 1 shows that to be true. Because of that, NSC_CloseSession
can just call `sftk_DestroySession` directly and leave
`sftk_FreeSession` as a no-op to be removed in the future.
2019-12-07 06:55:07 +08:00
Roy Tam
eb4044be79
updated to nss-3.44.3
2019-11-22 11:14:22 +08:00
Roy Tam
01a4bc1e3b
Merge remote-tracking branch 'origin/master' into custom
2019-11-22 10:59:44 +08:00
wolfbeast
a9481b02f7
Issue #447 - Update HSTS preload list
2019-11-22 10:53:07 +08:00
Roy Tam
d2b5ffafc2
Merge remote-tracking branch 'origin/master' into custom
2019-11-15 15:03:49 +08:00
wolfbeast
08a2dbad4c
Issue #1289 - Part 3: Update tests.
2019-11-15 14:24:07 +08:00
wolfbeast
79593d40e1
Issue #1289 - Part 2: Clear out the preload list except for test
...
domains.
2019-11-15 14:24:05 +08:00
wolfbeast
e7ab106190
Issue #1289 - Part 1: Add a pref to disable HPKP header processing.
2019-11-15 14:24:03 +08:00
wolfbeast
cdd4aecfbb
Issue #447 - Improve the getHSTSPreloadList script
...
- Use HEAD instead of GET for probe to avoid loading pages
- Reduce retries to 2
- Reduce timeout to 10 s (since we're just getting a HEAD this is royal)
- Identify ourselves to websites as an automated tool
- Improve performance of list merging (O(n^2) was getting too expensive)
- Add a total counter and perform GC every 200 requests
2019-11-10 07:13:07 +08:00
wolfbeast
945250b485
Issue #447 - Update HSTS preload list.
2019-11-10 07:13:03 +08:00
Roy Tam
27884ac351
Merge remote-tracking branch 'origin/master' into custom
2019-11-08 20:30:31 +08:00
wolfbeast
24645d4b58
Issue #1064 - Part 3: Fix notifyObservers() call.
2019-11-08 20:24:03 +08:00
