Commit graph

192 commits

Author SHA1 Message Date
wolfbeast
db9333e3c8 Issue #1064 - Part 2: Fix shorthand and services module import. 2019-11-08 20:24:01 +08:00
wolfbeast
6c3b83022a No issue: Clean up exceptionDialog.js
- Fix some quoting, comments and inconsistencies and code style
- Swap manually grabbing service components out for using `Services.*`
2019-11-08 20:24:00 +08:00
wolfbeast
b09c92a90a Issue #1064: Don't get certificate details synchronously.
This avoids getting data synchronously on the main thread in an XHR
(which has been deprecated for a long time and _may_ actually be blocked
in our networking) and attempts to be more predictable by always firing
an update request for the dialog from the XHR request handlers.
2019-11-08 20:23:58 +08:00
Roy Tam
41dd9e2994 partly import change from tenfourfox: update pins, TLDs, miners 2019-10-22 14:14:28 +08:00
Roy Tam
240ca3c878 update NSS to 3.44.2 2019-10-22 10:23:28 +08:00
Roy Tam
6d191b58d4 Merge remote-tracking branch 'origin/master' into custom 2019-09-06 23:57:22 +08:00
wolfbeast
c3dc56af72 Properly implement various HSTS states.
Previously, HSTS preload list values could be overridden temporarily due
to counter-intuitive behavior of the API's removeState function.
This adds an explicit flag to the API for writing knockout values to
the Site Security Service, with the default resetting to whatever the
preload list state is.
2019-09-06 23:50:01 +08:00
Roy Tam
058ed959e5 import change from tenfourfox:
- #568: update certs, pins, TLDs, miners (fe73f72f7)
and added -bigobj compile switch to ssl/moz.build.
2019-09-04 23:28:16 +08:00
Roy Tam
679eb8464d Merge remote-tracking branch 'origin/master' into custom 2019-06-28 07:04:39 +08:00
trav90
d5703962e7 Update HSTS preload list
Tag #447
2019-06-28 07:02:09 +08:00
Roy Tam
d4b834111b nss: update to 3.44.1, with vc2013 fix and gyp fix 2019-06-24 21:44:17 +08:00
Roy Tam
6431b85501 Merge remote-tracking branch 'origin/master' into custom 2019-05-31 07:28:33 +08:00
wolfbeast
3a613f462d Update HSTS preload list
Tag #447
2019-05-31 07:21:57 +08:00
Roy Tam
11ce2e06e8 ported changes from mozilla upstream:
bug1351303, bug1352235, bug1371508, bug1430268, bug1352734
2019-05-22 22:24:16 +08:00
Roy Tam
2cb30a238c Merge remote-tracking branch 'origin/master' into custom 2019-04-27 09:01:02 +08:00
Matt A. Tobin
97059c1b48 Issue #1053 - Drop support Android and remove Fennec - Part 1b: Remove MOZ_FENNEC 2019-04-27 08:51:55 +08:00
adeshkp
6a0abd1cd5 Remove SecurityUI telemetry. 2019-04-27 08:23:50 +08:00
Roy Tam
b314cfa402 nss: go back to 3.43 release 2019-04-25 12:03:02 +08:00
Roy Tam
0daf4d9cc9 nss: update nss to hg rev 2d6adc7d8bfc with vc2013 hackfix 2019-04-19 13:08:07 +08:00
Roy Tam
dcdc5d70e0 nss: update nss to hg rev e5e10a46b9ad with vc2013 hackfix 2019-04-06 10:14:46 +08:00
Roy Tam
55c995b79c Merge remote-tracking branch 'origin/master' into custom 2019-03-16 07:14:05 +08:00
adeshkp
5193311ea5 Fix order of member variables in a couple of initializer lists 2019-03-16 07:04:11 +08:00
Roy Tam
b0e724dc85 nss: update nss to hg rev 395a93dbc02e with vc2013 patch applied 2019-02-22 22:05:00 +08:00
trav90
7c9325064a Update HSTS preload list
Tag #447
2019-02-16 00:27:43 +08:00
Ascrod
b85fb498d9 Fix check for HSTS when service is disabled. 2019-02-16 00:24:25 +08:00
Ascrod
57ca286478 Add preference for fully disabling HSTS. 2019-02-16 00:24:23 +08:00
adeshkp
813140d8c7 Remove a pointless switch after telemetry cleanup 2019-02-16 00:24:07 +08:00
adeshkp
aea50f182f Telemetry: Remove stubs and related code 2019-02-16 00:24:04 +08:00
trav90
651f0bfce6 Update HSTS preload list
Tag #447
2019-02-16 00:23:51 +08:00
trav90
cad597caf0 Update HSTS preload list
Tag #447
2019-02-16 00:22:33 +08:00
wolfbeast
5f0986e66f Update NSS to 3.41 2019-02-16 00:22:24 +08:00
trav90
fa5aa7b3d8 Update HSTS preload list
Tag #447
2019-02-16 00:20:30 +08:00
wolfbeast
d8ccdaa0d9 Remove AccumulateCipherSuite()
This resolves #858
2019-02-16 00:19:07 +08:00
wolfbeast
64a8472788 Remove ancient workaround in client certificate code
Apparently a prehistoric server implementation would send a certificate_authorities field
that didn't include the outer DER SEQUENCE tag, so PSM attempted to detect this and
work around it.
This prehistoric server implementation isn't in use anywhere anymore, so this 18-yo
server bug workaround can be removed.
2019-02-16 00:18:40 +08:00
wolfbeast
6c4b9ec3ce Make sure nsNSSCertList handling checks for valid certs. 2019-02-16 00:18:31 +08:00
trav90
37fe93abff Update HSTS preload list
Tag #447
2019-02-16 00:18:13 +08:00
trav90
2bce502df7 Update HSTS preload list
Tag #447
2019-02-16 00:15:49 +08:00
wolfbeast
55c45dc7f2 Ensure we got an nsISSLStatus when deserializing in TransportSecurityInfo. 2019-02-16 00:15:09 +08:00
trav90
c576139ef2 Update HSTS preload list
Tag #447
2019-02-16 00:14:42 +08:00
wolfbeast
bd525435bf Get rid of the incorrect mechanism to remove insecure fallback hosts.
This fixes #797.
2019-02-16 00:14:39 +08:00
trav90
4f41aebb67 Update HSTS preload list
Tag #447
2019-02-16 00:13:42 +08:00
wolfbeast
8c8145e620 Remove all C++ Telemetry Accumulation calls.
This creates a number of stubs and leaves some surrounding code that may be irrelevant (eg. recorded time stamps, status variables).
Stub resolution/removal should be a follow-up to this.
2019-02-16 00:12:32 +08:00
wolfbeast
e2e197cada Remove support for TLS session caches in TLSServerSocket.
This resolves #738
2019-02-16 00:12:22 +08:00
trav90
450c242d9f Update HSTS preload list
Tag #447
2019-02-16 00:12:12 +08:00
wolfbeast
4debc9246e Fix missed in32->int64 in df852120098dc7ba5df4a76126c6297c6d2d1b7b
Tag #709.
2019-02-16 00:11:26 +08:00
wolfbeast
8effb3030e Reinstate RC4 and mark 3DES weak.
Tag #709
2019-02-16 00:11:24 +08:00
wolfbeast
7f72783c00 Extend {EnabledWeakCiphers} bit field to allow more cipher suites.
Tag #709.
2019-02-16 00:11:23 +08:00
wolfbeast
d36d4eb674 Update NSS to 3.38
- Added HACL*Poly1305 32-bit (INRIA/Microsoft)
- Updated to final TLS 1.3 draft version (28)
- Removed TLS 1.3 prerelease draft limit check
- Removed NPN code
- Enabled dev/urandom-only RNG on Linux with NSS_SEED_ONLY_DEV_URANDOM for non-standard environments
- Fixed several bugs with TLS 1.3 negotiation
- Updated internal certificate store
- Added support for the TLS Record Size Limit Extension.
- Fixed CVE-2018-0495
- Various security fixes in the ASN.1 code.
2019-02-16 00:11:10 +08:00
trav90
b266e5e349 Update HSTS preload list
Tag #447
2019-02-16 00:10:17 +08:00
yami
4470fb65f3 replace "certErrorCodePrefix2" with "certErrorCodePrefix" 2019-02-16 00:09:37 +08:00