roytam1
ee11f1749b
Merge remote-tracking branch 'origin/master' into custom
2020-12-02 09:58:28 +08:00
Moonchild
d8fdbcd88c
[NSS] Version and build bump
2020-12-02 09:57:49 +08:00
Moonchild
b71804f4a3
[NSS] Update root certificates.
2020-12-02 09:57:48 +08:00
roytam1
eb8926eb17
Merge remote-tracking branch 'origin/master' into custom
2020-11-19 21:12:48 +08:00
adesh
2924d30a83
Issue #1280 - Follow-up: Get rid of HPKP pinning mode.
...
This was a leftover from HPKP removal.
Also remove a couple of unused variables from security/manager/ssl/nsSiteSecurityService.cpp.
2020-11-19 21:11:43 +08:00
roytam1
4903a8dfa9
Merge remote-tracking branch 'origin/master' into custom
2020-10-30 09:27:13 +08:00
Moonchild
a77ab3da7f
Issue #1656 - Nuke the remaining vim lines in UXP
...
Closes #1656
2020-10-30 09:09:20 +08:00
roytam1
75e16e5121
partly import changes from tenfourfox:
...
- #627 : M1631583 M1631597 M1636771 M1637222 M1649316 M1651520 (2373458b5)
- #627 : M1631573 (0abd0fc5d)
2020-10-09 21:23:26 +08:00
roytam1
56aaf6a15a
Merge remote-tracking branch 'origin/master' into custom
2020-09-25 22:18:48 +08:00
Moonchild
9305760571
Issue #1656 - Part 9: Single-line-comment style.
2020-09-25 22:07:00 +08:00
Moonchild
d5919942ff
Issue #1656 - Part 8: Devtools and misc.
2020-09-25 22:06:55 +08:00
Moonchild
0cd673d720
Issue #1656 - Part 6: Clean up the build files
2020-09-25 22:04:23 +08:00
Moonchild
538b420319
Issue #1656 - Part 4: Manual cleanup
2020-09-25 22:04:20 +08:00
Moonchild
d7a4abc3d4
Issue #1656 - Part 4: Tackle *.idl, *.css, *.ipdlh, *.webidl, *.cc
2020-09-25 22:04:18 +08:00
Moonchild
30df895eb2
Issue #1656 - Part 3: Nuke more vim config lines in the tree.
...
Another S&R run with some smarter matching.
2020-09-25 22:04:17 +08:00
Moonchild
8c395520d9
Issue #1656 - Part 1: Nuke most vim config lines in the tree.
...
Since these are just interpreted comments, there's 0 impact on actual code.
This removes all lines that match /* vim: set(.*)tw=80: */ with S&R -- there are
a few others scattered around which will be removed manually in a second part.
2020-09-25 22:04:12 +08:00
roytam1
64ccce7c22
partly import changes from tenfourfox:
...
- #622 : M1660537 M1641487(modified) M1645492 (291688840)
2020-09-19 07:15:01 +08:00
roytam1
06a2891ef7
import certdata changes from NSS upstream:
...
- Bug 1651211 - Remove EE Certification Centre Root CA root cert. r=KathleenWilson,jcj
- Bug 1653092 - Disable server trust bit for OISTE WISeKey Global Root GA CA root cert. r=KathleenWilson,jcj
- Bug 1656077 - Remove Taiwan Government Root Certification Authority root cert. r=KathleenWilson,jcj
- Bug 1663049 - Add SecureTrust's Trustwave Global root certificates to NSS. r=KathleenWilson,jcj
- Bug 1663049 - September 2020 batch of root changes, NSS_BUILTINS_LIBRARY_VERSION 2.44. r=jcj
2020-09-19 07:05:30 +08:00
roytam1
1455a4fcbd
import change from tenfourfox:
...
- fix overzealous assertion (M1531906) (af9a8236e)
2020-09-19 07:05:02 +08:00
roytam1
8fd5fd8690
Merge remote-tracking branch 'origin/master' into custom
2020-09-16 21:19:55 +08:00
adeshkp
f7b02cecab
Issue #1280 - Remove hostname parameter to trust domain.
...
Host name was purely being used for HPKP and since HPKP is killed,
this can also go. Currently it doesn't do anything other than
generating build warnings.
2020-09-16 21:11:01 +08:00
Roy Tam
8015bb7004
update NSS as-of pm27 rev 7606140ee
2020-09-04 22:55:34 +08:00
Roy Tam
eeb44de4a1
Merge remote-tracking branch 'origin/master' into custom
2020-09-04 22:34:20 +08:00
Moonchild
38470e4fe9
[NSS] Version and build bump
2020-09-04 22:30:57 +08:00
J.C. Jones
0e23c7cc48
[NSS] Prevent slotLock race in NSC_GetTokenInfo
...
Basically, NSC_GetTokenInfo doesn't lock slot->slotLock before accessing slot
after obtaining it, even though slotLock is defined as its lock.
2020-09-04 22:30:55 +08:00
Roy Tam
3d5ac98e9d
Merge remote-tracking branch 'origin/master' into custom
2020-07-10 22:22:14 +08:00
Moonchild
9890572c8e
[NSS] Version and build bump
2020-07-10 22:18:56 +08:00
Sohaib ul Hassan
62467c473d
[NSS] Implement constant-time GCD and modular inversion
...
The implementation is based on the work by Bernstein and Yang
(https://eprint.iacr.org/2019/266 )
"Fast constant-time gcd computation and modular inversion".
It fixes the old mp_gcd and s_mp_invmod_odd_m functions. The patch also fixes
mpl_significant_bits s_mp_div_2d and s_mp_mul_2d by having less control flow to
reduce side-channel leaks.
Co-authored by : Billy Bob Brumley
2020-07-10 22:18:52 +08:00
Roy Tam
6ef287a52e
Merge remote-tracking branch 'origin/master' into custom
2020-06-10 21:03:13 +08:00
Moonchild
594c930eca
Issue #439 - Remove, fix and clean up automated tests
...
With the big amount of code churn around DOM a lot of tests
broke severely enough that they caused build bustage.
This commit cleans up, removes or otherwise fixes tests
that are broken, no longer relevant or obsolete.
2020-06-10 21:00:09 +08:00
Roy Tam
5c4cee240f
Merge remote-tracking branch 'origin/master' into custom
2020-06-06 07:27:53 +08:00
Moonchild
ca3ce88bd1
[NSS] Bump NSS version
2020-06-06 07:21:18 +08:00
Moonchild
4789fee7cf
[NSS] Force a fixed length for DSA exponentiation
2020-06-06 07:21:15 +08:00
Roy Tam
4ecaa49dd0
Merge remote-tracking branch 'origin/master' into custom
2020-04-03 09:57:28 +08:00
athenian200
768fad9864
Issue #1501 - Un-bust building of NSS after update to 3.48 on Solaris.
2020-04-03 09:30:25 +08:00
wolfbeast
052b2e70a3
Issue #1280 - Un-bust certerror pages and ForgetAboutSite
2020-04-03 09:30:07 +08:00
wolfbeast
593ea86a68
Issue #1280 - Part 2: Remove HPKP tests.
2020-04-03 09:27:13 +08:00
wolfbeast
cf5f069080
Issue #1280 - Part 1: Remove HPKP components.
...
This also removes leftover plumbing for storing preload information
in SiteSecurityService since no service still uses it.
2020-04-03 09:27:11 +08:00
wolfbeast
ff8c58e8db
Issue #1498 - Part 6: Remove STS preloadlist pref.
2020-04-03 09:22:00 +08:00
wolfbeast
be0246f8e4
Issue #1498 - Part 5: Update SSService CID and correct mismatch.
2020-04-03 09:21:57 +08:00
wolfbeast
6fe7731e5e
Issue #1498 - Part 4: Remove clearPreloads.
...
Also tag #1280
2020-04-03 09:21:53 +08:00
wolfbeast
bcfc5b3a88
Issue #1498 - Part 3: Remove support for storing "knockout" values.
2020-04-03 09:21:49 +08:00
wolfbeast
786480c19c
Issue #1498 - Part 1: Stop persisting preload states.
...
Since we don't use preloading anymore for either HPKP or HSTS, we no
longer need persistent storage in the profile for preload states.
Tag #1280 also
2020-04-03 09:17:35 +08:00
wolfbeast
7d012bfdc0
Issue #1498 - Part 1: Stop using HSTS preload lists.
2020-04-03 09:17:28 +08:00
Matt A. Tobin
5010fed2fd
Take nsSiteSecurityService out of UNIFIED_SOURCES
...
It exceeded the obj file sections limit because of the HSTS preload list so it cannot be built in UNIFIED mode.
2020-04-03 09:16:53 +08:00
wolfbeast
2c18f6df31
Issue #447 - Update HSTS preload list
2020-04-03 09:16:50 +08:00
wolfbeast
8778ddfc52
Issue #1467 - Part 4: Rename NSS_SQLSTORE to MOZ_SECURITY_SQLSTORE.
...
Rename the build config option accordingly.
2020-04-03 09:14:07 +08:00
wolfbeast
ff29b77edc
Issue #1467 - Part 3: Use UTF-8 file paths for NSS-SQL database.
2020-04-03 09:14:04 +08:00
wolfbeast
5efa1a9e43
Issue #1467 - Part 1: Set up conditional NSS-SQL builds.
...
- Adds buildconfig option --enable-nss-sqlstore
- Prefixes NSS dbinit with either sql: or dbm: depending on config
- Pre-initializes mozStorage when NSS-SQL storage is used to prevent
an sqlite3_config race in NSS Init
2020-04-03 09:12:04 +08:00
Roy Tam
bd46990741
Merge remote-tracking branch 'origin/master' into custom
2020-03-05 09:48:44 +08:00