Commit graph

225 commits

Author SHA1 Message Date
roytam1
ee11f1749b Merge remote-tracking branch 'origin/master' into custom 2020-12-02 09:58:28 +08:00
Moonchild
d8fdbcd88c [NSS] Version and build bump 2020-12-02 09:57:49 +08:00
Moonchild
b71804f4a3 [NSS] Update root certificates. 2020-12-02 09:57:48 +08:00
roytam1
eb8926eb17 Merge remote-tracking branch 'origin/master' into custom 2020-11-19 21:12:48 +08:00
adesh
2924d30a83 Issue #1280 - Follow-up: Get rid of HPKP pinning mode.
This was a leftover from HPKP removal.

Also remove a couple of unused variables from security/manager/ssl/nsSiteSecurityService.cpp.
2020-11-19 21:11:43 +08:00
roytam1
4903a8dfa9 Merge remote-tracking branch 'origin/master' into custom 2020-10-30 09:27:13 +08:00
Moonchild
a77ab3da7f Issue #1656 - Nuke the remaining vim lines in UXP
Closes #1656
2020-10-30 09:09:20 +08:00
roytam1
75e16e5121 partly import changes from tenfourfox:
- #627: M1631583 M1631597 M1636771 M1637222 M1649316 M1651520 (2373458b5)
- #627: M1631573 (0abd0fc5d)
2020-10-09 21:23:26 +08:00
roytam1
56aaf6a15a Merge remote-tracking branch 'origin/master' into custom 2020-09-25 22:18:48 +08:00
Moonchild
9305760571 Issue #1656 - Part 9: Single-line-comment style. 2020-09-25 22:07:00 +08:00
Moonchild
d5919942ff Issue #1656 - Part 8: Devtools and misc. 2020-09-25 22:06:55 +08:00
Moonchild
0cd673d720 Issue #1656 - Part 6: Clean up the build files 2020-09-25 22:04:23 +08:00
Moonchild
538b420319 Issue #1656 - Part 4: Manual cleanup 2020-09-25 22:04:20 +08:00
Moonchild
d7a4abc3d4 Issue #1656 - Part 4: Tackle *.idl, *.css, *.ipdlh, *.webidl, *.cc 2020-09-25 22:04:18 +08:00
Moonchild
30df895eb2 Issue #1656 - Part 3: Nuke more vim config lines in the tree.
Another S&R run with some smarter matching.
2020-09-25 22:04:17 +08:00
Moonchild
8c395520d9 Issue #1656 - Part 1: Nuke most vim config lines in the tree.
Since these are just interpreted comments, there's 0 impact on actual code.
This removes all lines that match /* vim: set(.*)tw=80: */ with S&R -- there are
a few others scattered around which will be removed manually in a second part.
2020-09-25 22:04:12 +08:00
roytam1
64ccce7c22 partly import changes from tenfourfox:
- #622: M1660537 M1641487(modified) M1645492 (291688840)
2020-09-19 07:15:01 +08:00
roytam1
06a2891ef7 import certdata changes from NSS upstream:
- Bug 1651211 - Remove EE Certification Centre Root CA root cert. r=KathleenWilson,jcj
- Bug 1653092 - Disable server trust bit for OISTE WISeKey Global Root GA CA root cert. r=KathleenWilson,jcj
- Bug 1656077 - Remove Taiwan Government Root Certification Authority root cert. r=KathleenWilson,jcj
- Bug 1663049 - Add SecureTrust's Trustwave Global root certificates to NSS. r=KathleenWilson,jcj
- Bug 1663049 - September 2020 batch of root changes, NSS_BUILTINS_LIBRARY_VERSION 2.44. r=jcj
2020-09-19 07:05:30 +08:00
roytam1
1455a4fcbd import change from tenfourfox:
- fix overzealous assertion (M1531906) (af9a8236e)
2020-09-19 07:05:02 +08:00
roytam1
8fd5fd8690 Merge remote-tracking branch 'origin/master' into custom 2020-09-16 21:19:55 +08:00
adeshkp
f7b02cecab Issue #1280 - Remove hostname parameter to trust domain.
Host name was purely being used for HPKP and since HPKP is killed,
this can also go. Currently it doesn't do anything other than
generating build warnings.
2020-09-16 21:11:01 +08:00
Roy Tam
8015bb7004 update NSS as-of pm27 rev 7606140ee 2020-09-04 22:55:34 +08:00
Roy Tam
eeb44de4a1 Merge remote-tracking branch 'origin/master' into custom 2020-09-04 22:34:20 +08:00
Moonchild
38470e4fe9 [NSS] Version and build bump 2020-09-04 22:30:57 +08:00
J.C. Jones
0e23c7cc48 [NSS] Prevent slotLock race in NSC_GetTokenInfo
Basically, NSC_GetTokenInfo doesn't lock slot->slotLock before accessing slot
after obtaining it, even though slotLock is defined as its lock.
2020-09-04 22:30:55 +08:00
Roy Tam
3d5ac98e9d Merge remote-tracking branch 'origin/master' into custom 2020-07-10 22:22:14 +08:00
Moonchild
9890572c8e [NSS] Version and build bump 2020-07-10 22:18:56 +08:00
Sohaib ul Hassan
62467c473d [NSS] Implement constant-time GCD and modular inversion
The implementation is based on the work by Bernstein and Yang
(https://eprint.iacr.org/2019/266)
"Fast constant-time gcd computation and modular inversion".

It fixes the old mp_gcd and s_mp_invmod_odd_m functions. The patch also fixes
mpl_significant_bits s_mp_div_2d and s_mp_mul_2d by having less control flow to
reduce side-channel leaks.

Co-authored by : Billy Bob Brumley
2020-07-10 22:18:52 +08:00
Roy Tam
6ef287a52e Merge remote-tracking branch 'origin/master' into custom 2020-06-10 21:03:13 +08:00
Moonchild
594c930eca Issue #439 - Remove, fix and clean up automated tests
With the big amount of code churn around DOM a lot of tests
broke severely enough that they caused build bustage.
This commit cleans up, removes or otherwise fixes tests
that are broken, no longer relevant or obsolete.
2020-06-10 21:00:09 +08:00
Roy Tam
5c4cee240f Merge remote-tracking branch 'origin/master' into custom 2020-06-06 07:27:53 +08:00
Moonchild
ca3ce88bd1 [NSS] Bump NSS version 2020-06-06 07:21:18 +08:00
Moonchild
4789fee7cf [NSS] Force a fixed length for DSA exponentiation 2020-06-06 07:21:15 +08:00
Roy Tam
4ecaa49dd0 Merge remote-tracking branch 'origin/master' into custom 2020-04-03 09:57:28 +08:00
athenian200
768fad9864 Issue #1501 - Un-bust building of NSS after update to 3.48 on Solaris. 2020-04-03 09:30:25 +08:00
wolfbeast
052b2e70a3 Issue #1280 - Un-bust certerror pages and ForgetAboutSite 2020-04-03 09:30:07 +08:00
wolfbeast
593ea86a68 Issue #1280 - Part 2: Remove HPKP tests. 2020-04-03 09:27:13 +08:00
wolfbeast
cf5f069080 Issue #1280 - Part 1: Remove HPKP components.
This also removes leftover plumbing for storing preload information
in SiteSecurityService since no service still uses it.
2020-04-03 09:27:11 +08:00
wolfbeast
ff8c58e8db Issue #1498 - Part 6: Remove STS preloadlist pref. 2020-04-03 09:22:00 +08:00
wolfbeast
be0246f8e4 Issue #1498 - Part 5: Update SSService CID and correct mismatch. 2020-04-03 09:21:57 +08:00
wolfbeast
6fe7731e5e Issue #1498 - Part 4: Remove clearPreloads.
Also tag #1280
2020-04-03 09:21:53 +08:00
wolfbeast
bcfc5b3a88 Issue #1498 - Part 3: Remove support for storing "knockout" values. 2020-04-03 09:21:49 +08:00
wolfbeast
786480c19c Issue #1498 - Part 1: Stop persisting preload states.
Since we don't use preloading anymore for either HPKP or HSTS, we no
longer need persistent storage in the profile for preload states.
Tag #1280 also
2020-04-03 09:17:35 +08:00
wolfbeast
7d012bfdc0 Issue #1498 - Part 1: Stop using HSTS preload lists. 2020-04-03 09:17:28 +08:00
Matt A. Tobin
5010fed2fd Take nsSiteSecurityService out of UNIFIED_SOURCES
It exceeded the obj file sections limit because of the HSTS preload list so it cannot be built in UNIFIED mode.
2020-04-03 09:16:53 +08:00
wolfbeast
2c18f6df31 Issue #447 - Update HSTS preload list 2020-04-03 09:16:50 +08:00
wolfbeast
8778ddfc52 Issue #1467 - Part 4: Rename NSS_SQLSTORE to MOZ_SECURITY_SQLSTORE.
Rename the build config option accordingly.
2020-04-03 09:14:07 +08:00
wolfbeast
ff29b77edc Issue #1467 - Part 3: Use UTF-8 file paths for NSS-SQL database. 2020-04-03 09:14:04 +08:00
wolfbeast
5efa1a9e43 Issue #1467 - Part 1: Set up conditional NSS-SQL builds.
- Adds buildconfig option --enable-nss-sqlstore
- Prefixes NSS dbinit with either sql: or dbm: depending on config
- Pre-initializes mozStorage when NSS-SQL storage is used to prevent
  an sqlite3_config race in NSS Init
2020-04-03 09:12:04 +08:00
Roy Tam
bd46990741 Merge remote-tracking branch 'origin/master' into custom 2020-03-05 09:48:44 +08:00