Roy Tam
8015bb7004
update NSS as-of pm27 rev 7606140ee
2020-09-04 22:55:34 +08:00
Roy Tam
eeb44de4a1
Merge remote-tracking branch 'origin/master' into custom
2020-09-04 22:34:20 +08:00
Moonchild
38470e4fe9
[NSS] Version and build bump
2020-09-04 22:30:57 +08:00
J.C. Jones
0e23c7cc48
[NSS] Prevent slotLock race in NSC_GetTokenInfo
...
Basically, NSC_GetTokenInfo doesn't lock slot->slotLock before accessing slot
after obtaining it, even though slotLock is defined as its lock.
2020-09-04 22:30:55 +08:00
Roy Tam
3d5ac98e9d
Merge remote-tracking branch 'origin/master' into custom
2020-07-10 22:22:14 +08:00
Moonchild
9890572c8e
[NSS] Version and build bump
2020-07-10 22:18:56 +08:00
Sohaib ul Hassan
62467c473d
[NSS] Implement constant-time GCD and modular inversion
...
The implementation is based on the work by Bernstein and Yang
(https://eprint.iacr.org/2019/266 )
"Fast constant-time gcd computation and modular inversion".
It fixes the old mp_gcd and s_mp_invmod_odd_m functions. The patch also fixes
mpl_significant_bits s_mp_div_2d and s_mp_mul_2d by having less control flow to
reduce side-channel leaks.
Co-authored by : Billy Bob Brumley
2020-07-10 22:18:52 +08:00
Roy Tam
6ef287a52e
Merge remote-tracking branch 'origin/master' into custom
2020-06-10 21:03:13 +08:00
Moonchild
594c930eca
Issue #439 - Remove, fix and clean up automated tests
...
With the big amount of code churn around DOM a lot of tests
broke severely enough that they caused build bustage.
This commit cleans up, removes or otherwise fixes tests
that are broken, no longer relevant or obsolete.
2020-06-10 21:00:09 +08:00
Roy Tam
5c4cee240f
Merge remote-tracking branch 'origin/master' into custom
2020-06-06 07:27:53 +08:00
Moonchild
ca3ce88bd1
[NSS] Bump NSS version
2020-06-06 07:21:18 +08:00
Moonchild
4789fee7cf
[NSS] Force a fixed length for DSA exponentiation
2020-06-06 07:21:15 +08:00
Roy Tam
4ecaa49dd0
Merge remote-tracking branch 'origin/master' into custom
2020-04-03 09:57:28 +08:00
athenian200
768fad9864
Issue #1501 - Un-bust building of NSS after update to 3.48 on Solaris.
2020-04-03 09:30:25 +08:00
wolfbeast
052b2e70a3
Issue #1280 - Un-bust certerror pages and ForgetAboutSite
2020-04-03 09:30:07 +08:00
wolfbeast
593ea86a68
Issue #1280 - Part 2: Remove HPKP tests.
2020-04-03 09:27:13 +08:00
wolfbeast
cf5f069080
Issue #1280 - Part 1: Remove HPKP components.
...
This also removes leftover plumbing for storing preload information
in SiteSecurityService since no service still uses it.
2020-04-03 09:27:11 +08:00
wolfbeast
ff8c58e8db
Issue #1498 - Part 6: Remove STS preloadlist pref.
2020-04-03 09:22:00 +08:00
wolfbeast
be0246f8e4
Issue #1498 - Part 5: Update SSService CID and correct mismatch.
2020-04-03 09:21:57 +08:00
wolfbeast
6fe7731e5e
Issue #1498 - Part 4: Remove clearPreloads.
...
Also tag #1280
2020-04-03 09:21:53 +08:00
wolfbeast
bcfc5b3a88
Issue #1498 - Part 3: Remove support for storing "knockout" values.
2020-04-03 09:21:49 +08:00
wolfbeast
786480c19c
Issue #1498 - Part 1: Stop persisting preload states.
...
Since we don't use preloading anymore for either HPKP or HSTS, we no
longer need persistent storage in the profile for preload states.
Tag #1280 also
2020-04-03 09:17:35 +08:00
wolfbeast
7d012bfdc0
Issue #1498 - Part 1: Stop using HSTS preload lists.
2020-04-03 09:17:28 +08:00
Matt A. Tobin
5010fed2fd
Take nsSiteSecurityService out of UNIFIED_SOURCES
...
It exceeded the obj file sections limit because of the HSTS preload list so it cannot be built in UNIFIED mode.
2020-04-03 09:16:53 +08:00
wolfbeast
2c18f6df31
Issue #447 - Update HSTS preload list
2020-04-03 09:16:50 +08:00
wolfbeast
8778ddfc52
Issue #1467 - Part 4: Rename NSS_SQLSTORE to MOZ_SECURITY_SQLSTORE.
...
Rename the build config option accordingly.
2020-04-03 09:14:07 +08:00
wolfbeast
ff29b77edc
Issue #1467 - Part 3: Use UTF-8 file paths for NSS-SQL database.
2020-04-03 09:14:04 +08:00
wolfbeast
5efa1a9e43
Issue #1467 - Part 1: Set up conditional NSS-SQL builds.
...
- Adds buildconfig option --enable-nss-sqlstore
- Prefixes NSS dbinit with either sql: or dbm: depending on config
- Pre-initializes mozStorage when NSS-SQL storage is used to prevent
an sqlite3_config race in NSS Init
2020-04-03 09:12:04 +08:00
Roy Tam
bd46990741
Merge remote-tracking branch 'origin/master' into custom
2020-03-05 09:48:44 +08:00
Matt A. Tobin
56f64bd775
Issue #1053 - Remove android support from nsNSSComponent.cpp
2020-03-05 09:38:27 +08:00
Roy Tam
c9f0b81b06
Merge remote-tracking branch 'origin/master' into custom
2020-02-07 08:01:35 +08:00
wolfbeast
ed6f10f477
Issue #447 - Update HSTS preload list & reduce debug spew
...
Commented out spewing dump() statements in loops. With the ever growing
HSTS list it takes too much time and is pointless to display.
2020-02-07 07:52:21 +08:00
Roy Tam
678ad26488
Merge remote-tracking branch 'origin/master' into custom
2020-01-24 09:39:16 +08:00
Kai Engert
a8daf97de0
Issue #1338 - Follow-up: Also cache the most recent PBKDF1 hash
...
This rewrites the caching mechanism to apply to both PBKDF1 and PBKDF2
2020-01-24 09:36:33 +08:00
wolfbeast
abb2afe2a7
Issue #1338 - Bump NSS version
...
Our NSS version is closer to the currently-released .1, so bump version
to that.
Note: we still have some additional patches to the in-tree version in
place so this isn't a 100% match to the RTM one.
2020-01-24 09:28:39 +08:00
Roy Tam
969d239b65
Merge remote-tracking branch 'origin/master' into custom
2020-01-17 09:24:31 +08:00
Kai Engert
3d75257e8d
Issue #1338 : Follow-up: Cache the most recent PBKDF2 password hash,
...
to speed up repeated SDR operations.
Landed on NSS-3.48 for Bug 1606992
2020-01-17 09:15:04 +08:00
Roy Tam
f9aa123602
Merge remote-tracking branch 'origin/master' into custom
2020-01-11 06:48:56 +08:00
Daiki Ueno
75fdf9c3b0
Issue #1338 - Followup: certdb: propagate trust information if trust
...
module is loaded afterwards,
Summary: When the builtin trust module is loaded after some temp certs
being created, these temp certs are usually not accompanied by trust
information. This causes a problem in UXP as it loads the module from a
separate thread while accessing the network cache which populates temp
certs.
This change makes it properly roll up the trust information, if a temp
cert doesn't have trust information.
2020-01-11 06:47:38 +08:00
wolfbeast
b299b34492
Issue #1338 - Un-bust building of NSS after update to 3.48 on Linux.
2020-01-11 06:47:34 +08:00
Roy Tam
239002b5c9
Merge remote-tracking branch 'origin/master' into custom
2020-01-10 17:07:32 +08:00
wolfbeast
d12d260c6a
Be more consistent about decoding IP addresses in PSM.
2020-01-10 17:06:58 +08:00
wolfbeast
c57cac24e8
Issue #1338 - Part 2: Update NSS to 3.48-RTM
2020-01-05 11:42:29 +08:00
Roy Tam
9778f15c7d
import NSS tip revs: bug1594965, bug1593167, bug1603027, bug1600144, bug1590001, bug1603257, bug1605545, bug1513586
2020-01-03 22:08:56 +08:00
Roy Tam
171849c8e5
Update NSS to 3.48 while keeping vc2013 hackfix and no-sslkeylogfile intact.
2020-01-03 13:36:26 +08:00
Roy Tam
b74770e3f1
Merge remote-tracking branch 'origin/master' into custom
2019-12-28 21:20:53 +08:00
wolfbeast
b753aec164
Issue #1118 - Part 6: Fix various tests that are no longer correct.
...
The behavior change of document.open() requires these tests to be
changed to account for the new spec behavior.
2019-12-28 21:20:04 +08:00
Roy Tam
91821d6b92
partly imported from tenfourfox: #578 : M1579060 M1586176
2019-12-10 10:53:09 +08:00
Roy Tam
8c7f5dcc57
Merge remote-tracking branch 'origin/master' into custom
2019-12-07 06:55:51 +08:00
Craig Disselkoen
b7f6024e34
[NSS] Bug 1586176 - EncryptUpdate should use maxout not block size.
2019-12-07 06:55:10 +08:00
