J.C. Jones
0916deba59
[NSS] Bug 1508776 - Remove unneeded refcounting from SFTKSession
...
SFTKSession objects are only ever actually destroyed at PK11 session
closure, as the session is always the final holder -- and asserting
refCount == 1 shows that to be true. Because of that, NSC_CloseSession
can just call `sftk_DestroySession` directly and leave
`sftk_FreeSession` as a no-op to be removed in the future.
2019-12-07 06:55:07 +08:00
Roy Tam
eb4044be79
updated to nss-3.44.3
2019-11-22 11:14:22 +08:00
Roy Tam
01a4bc1e3b
Merge remote-tracking branch 'origin/master' into custom
2019-11-22 10:59:44 +08:00
wolfbeast
a9481b02f7
Issue #447 - Update HSTS preload list
2019-11-22 10:53:07 +08:00
Roy Tam
d2b5ffafc2
Merge remote-tracking branch 'origin/master' into custom
2019-11-15 15:03:49 +08:00
wolfbeast
08a2dbad4c
Issue #1289 - Part 3: Update tests.
2019-11-15 14:24:07 +08:00
wolfbeast
79593d40e1
Issue #1289 - Part 2: Clear out the preload list except for test
...
domains.
2019-11-15 14:24:05 +08:00
wolfbeast
e7ab106190
Issue #1289 - Part 1: Add a pref to disable HPKP header processing.
2019-11-15 14:24:03 +08:00
wolfbeast
cdd4aecfbb
Issue #447 - Improve the getHSTSPreloadList script
...
- Use HEAD instead of GET for probe to avoid loading pages
- Reduce retries to 2
- Reduce timeout to 10 s (since we're just getting a HEAD this is royal)
- Identify ourselves to websites as an automated tool
- Improve performance of list merging (O(n^2) was getting too expensive)
- Add a total counter and perform GC every 200 requests
2019-11-10 07:13:07 +08:00
wolfbeast
945250b485
Issue #447 - Update HSTS preload list.
2019-11-10 07:13:03 +08:00
Roy Tam
27884ac351
Merge remote-tracking branch 'origin/master' into custom
2019-11-08 20:30:31 +08:00
wolfbeast
24645d4b58
Issue #1064 - Part 3: Fix notifyObservers() call.
2019-11-08 20:24:03 +08:00
wolfbeast
db9333e3c8
Issue #1064 - Part 2: Fix shorthand and services module import.
2019-11-08 20:24:01 +08:00
wolfbeast
6c3b83022a
No issue: Clean up exceptionDialog.js
...
- Fix some quoting, comments and inconsistencies and code style
- Swap manually grabbing service components out for using `Services.*`
2019-11-08 20:24:00 +08:00
wolfbeast
b09c92a90a
Issue #1064 : Don't get certificate details synchronously.
...
This avoids getting data synchronously on the main thread in an XHR
(which has been deprecated for a long time and _may_ actually be blocked
in our networking) and attempts to be more predictable by always firing
an update request for the dialog from the XHR request handlers.
2019-11-08 20:23:58 +08:00
Roy Tam
41dd9e2994
partly import change from tenfourfox: update pins, TLDs, miners
2019-10-22 14:14:28 +08:00
Roy Tam
240ca3c878
update NSS to 3.44.2
2019-10-22 10:23:28 +08:00
Roy Tam
6d191b58d4
Merge remote-tracking branch 'origin/master' into custom
2019-09-06 23:57:22 +08:00
wolfbeast
c3dc56af72
Properly implement various HSTS states.
...
Previously, HSTS preload list values could be overridden temporarily due
to counter-intuitive behavior of the API's removeState function.
This adds an explicit flag to the API for writing knockout values to
the Site Security Service, with the default resetting to whatever the
preload list state is.
2019-09-06 23:50:01 +08:00
Roy Tam
058ed959e5
import change from tenfourfox:
...
- #568 : update certs, pins, TLDs, miners (fe73f72f7)
and added -bigobj compile switch to ssl/moz.build.
2019-09-04 23:28:16 +08:00
Roy Tam
679eb8464d
Merge remote-tracking branch 'origin/master' into custom
2019-06-28 07:04:39 +08:00
trav90
d5703962e7
Update HSTS preload list
...
Tag #447
2019-06-28 07:02:09 +08:00
Roy Tam
d4b834111b
nss: update to 3.44.1, with vc2013 fix and gyp fix
2019-06-24 21:44:17 +08:00
Roy Tam
6431b85501
Merge remote-tracking branch 'origin/master' into custom
2019-05-31 07:28:33 +08:00
wolfbeast
3a613f462d
Update HSTS preload list
...
Tag #447
2019-05-31 07:21:57 +08:00
Roy Tam
11ce2e06e8
ported changes from mozilla upstream:
...
bug1351303, bug1352235, bug1371508, bug1430268, bug1352734
2019-05-22 22:24:16 +08:00
Roy Tam
2cb30a238c
Merge remote-tracking branch 'origin/master' into custom
2019-04-27 09:01:02 +08:00
Matt A. Tobin
97059c1b48
Issue #1053 - Drop support Android and remove Fennec - Part 1b: Remove MOZ_FENNEC
2019-04-27 08:51:55 +08:00
adeshkp
6a0abd1cd5
Remove SecurityUI telemetry.
2019-04-27 08:23:50 +08:00
Roy Tam
b314cfa402
nss: go back to 3.43 release
2019-04-25 12:03:02 +08:00
Roy Tam
0daf4d9cc9
nss: update nss to hg rev 2d6adc7d8bfc with vc2013 hackfix
2019-04-19 13:08:07 +08:00
Roy Tam
dcdc5d70e0
nss: update nss to hg rev e5e10a46b9ad with vc2013 hackfix
2019-04-06 10:14:46 +08:00
Roy Tam
55c995b79c
Merge remote-tracking branch 'origin/master' into custom
2019-03-16 07:14:05 +08:00
adeshkp
5193311ea5
Fix order of member variables in a couple of initializer lists
2019-03-16 07:04:11 +08:00
Roy Tam
b0e724dc85
nss: update nss to hg rev 395a93dbc02e with vc2013 patch applied
2019-02-22 22:05:00 +08:00
trav90
7c9325064a
Update HSTS preload list
...
Tag #447
2019-02-16 00:27:43 +08:00
Ascrod
b85fb498d9
Fix check for HSTS when service is disabled.
2019-02-16 00:24:25 +08:00
Ascrod
57ca286478
Add preference for fully disabling HSTS.
2019-02-16 00:24:23 +08:00
adeshkp
813140d8c7
Remove a pointless switch after telemetry cleanup
2019-02-16 00:24:07 +08:00
adeshkp
aea50f182f
Telemetry: Remove stubs and related code
2019-02-16 00:24:04 +08:00
trav90
651f0bfce6
Update HSTS preload list
...
Tag #447
2019-02-16 00:23:51 +08:00
trav90
cad597caf0
Update HSTS preload list
...
Tag #447
2019-02-16 00:22:33 +08:00
wolfbeast
5f0986e66f
Update NSS to 3.41
2019-02-16 00:22:24 +08:00
trav90
fa5aa7b3d8
Update HSTS preload list
...
Tag #447
2019-02-16 00:20:30 +08:00
wolfbeast
d8ccdaa0d9
Remove AccumulateCipherSuite()
...
This resolves #858
2019-02-16 00:19:07 +08:00
wolfbeast
64a8472788
Remove ancient workaround in client certificate code
...
Apparently a prehistoric server implementation would send a certificate_authorities field
that didn't include the outer DER SEQUENCE tag, so PSM attempted to detect this and
work around it.
This prehistoric server implementation isn't in use anywhere anymore, so this 18-yo
server bug workaround can be removed.
2019-02-16 00:18:40 +08:00
wolfbeast
6c4b9ec3ce
Make sure nsNSSCertList handling checks for valid certs.
2019-02-16 00:18:31 +08:00
trav90
37fe93abff
Update HSTS preload list
...
Tag #447
2019-02-16 00:18:13 +08:00
trav90
2bce502df7
Update HSTS preload list
...
Tag #447
2019-02-16 00:15:49 +08:00
wolfbeast
55c45dc7f2
Ensure we got an nsISSLStatus when deserializing in TransportSecurityInfo.
2019-02-16 00:15:09 +08:00
