Commit Graph
143 Commits
Author SHA1 Message Date
Dana Keeler 6a359dba46 Bug 2031106 - Remove EV Treatment from SecureSign Root CA12 r=jschanck
Differential Revision: https://phabricator.services.mozilla.com/D299245
2026-05-11 20:54:37 +00:00
Dana Keeler 0a63dd23bc Bug 2027905 - April 2026 batch of EV removals r=bwilson
Differential Revision: https://phabricator.services.mozilla.com/D292912
2026-04-09 02:41:10 +00:00
Sylvestre Ledru 5db00ce70c Bug 2023419 - Remove Emacs/Vim modelines from security/ r=emilio
replaced by .editorconfig
# ignore-this-changeset

Differential Revision: https://phabricator.services.mozilla.com/D287866
2026-03-17 12:10:18 +00:00
Dennis Jackson 7282401cc6 Bug 1988916 - Enable EV Treatment for OISTE roots r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D267418
2025-10-06 12:58:33 +00:00
Dana Keeler b2ab3234c8 Bug 1972393 - EV-enable TrustAsia Dedicated TLS Roots r=nkulatova
Differential Revision: https://phabricator.services.mozilla.com/D263821
2025-09-08 16:10:45 +00:00
Dana Keeler 8bab779944 Bug 1957679 - remove EV treatment for 7 roots for April 2025 root changes r=nkulatova
Differential Revision: https://phabricator.services.mozilla.com/D244244
2025-04-08 16:03:14 +00:00
Anna 181b52e91c Bug 1938247 - Request to Enable EV Treatment for D-TRUST EV Root CA 2 2023 r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D237744
2025-02-12 09:49:03 +00:00
serge-sans-paille 262f78c07f Bug 1922838 - Replace ArrayLength, ArrayEnd and MOZ_ARRAY_LENGTH by standard alternative r=glandium,necko-reviewers,jgilbert,application-update-reviewers,media-playback-reviewers,credential-management-reviewers,anti-tracking-reviewers,places-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,bytesized,janv,dimi,daisuke,karlt,gstoll,canaltinova,timhuang
Namely std::size, std::end and std::size. This drops C support for
MOZ_ARRAY_LENGTH but it wasn't used anyway.

Differential Revision: https://phabricator.services.mozilla.com/D224611
2024-10-28 08:21:19 +00:00
Alexandru Marc a5eb905bf4 Backed out changeset d92f391b3b0c (bug 1922838) for backing out bug 1915351 2024-10-25 16:42:33 +03:00
serge-sans-paille 07101ac24d Bug 1922838 - Replace ArrayLength, ArrayEnd and MOZ_ARRAY_LENGTH by standard alternative r=glandium,necko-reviewers,jgilbert,application-update-reviewers,media-playback-reviewers,credential-management-reviewers,anti-tracking-reviewers,places-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,bytesized,janv,dimi,daisuke,karlt,gstoll,canaltinova,timhuang
Namely std::size, std::end and std::size. This drops C support for
MOZ_ARRAY_LENGTH but it wasn't used anyway.

Differential Revision: https://phabricator.services.mozilla.com/D224611
2024-10-24 09:06:01 +00:00
Alexandru Marc 004e704b22 Backed out changeset 448597bce69d (bug 1922838) for causing build bustages. CLOSED TREE 2024-10-24 11:37:49 +03:00
serge-sans-paille 2c916d4973 Bug 1922838 - Replace ArrayLength, ArrayEnd and MOZ_ARRAY_LENGTH by standard alternative r=glandium,necko-reviewers,jgilbert,application-update-reviewers,media-playback-reviewers,credential-management-reviewers,anti-tracking-reviewers,places-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,bytesized,janv,dimi,daisuke,karlt,gstoll,canaltinova,timhuang
Namely std::size, std::end and std::size. This drops C support for
MOZ_ARRAY_LENGTH but it wasn't used anyway.

Differential Revision: https://phabricator.services.mozilla.com/D224611
2024-10-24 07:38:30 +00:00
Dana Keeler 697c8e184f Bug 1915654 - Enable TWCA CYBER Root CA for EV use r=jschanck
Differential Revision: https://phabricator.services.mozilla.com/D221717
2024-09-10 20:04:48 +00:00
Dana Keeler df112fc60a Bug 1915651 - Enable Cybertrust Japan Root CA certificates for EV use r=jschanck
This enables SecureSign Root CA12, SecureSign Root CA14, and SecureSign Root
CA15 for EV treatment.

Differential Revision: https://phabricator.services.mozilla.com/D221716
2024-09-10 20:04:48 +00:00
John Schanck abc466ad9f Bug 1889675 - Enable EV Treatment for Firmaprofesional CA Root-A Web. r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D212473
2024-06-03 20:25:13 +00:00
John Schanck 444c63ced1 Bug 1878167 - Enable EV Treatment for two Telekom Security roots. r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D201771
2024-02-13 23:22:52 +00:00
Dana Keeler 192fb9e5af Bug 1850599 - EV treatment for two TrustAsia Global Root CAs r=jschanck
Differential Revision: https://phabricator.services.mozilla.com/D195011
2023-11-29 20:42:41 +00:00
Dana Keeler 3262821894 Bug 1853264 - Disable EV Treatment for older version of Autoridad de Certificacion Firmaprofesional CIF A62634068 root r=jschanck
Differential Revision: https://phabricator.services.mozilla.com/D188630
2023-09-19 21:25:23 +00:00
Dana Keeler f8ffc3906d Bug 1840432 - Enable EV Treatment for Sectigo E46 and R46 root certificates r=jschanck
Depends on D185703

Differential Revision: https://phabricator.services.mozilla.com/D185704
2023-08-09 21:22:16 +00:00
Dana Keeler 4b3f60ed97 Bug 1839996 - Enable EV Treatment for 2 SSL.com root certificates r=jschanck
Differential Revision: https://phabricator.services.mozilla.com/D185703
2023-08-09 21:22:16 +00:00
Dana Keeler 5c01a89395 Bug 1842926 - Disable EV Treatment for e-Tugra root certificates r=nkulatova
Depends on D183396

Differential Revision: https://phabricator.services.mozilla.com/D183397
2023-07-14 16:06:36 +00:00
Dana Keeler 334a81c29f Bug 1837528 - Disable EV Treatment for HiPKI Root CA - G1 r=nkulatova
Differential Revision: https://phabricator.services.mozilla.com/D183396
2023-07-14 16:06:36 +00:00
Dana Keeler 4c0b0667f0 Bug 1822924 - enable EV treatment for BJCA Global Root CA1 and CA2 root certificates r=jschanck
Differential Revision: https://phabricator.services.mozilla.com/D177655
2023-05-10 17:54:17 +00:00
Dana Keeler 1f2954655f Bug 1822934 - remove EV treatment for expired E-Tugra Certification Authority root r=jschanck
Differential Revision: https://phabricator.services.mozilla.com/D177646
2023-05-10 17:17:13 +00:00
serge-sans-paille a5bc7d11e9 Bug 1820573 - Make security/ buildable outside of a unified build environment r=andi,keeler
Differential Revision: https://phabricator.services.mozilla.com/D171732
2023-03-15 07:30:36 +00:00
John M. Schanck 2a7be9d367 Bug 1803704 - Disable EV Treatment for "Network Solutions Certificate Authority". r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D163735
2022-12-02 18:41:39 +00:00
Dana Keeler 2a769616ce Bug 1799040 - disable EV treatment for "Staat der Nederlanden EV Root CA" r=jschanck
Differential Revision: https://phabricator.services.mozilla.com/D161527
2022-11-07 21:48:56 +00:00
Dana Keeler 4468f07d1c Bug 1770269 - Enable EV Treatment for E-Tugra v3 Global root certificates r=rmf
Differential Revision: https://phabricator.services.mozilla.com/D151749
2022-07-19 22:16:34 +00:00
Dana Keeler af3ac2ba28 Bug 1764397 - Enable EV Treatment for Digicert G5 root certificates r=rmf
Differential Revision: https://phabricator.services.mozilla.com/D151748
2022-07-19 22:16:33 +00:00
Dana Keeler 0cd5a69a4c Bug 1769150 - try all known EV policy OIDs found in a certificate when verifying for EV r=jschanck
Before this patch, the certificate verifier would only attempt to build a
trusted path to a root with the first recognized EV OID in the end-entity
certificate. Thus, if an end-entity certificate had more than one EV OID, it
could fail to verify as EV if an intermediate or root had the "wrong" EV OID.
This patch addresses this shortcoming by trying to build a path with each
recognized EV OID in the end-entity certificate until it finds one that works.

Differential Revision: https://phabricator.services.mozilla.com/D149319
2022-06-15 18:20:13 +00:00
John Schanck 3a8de124df Bug 1754896 - Enable EV Treatment for D-TRUST EV Root CA 1 2020. r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D142141
2022-03-25 21:26:17 +00:00
John Schanck f46283092e Bug 1745519 - Enable EV Treatment for NetLock Arany (Class Gold) Főtanúsítvány root certificate. r=keeler
Depends on D133688

Differential Revision: https://phabricator.services.mozilla.com/D133689
2021-12-22 00:04:04 +00:00
John Schanck b6affc23ed Bug 1741932 - Enable EV Treatment for the renewed Autoridad de Certificacion Firmaprofesional CIF A62634068 root cert. r=keeler
Depends on D133687

Differential Revision: https://phabricator.services.mozilla.com/D133688
2021-12-22 00:04:03 +00:00
John Schanck a3146b3dd8 Bug 1740099 - Enable EV Treatment for iTrusChina vTrus Root CA and vTrus ECC Root CA. r=keeler
Depends on D133686

Differential Revision: https://phabricator.services.mozilla.com/D133687
2021-12-22 00:04:03 +00:00
John Schanck 065a286d29 Bug 1733014 - Enable EV Treatment for Chunghwa Telecom HiPKI Root CA G1 root certificate. r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D133686
2021-12-22 00:04:02 +00:00
John Schanck 4ae80b41e7 Bug 1738809 - Remove EV Treatment for Expiring Cybertrust Global Root. r=rmf
Differential Revision: https://phabricator.services.mozilla.com/D130207
2021-11-09 09:26:17 +00:00
John M. Schanck a23bc9b824 Bug 1717711 - Enable EV Treatment for HARICA's 2015 and 2021 root certificates r=rmf,keeler
Differential Revision: https://phabricator.services.mozilla.com/D127167
2021-10-07 16:22:49 +00:00
R. Martinho Fernandes bb48a3f85c Bug 1703944 - Enable EV Treatment for ANF Secure Server Root CA r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D116754
2021-06-07 21:37:24 +00:00
R. Martinho Fernandes 695a6ed9e3 Bug 1707099 - Enable EV Treatment for Certum root certs ownd by Asseco r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D116752
2021-06-07 21:37:23 +00:00
R. Martinho Fernandes 433dec18ba Bug 1697074 - Enable EV Treatment for e-commerce monitoring's GLOBALTRUST 2020 root certificate r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D116750
2021-06-07 21:37:23 +00:00
R. Martinho Fernandes 73029b92a2 Bug 1694649 - Rewrite GetFirstEVPolicy with pkix r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D106489
2021-04-16 22:32:35 +00:00
Moritz Birghan b3db84844f Bug 1683761 - Enable EV Treatment for AC RAIZ FNMT-RCM SERVIDORES SEGUROS root certificate. r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D104701
2021-03-08 15:01:09 +00:00
Benjamin Beurdouche 5caead565a Bug 1693175 - Enable EV Treatment for GlobalSign E46 and R46 root certificates. r=mbirghan,keeler
Differential Revision: https://phabricator.services.mozilla.com/D106087
2021-03-08 07:43:56 +00:00
Benjamin Beurdouche 90a88cc304 Bug 1692101 - Disable EV Treatment for Camerfirma's Chambers of Commerce Root - 2008 root certificate. r=mbirghan
Differential Revision: https://phabricator.services.mozilla.com/D106085
2021-02-23 15:12:58 +00:00
Bogdan Tara 42fa37006a Backed out changeset 1d69ffd05b99 (bug 1683761) for failing assertion at ExtendedValidation CLOSED TREE
DONTBUILD
2021-02-23 11:43:03 +02:00
Moritz Birghan 9e543fe8a9 Bug 1683761 - Enable EV Treatment for AC RAIZ FNMT-RCM SERVIDORES SEGUROS root certificate. r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D104701
2021-02-23 09:09:56 +00:00
Bogdan Tara 14842edc45 Backed out changeset 3c7ae91a5486 (bug 1683761) for assertion failure at ExtendedValidation.cpp CLOSED TREE 2021-02-11 03:24:23 +02:00
Moritz Birghan 7432b84048 Bug 1683761 - Enable EV Treatment for AC RAIZ FNMT-RCM SERVIDORES SEGUROS root certificate. r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D104701
2021-02-10 23:56:27 +00:00
Moritz Birghan 1a4ac0adfc Bug 1663052 - Enable EV Treatment for SecureTrust's Trustwave Global root certificates r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D96437
2020-11-09 22:20:36 +00:00
Moritz Birghan 042a8a18da Bug 1658596 - Enable EV Treatment for "IdenTrust Commercial Root CA 1" root certificate r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D96435
2020-11-09 22:32:27 +00:00