Commit Graph

16888 Commits

Author SHA1 Message Date
Toshihito Kikuchi
99ea21dafe Bug 1744362 - Part 5: Access the shared section through DllServices r=handyman
Differential Revision: https://phabricator.services.mozilla.com/D164487
2022-12-27 12:59:08 +00:00
ffxbld
b07bb5c8bf No Bug, mozilla-central repo-update HSTS HPKP remote-settings - r=diannaS
Differential Revision: https://phabricator.services.mozilla.com/D165520
2022-12-26 15:37:07 +00:00
Marco Castelluccio
f69e697461 Bug 1801836 - Remove no longer necessary 'from __future__' imports. r=linter-reviewers,glandium,webdriver-reviewers,perftest-reviewers,geckoview-reviewers,jld,ahal,owlish,afinder DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D165395
2022-12-23 22:45:46 +00:00
ffxbld
07f8e9babd No Bug, mozilla-central repo-update HSTS HPKP remote-settings - r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D165389
2022-12-22 14:54:32 +00:00
ffxbld
8dd5f19d92 No Bug, mozilla-central repo-update HSTS HPKP remote-settings - r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D165231
2022-12-21 04:03:00 +00:00
Emilio Cobos Álvarez
2b72ef3e89 Bug 1801607 - Improve certManager layout. r=mconley,settings-reviewers
Allow the tabbox/tabpanels to shrink, and remove an useless <vbox>.

Differential Revision: https://phabricator.services.mozilla.com/D163660
2022-12-20 09:19:09 +00:00
ffxbld
b3afaa09ad No Bug, mozilla-central repo-update HSTS HPKP remote-settings - r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D165011
2022-12-19 14:48:41 +00:00
Dennis Jackson
93d4366b2d Bug 1805486 - land NSS NSS_3_87_BETA1 UPGRADE_NSS_RELEASE, r=nss-reviewers,jschanck
Differential Revision: https://phabricator.services.mozilla.com/D164919
2022-12-16 18:33:28 +00:00
Barret Rennie
e6d1635f6e Bug 1772924 - Remove osfile.jsm usage in /security/sandbox/ r=haik
Differential Revision: https://phabricator.services.mozilla.com/D163404
2022-12-16 00:29:46 +00:00
ffxbld
1071f00713 No Bug, mozilla-central repo-update HSTS HPKP remote-settings - r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D164800
2022-12-15 14:04:48 +00:00
Csoregi Natalia
a94c9b3808 Backed out changeset 9a6e4fbe0be0 (bug 1772924) for failures on browser_content_sandbox_fs_xdg.js. CLOSED TREE 2022-12-15 05:29:28 +02:00
Barret Rennie
2b616f5008 Bug 1772924 - Remove osfile.jsm usage in /security/sandbox/ r=haik
Differential Revision: https://phabricator.services.mozilla.com/D163404
2022-12-15 02:47:48 +00:00
Dana Keeler
d6331d843b Bug 177175 - cancel subsequent PKCS#11 password prompts if more than one happens concurrently r=jschanck
Unfortunately, since NSS can prompt for PKCS#11 authentication on the main
thread, the prompt in question results in a nested event loop, which means that
the prompt code can be re-entered and another prompt can appear before the
first is dealt with. As long as NSS can run on the main thread, this will
continue to be the case. Recently we've done a lot of work to prevent NSS
running on the main thread, but that work is by no means complete. In the
meantime, we can paper over this situation by cancelling any prompts that come
after one that is still in progress. This will cause some NSS operations to
fail in a way that should be recoverable by simply retrying them (e.g. the user
can refresh the page or close and re-open it).

Differential Revision: https://phabricator.services.mozilla.com/D164280
2022-12-13 20:43:37 +00:00
Dana Keeler
b76b1c4d68 Bug 177175 - re-implement PKCS#11 protected auth UI with modern components r=jschanck,fluent-reviewers,flod
The previous implementation used some heavyweight, outdated, and unnecessary
components to achieve its effect. This patch greatly simplifies the
implementation.

Differential Revision: https://phabricator.services.mozilla.com/D164279
2022-12-13 20:43:36 +00:00
Dana Keeler
cc88d42fef Bug 1804793 - add missing data-l10n-args for tokenName in changepassword.xhtml r=Gijs
Differential Revision: https://phabricator.services.mozilla.com/D164278
2022-12-13 19:59:53 +00:00
Dana Keeler
28f5b1d868 Bug 1805282 - update static pinning information url r=jschanck
Chrome has updated where it stores its static pinning information.

Differential Revision: https://phabricator.services.mozilla.com/D164498
2022-12-13 19:53:19 +00:00
Sylvestre Ledru
04363d3827 Bug 1802689 - Add missing licenses info in Cargo.toml r=mhoye,necko-reviewers,kershaw,valentin
Differential Revision: https://phabricator.services.mozilla.com/D163157
2022-12-13 09:14:44 +00:00
Mike Hommey
5fd296e7b8 Bug 1804595 - Update osclientcerts to libloading 0.7. r=keeler,supply-chain-reviewers
Differential Revision: https://phabricator.services.mozilla.com/D164177
2022-12-13 00:37:50 +00:00
Mark Banner
53ce0faad1 Bug 1804661 - Convert browser/components/BrowserGlue.jsm to an ES module. r=Gijs,settings-reviewers,perftest-reviewers,sparky
Differential Revision: https://phabricator.services.mozilla.com/D164204
2022-12-12 14:59:18 +00:00
ffxbld
fbbfc74875 No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D164446
2022-12-12 13:48:29 +00:00
John Schanck
7f3ed4068d Bug 1802996 - land NSS NSS_3_86_RTM UPGRADE_NSS_RELEASE, r=bbeurdouche
Differential Revision: https://phabricator.services.mozilla.com/D164263
2022-12-08 20:51:52 +00:00
ffxbld
255408cc51 No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D164198
2022-12-08 14:23:48 +00:00
Dana Keeler
88838b311a Bug 1801016: remove expiring telemetry "security.psm_ui_interaction" r=djackson
Differential Revision: https://phabricator.services.mozilla.com/D163972
2022-12-07 17:30:21 +00:00
Natalia Kulatova
9e6457328f Bug 1802319 - Modification of the bug "Consider removing ECDSA_SHA1 signature algorithm". r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D162999
2022-12-07 11:34:55 +00:00
Mark Banner
ff47c36f9b Bug 1803914 - Automatically replace Cu.reportError with console.error (misc). r=mossop
Differential Revision: https://phabricator.services.mozilla.com/D163772
2022-12-06 14:34:57 +00:00
Valentin Gosu
c5dcc9435f Bug 1797279 - Add nsINSSComponent.asyncClearSSLExternalAndInternalSessionCache that waits for socket process to clear the cache r=keeler,necko-reviewers,kershaw
This is a test only method, and the fact that the operation is not sync
with socket process can possibly cause racy tests.
This patch adds an async version of clearSSLExternalAndInternalSessionCache
that returns a promise.

Differential Revision: https://phabricator.services.mozilla.com/D162153
2022-12-06 10:36:10 +00:00
Jed Davis
21e1f65696 Bug 1784517 - Explicitly skip sandboxing tests on unsandboxed build types. r=jmaher
There are tools which consume `moz.build` files by reading every one in
the tree, rather than traversing `DIRS` for a specific build type (see
bug 1667271 comment #89 for background); as a result, we can end up with
CI test jobs that try to run sandboxing tests on build types like Linux
ASan where `security/sandbox` isn't built, and fail.

This patch applies a suggested workaround: add an otherwise redundant
`skip-if` declaration to the test manifests to skip them on the platforms
where they're not part of the build.

Note that sandboxing is disabled in the presence of Linux ASan or TSan
by logic in `toolkit/moz.configure`, but for code coverage builds it's
done via the CI mozconfig files adding `--disable-sandbox`.

Differential Revision: https://phabricator.services.mozilla.com/D163411
2022-12-05 21:23:32 +00:00
ffxbld
3026e10680 No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D163821
2022-12-05 14:05:21 +00:00
John Schanck
282382a80f Bug 1802996 - land NSS NSS_3_86_BETA1 UPGRADE_NSS_RELEASE, r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D163641
2022-12-03 21:47:31 +00:00
John M. Schanck
06c7606fd3 Bug 1803704 - Disable EV Treatment for "Network Solutions Certificate Authority". r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D163735
2022-12-02 18:41:39 +00:00
Cristian Tuns
5eaed27bd7 Backed out changeset 4534fc16cb5c (bug 1802996) for causing multiple failures UPGRADE_NSS_RELEASE CLOSED TREE 2022-12-01 18:47:20 -05:00
John Schanck
399c57a914 Bug 1802996 - land NSS NSS_3_86_BETA1 UPGRADE_NSS_RELEASE, r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D163641
2022-12-01 21:41:21 +00:00
Yannis Juglaret
8b95e44d5b Bug 1800933 - Let ACG in RDD and WMF ride the trains. r=bobowen
Differential Revision: https://phabricator.services.mozilla.com/D163585
2022-12-01 14:11:15 +00:00
ffxbld
7f88fb67c4 No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D163574
2022-12-01 13:09:16 +00:00
Mike Hommey
94c0c63594 Bug 1801029 - Upgrade bindgen to 0.63.0. r=emilio,necko-reviewers,supply-chain-reviewers,kershaw
Differential Revision: https://phabricator.services.mozilla.com/D163375
2022-11-30 22:06:50 +00:00
Marian-Vasile Laza
9414231a2f Backed out 3 changesets (bug 1797279, bug 1800758) for causing xpcshell failures on test_httpssvc_retry_with_ech.js. CLOSED TREE
Backed out changeset 8de777d3d624 (bug 1797279)
Backed out changeset daf5d55079db (bug 1797279)
Backed out changeset 40c7d48e81f6 (bug 1800758)
2022-11-30 21:08:34 +02:00
Valentin Gosu
bee1b0905e Bug 1797279 - Add nsINSSComponent.asyncClearSSLExternalAndInternalSessionCache that waits for socket process to clear the cache r=keeler,necko-reviewers,kershaw
This is a test only method, and the fact that the operation is not sync
with socket process can possibly cause racy tests.
This patch adds an async version of clearSSLExternalAndInternalSessionCache
that returns a promise.

Differential Revision: https://phabricator.services.mozilla.com/D162153
2022-11-30 13:37:11 +00:00
Alexandre Lissy
225f9f94b2 Bug 1802513 - Allow readlink(/proc/self/exe) in Utility sandbox for FFVPX r=gcp
Differential Revision: https://phabricator.services.mozilla.com/D163227
2022-11-30 10:10:22 +00:00
Dana Keeler
e3836395ba Bug 1795831 - fix checkHandshake in PSM to correctly handle zero-length reads r=jschanck,necko-reviewers
This also restructures checkHandshake to be more clear and understandable, to
simplify maintenance going forward.

Differential Revision: https://phabricator.services.mozilla.com/D162799
2022-11-29 22:12:46 +00:00
Butkovits Atila
5258bae36b Backed out changeset 99ed42b2349b (bug 1795831) for causing build bustages at nsNSSIOLayer.cpp. CLOSED TREE 2022-11-29 04:05:41 +02:00
Dana Keeler
ce55b5d5de Bug 1795831 - fix checkHandshake in PSM to correctly handle zero-length reads r=jschanck,necko-reviewers
This also restructures checkHandshake to be more clear and understandable, to
simplify maintenance going forward.

Differential Revision: https://phabricator.services.mozilla.com/D162799
2022-11-28 21:50:50 +00:00
ffxbld
501d9124e3 No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=diannaS
Differential Revision: https://phabricator.services.mozilla.com/D163210
2022-11-28 13:42:23 +00:00
Barret Rennie
59bf1539b1 Bug 1541508 - Use Services.env in security/ r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D160145
2022-11-25 19:09:10 +00:00
Marco Castelluccio
5c8c82f4e5 Bug 1790816 - Reformat security/ with isort. r=linter-reviewers,ahal DONTBUILD
# ignore-this-changeset

Differential Revision: https://phabricator.services.mozilla.com/D162666
2022-11-24 17:22:21 +00:00
ffxbld
ad2bde721e No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=dmeehan
Differential Revision: https://phabricator.services.mozilla.com/D162979
2022-11-24 14:36:58 +00:00
ffxbld
70b662d1ff No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D162552
2022-11-21 14:06:35 +00:00
Chris H-C
fc358ad992 Bug 1799442 - Update Glean to v51.8.2, rkv to 0.18 r=janerik,supply-chain-reviewers
Differential Revision: https://phabricator.services.mozilla.com/D162345
2022-11-18 13:56:27 +00:00
Jan Andre Ikenmeyer
9ac9619c3c Bug 1600437 - Disable CBC-mode ECDSA ciphers and stop advertising ECDSA+SHA1 signature algorithm. r=nkulatova
Differential Revision: https://phabricator.services.mozilla.com/D65197
2022-11-18 13:13:52 +00:00
Marian-Vasile Laza
023eed4276 Backed out changeset 75acc8e81d81 (bug 1799442) for causing WR tidy bustage. CLOSED TREE 2022-11-18 14:23:58 +02:00
Chris H-C
7655a12f65 Bug 1799442 - Update Glean to v51.8.2, rkv to 0.18 r=janerik,supply-chain-reviewers
Differential Revision: https://phabricator.services.mozilla.com/D162345
2022-11-18 10:15:40 +00:00