Commit Graph

12965 Commits

Author SHA1 Message Date
Margareta Eliza Balazs
757c55dc4f Merge mozilla-central to autoland. a=merge CLOSED TREE 2018-01-16 23:49:24 +02:00
ffxbld
312b6a44e5 No bug, Automated HPKP preload list update from host bld-linux64-spot-309 - a=hpkp-update 2018-01-16 12:59:54 -08:00
ffxbld
e4a2ac5bbe No bug, Automated HSTS preload list update from host bld-linux64-spot-309 - a=hsts-update 2018-01-16 12:59:50 -08:00
David Keeler
89f94440e6 bug 1263765 - remove nsIBadCertListener2 implementation from the add certificate exception dialog r=jcj
This reworks the certificate-fetching portion of the add certificate exception
dialog so as to not require a nsIBadCertListener2 implementation, which is
deprecated. The solution is simple: use the onerror/onload callbacks on the
XMLHttpRequest object to grab the appropriate information.

MozReview-Commit-ID: IjNrNfYA28P

--HG--
extra : rebase_source : 4a09b2eaf81d675444553156a0e098be54703115
2018-01-11 15:25:05 -08:00
ffxbld
54161e9fb9 No bug, Automated HPKP preload list update from host bld-linux64-spot-306 - a=hpkp-update 2018-01-15 10:59:32 -08:00
ffxbld
52c9e21d6b No bug, Automated HSTS preload list update from host bld-linux64-spot-306 - a=hsts-update 2018-01-15 10:59:29 -08:00
ffxbld
4579f798bf No bug, Automated HPKP preload list update from host bld-linux64-spot-302 - a=hpkp-update 2018-01-14 11:03:43 -08:00
ffxbld
6f34584a20 No bug, Automated HSTS preload list update from host bld-linux64-spot-302 - a=hsts-update 2018-01-14 11:03:40 -08:00
Chris Peterson
37efe4d0e6 Bug 1428535 - Add missing override specifiers to overridden virtual functions. r=froydnj
MozReview-Commit-ID: DCPTnyBooIe

--HG--
extra : rebase_source : cfec2d96faeb11656d86d760a34e0a04cacddb13
extra : intermediate-source : 6176724d63788b0fe8caa3f91607c2d93dbaa7ec
extra : source : eebbb0600447f9b64aae3bcd47b4be66c02a51ea
2017-11-05 19:37:28 -08:00
Andreea Pavel
e32752514d Merge mozilla-inbound to mozilla-central. a=merge 2018-01-13 23:49:24 +02:00
ffxbld
9781fa968b No bug, Automated HPKP preload list update from host bld-linux64-spot-302 - a=hpkp-update 2018-01-13 11:04:33 -08:00
ffxbld
e2ae589f60 No bug, Automated HSTS preload list update from host bld-linux64-spot-302 - a=hsts-update 2018-01-13 11:04:29 -08:00
EKR
ede3b33617 Bug 1430268 - Unconditionally enable compat mode. r=keeler
Summary: Needed for real TLS 1.3 deployment

Reviewers: mt

Differential Revision: https://phabricator.services.mozilla.com/D342
2018-01-13 10:18:53 -08:00
Csoregi Natalia
7476b71e00 Merge inbound to mozilla-central r=merge a=merge 2018-01-12 23:59:06 +02:00
ffxbld
bcf400ed70 No bug, Automated HPKP preload list update from host bld-linux64-spot-324 - a=hpkp-update 2018-01-12 10:58:23 -08:00
ffxbld
600c92d089 No bug, Automated HSTS preload list update from host bld-linux64-spot-324 - a=hsts-update 2018-01-12 10:58:19 -08:00
ffxbld
508c6b8852 No bug, Automated HPKP preload list update from host bld-linux64-spot-326 - a=hpkp-update 2018-01-11 11:24:52 -08:00
ffxbld
74d31a9bf9 No bug, Automated HSTS preload list update from host bld-linux64-spot-326 - a=hsts-update 2018-01-11 11:24:48 -08:00
Ciure Andrei
f7400ad72e Merge inbound to mozilla-central r=merge a=merge 2018-01-11 11:54:56 +02:00
Kate McKinley
e97980a95e Bug 1424917 - Remove support for HSTS Priming. r=mayhemer, r=ckerschb
This patch removes support and tests for HSTS priming from the tree.
2018-01-10 11:07:00 -05:00
arthur.iakab
5e902ff6cd Backed out changeset 28f876e75d47 (bug 1417680)for failing GTest
--HG--
extra : rebase_source : 2890c797a7cf05d6e82d84e64fd4cd5ed6ec5eb9
2018-01-11 02:56:49 +02:00
Masatoshi Kimura
8c8754b21f Bug 1428538 - Use UTF-8 file paths for NSS database. r=keeler 2017-12-28 20:56:33 +09:00
Kai Engert
e1c5635b55 Bug 1420060, restrict export of symbols to Windows, suggested by Masatoshi Kimura, r=kaie 2018-01-11 15:04:17 +01:00
Kai Engert
46f290697e Bug 1420060, export new NSS APIs in Firefox' specific API export list, r=franziskus 2018-01-11 14:42:09 +01:00
Kai Engert
14be89415f Bug 1420060, NSS_3_35_BETA1, r=franziskus
UPGRADE_NSS_RELEASE
2018-01-11 14:09:34 +01:00
Dorel Luca
ccebfc1873 Merge mozilla-central to autoland r=merge 2018-01-11 00:03:38 +02:00
ffxbld
59fa32fd74 No bug, Automated HPKP preload list update from host bld-linux64-spot-302 - a=hpkp-update 2018-01-10 11:13:16 -08:00
ffxbld
69f2798cbe No bug, Automated HSTS preload list update from host bld-linux64-spot-302 - a=hsts-update 2018-01-10 11:13:12 -08:00
Haik Aftandilian
68c0e33233 Bug 1429133 - Some FontExplorer managed fonts are not rendered. r=Alex_Gaynor
MozReview-Commit-ID: L5x3GNb3HGU

--HG--
extra : rebase_source : fd123e19142e98f4712db19d240b5c636aeb3ecf
2018-01-10 11:33:47 -08:00
Narcis Beleuzu
fb578c1b74 Merge mozilla-central to inbound. r=merge a=merge on a CLOSED TREE 2018-01-10 02:02:13 +02:00
ffxbld
3c8c1653f7 No bug, Automated HPKP preload list update from host bld-linux64-spot-302 - a=hpkp-update 2018-01-09 11:06:09 -08:00
ffxbld
782a0a23af No bug, Automated HSTS preload list update from host bld-linux64-spot-302 - a=hsts-update 2018-01-09 11:06:06 -08:00
Franziskus Kiefer
a881c4a167 Bug 1403844 - Verify COSE signature on add-ons, r=keeler
Summary:
MozReview-Commit-ID: 6YorBs4mY8B

Check for COSE signatures in add-ons.

Reviewers: keeler

Bug #: 1403844

Differential Revision: https://phabricator.services.mozilla.com/D298

--HG--
rename : security/manager/ssl/tests/unit/test_signed_apps/cose_multiple_signed.zip => security/manager/ssl/tests/unit/test_signed_apps/cose_multiple_signed_with_pkcs7.zip
rename : security/manager/ssl/tests/unit/test_signed_apps/cose_signed.zip => security/manager/ssl/tests/unit/test_signed_apps/cose_signed_with_pkcs7.zip
rename : third_party/rust/cose/src/cbor/mod.rs => third_party/rust/moz_cbor/src/lib.rs
extra : rebase_source : 0494590eb222e2c936e353e4dd6cf9fac8d822f3
2018-01-08 11:46:51 +01:00
J.C. Jones
3ba27ce458 Bug 1428918 - Enable Web Authentication in Nightly r=keeler,smaug
In advance of enabling Web Authentication in Firefox 60 [1], let's turn it on
for Nightly users.

[1] https://groups.google.com/forum/#!msg/mozilla.dev.platform/tsevyqfBHLE/lccldWNNBwAJ

MozReview-Commit-ID: ALyjBwojKtA

--HG--
extra : rebase_source : c51aef6bf12e1e26faa3d86269132eef7057c889
2018-01-08 18:37:35 -07:00
Csoregi Natalia
d07dee65a2 Backed out 6 changesets (bug 1386404) for failing /webdriver/test/ tests on Linux. r=backout on a CLOSED TREE
Backed out changeset be1441859e8b (bug 1386404)
Backed out changeset 8dca7ef74c4a (bug 1386404)
Backed out changeset b7ca6ae185f2 (bug 1386404)
Backed out changeset 2c007d385ce4 (bug 1386404)
Backed out changeset fbe717b9a664 (bug 1386404)
Backed out changeset 14f1fbe5263a (bug 1386404)
2018-01-10 14:08:51 +02:00
Csoregi Natalia
bbfcdcd760 Merge mozilla-central to autoland. r=merge a=merge CLOSED TREE
--HG--
rename : security/manager/ssl/tests/unit/test_signed_apps/cose_multiple_signed.zip => security/manager/ssl/tests/unit/test_signed_apps/cose_multiple_signed_with_pkcs7.zip
rename : security/manager/ssl/tests/unit/test_signed_apps/cose_signed.zip => security/manager/ssl/tests/unit/test_signed_apps/cose_signed_with_pkcs7.zip
rename : third_party/rust/cose/src/cbor/mod.rs => third_party/rust/moz_cbor/src/lib.rs
extra : rebase_source : 5f16e3d25e86d41e201b8c28ead361fd6ac25c42
2018-01-10 12:07:47 +02:00
David Keeler
0c092c0ffe bug 1428498 - don't require importing the server certificate for overrides to succeed r=jcj
Previously, adding a permanent certificate error override would depend on
successfully importing the server's certificate into the user's certificate
database. Consequently, if the user's database were in read-only mode (or if the
database couldn't be created due to code page issues on Windows), this would
prevent adding new certificate error overrides. It turns out this isn't even
necessary, because the implementation relies on the stored hash of the
certificate rather than the certificate itself. The stored certificate is only
for display purposes (and there's a fallback if the certificate can't be
stored).

There are remaining issues with non-ASCII characters in 8.3 paths on Windows
when the code page isn't western, but this is a larger issue that must be
addressed in other layers (i.e. NSS/NSPR).

MozReview-Commit-ID: KEzjxtAoeb4

--HG--
rename : security/manager/ssl/tests/unit/test_cert_overrides.js => security/manager/ssl/tests/unit/test_cert_overrides_read_only.js
extra : rebase_source : b41e863d8c85d80335dd56c8f5765b19b1de4e0c
2018-01-04 11:31:22 -08:00
Gian-Carlo Pascutto
61cf15cc85 Bug 1297740. r=jld 2018-01-08 10:07:16 +01:00
ffxbld
4f97a97069 No bug, Automated HPKP preload list update from host bld-linux64-spot-302 - a=hpkp-update 2018-01-07 11:04:07 -08:00
ffxbld
80e05c0b9a No bug, Automated HSTS preload list update from host bld-linux64-spot-302 - a=hsts-update 2018-01-07 11:04:03 -08:00
ffxbld
9a6945c623 No bug, Automated HPKP preload list update from host bld-linux64-spot-302 - a=hpkp-update 2018-01-06 11:09:40 -08:00
ffxbld
892f4bd3a1 No bug, Automated HSTS preload list update from host bld-linux64-spot-302 - a=hsts-update 2018-01-06 11:09:36 -08:00
ffxbld
0f63741b8e No bug, Automated HPKP preload list update from host bld-linux64-spot-037 - a=hpkp-update 2018-01-05 12:22:25 -08:00
ffxbld
0046f0f438 No bug, Automated HSTS preload list update from host bld-linux64-spot-037 - a=hsts-update 2018-01-05 12:22:21 -08:00
ffxbld
a2f5eacf1f No bug, Automated HPKP preload list update from host bld-linux64-spot-034 - a=hpkp-update 2018-01-04 14:13:48 -08:00
ffxbld
df3bec329c No bug, Automated HSTS preload list update from host bld-linux64-spot-034 - a=hsts-update 2018-01-04 14:13:44 -08:00
ffxbld
ac67a1c73c No bug, Automated HPKP preload list update from host bld-linux64-spot-036 - a=hpkp-update 2018-01-03 14:38:40 -08:00
ffxbld
f4ac363948 No bug, Automated HSTS preload list update from host bld-linux64-spot-036 - a=hsts-update 2018-01-03 14:38:36 -08:00
Haik Aftandilian
f6cdb35b8f Bug 1421262 - [Mac] Add access to hw.cachelinesize sysctl, /Library/GPUBundles to content sandbox rules. r=Alex_Gaynor
MozReview-Commit-ID: LBWA8XD64h

--HG--
extra : rebase_source : dac2ea615fdcbbd4d029bbbb28e3d935a4416deb
2017-12-21 14:15:29 -08:00
Mark Banner
770685e15e Bug 1425688 - Enable ESLint rule mozilla/use-services for security/. r=gcp,keeler
MozReview-Commit-ID: 4Kd9L8ExNGl

--HG--
extra : rebase_source : 02a5242629c7b597d7fd4e5e1373781fcbb82905
2017-12-16 13:10:40 -06:00