Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-11-07 20:17:37 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
388,183 Commits 615 Branches 98 Tags 5.9 GiB
3268a57801
Commit Graph

228 Commits

Author SHA1 Message Date
Cykesiopka
0289b45f0c Bug 360126 - Stop accepting certs that use RSA1023 or weaker; Original patch by Richard van den Berg. r=briansmith 2014-07-15 19:49:00 -04:00
Brian Smith
8483b958ad Bug 1038837: Factor out mozilla::pkix::Input into a separate header, r=mmc 
--HG--
rename : security/pkix/lib/pkixder.h => security/pkix/include/pkix/Input.h
rename : security/pkix/lib/pkixutil.h => security/pkix/include/pkix/Result.h
extra : rebase_source : 09bac0a183932f721cdfd32936595867e4dc26ce
 2014-07-13 13:17:36 -07:00
Brian Smith
96c220acca Bug 1038828: Replace mozilla::pkix::der::Result with uses of mozilla::pkix::Result, r=mmc 
--HG--
rename : security/pkix/lib/pkixutil.h => security/pkix/include/pkix/Result.h
extra : rebase_source : e385af4bab665627aa5d434db04830065cbc641f
 2014-07-15 10:33:49 -07:00
Brian Smith
1c90cc26f0 Bug 916629, Part 4: Unit tests for trust of delegated OCSP responder certificates for mozilla::pkix, r=keeler 
--HG--
extra : rebase_source : c473285add9faee9a876677404935bdc253832cb
 2014-07-10 21:20:17 -07:00
Brian Smith
a60ce49776 Bug 916629, Part 3: Unit tests for OCSP responses signed by a delegated OCSP responder for mozilla::pkix, r=keeler 
--HG--
extra : rebase_source : c2c78458aa674dcc1e1426a0efc81df19b73ac4f
 2014-07-10 22:14:57 -07:00
Brian Smith
4df6195ea8 Bug 916629, Part 2: Unit tests for "successful" OCSP responses for mozilla::pkix, r=keeler 
--HG--
extra : rebase_source : 14633119755cbfd55fc3bfef9cf482de3d638b53
 2014-07-15 10:09:26 -07:00
Brian Smith
d1fd17671c Bug 916629, Part 1: Unit tests for OCSP responses without responseBytes, r=keeler 
--HG--
extra : rebase_source : 62ef4209745ff8f2c5a852beb1a9823cbe7c7ff4
 2014-07-14 23:09:36 -07:00
Brian Smith
17375cc8b3 Bug 1036105: Delegate digest operations to the TrustDomain in mozilla::pkix, r=keeler 
--HG--
extra : rebase_source : dd8dc1243ea2e37955a15f2481e1c452311e90d8
extra : histedit_source : adc1a2035d41c608d3f0ebe14bba159b2857502d
 2014-07-06 19:36:05 -07:00
Brian Smith
beb502cd9f Bug 1036107, Part 2: Test algorithm identifier parsing, r=keeler 
--HG--
extra : rebase_source : c800d42856d81ba8cceaadde0caa98477b3008f4
extra : histedit_source : 71305fa34b435450525ae3a3e603aef065eaec14
 2014-07-10 18:30:58 -07:00
Brian Smith
c162caba82 Bug 1036107, Part 1: Stop using CERTSignedData in mozilla::pkix, r=keeler 
--HG--
extra : rebase_source : 94c49062ae3ddf755651f151e2d648543b10e1ad
extra : histedit_source : a7377bf1d9adb62e1c584e2adeb793aa074245fb
 2014-07-10 19:00:32 -07:00
Brian Smith
b14f27897b Bug 1037324: Delegate additional name constraint selection to the TrustDomain in mozilla::pkix, r=cviecco 
--HG--
extra : rebase_source : 300f33bfb3a0c9ae1525695b080674c1fb21eafc
 2014-07-10 22:38:59 -07:00
Brian Smith
94e53dc0be Bug 1035942: Decide whether to consider end-entity CN as a dnsName in CheckNameConstraints instead of in BuildCertChain, r=cviecco 
--HG--
extra : rebase_source : 19c5949253e4e631b0bd841f17f000885001b327
extra : histedit_source : dce57eb862a2a13d07d11fdf6917afcf6cb4136c
 2014-07-08 13:04:17 -07:00
Brian Smith
3f110246be Bug 1035009: Stop using CERTCertList in mozilla::pkix, r=keeler 
--HG--
extra : rebase_source : fc2b39e5e2b44fea365914e83a7d1f2dc9b784bc
extra : histedit_source : b40e5e8cb106fe87f6f065b01ca43adb0bf3a605
 2014-07-06 15:55:38 -07:00
Camilo Viecco
867a197ca1 Bug 1030204 - 1/2 Name constraint ANSSI(DCISS) Root cert in mozilla::pkix. r=keeler 
--HG--
extra : rebase_source : 221ca75af601649731bf83cace2e6b0edcd4b2ab
 2014-07-08 16:16:26 -07:00
Chris Peterson
b200e46a0e Bug 1035607 - Remove unused empty_null to fix -Wunused warning-as-error in security/pkix. r=briansmith 2014-07-07 20:37:21 -07:00
Brian Smith
7d7bb101fa Bug 1035470: Use signature algorithm OID instead of digest algorithm OID in the signature field of certificates in mozilla::pkix tests, r=cviecco 
--HG--
extra : rebase_source : 99b1d5c0739221e90d4b04738f9362135f42a23c
 2014-07-07 00:46:10 -07:00
Brian Smith
416e15c804 Bug 1035008, Part 2: Modify existing mozilla::pkix GTests to follow naming conventions, r=mmc 
--HG--
rename : security/pkix/test/gtest/pkix_cert_chain_length_tests.cpp => security/pkix/test/gtest/pkixbuild_tests.cpp
rename : security/pkix/test/gtest/pkix_cert_extension_tests.cpp => security/pkix/test/gtest/pkixcert_extension_tests.cpp
rename : security/pkix/test/gtest/pkix_ocsp_request_tests.cpp => security/pkix/test/gtest/pkixocsp_CreateEncodedOCSPRequest_tests.cpp
extra : rebase_source : 05035197c37cd2fecf0c6e2f5231eeabfd4f64fd
extra : histedit_source : db050cf69b025e34e992a68b8b57665608c6a3d9
 2014-07-05 22:14:25 -07:00
Brian Smith
2a32961e87 Bug 1035008, Part 1: Document naming convention for mozilla::pkix GTests, r=mmc 
--HG--
extra : rebase_source : 8239f56513d8aba59eb8851bd219295fb6920b64
extra : histedit_source : 90856c24e66c7cc451c65cfd72a005cb2949085a
 2014-07-06 15:59:08 -07:00
Brian Smith
783ead1861 Bug 1034636: Remove mozilla::pkix::ScopedCERTCertifciate and mozilla::pkix::ScopedPLArenaPool, r=mmc 
--HG--
extra : rebase_source : 68e6da2f1e1c7fa678ef4cc81d23cc6298709108
extra : histedit_source : feba4c589dbf004ee50e2dea1fca0809f8f97674
 2014-07-03 21:49:56 -07:00
Brian Smith
f5ec8594e7 Bug 1033563, Part 3: Change mozilla::pkix::TrustDomain::FindPotentialIssuers API to be iterator-like, r=keeler 
--HG--
extra : rebase_source : e8c734ecb2de2c52dd8909c8b48f4bdb09d0128e
 2014-07-02 16:15:16 -07:00
Brian Smith
4c63d2fa78 Bug 1033563, Part 2: Convert mozilla::pkix::BuildForwardInner into an iterator-type thing, r=keeler 
--HG--
extra : rebase_source : 175e308191441035db4f3eed4a855205bab1a3f3
 2014-07-02 15:03:58 -07:00
Brian Smith
172778c87b Bug 1033563, Part 1: Move revocation checking code from mozilla::pkix::BuildForward to BuildForwardInner, r=keeler 
--HG--
extra : rebase_source : 0f11eb64ffb00d953c39d81f4877067bd173eadd
 2014-07-02 12:21:41 -07:00
Brian Smith
89e560be23 Bug 1029247, Part 2: Parse certificates using mozilla::pkix::der, r=keeler 
--HG--
extra : rebase_source : e093922497d005734c590a59f175993a7715bce8
 2014-07-03 16:59:42 -07:00
Brian Smith
e614192751 Bug 1029247, Part 1: Add new overload to mozilla::pkix::bind, r=keeler 
--HG--
extra : rebase_source : 7a9dc499ed6ad038e4840953744a9fcd6578290b
 2014-06-21 18:06:30 -07:00
Brian Smith
d4e1dc58f6 Bug 1034632: Fix suppression of warnings for MOZILLA_PKIX_ENUM_CLASS, r=mmc 
--HG--
extra : rebase_source : 962fa75dab803f1d139096fa5d41b4b656e32f86
 2014-07-03 20:41:07 -07:00
Brian Smith
b8878b14f6 Bug 1034412: Clarify definition of mozilla::pkix::der::SEQUENCE, r=mmc 
--HG--
extra : rebase_source : 3e139a66133c1d7916fbc13c7cec2b12e9545122
 2014-06-30 21:58:34 -07:00
Brian Smith
c74e0b81e0 Bug 1019770: Add tests for checking of notAfter and notBefore, r=cviecco 
--HG--
extra : rebase_source : 614e002886ffa73e7e38218ebb3ea2509edcd1a4
 2014-06-30 19:12:35 -07:00
Brian Smith
493ba137ec Bug 1033103: Add and use mozilla::pkix::der::ExpectTagAndGetTLV, r=keeler 
--HG--
extra : rebase_source : 16461be12705998799f5c84e2043d68b0c431cb0
 2014-07-01 13:25:43 -07:00
Brian Smith
b5b2484458 Bug 1033092: Add unit tests for mozilla::pkix::der::ExpectTagAndGetValue, r=keeler 
--HG--
extra : rebase_source : 8ad8960969e5ee5bf47054f1c285a85cbbdb18cf
 2014-07-01 16:28:45 -07:00
David Keeler
80e2e520b3 bug 1019770 - follow-up to remove unused const GENERALIZED_TIME_LENGTH r=briansmith 2014-07-02 10:04:31 -07:00
Brian Smith
4fdd6599dc Bug 1032947: Change CheckNameConstraints to construct CERTCertificate instances when needed, r=keeler 
--HG--
extra : rebase_source : d0bf802f4ff3fe9900ed7444c046617aa27faea9
 2014-06-26 14:22:20 -07:00
Brian Smith
4036ffd34b Bug 1019770: Add more tests for parsing GeneralizedTime and TimeChoice, r=cviecco 
--HG--
extra : rebase_source : f38fd90973b4bdf2cff5887c7d48f7e7b2a7126b
 2014-07-01 18:01:28 -07:00
Brian Smith
c849dbb035 Bug 1019770, Part 2: modify existing GeneralizedTime tests to test TimeChoice too, r=cviecco 
--HG--
extra : rebase_source : fe0b6f06a374dd1e50233c352031e6fdbde1c5f9
 2014-06-24 10:51:53 -07:00
Brian Smith
fb1fde93b7 Bug 1019770: Use mozilla::pkix::der to decode times and certificate validity period, r=cviecco 
--HG--
extra : rebase_source : 2b1fa83599c4d0748757b25b56f65e10d41504c8
 2014-06-24 21:48:12 -07:00
Wes Kocher
a2eaaf7841 Backed out changeset 5ea9b7bd2db5 (bug 1019770) 2014-07-01 17:43:47 -07:00
Wes Kocher
23fbb8d92d Backed out changeset 981f8345edd8 (bug 1019770) 2014-07-01 17:43:43 -07:00
Wes Kocher
a1c6a7db77 Backed out changeset 91b03a644dbe (bug 1019770) 2014-07-01 17:43:38 -07:00
Wes Kocher
ea7141a1d8 Backed out changeset f97578949399 (bug 1032947) 2014-07-01 17:43:33 -07:00
Brian Smith
cd8fb3a537 Bug 1032947: Change CheckNameConstraints to construct CERTCertificate instances when needed, r=keeler 
--HG--
extra : rebase_source : 64bd4c390f708213242e0d4987b7117b0049d02a
 2014-06-26 14:22:20 -07:00
Brian Smith
41accdc485 Bug 1019770: Add more tests for parsing GeneralizedTime and TimeChoice, r=cviecco 
--HG--
extra : rebase_source : 5e8171a2a849d61866ccdff33f06d96f04fc4bd5
 2014-06-30 17:11:56 -07:00
Brian Smith
1b4e9f681c Bug 1019770, Part 2: modify existing GeneralizedTime tests to test TimeChoice too, r=cviecco 
--HG--
extra : rebase_source : 8c891cc5269482d1ccf4c1c688e5576a2b8864f8
 2014-06-24 10:51:53 -07:00
Brian Smith
7f7734a4ba Bug 1019770: Use mozilla::pkix::der to decode times and certificate validity period, r=cviecco 
--HG--
extra : rebase_source : 05e348b4ae9bb88fdd0895ec5dcec55993ca17c4
 2014-06-24 21:48:12 -07:00
Brian Smith
af3daeff63 Bug 1031542: Add test case for key usage without any value bits, r=keeler 
--HG--
extra : rebase_source : 25bdc0db6b042fe6fbba61b80cb8a4ac7cb588eb
 2014-06-27 15:21:48 -07:00
Brian Smith
a1d6f81702 Bug 1030475: Use a valid id-ce-inhibitAnyPolicy extension value for test pkix_cert_extensions.KnownCriticalCEExtension, r=keeler 
--HG--
extra : rebase_source : 34972b2842d65ad6d716b0fbccf4984f9efd1fbf
 2014-06-25 17:14:32 -07:00
Brian Smith
a73a0dc5d2 Bug 1030478: Make the AIA extension used in pkix_cert_extensions.CriticalAIAExtension less invalid, r=keeler 
--HG--
extra : rebase_source : 42241cb4c8d2ba4e3e0ccc937059f9510765314b
 2014-06-25 16:42:50 -07:00
Brian Smith
fcdcfb823b Bug 1031022: Go back to accepting explicit encoding of v1 for certificates and OCSP responses, r=cviecco 
--HG--
extra : rebase_source : f0adf63879a48db6c036cce1a3e9a7b65e44fc4e
 2014-06-26 17:03:48 -07:00
Brian Smith
f97af56e30 Bug 1029341: Factor out decoding of certificate/OCSP extensions, r=keeler 
--HG--
extra : rebase_source : a1d66b75838e9dfad486f5654db6d977e5c1d97a
extra : histedit_source : 34e05d8b3d94500b9cb4f1e311f8fe526b97ba6e
 2014-06-24 21:52:50 -07:00
Brian Smith
73c952f2fb Bug 1029364: Centralize version parsing in BackCert::Init, r=cviecco 
--HG--
extra : rebase_source : 7e91710ed7cd6e68875c2d26f0b503835968e1f2
extra : histedit_source : e07446cad5edbf6cbb048304bc2b2af4395410db
 2014-06-25 01:32:06 -07:00
Brian Smith
e88af673ae Bug 1029992, Improve AlgorithmIdentifier decoding in mozilla::pkix, r=cviecco 
--HG--
extra : rebase_source : dec7d3e00afe3a9e433f789baf09c0c41679b0e2
extra : histedit_source : 47657cfde7a266b5d5322b024800abe316e9dbd6
 2014-06-24 21:47:50 -07:00
Carsten "Tomcat" Book
ec63c69c72 Backed out changeset 4f21e9bc729a (bug 1029364) for B2G Device and Emulator Bustage on a CLOSED TREE 2014-06-25 10:01:17 +02:00
Carsten "Tomcat" Book
a198d5204e Backed out changeset a10da316a35f (bug 1029341) 2014-06-25 10:00:42 +02:00
Brian Smith
abcf9d2012 Bug 1029341: Factor out decoding of certificate/OCSP extensions, r=keeler 
--HG--
extra : rebase_source : e307bea95d29cf78c9eaa7ddb1f2b2c195a59dc9
 2014-06-24 21:52:50 -07:00
Brian Smith
f9aac2f45e Bug 1029364: Centralize version parsing in BackCert::Init, r=cviecco 
--HG--
extra : rebase_source : 79d5f29c2af1ec77d6bb8a7936bb0a17f28e8d52
 2014-06-19 16:17:28 -07:00
Brian Smith
ca4f473450 Bug 1026261: Remove CERTCertificate from mozilla::pkix revocation checking API, r=keeler 
--HG--
extra : rebase_source : 6798f494bd351961ea02abba07b5860839bbc418
 2014-06-20 10:10:51 -07:00
David Keeler
c13f6d39c7 bug 997509 - heed expired Revoked or Unknown OCSP responses r=briansmith 2014-06-20 09:01:57 -07:00
Brian Smith
b76e937c55 Bug 1006812: Use mozilla::pkix::der to decode the key usage extension, r=keeler 
--HG--
extra : rebase_source : e445c913994dc027e1179543d7b6cab2505e734d
 2014-06-19 00:13:20 -07:00
Brian Smith
2858e7b2a9 Bug 1027255: Add ASSERT_/EXPECT_ GTest helpers for mozilla::pkix::Result, r=mmc 
--HG--
extra : rebase_source : 2fb8807724ba59028ec32e8d287296a905bd3615
 2014-06-18 23:40:34 -07:00
Brian Smith
d779fddb49 Bug 1022970: Switch from UNIFIED_SOURCES back to SOURCES in security/pkix, security/certverifier, and security/manager/ssl/src, r=keeler 
--HG--
extra : rebase_source : 7d45d018be6b23af199c1e9c858fb5bb3bb5a01b
 2014-06-16 22:57:55 -07:00
Camilo Viecco
a8ba8291e3 Bug 998513 - Test GeneralizedTime encodings in mozilla::pkix. r=keeler. 2014-06-13 12:50:11 -07:00
David Keeler
8bf1ded425 bug 1020993 - properly handle unknown critical extensions in BackCert::Init r=briansmith 2014-06-09 13:57:44 -07:00
Camilo Viecco
ec7f60ff2a Bug 1021797 - Rename ArenaFalseCleaner to PORT_FreeArena_false. r=keeler 
--HG--
extra : rebase_source : e7316ee06f58f42afbaf68d7e5f7948277fd15fd
 2014-06-06 14:11:08 -07:00
Brian Smith
8b0f8d773d Bug 1020683, Part 3: Fix build bustage, a=BUSTAGE on a CLOSED TREE 
--HG--
extra : rebase_source : 8eaa3eae911b0e75129988d58a19e5e76257b369
 2014-06-06 12:04:36 -07:00
Brian Smith
e0cd7eb210 Bug 1020682: Simplify mozilla::pkix results cert chain construction and make it more efficient, r=cviecco 
--HG--
extra : rebase_source : 69cb8ea66e075c89bbcbab3ca115cc2ccc95fa4f
 2014-06-04 01:28:44 -07:00
Brian Smith
f9aa591c9a Bug 1020683, Part 2: Remove more references to CERTCertificate from mozilla::pkix, r=keeler 
--HG--
extra : rebase_source : 9dce7585975fb23fe04f5714ece18645b22b2261
 2014-06-04 00:03:28 -07:00
Brian Smith
67bd0799fb Bug 1020683, Part 1: Remove internal uses of CERTCertificate from mozilla::pkix::VerifyEncodedOCSPResponse, r=keeler 
--HG--
extra : rebase_source : 416938498080c4d44874025f1da4562ab1c7c3c8
 2014-06-05 15:18:32 -07:00
Brian Smith
86f062c18f Bug 1018411: Factor out signed data parsing in mozilla::pkix into a reusable and separately-testable function, r=keeler 
--HG--
extra : rebase_source : d65a760f9f8efb656f238794019bd451ca163c0b
 2014-05-31 18:54:34 -07:00
Camilo Viecco
de303fb49e Bug 1000548 - Leaking arenas allocated in mozilla::pkix r=keeler 
--HG--
extra : rebase_source : 6b0aaef098a4fa4d5749013a332b6b7602640b36
 2014-06-05 16:28:46 -07:00
Brian Smith
279c66a9b8 Bug 1019814: Remove CERTCertificate dependency from TrustDomain::GetCertTrust, r=keeler 
--HG--
extra : rebase_source : 9abf0522f02d00ac2f63f2327ddbe8d119ffc64f
 2014-06-03 10:47:25 -07:00
Brian Smith
ecfed7ae84 Bug 1019109: Add DottedOIDToCode.py tool, r=keeler 
--HG--
extra : rebase_source : 44a92234f884af4500bc6eb5a1fc4dd4cfd38dc2
 2014-06-02 10:50:04 -07:00
Brian Smith
d7a28e81d0 Bug 1018633: Simplify the max cert chain length check code in mozilla::pkix and make it more efficient, r=cviecco 
--HG--
extra : rebase_source : 7fa4cc6c1b46357abed0c57c6e24c622049c5acb
 2014-05-31 16:32:58 -07:00
Brian Smith
151ad4b5a6 Bug 1001188: Set the error code when the max cert chain length limit is exceeded, r=cviecco 
--HG--
extra : rebase_source : ce9e1faa083f5c679e20a2b6d9e8d482462e75b0
 2014-05-31 16:55:54 -07:00
Brian Smith
e508e0ac8a Bug 1018642: Factor out reusable NSS GTest infrastructure into a new NSSTest class, r=cviecco 
--HG--
extra : rebase_source : 101c316c1ea54f5092a21af4d7a1be349c504800
 2014-05-30 16:46:49 -07:00
Brian Smith
efadae2e83 Bug 1018064: Replace mozilla::pkix::der::Input::Match with mozilla::pkix::der::Input::MatchRest, r=mmc 
--HG--
extra : rebase_source : 5c5b14cf23b1e40854d241cbc482de40b01ac494
 2014-05-29 22:09:45 -07:00
Brian Smith
4c65ffea41 Bug 1018061: Have mozilla::pkix::der::Input::Read use EnsureLength instead of its own checks, r=mmc 
--HG--
extra : rebase_source : f46d6b9bdcd7d7a272fb39f22312a89d2695db56
 2014-05-29 23:36:30 -07:00
Camilo Viecco
5bce267045 Bug 991815 - Part 1/2 - Allow intermediate OCSP responses up to 1 year old. r=keeler 
--HG--
extra : rebase_source : 28d5336da1dc44932b92ce2c59fca5fcb2b8a3d8
 2014-05-30 16:12:36 -07:00
Brian Smith
3b00a198b6 Bug 1018033: Prevent buffer read overflow due to integer overflow in mozilla::pkix::der::Input::EnsureLength, r=keeler 
--HG--
extra : rebase_source : e4e88d61e448fa475a106a06b9f32181906fba0f
 2014-05-29 23:37:40 -07:00
Brian Smith
30d9839f83 Bug 1018041: Fix linking error in pkix_ocsp_request_tests when GTest is enabled on Windows, r=keeler 
--HG--
extra : rebase_source : 36c5ee4f5cc40adb1079e34bd309147a662fc45f
 2014-05-29 23:06:10 -07:00
Chris Peterson
84e89d2fa5 Bug 1007708 - Part 1: Fix warnings in security/pkix/test/ and mark as FAIL_ON_WARNINGS. r=briansmith 2014-05-17 20:12:10 -07:00
David Keeler
cc40dbbc9d bug 986150 - fix some comments in mozilla::pkix DER tests r=mmc 2014-05-19 12:14:51 -07:00
David Keeler
3a148b5121 bug 986150 - test mozilla::pkix::der::OptionalBoolean r=mmc 2014-05-19 12:14:44 -07:00
David Keeler
c7191763ea bug 1002814 - OCSP requests: long serial check should be on cert, not issuerCert r=briansmith 2014-05-14 10:05:32 -07:00
David Keeler
1793f7acdc bug 1002814 - retry PK11_GenerateKeyPair when it fails non-fatally r=briansmith 2014-05-19 11:13:04 -07:00
Brian Smith
2912321bc5 Bug 1006958: Use mozilla::pkix::der to parse certificate policies instead of NSS, r=keeler 
--HG--
extra : rebase_source : fde88efebc1025bc4f825aa38df809d04b1b250a
 2014-05-15 18:59:52 -07:00
Brian Smith
f834909bb0 Bug 1010581: Document Expect/Match/Skip terminology in mozilla::pkix::der and make that code more consistent, r=keeler 
--HG--
extra : rebase_source : 12aa2e1e9eed4f32a75732a65cbfaba9789d5d39
 2014-05-14 19:30:09 -07:00
Brian Smith
077fb4cfcf Bug 1006041: Use mozilla::pkix::der for decoding the extended key usage extension, r=keeler 
--HG--
extra : rebase_source : b4b62f117d653784eb6ad058554faf520a1bd90b
 2014-05-14 01:02:34 -07:00
Brian Smith
921579aca0 Bug 989564, Part 2: Remove CERTCertificate dependency from CheckBasicConstraints, r=keeler 
--HG--
extra : rebase_source : c0ce62f44109cbcdf65da770a1154814733a6b49
 2014-04-25 20:27:27 -07:00
Brian Smith
33238b8f26 Bug 989564, Part 1: Decode basic constraints extension using mozilla::pkix::der, r=keeler 
--HG--
extra : rebase_source : 89560218a69596868cb8a93c69ee72656b0abf77
 2014-05-05 09:55:57 -07:00
Gervase Markham
a28ceb8833 Bug 1007195 - Change licensing on mozilla::pkix to dual Apache 2/MPL 2. r=briansmith. 2014-05-14 14:37:25 +01:00
Jacek Caban
729caf70d4 Bug 1005309 - Fixed MSVC detection. 
--HG--
extra : rebase_source : 0b61de1270eb861234539de675c2d381e217f55c
 2014-05-12 11:01:22 +02:00
David Keeler
675aff56b2 bug 1007962 - CreateEncodedCertificate should take a SECItem as its serialNumber argument r=mmc 2014-05-08 15:33:38 -07:00
David Keeler
ea0182ae63 bug 1007813 - match CreateEncodedCertificate declaration to its definition r=mmc 2014-05-08 11:51:50 -07:00
Monica Chew
baff68ca81 Bug 1000354: Fix comment and make test clearer (r=keeler) 2014-05-07 15:48:23 -07:00
Brian Smith
c92ecd7e9b Bug 1005667: Fix build warning due to buggy test code in pkixtestutil.cpp, r=dholbert 2014-05-04 11:04:48 -07:00
Brian Smith
75f6d3a530 Bug 1005309, Part 2: Enable extended compiler warnings (-W4 -Wall) in mozilla::pkix, r=mmc 
--HG--
extra : rebase_source : 033574a0b26582753baec003becfaf15bbd85003
extra : histedit_source : 2d52c47f92b8f694203c2eb580b37be78ccf2f9c
 2014-05-03 17:50:26 -07:00
Brian Smith
fc861849bc Bug 1005309, Part 1: Improve type conversion and error checking for hashing done in mozilla::pkix's pkixocsp.cpp. r=mmc 
--HG--
extra : rebase_source : 79c248ebc45d722249ae7adbbd2527dc9985f6f0
extra : histedit_source : 8ea66942cec4252d9d7e625da22b5ad9964485a1
 2014-05-02 11:53:06 -07:00
Brian Smith
f0a3398f72 Bug 1005256: Improve parameter validation in mozilla::pkix::der::Input::GetSECItem, r=mmc 
--HG--
extra : rebase_source : 93b65e103c86747ddaf463e639aacffdf7ccb08f
extra : histedit_source : 10ef0ab13fb9de710ea3c589600db4632f9cf4a0
 2014-05-02 11:52:10 -07:00
Brian Smith
a46aa03484 Bug 1005208: Rename issuerKeyHash to keyHash in mozilla::pkix's pkixocsp.cpp, r=mmc 
--HG--
extra : rebase_source : ede4ed17cb56e3e52325ecadc2c5ded33c4a6013
extra : histedit_source : b727000e81bbc8afa6b9f8188b97065f59da45ad
 2014-05-02 10:40:03 -07:00
Brian Smith
20a90d85b4 Bug 1005198: Make it easy to create test certificates in GTest tests, r=keeler 
--HG--
extra : rebase_source : 0b1ec263a5a1ce1856afb12f11ea4c35c2aa55d0
extra : histedit_source : 40a3a3fc1993de0fcdeb5593a1a1df4dc94832b8
 2014-04-25 19:57:40 -07:00
Brian Smith
6c43d7c225 Bug 1003290: Fix OID parser template type, r=keeler 
--HG--
extra : rebase_source : c33e450b84234ae7471118c2f8749593a59d9298
 2014-04-25 16:31:30 -07:00
Brian Smith
9ae1a34e11 Bug 1002933: Use Strongly-typed enums more often in mozilla::pkix, r=mmc 
--HG--
extra : rebase_source : 3f67f48d1f4150df0830f89e6c07bbbf3a8fc7e8
 2014-04-25 16:29:26 -07:00
Brian Smith
456d4f8a4d Bug 1002929: Avoid implicit conversion of Result to boolean in mozilla::der::GeneralizedTime, r=keeler 
--HG--
extra : rebase_source : 8966d41f1837611b83ac84b347aeddfade9bc949
 2014-04-24 16:08:30 -07:00
Camilo Viecco
a54a4f05cf Bug 744204 - Allow Certificate key pinning Part 2 - Certverifier Interface. r=keeler 
--HG--
extra : rebase_source : 2f9748ba0b241c697e22b7ff72f2f5a0fad4a2ca
 2014-02-05 14:49:10 -08:00
Brian Smith
4cbf0ef630 Bug 998067: Add utility code for making it easier to create GTests based on NSS, r=keeler 
--HG--
extra : rebase_source : 8ae08d1ccc9329aa567cfc7ac590ddb026155bae
 2014-04-16 21:38:01 -07:00
Brian Smith
8c0e54d6a8 Bug 1000544: Use "Fail(x, y)" instead of "PR_SetError(y, 0); return x;" more consistently, r=mmc 
--HG--
extra : rebase_source : 96addac738b8ffe39c7a92d546388d5f13fc2340
 2014-04-23 14:13:32 -07:00
Brian Smith
bd4b0a0668 Bug 1000482: Remove unused stapledOCSPResponse parmaeter from BuildForwardInner, r=mmc, r=keeler 
--HG--
extra : rebase_source : b5d67d3488aa3df5690a7dd2b76495ac4986a723
 2014-04-23 13:42:38 -07:00
Brian Smith
d6bedee1bf Bug 1000483: Remove unused isTrustAnchor parameter from CheckKeyUsage, r=cviecco 
--HG--
extra : rebase_source : 96e7b76362d6219193c814d35c332aae2ed5b48f
 2014-04-23 13:38:19 -07:00
Stefan Arentz
4c3ba2b965 Bug 968490: Add mozilla::pkix::der unit tests (r=cviecco) 2014-03-26 16:00:03 -07:00
David Keeler
ca673b66f0 bug 991898 - mozilla::pkix: temporarily allow empty Extensions in OCSP responses r=briansmith 2014-04-17 16:01:18 -07:00
David Keeler
0860109f89 bug 997843 - mozilla::pkix::der::Input::Expect should take a uint16_t as its length argument r=briansmith 2014-04-17 09:50:06 -07:00
David Keeler
5490002e36 bug 982774 - der::ExpectTagAndGetLength: check that input has enough capacity for the length described r=briansmith 2014-04-16 13:30:09 -07:00
David Keeler
b3c8e42deb bug 972753 - OCSP testing: delegated responses and including multiple certificates r=cviecco 2014-04-16 09:31:27 -07:00
David Keeler
e23cf356dc bug 991209 - mozilla::pkix: allow non-end-entity certs to have OCSP signing EKU r=briansmith 2014-04-10 10:15:02 -07:00
David Keeler
281f1bd79b bug 990603 - mozilla::pkix: defer reporting end-entity cert errors until after path building r=briansmith 2014-04-08 09:49:36 -07:00
David Keeler
dd61cf2b05 bug 989516 - mozilla::pkix: temporarily allow improper basicConstraint:cA encodings r=cviecco 2014-03-31 11:06:43 -07:00
David Keeler
be06439979 bug 987295 - mozilla::pkix: test ocsp extension decoding r=cviecco 2014-03-31 10:54:53 -07:00
David Keeler
8c4f3cc754 bug 987295 - mozilla::pkix: fix decoding OCSP response extensions r=cviecco 2014-03-31 13:24:16 -07:00
Camilo Viecco
95b0ba15e7 Bug 986156 - Allow anypolicyoid and reject on inhibitAnypolicy (mozilla::pkix). r=bsmith 
--HG--
extra : rebase_source : dd61d4bfa64ed65582f3a1b4662f16740983a3ce
 2014-03-28 10:00:29 -07:00
Camilo Viecco
d130bf6c69 Bug 982292 - Allow nsSGC to 'nest' TLS Web Server Authentication EKU in moz::pkix. r=bsmith 2014-03-13 11:06:44 -07:00
Brian Smith
6a59538495 Bug 982778: Initialize parameters of output value of der::AlgorithmIdentifier, r=keeler 2014-03-13 21:26:03 -07:00
Camilo Viecco
0b1f14ef5a Bug 969188 - Part 2/3 - mozilla::pkix only decode v3 extensions in v3 certificates. r=briansmith 
--HG--
extra : rebase_source : 86e58ccf8538d0f40d3b24b89a92dceac095cb21
 2014-03-06 10:04:04 -08:00
Camilo Viecco
a97f568c99 Bug 969188 - Part 1/3 - Fix mozilla::pkix handling of trusted v1 certificates. r=briansmith 
--HG--
extra : rebase_source : 242b4849a7820d23518936a8c86ddcb7d9684394
 2014-03-06 10:04:04 -08:00
David Keeler
26057e30a1 bug 987262 - mozilla::pkix: refactor Nested AtEnd() checks in pkixder.h r=briansmith 2014-03-24 13:12:56 -07:00
David Keeler
d20d064223 bug 985021 - mozilla::pkix: temporarily accept pathLenConstraint in EE basic constraints extensions r=briansmith 2014-03-21 11:52:01 -07:00
David Keeler
e79c0e95dc backout bug 985021 (8d622f4ec6e9) for another build breakage on a CLOSED TREE r=backout 2014-03-21 11:47:06 -07:00
David Keeler
26eb4bc123 bug 985021 - mozilla::pkix: temporarily accept pathLenConstraint in EE basic constraints extensions r=briansmith 2014-03-21 10:38:36 -07:00
David Keeler
5e94cb110d backout bug 985021 (de535cd27ee7) for build breakage r=backout 2014-03-20 16:06:15 -07:00
David Keeler
4f8a213abd bug 985021 - mozilla::pkix: temporarily accept pathLenConstraint in EE basic constraints extensions r=briansmith 2014-03-20 15:50:12 -07:00
David Keeler
b1405bc489 bug 985201 - rename insanity::pkix to mozilla::pkix r=cviecco r=briansmith 
--HG--
rename : security/insanity/include/insanity/ScopedPtr.h => security/pkix/include/pkix/ScopedPtr.h
rename : security/insanity/include/insanity/bind.h => security/pkix/include/pkix/bind.h
rename : security/insanity/include/insanity/nullptr.h => security/pkix/include/pkix/nullptr.h
rename : security/insanity/include/insanity/pkix.h => security/pkix/include/pkix/pkix.h
rename : security/insanity/include/insanity/pkixtypes.h => security/pkix/include/pkix/pkixtypes.h
rename : security/insanity/lib/pkixbind.cpp => security/pkix/lib/pkixbind.cpp
rename : security/insanity/lib/pkixbuild.cpp => security/pkix/lib/pkixbuild.cpp
rename : security/insanity/lib/pkixcheck.cpp => security/pkix/lib/pkixcheck.cpp
rename : security/insanity/lib/pkixcheck.h => security/pkix/lib/pkixcheck.h
rename : security/insanity/lib/pkixder.cpp => security/pkix/lib/pkixder.cpp
rename : security/insanity/lib/pkixder.h => security/pkix/lib/pkixder.h
rename : security/insanity/lib/pkixkey.cpp => security/pkix/lib/pkixkey.cpp
rename : security/insanity/lib/pkixocsp.cpp => security/pkix/lib/pkixocsp.cpp
rename : security/insanity/lib/pkixutil.h => security/pkix/lib/pkixutil.h
rename : security/insanity/moz.build => security/pkix/moz.build
rename : security/insanity/test/lib/moz.build => security/pkix/test/lib/moz.build
rename : security/insanity/test/lib/pkixtestutil.cpp => security/pkix/test/lib/pkixtestutil.cpp
rename : security/insanity/test/lib/pkixtestutil.h => security/pkix/test/lib/pkixtestutil.h
 2014-03-20 14:29:21 -07:00