Commit Graph

10713 Commits

Author SHA1 Message Date
David Keeler
ca357938cb bug 1312919 - fix test_bug383369.html to not use SpecialPowers in chrome code r=mgoodwin
MozReview-Commit-ID: 5H0zjl9LIbo

--HG--
extra : rebase_source : 184151d5be0476e3d2ca25e3b6d76e0b362cf1b0
2016-10-26 11:29:59 -07:00
Carsten "Tomcat" Book
a581a8b8cf merge mozilla-inbound to mozilla-central a=merge 2016-10-31 16:46:52 +01:00
ffxbld
af354e2cd2 No bug, Automated HPKP preload list update from host bld-linux64-spot-1051 - a=hpkp-update 2016-10-31 06:17:02 -07:00
ffxbld
cd6a7d7a59 No bug, Automated HSTS preload list update from host bld-linux64-spot-1051 - a=hsts-update 2016-10-31 06:17:00 -07:00
Jan de Mooij
31df59e394 Bug 1311996 - Fix code using pkix::Result to not conflict with the new mozilla::Result type. r=keeler 2016-10-31 10:05:13 +01:00
Phil Ringnalda
3db0ee3365 Merge autoland to m-c, a=merge 2016-10-30 10:53:33 -07:00
ffxbld
93d39ecc5c No bug, Automated HPKP preload list update from host bld-linux64-spot-1055 - a=hpkp-update 2016-10-30 06:08:21 -07:00
ffxbld
d2d7721e09 No bug, Automated HSTS preload list update from host bld-linux64-spot-1055 - a=hsts-update 2016-10-30 06:08:18 -07:00
ffxbld
6c19ab9e79 No bug, Automated HPKP preload list update from host bld-linux64-spot-543 - a=hpkp-update 2016-10-29 06:17:25 -07:00
ffxbld
aa8dd034ae No bug, Automated HSTS preload list update from host bld-linux64-spot-543 - a=hsts-update 2016-10-29 06:17:23 -07:00
Ryan VanderMeulen
a41f7d1058 Merge autoland to m-c. a=merge 2016-10-29 09:12:45 -04:00
ffxbld
0ba65ec330 No bug, Automated HPKP preload list update from host bld-linux64-spot-444 - a=hpkp-update 2016-10-28 06:14:10 -07:00
ffxbld
c08bfc0b64 No bug, Automated HSTS preload list update from host bld-linux64-spot-444 - a=hsts-update 2016-10-28 06:14:07 -07:00
Carsten "Tomcat" Book
061b119bf8 Merge mozilla-central to mozilla-inbound 2016-10-27 16:46:06 +02:00
Carsten "Tomcat" Book
7d0f3d5865 merge mozilla-inbound to mozilla-central a=merge 2016-10-27 16:45:00 +02:00
ffxbld
975f18d109 No bug, Automated HPKP preload list update from host bld-linux64-spot-246 - a=hpkp-update 2016-10-27 06:28:34 -07:00
ffxbld
03a754c9e1 No bug, Automated HSTS preload list update from host bld-linux64-spot-246 - a=hsts-update 2016-10-27 06:28:31 -07:00
Phil Ringnalda
76f5d03bb6 Merge m-c to m-i
MozReview-Commit-ID: LUDPZ08eWBo
2016-10-26 18:58:54 -07:00
Jed Davis
67a039045c Bug 1268733 - Move Linux sandboxing code back out to libmozsandbox.so. r=gcp r=glandium 2016-10-26 16:57:24 -06:00
Jed Davis
dce9969411 Bug 1268733 - Move sandbox interposition shims to their own static library. r=gcp r=glandium
This way they'll continue to be at the beginning of the symbol search
path after mozsandbox returns to being a shared library instead of
statically linked into plugin-container.

--HG--
rename : security/sandbox/linux/SandboxHooks.cpp => security/sandbox/linux/interpose/SandboxHooks.cpp
2016-10-26 16:57:18 -06:00
Jed Davis
13fea0b617 Bug 1268733 - Move sandbox telemetry / crash annotation code from mozsandbox to libxul. r=haik 2016-10-26 16:57:10 -06:00
Gian-Carlo Pascutto
8b0d2992cb Bug 1310116 - Allow waitpid but warn on creating processes in content. r=jld
MozReview-Commit-ID: JjNfA6wUe3T

--HG--
extra : rebase_source : ad565d238e7554a951d2f6b4e076918bdfd7a450
extra : histedit_source : 127ff408e498f7c687cf6e7f8f7b4e2fbb8c5ae8
2016-10-25 20:43:42 +02:00
Martin Thomson
c09374be30 Bug 1311383 - Use unique pointers for DTLS transport and related, r=Cykesiopka
MozReview-Commit-ID: 79wKQtJjBNP

--HG--
extra : rebase_source : 1f5c7f2417c25d17fb99bc55eff8a6b2e5a333ba
2016-10-20 11:29:58 +11:00
Carsten "Tomcat" Book
9031c83f32 Merge mozilla-central to autoland 2016-10-26 17:14:27 +02:00
Sergei Chernov
8e3719b7e2 Bug 1305289 - Certificate Transparency - basic UI indicator; r=Dolske,keeler
MozReview-Commit-ID: b0SUW2WNJT

--HG--
extra : rebase_source : 2bfa8895246f862f3e49c0c9674a8e862137f8a6
2016-09-28 20:19:56 +03:00
David Keeler
544761d217 bug 1309707 - revoke StartCom and WoSign certificates issued after 21 October 2016 r=Cykesiopka,jcj
MozReview-Commit-ID: 1itMZuWY9HO

--HG--
extra : rebase_source : 5e46c04d959ab1b6e7c961e0b5d4fff7ad6417bc
2016-10-12 17:02:33 -07:00
Cykesiopka
a64f9baa1e Bug 1312152 - Stop using nsIDialogParamBlock in the client auth UI. r=keeler
nsIDialogParamBlock isn't a great API, and is best avoided.

MozReview-Commit-ID: 2B0HkKNJizo

--HG--
extra : rebase_source : a05e7a05ff0745f26d08616a74b532bc8a37c4fd
2016-10-23 12:57:41 +08:00
Phil Ringnalda
435a27119b Merge m-c to m-i
MozReview-Commit-ID: 8nqgw9Q3gSY
2016-10-25 22:07:07 -07:00
Franziskus Kiefer
4c1797bf92 Bug 1305970 - land NSS 0x3e7b53b18112, r=me
--HG--
extra : rebase_source : ef363dba56df3ca76c43cfb20702ddef13d0f855
2016-10-25 20:38:17 +02:00
Cykesiopka
1c951538c1 Bug 1312154 – Stop using nsIDialogParamBlock in downloadcert.(js|xul). r=keeler
nsIDialogParamBlock isn't a great API, and is best avoided.

This patch also updates downloadcert.js to match modern PSM style, and adds a
test.

MozReview-Commit-ID: J2g2H0iBAn4

--HG--
extra : rebase_source : 9365f7b1c7a88caef84f0353e18510dcab9a5d32
2016-10-28 02:13:38 +08:00
David Keeler
b3a0669843 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
Previously PSM would load EV information on-demand (i.e. just before verifying a
certificate). This simplifies this operation, removes a dubious optimization
(loading the EV information on another thread while opening a network
connection), and relocates the loading operation to when we are likely to have
good disk locality (i.e. when we've just loaded the built-in roots module).

This also removes the now-unused MOZ_NO_EV_CERTS build flag.

MozReview-Commit-ID: 8Rnl4ozF95V

--HG--
extra : rebase_source : 5b2e76079c256f7e3c55b1d4ec0d9f654fec44f6
2016-09-30 18:08:08 -07:00
Cykesiopka
7658cbf8e1 Bug 1308888 - Simplify passing handle to the cert to view in the cert viewer. r=keeler
The cert viewer currently supports two ways to pass a handle to the cert:
1. Passing the nickname of the cert via window.name.
2. Via an nsIDialogParamBlock, which is itself accessed through window.arguments.

Method 1 is unused and unnecessary.
Method 2 is overly complex: the relevant nsIX509Cert can just be passed directly.

This patch does the following:
1. Makes it so that there is only a single, straightforward way to pass a handle
to the cert.
2. Makes the cert viewer title localisable while we're nearby.
3. Renames viewCertDetails.js to better reflect the current use of the file.

MozReview-Commit-ID: pqtfNgvImT

--HG--
rename : security/manager/pki/resources/content/viewCertDetails.js => security/manager/pki/resources/content/certViewer.js
extra : rebase_source : 776a27111ab26cdcdc91b002890c43a3fe4f48e8
2016-10-21 00:33:36 +08:00
David Keeler
83858eab7a bug 1311077 - fix builtin root module loading so it works in Android Cpp unit tests r=Cykesiopka
Also updates the relevant test (TestCertDB) to ensure that we actually are
loading builtin root certificates.

MozReview-Commit-ID: LXA4TqTzy8T

--HG--
extra : rebase_source : d217556e84a7e205e0f9e767b759d1b637d201a7
2016-10-19 15:14:23 -07:00
Carsten "Tomcat" Book
bbfd099b2d Merge mozilla-central to autoland 2016-10-20 17:27:57 +02:00
Carsten "Tomcat" Book
d16ac34f1a merge autoland to mozilla-central a=merge 2016-10-20 16:45:10 +02:00
ffxbld
5337d18d89 No bug, Automated HPKP preload list update from host bld-linux64-spot-564 - a=hpkp-update 2016-10-20 06:10:28 -07:00
ffxbld
fc9e549c58 No bug, Automated HSTS preload list update from host bld-linux64-spot-564 - a=hsts-update 2016-10-20 06:10:26 -07:00
ffxbld
d5f9186028 No bug, Automated HPKP preload list update from host bld-linux64-spot-055 - a=hpkp-update 2016-10-19 06:25:18 -07:00
ffxbld
8a0e5bae33 No bug, Automated HSTS preload list update from host bld-linux64-spot-055 - a=hsts-update 2016-10-19 06:25:15 -07:00
Phil Ringnalda
132355644f Merge autoland to m-c, a=merge
MozReview-Commit-ID: 2J6HdCmNCBt
2016-10-18 19:25:30 -07:00
ffxbld
74c5c967e1 No bug, Automated HPKP preload list update from host bld-linux64-spot-1050 - a=hpkp-update 2016-10-18 06:07:00 -07:00
ffxbld
e0ebfa5961 No bug, Automated HSTS preload list update from host bld-linux64-spot-1050 - a=hsts-update 2016-10-18 06:06:58 -07:00
Cykesiopka
4f5d6e28c5 Bug 1267012 - Update and re-enable test_signed_dir.js. r=keeler
test_signed_dir.js was previously disabled for perma-failing after a year or so.
The reason was that the signature for sslcontrol.xpi (the test extension used in
the test) expired. Bug 1267318 fixed this expiry problem in general by simply
ignoring expired signatures.

This patch does the following:
1. Replaces sslcontrol.xpi with a newer extension.
Lightbeam is now used for this purpose, since it is still hosted on AMO, is
a Mozilla extension, and is MPL2 code.
2. Moves the test extension outside of test_signed_apps/.
The extension and the test itself have nothing to do with the rest of the files
in that directory.
3. Makes misc improvements to the test file.

MozReview-Commit-ID: 8uLDS5ypycO

--HG--
extra : rebase_source : 71eb9c560e5ced80e05e9672c27923e87e0bee3f
2016-10-18 17:35:23 +08:00
Cykesiopka
817eb91a1d Bug 332442 - Stop abusing window name to pass cert ref to editcerts.js. r=mgoodwin
editcacert.xul/editcerts.js currently requires the |dbKey| attribute of an
nsIX509Cert to be passed to it via the window name so it can get a handle to the
nsIX509Cert.

This has two problems:
1. This used to trigger warnings, and is unwise to do in any case.
2. It's unnecessary complexity - the nsIX509Cert can be passed directly.

This patch:
1. Addresses the two problems.
2. Adds a test to ensure the functionality of editcerts.js actually works.
3. Rewrites editcerts.js to better fit modern PSM style.
4. Updates the name of editcerts.js so it's more consistent with the general
   convention under security/pki/resources/content

MozReview-Commit-ID: ECxziXq5TmL

--HG--
rename : security/manager/pki/resources/content/editcerts.js => security/manager/pki/resources/content/editcacert.js
extra : rebase_source : ae140466dccf947cd28cbda102c1e5b3ea0eb9d4
2016-10-18 00:02:42 +08:00
Cykesiopka
05c6ec703e Bug 332442 - Keep track of and delete imported certs in head.js instead of in various test files. r=mgoodwin
head.js is run/included for every test file in the same folder, so having it
keep track of and clean up imported certs reduces the amount of duplication.

MozReview-Commit-ID: 23482qadMiy

--HG--
extra : rebase_source : e74ebc2d38b4abc58cc344742c98919e137e08ba
2016-10-18 00:02:41 +08:00
ffxbld
16e684b72e No bug, Automated HPKP preload list update from host bld-linux64-spot-156 - a=hpkp-update 2016-10-17 06:25:23 -07:00
ffxbld
82b24d5497 No bug, Automated HSTS preload list update from host bld-linux64-spot-156 - a=hsts-update 2016-10-17 06:25:21 -07:00
Carsten "Tomcat" Book
d6850a3a86 merge mozilla-inbound to mozilla-central a=merge 2016-10-17 11:19:02 +02:00
ffxbld
4e247de866 No bug, Automated HPKP preload list update from host bld-linux64-spot-134 - a=hpkp-update 2016-10-16 06:21:50 -07:00
ffxbld
9a7e67a66a No bug, Automated HSTS preload list update from host bld-linux64-spot-134 - a=hsts-update 2016-10-16 06:21:48 -07:00