Commit Graph

135 Commits

Author SHA1 Message Date
Brian Smith
123a9716ca Bug 952863, Part 2: Remove dead code for non-ECDHE TLS False Start, r=keeler
--HG--
extra : rebase_source : 47ee95682f769b8e10aaf55b0f4fccfef1fcdea0
2014-12-10 10:13:18 -08:00
Masatoshi Kimura
b95c85162f Bug 1084025 - Add telemetry to measure failures due to not falling back. r=keeler 2014-12-09 07:19:05 +09:00
Masatoshi Kimura
8277eea9e9 Bug 1092998 - Deal with "cipher mismatch intolerant" servers. r=keeler 2014-11-27 07:19:11 +09:00
Masatoshi Kimura
bcda188339 Bug 1088915 - Stop offering RC4 in the first handshakes. r=keeler 2014-10-22 01:11:29 +09:00
Martin Thomson
2aa2c784b9 Bug 1088950 - Fix handling of inappropriate_fallback alert. r=keeler 2014-10-27 17:47:00 +01:00
Martin Thomson
e4182ac689 Bug 1083058 - Adding pref to control TLS version fallback, r=keeler
From af667978f8915e6ebfaf02f8967b3d320d409a24 Mon Sep 17 00:00:00 2001
---
 netwerk/base/public/security-prefs.js              |  1 +
 security/manager/ssl/src/nsNSSIOLayer.cpp          | 21 +++++-
 security/manager/ssl/src/nsNSSIOLayer.h            |  2 +
 .../manager/ssl/tests/gtest/TLSIntoleranceTest.cpp | 76 +++++++++++++++++++---
 4 files changed, 90 insertions(+), 10 deletions(-)
2014-10-02 16:36:48 -07:00
Patrick McManus
9c3bce6805 bug 1003448 - HTTP/2 Alternate Service and Opportunistic Security [1/2 PSM] r=keeler 2014-08-20 16:30:16 -04:00
Phil Ringnalda
145d867409 Backed out 2 changesets (bug 1003448) since their dependency was backed out
CLOSED TREE

Backed out changeset 61f98b1d29f9 (bug 1003448)
Backed out changeset 8e947d1636f1 (bug 1003448)
2014-10-04 20:10:19 -07:00
Patrick McManus
235b069e72 bug 1003448 - HTTP/2 Alternate Service and Opportunistic Security [1/2 PSM] r=keeler 2014-08-20 16:30:16 -04:00
Martin Thomson
e3fc75fe11 Bug 1075991 - Remember version intolerance reason code, r=keeler 2014-10-03 11:01:24 -07:00
Trevor Saunders
d75ed5bf7f bug 1059490 - mark more classes MOZ_FINAL r=froydnj 2014-08-27 14:26:48 -04:00
J. Ryan Stinnett
ce8794da11 Bug 1040130 - Allow specifying a client cert for sockets. r=keeler, r=mcmanus 2014-08-07 16:32:00 -04:00
Patrick McManus
f8a14606da bug 1027720 - enforce h2 requirement that sever uses aead r=hurley r=dkeeler 2014-08-04 16:54:10 -04:00
Benoit Jacob
a0d5e2d502 Bug 1035394 - Fix dangerous public destructors in security/ - r=bsmith 2014-07-08 17:23:18 -04:00
Patrick McManus
1e673cbacc bug 1006804 - psm interface for kea size and make kea available in preliminary handshake r=keeler r=honzab 2014-05-06 17:22:25 -04:00
David Keeler
bf37f06673 bug 969479 - only prevent TLS fallback for STARTTLS r=briansmith 2014-02-20 15:14:32 -08:00
Brian Smith
188876d1dc Bug 961454: Clean up whitespace in key PSM files, r=keeler, r=cviecco
--HG--
extra : rebase_source : 53f14cc6f97814eb9913a1ddad1a19631e2af08a
2014-01-21 17:30:44 -08:00
Patrick McManus
0ef97ed6fd bug 951199 - Interface for Socket Level Access to TLS Version Used r=dkeeler r=bsmith 2013-10-09 17:21:48 -07:00
Patrick McManus
a72d594dd7 Bug 942729, Part 2: Remove unused expected symmetric cipher mechanism, r=briansmith
--HG--
extra : rebase_source : 9630808b663d6a670c2e45d242177a640817f2ee
2013-11-25 18:12:40 -05:00
Brian Smith
da55c6102d Bug 942729, Part 1: Re-enable TLS False Start, r=mcmanus
--HG--
extra : rebase_source : 9908b1cbc3a30e9868739a10a705de8dbf30c5e1
2013-11-20 13:49:33 -08:00
Chris Peterson
1d6f9e7c88 Bug 937459 - Remove unused private fields from nsNSSSocketInfo class. r=briansmith 2013-11-11 14:06:29 -08:00
Brian Smith
3842b267a1 Bug 754356: Remove TLS intolerance timeout logic, r=honzab
--HG--
extra : rebase_source : 49c4563800ce9727e11e08d857db44c1294a074b
2013-10-15 01:14:50 -07:00
Brian Smith
50c4793f62 Backed out changeset 673ca84a9171 because of wrong bug number in commit message
--HG--
extra : rebase_source : 32c92c4cb98097caf8805fdae98d9c435580c8c9
2013-10-26 00:51:47 -07:00
Brian Smith
bdc5f15a1f Bug 450280: Remove timeout logic for TLS intolerance, r=honzab 2013-10-15 01:14:50 -07:00
Brian Smith
71db6985d3 Bug 839310: Expand TLS intolerance logic to work for versions beyond TLS 1.0, r=keeler, r=wtc
--HG--
extra : rebase_source : b83a610d08abb428f0f6894fa935712f820ddfe8
2013-10-11 00:17:19 -07:00
Ehsan Akhgari
b9980dbc97 Bug 579517 follow-up: Remove NSPR types that crept in 2013-08-02 12:09:54 -04:00
Patrick McManus
1fdcea773a bug 658222 - Enable TLS False Start (PSM) r=bsmith
--HG--
extra : rebase_source : ac9f77ba73a0a902f4b6aa8d52add7d52efb1b53
2013-06-28 16:58:28 -04:00
Patrick McManus
a97c6a3a21 bug 848139 - telemetry for tls server hello size r=honzab
--HG--
extra : rebase_source : 5e8d1fa5e86ed7845cb196ad84539a6be024ca73
2013-03-26 20:06:15 -04:00
Patrick McManus
512a50e970 bug 845934 Telemetry for TLS Resumption rates r=honzab
--HG--
extra : rebase_source : 185c871273dcca7a84aafea5dc818033fcda945d
2013-03-26 20:06:14 -04:00
Josh Matthews
26bf429881 Bug 769288 - Part 7: Use separate SSL session cache entries for private connections. r=mayhemer 2012-12-07 17:57:53 -05:00
Josh Matthews
b36633903e Bug 769288 - Part 1: Make PSM more amenable to storing concurrent private and non-private data. r=bsmith 2012-12-06 22:05:27 -05:00
Ed Morley
6800e12c21 Backout d9336f8c0f6c, 761ff8b47a4e, 072da0be4236, ee2822d2eab9, 38cd815da29a, a80ec6b90878 & 9e9281ce1b63 (bug 769288) on suspicion of causing bug 821701 on a CLOSED TREE 2012-12-14 15:07:48 +00:00
Josh Matthews
fd92af3596 Bug 769288 - Part 7: Use separate SSL session cache entries for private connections. r=mayhemer 2012-12-07 17:57:53 -05:00
Josh Matthews
0f271f8e13 Bug 769288 - Part 1: Make PSM more amenable to storing concurrent private and non-private data. r=bsmith 2012-12-06 22:05:27 -05:00
Ehsan Akhgari
1dcb5ba1bb Backed out 7 changesets (bug 769288) because of leaks
Backed out changeset b2fb475b6e4e (bug 769288)
Backed out changeset 912331d0c2fd (bug 769288)
Backed out changeset 6d8d78bd56a9 (bug 769288)
Backed out changeset e75cd1e1fca3 (bug 769288)
Backed out changeset e10c24f10bd2 (bug 769288)
Backed out changeset 7b0fdedb4fa9 (bug 769288)
Backed out changeset 42b468942a84 (bug 769288)
2012-12-12 00:05:49 -05:00
Josh Matthews
9bf57bf266 Bug 769288 - Part 7: Use separate SSL session cache entries for private connections. r=mayhemer 2012-12-07 17:57:53 -05:00
Josh Matthews
92dd4d5edc Bug 769288 - Part 1: Make PSM more amenable to storing concurrent private and non-private data. r=bsmith 2012-12-06 22:05:27 -05:00
Josh Matthews
94a15456b1 Backed out changeset fca88031cd47 (bug 769288) 2012-12-08 00:21:58 -05:00
Josh Matthews
5a9c8601c0 Backed out changeset 9d37e0f7a2fc (bug 769288) 2012-12-08 00:21:47 -05:00
Josh Matthews
95c262c0d4 Bug 769288 - Part 7: Use separate SSL session cache entries for private connections. r=mayhemer 2012-12-07 17:57:53 -05:00
Josh Matthews
b5f51a281f Bug 769288 - Part 1: Make PSM more amenable to storing concurrent private and non-private data. r=bsmith 2012-12-06 22:05:27 -05:00
Josh Matthews
753a9e6a62 Backed out changeset 3008e6e5476f (bug 769288) 2012-12-07 19:45:57 -05:00
Josh Matthews
dd792dcc73 Backed out changeset d0f828b1cd26 (bug 769288) 2012-12-07 19:45:50 -05:00
Josh Matthews
ab1ce4e14c Bug 769288 - Part 7: Use separate SSL session cache entries for private connections. r=mayhemer 2012-12-07 19:12:26 -05:00
Josh Matthews
1aa569d5fd Bug 769288 - Part 1: Make PSM more amenable to storing concurrent private and non-private data. r=bsmith 2012-12-07 19:09:41 -05:00
Josh Matthews
cb22bd8de5 Bug 812794 - Make docshell STS usage use existing PB knowledge instead of digging in SSL internals. r=bz/bsmith 2012-11-28 11:24:03 -05:00
Patrick McManus
2f1cf659c1 bug 807435 telemetry for ssl handshake time r=bsmith r=honzab 2012-11-22 15:36:59 -05:00
Josh Matthews
e0bfa38e3b Bug 722979 - Add privacy status argument to relevant nsIStrictTransportSecurityService methods. r=bsmith sr=biesi 2012-06-30 07:34:17 -07:00
Ed Morley
0687c2b3aa Backout e123e0173185, 326ed6f1dc9e & 7c2c9c988869 (bug 722979) for mochitest-a11y failures 2012-11-16 15:06:13 +00:00
Josh Matthews
cdf21f169e Bug 722979 - Add privacy status argument to relevant nsIStrictTransportSecurityService methods. r=bsmith sr=biesi 2012-06-30 07:34:17 -07:00