Commit Graph

12315 Commits

Author SHA1 Message Date
Wes Kocher
3a1e5b73d3 Merge autoland to central, a=merge
MozReview-Commit-ID: 9UQPQrkhjsZ
2017-09-25 16:25:22 -07:00
ffxbld
cf9c6529ef No bug, Automated HPKP preload list update from host bld-linux64-spot-307 - a=hpkp-update 2017-09-25 10:41:00 -07:00
ffxbld
13d0d05c38 No bug, Automated HSTS preload list update from host bld-linux64-spot-307 - a=hsts-update 2017-09-25 10:40:56 -07:00
Sebastian Hengst
c0203b7b61 merge mozilla-inbound to mozilla-central. r=merge a=merge
MozReview-Commit-ID: HGJIeJkelZe
2017-09-24 23:52:35 +02:00
ffxbld
f6dc0e40b5 No bug, Automated HPKP preload list update from host bld-linux64-spot-301 - a=hpkp-update 2017-09-24 10:43:38 -07:00
ffxbld
9fb62f395f No bug, Automated HSTS preload list update from host bld-linux64-spot-301 - a=hsts-update 2017-09-24 10:43:34 -07:00
ffxbld
3d38c3ccc5 No bug, Automated HPKP preload list update from host bld-linux64-spot-306 - a=hpkp-update 2017-09-23 10:33:39 -07:00
ffxbld
d4542c60a8 No bug, Automated HSTS preload list update from host bld-linux64-spot-306 - a=hsts-update 2017-09-23 10:33:35 -07:00
ffxbld
c92594521f No bug, Automated HPKP preload list update from host bld-linux64-spot-360 - a=hpkp-update 2017-09-22 20:41:32 -07:00
ffxbld
8efdfac860 No bug, Automated HSTS preload list update from host bld-linux64-spot-360 - a=hsts-update 2017-09-22 20:41:29 -07:00
ffxbld
56ad02e34d No bug, Automated HPKP preload list update from host bld-linux64-spot-304 - a=hpkp-update 2017-09-22 10:34:18 -07:00
ffxbld
fce8a1a7fd No bug, Automated HSTS preload list update from host bld-linux64-spot-304 - a=hsts-update 2017-09-22 10:34:14 -07:00
David Keeler
4c42c44c85 bug 1401796 - fix HSTS preload script to keep preexisting hosts if there was a connection error r=jcj DONTBUILD NPOTB
Bug 1255425 changed an 'of' to an 'in', which caused the code that would keep
preexisting entries on the preload list if there was a connection error to loop
over the indices in the array and not the values themselves. Thanks, JavaScript.

MozReview-Commit-ID: DvVWhpImp8n

--HG--
extra : rebase_source : 149c8d0fb46d3b71a9de19aaedfb5e0dd5b9a460
2017-09-25 11:00:21 -07:00
Chris Peterson
5698729243 Bug 870698 - Part 10: Replace Append(NS_LITERAL_STRING("")) with AppendLiteral(u""). r=erahm
The NS_LITERAL_STRING macro creates a temporary nsLiteralString to encapsulate the char16_t string literal and its length, but AssignLiteral() can determine the char16_t string literal's length at compile-time without nsLiteralString.

MozReview-Commit-ID: H9I6vNDMdIr

--HG--
extra : rebase_source : cf537a1f65af003c6c4f8919b925b0f305c1dd4d
extra : source : 13b89ce4e6a66c840f82a335c71f5a12938aba22
2017-09-07 18:32:54 -07:00
Chris Peterson
a0c8081df4 Bug 870698 - Part 4: Replace Equals("") with EqualsLiteral(""). r=erahm
MozReview-Commit-ID: G1GhyvD29WK

--HG--
extra : rebase_source : 115842c37a40041bdca7b4e1ff0a5680b02ced15
extra : source : 90bfff9c01d80086cdc17637f310e898fea295ea
2017-09-06 01:13:45 -07:00
Chris Peterson
45aa2a8e8e Bug 870698 - Part 2: Replace Append("") with AppendLiteral(""). r=erahm
MozReview-Commit-ID: CrkIP4iHP1U

--HG--
extra : rebase_source : 5dc4e91a3f1860773c199f1abf3f66479218834a
extra : intermediate-source : ba51cc79847f2b43ba616f4a5d2bbc6958ca9f6d
extra : source : 1fda2fa990cc918c748ffa14fcc5dbe13fe3bdc3
2017-09-03 22:14:11 -07:00
Chris Peterson
9f4c1f5278 Bug 870698 - Part 1: Replace Assign("") with AssignLiteral(""). r=erahm
MozReview-Commit-ID: A0u9PP49OW3

--HG--
extra : rebase_source : 7d5286959f510eb4b7df1b7e32d5b9b58719c48b
extra : intermediate-source : f552b4a78236c42bc09030b3eb008725a3edb9c8
extra : source : 26ac4a1014f6661a70e3bf9f552407e12c2c3981
2017-09-03 22:12:56 -07:00
Wes Kocher
bedaaf0009 Merge autoland to central, a=merge
MozReview-Commit-ID: KNeXnxjnn5u
2017-09-21 16:29:32 -07:00
ffxbld
ec671e96e6 No bug, Automated HPKP preload list update from host bld-linux64-spot-302 - a=hpkp-update 2017-09-21 10:46:13 -07:00
ffxbld
7ecdba9161 No bug, Automated HSTS preload list update from host bld-linux64-spot-302 - a=hsts-update 2017-09-21 10:46:09 -07:00
Jed Davis
d64e9b800d Bug 1396542 - Let sandboxed content processes read /var/lib/dbus/machine-id. r=gcp
PulseAudio is the only thing that's known to need this.  Note that the
same file often exists as /etc/machine-id, and we currently allow reading
all of /etc (which includes other fingerprinting hazards as well).

MozReview-Commit-ID: FoyKQzhAV6M

--HG--
extra : rebase_source : 593ee0b94cf507681a034d22cd06a9050d56b86a
2017-09-19 19:54:41 -06:00
Valentin Gosu
7822c999e1 Bug 910207 - Disable preconnect when user certificates are installed r=keeler
MozReview-Commit-ID: 1vGPxDCAcQR

--HG--
extra : rebase_source : 3dda6f50ddbe1e03c7b7625c6039cb20896ef05e
2017-09-19 01:51:41 +02:00
ffxbld
2ef8bd8a46 No bug, Automated HPKP preload list update from host bld-linux64-spot-306 - a=hpkp-update 2017-09-20 10:26:32 -07:00
ffxbld
0ca9f5fd6b No bug, Automated HSTS preload list update from host bld-linux64-spot-306 - a=hsts-update 2017-09-20 10:26:28 -07:00
Franziskus Kiefer
260bd8768a Bug 1386955 - land NSS_3_33_RTM, no code changes, only version numbers, UPGRADE_NSS_RELEASE, r=me
MozReview-Commit-ID: GjKGBcoghDh

--HG--
extra : amend_source : f33a891a76d22de7f9d6a985cf744523c9e7ed18
2017-09-20 09:10:07 +02:00
Wes Kocher
2d19ba5cc6 Merge autoland to central, a=merge
MozReview-Commit-ID: Eh11kawjrJB
2017-09-19 14:05:54 -07:00
ffxbld
d08b24e613 No bug, Automated HPKP preload list update from host bld-linux64-spot-304 - a=hpkp-update 2017-09-19 10:33:25 -07:00
ffxbld
6353638e7a No bug, Automated HSTS preload list update from host bld-linux64-spot-304 - a=hsts-update 2017-09-19 10:33:21 -07:00
J.C. Jones
a986ec2088 Bug 1399959 - Prefer hardware instead of software U2F tokens r=keeler
Bug 1388851 adds hardware U2F support to Gecko; the instructions to test
involve flipping two prefs, but the common case will be using harwdare tokens,
so this patch makes users only haave to flip the "security.webauth.u2f" or
"security.webauth.webauthn" prefs as they choose.

MozReview-Commit-ID: 346120ZI8p4

--HG--
extra : rebase_source : fa491214d3b5532ea7e4843a9e52a19ab432a925
2017-09-14 10:51:20 -07:00
David Keeler
bae8112f6b bug 1400913 - back out the functionality changes from bug 1364159 (but keep the test) r=jcj
Bug 1364159 introduced an optimization that attempted to avoid reading from the
user's cached certificate database as much as possible when building a verified
certificate chain. Unfortunately this had the side-effect of not preferring root
certificates in path building, which can result in unnecessarily long chains
(which rather defeats the purpose, since it means more signature verifications).
This patch reverts the functionality changes from that bug but keeps the test
that was added (the test didn't directly test the functionality changes - it's
more of a check that path building will query the cached certificate db when
necessary).

MozReview-Commit-ID: I56THTLUytH

--HG--
extra : rebase_source : 7db9597e25b98942450840519d707046cc660781
2017-09-18 10:28:58 -07:00
Wes Kocher
519bb0922b Merge inbound to central, a=merge
MozReview-Commit-ID: EK8iFR1hSRp
2017-09-18 16:21:01 -07:00
ffxbld
1c13d5cf85 No bug, Automated HPKP preload list update from host bld-linux64-spot-301 - a=hpkp-update 2017-09-18 10:35:17 -07:00
ffxbld
ccaa664c63 No bug, Automated HSTS preload list update from host bld-linux64-spot-301 - a=hsts-update 2017-09-18 10:35:13 -07:00
David Keeler
b21e2ea33f bug 1368652 - test that viewing a certificate with a long OID doesn't crash the browser r=Cykesiopka
MozReview-Commit-ID: JhUvDEJJvJy

--HG--
extra : rebase_source : 37046eb12c04f93e869c0a8b108bcf504ccaabae
2017-09-15 14:18:27 -07:00
ffxbld
05c4c3bc0c No bug, Automated HPKP preload list update from host bld-linux64-spot-302 - a=hpkp-update 2017-09-17 10:41:04 -07:00
ffxbld
9398bc50e1 No bug, Automated HSTS preload list update from host bld-linux64-spot-302 - a=hsts-update 2017-09-17 10:41:01 -07:00
ffxbld
6769c4c331 No bug, Automated HPKP preload list update from host bld-linux64-spot-304 - a=hpkp-update 2017-09-16 10:23:59 -07:00
ffxbld
9d03c0efa0 No bug, Automated HSTS preload list update from host bld-linux64-spot-304 - a=hsts-update 2017-09-16 10:23:56 -07:00
ffxbld
184f0c7888 No bug, Automated HPKP preload list update from host bld-linux64-spot-361 - a=hpkp-update 2017-09-15 10:33:02 -07:00
ffxbld
2d79ffc5bb No bug, Automated HSTS preload list update from host bld-linux64-spot-361 - a=hsts-update 2017-09-15 10:32:58 -07:00
Sebastian Hengst
220e7cecae merge mozilla-central to autoland. r=merge a=merge 2017-09-15 00:01:52 +02:00
Sebastian Hengst
dfb0dfbb5e merge autoland to mozilla-inbound. r=merge a=merge
MozReview-Commit-ID: 1gVeCMsyp4B
2017-09-14 23:56:36 +02:00
ffxbld
60074a5f28 No bug, Automated HPKP preload list update from host bld-linux64-spot-306 - a=hpkp-update 2017-09-14 10:42:33 -07:00
ffxbld
b549e15598 No bug, Automated HSTS preload list update from host bld-linux64-spot-306 - a=hsts-update 2017-09-14 10:42:30 -07:00
David Keeler
eae47e2f71 bug 805305 - remove nsIDataSignatureVerifier.verifySignature r=mgoodwin
MozReview-Commit-ID: 9QyN7VzGJN0

--HG--
extra : rebase_source : 8c89004a192291dd0703e3e52f8fb7f36b467bc5
2017-09-01 16:21:37 -07:00
David Keeler
9f77404d3f bug 1398932 - add a preference for enabling the sqlite-backed NSS databases r=Cykesiopka,jcj
In the future, bug 1377940 will make the sqlite-backed databases the default,
but until we're sure this will stick we want to be able to control this with a
Firefox-only change. The use of a preference to configure which format to use
will hopefully allow us to restore the old behavior quickly and relatively
safely if necessary. Note that doing this should be done with care; any changes
made in the sqlite databases after upgrade migration will not be reflected if
we need to go back to the old database format. Thus, user data (imported CAs,
client certificates, and keys) can be lost.

MozReview-Commit-ID: tkovdiCU9v

--HG--
extra : rebase_source : e74358bd65afb5844fa8fc5b729eba2bbc5bb2db
2017-09-06 14:31:27 -07:00
Sebastian Hengst
45bab258b7 merge mozilla-central to autoland. r=merge a=merge 2017-09-14 00:11:28 +02:00
Sebastian Hengst
006a58c35d merge mozilla-inbound to mozilla-central. r=merge a=merge
MozReview-Commit-ID: 2iVDKexRjxu
2017-09-13 23:58:43 +02:00
ffxbld
6326724982 No bug, Automated HPKP preload list update from host bld-linux64-spot-308 - a=hpkp-update 2017-09-13 10:23:19 -07:00
ffxbld
72ed6c99a5 No bug, Automated HSTS preload list update from host bld-linux64-spot-308 - a=hsts-update 2017-09-13 10:23:16 -07:00