Commit Graph

12684 Commits

Author SHA1 Message Date
ffxbld
973e21879e No bug, Automated HPKP preload list update from host bld-linux64-spot-030 - a=hpkp-update 2017-11-18 11:05:10 -08:00
ffxbld
aa9e3a35ac No bug, Automated HSTS preload list update from host bld-linux64-spot-030 - a=hsts-update 2017-11-18 11:05:07 -08:00
Gian-Carlo Pascutto
34be833347 Bug 1416016 - Add ../config to the sandbox whitelist for older Mesa. r=jld
MozReview-Commit-ID: KahivmVJR1l

--HG--
extra : rebase_source : 7d77f0ee77813a1214cfa5bc618b57c3208443c3
2017-11-17 15:23:28 +01:00
Gian-Carlo Pascutto
c979b7a21f Bug 1416808 - Add "$XDG_DATA_(HOME|DIRS)"/fonts to the sandbox whitelist. r=jld
MozReview-Commit-ID: DwwltKQg8x4

--HG--
extra : rebase_source : e92b60e320bb26e66bfb38039f141ec83a34fff7
2017-11-17 15:45:11 +01:00
Noemi Erli
696ac83de9 Merge mozilla-central to mozilla-autoland. r=merge a=merge CLOSED TREE 2017-11-18 02:55:06 +02:00
Noemi Erli
1d5be20b0d Merge autoland to mozilla-central r=merge a=merge 2017-11-18 00:00:22 +02:00
ffxbld
4f3980082f No bug, Automated HPKP preload list update from host bld-linux64-spot-035 - a=hpkp-update 2017-11-17 11:41:51 -08:00
ffxbld
794ea08b42 No bug, Automated HSTS preload list update from host bld-linux64-spot-035 - a=hsts-update 2017-11-17 11:41:47 -08:00
ffxbld
4da78d1a66 No bug, Automated HPKP preload list update from host bld-linux64-spot-030 - a=hpkp-update 2017-11-17 11:02:48 -08:00
ffxbld
8591b856f3 No bug, Automated HSTS preload list update from host bld-linux64-spot-030 - a=hsts-update 2017-11-17 11:02:45 -08:00
Bob Owen
5a64c2aeb7 Bug 1417959: Bump Alternate Desktop to Level 5 and make that the Default on Nightly. r=jimm 2017-11-16 18:10:00 +00:00
David Keeler
cdac966d1b bug 1417677 - remove "security.use_sqldb" and always use the sqlite-backed NSS DBs r=jcj
MozReview-Commit-ID: 2qoJz5gDPyY

--HG--
extra : rebase_source : 89ccda87138ac02004d290f621e9d53dcddc08ff
2017-11-15 15:24:58 -08:00
David Keeler
68dd6026ab bug 1418135 - asynchronously determine the chain to display in the details pane of the certificate viewer r=mgoodwin
The current certificate viewer uses "getChain" to determine what chain to show
in the details pane. This is problematic for a number of reasons including a)
it's synchronous (and potentially slow) and b) getChain may return something
almost entirely quite unlike any actual trusted path (see bug 1004580 comment
0).

This won't fix the whole problem (whatever's opening the certificate viewer
should really be passing in the chain itself), but that's hard, so this would at
least change the determination to be asynchronous and at least won't result in
something completely bogus.

MozReview-Commit-ID: J9uqRgxL52j

--HG--
extra : rebase_source : 0cb0a02564f7d962a57af90a9d1177ff41f064fe
2017-11-16 15:48:47 -08:00
Brindusan Cristian
cdb95907ba Merge mozilla-central to autoland r=merge a=merge on a CLOSED TREE 2017-11-16 00:41:40 +02:00
Brindusan Cristian
d0a4ab96a0 Merge inbound to mozilla-central r=merge a=merge 2017-11-16 00:24:15 +02:00
ffxbld
6c10f7d914 No bug, Automated HPKP preload list update from host bld-linux64-spot-036 - a=hpkp-update 2017-11-15 11:31:52 -08:00
ffxbld
393e147523 No bug, Automated HSTS preload list update from host bld-linux64-spot-036 - a=hsts-update 2017-11-15 11:31:48 -08:00
ffxbld
dd02544d02 No bug, Automated HPKP preload list update from host bld-linux64-spot-030 - a=hpkp-update 2017-11-15 10:54:33 -08:00
ffxbld
bab5f228d3 No bug, Automated HSTS preload list update from host bld-linux64-spot-030 - a=hsts-update 2017-11-15 10:54:29 -08:00
Jonathan Kew
304ec4c15e Bug 1417420 - Add the path used by FontAgent to the sandbox rules on macOS. r=haik 2017-11-15 17:59:44 +00:00
David Keeler
ab21773795 bug 1417277 - remove support for MOZPSM_NSSDBDIR_OVERRIDE r=jcj
MOZPSM_NSSDBDIR_OVERRIDE was added in bug 462919 for integration with xulrunner
applications. Upcoming changes we're aiming to make with how PSM handles NSS and
the certificate/key databases (e.g. making the sqlite-backed implementation
mandatory) mean we have to take this feature into account. xulrunner isn't
supported any longer. Searching the web for "MOZPSM_NSSDBDIR_OVERRIDE" yields
two kinds of results: mozilla-central source code and a man page for nss-gui,
which it seems is the only project that ever made use of
MOZPSM_NSSDBDIR_OVERRIDE (and hasn't been updated since 2013, from what I can
tell). I think it's fair to conclude that this isn't a widely-used (let alone
known) feature. To make development easier, we should remove it.

MozReview-Commit-ID: 56vcTYSzDPq

--HG--
extra : rebase_source : 683a65bcd79182c04524562bc26ed5925f5d902b
2017-11-14 16:38:34 -08:00
ffxbld
7af6788dd0 No bug, Automated HPKP preload list update from host bld-linux64-spot-038 - a=hpkp-update 2017-11-14 11:51:23 -08:00
ffxbld
1d90c326d7 No bug, Automated HSTS preload list update from host bld-linux64-spot-038 - a=hsts-update 2017-11-14 11:51:19 -08:00
ffxbld
e943551045 No bug, Automated HPKP preload list update from host bld-linux64-spot-030 - a=hpkp-update 2017-11-14 10:58:36 -08:00
ffxbld
cc72aaf33e No bug, Automated HSTS preload list update from host bld-linux64-spot-030 - a=hsts-update 2017-11-14 10:58:32 -08:00
Mark Banner
ba94a5128c Bug 1371293 - Fix instances of missing 'use strict;' in html files as found after ESLint 4 upgrade. r=mossop
MozReview-Commit-ID: 2q3nqLaXA3E

--HG--
extra : rebase_source : 971ee6ae4dd565ead6f4aa16e06638445ecc5da0
2017-10-31 16:40:37 +00:00
Andreea Pavel
3039b5c625 Backed out 1 changesets (bug 1417677) for failing security/manager/ssl/tests/unit/test_broken_fips.js r=backout on a CLOSED TREE
Backed out changeset 614a09e35ff0 (bug 1417677)
2017-11-17 12:49:16 +02:00
Ciure Andrei
fdbe147ffb Merge mozilla-central to autoland. r=merge a=merge CLOSED TREE 2017-11-17 12:09:31 +02:00
David Keeler
82c2e0ec18 bug 1413336 - (7/7) regenerate all the certificates! r=Cykesiopka
Also regenerate the test_signed_app.js testcases.

MozReview-Commit-ID: 483uNQT0wuG

--HG--
extra : rebase_source : 4dfddf89d151dceb970a1a9139a5c90e6b578f8c
2017-11-08 12:57:03 -08:00
David Keeler
cfc4721f33 bug 1413336 - (6/7) replace setComponentByName with direct property setters r=Cykesiopka
MozReview-Commit-ID: EIIzP04YHo9

--HG--
extra : rebase_source : bf04301265175f59a3db429667322caffeeeb767
2017-11-14 13:35:10 -08:00
David Keeler
d64022f084 bug 1413336 - (5/7) ensure text files generated by pycert et. al. have trailing newlines r=Cykesiopka
MozReview-Commit-ID: KduWJRzTxBp

--HG--
extra : rebase_source : 74c5baf9747a85d71bc93d7459a8b519b40f6dd4
2017-10-25 16:59:18 -07:00
David Keeler
d6bd3927e3 bug 1413336 - (4/7) make certificate serial number generation not depend on pyasn1 object string representation r=Cykesiopka
MozReview-Commit-ID: 69GjudEKwQM

--HG--
extra : rebase_source : 707413a77478e17a398fbb3c75eb27b64486b313
2017-11-08 14:12:03 -08:00
David Keeler
4a5bf460ad bug 1413336 - (3/7) fix pycert.py and pykey.py with respect to pyasn1/pyasn1-modules updates r=Cykesiopka
MozReview-Commit-ID: CsxOF7LdEHB

--HG--
extra : rebase_source : 09b901b640779a9fe33de9d8c160b6918e6f12f7
2017-11-08 13:23:17 -08:00
David Keeler
dcb596244e bug 1417677 - remove "security.use_sqldb" and always use the sqlite-backed NSS DBs r=jcj
MozReview-Commit-ID: 2qoJz5gDPyY

--HG--
extra : rebase_source : c84d7975fa30c753af7481d04e2db8c19daff180
2017-11-15 15:24:58 -08:00
David Keeler
2d6eb184f1 bug 1368868 - give up on ocsp stapling strictness because we can't have nice things r=jcj
MozReview-Commit-ID: nbX0c251oC

--HG--
extra : rebase_source : 2adda43c5ea137c17474e4b9303107f4ba3815ff
2017-11-08 15:50:26 -08:00
David Keeler
d49916e353 bug 1415991 - remove support for signed unpacked addons r=jcj,rhelmer
Unfortunately we have a number of add-on installation tests that rely on
unpacked addons verifying as signed. The test infrastructure achieves this by
monkey-patching nsIX509CertDB.verifySignedDirectoryAsync to always succeed.
These tests are, in general, not actually testing the successful verification of
signed unpacked add-ons but rather other aspects of add-on installation,
updating, etc.. Some of these tests are certainly no longer relevant now that
legacy add-ons aren't supported, but we don't have the time to go through all of
them at the moment (this blocks updating add-on signature verification to use
COSE signatures, which we need to ship in 59 or we're probably not shipping at
all).

MozReview-Commit-ID: 3TVPK703mUy

--HG--
extra : rebase_source : 5bf0b72a4d7c8ade702334345fdc3bf6a8761b15
2017-11-09 11:19:23 -08:00
Csoregi Natalia
e520b4f458 Merge mozilla-central to mozilla-autoland. r=merge a=merge CLOSED TREE 2017-11-14 00:59:27 +02:00
ffxbld
6f5e1e666f No bug, Automated HPKP preload list update from host bld-linux64-spot-031 - a=hpkp-update 2017-11-13 11:38:59 -08:00
ffxbld
4d11774312 No bug, Automated HSTS preload list update from host bld-linux64-spot-031 - a=hsts-update 2017-11-13 11:38:56 -08:00
ffxbld
96d2701aef No bug, Automated HPKP preload list update from host bld-linux64-spot-030 - a=hpkp-update 2017-11-13 10:56:59 -08:00
ffxbld
02130351db No bug, Automated HSTS preload list update from host bld-linux64-spot-030 - a=hsts-update 2017-11-13 10:56:56 -08:00
ffxbld
8802fbf292 No bug, Automated HPKP preload list update from host bld-linux64-spot-033 - a=hpkp-update 2017-11-12 11:35:21 -08:00
ffxbld
014fe21cbb No bug, Automated HSTS preload list update from host bld-linux64-spot-033 - a=hsts-update 2017-11-12 11:35:17 -08:00
ffxbld
54eff2095e No bug, Automated HPKP preload list update from host bld-linux64-spot-030 - a=hpkp-update 2017-11-12 11:06:31 -08:00
ffxbld
f5ee17bd6f No bug, Automated HSTS preload list update from host bld-linux64-spot-030 - a=hsts-update 2017-11-12 11:06:28 -08:00
ffxbld
14b2379843 No bug, Automated HPKP preload list update from host bld-linux64-spot-036 - a=hpkp-update 2017-11-11 11:46:19 -08:00
ffxbld
844ee0c1d3 No bug, Automated HSTS preload list update from host bld-linux64-spot-036 - a=hsts-update 2017-11-11 11:46:15 -08:00
ffxbld
a99e2a57b4 No bug, Automated HPKP preload list update from host bld-linux64-spot-030 - a=hpkp-update 2017-11-11 11:07:18 -08:00
ffxbld
0411746801 No bug, Automated HSTS preload list update from host bld-linux64-spot-030 - a=hsts-update 2017-11-11 11:07:14 -08:00
Jed Davis
873f611a48 Bug 1401786 - Move the Linux sandboxing parts of GeckoChildProcessHost into security/sandbox. r=gcp
MozReview-Commit-ID: JknJhF5umZc

--HG--
extra : rebase_source : 2fa246e9a8b350becc21ed5bfd69820d3a321064
2017-10-06 17:15:46 -06:00