Commit Graph

4210 Commits

Author SHA1 Message Date
Carsten "Tomcat" Book
a581a8b8cf merge mozilla-inbound to mozilla-central a=merge 2016-10-31 16:46:52 +01:00
ffxbld
af354e2cd2 No bug, Automated HPKP preload list update from host bld-linux64-spot-1051 - a=hpkp-update 2016-10-31 06:17:02 -07:00
ffxbld
cd6a7d7a59 No bug, Automated HSTS preload list update from host bld-linux64-spot-1051 - a=hsts-update 2016-10-31 06:17:00 -07:00
Jan de Mooij
31df59e394 Bug 1311996 - Fix code using pkix::Result to not conflict with the new mozilla::Result type. r=keeler 2016-10-31 10:05:13 +01:00
Phil Ringnalda
3db0ee3365 Merge autoland to m-c, a=merge 2016-10-30 10:53:33 -07:00
ffxbld
93d39ecc5c No bug, Automated HPKP preload list update from host bld-linux64-spot-1055 - a=hpkp-update 2016-10-30 06:08:21 -07:00
ffxbld
d2d7721e09 No bug, Automated HSTS preload list update from host bld-linux64-spot-1055 - a=hsts-update 2016-10-30 06:08:18 -07:00
ffxbld
6c19ab9e79 No bug, Automated HPKP preload list update from host bld-linux64-spot-543 - a=hpkp-update 2016-10-29 06:17:25 -07:00
ffxbld
aa8dd034ae No bug, Automated HSTS preload list update from host bld-linux64-spot-543 - a=hsts-update 2016-10-29 06:17:23 -07:00
Ryan VanderMeulen
a41f7d1058 Merge autoland to m-c. a=merge 2016-10-29 09:12:45 -04:00
ffxbld
0ba65ec330 No bug, Automated HPKP preload list update from host bld-linux64-spot-444 - a=hpkp-update 2016-10-28 06:14:10 -07:00
ffxbld
c08bfc0b64 No bug, Automated HSTS preload list update from host bld-linux64-spot-444 - a=hsts-update 2016-10-28 06:14:07 -07:00
ffxbld
975f18d109 No bug, Automated HPKP preload list update from host bld-linux64-spot-246 - a=hpkp-update 2016-10-27 06:28:34 -07:00
ffxbld
03a754c9e1 No bug, Automated HSTS preload list update from host bld-linux64-spot-246 - a=hsts-update 2016-10-27 06:28:31 -07:00
Martin Thomson
c09374be30 Bug 1311383 - Use unique pointers for DTLS transport and related, r=Cykesiopka
MozReview-Commit-ID: 79wKQtJjBNP

--HG--
extra : rebase_source : 1f5c7f2417c25d17fb99bc55eff8a6b2e5a333ba
2016-10-20 11:29:58 +11:00
Sergei Chernov
8e3719b7e2 Bug 1305289 - Certificate Transparency - basic UI indicator; r=Dolske,keeler
MozReview-Commit-ID: b0SUW2WNJT

--HG--
extra : rebase_source : 2bfa8895246f862f3e49c0c9674a8e862137f8a6
2016-09-28 20:19:56 +03:00
David Keeler
544761d217 bug 1309707 - revoke StartCom and WoSign certificates issued after 21 October 2016 r=Cykesiopka,jcj
MozReview-Commit-ID: 1itMZuWY9HO

--HG--
extra : rebase_source : 5e46c04d959ab1b6e7c961e0b5d4fff7ad6417bc
2016-10-12 17:02:33 -07:00
Cykesiopka
a64f9baa1e Bug 1312152 - Stop using nsIDialogParamBlock in the client auth UI. r=keeler
nsIDialogParamBlock isn't a great API, and is best avoided.

MozReview-Commit-ID: 2B0HkKNJizo

--HG--
extra : rebase_source : a05e7a05ff0745f26d08616a74b532bc8a37c4fd
2016-10-23 12:57:41 +08:00
Cykesiopka
1c951538c1 Bug 1312154 – Stop using nsIDialogParamBlock in downloadcert.(js|xul). r=keeler
nsIDialogParamBlock isn't a great API, and is best avoided.

This patch also updates downloadcert.js to match modern PSM style, and adds a
test.

MozReview-Commit-ID: J2g2H0iBAn4

--HG--
extra : rebase_source : 9365f7b1c7a88caef84f0353e18510dcab9a5d32
2016-10-28 02:13:38 +08:00
David Keeler
b3a0669843 bug 1227638 - deterministically load EV information r=Cykesiopka,mgoodwin
Previously PSM would load EV information on-demand (i.e. just before verifying a
certificate). This simplifies this operation, removes a dubious optimization
(loading the EV information on another thread while opening a network
connection), and relocates the loading operation to when we are likely to have
good disk locality (i.e. when we've just loaded the built-in roots module).

This also removes the now-unused MOZ_NO_EV_CERTS build flag.

MozReview-Commit-ID: 8Rnl4ozF95V

--HG--
extra : rebase_source : 5b2e76079c256f7e3c55b1d4ec0d9f654fec44f6
2016-09-30 18:08:08 -07:00
Cykesiopka
7658cbf8e1 Bug 1308888 - Simplify passing handle to the cert to view in the cert viewer. r=keeler
The cert viewer currently supports two ways to pass a handle to the cert:
1. Passing the nickname of the cert via window.name.
2. Via an nsIDialogParamBlock, which is itself accessed through window.arguments.

Method 1 is unused and unnecessary.
Method 2 is overly complex: the relevant nsIX509Cert can just be passed directly.

This patch does the following:
1. Makes it so that there is only a single, straightforward way to pass a handle
to the cert.
2. Makes the cert viewer title localisable while we're nearby.
3. Renames viewCertDetails.js to better reflect the current use of the file.

MozReview-Commit-ID: pqtfNgvImT

--HG--
rename : security/manager/pki/resources/content/viewCertDetails.js => security/manager/pki/resources/content/certViewer.js
extra : rebase_source : 776a27111ab26cdcdc91b002890c43a3fe4f48e8
2016-10-21 00:33:36 +08:00
David Keeler
83858eab7a bug 1311077 - fix builtin root module loading so it works in Android Cpp unit tests r=Cykesiopka
Also updates the relevant test (TestCertDB) to ensure that we actually are
loading builtin root certificates.

MozReview-Commit-ID: LXA4TqTzy8T

--HG--
extra : rebase_source : d217556e84a7e205e0f9e767b759d1b637d201a7
2016-10-19 15:14:23 -07:00
Carsten "Tomcat" Book
bbfd099b2d Merge mozilla-central to autoland 2016-10-20 17:27:57 +02:00
Carsten "Tomcat" Book
d16ac34f1a merge autoland to mozilla-central a=merge 2016-10-20 16:45:10 +02:00
ffxbld
5337d18d89 No bug, Automated HPKP preload list update from host bld-linux64-spot-564 - a=hpkp-update 2016-10-20 06:10:28 -07:00
ffxbld
fc9e549c58 No bug, Automated HSTS preload list update from host bld-linux64-spot-564 - a=hsts-update 2016-10-20 06:10:26 -07:00
ffxbld
d5f9186028 No bug, Automated HPKP preload list update from host bld-linux64-spot-055 - a=hpkp-update 2016-10-19 06:25:18 -07:00
ffxbld
8a0e5bae33 No bug, Automated HSTS preload list update from host bld-linux64-spot-055 - a=hsts-update 2016-10-19 06:25:15 -07:00
Phil Ringnalda
132355644f Merge autoland to m-c, a=merge
MozReview-Commit-ID: 2J6HdCmNCBt
2016-10-18 19:25:30 -07:00
ffxbld
74c5c967e1 No bug, Automated HPKP preload list update from host bld-linux64-spot-1050 - a=hpkp-update 2016-10-18 06:07:00 -07:00
ffxbld
e0ebfa5961 No bug, Automated HSTS preload list update from host bld-linux64-spot-1050 - a=hsts-update 2016-10-18 06:06:58 -07:00
Cykesiopka
4f5d6e28c5 Bug 1267012 - Update and re-enable test_signed_dir.js. r=keeler
test_signed_dir.js was previously disabled for perma-failing after a year or so.
The reason was that the signature for sslcontrol.xpi (the test extension used in
the test) expired. Bug 1267318 fixed this expiry problem in general by simply
ignoring expired signatures.

This patch does the following:
1. Replaces sslcontrol.xpi with a newer extension.
Lightbeam is now used for this purpose, since it is still hosted on AMO, is
a Mozilla extension, and is MPL2 code.
2. Moves the test extension outside of test_signed_apps/.
The extension and the test itself have nothing to do with the rest of the files
in that directory.
3. Makes misc improvements to the test file.

MozReview-Commit-ID: 8uLDS5ypycO

--HG--
extra : rebase_source : 71eb9c560e5ced80e05e9672c27923e87e0bee3f
2016-10-18 17:35:23 +08:00
Cykesiopka
817eb91a1d Bug 332442 - Stop abusing window name to pass cert ref to editcerts.js. r=mgoodwin
editcacert.xul/editcerts.js currently requires the |dbKey| attribute of an
nsIX509Cert to be passed to it via the window name so it can get a handle to the
nsIX509Cert.

This has two problems:
1. This used to trigger warnings, and is unwise to do in any case.
2. It's unnecessary complexity - the nsIX509Cert can be passed directly.

This patch:
1. Addresses the two problems.
2. Adds a test to ensure the functionality of editcerts.js actually works.
3. Rewrites editcerts.js to better fit modern PSM style.
4. Updates the name of editcerts.js so it's more consistent with the general
   convention under security/pki/resources/content

MozReview-Commit-ID: ECxziXq5TmL

--HG--
rename : security/manager/pki/resources/content/editcerts.js => security/manager/pki/resources/content/editcacert.js
extra : rebase_source : ae140466dccf947cd28cbda102c1e5b3ea0eb9d4
2016-10-18 00:02:42 +08:00
Cykesiopka
05c6ec703e Bug 332442 - Keep track of and delete imported certs in head.js instead of in various test files. r=mgoodwin
head.js is run/included for every test file in the same folder, so having it
keep track of and clean up imported certs reduces the amount of duplication.

MozReview-Commit-ID: 23482qadMiy

--HG--
extra : rebase_source : e74ebc2d38b4abc58cc344742c98919e137e08ba
2016-10-18 00:02:41 +08:00
ffxbld
16e684b72e No bug, Automated HPKP preload list update from host bld-linux64-spot-156 - a=hpkp-update 2016-10-17 06:25:23 -07:00
ffxbld
82b24d5497 No bug, Automated HSTS preload list update from host bld-linux64-spot-156 - a=hsts-update 2016-10-17 06:25:21 -07:00
Carsten "Tomcat" Book
d6850a3a86 merge mozilla-inbound to mozilla-central a=merge 2016-10-17 11:19:02 +02:00
ffxbld
4e247de866 No bug, Automated HPKP preload list update from host bld-linux64-spot-134 - a=hpkp-update 2016-10-16 06:21:50 -07:00
ffxbld
9a7e67a66a No bug, Automated HSTS preload list update from host bld-linux64-spot-134 - a=hsts-update 2016-10-16 06:21:48 -07:00
ffxbld
9162fce48a No bug, Automated HPKP preload list update from host bld-linux64-spot-080 - a=hpkp-update 2016-10-15 06:28:56 -07:00
ffxbld
202e5b97d9 No bug, Automated HSTS preload list update from host bld-linux64-spot-080 - a=hsts-update 2016-10-15 06:28:53 -07:00
ffxbld
93292bd3af No bug, Automated HPKP preload list update from host bld-linux64-spot-086 - a=hpkp-update 2016-10-14 06:11:47 -07:00
ffxbld
39efe2c373 No bug, Automated HSTS preload list update from host bld-linux64-spot-086 - a=hsts-update 2016-10-14 06:11:44 -07:00
David Keeler
238b27055a bug 1282008 - update CNNIC whitelist to remove expired certificates r=rbarnes
MozReview-Commit-ID: 1OopsrAxXrv

--HG--
extra : rebase_source : 49813d3da508059f503304a98aa8a03777d4f4ce
2016-10-06 14:45:51 -07:00
ffxbld
f1169649f0 No bug, Automated HPKP preload list update from host bld-linux64-spot-088 - a=hpkp-update 2016-10-13 06:23:21 -07:00
ffxbld
c7cf503569 No bug, Automated HSTS preload list update from host bld-linux64-spot-088 - a=hsts-update 2016-10-13 06:23:19 -07:00
Wes Kocher
727d0de706 Merge m-c to inbound, a=merge CLOSED TREE 2016-10-14 14:51:44 -07:00
Kate McKinley
26490f6904 Bug 1310955 - Fix nsSiteSecurityService cache retrieval r=ckerschb,keeler
MozReview-Commit-ID: 55DpKrqcL1x

--HG--
extra : rebase_source : 5e068cc70c45dd1844a0e59559875cde659f202a
2016-10-18 20:09:15 +09:00
Wes Kocher
2337995bb0 Merge m-c to autoland, a=merge 2016-10-12 14:44:21 -07:00
Carsten "Tomcat" Book
6c0aec63b8 Merge mozilla-central to mozilla-inbound 2016-10-12 12:03:34 +02:00