John Schanck
7f3ed4068d
Bug 1802996 - land NSS NSS_3_86_RTM UPGRADE_NSS_RELEASE, r=bbeurdouche
...
Differential Revision: https://phabricator.services.mozilla.com/D164263
2022-12-08 20:51:52 +00:00
ffxbld
255408cc51
No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D164198
2022-12-08 14:23:48 +00:00
Dana Keeler
88838b311a
Bug 1801016: remove expiring telemetry "security.psm_ui_interaction" r=djackson
...
Differential Revision: https://phabricator.services.mozilla.com/D163972
2022-12-07 17:30:21 +00:00
Natalia Kulatova
9e6457328f
Bug 1802319 - Modification of the bug "Consider removing ECDSA_SHA1 signature algorithm". r=keeler
...
Differential Revision: https://phabricator.services.mozilla.com/D162999
2022-12-07 11:34:55 +00:00
Mark Banner
ff47c36f9b
Bug 1803914
- Automatically replace Cu.reportError with console.error (misc). r=mossop
...
Differential Revision: https://phabricator.services.mozilla.com/D163772
2022-12-06 14:34:57 +00:00
Valentin Gosu
c5dcc9435f
Bug 1797279 - Add nsINSSComponent.asyncClearSSLExternalAndInternalSessionCache that waits for socket process to clear the cache r=keeler,necko-reviewers,kershaw
...
This is a test only method, and the fact that the operation is not sync
with socket process can possibly cause racy tests.
This patch adds an async version of clearSSLExternalAndInternalSessionCache
that returns a promise.
Differential Revision: https://phabricator.services.mozilla.com/D162153
2022-12-06 10:36:10 +00:00
Jed Davis
21e1f65696
Bug 1784517
- Explicitly skip sandboxing tests on unsandboxed build types. r=jmaher
...
There are tools which consume `moz.build` files by reading every one in
the tree, rather than traversing `DIRS` for a specific build type (see
bug 1667271
comment #89 for background); as a result, we can end up with
CI test jobs that try to run sandboxing tests on build types like Linux
ASan where `security/sandbox` isn't built, and fail.
This patch applies a suggested workaround: add an otherwise redundant
`skip-if` declaration to the test manifests to skip them on the platforms
where they're not part of the build.
Note that sandboxing is disabled in the presence of Linux ASan or TSan
by logic in `toolkit/moz.configure`, but for code coverage builds it's
done via the CI mozconfig files adding `--disable-sandbox`.
Differential Revision: https://phabricator.services.mozilla.com/D163411
2022-12-05 21:23:32 +00:00
ffxbld
3026e10680
No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D163821
2022-12-05 14:05:21 +00:00
John Schanck
282382a80f
Bug 1802996 - land NSS NSS_3_86_BETA1 UPGRADE_NSS_RELEASE, r=keeler
...
Differential Revision: https://phabricator.services.mozilla.com/D163641
2022-12-03 21:47:31 +00:00
John M. Schanck
06c7606fd3
Bug 1803704 - Disable EV Treatment for "Network Solutions Certificate Authority". r=keeler
...
Differential Revision: https://phabricator.services.mozilla.com/D163735
2022-12-02 18:41:39 +00:00
Cristian Tuns
5eaed27bd7
Backed out changeset 4534fc16cb5c (bug 1802996) for causing multiple failures UPGRADE_NSS_RELEASE CLOSED TREE
2022-12-01 18:47:20 -05:00
John Schanck
399c57a914
Bug 1802996 - land NSS NSS_3_86_BETA1 UPGRADE_NSS_RELEASE, r=keeler
...
Differential Revision: https://phabricator.services.mozilla.com/D163641
2022-12-01 21:41:21 +00:00
Yannis Juglaret
8b95e44d5b
Bug 1800933 - Let ACG in RDD and WMF ride the trains. r=bobowen
...
Differential Revision: https://phabricator.services.mozilla.com/D163585
2022-12-01 14:11:15 +00:00
ffxbld
7f88fb67c4
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D163574
2022-12-01 13:09:16 +00:00
Mike Hommey
94c0c63594
Bug 1801029 - Upgrade bindgen to 0.63.0. r=emilio,necko-reviewers,supply-chain-reviewers,kershaw
...
Differential Revision: https://phabricator.services.mozilla.com/D163375
2022-11-30 22:06:50 +00:00
Marian-Vasile Laza
9414231a2f
Backed out 3 changesets (bug 1797279, bug 1800758) for causing xpcshell failures on test_httpssvc_retry_with_ech.js. CLOSED TREE
...
Backed out changeset 8de777d3d624 (bug 1797279)
Backed out changeset daf5d55079db (bug 1797279)
Backed out changeset 40c7d48e81f6 (bug 1800758)
2022-11-30 21:08:34 +02:00
Valentin Gosu
bee1b0905e
Bug 1797279 - Add nsINSSComponent.asyncClearSSLExternalAndInternalSessionCache that waits for socket process to clear the cache r=keeler,necko-reviewers,kershaw
...
This is a test only method, and the fact that the operation is not sync
with socket process can possibly cause racy tests.
This patch adds an async version of clearSSLExternalAndInternalSessionCache
that returns a promise.
Differential Revision: https://phabricator.services.mozilla.com/D162153
2022-11-30 13:37:11 +00:00
Alexandre Lissy
225f9f94b2
Bug 1802513 - Allow readlink(/proc/self/exe) in Utility sandbox for FFVPX r=gcp
...
Differential Revision: https://phabricator.services.mozilla.com/D163227
2022-11-30 10:10:22 +00:00
Dana Keeler
e3836395ba
Bug 1795831
- fix checkHandshake in PSM to correctly handle zero-length reads r=jschanck,necko-reviewers
...
This also restructures checkHandshake to be more clear and understandable, to
simplify maintenance going forward.
Differential Revision: https://phabricator.services.mozilla.com/D162799
2022-11-29 22:12:46 +00:00
Butkovits Atila
5258bae36b
Backed out changeset 99ed42b2349b (bug 1795831
) for causing build bustages at nsNSSIOLayer.cpp. CLOSED TREE
2022-11-29 04:05:41 +02:00
Dana Keeler
ce55b5d5de
Bug 1795831
- fix checkHandshake in PSM to correctly handle zero-length reads r=jschanck,necko-reviewers
...
This also restructures checkHandshake to be more clear and understandable, to
simplify maintenance going forward.
Differential Revision: https://phabricator.services.mozilla.com/D162799
2022-11-28 21:50:50 +00:00
ffxbld
501d9124e3
No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=diannaS
...
Differential Revision: https://phabricator.services.mozilla.com/D163210
2022-11-28 13:42:23 +00:00
Barret Rennie
59bf1539b1
Bug 1541508 - Use Services.env in security/ r=keeler
...
Differential Revision: https://phabricator.services.mozilla.com/D160145
2022-11-25 19:09:10 +00:00
Marco Castelluccio
5c8c82f4e5
Bug 1790816 - Reformat security/ with isort. r=linter-reviewers,ahal DONTBUILD
...
# ignore-this-changeset
Differential Revision: https://phabricator.services.mozilla.com/D162666
2022-11-24 17:22:21 +00:00
ffxbld
ad2bde721e
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=dmeehan
...
Differential Revision: https://phabricator.services.mozilla.com/D162979
2022-11-24 14:36:58 +00:00
ffxbld
70b662d1ff
No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D162552
2022-11-21 14:06:35 +00:00
Chris H-C
fc358ad992
Bug 1799442 - Update Glean to v51.8.2, rkv to 0.18 r=janerik,supply-chain-reviewers
...
Differential Revision: https://phabricator.services.mozilla.com/D162345
2022-11-18 13:56:27 +00:00
Jan Andre Ikenmeyer
9ac9619c3c
Bug 1600437 - Disable CBC-mode ECDSA ciphers and stop advertising ECDSA+SHA1 signature algorithm. r=nkulatova
...
Differential Revision: https://phabricator.services.mozilla.com/D65197
2022-11-18 13:13:52 +00:00
Marian-Vasile Laza
023eed4276
Backed out changeset 75acc8e81d81 (bug 1799442) for causing WR tidy bustage. CLOSED TREE
2022-11-18 14:23:58 +02:00
Chris H-C
7655a12f65
Bug 1799442 - Update Glean to v51.8.2, rkv to 0.18 r=janerik,supply-chain-reviewers
...
Differential Revision: https://phabricator.services.mozilla.com/D162345
2022-11-18 10:15:40 +00:00
ffxbld
d538db87cb
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D162281
2022-11-17 13:28:42 +00:00
Mark Banner
1ecc61f91d
Bug 1799314 - Convert consumers of testing modules to import ES modules direct (security/manager/). r=keeler
...
Differential Revision: https://phabricator.services.mozilla.com/D161912
2022-11-17 12:00:30 +00:00
Dana Keeler
1a2ff46b6e
Bug 1791633 - separate nsITLSSocketControl from nsITransportSecurityInfo r=necko-reviewers,kershaw,jschanck
...
Depends on D160311
Differential Revision: https://phabricator.services.mozilla.com/D160313
2022-11-16 16:37:29 +00:00
Dana Keeler
d8c65c4b8b
Bug 1791633 - rename nsISSLSocketControl to nsITLSSocketControl and move it and nsITransportSecurityInfo to PSM r=necko-reviewers,kershaw
...
Depends on D160310
Differential Revision: https://phabricator.services.mozilla.com/D160311
2022-11-16 16:37:29 +00:00
Dana Keeler
d1189f7803
Bug 1791633 - rename nsNSSSocketInfo to NSSSocketControl and move to its own file r=jschanck
...
Differential Revision: https://phabricator.services.mozilla.com/D160310
2022-11-16 16:37:28 +00:00
Marian-Vasile Laza
9c44d165bb
Backed out 3 changesets (bug 1791633) for causing bustages on TransportSecurityInfo.cpp. CLOSED TREE
...
Backed out changeset 23b864e14db0 (bug 1791633)
Backed out changeset 0bcba3375ec0 (bug 1791633)
Backed out changeset ab0ea0d68f5c (bug 1791633)
2022-11-15 23:51:58 +02:00
Dana Keeler
0a13b94a8f
Bug 1791633 - separate nsITLSSocketControl from nsITransportSecurityInfo r=necko-reviewers,kershaw,jschanck
...
Depends on D160311
Differential Revision: https://phabricator.services.mozilla.com/D160313
2022-11-15 20:03:29 +00:00
Dana Keeler
21ac70dabe
Bug 1791633 - rename nsISSLSocketControl to nsITLSSocketControl and move it and nsITransportSecurityInfo to PSM r=necko-reviewers,kershaw
...
Depends on D160310
Differential Revision: https://phabricator.services.mozilla.com/D160311
2022-11-15 20:03:29 +00:00
Dana Keeler
bd6502dc63
Bug 1791633 - rename nsNSSSocketInfo to NSSSocketControl and move to its own file r=jschanck
...
Differential Revision: https://phabricator.services.mozilla.com/D160310
2022-11-15 20:03:28 +00:00
Haik Aftandilian
e78d11eccf
Bug 1799922 - Remove codesign.bash r=mstange
...
Remove the unmaintained codesign.bash script.
Production builds are signed in automation using the Release Engineering script scriptworker-scripts/iscript.
Differential Revision: https://phabricator.services.mozilla.com/D161710
2022-11-15 16:03:31 +00:00
Butkovits Atila
f3f66bf7e5
Backed out 3 changesets (bug 1791633) for causing build bustages at nsHttpConnectionMgr.cpp:. CLOSED TREE
...
Backed out changeset ee9744982673 (bug 1791633)
Backed out changeset f5a4bfdaba40 (bug 1791633)
Backed out changeset f57131b9cfe2 (bug 1791633)
2022-11-15 08:07:16 +02:00
Dana Keeler
a7fbd7a3a0
Bug 1791633 - separate nsITLSSocketControl from nsITransportSecurityInfo r=necko-reviewers,kershaw,jschanck
...
Depends on D160311
Differential Revision: https://phabricator.services.mozilla.com/D160313
2022-11-15 05:34:40 +00:00
Dana Keeler
e5e2d15c2f
Bug 1791633 - rename nsISSLSocketControl to nsITLSSocketControl and move it and nsITransportSecurityInfo to PSM r=necko-reviewers,kershaw
...
Depends on D160310
Differential Revision: https://phabricator.services.mozilla.com/D160311
2022-11-15 05:34:40 +00:00
Dana Keeler
0da2ba4f53
Bug 1791633 - rename nsNSSSocketInfo to NSSSocketControl and move to its own file r=jschanck
...
Differential Revision: https://phabricator.services.mozilla.com/D160310
2022-11-15 05:34:39 +00:00
Mark Banner
47eab692fd
Bug 1800247 - Replace incorrect uses of two-argument Cu.reportError with console.error or equivalent (RemoteSecuritySettings.jsm). r=keeler
...
Depends on D161922
Differential Revision: https://phabricator.services.mozilla.com/D161923
2022-11-14 21:27:47 +00:00
ffxbld
e5f90c385f
No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=diannaS
...
Differential Revision: https://phabricator.services.mozilla.com/D161990
2022-11-14 12:46:03 +00:00
Dana Keeler
4bd07dc4ca
Bug 1799976 - onecrl: clean up the old versions of updated blocklisted entries r=jschanck
...
When a onecrl revocation gets updated, the entry corresponding to its previous
value needs to be unset.
Differential Revision: https://phabricator.services.mozilla.com/D161827
2022-11-10 21:53:33 +00:00
Natalia Kulatova
629bf33150
Bug 1795087 - land NSS NSS_3_85_RTM UPGRADE_NSS_RELEASE, r=nss-reviewers,jschanck
...
Differential Revision: https://phabricator.services.mozilla.com/D161765
2022-11-10 18:18:29 +00:00
ffxbld
606858c412
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=diannaS
...
Differential Revision: https://phabricator.services.mozilla.com/D161774
2022-11-10 14:59:47 +00:00
Robert Longson
f39b618ff1
Bug 1799630 - replace sprintf by snprintf or SprintfLiteral r=emilio
...
Differential Revision: https://phabricator.services.mozilla.com/D161573
2022-11-10 07:01:11 +00:00