Commit Graph

16868 Commits

Author SHA1 Message Date
John Schanck
7f3ed4068d Bug 1802996 - land NSS NSS_3_86_RTM UPGRADE_NSS_RELEASE, r=bbeurdouche
Differential Revision: https://phabricator.services.mozilla.com/D164263
2022-12-08 20:51:52 +00:00
ffxbld
255408cc51 No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D164198
2022-12-08 14:23:48 +00:00
Dana Keeler
88838b311a Bug 1801016: remove expiring telemetry "security.psm_ui_interaction" r=djackson
Differential Revision: https://phabricator.services.mozilla.com/D163972
2022-12-07 17:30:21 +00:00
Natalia Kulatova
9e6457328f Bug 1802319 - Modification of the bug "Consider removing ECDSA_SHA1 signature algorithm". r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D162999
2022-12-07 11:34:55 +00:00
Mark Banner
ff47c36f9b Bug 1803914 - Automatically replace Cu.reportError with console.error (misc). r=mossop
Differential Revision: https://phabricator.services.mozilla.com/D163772
2022-12-06 14:34:57 +00:00
Valentin Gosu
c5dcc9435f Bug 1797279 - Add nsINSSComponent.asyncClearSSLExternalAndInternalSessionCache that waits for socket process to clear the cache r=keeler,necko-reviewers,kershaw
This is a test only method, and the fact that the operation is not sync
with socket process can possibly cause racy tests.
This patch adds an async version of clearSSLExternalAndInternalSessionCache
that returns a promise.

Differential Revision: https://phabricator.services.mozilla.com/D162153
2022-12-06 10:36:10 +00:00
Jed Davis
21e1f65696 Bug 1784517 - Explicitly skip sandboxing tests on unsandboxed build types. r=jmaher
There are tools which consume `moz.build` files by reading every one in
the tree, rather than traversing `DIRS` for a specific build type (see
bug 1667271 comment #89 for background); as a result, we can end up with
CI test jobs that try to run sandboxing tests on build types like Linux
ASan where `security/sandbox` isn't built, and fail.

This patch applies a suggested workaround: add an otherwise redundant
`skip-if` declaration to the test manifests to skip them on the platforms
where they're not part of the build.

Note that sandboxing is disabled in the presence of Linux ASan or TSan
by logic in `toolkit/moz.configure`, but for code coverage builds it's
done via the CI mozconfig files adding `--disable-sandbox`.

Differential Revision: https://phabricator.services.mozilla.com/D163411
2022-12-05 21:23:32 +00:00
ffxbld
3026e10680 No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D163821
2022-12-05 14:05:21 +00:00
John Schanck
282382a80f Bug 1802996 - land NSS NSS_3_86_BETA1 UPGRADE_NSS_RELEASE, r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D163641
2022-12-03 21:47:31 +00:00
John M. Schanck
06c7606fd3 Bug 1803704 - Disable EV Treatment for "Network Solutions Certificate Authority". r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D163735
2022-12-02 18:41:39 +00:00
Cristian Tuns
5eaed27bd7 Backed out changeset 4534fc16cb5c (bug 1802996) for causing multiple failures UPGRADE_NSS_RELEASE CLOSED TREE 2022-12-01 18:47:20 -05:00
John Schanck
399c57a914 Bug 1802996 - land NSS NSS_3_86_BETA1 UPGRADE_NSS_RELEASE, r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D163641
2022-12-01 21:41:21 +00:00
Yannis Juglaret
8b95e44d5b Bug 1800933 - Let ACG in RDD and WMF ride the trains. r=bobowen
Differential Revision: https://phabricator.services.mozilla.com/D163585
2022-12-01 14:11:15 +00:00
ffxbld
7f88fb67c4 No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D163574
2022-12-01 13:09:16 +00:00
Mike Hommey
94c0c63594 Bug 1801029 - Upgrade bindgen to 0.63.0. r=emilio,necko-reviewers,supply-chain-reviewers,kershaw
Differential Revision: https://phabricator.services.mozilla.com/D163375
2022-11-30 22:06:50 +00:00
Marian-Vasile Laza
9414231a2f Backed out 3 changesets (bug 1797279, bug 1800758) for causing xpcshell failures on test_httpssvc_retry_with_ech.js. CLOSED TREE
Backed out changeset 8de777d3d624 (bug 1797279)
Backed out changeset daf5d55079db (bug 1797279)
Backed out changeset 40c7d48e81f6 (bug 1800758)
2022-11-30 21:08:34 +02:00
Valentin Gosu
bee1b0905e Bug 1797279 - Add nsINSSComponent.asyncClearSSLExternalAndInternalSessionCache that waits for socket process to clear the cache r=keeler,necko-reviewers,kershaw
This is a test only method, and the fact that the operation is not sync
with socket process can possibly cause racy tests.
This patch adds an async version of clearSSLExternalAndInternalSessionCache
that returns a promise.

Differential Revision: https://phabricator.services.mozilla.com/D162153
2022-11-30 13:37:11 +00:00
Alexandre Lissy
225f9f94b2 Bug 1802513 - Allow readlink(/proc/self/exe) in Utility sandbox for FFVPX r=gcp
Differential Revision: https://phabricator.services.mozilla.com/D163227
2022-11-30 10:10:22 +00:00
Dana Keeler
e3836395ba Bug 1795831 - fix checkHandshake in PSM to correctly handle zero-length reads r=jschanck,necko-reviewers
This also restructures checkHandshake to be more clear and understandable, to
simplify maintenance going forward.

Differential Revision: https://phabricator.services.mozilla.com/D162799
2022-11-29 22:12:46 +00:00
Butkovits Atila
5258bae36b Backed out changeset 99ed42b2349b (bug 1795831) for causing build bustages at nsNSSIOLayer.cpp. CLOSED TREE 2022-11-29 04:05:41 +02:00
Dana Keeler
ce55b5d5de Bug 1795831 - fix checkHandshake in PSM to correctly handle zero-length reads r=jschanck,necko-reviewers
This also restructures checkHandshake to be more clear and understandable, to
simplify maintenance going forward.

Differential Revision: https://phabricator.services.mozilla.com/D162799
2022-11-28 21:50:50 +00:00
ffxbld
501d9124e3 No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=diannaS
Differential Revision: https://phabricator.services.mozilla.com/D163210
2022-11-28 13:42:23 +00:00
Barret Rennie
59bf1539b1 Bug 1541508 - Use Services.env in security/ r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D160145
2022-11-25 19:09:10 +00:00
Marco Castelluccio
5c8c82f4e5 Bug 1790816 - Reformat security/ with isort. r=linter-reviewers,ahal DONTBUILD
# ignore-this-changeset

Differential Revision: https://phabricator.services.mozilla.com/D162666
2022-11-24 17:22:21 +00:00
ffxbld
ad2bde721e No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=dmeehan
Differential Revision: https://phabricator.services.mozilla.com/D162979
2022-11-24 14:36:58 +00:00
ffxbld
70b662d1ff No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D162552
2022-11-21 14:06:35 +00:00
Chris H-C
fc358ad992 Bug 1799442 - Update Glean to v51.8.2, rkv to 0.18 r=janerik,supply-chain-reviewers
Differential Revision: https://phabricator.services.mozilla.com/D162345
2022-11-18 13:56:27 +00:00
Jan Andre Ikenmeyer
9ac9619c3c Bug 1600437 - Disable CBC-mode ECDSA ciphers and stop advertising ECDSA+SHA1 signature algorithm. r=nkulatova
Differential Revision: https://phabricator.services.mozilla.com/D65197
2022-11-18 13:13:52 +00:00
Marian-Vasile Laza
023eed4276 Backed out changeset 75acc8e81d81 (bug 1799442) for causing WR tidy bustage. CLOSED TREE 2022-11-18 14:23:58 +02:00
Chris H-C
7655a12f65 Bug 1799442 - Update Glean to v51.8.2, rkv to 0.18 r=janerik,supply-chain-reviewers
Differential Revision: https://phabricator.services.mozilla.com/D162345
2022-11-18 10:15:40 +00:00
ffxbld
d538db87cb No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D162281
2022-11-17 13:28:42 +00:00
Mark Banner
1ecc61f91d Bug 1799314 - Convert consumers of testing modules to import ES modules direct (security/manager/). r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D161912
2022-11-17 12:00:30 +00:00
Dana Keeler
1a2ff46b6e Bug 1791633 - separate nsITLSSocketControl from nsITransportSecurityInfo r=necko-reviewers,kershaw,jschanck
Depends on D160311

Differential Revision: https://phabricator.services.mozilla.com/D160313
2022-11-16 16:37:29 +00:00
Dana Keeler
d8c65c4b8b Bug 1791633 - rename nsISSLSocketControl to nsITLSSocketControl and move it and nsITransportSecurityInfo to PSM r=necko-reviewers,kershaw
Depends on D160310

Differential Revision: https://phabricator.services.mozilla.com/D160311
2022-11-16 16:37:29 +00:00
Dana Keeler
d1189f7803 Bug 1791633 - rename nsNSSSocketInfo to NSSSocketControl and move to its own file r=jschanck
Differential Revision: https://phabricator.services.mozilla.com/D160310
2022-11-16 16:37:28 +00:00
Marian-Vasile Laza
9c44d165bb Backed out 3 changesets (bug 1791633) for causing bustages on TransportSecurityInfo.cpp. CLOSED TREE
Backed out changeset 23b864e14db0 (bug 1791633)
Backed out changeset 0bcba3375ec0 (bug 1791633)
Backed out changeset ab0ea0d68f5c (bug 1791633)
2022-11-15 23:51:58 +02:00
Dana Keeler
0a13b94a8f Bug 1791633 - separate nsITLSSocketControl from nsITransportSecurityInfo r=necko-reviewers,kershaw,jschanck
Depends on D160311

Differential Revision: https://phabricator.services.mozilla.com/D160313
2022-11-15 20:03:29 +00:00
Dana Keeler
21ac70dabe Bug 1791633 - rename nsISSLSocketControl to nsITLSSocketControl and move it and nsITransportSecurityInfo to PSM r=necko-reviewers,kershaw
Depends on D160310

Differential Revision: https://phabricator.services.mozilla.com/D160311
2022-11-15 20:03:29 +00:00
Dana Keeler
bd6502dc63 Bug 1791633 - rename nsNSSSocketInfo to NSSSocketControl and move to its own file r=jschanck
Differential Revision: https://phabricator.services.mozilla.com/D160310
2022-11-15 20:03:28 +00:00
Haik Aftandilian
e78d11eccf Bug 1799922 - Remove codesign.bash r=mstange
Remove the unmaintained codesign.bash script.

Production builds are signed in automation using the Release Engineering script scriptworker-scripts/iscript.

Differential Revision: https://phabricator.services.mozilla.com/D161710
2022-11-15 16:03:31 +00:00
Butkovits Atila
f3f66bf7e5 Backed out 3 changesets (bug 1791633) for causing build bustages at nsHttpConnectionMgr.cpp:. CLOSED TREE
Backed out changeset ee9744982673 (bug 1791633)
Backed out changeset f5a4bfdaba40 (bug 1791633)
Backed out changeset f57131b9cfe2 (bug 1791633)
2022-11-15 08:07:16 +02:00
Dana Keeler
a7fbd7a3a0 Bug 1791633 - separate nsITLSSocketControl from nsITransportSecurityInfo r=necko-reviewers,kershaw,jschanck
Depends on D160311

Differential Revision: https://phabricator.services.mozilla.com/D160313
2022-11-15 05:34:40 +00:00
Dana Keeler
e5e2d15c2f Bug 1791633 - rename nsISSLSocketControl to nsITLSSocketControl and move it and nsITransportSecurityInfo to PSM r=necko-reviewers,kershaw
Depends on D160310

Differential Revision: https://phabricator.services.mozilla.com/D160311
2022-11-15 05:34:40 +00:00
Dana Keeler
0da2ba4f53 Bug 1791633 - rename nsNSSSocketInfo to NSSSocketControl and move to its own file r=jschanck
Differential Revision: https://phabricator.services.mozilla.com/D160310
2022-11-15 05:34:39 +00:00
Mark Banner
47eab692fd Bug 1800247 - Replace incorrect uses of two-argument Cu.reportError with console.error or equivalent (RemoteSecuritySettings.jsm). r=keeler
Depends on D161922

Differential Revision: https://phabricator.services.mozilla.com/D161923
2022-11-14 21:27:47 +00:00
ffxbld
e5f90c385f No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=diannaS
Differential Revision: https://phabricator.services.mozilla.com/D161990
2022-11-14 12:46:03 +00:00
Dana Keeler
4bd07dc4ca Bug 1799976 - onecrl: clean up the old versions of updated blocklisted entries r=jschanck
When a onecrl revocation gets updated, the entry corresponding to its previous
value needs to be unset.

Differential Revision: https://phabricator.services.mozilla.com/D161827
2022-11-10 21:53:33 +00:00
Natalia Kulatova
629bf33150 Bug 1795087 - land NSS NSS_3_85_RTM UPGRADE_NSS_RELEASE, r=nss-reviewers,jschanck
Differential Revision: https://phabricator.services.mozilla.com/D161765
2022-11-10 18:18:29 +00:00
ffxbld
606858c412 No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=diannaS
Differential Revision: https://phabricator.services.mozilla.com/D161774
2022-11-10 14:59:47 +00:00
Robert Longson
f39b618ff1 Bug 1799630 - replace sprintf by snprintf or SprintfLiteral r=emilio
Differential Revision: https://phabricator.services.mozilla.com/D161573
2022-11-10 07:01:11 +00:00