gecko-dev/security
David Keeler 581a304acb bug 1254667 - change certificate verification SHA1 policy to "allow for locally-installed roots" r=jcj
Before this patch, the default policy for the use of SHA1 in certificate
signatures was "allow all" due to compatibility concerns.
After gathering telemetry, we are confident that we can enforce the policy of
"allow for locally-installed roots" (or certificates valid before 2016) without
too much breakage.

MozReview-Commit-ID: 8GxtgdbaS3P

--HG--
extra : rebase_source : d1bed911f2d5d40229ea06556fee0848668e98b6
2016-03-28 12:52:40 -07:00
..
apps Bug 1219482: Replace PRLogModuleInfo with LazyLogModule in security subdirectory.r=nfroyd 2016-01-28 10:36:00 -08:00
certverifier bug 1254667 - change certificate verification SHA1 policy to "allow for locally-installed roots" r=jcj 2016-03-28 12:52:40 -07:00
manager bug 1254667 - change certificate verification SHA1 policy to "allow for locally-installed roots" r=jcj 2016-03-28 12:52:40 -07:00
nss Bug 1245053, NSS_3_23_RTM, only version numbers finalized, no code changes, DONTBUILD 2016-03-03 10:53:54 +01:00
patches Bug 1137470, remove the documentation patch file, because it's no longer reverted locally, DONTBUILD 2015-03-20 13:38:13 +01:00
pkix bug 1258579 - remove some unnecessary time-related globals from mozilla::pkix tests r=Cykesiopka 2016-03-22 10:26:30 -07:00
sandbox Bug 1124033 - Disable C4311 and C4312 in directories exhibiting warnings; r=ehsan 2016-03-23 17:19:20 -07:00