gecko-dev/security
David Keeler 4a9f753dd1 bug 1254667 - change certificate verification SHA1 policy to "allow for locally-installed roots" r=jcj
Before this patch, the default policy for the use of SHA1 in certificate
signatures was "allow all" due to compatibility concerns.
After gathering telemetry, we are confident that we can enforce the policy of
"allow for locally-installed roots" (or certificates valid before 2016) without
too much breakage.

MozReview-Commit-ID: 8GxtgdbaS3P

--HG--
extra : rebase_source : 7e81131a6c215bf7af514f150ebe2eb16a5c612a
2016-03-28 12:52:40 -07:00
..
apps Bug 1219482: Replace PRLogModuleInfo with LazyLogModule in security subdirectory.r=nfroyd 2016-01-28 10:36:00 -08:00
certverifier bug 1254667 - change certificate verification SHA1 policy to "allow for locally-installed roots" r=jcj 2016-03-28 12:52:40 -07:00
manager Bug 1238001 - Allow TLS info to be updated on renegotiation, r=keeler 2016-02-23 08:00:00 -08:00
nss Bug 1245053, NSS_3_23_RTM, only version numbers finalized, no code changes, DONTBUILD 2016-03-03 10:53:54 +01:00
patches Bug 1137470, remove the documentation patch file, because it's no longer reverted locally, DONTBUILD 2015-03-20 13:38:13 +01:00
pkix bug 1258579 - remove some unnecessary time-related globals from mozilla::pkix tests r=Cykesiopka 2016-03-22 10:26:30 -07:00
sandbox Bug 1124033 - Disable C4311 and C4312 in directories exhibiting warnings; r=ehsan 2016-03-23 17:19:20 -07:00