mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-10-08 02:14:43 +00:00
ddc8978d1f
2020-08-21 Kevin Jacobs <kjacobs@mozilla.com> * automation/abi-check/previous-nss-release, lib/nss/nss.h, lib/softoken/softkver.h, lib/util/nssutil.h: Set version numbers to 3.57 Beta [783f49ae6126] 2020-08-24 Kevin Jacobs <kjacobs@mozilla.com> * gtests/ssl_gtest/ssl_auth_unittest.cc, lib/ssl/dtls13con.c, lib/ssl/dtlscon.c, lib/ssl/ssl3con.c, lib/ssl/sslimpl.h, lib/ssl/sslnonce.c: Bug 1653641 - Cleanup inaccurate DTLS comments, code review fixes. r=mt [0e1b5c711cb9] 2020-08-24 Robert Relyea <rrelyea@redhat.com> * lib/freebl/fipsfreebl.c, lib/softoken/fipstest.c, lib/softoken/kbkdf.c, lib/softoken/lowpbe.c, lib/softoken/lowpbe.h, lib/softoken/pkcs11c.c, lib/softoken/pkcs11i.h, lib/softoken/sftkhmac.c, lib/softoken/sftkike.c: Bug 1660304 New FIPS IG requires self-tests for approved kdfs. r=ueno comments=kjacobs FIPS guidance now requires self-tests for our kdfs. It also requires self-tests for cmac which we didn't have in the cmac patch. Currently only one test per kdf is necessary. Specifially for SP-800-108, only one of the three flavors are needed (counter, feedback, or pipeline). This patch includes more complete testing but it has been turned off the currently extraneous tests under the assumption that NIST guidance may require them in the future. HKDF is currently not included in FIPS, but is on track to be included, so hkdf have been included in this patch. Because the test vectors are const strings, the patch pushes some const definitions that were missing in existing private interfaces. There are three flavors of self-tests: Function implemented in freebl are added to the freebl/fipsfreebl.c Functions implemented in pkcs11c.c have selftests completely implemented in softoken/fipstest.c Functions implemented in their own .c file have their selftest function implemented in that .c file and called by fipstests.c These are consistant with the previous choices for selftests. Some private interfaces that took in keys from pkcs #11 structures or outputted keys to pkcs #11 structures were modified to optionally take keys in by bytes and output keys as bytes so the self-tests can work in just bytes. [5dca54fe61c2] 2020-08-25 Daiki Ueno <dueno@redhat.com> * lib/softoken/manifest.mn: Bug 1659252, disable building libnssdbm3.so if NSS_DISABLE_DBM=1, r=rrelyea Reviewers: rrelyea Reviewed By: rrelyea Bug #: 1659252 [4d55d36ca6ef] 2020-08-24 Kevin Jacobs <kjacobs@mozilla.com> * lib/pk11wrap/pk11cxt.c, lib/softoken/pkcs11c.c, lib/softoken/sdb.c, lib/softoken/sftkpwd.c: Bug 1651834 - Fix various static analyzer warnings. r=rrelyea [ab04fd73fd6d] 2020-08-28 Mike Hommey <mh@glandium.org> * lib/freebl/blapii.h: Bug 1661810 - Define pre_align/post_align based on the compiler. r=jcj Things worked fine before we upgraded to clang 11 presumably because the stack was always 16-bytes aligned in the first place, or something akin to that, and the lack of pre_align/post_align doing anything didn't matter. The runtime misalignment of the stack may well be a clang > 9 bug, but keeping pre_align/post_align tied to the x86/x64 is a footgun anyways. [c100e11991f6] [tip] Differential Revision: https://phabricator.services.mozilla.com/D88876 |
||
|---|---|---|
| .. | ||
| bloomfilter_unittest.cc | ||
| gtest_utils.h | ||
| libssl_internals.c | ||
| libssl_internals.h | ||
| Makefile | ||
| manifest.mn | ||
| rsa8193.h | ||
| selfencrypt_unittest.cc | ||
| ssl_0rtt_unittest.cc | ||
| ssl_aead_unittest.cc | ||
| ssl_agent_unittest.cc | ||
| ssl_auth_unittest.cc | ||
| ssl_cert_ext_unittest.cc | ||
| ssl_cipherorder_unittest.cc | ||
| ssl_ciphersuite_unittest.cc | ||
| ssl_custext_unittest.cc | ||
| ssl_damage_unittest.cc | ||
| ssl_debug_env_unittest.cc | ||
| ssl_dhe_unittest.cc | ||
| ssl_drop_unittest.cc | ||
| ssl_ecdh_unittest.cc | ||
| ssl_ems_unittest.cc | ||
| ssl_exporter_unittest.cc | ||
| ssl_extension_unittest.cc | ||
| ssl_fragment_unittest.cc | ||
| ssl_fuzz_unittest.cc | ||
| ssl_gather_unittest.cc | ||
| ssl_gtest.cc | ||
| ssl_gtest.gyp | ||
| ssl_hrr_unittest.cc | ||
| ssl_keylog_unittest.cc | ||
| ssl_keyupdate_unittest.cc | ||
| ssl_loopback_unittest.cc | ||
| ssl_masking_unittest.cc | ||
| ssl_misc_unittest.cc | ||
| ssl_record_unittest.cc | ||
| ssl_recordsep_unittest.cc | ||
| ssl_recordsize_unittest.cc | ||
| ssl_renegotiation_unittest.cc | ||
| ssl_resumption_unittest.cc | ||
| ssl_skip_unittest.cc | ||
| ssl_staticrsa_unittest.cc | ||
| ssl_tls13compat_unittest.cc | ||
| ssl_v2_client_hello_unittest.cc | ||
| ssl_version_unittest.cc | ||
| ssl_versionpolicy_unittest.cc | ||
| test_io.cc | ||
| test_io.h | ||
| tls_agent.cc | ||
| tls_agent.h | ||
| tls_connect.cc | ||
| tls_connect.h | ||
| tls_esni_unittest.cc | ||
| tls_filter.cc | ||
| tls_filter.h | ||
| tls_hkdf_unittest.cc | ||
| tls_protect.cc | ||
| tls_protect.h | ||
| tls_psk_unittest.cc | ||
| tls_subcerts_unittest.cc | ||