gecko-dev/security
Dana Keeler 6d38e846af bug 1610644 - search for new client certificates/keys in osclientcerts no more than once every 3 seconds r=kjacobs
Before this, every time NSS wanted to open a new session (C_OpenSession),
osclientcerts would look for new client certificates/keys in the OS store. It
turns out, NSS wants to open new sessions often, so this was slow. This patch
adds a timestamp to the manager and ensures that it searches for new objects no
more than once every 3 seconds.

Additionally, this patch adds the optimization that if NSS tries to search for
PKCS#11 objects with attributes that osclientcerts doesn't support,
osclientcerts returns an empty search early, rather than enumerating every
object and finding no matches.

In the future we may need to be smarter about how we match objects during
searches. Rather than iterating through every object, we could build lookup
tables that would be much more time efficient.

Differential Revision: https://phabricator.services.mozilla.com/D62982

--HG--
extra : moz-landing-system : lando
2020-02-19 17:44:04 +00:00
..
apps Bug 1611326 - Default to py3_action, and add a py2 attribute to GENERATED_FILES; r=firefox-build-system-reviewers,rstewart 2020-02-14 13:22:46 +00:00
certverifier Bug 1609996 - Reorder some includes affected by the previous patches. r=froydnj 2020-01-20 16:19:48 +00:00
ct Bug 1611326 - Default to py3_action, and add a py2 attribute to GENERATED_FILES; r=firefox-build-system-reviewers,rstewart 2020-02-14 13:22:46 +00:00
mac/hardenedruntime Bug 1516367 - Move the minidump-analyzer out of the crash reporter application bundle r=spohl,dmajor 2019-11-14 21:11:59 +00:00
manager bug 1610644 - search for new client certificates/keys in osclientcerts no more than once every 3 seconds r=kjacobs 2020-02-19 17:44:04 +00:00
nss Bug 1606927 - land NSS 9e0d34a6cf91 UPGRADE_NSS_RELEASE, r=jcj 2020-02-18 20:51:39 +00:00
sandbox Bug 1614535 - Whitelist pread64 in the common policy. r=gcp 2020-02-11 18:20:34 +00:00
.eslintrc.js
generate_certdata.py
generate_mapfile.py
moz.build Bug 1594931 - Stop compiling NSS' DBM legacy database r=kjacobs,keeler,mhowell,MattN 2019-12-16 17:35:49 +00:00
nss.symbols Bug 1614711 - Update to Neqo 0.1.14 for support for QUIC draft 25 r=dragana 2020-02-13 22:18:07 +00:00