gecko-dev/security
J.C. Jones 894d57b6bf Bug 1434300 - Implement the Symantec distrust plan from Bug 1409257 r=fkiefer,keeler
The algorithm from https://hg.mozilla.org/mozilla-central/rev/595e27212723
(Bug 1409259) is adapted in this patch from nsNSSCallbacks into the TrustDomain
decisions.

This patch does not change the algorithm to use SPKI matching, nor add the
additional whitelisted intermediates from DigiCert; that will be done in a
separate commit.

This patch also does not update the pre-existing browser chrome test.

MozReview-Commit-ID: 1PdCAqo71bI

--HG--
extra : rebase_source : f1c6d00e16682f9303b8b2bfdf1fe5773c515ac5
2018-02-21 14:08:18 -05:00
..
apps bug 1421084 - part 3/4 - remove nsNSSShutDownObject::shutdown and virtualDestroyNSSReference r=mt,ttaubert 2018-01-24 14:29:08 -08:00
certverifier Bug 1434300 - Implement the Symantec distrust plan from Bug 1409257 r=fkiefer,keeler 2018-02-21 14:08:18 -05:00
manager Bug 1434300 - Implement the Symantec distrust plan from Bug 1409257 r=fkiefer,keeler 2018-02-21 14:08:18 -05:00
nss Bug 1432177 - land NSS 1b20549e1075 UPGRADE_NSS_RELEASE, r=me 2018-01-29 12:28:20 +01:00
pkix bug 1437214 - if PathBuildingStep::Check fails due to a problem with the subject certificate rather than the potential issuer, set keepGoing to false r=jcj 2018-02-09 16:35:54 -08:00
sandbox Bug 1438389 - Quietly disallow chown() in sandboxed content processes. r=gcp 2018-02-15 16:10:00 -07:00
.eslintrc.js Bug 1392119 - Enable the ESLint no-caller rule across mozilla-central r=standard8 2017-08-23 13:38:24 +01:00
generate_certdata.py Bug 1402012 - Update buildconfig.py to use PartialConfigEnvironment; r=glandium 2017-08-24 22:52:01 -04:00
generate_mapfile.py
moz.build Bug 1394734 - Simplify various corner cases r=glandium 2017-12-07 22:10:19 +01:00
nss.symbols Bug 1429148 - Add nsIPK11Token.isInternalKeyToken. r=keeler,MattN 2018-02-20 20:43:41 -03:00