gecko-dev/security
Dana Keeler 984d5aecee bug 1492424 - check if the TLS handshake failed in nsSecureBrowserUIImpl r=Gijs
The site identity security indicator machinery treats connections where the TLS
handshake failed as insecure (also referred to as "unknown identity"). Before
bug 1468222, such cases were easily detectable as the SSLStatus field of the
relevant nsITransportSecurityInfo would be null. When we merged nsISSLStatus
into nsITransportSecurityInfo, we didn't take this differentiation into account.
This patch brings back the prior behavior by checking if the securityInfo's
securityState indicates that the handshake failed (i.e. it is
STATE_IS_INSECURE).

Differential Revision: https://phabricator.services.mozilla.com/D6316

--HG--
extra : moz-landing-system : lando
2018-09-21 00:17:47 +00:00
..
apps
certverifier Bug 1491849 - Disable C5045 only if optimization is disabled. r=dmajor 2018-09-15 21:20:32 +09:00
manager bug 1492424 - check if the TLS handshake failed in nsSecureBrowserUIImpl r=Gijs 2018-09-21 00:17:47 +00:00
nss Bug 1488622 - land NSS fe738aae0bcc UPGRADE_NSS_RELEASE, r=me 2018-09-19 09:43:03 -07:00
pkix Bug 1491849 - Disable C5045 only if optimization is disabled. r=dmajor 2018-09-15 21:20:32 +09:00
sandbox Bug 1489735 - Quietly deny sched_setaffinity in content process sandbox r=gcp 2018-09-17 16:43:52 +00:00
.eslintrc.js Bug 1487246: Enable the eslint no-sequences rule. r=Standard8 2018-08-29 16:15:33 -07:00
generate_certdata.py
generate_mapfile.py
moz.build Bug 1341222 - Fix building in-tree NSS against system NSPR. r=froydnj 2018-08-21 07:25:11 +09:00
nss.symbols Backed out 6 changesets (bug 1421501) for bustages on security/nss/lib/freebl/mpi/mp_comba.c on a CLOSED TREE 2018-08-23 17:13:42 +03:00