gecko-dev/security/certverifier
J.C. Jones aaaf57c831 Bug 1434300 - Add a utility to match certificates based on SPKI r=fkiefer,keeler
This modifies crtshToDNStruct.py to be able to produce SPKI or DN-based lists,
and adds a SPKI-search method to TrustOverrideUtils.h.

This also regenerates the TrustOverride files to use the new script.

MozReview-Commit-ID: BhMoJbYXs7Y

--HG--
rename : security/manager/tools/crtshToDNStruct/crtshToDNStruct.py => security/manager/tools/crtshToIdentifyingStruct/crtshToIdentifyingStruct.py
rename : security/manager/tools/crtshToDNStruct/requirements.txt => security/manager/tools/crtshToIdentifyingStruct/requirements.txt
extra : rebase_source : 9ae4999ceea2d4092119fe81b787c4d66a5e17b1
2018-02-21 14:08:44 -05:00
..
tests/gtest Bug 1434300 - Add a utility to match certificates based on SPKI r=fkiefer,keeler 2018-02-21 14:08:44 -05:00
BRNameMatchingPolicy.cpp
BRNameMatchingPolicy.h
BTInclusionProof.h
BTVerifier.cpp
BTVerifier.h
Buffer.cpp
Buffer.h
CertVerifier.cpp bug 1381154 - remove smartcard monitoring threads r=jcj,mgoodwin 2017-09-28 14:27:21 -07:00
CertVerifier.h bug 1400913 - back out the functionality changes from bug 1364159 (but keep the test) r=jcj 2017-09-18 10:28:58 -07:00
CTDiversityPolicy.cpp
CTDiversityPolicy.h
CTKnownLogs.h
CTLog.h
CTLogVerifier.cpp
CTLogVerifier.h
CTObjectsExtractor.cpp
CTObjectsExtractor.h
CTPolicyEnforcer.cpp
CTPolicyEnforcer.h
CTSerialization.cpp
CTSerialization.h
CTUtils.h
CTVerifyResult.cpp
CTVerifyResult.h
ExtendedValidation.cpp bug 1421084 - part 1/4 - remove now-unnecessary nsNSSShutDownPreventionLock r=mt,ttaubert 2018-01-23 10:37:47 -08:00
ExtendedValidation.h bug 1421084 - part 4/4 - remove nsNSSShutDown.h and (hopefully) all references to it r=mt,ttaubert 2018-01-24 14:44:01 -08:00
moz.build Bug 785440 - Disable warning C4324 when building security/certverifier. r=keeler 2018-02-11 00:32:14 -05:00
MultiLogCTVerifier.cpp
MultiLogCTVerifier.h
NSSCertDBTrustDomain.cpp Bug 1434300 - Implement the Symantec distrust plan from Bug 1409257 r=fkiefer,keeler 2018-02-21 14:08:18 -05:00
NSSCertDBTrustDomain.h bug 1400913 - back out the functionality changes from bug 1364159 (but keep the test) r=jcj 2017-09-18 10:28:58 -07:00
OCSPCache.cpp
OCSPCache.h
OCSPRequestor.cpp Bug 870698 - Part 1: Replace Assign("") with AssignLiteral(""). r=erahm 2017-09-03 22:12:56 -07:00
OCSPRequestor.h
OCSPVerificationTrustDomain.cpp
OCSPVerificationTrustDomain.h
SignedCertificateTimestamp.cpp
SignedCertificateTimestamp.h
SignedTreeHead.h
TrustOverride-AppleGoogleData.inc Bug 1434300 - Add a utility to match certificates based on SPKI r=fkiefer,keeler 2018-02-21 14:08:44 -05:00
TrustOverride-GlobalSignData.inc Bug 1409259 - Refactor "TrustOverrides" header for existing trust overrides r=keeler 2017-10-16 23:17:52 -07:00
TrustOverride-StartComAndWoSignData.inc Bug 1409259 - Refactor "TrustOverrides" header for existing trust overrides r=keeler 2017-10-16 23:17:52 -07:00
TrustOverride-SymantecData.inc Bug 1434300 - Add a utility to match certificates based on SPKI r=fkiefer,keeler 2018-02-21 14:08:44 -05:00
TrustOverride-TestImminentDistrustData.inc Bug 1434300 - Add a utility to match certificates based on SPKI r=fkiefer,keeler 2018-02-21 14:08:44 -05:00
TrustOverrideUtils.h Bug 1434300 - Add a utility to match certificates based on SPKI r=fkiefer,keeler 2018-02-21 14:08:44 -05:00