gecko-dev/security
Kevin Jacobs b964726542 Bug 1575735 - Explicitly check key strength of TLS channel by setting authKeyBits earlier in SSL_AuthCertificate r=keeler
This patch provides Delegated Credential information (authKeyBits and signature scheme) to CertVerifier such that we can enforce a policy check and disallow weak keys in the Delegated Credential.

This information is not passed from http3 - adding this will be done in a separate bug.

Differential Revision: https://phabricator.services.mozilla.com/D47181

--HG--
rename : security/manager/ssl/tests/unit/test_delegated_credentials/delegated-selfsigned.key => security/manager/ssl/tests/unit/test_delegated_credentials/delegated.key
rename : security/manager/ssl/tests/unit/test_delegated_credentials/delegated-selfsigned.key.keyspec => security/manager/ssl/tests/unit/test_delegated_credentials/delegated.key.keyspec
extra : moz-landing-system : lando
2019-11-07 22:13:43 +00:00
..
apps Bug 1586358 - Replace existing instances of GENERATED_FILES with references to the GeneratedFile template r=firefox-build-system-reviewers,mshal 2019-10-07 21:15:19 +00:00
certverifier Bug 1575735 - Explicitly check key strength of TLS channel by setting authKeyBits earlier in SSL_AuthCertificate r=keeler 2019-11-07 22:13:43 +00:00
ct
mac/hardenedruntime Bug 1593071 - [macOS] Land different entitlement files for parent and child processes r=spohl 2019-11-07 13:26:05 +00:00
manager Bug 1575735 - Explicitly check key strength of TLS channel by setting authKeyBits earlier in SSL_AuthCertificate r=keeler 2019-11-07 22:13:43 +00:00
nss Backed out changeset 1adbdd45d961 (bug 1592007) for bc failures on browser_masterPassword.js UPGRADE_NSS_RELEASE. CLOSED TREE 2019-11-06 03:16:30 +02:00
sandbox Bug 1591117 - Report ENOSYS on statx, but allow membarrier. r=jld 2019-11-07 09:21:51 +00:00
.eslintrc.js
generate_certdata.py
generate_mapfile.py
moz.build
nss.symbols bug 1573542 - be more efficient about finding client certificates r=jcj,kjacobs 2019-09-18 23:28:05 +00:00