security/apps/AppTrustDomain.cpp
990aca9e4d11f4973f71e438f324579e3f217cae
created 2016-06-15 11:11 +0300
pushed 2016-07-04 22:07 +0000
Sergei Chernov Sergei Chernov - Bug 1275238 - Certificate Transparency support in mozilla::pkix; r=keeler
1ef294cb3b47138416d559cb2f36f35dc0de7151
created 2016-05-18 21:20 -0700
pushed 2016-05-20 21:37 +0000
Cykesiopka Cykesiopka - Bug 1271501 - Use mozilla::BitwiseCast instead of reinterpret_cast in PSM. r=keeler
8b2fb1aabf141e0c9f9d1f75af9b130c56733217
created 2016-05-05 16:11 -0700
pushed 2016-05-13 10:06 +0000
David Keeler David Keeler - bug 982932 - only allow Netscape-stepUp to be used for serverAuth for old CA certificates r=Cykesiopka,jcj
6fc34759465ee7246858c63d090270797cd1f220
created 2016-05-05 14:56 -0700
pushed 2016-05-06 22:59 +0000
Cykesiopka Cykesiopka - Bug 1267905 - Replace uses of ScopedCERTCertList with UniqueCERTCertList. r=keeler
9c98c0300a89bfe655a1213c91ceb57c517e8bf7
created 2016-04-20 01:14 -0700
pushed 2016-04-20 21:19 +0000
Cykesiopka Cykesiopka - Bug 1260643 - Convert most uses of ScopedCERTCertificate in PSM to UniqueCERTCertificate. r=keeler
5c19306be55e240d32c7b36f39a06b640c69fce5
created 2016-01-28 10:36 -0800
pushed 2016-03-12 20:25 +0000
sajitk sajitk - Bug 1219482: Replace PRLogModuleInfo with LazyLogModule in security subdirectory.r=nfroyd
5e5b76d866341d47db93066b393af616b1e78f43
created 2016-01-29 10:15 -0800
pushed 2016-01-29 21:44 +0000
Wes Kocher Wes Kocher - Backed out changeset 7ec471c99263 (bug 1219482) to hopefully fix the intermittent hazard failures CLOSED TREE
7ec471c9926360990ad4ec55376c53b54638da3f
created 2016-01-28 10:36 -0500
pushed 2016-01-29 10:49 +0000
sajitk sajitk - Bug 1219482 - Replace PRLogModuleInfo with LazyLogModule in security subdirectory. r=froydnj
e1c2a29753eb768f7584ae2768f3fe284a221b99
created 2015-12-06 08:06 -0500
pushed 2015-12-26 01:50 +0000
Nathan Froyd Nathan Froyd - Bug 1232454 - use UniquePtr<T[]> instead of nsAutoArrayPtr<T> in security/apps/; r=keeler
2f33a28c15a7d96f68f3aa7393a73ffe8a3f3aff
created 2015-10-22 17:09 +0800
pushed 2015-10-23 22:53 +0000
Jonathan Hao Jonathan Hao - Bug 1216469 - Bypass verification for signed packages from trust origins. r=valentin
a2335e0a53d9e28a234328d4ffe721738717e779
created 2015-10-08 17:08 +0800
pushed 2015-10-21 23:41 +0000
Jonathan Hao Jonathan Hao - Bug 1178448 - Use imported CA in developer mode. r=keeler,valentin
e014457c7890c578d1fa4b79004092e20e8ad38d
created 2015-09-07 15:28 +0800
pushed 2015-09-25 00:15 +0000
Jonathan Hao Jonathan Hao - Bug 1178518 - Add an AppTrustedRoot for signed packaged app. r=keeler
0516d4db29a9d76361dd51331036e0b059b4dd60
created 2015-09-11 14:52 -0400
pushed 2015-09-13 19:07 +0000
Richard Barnes Richard Barnes - Bug 942515 - Show Untrusted Connection Error for SHA-1-based SSL certificates with notBefore >= 2016-01-01 r=keeler
de921857f45204056731cf26407ce2d55cbcc9b6
created 2015-08-21 10:00 -0700
pushed 2015-08-23 21:21 +0000
Fabrice Desré Fabrice Desré - Bug 1196988 - Remove THA support. r=gwagner
31d0ae4d8c62e08a17784a6be2ad185d6b2f4e23
created 2015-07-09 07:22 +0100
pushed 2015-07-09 17:53 +0000
Mark Goodwin Mark Goodwin - Bug 1159155 - Add telemetry probe for SHA-1 usage (r=keeler)
a2b818a26d8528a8da37b16622e06df4d0c1676f
created 2015-06-29 22:19 +0200
pushed 2015-07-01 00:00 +0000
Cykesiopka Cykesiopka - Bug 1145679 - Reject EV status for end-entity EV certs with overly long validity periods. r=keeler
1853f12d7d8c336d0689a8d3e0e21e174609f50a
created 2015-04-06 16:10 -0700
pushed 2015-05-15 15:43 +0000
David Keeler David Keeler - bug 1141189 - implement skipping expensive revocation checks (OCSP fetching) for short-lived certificates r=rbarnes
3cdce28ffcc6de50fac4fce22a8bca0a467db44b
created 2015-05-08 14:36 -0700
pushed 2015-05-09 21:54 +0000
Eric Rahm Eric Rahm - Bug 1162691 - Part 1: Remove instances of #ifdef PR_LOGGING in security. r=froydnj
1cfe7aee45084049b9dc9c55c424f0665d27f154
created 2015-03-31 11:32 -0700
pushed 2015-04-24 18:16 +0000
Dave Townsend Dave Townsend - Bug 1038068: Check add-on signatures and refuse to install unsigned or broken add-ons (preffed off for now). r=dveditz
cac8a0359113ff642052bbac834b23264ddc76b6
created 2015-04-23 09:09 +0200
pushed 2015-04-23 07:09 +0000
Carsten "Tomcat" Book Carsten "Tomcat" Book - Backed out changeset f99621542727 (bug 1038068) for test failures in test_corrupt.js etc on a CLOSED TREE
f996215427273ee9a9a7c7c36230a4c6b2777e87
created 2015-03-31 11:32 -0700
pushed 2015-04-22 20:03 +0000
Dave Townsend Dave Townsend - Bug 1038068: Check add-on signatures and refuse to install unsigned or broken add-ons (preffed off for now). r=dveditz
19ae213736588a54a0869463fc3605d618510e76
created 2015-04-21 18:21 -0700
pushed 2015-04-22 01:22 +0000
Wes Kocher Wes Kocher - Backed out changeset 3b48e1a81a17 (bug 1038068) for xpcshell orange even after a clobbering IGNORE IDL
3b48e1a81a170634dce964cd462c752d09680805
created 2015-03-31 11:32 -0700
pushed 2015-04-21 21:28 +0000
Dave Townsend Dave Townsend - Bug 1038068: Check add-on signatures and refuse to install unsigned or broken add-ons (preffed off for now). IGNORE IDL. r=dveditz
eee856befda3b54b11383be5192ce333de40ea08
created 2015-03-05 16:41 +0100
pushed 2015-03-06 21:27 +0000
Cykesiopka Cykesiopka - Bug 1139177 - RSA public key size checking cleanups. r=keeler
99f4f20645206379f887d0914e48745310cad12e
created 2015-02-14 16:59 -0800
pushed 2015-02-24 12:28 +0000
Brian Smith Brian Smith - Bug 1131767: Prune away paths using unacceptable algorithms earlier, r=keeler
5e39cbc525ad091f8ee8cd2a9fbfcf49f3e89c36
created 2015-02-07 12:14 -0800
pushed 2015-02-11 14:02 +0000
Brian Smith Brian Smith - Bug 1130754: Avoid recalculating tbsCertificate digest, r=keeler
3fe8d7d7f9f7373d0d3a3341d1a46347c06c85c7
created 2015-02-02 16:17 -0800
pushed 2015-02-11 14:02 +0000
Brian Smith Brian Smith - Bug 1122841, Part 2: Centralize checking of public key, r=keeler
f7de7f93a099483093279b13681a14e96f22622a
created 2014-12-23 14:51 -0800
pushed 2015-01-01 22:22 +0000
Brian Smith Brian Smith - Bug 1115761, Part 3: Rename NSS-based crypto functions, r=jcj
f564fff0642cfbd82f7192d7e2d8b00610e16091
created 2014-10-18 15:18 +0200
pushed 2014-10-20 13:36 +0000
Cykesiopka Cykesiopka - Bug 622859 - Reject EV certificates with key sizes below RSA 2048. r=briansmith
209ec35a59c13bfccd4b5a787268cb4e1eaf1bb3
created 2014-10-17 13:14 +0200
pushed 2014-10-20 13:36 +0000
Carsten "Tomcat" Book Carsten "Tomcat" Book - Backed out changeset 3afdc3253979 (bug 622859) for breaking m1 tests
3afdc3253979b356a146c55e49eb68eb48580927
created 2014-10-16 05:13 +0200
pushed 2014-10-20 13:36 +0000
Cykesiopka Cykesiopka - Bug 622859 - Reject EV certificates with key sizes below RSA 2048. r=briansmith
f15a0fd7e3db81d3680d031782771e56a6a0d3af
created 2014-10-08 13:17 -0700
pushed 2014-10-09 00:18 +0000
Eric Rahm Eric Rahm - Bug 806819 - Part 3: Remove redundant FORCE_PR_LOG entries. r=ehsan
b92b206a27605a332c3e09dd17370186f6af7ac3
created 2014-10-06 16:32 -0700
pushed 2014-10-07 13:05 +0000
Wes Kocher Wes Kocher - Backed out 5 changesets (bug 806819) for WinXP test failures on a CLOSED TREE
f06cd735b5b3da53a517d763c179c5fe67a97377
created 2014-10-06 13:08 -0700
pushed 2014-10-07 13:05 +0000
Eric Rahm Eric Rahm - Bug 806819 - Part 3: Remove redundant FORCE_PR_LOG entries. r=ehsan
4f90b7fb1918462222c557100342cdd627e2f3f3
created 2014-09-25 11:18 -0700
pushed 2014-09-26 21:03 +0000
David Keeler David Keeler - bug 1071308 - (2/2) remove libpkix-style chain validation callback from CertVerifier r=cviecco
c1a81857b963bcbb882a38a3a9d3bfdce76d8d91
created 2014-09-22 07:58 -0700
pushed 2014-09-22 19:56 +0000
Vlatko Markovic Vlatko Markovic - Bug 1059216 - Verification of Trusted Hosted Apps manifest signature, part 1. r=dkeeler,rlb
e0c00c1861af255cc20060c69e30bb8595dd00b3
created 2014-08-08 08:39 -0400
pushed 2014-08-08 21:42 +0000
Ehsan Akhgari Ehsan Akhgari - Bug 579517 follow-up: Remove NSPR types that crept in
a4a8b3b58191206f53748d823cf255fba4042253
created 2014-08-02 08:49 -0700
pushed 2014-08-04 20:24 +0000
Brian Smith Brian Smith - Bug 1043041: Use mozilla::pkix::Time instead of PRTime, r=keeler
64719bb171797b81c6d155251da939904777fa31
created 2014-08-01 23:16 -0700
pushed 2014-08-04 20:24 +0000
Brian Smith Brian Smith - Bug 1047792: Rely on mozilla::pkix to filter out expired certs instead of CERT_CreateSubjectCertList, r=keeler
c989be71f8443b628a15cd0aab16f47de73d3582
created 2014-07-31 12:17 -0700
pushed 2014-08-01 17:02 +0000
Brian Smith Brian Smith - Bug 1041186, Part 2: Rename Input to Reader and InputBuffer to Input, r=keeler
c04d170a0bd9ad169065d5546a1149554a543422
created 2014-07-18 22:30 -0700
pushed 2014-08-01 17:02 +0000
Brian Smith Brian Smith - Bug 1041186, Part 1: Improve buffer overflow protection in mozilla::pkix, r=keeler
a6147f19dc56aecfcce19a019d8f966db8a32492
created 2014-07-20 11:06 -0700
pushed 2014-08-01 17:02 +0000
Brian Smith Brian Smith - Bug 1041343: Use references instead of pointers for TrustLevel output parameters, r=cviecco
5f7dc391e8611d1f12f77d55f2c5a56ef8f6f29e
created 2014-07-18 11:48 -0700
pushed 2014-08-01 17:02 +0000
Brian Smith Brian Smith - Bug 1039064: Use strongly-typed enum instead of NSPR-style error handling, r=keeler
8439b6d7bd2a9056bd1e97d9d98f859216d5a305
created 2014-07-23 13:20 +0200
pushed 2014-07-23 19:25 +0000
Marco Castelluccio Marco Castelluccio - Bug 1021345 - Allow apps to be installed from the Marketplace staging server. r=fabrice
83b81059b2a2c5af28632891978c3ee589958f0f
created 2014-07-15 19:49 -0400
pushed 2014-07-17 00:47 +0000
Cykesiopka Cykesiopka - Bug 360126 - Stop accepting certs that use RSA1023 or weaker; Original patch by Richard van den Berg. r=briansmith
2ea91aa53633847fb32c280a079d9a958534f215
created 2014-07-06 19:36 -0700
pushed 2014-07-15 14:19 +0000
Brian Smith Brian Smith - Bug 1036105: Delegate digest operations to the TrustDomain in mozilla::pkix, r=keeler
578899c0b81952253e829c2e6fa8de1b83afe624
created 2014-07-10 19:00 -0700
pushed 2014-07-15 14:19 +0000
Brian Smith Brian Smith - Bug 1036107, Part 1: Stop using CERTSignedData in mozilla::pkix, r=keeler
440f68cba022b72dd87c1c84de1579cb8295d4eb
created 2014-07-10 22:38 -0700
pushed 2014-07-14 13:24 +0000
Brian Smith Brian Smith - Bug 1037324: Delegate additional name constraint selection to the TrustDomain in mozilla::pkix, r=cviecco
0ed88d692f42f34802beafcea77797f61c918155
created 2014-07-06 15:55 -0700
pushed 2014-07-10 13:16 +0000
Brian Smith Brian Smith - Bug 1035009: Stop using CERTCertList in mozilla::pkix, r=keeler
44c19e8283c2b4e590b3ffdfbfbdef6f370056cc
created 2014-07-02 16:15 -0700
pushed 2014-07-08 13:28 +0000
Brian Smith Brian Smith - Bug 1033563, Part 3: Change mozilla::pkix::TrustDomain::FindPotentialIssuers API to be iterator-like, r=keeler
911d02f2c02a13fbdf80083f6d00886e35523f20
created 2014-07-03 16:59 -0700
pushed 2014-07-08 13:28 +0000
Brian Smith Brian Smith - Bug 1029247, Part 2: Parse certificates using mozilla::pkix::der, r=keeler
3d54fd14fb9c6fce3336ea14831ff51b6bbc6b5d
created 2014-06-20 10:10 -0700
pushed 2014-06-23 14:59 +0000
Brian Smith Brian Smith - Bug 1026261: Remove CERTCertificate from mozilla::pkix revocation checking API, r=keeler
fa797212429e813a44f198c59763a44027a1cadc
created 2014-06-05 15:18 -0700
pushed 2014-06-07 18:15 +0000
Brian Smith Brian Smith - Bug 1020683, Part 1: Remove internal uses of CERTCertificate from mozilla::pkix::VerifyEncodedOCSPResponse, r=keeler
44be87ea2e1be101218c3cb66032f599c465610a
created 2014-06-03 10:47 -0700
pushed 2014-06-04 13:54 +0000
Brian Smith Brian Smith - Bug 1019814: Remove CERTCertificate dependency from TrustDomain::GetCertTrust, r=keeler
ae583d40fab940207d60db0828598a4a05178f3b
created 2014-05-18 15:42 +0200
pushed 2014-05-19 22:51 +0000
Marco Castelluccio Marco Castelluccio - Bug 972201 - Remove the MOZ_B2G_CERTDATA hack. r=briansmith
a4ae7060f43ac1a4e49b30dfd7a95c5212940d4b
created 2014-05-15 18:59 -0700
pushed 2014-05-16 19:31 +0000
Brian Smith Brian Smith - Bug 1006958: Use mozilla::pkix::der to parse certificate policies instead of NSS, r=keeler
c968e47ef70893902ed49f65ade8a2ffe116ea11
created 2014-04-25 16:29 -0700
pushed 2014-05-02 12:59 +0000
Brian Smith Brian Smith - Bug 1002933: Use Strongly-typed enums more often in mozilla::pkix, r=mmc
04ea38d3515f3dd7e739cfed8005fa70634c06fb
created 2014-03-20 14:29 -0700
pushed 2014-03-21 14:35 +0000
David Keeler David Keeler - bug 985201 - rename insanity::pkix to mozilla::pkix r=cviecco r=briansmith
d16477b89f705e458383612ecb10e7ab1e56bd71
created 2014-03-01 20:55 -0800
pushed 2014-03-04 04:39 +0000
Brian Smith Brian Smith - Bug 978528: Return the correct error message when no potential issuers are found during path bulding in insanitY::pkix, r=cviecco
e50c326ad721ba006716daa4f0a43c8e1584c06d
created 2014-02-24 12:37 -0800
pushed 2014-02-27 14:43 +0000
Brian Smith Brian Smith - Bug 921886: Add certificate policiy support to insanity::pkix, r=keeler, r=cviecco
less more (0) -60 tip