security/certverifier/CertVerifier.h
5d42edca79d4b5a1a13647d151dfb989dd9bb507
created 2019-07-02 21:26 +0000
pushed 2019-08-15 19:41 +0000
Dragana Damjanovic Dragana Damjanovic - Bug 1560354 - Transform some nss types into gecko types. r=keeler
c8e523ac7349df2b579b31c74174f0760eefe7f2
created 2019-02-12 18:23 +0000
pushed 2019-02-13 10:39 +0000
Dana Keeler Dana Keeler - bug 1473573 - import intermediate certificates as well as roots r=jcj
b828ed311a01c2977f3c78251cb231bc0f7cfbd1
created 2019-02-01 22:01 +0000
pushed 2019-02-02 09:51 +0000
Dana Keeler Dana Keeler - bug 1514118 - have CertVerifier use any third-party roots rather than going through NSS r=jcj
5f4630838d46dd81dadb13220a4af0da9e23a619
created 2019-01-18 10:16 +0100
pushed 2019-01-18 09:19 +0000
Ehsan Akhgari Ehsan Akhgari - Bug 1521000 - Part 2: Adjust our clang-format rules to include spaces after the hash for nested preprocessor directives r=sylvestre
6f3709b3878117466168c40affa7bca0b60cf75b
created 2018-11-30 11:46 +0100
pushed 2018-11-30 15:15 +0000
Sylvestre Ledru Sylvestre Ledru - Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format
432a98e50d2bfab224328254266069aef1a474cc
created 2018-10-02 14:59 +0200
pushed 2018-10-02 14:41 +0000
Franziskus Kiefer Franziskus Kiefer - Bug 1479787 - use NSS mozpkix in Firefox, r=mt,keeler,glandium
908692fe7446017d7a66fd97b61a9b1da8da7c1e
created 2018-06-18 12:31 +0300
pushed 2018-06-19 10:00 +0000
Andi-Bogdan Postelnicu Andi-Bogdan Postelnicu - Bug 1453795 - PSM-Security - Initialize member fields in classes/ structures. r=keeler
224fbf6776658105ad0ae21e8571ac7e50079431
created 2018-06-19 07:38 +0300
pushed 2018-06-19 04:39 +0000
Narcis Beleuzu Narcis Beleuzu - Backed out changeset 01b407d8a5af (bug 1453795) for build bustages on CertVerifier.h . CLOSED TREE
01b407d8a5afabe4fd3da80e3f586c26dc9bc901
created 2018-06-18 12:31 +0300
pushed 2018-06-19 03:54 +0000
Andi-Bogdan Postelnicu Andi-Bogdan Postelnicu - Bug 1453795 - PSM-Security - Initialize member fields in classes/ structures. r=keeler
cda570f809402b2d7c54d6a9e32e5e65f5b467c9
created 2018-05-10 17:15 -0700
pushed 2018-05-11 00:19 +0000
J.C. Jones J.C. Jones - Bug 1441914 - Fix Windows build on a CLOSED TREE r=me
36e60d71e6a71c253c383508da31743d7e70368f
created 2018-05-07 15:46 -0700
pushed 2018-05-10 23:34 +0000
J.C. Jones J.C. Jones - Bug 1441914 - Make security.pki.distrust_ca_policy a bitmask r=fkiefer r=keeler
47d306cfac90a964882781e135cc70b3359b7a95
created 2018-04-23 18:09 +0200
pushed 2018-05-09 09:41 +0000
David Keeler David Keeler - bug 1456489 - prevent making OCSP requests on the main thread r=fkiefer,jcj
96c17e4d2d9eaef3abcb8d68ff0c21fb8ba403ce
created 2018-05-04 09:34 -0700
pushed 2018-05-08 00:01 +0000
J.C. Jones J.C. Jones - Bug 1456112 - Add a pref to implement the last Symantec Distrust step r=keeler
8a94faa5cc60495da5d80d4b3c07bf5877d2e6d8
created 2018-04-13 16:01 +0300
pushed 2018-04-13 13:06 +0000
Sebastian Hengst Sebastian Hengst - Backed out 4 changesets (bug 525063) on request from Andi. a=backout
d7d2f08e051c3c355d41dc5c1ce1bd3ca55a43b9
created 2018-04-10 21:11 +0200
pushed 2018-04-11 14:24 +0000
Tristan Bourvon Tristan Bourvon - Bug 525063 - Initialize uninitialized class attributes in m-c. r=ehsan
53f2c8abb352ff7986b9c59072226a7d8fdedbd4
created 2018-02-27 16:04 -0700
pushed 2018-02-28 10:58 +0000
J.C. Jones J.C. Jones - Bug 1437754 - Add a pref and disable the Symantec distrust algorithm r=keeler
11b46d2109c423c10ad890282acd9da08c00a409
created 2017-09-18 10:28 -0700
pushed 2017-09-19 09:15 +0000
David Keeler David Keeler - bug 1400913 - back out the functionality changes from bug 1364159 (but keep the test) r=jcj
c263f45e41cea8b6014db61d0584bd123604d695
created 2017-06-03 13:35 +0800
pushed 2017-06-05 09:08 +0000
Cykesiopka Cykesiopka - Bug 1368107 - Remove TransportSecurityInfo::GetHostNameRaw(). r=keeler
600b709c2634cfd9d57f0eefd56af8d1200791c9
created 2017-05-11 16:41 -0700
pushed 2017-05-23 22:13 +0000
David Keeler David Keeler - bug 1364159 - potentially avoid calling CERT_CreateSubjectCertList in NSSCertDBTrustDomain::FindIssuer r=Cykesiopka,jcj
d0e27739f47519e531fd86e2f594a2c955751a51
created 2017-03-31 15:21 -0700
pushed 2017-04-18 08:36 +0000
David Keeler David Keeler - bug 1352262 - make OCSP timeout values configurable r=Cykesiopka,jcj
abdc71fec220dd2186e8a6cbc7d0e47cefe17d0a
created 2017-02-16 00:45 +0530
pushed 2017-02-17 15:18 +0000
Vedant Sareen Vedant Sareen - Bug 1330907 - Rename Telemetry::ID to Telemetry::HistogramID. r=dexter
fb7b874ca753bd06d3df621fbc6250f7f1346082
created 2017-02-13 16:47 -0800
pushed 2017-02-15 11:44 +0000
David Keeler David Keeler - bug 1339010 - ensure pinning and CT telemetry info has been initialized r=jcj
9faf10e794e61d45e42246f101681ceb9f10cced
created 2017-01-09 08:22 +0200
pushed 2017-01-27 00:32 +0000
Sergei Chernov Sergei Chernov - Bug 1320566 - Certificate Transparency - implement CT Policy. r=Dolske,keeler
8fe52da5cb90209689b41879843ba93f6acda884
created 2017-01-12 17:38 +0100
pushed 2017-01-12 16:39 +0000
Andrea Marchesini Andrea Marchesini - Bug 1328653 - Merging all the various *OriginAttributes to just one, r=huseby
77ce40d94cfabce30efafe88835cb7bbe485ba19
created 2016-12-01 09:23 +0100
pushed 2016-12-01 08:23 +0000
Ms2ger Ms2ger - Bug 1319831 - Clarify some code with explicit casts; r=Waldo
296b9cc46b97eaa009a978c32f5a2c6486032677
created 2016-12-01 09:23 +0100
pushed 2016-12-01 08:23 +0000
Ms2ger Ms2ger - Bug 1319831 - Remove an unbalanced pragma from Vector.h; r=Waldo
d7dd10403797f53ca13b86bb751013f5b45aefc9
created 2016-11-23 14:56 +0800
pushed 2016-11-24 00:18 +0000
Jonathan Hao Jonathan Hao - Bug 1315143 - Disable warnings caused by including BasePrincipal.h r=Cykesiopka,keeler
80a39e170b4106eae2d15d56ff10d1d0a5feb84b
created 2016-11-14 18:26 +0800
pushed 2016-11-24 00:18 +0000
Jonathan Hao Jonathan Hao - Bug 1315143 - Make OCSP use Origin Attribute framework (PSM). r=Cykesiopka,keeler
eaefbcd7fd7fc85551dc57b1a3c14f3d0bfcd772
created 2016-11-14 12:52 +0100
pushed 2016-11-15 11:34 +0000
Carsten "Tomcat" Book Carsten "Tomcat" Book - Backed out changeset 81a11a25d25d (bug 1315143)
81a11a25d25d1de8c19f0d05c39150bdb4db61fa
created 2016-11-14 18:26 +0800
pushed 2016-11-15 11:34 +0000
Jonathan Hao Jonathan Hao - Bug 1315143 - Make OCSP use Origin Attribute framework (PSM). r=mayhemer
a24793dce64c6c812c1aa18b4b53c8e518134020
created 2016-10-31 10:05 +0100
pushed 2016-10-31 09:05 +0000
Jan de Mooij Jan de Mooij - Bug 1311996 - Fix code using pkix::Result to not conflict with the new mozilla::Result type. r=keeler
ae2a347924822bf4b55bd45e0825820dfcc66be8
created 2016-10-04 16:49 +0800
pushed 2016-10-21 15:09 +0000
Jonathan Hao Jonathan Hao - Bug 1264562 - Part 4: Instantiates an NSSCertDBTrustDomain containing the first party domain (adapted from Tor Browser patch #13670) r=keeler
12c51a960f265258615dcb04304509d8499bb975
created 2016-10-10 15:44 +0800
pushed 2016-10-11 02:13 +0000
Cykesiopka Cykesiopka - Bug 1296317 - Stop calling PR_SetError() in VerifyCert() and VerifySSLServerCert(). r=keeler
50143dbdcb47bf47c8827c8777b0e11e92e25418
created 2016-08-11 13:41 +0300
pushed 2016-09-28 14:26 +0000
Sergei Chernov Sergei Chernov - Bug 1293231 - Certificate Transparency - basic telemetry reports; r=Cykesiopka,keeler
5436f8c05f6d05eaf561cba34c845b0328e949df
created 2016-09-14 15:11 -0700
pushed 2016-09-22 09:56 +0000
David Keeler David Keeler - bug 1302140 - add policy to disable SHA-1 except for certificates issued by non-built-in CAs r=jcj,rbarnes
d8b95e0d8843fd08aebefe39b102b99291610c91
created 2016-09-21 20:47 +0200
pushed 2016-09-22 09:56 +0000
Sebastian Hengst Sebastian Hengst - Backed out changeset 2df66e8b7411 (bug 1302140) for Windows build bustage in CertVerifier.cpp. r=backout on a CLOSED TREE
2df66e8b7411fa3f7a998f9d87dc967371577c17
created 2016-09-14 15:11 -0700
pushed 2016-09-22 09:56 +0000
David Keeler David Keeler - bug 1302140 - add policy to disable SHA-1 except for certificates issued by non-built-in CAs r=jcj,rbarnes
f615741c86eed245173be02078053f4801403ba4
created 2016-09-02 10:45 +0200
pushed 2016-09-02 08:52 +0000
Cykesiopka Cykesiopka - Bug 1256302 - Remove CertVerifier::InitCertVerifierLog(). r=jcj
8b2fb1aabf141e0c9f9d1f75af9b130c56733217
created 2016-05-05 16:11 -0700
pushed 2016-05-12 17:43 +0000
David Keeler David Keeler - bug 982932 - only allow Netscape-stepUp to be used for serverAuth for old CA certificates r=Cykesiopka,jcj
6fc34759465ee7246858c63d090270797cd1f220
created 2016-05-05 14:56 -0700
pushed 2016-05-06 13:04 +0000
Cykesiopka Cykesiopka - Bug 1267905 - Replace uses of ScopedCERTCertList with UniqueCERTCertList. r=keeler
9c98c0300a89bfe655a1213c91ceb57c517e8bf7
created 2016-04-20 01:14 -0700
pushed 2016-04-20 14:30 +0000
Cykesiopka Cykesiopka - Bug 1260643 - Convert most uses of ScopedCERTCertificate in PSM to UniqueCERTCertificate. r=keeler
dc40f46fae4832e4ff2e15e1034c40a96bf1851c
created 2016-02-09 10:14 -0800
pushed 2016-04-01 20:42 +0000
David Keeler David Keeler - bug 1245280 - add policy mechanism to optionally enforce BRs for falling back to subject CN r=Cykesiopka,mgoodwin
86c4213bc6289a6d29277d352814620572b0d194
created 2016-03-04 17:06 -0800
pushed 2016-03-14 20:38 +0000
David Keeler David Keeler - bug 1228175 - fix IsCertBuiltInRoot r=Cykesiopka,mgoodwin
38bf4f8e55bcc609eaeda0e7b5666f91f82a9a6c
created 2016-03-09 14:22 -0800
pushed 2016-03-09 22:22 +0000
Wes Kocher Wes Kocher - Backed out changeset 490eb9194ae1 (bug 1228175) for TestIsCertBuiltInRoot failures on at least Android
490eb9194ae1bdd73cf4e105654dae2bf4d1abfe
created 2016-03-04 17:06 -0800
pushed 2016-03-09 20:54 +0000
David Keeler David Keeler - bug 1228175 - fix IsCertBuiltInRoot r=Cykesiopka,mgoodwin
bb6bfd172d6e40b5d6a87d8118faf860c02f8545
created 2016-01-13 12:50 -0800
pushed 2016-01-21 00:20 +0000
David Keeler David Keeler - bug 1239455 - rework telemetry for SHA-1 certificates to reflect possible policy states r=Cykesiopka,mgoodwin,rbarnes
801655542a1297462d83ee52f4f96c809e69458d
created 2015-11-13 16:49 +0000
pushed 2015-11-13 16:49 +0000
Mark Goodwin Mark Goodwin - Bug 901698 - Implement OCSP-must-staple; r=keeler
0516d4db29a9d76361dd51331036e0b059b4dd60
created 2015-09-11 14:52 -0400
pushed 2015-09-12 19:09 +0000
Richard Barnes Richard Barnes - Bug 942515 - Show Untrusted Connection Error for SHA-1-based SSL certificates with notBefore >= 2016-01-01 r=keeler
fc86e9f2d6ea34b486058211fe468f4ada67f144
created 2015-08-21 15:14 +0100
pushed 2015-08-21 14:15 +0000
Mark Goodwin Mark Goodwin - Bug 1153444 - Fix up Key Pinning Telemetry (r=keeler)
31d0ae4d8c62e08a17784a6be2ad185d6b2f4e23
created 2015-07-09 07:22 +0100
pushed 2015-07-09 06:22 +0000
Mark Goodwin Mark Goodwin - Bug 1159155 - Add telemetry probe for SHA-1 usage (r=keeler)
a2b818a26d8528a8da37b16622e06df4d0c1676f
created 2015-06-29 22:19 +0200
pushed 2015-06-30 10:02 +0000
Cykesiopka Cykesiopka - Bug 1145679 - Reject EV status for end-entity EV certs with overly long validity periods. r=keeler
4bc3d8e62192ea5ff9084681778e5e95648cfa48
created 2015-05-28 13:29 -0700
pushed 2015-06-08 18:00 +0000
Richard Barnes Richard Barnes - Bug 1010068 - Disable OCSP for DV certificates in Firefox for Android r=keeler
3ba889bb0741884c66bbe902a571ac2e1e2be8cd
created 2015-06-08 11:37 -0400
pushed 2015-06-08 15:37 +0000
Ryan VanderMeulen Ryan VanderMeulen - Backed out changeset fda85020d842 (bug 1010068) for Android test_cert_overrides.js failures.
fda85020d8424532ec552b7178b457015ca3d031
created 2015-05-28 13:29 -0700
pushed 2015-06-08 14:22 +0000
Richard Barnes Richard Barnes - Bug 1010068 - Disable OCSP for DV certificates in Firefox for Android r=keeler
1853f12d7d8c336d0689a8d3e0e21e174609f50a
created 2015-04-06 16:10 -0700
pushed 2015-05-14 22:23 +0000
David Keeler David Keeler - bug 1141189 - implement skipping expensive revocation checks (OCSP fetching) for short-lived certificates r=rbarnes
c6f3b60f6f8ab6a9c1d1918373968433d4e5e50b
created 2015-02-24 15:48 -0800
pushed 2015-02-26 22:25 +0000
David Keeler David Keeler - bug 1049740 - implement telemetry to measure compatibility impact of 2048-bit-minimum RSA keys r=briansmith
fa67b437a89ab8590a5bcd3a91a4d779f716c6dd
created 2015-01-23 06:17 +0100
pushed 2015-02-05 08:56 +0000
TheKK TheKK - Bug 1092398 - "remove unused CertVerifier enums (missing_cert_download_config and crl_download_config)". r=honzab.moz
610eb25d2d63d18d7233d21aaf464471545ccab0
created 2014-12-11 23:22 -0800
pushed 2014-12-12 23:34 +0000
Brian Smith Brian Smith - Bug 1107666: Fix OCSP stapling telemetry (SSL_OCSP_STAPLING), r=keeler
4f90b7fb1918462222c557100342cdd627e2f3f3
created 2014-09-25 11:18 -0700
pushed 2014-09-26 16:53 +0000
David Keeler David Keeler - bug 1071308 - (2/2) remove libpkix-style chain validation callback from CertVerifier r=cviecco
9dc5491eb546b9d334fd305488d50891e2749773
created 2014-09-25 11:08 -0700
pushed 2014-09-26 16:53 +0000
David Keeler David Keeler - bug 1071308 - (1/2) rename pinning_enforcement_level to PinningMode for brevity r=cviecco
less more (0) -60 tip