370a9e85f216f5f4ff277995a997c5c9b23a819f: Bug 1551041 - Unbreak build on GCC < 4.3 big-endian. r=mt default tip
Jan Beich <jbeich@FreeBSD.org> - Fri, 24 May 2019 10:39:12 +0100 - rev 15128
Push 3367 by martin.thomson@gmail.com at Fri, 24 May 2019 09:46:11 +0000
Bug 1551041 - Unbreak build on GCC < 4.3 big-endian. r=mt
ec6843bc0ce7a4d30150ef65e137c3a1654198a0: Bug 1227096 - assert if outlen is greater than 0. r=kaie
Andi-Bogdan Postelnicu <bpostelnicu@mozilla.com> - Tue, 21 May 2019 17:16:13 +0000 - rev 15127
Push 3366 by jjones@mozilla.com at Tue, 21 May 2019 19:20:58 +0000
Bug 1227096 - assert if outlen is greater than 0. r=kaie Differential Revision: https://phabricator.services.mozilla.com/D31757
0556b3040451e8a7ca0a499005993a95921754d4: Bug 1543874 - Use an external clock for SSL functions, r=ekr,kevinjacobs
Martin Thomson <mt@lowentropy.net> - Mon, 20 May 2019 09:45:56 +0100 - rev 15126
Push 3365 by martin.thomson@gmail.com at Mon, 20 May 2019 11:05:18 +0000
Bug 1543874 - Use an external clock for SSL functions, r=ekr,kevinjacobs Summary: This adds a new (experimental) API that allows users of libssl to provide their own clock function. This is primarily of use in testing, but it also enables our QUIC implementation, which also runs off an external clock. SSL Sockets (and session IDs, when they are in memory) now have a "now()" function and void* arg attached to them. By default, this is a function that calls PR_Now(). These values are copied from the socket to any session ID that is created from the socket, and to any session ID that is restored from the session cache. The ssl_Time() and ssl_TimeUsec() functions have been removed. As part of this, the experimental SSL_SetupAntiReplay() function had to be modified to take an external clock (PR_Now() suffices generally). That function relies on knowing the time, and it doesn't have a socket to work from. To avoid problems arising from the change in the signature, SSL_SetupAntiReplay is now removed. There are now three uses of time in the library: * The primary source of time runs of these newly added functions. This governs session expiry, 0-RTT checks, and related functions. * The session cache uses a separate time to manage its locking. This is of type PRUint32 in seconds (rather than PRTime in microseconds). In investigating this, I found several places where this time in seconds was leaking across to the main functions via the lastAccessTime property. That was fixed. The cache functions that use time now all call ssl_CacheNow() to get time. * DTLS timers run using PRIntervalTime. This is a little annoying and these could be made to use the main time source, but that would result in conversions between PRTime and PRIntervalTime at the DTLS API. PRIntervalTime has a different epoch to PRTime, so this would be a little awkward. Only the first of these can be controlled using the new API. Bugs found: * Expiration time of resumption tokens was based on the sid->expirationTime, which didn't account for the lifetime provided by the server. These are now capped by the minimum of ssl_ticket_lifetime and the value the server indicates. I removed ssl3_sid_timeout, the old limit, because inconsistent lifetimes between client and server messed with tests. The client would have a lower cap than the server, which prevented testing of the enforcement of server limits without jumping through hoops. * There was a missing time conversion in tls13_InWindow which made the window checks too lenient. * lastAccessTime was being set to seconds-since-epoch instead of microseconds-since-epoch in a few places. Reviewers: ekr, KevinJacobs Reviewed By: KevinJacobs Subscribers: cjpatton Bug #: 1543874 Differential Revision: https://phabricator.services.mozilla.com/D27238
65efa74ef84a3b2fcab7fc960ee7c05e28bab2b1: Bug 1551129 - Enable --static build on windows, r=kevinjacobs
Martin Thomson <mt@lowentropy.net> - Thu, 16 May 2019 09:43:04 +0000 - rev 15125
Push 3364 by martin.thomson@gmail.com at Fri, 17 May 2019 15:27:17 +0000
Bug 1551129 - Enable --static build on windows, r=kevinjacobs Summary: Refinements for static building and linking. Reviewers: KevinJacobs Reviewed By: KevinJacobs Bug #: 1551129 Differential Revision: https://phabricator.services.mozilla.com/D30853
dea8df821441759f8a2ce32403b55932308b0ea9: Bug 1549382, pk11slot: fix module leak if C_GetSlotInfo fails, r=rrelyea
Daiki Ueno <dueno@redhat.com> - Mon, 06 May 2019 15:42:07 +0200 - rev 15124
Push 3363 by dueno@redhat.com at Fri, 17 May 2019 10:38:36 +0000
Bug 1549382, pk11slot: fix module leak if C_GetSlotInfo fails, r=rrelyea
a5f68e995e1e7c5be3bdc301d5caf949a694925f: Bug 1528174 - Don't modify lengths if decryption/encryption fails, r=jcj
Martin Thomson <mt@lowentropy.net> - Thu, 16 May 2019 07:46:30 +0000 - rev 15123
Push 3362 by martin.thomson@gmail.com at Thu, 16 May 2019 08:58:56 +0000
Bug 1528174 - Don't modify lengths if decryption/encryption fails, r=jcj Summary: This modifies the encrypt/decrypt paths to only modify their outparams when the operation succeeds. It adds tests to verify this. Reviewers: jcj Reviewed By: jcj Bug #: 1528174 Differential Revision: https://phabricator.services.mozilla.com/D20962
b9bfa1d564f2f88d979d804f29b3bb0c555d3581: Bug 1227090 - assert if outlen is greater than 0. r=kaie
Andi-Bogdan Postelnicu <bpostelnicu@mozilla.com> - Mon, 13 May 2019 09:49:01 +0000 - rev 15122
Push 3361 by jjones@mozilla.com at Wed, 15 May 2019 18:09:56 +0000
Bug 1227090 - assert if outlen is greater than 0. r=kaie Differential Revision: https://phabricator.services.mozilla.com/D25746
d8c3be523da5fe81f11ad6f7228b20d85b67a24d: Bug 1550022 - Include nssutil3 in freebl Android builds. r=jcj,KevinJacobs
Edouard Oger <eoger@fastmail.com> - Wed, 15 May 2019 15:54:31 +0000 - rev 15121
Push 3360 by jjones@mozilla.com at Wed, 15 May 2019 16:01:47 +0000
Bug 1550022 - Include nssutil3 in freebl Android builds. r=jcj,KevinJacobs Differential Revision: https://phabricator.services.mozilla.com/D30380
abab71a3d216bb363d34c15d9df7e79ca7a5f56b: Bug 1551636 - Apply increased chains test timeout to Win32 in addition to Win64 r=jcj
Kevin Jacobs <kjacobs@mozilla.com> - Wed, 15 May 2019 15:44:15 +0000 - rev 15120
Push 3359 by jjones@mozilla.com at Wed, 15 May 2019 15:44:31 +0000
Bug 1551636 - Apply increased chains test timeout to Win32 in addition to Win64 r=jcj Differential Revision: https://phabricator.services.mozilla.com/D31116
b8ff92e0509cf05b4ba0c59ecb905c7610596795: Bug 1515011 - Update Chacha20poly1305 tests to not pass NULL pBuf to PK11_Decrypt when the plaintext message is empty. r=mt
Kevin Jacobs <kjacobs@mozilla.com> - Mon, 13 May 2019 23:48:42 +0000 - rev 15119
Push 3358 by jjones@mozilla.com at Wed, 15 May 2019 15:41:25 +0000
Bug 1515011 - Update Chacha20poly1305 tests to not pass NULL pBuf to PK11_Decrypt when the plaintext message is empty. r=mt Differential Revision: https://phabricator.services.mozilla.com/D29249
976fc928fe90cb4d872c9c72c2177d905b4f3896: Bug 1549603 - Enable optimized builds on taskcluster "mac opt" target r=mt,jcj
Kevin Jacobs <kjacobs@mozilla.com> - Mon, 13 May 2019 21:10:04 +0000 - rev 15118
Push 3357 by jjones@mozilla.com at Wed, 15 May 2019 15:37:09 +0000
Bug 1549603 - Enable optimized builds on taskcluster "mac opt" target r=mt,jcj Differential Revision: https://phabricator.services.mozilla.com/D30254
89def146bde6d8ef667e43cadc9c1c90dc84220a: Bug 1548179 - Remove --test (test_build) option from build.sh (replaced by --static), remove Test builds from taskcluster since we exercise pk11_gtest and mpi_gtests in non-static builds already. r=mt,jcj
Kevin Jacobs <kjacobs@mozilla.com> - Wed, 15 May 2019 15:29:41 +0000 - rev 15117
Push 3356 by jjones@mozilla.com at Wed, 15 May 2019 15:29:59 +0000
Bug 1548179 - Remove --test (test_build) option from build.sh (replaced by --static), remove Test builds from taskcluster since we exercise pk11_gtest and mpi_gtests in non-static builds already. r=mt,jcj Differential Revision: https://phabricator.services.mozilla.com/D30998
daf54f743d3509e2291cb0fd3c1e516c4b43b1e3: Bug 1509432 - clang-format r=jcj
Kevin Jacobs <kjacobs@mozilla.com> - Tue, 14 May 2019 23:48:48 +0000 - rev 15116
Push 3355 by jjones@mozilla.com at Tue, 14 May 2019 23:49:13 +0000
Bug 1509432 - clang-format r=jcj Differential Revision: https://phabricator.services.mozilla.com/D31091
6bef9de7c3de2312deb595f5d1e56c357848518c: Bug 1509432 - Removed duplicated code between mp_set_int and mp_set_ulong. Created a gtest for this functions. r=KevinJacobs
Marcus Burghardt <marcus.apb@gmail.com> - Mon, 13 May 2019 17:00:00 +0000 - rev 15115
Push 3354 by jjones@mozilla.com at Tue, 14 May 2019 15:04:31 +0000
Bug 1509432 - Removed duplicated code between mp_set_int and mp_set_ulong. Created a gtest for this functions. r=KevinJacobs Differential Revision: https://phabricator.services.mozilla.com/D30870
f170c0ff9878ffe3d139a1aa2c1793fc89b6f382: Set version numbers to 3.45 beta
J.C. Jones <jjones@mozilla.com> - Fri, 10 May 2019 14:16:16 -0700 - rev 15114
Push 3353 by jjones@mozilla.com at Fri, 10 May 2019 22:06:59 +0000
Set version numbers to 3.45 beta
f61d58c3c9ba4abfd62998168d50c5d597be4520: Added tag NSS_3_44_RTM for changeset ae1daf2f820c NSS_3_44_BRANCH
J.C. Jones <jjones@mozilla.com> - Fri, 10 May 2019 14:15:10 -0700 - rev 15113
Push 3352 by jjones@mozilla.com at Fri, 10 May 2019 22:06:22 +0000
Added tag NSS_3_44_RTM for changeset ae1daf2f820c
ae1daf2f820cdb83f8e095b21843fa8860a3ba49: Set version numbers to 3.44 final NSS_3_44_BRANCH NSS_3_44_RTM
J.C. Jones <jjones@mozilla.com> - Fri, 10 May 2019 14:14:18 -0700 - rev 15112
Push 3352 by jjones@mozilla.com at Fri, 10 May 2019 22:06:22 +0000
Set version numbers to 3.44 final
fe7fecbd6896f137276fef90c1ed3bc11b82b83d: Added tag NSS_3_44_BETA3 for changeset b2aaab1ad8bd
J.C. Jones <jjones@mozilla.com> - Fri, 10 May 2019 09:13:20 -0700 - rev 15111
Push 3351 by jjones@mozilla.com at Fri, 10 May 2019 16:13:40 +0000
Added tag NSS_3_44_BETA3 for changeset b2aaab1ad8bd
b2aaab1ad8bd040c4d95d4e82838462a5350af43: Bug 1542950 - Eliminate unnecessary runs of cert.sh to speed up CI tests and reduce timeout failures. r=jcj,mt NSS_3_44_BETA3
Kevin Jacobs <kjacobs@mozilla.com> - Fri, 10 May 2019 15:14:41 +0000 - rev 15110
Push 3350 by jjones@mozilla.com at Fri, 10 May 2019 15:14:55 +0000
Bug 1542950 - Eliminate unnecessary runs of cert.sh to speed up CI tests and reduce timeout failures. r=jcj,mt Differential Revision: https://phabricator.services.mozilla.com/D30518
138b2bd6f91d4158942a7087f0f39b520252c960: Bug 1550041 - Pass -mpclmul to iOS targets. r=jcj,KevinJacobs
Edouard Oger <eoger@fastmail.com> - Wed, 08 May 2019 16:25:46 +0000 - rev 15109
Push 3349 by jjones@mozilla.com at Wed, 08 May 2019 16:26:13 +0000
Bug 1550041 - Pass -mpclmul to iOS targets. r=jcj,KevinJacobs Differential Revision: https://phabricator.services.mozilla.com/D30383
(0) -10000 -3000 -1000 -300 -100 -50 -20 tip