7e453a5afcb45713708c313465742563ce6e6591: Set version numbers to 3.53 final NSS_3_53_BRANCH NSS_3_53_RTM
J.C. Jones <jjones@mozilla.com> - Fri, 29 May 2020 13:34:42 -0700 - rev 15638
Push 3758 by jjones@mozilla.com at Fri, 29 May 2020 20:50:06 +0000
Set version numbers to 3.53 final
90c954f62c9d35925be4f38faa8fc6d740902613: Added tag NSS_3_53_BETA2 for changeset 8fe22033a88e
Kevin Jacobs <kjacobs@mozilla.com> - Thu, 28 May 2020 16:16:49 -0700 - rev 15637
Push 3757 by kjacobs@mozilla.com at Thu, 28 May 2020 23:19:34 +0000
Added tag NSS_3_53_BETA2 for changeset 8fe22033a88e
8fe22033a88e7fb75d451455ca841017ce50f9c1: Bug 1640260 - Initialize PBE params r=jcj NSS_3_53_BETA2
Kevin Jacobs <kjacobs@mozilla.com> - Thu, 28 May 2020 22:34:52 +0000 - rev 15636
Push 3756 by kjacobs@mozilla.com at Thu, 28 May 2020 22:35:24 +0000
Bug 1640260 - Initialize PBE params r=jcj Differential Revision: https://phabricator.services.mozilla.com/D76544
8bfb386f459fbb3c091d41478f24ef5b25c3a224: Bug 1618404 - Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs. r=jcj
Benjamin Beurdouche <bbeurdouche@mozilla.com> - Wed, 27 May 2020 21:48:05 +0000 - rev 15635
Push 3755 by kjacobs@mozilla.com at Thu, 28 May 2020 19:31:57 +0000
Bug 1618404 - Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs. r=jcj Differential Revision: https://phabricator.services.mozilla.com/D77062
4d1b7bbeebfe12cb16b2af74cfec4183637014cc: Bug 1621159 - Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID root certs. r=jcj
Benjamin Beurdouche <bbeurdouche@mozilla.com> - Wed, 27 May 2020 21:35:30 +0000 - rev 15634
Push 3754 by kjacobs@mozilla.com at Thu, 28 May 2020 19:31:23 +0000
Bug 1621159 - Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID root certs. r=jcj Differential Revision: https://phabricator.services.mozilla.com/D77065
661e3e3f6ba515a36fc97038164979a216c9f87b: Added tag NSS_3_53_BETA1 for changeset c7a1c91cd9be
Kevin Jacobs <kjacobs@mozilla.com> - Tue, 26 May 2020 13:12:24 -0700 - rev 15633
Push 3753 by kjacobs@mozilla.com at Tue, 26 May 2020 20:16:34 +0000
Added tag NSS_3_53_BETA1 for changeset c7a1c91cd9be
c7a1c91cd9befb627eb908965ae3a611b381c7ad: Bug 1629414 - Guard USE_PPC_CRYPTO and VSX types with __VSX__ and __ALTIVEC__ r=kjacobs NSS_3_53_BETA1
J.C. Jones <jjones@mozilla.com> - Fri, 22 May 2020 22:34:20 +0000 - rev 15632
Push 3752 by jjones@mozilla.com at Fri, 22 May 2020 23:09:21 +0000
Bug 1629414 - Guard USE_PPC_CRYPTO and VSX types with __VSX__ and __ALTIVEC__ r=kjacobs This avoids build errors on non-VSX architectures even when not compiling the POWER accelerated code. Differential Revision: https://phabricator.services.mozilla.com/D72014
e23fe363fa058e9b289ae03cd352fc1f9e057146: Bug 1639033 - Use unsigned int for a loop counter to eliminate a signed-unsigned comparison warning in aes-x86.c. r=kjacobs
Jeff Walden <jwalden@mit.edu> - Thu, 21 May 2020 19:34:16 +0000 - rev 15631
Push 3751 by kjacobs@mozilla.com at Fri, 22 May 2020 20:56:57 +0000
Bug 1639033 - Use unsigned int for a loop counter to eliminate a signed-unsigned comparison warning in aes-x86.c. r=kjacobs Depends on D75847 Differential Revision: https://phabricator.services.mozilla.com/D75848
0d778b0e778fa3326421b23e07bc31348f951053: Bug 1639033 - Used unsigned int instead of int in a few places in ec.c to eliminate signed-unsigned comparison warnings. r=kjacobs
Jeff Walden <jwalden@mit.edu> - Thu, 21 May 2020 20:41:52 +0000 - rev 15630
Push 3751 by kjacobs@mozilla.com at Fri, 22 May 2020 20:56:57 +0000
Bug 1639033 - Used unsigned int instead of int in a few places in ec.c to eliminate signed-unsigned comparison warnings. r=kjacobs Depends on D75846 Differential Revision: https://phabricator.services.mozilla.com/D75847
df5c8f6430a027353c46103a26e057cfa1a760db: Bug 1639033 - Use unsigned int rather than int for two variables to eliminate a bunch of signed-unsigned comparison warnings. r=kjacobs
Jeff Walden <jwalden@mit.edu> - Thu, 21 May 2020 20:37:41 +0000 - rev 15629
Push 3751 by kjacobs@mozilla.com at Fri, 22 May 2020 20:56:57 +0000
Bug 1639033 - Use unsigned int rather than int for two variables to eliminate a bunch of signed-unsigned comparison warnings. r=kjacobs Depends on D75845 Differential Revision: https://phabricator.services.mozilla.com/D75846
ce5b8b7e010cca549faaf067f7315ae03dfe258b: Bug 1639033 - Use unsigned int for various count variables in mplogic.c to eliminate signed-unsigned comparison warnings. r=kjacobs
Jeff Walden <jwalden@mit.edu> - Thu, 21 May 2020 20:08:26 +0000 - rev 15628
Push 3751 by kjacobs@mozilla.com at Fri, 22 May 2020 20:56:57 +0000
Bug 1639033 - Use unsigned int for various count variables in mplogic.c to eliminate signed-unsigned comparison warnings. r=kjacobs Depends on D75844 Differential Revision: https://phabricator.services.mozilla.com/D75845
563a7cd7484bde21b387dda2b0b7e4e5a049f7cf: Bug 1639033 - Use size_t for loops up to sizeof(T) in aeskeywrap.c to eliminate some signed-comparison warnings. r=kjacobs
Jeff Walden <jwalden@mit.edu> - Thu, 21 May 2020 19:46:52 +0000 - rev 15627
Push 3751 by kjacobs@mozilla.com at Fri, 22 May 2020 20:56:57 +0000
Bug 1639033 - Use size_t for loops up to sizeof(T) in aeskeywrap.c to eliminate some signed-comparison warnings. r=kjacobs Depends on D75843 Differential Revision: https://phabricator.services.mozilla.com/D75844
a5f80d0805caeda11968611221ffd48f62334680: Bug 1639033 - Change +sftk_xcbc_mac_pad's block-size argument to be unsigned int to avoid sign-comparison warnings. r=kjacobs
Jeff Walden <jwalden@mit.edu> - Thu, 21 May 2020 19:57:07 +0000 - rev 15626
Push 3751 by kjacobs@mozilla.com at Fri, 22 May 2020 20:56:57 +0000
Bug 1639033 - Change +sftk_xcbc_mac_pad's block-size argument to be unsigned int to avoid sign-comparison warnings. r=kjacobs Depends on D75842 Differential Revision: https://phabricator.services.mozilla.com/D75843
e65dd5c2cf86c36d414fa99986e49e9b1bd97aa0: Bug 1639033 - Use the jarType enum type, not int, for certain variables and arguments in jar.c -- for greater precision, and to avoid sign-comparison warnings. r=kjacobs
Jeff Walden <jwalden@mit.edu> - Fri, 22 May 2020 20:35:53 +0000 - rev 15625
Push 3751 by kjacobs@mozilla.com at Fri, 22 May 2020 20:56:57 +0000
Bug 1639033 - Use the jarType enum type, not int, for certain variables and arguments in jar.c -- for greater precision, and to avoid sign-comparison warnings. r=kjacobs Depends on D75841 Differential Revision: https://phabricator.services.mozilla.com/D75842
6512178a58f5108488feda1da805afa6a1ab6315: Bug 1639033 - Make all |moduleIndex| variables in pkcs11.c be unsigned, to eliminate a -Wsign-compare warning. r=kjacobs
Jeff Walden <jwalden@mit.edu> - Tue, 19 May 2020 21:17:27 +0000 - rev 15624
Push 3751 by kjacobs@mozilla.com at Fri, 22 May 2020 20:56:57 +0000
Bug 1639033 - Make all |moduleIndex| variables in pkcs11.c be unsigned, to eliminate a -Wsign-compare warning. r=kjacobs Depends on D75840 Differential Revision: https://phabricator.services.mozilla.com/D75841
98390eef50a10d496d35e38ef03f2248a47abd92: Bug 1639033 - Fix signed-unsigned comparison warning in basicutil.c. r=kjacobs
Jeff Walden <jwalden@mit.edu> - Tue, 19 May 2020 20:09:44 +0000 - rev 15623
Push 3751 by kjacobs@mozilla.com at Fri, 22 May 2020 20:56:57 +0000
Bug 1639033 - Fix signed-unsigned comparison warning in basicutil.c. r=kjacobs Differential Revision: https://phabricator.services.mozilla.com/D75840
8d7c96ab80a78c84214b46d4fc0b8ecfd5904cb3: Bug 1640041 - Don't memcpy nothing, r=jcj
Martin Thomson <mt@lowentropy.net> - Fri, 22 May 2020 03:26:20 +0000 - rev 15622
Push 3750 by mthomson@mozilla.com at Fri, 22 May 2020 03:26:49 +0000
Bug 1640041 - Don't memcpy nothing, r=jcj Depends on D76421 Differential Revision: https://phabricator.services.mozilla.com/D76422
1a634da46b875c11bf53313ce2b801896a45b265: Bug 1640042 - Don't memcpy nothing, r=jcj
Martin Thomson <mt@lowentropy.net> - Fri, 22 May 2020 02:51:28 +0000 - rev 15621
Push 3750 by mthomson@mozilla.com at Fri, 22 May 2020 03:26:49 +0000
Bug 1640042 - Don't memcpy nothing, r=jcj Differential Revision: https://phabricator.services.mozilla.com/D76421
10325739e1498d85db57c8c1e2200e3a07f318c0: Bug 1639413 - Option to disable TLS 1.3 EndOfEarlyData message, r=kjacobs
Martin Thomson <mt@lowentropy.net> - Fri, 22 May 2020 01:32:33 +0000 - rev 15620
Push 3749 by mthomson@mozilla.com at Fri, 22 May 2020 01:33:19 +0000
Bug 1639413 - Option to disable TLS 1.3 EndOfEarlyData message, r=kjacobs This adds the ability to disable EndOfEarlyData. On the client this is relatively simple, you just turn the message off. The server is complicated because the server uses this to drive the installation of the right keys. Without it, things get very messy. Thus, I have decided that this is best left to the SSL_RecordLayerData interface. That needs an ugly hack in order to let the new data to pass, but the damage is otherwise relatively minor, apart from one obvious thing. We never really built the SSL_RecordLayerData API to take application data. It only did that to support testing of the functions. Now that we have to deal with this new wrinkle, adding support for 0-RTT is necessary. This change does that. That requires a barrage of new checks to see if application data is acceptable. And then early data is captured in a completely different way, which adds another layer of awfulness. Note that this exposes us to the possibility that Certificate or Finished are received in early data when using SSL_RecordLayerData and this option. I don't think that fixing that is worthwhile as it requires tracking the epoch of handshake messages separate to ss->ssl3.crSpec and the epoch only really exists on that API so that applications don't accidentally do bad things. In QUIC, we specifically block handshake messages in early data, so we have ample protection. Differential Revision: https://phabricator.services.mozilla.com/D76088
527a1792be4e20e56ea0a1ebdd1e14a05eefac1c: Bug 1638289 - Fix multiple definitions of SHA2 on ppc64le. r=kjacobs
Benjamin Beurdouche <bbeurdouche@mozilla.com> - Wed, 20 May 2020 15:20:42 +0000 - rev 15619
Push 3748 by kjacobs@mozilla.com at Wed, 20 May 2020 16:33:09 +0000
Bug 1638289 - Fix multiple definitions of SHA2 on ppc64le. r=kjacobs Differential Revision: https://phabricator.services.mozilla.com/D76101
(0) -10000 -3000 -1000 -300 -100 -50 -20 +20 +50 tip