8d7c96ab80a78c84214b46d4fc0b8ecfd5904cb3: Bug 1640041 - Don't memcpy nothing, r=jcj
Martin Thomson <mt@lowentropy.net> - Fri, 22 May 2020 03:26:20 +0000 - rev 15622
Push 3750 by mthomson@mozilla.com at Fri, 22 May 2020 03:26:49 +0000
Bug 1640041 - Don't memcpy nothing, r=jcj Depends on D76421 Differential Revision: https://phabricator.services.mozilla.com/D76422
1a634da46b875c11bf53313ce2b801896a45b265: Bug 1640042 - Don't memcpy nothing, r=jcj
Martin Thomson <mt@lowentropy.net> - Fri, 22 May 2020 02:51:28 +0000 - rev 15621
Push 3750 by mthomson@mozilla.com at Fri, 22 May 2020 03:26:49 +0000
Bug 1640042 - Don't memcpy nothing, r=jcj Differential Revision: https://phabricator.services.mozilla.com/D76421
10325739e1498d85db57c8c1e2200e3a07f318c0: Bug 1639413 - Option to disable TLS 1.3 EndOfEarlyData message, r=kjacobs
Martin Thomson <mt@lowentropy.net> - Fri, 22 May 2020 01:32:33 +0000 - rev 15620
Push 3749 by mthomson@mozilla.com at Fri, 22 May 2020 01:33:19 +0000
Bug 1639413 - Option to disable TLS 1.3 EndOfEarlyData message, r=kjacobs This adds the ability to disable EndOfEarlyData. On the client this is relatively simple, you just turn the message off. The server is complicated because the server uses this to drive the installation of the right keys. Without it, things get very messy. Thus, I have decided that this is best left to the SSL_RecordLayerData interface. That needs an ugly hack in order to let the new data to pass, but the damage is otherwise relatively minor, apart from one obvious thing. We never really built the SSL_RecordLayerData API to take application data. It only did that to support testing of the functions. Now that we have to deal with this new wrinkle, adding support for 0-RTT is necessary. This change does that. That requires a barrage of new checks to see if application data is acceptable. And then early data is captured in a completely different way, which adds another layer of awfulness. Note that this exposes us to the possibility that Certificate or Finished are received in early data when using SSL_RecordLayerData and this option. I don't think that fixing that is worthwhile as it requires tracking the epoch of handshake messages separate to ss->ssl3.crSpec and the epoch only really exists on that API so that applications don't accidentally do bad things. In QUIC, we specifically block handshake messages in early data, so we have ample protection. Differential Revision: https://phabricator.services.mozilla.com/D76088
527a1792be4e20e56ea0a1ebdd1e14a05eefac1c: Bug 1638289 - Fix multiple definitions of SHA2 on ppc64le. r=kjacobs
Benjamin Beurdouche <bbeurdouche@mozilla.com> - Wed, 20 May 2020 15:20:42 +0000 - rev 15619
Push 3748 by kjacobs@mozilla.com at Wed, 20 May 2020 16:33:09 +0000
Bug 1638289 - Fix multiple definitions of SHA2 on ppc64le. r=kjacobs Differential Revision: https://phabricator.services.mozilla.com/D76101
c182c1c54c4be00d673d06dab666af86b772e200: Added tag NSS_3_44_4_RTM for changeset be8b38f87121 NSS_3_44_BRANCH
J.C. Jones <jjones@mozilla.com> - Tue, 19 May 2020 10:42:46 -0700 - rev 15618
Push 3747 by jjones@mozilla.com at Tue, 19 May 2020 23:14:29 +0000
Added tag NSS_3_44_4_RTM for changeset be8b38f87121
be8b38f871212c6c86962861aae337fa6e6f52a5: Set version numbers to 3.44.4 final NSS_3_44_BRANCH NSS_3_44_4_RTM
J.C. Jones <jjones@mozilla.com> - Tue, 19 May 2020 10:42:43 -0700 - rev 15617
Push 3747 by jjones@mozilla.com at Tue, 19 May 2020 23:14:29 +0000
Set version numbers to 3.44.4 final
48612468b52fe730e54c785adac68b6972c95277: Bug 1631576 - Force a fixed length for DSA exponentiation r=pereida,bbrumley NSS_3_44_BRANCH
Robert Relyea <rrelyea@redhat.com> - Thu, 23 Apr 2020 20:48:28 +0000 - rev 15616
Push 3746 by jjones@mozilla.com at Tue, 19 May 2020 21:46:21 +0000
Bug 1631576 - Force a fixed length for DSA exponentiation r=pereida,bbrumley Differential Revision: https://phabricator.services.mozilla.com/D72011
42186bde906221f6e967776fc2b703c38032f2ed: Bug 1608895 - Install setuptools<45.0.0 until workers are upgraded to python3 r=jcj NSS_3_44_BRANCH
Kevin Jacobs <kjacobs@mozilla.com> - Mon, 13 Jan 2020 20:23:18 +0000 - rev 15615
Push 3746 by jjones@mozilla.com at Tue, 19 May 2020 21:46:21 +0000
Bug 1608895 - Install setuptools<45.0.0 until workers are upgraded to python3 r=jcj [[ https://setuptools.readthedocs.io/en/latest/history.html#v45-0-0 | Setuptools 45.0.0 ]] drops support for Python2, which our Windows workers are running. This patch installs the prior version during build, in order to unblock CI until the workers can be upgraded. Differential Revision: https://phabricator.services.mozilla.com/D59756
256780559bf1e394d0965eced993917095c3e68d: Added tag NSS_3_52_1_RTM for changeset 83d296f12b3e NSS_3_52_BRANCH
J.C. Jones <jjones@mozilla.com> - Tue, 19 May 2020 10:29:46 -0700 - rev 15614
Push 3745 by jjones@mozilla.com at Tue, 19 May 2020 21:34:45 +0000
Added tag NSS_3_52_1_RTM for changeset 83d296f12b3e
83d296f12b3ecec5b2e5bd2f2d1349b8ed34cb81: Set version numbers to 3.52.1 final NSS_3_52_BRANCH NSS_3_52_1_RTM
J.C. Jones <jjones@mozilla.com> - Tue, 19 May 2020 10:29:29 -0700 - rev 15613
Push 3745 by jjones@mozilla.com at Tue, 19 May 2020 21:34:45 +0000
Set version numbers to 3.52.1 final
a5a9937948c8e3dba3a8065781f0ade74be1259e: Bug 1631576 - Force a fixed length for DSA exponentiation r=pereida,bbrumley NSS_3_52_BRANCH
Robert Relyea <rrelyea@redhat.com> - Thu, 23 Apr 2020 20:48:28 +0000 - rev 15612
Push 3745 by jjones@mozilla.com at Tue, 19 May 2020 21:34:45 +0000
Bug 1631576 - Force a fixed length for DSA exponentiation r=pereida,bbrumley Differential Revision: https://phabricator.services.mozilla.com/D72011
daa823a4a29bcef0fec33a379ec83857429aea2e: Bug 1631576 - Force a fixed length for DSA exponentiation r=pereida,bbrumley
Robert Relyea <rrelyea@redhat.com> - Tue, 19 May 2020 17:01:25 +0000 - rev 15611
Push 3744 by jjones@mozilla.com at Tue, 19 May 2020 19:11:57 +0000
Bug 1631576 - Force a fixed length for DSA exponentiation r=pereida,bbrumley Differential Revision: https://phabricator.services.mozilla.com/D72011
d2cfb4ccdf167e5ea06d2bb5bc39c50f789929c8: Bug 1636389 - Relocate deprecated seed algorithm. r=kjacobs
Benjamin Beurdouche <bbeurdouche@mozilla.com> - Thu, 14 May 2020 18:26:54 +0000 - rev 15610
Push 3743 by jjones@mozilla.com at Thu, 14 May 2020 20:56:23 +0000
Bug 1636389 - Relocate deprecated seed algorithm. r=kjacobs Differential Revision: https://phabricator.services.mozilla.com/D74384
789d7241e1f008df82b09a441cad7f053d62252a: Bug 1637083 fix the lib dependencies for the split build r=jcj,rrelyea
Jan-Marek Glogowski <glogow@fbihome.de> - Thu, 14 May 2020 17:42:03 +0000 - rev 15609
Push 3742 by jjones@mozilla.com at Thu, 14 May 2020 17:42:29 +0000
Bug 1637083 fix the lib dependencies for the split build r=jcj,rrelyea This build can be tested by running NSS_BUILD_MODULAR=1 nss/automation/taskcluster/scripts/build.sh from a directory containing the nss and nspr repositories. To make this build's make conditionals easier to handle, it also merges the manifest.mn into the Makefile, because parts of the conditionals depends on $(OS_ARCH) setting. In the end, the goal is just to set the correct build $(DIRS). This also drops the freebl dependeny of ssl, which seems not to be needed, even if it's declared in /lib/ssl/ssl.gyp. Differential Revision: https://phabricator.services.mozilla.com/D75074
744881490c78fd9a93a1ce742a5b6dcbe104763e: Bug 1637083 Replace pre-dependency with shell hack r=rrelyea
Jan-Marek Glogowski <glogow@fbihome.de> - Wed, 13 May 2020 19:00:40 +0000 - rev 15608
Push 3742 by jjones@mozilla.com at Thu, 14 May 2020 17:42:29 +0000
Bug 1637083 Replace pre-dependency with shell hack r=rrelyea Originally I tried multiple variants using make's conditionals to limit DIRS and enforce building the parent directory before the sub-directory. None of them worked for me, most resulting in an infinite recursion, so I used the current pre-depends workaround to fulfill the real dependency. Now I remembered that automake can handle this case for SUBDIRS specifying "." as a directory. The generated Makefile handles it via shell scripting; not nice, but it works. So this gets rid of the workaround, replacing it with a small shell test. Differential Revision: https://phabricator.services.mozilla.com/D74855
e2061fe522f569e93d886f76f3acd0571282797a: Bug 1561331 - Additional modular inverse test r=jcj
Kevin Jacobs <kjacobs@mozilla.com> - Tue, 12 May 2020 21:33:43 +0000 - rev 15607
Push 3741 by kjacobs@mozilla.com at Tue, 12 May 2020 21:34:37 +0000
Bug 1561331 - Additional modular inverse test r=jcj Differential Revision: https://phabricator.services.mozilla.com/D36115
c3f11da5acfc4d7fb2bbf042bb74072b95b47b7f: Bug 1629553 Use order-prereq for $(MAKE_OBJDIR) r=rrelyea
Jan-Marek Glogowski <glogow@fbihome.de> - Fri, 08 May 2020 22:04:11 +0000 - rev 15606
Push 3740 by jjones@mozilla.com at Mon, 11 May 2020 21:08:39 +0000
Bug 1629553 Use order-prereq for $(MAKE_OBJDIR) r=rrelyea Introduces a simple "%/d" rule to create directories using $(MAKE_OBJDIR) and replace all explicit $(MAKE_OBJDIR) calls with an order-only-prerequisites. To expand the $(@D) prerequisite, this needs .SECONDEXPANSION. Differential Revision: https://phabricator.services.mozilla.com/D70989
6c5f91e098a14bf436ae24091d28c05b25f3db00: Bug 1438431 Remove mkdepend tool and targets r=rrelyea
Jan-Marek Glogowski <glogow@fbihome.de> - Tue, 05 May 2020 12:32:03 +0000 - rev 15605
Push 3740 by jjones@mozilla.com at Mon, 11 May 2020 21:08:39 +0000
Bug 1438431 Remove mkdepend tool and targets r=rrelyea Differential Revision: https://phabricator.services.mozilla.com/D70988
d1f9546272601278cf34a41815537db964313fef: Bug 1629553 Drop duplicate header DIR variables r=rrelyea
Jan-Marek Glogowski <glogow@fbihome.de> - Tue, 05 May 2020 12:31:50 +0000 - rev 15604
Push 3740 by jjones@mozilla.com at Mon, 11 May 2020 21:08:39 +0000
Bug 1629553 Drop duplicate header DIR variables r=rrelyea Differential Revision: https://phabricator.services.mozilla.com/D70987
7d285fe69c8c06a0cab4b97f40d16e4321594a72: Bug 1629553 Drop coreconf java support r=rrelyea
Jan-Marek Glogowski <glogow@fbihome.de> - Tue, 05 May 2020 12:31:43 +0000 - rev 15603
Push 3740 by jjones@mozilla.com at Mon, 11 May 2020 21:08:39 +0000
Bug 1629553 Drop coreconf java support r=rrelyea There aren't an Java sources in NSS, so just drop all the stuff referencing java, jars, jni, etc. I didn't try to remove it from tests. Differential Revision: https://phabricator.services.mozilla.com/D70986
(0) -10000 -3000 -1000 -300 -100 -50 -20 +20 +50 tip