security/apps/AppTrustDomain.cpp
5c19306be55e240d32c7b36f39a06b640c69fce5
created 2016-01-28 10:36 -0800
pushed 2016-04-25 17:12 +0000
sajitk sajitk - Bug 1219482: Replace PRLogModuleInfo with LazyLogModule in security subdirectory.r=nfroyd
5e5b76d866341d47db93066b393af616b1e78f43
created 2016-01-29 10:15 -0800
pushed 2016-03-07 14:25 +0000
Wes Kocher Wes Kocher - Backed out changeset 7ec471c99263 (bug 1219482) to hopefully fix the intermittent hazard failures CLOSED TREE
7ec471c9926360990ad4ec55376c53b54638da3f
created 2016-01-28 10:36 -0500
pushed 2016-03-07 14:25 +0000
sajitk sajitk - Bug 1219482 - Replace PRLogModuleInfo with LazyLogModule in security subdirectory. r=froydnj
e1c2a29753eb768f7584ae2768f3fe284a221b99
created 2015-12-06 08:06 -0500
pushed 2016-01-25 14:05 +0000
Nathan Froyd Nathan Froyd - Bug 1232454 - use UniquePtr<T[]> instead of nsAutoArrayPtr<T> in security/apps/; r=keeler
2f33a28c15a7d96f68f3aa7393a73ffe8a3f3aff
created 2015-10-22 17:09 +0800
pushed 2015-10-29 11:48 +0000
Jonathan Hao Jonathan Hao - Bug 1216469 - Bypass verification for signed packages from trust origins. r=valentin
a2335e0a53d9e28a234328d4ffe721738717e779
created 2015-10-08 17:08 +0800
pushed 2015-10-29 11:48 +0000
Jonathan Hao Jonathan Hao - Bug 1178448 - Use imported CA in developer mode. r=keeler,valentin
e014457c7890c578d1fa4b79004092e20e8ad38d
created 2015-09-07 15:28 +0800
pushed 2015-10-29 11:48 +0000
Jonathan Hao Jonathan Hao - Bug 1178518 - Add an AppTrustedRoot for signed packaged app. r=keeler
0516d4db29a9d76361dd51331036e0b059b4dd60
created 2015-09-11 14:52 -0400
pushed 2015-09-21 14:31 +0000
Richard Barnes Richard Barnes - Bug 942515 - Show Untrusted Connection Error for SHA-1-based SSL certificates with notBefore >= 2016-01-01 r=keeler
de921857f45204056731cf26407ce2d55cbcc9b6
created 2015-08-21 10:00 -0700
pushed 2015-09-21 14:31 +0000
Fabrice Desré Fabrice Desré - Bug 1196988 - Remove THA support. r=gwagner
31d0ae4d8c62e08a17784a6be2ad185d6b2f4e23
created 2015-07-09 07:22 +0100
pushed 2015-08-10 19:25 +0000
Mark Goodwin Mark Goodwin - Bug 1159155 - Add telemetry probe for SHA-1 usage (r=keeler)
a2b818a26d8528a8da37b16622e06df4d0c1676f
created 2015-06-29 22:19 +0200
pushed 2015-08-10 19:25 +0000
Cykesiopka Cykesiopka - Bug 1145679 - Reject EV status for end-entity EV certs with overly long validity periods. r=keeler
1853f12d7d8c336d0689a8d3e0e21e174609f50a
created 2015-04-06 16:10 -0700
pushed 2015-06-29 20:36 +0000
David Keeler David Keeler - bug 1141189 - implement skipping expensive revocation checks (OCSP fetching) for short-lived certificates r=rbarnes
3cdce28ffcc6de50fac4fce22a8bca0a467db44b
created 2015-05-08 14:36 -0700
pushed 2015-05-11 19:23 +0000
Eric Rahm Eric Rahm - Bug 1162691 - Part 1: Remove instances of #ifdef PR_LOGGING in security. r=froydnj
1cfe7aee45084049b9dc9c55c424f0665d27f154
created 2015-03-31 11:32 -0700
pushed 2015-05-11 19:23 +0000
Dave Townsend Dave Townsend - Bug 1038068: Check add-on signatures and refuse to install unsigned or broken add-ons (preffed off for now). r=dveditz
cac8a0359113ff642052bbac834b23264ddc76b6
created 2015-04-23 09:09 +0200
pushed 2015-05-11 19:23 +0000
Carsten "Tomcat" Book Carsten "Tomcat" Book - Backed out changeset f99621542727 (bug 1038068) for test failures in test_corrupt.js etc on a CLOSED TREE
f996215427273ee9a9a7c7c36230a4c6b2777e87
created 2015-03-31 11:32 -0700
pushed 2015-05-11 19:23 +0000
Dave Townsend Dave Townsend - Bug 1038068: Check add-on signatures and refuse to install unsigned or broken add-ons (preffed off for now). r=dveditz
19ae213736588a54a0869463fc3605d618510e76
created 2015-04-21 18:21 -0700
pushed 2015-05-11 19:23 +0000
Wes Kocher Wes Kocher - Backed out changeset 3b48e1a81a17 (bug 1038068) for xpcshell orange even after a clobbering IGNORE IDL
3b48e1a81a170634dce964cd462c752d09680805
created 2015-03-31 11:32 -0700
pushed 2015-05-11 19:23 +0000
Dave Townsend Dave Townsend - Bug 1038068: Check add-on signatures and refuse to install unsigned or broken add-ons (preffed off for now). IGNORE IDL. r=dveditz
eee856befda3b54b11383be5192ce333de40ea08
created 2015-03-05 16:41 +0100
pushed 2015-03-30 18:46 +0000
Cykesiopka Cykesiopka - Bug 1139177 - RSA public key size checking cleanups. r=keeler
99f4f20645206379f887d0914e48745310cad12e
created 2015-02-14 16:59 -0800
pushed 2015-03-30 18:46 +0000
Brian Smith Brian Smith - Bug 1131767: Prune away paths using unacceptable algorithms earlier, r=keeler
5e39cbc525ad091f8ee8cd2a9fbfcf49f3e89c36
created 2015-02-07 12:14 -0800
pushed 2015-02-23 18:11 +0000
Brian Smith Brian Smith - Bug 1130754: Avoid recalculating tbsCertificate digest, r=keeler
3fe8d7d7f9f7373d0d3a3341d1a46347c06c85c7
created 2015-02-02 16:17 -0800
pushed 2015-02-23 18:11 +0000
Brian Smith Brian Smith - Bug 1122841, Part 2: Centralize checking of public key, r=keeler
f7de7f93a099483093279b13681a14e96f22622a
created 2014-12-23 14:51 -0800
pushed 2015-01-12 20:36 +0000
Brian Smith Brian Smith - Bug 1115761, Part 3: Rename NSS-based crypto functions, r=jcj
f564fff0642cfbd82f7192d7e2d8b00610e16091
created 2014-10-18 15:18 +0200
pushed 2014-11-28 15:58 +0000
Cykesiopka Cykesiopka - Bug 622859 - Reject EV certificates with key sizes below RSA 2048. r=briansmith
209ec35a59c13bfccd4b5a787268cb4e1eaf1bb3
created 2014-10-17 13:14 +0200
pushed 2014-11-28 15:58 +0000
Carsten "Tomcat" Book Carsten "Tomcat" Book - Backed out changeset 3afdc3253979 (bug 622859) for breaking m1 tests
3afdc3253979b356a146c55e49eb68eb48580927
created 2014-10-16 05:13 +0200
pushed 2014-11-28 15:58 +0000
Cykesiopka Cykesiopka - Bug 622859 - Reject EV certificates with key sizes below RSA 2048. r=briansmith
f15a0fd7e3db81d3680d031782771e56a6a0d3af
created 2014-10-08 13:17 -0700
pushed 2014-10-13 17:43 +0000
Eric Rahm Eric Rahm - Bug 806819 - Part 3: Remove redundant FORCE_PR_LOG entries. r=ehsan
b92b206a27605a332c3e09dd17370186f6af7ac3
created 2014-10-06 16:32 -0700
pushed 2014-10-13 17:43 +0000
Wes Kocher Wes Kocher - Backed out 5 changesets (bug 806819) for WinXP test failures on a CLOSED TREE
f06cd735b5b3da53a517d763c179c5fe67a97377
created 2014-10-06 13:08 -0700
pushed 2014-10-13 17:43 +0000
Eric Rahm Eric Rahm - Bug 806819 - Part 3: Remove redundant FORCE_PR_LOG entries. r=ehsan
4f90b7fb1918462222c557100342cdd627e2f3f3
created 2014-09-25 11:18 -0700
pushed 2014-10-13 17:43 +0000
David Keeler David Keeler - bug 1071308 - (2/2) remove libpkix-style chain validation callback from CertVerifier r=cviecco
3c4b8e3f6b53811ede5cd3cec64d9d7b80b43e8b
created 2014-09-22 07:58 -0700
pushed 2014-09-22 19:37 +0000
Vlatko Markovic Vlatko Markovic - Bug 1059216 - Verification of Trusted Hosted Apps manifest signature, part 1. r=dkeeler,rlb a=bajaj
e0c00c1861af255cc20060c69e30bb8595dd00b3
created 2014-08-08 08:39 -0400
pushed 2014-09-02 16:57 +0000
Ehsan Akhgari Ehsan Akhgari - Bug 579517 follow-up: Remove NSPR types that crept in
a4a8b3b58191206f53748d823cf255fba4042253
created 2014-08-02 08:49 -0700
pushed 2014-09-02 16:57 +0000
Brian Smith Brian Smith - Bug 1043041: Use mozilla::pkix::Time instead of PRTime, r=keeler
64719bb171797b81c6d155251da939904777fa31
created 2014-08-01 23:16 -0700
pushed 2014-09-02 16:57 +0000
Brian Smith Brian Smith - Bug 1047792: Rely on mozilla::pkix to filter out expired certs instead of CERT_CreateSubjectCertList, r=keeler
c989be71f8443b628a15cd0aab16f47de73d3582
created 2014-07-31 12:17 -0700
pushed 2014-09-02 16:57 +0000
Brian Smith Brian Smith - Bug 1041186, Part 2: Rename Input to Reader and InputBuffer to Input, r=keeler
c04d170a0bd9ad169065d5546a1149554a543422
created 2014-07-18 22:30 -0700
pushed 2014-09-02 16:57 +0000
Brian Smith Brian Smith - Bug 1041186, Part 1: Improve buffer overflow protection in mozilla::pkix, r=keeler
a6147f19dc56aecfcce19a019d8f966db8a32492
created 2014-07-20 11:06 -0700
pushed 2014-09-02 16:57 +0000
Brian Smith Brian Smith - Bug 1041343: Use references instead of pointers for TrustLevel output parameters, r=cviecco
5f7dc391e8611d1f12f77d55f2c5a56ef8f6f29e
created 2014-07-18 11:48 -0700
pushed 2014-09-02 16:57 +0000
Brian Smith Brian Smith - Bug 1039064: Use strongly-typed enum instead of NSPR-style error handling, r=keeler
8439b6d7bd2a9056bd1e97d9d98f859216d5a305
created 2014-07-23 13:20 +0200
pushed 2014-09-02 16:57 +0000
Marco Castelluccio Marco Castelluccio - Bug 1021345 - Allow apps to be installed from the Marketplace staging server. r=fabrice
83b81059b2a2c5af28632891978c3ee589958f0f
created 2014-07-15 19:49 -0400
pushed 2014-07-21 21:23 +0000
Cykesiopka Cykesiopka - Bug 360126 - Stop accepting certs that use RSA1023 or weaker; Original patch by Richard van den Berg. r=briansmith
2ea91aa53633847fb32c280a079d9a958534f215
created 2014-07-06 19:36 -0700
pushed 2014-07-21 21:23 +0000
Brian Smith Brian Smith - Bug 1036105: Delegate digest operations to the TrustDomain in mozilla::pkix, r=keeler
578899c0b81952253e829c2e6fa8de1b83afe624
created 2014-07-10 19:00 -0700
pushed 2014-07-21 21:23 +0000
Brian Smith Brian Smith - Bug 1036107, Part 1: Stop using CERTSignedData in mozilla::pkix, r=keeler
440f68cba022b72dd87c1c84de1579cb8295d4eb
created 2014-07-10 22:38 -0700
pushed 2014-07-21 21:23 +0000
Brian Smith Brian Smith - Bug 1037324: Delegate additional name constraint selection to the TrustDomain in mozilla::pkix, r=cviecco
0ed88d692f42f34802beafcea77797f61c918155
created 2014-07-06 15:55 -0700
pushed 2014-07-21 21:23 +0000
Brian Smith Brian Smith - Bug 1035009: Stop using CERTCertList in mozilla::pkix, r=keeler
44c19e8283c2b4e590b3ffdfbfbdef6f370056cc
created 2014-07-02 16:15 -0700
pushed 2014-07-21 21:23 +0000
Brian Smith Brian Smith - Bug 1033563, Part 3: Change mozilla::pkix::TrustDomain::FindPotentialIssuers API to be iterator-like, r=keeler
911d02f2c02a13fbdf80083f6d00886e35523f20
created 2014-07-03 16:59 -0700
pushed 2014-07-21 21:23 +0000
Brian Smith Brian Smith - Bug 1029247, Part 2: Parse certificates using mozilla::pkix::der, r=keeler
3d54fd14fb9c6fce3336ea14831ff51b6bbc6b5d
created 2014-06-20 10:10 -0700
pushed 2014-07-21 21:23 +0000
Brian Smith Brian Smith - Bug 1026261: Remove CERTCertificate from mozilla::pkix revocation checking API, r=keeler
fa797212429e813a44f198c59763a44027a1cadc
created 2014-06-05 15:18 -0700
pushed 2014-06-09 21:40 +0000
Brian Smith Brian Smith - Bug 1020683, Part 1: Remove internal uses of CERTCertificate from mozilla::pkix::VerifyEncodedOCSPResponse, r=keeler
44be87ea2e1be101218c3cb66032f599c465610a
created 2014-06-03 10:47 -0700
pushed 2014-06-09 21:40 +0000
Brian Smith Brian Smith - Bug 1019814: Remove CERTCertificate dependency from TrustDomain::GetCertTrust, r=keeler
ae583d40fab940207d60db0828598a4a05178f3b
created 2014-05-18 15:42 +0200
pushed 2014-06-09 21:40 +0000
Marco Castelluccio Marco Castelluccio - Bug 972201 - Remove the MOZ_B2G_CERTDATA hack. r=briansmith
a4ae7060f43ac1a4e49b30dfd7a95c5212940d4b
created 2014-05-15 18:59 -0700
pushed 2014-06-09 21:40 +0000
Brian Smith Brian Smith - Bug 1006958: Use mozilla::pkix::der to parse certificate policies instead of NSS, r=keeler
c968e47ef70893902ed49f65ade8a2ffe116ea11
created 2014-04-25 16:29 -0700
pushed 2014-06-09 21:40 +0000
Brian Smith Brian Smith - Bug 1002933: Use Strongly-typed enums more often in mozilla::pkix, r=mmc
04ea38d3515f3dd7e739cfed8005fa70634c06fb
created 2014-03-20 14:29 -0700
pushed 2014-04-28 18:43 +0000
David Keeler David Keeler - bug 985201 - rename insanity::pkix to mozilla::pkix r=cviecco r=briansmith
d16477b89f705e458383612ecb10e7ab1e56bd71
created 2014-03-01 20:55 -0800
pushed 2014-03-17 23:08 +0000
Brian Smith Brian Smith - Bug 978528: Return the correct error message when no potential issuers are found during path bulding in insanitY::pkix, r=cviecco
1d447f155ab728bc5a83b6f3f7a03e69f9dea977
created 2014-02-24 12:37 -0800
pushed 2014-02-27 21:46 +0000
Brian Smith Brian Smith - Bug 921886: Add certificate policiy support to insanity::pkix, r=keeler, r=cviecco, a=sledru
4d6c9d219ee3b8c5503c39456ef42bebe2f6e364
created 2014-02-16 18:09 -0800
pushed 2014-02-27 21:46 +0000
Brian Smith Brian Smith - Bug 878932, Parts 1-3: Add OCSP response parsing & validation to insanity::pkix, r=keeler, a=sledru
0f5364659f88f5e763b932944a024707b2991d67
created 2014-02-18 13:33 -0800
pushed 2014-02-18 21:35 +0000
Marco Castelluccio Marco Castelluccio - Bug 896620: Make marketplace certs work on in all products, r=keeler, r=briansmith, a=sledru
less more (0) tip