security/manager/ssl/src/SSLServerCertVerification.cpp
8a368aa4a72a3a2ecfed28a699bab302466575f8
created 2014-02-27 01:15 -0800
pushed 2014-03-17 21:55 +0000
Brian Smith Brian Smith - Backout bug 967975 (cset bd81c8232ffa) temporarily to make uplifting OCSP patches easier, r=me, a=will-reland-immediately
bd81c8232ffa98795e21e4edcdd6d909c719e5e1
created 2014-02-13 14:53 -0800
pushed 2014-03-17 21:55 +0000
David Keeler David Keeler - bug 967975 - certificate error override telemetry r=briansmith a=sylvestre
676c7d391cd5d83ecb80b0bf149951a0f04a3a2c
created 2014-02-10 11:41 -0800
pushed 2014-03-17 21:55 +0000
Brian Smith Brian Smith - Bug 878932, Part 1: add insanity::pkix as an option for certificate verification, r=keeler, r=cviecco, a=sledru
a3bd9bdeac7334c57ae01bb9b70f858e8900f68c
created 2013-09-27 19:53 -0700
pushed 2014-03-17 21:55 +0000
Brian Smith Brian Smith - Bug 891066, Part 8: Add stapled OCSP response to CertVerifier, r=cviecco
3e3ddb3ce8d331b9898c04e1bb90764738366edc
created 2013-07-08 16:30 -0700
pushed 2014-03-17 21:55 +0000
Brian Smith Brian Smith - Bug 891066, Part 6: Move SSL server cert verification logic to security/certverifier, r=cviecco
aaad90a5936fe7c70754712365d4b06338dd43f3
created 2014-01-22 17:13 -0800
pushed 2014-03-17 21:55 +0000
Brian Smith Brian Smith - Bug 891066, Part 5: Switch to security::pkix::ScopedCERTCertList, r=cviecco
4c4220bf9e14a7c5871f5631e82fc253617996d4
created 2013-07-01 11:39 -0700
pushed 2014-03-17 21:55 +0000
Brian Smith Brian Smith - Bug 733454: Remove hard-coded blocklisting in PSM for Comodo and DigiNotar, r=cviecco
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d
created 2014-01-26 19:36 -0800
pushed 2014-03-17 21:55 +0000
Brian Smith Brian Smith - Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
99cf3634be5dadf488320b12e5c884e6d9363870
created 2014-01-19 14:05 -0800
pushed 2014-03-17 21:55 +0000
Brian Smith Brian Smith - Bug 891066, Part 1: Remove CertVerifier's dependency on nsNSSComponent, r=keeler, r=cviecco
914e2811cfca94cda5ac99a6252b9e8f1c37f9d1
created 2014-01-21 17:30 -0800
pushed 2014-03-17 21:55 +0000
Brian Smith Brian Smith - Bug 961454: Clean up whitespace in key PSM files, r=keeler, r=cviecco
f95bc5df7fcfbd8801a8f043a0d9e25148f3bae9
created 2014-01-17 11:57 -0800
pushed 2014-03-17 21:55 +0000
Raymond Etornam Agbeame(:retornam) Raymond Etornam Agbeame(:retornam) - Bug 950169 - remove unused arguments for LogInvalidCertError r=keeler
2bbbf1068a45bd321080207285a3bccd147d6471
created 2014-02-13 14:53 -0800
pushed 2014-02-21 21:10 +0000
David Keeler David Keeler - bug 967975 - certificate error override telemetry r=briansmith a=lsblakk
dffdacbb272c95f3b666f5526866678ebf45be14
created 2014-01-12 19:31 -0800
pushed 2014-02-04 01:06 +0000
Brian Smith Brian Smith - Bug 959026 - Add telemetry about cases where we don't do OCSP fetching when we expect to. r=keeler, a=bajaj
90581f8d3cec04e020ee755b1fbc78f82ddb9d59
created 2013-12-16 09:32 -0800
pushed 2014-02-04 01:06 +0000
David Keeler David Keeler - bug 887321 - initial OCSP stapling telemetry r=briansmith a=bajaj
3c88ff023416dcbba54ac3cd6fa6f6c99d53330c
created 2013-12-09 09:12 -0800
pushed 2014-02-04 01:06 +0000
Camilo Viecco Camilo Viecco - Bug 936808 - Serialize calls to PK11 routines in SSLServerCertVerification. r=briansmith, a=dveditz
fc7b76d9da1ec1b461410baf1553687441c94b64
created 2013-11-25 15:40 -0800
pushed 2014-02-04 01:06 +0000
David Keeler David Keeler - bug 929617 - disregard expired stapled OCSP responses, acquire fresh ones r=briansmith
e781364ed4f8ad008659a0076dd3f73ebabfd621
created 2013-11-26 13:49 -0800
pushed 2014-02-04 01:06 +0000
David Keeler David Keeler - bug 943115 - return early in CreateCertErrorRunnable for non-overridable errors r=briansmith
86cf8832c658e37212309c3d42fae0aa47710150
created 2014-01-12 19:31 -0800
pushed 2014-01-15 21:07 +0000
Brian Smith Brian Smith - Bug 959026 - Add telemetry about cases where we don't do OCSP fetching when we expect to. r=keeler, a=bajaj
741a8c5658a9c171d11d2e870c7545e2b35ec6f9
created 2013-12-16 09:32 -0800
pushed 2014-01-03 18:21 +0000
David Keeler David Keeler - bug 887321 - initial OCSP stapling telemetry r=briansmith a=bajaj
171046c2495fe4d72b293af29079b22b0b9e38fc
created 2013-11-25 15:40 -0800
pushed 2014-01-03 18:21 +0000
David Keeler David Keeler - bug 929617 - disregard expired stapled OCSP responses, acquire fresh ones r=briansmith a=bajaj
1786928ad7b2e6df873721cdc6d8812cfb44ae5a
created 2013-11-26 13:49 -0800
pushed 2014-01-03 18:21 +0000
David Keeler David Keeler - bug 943115 - return early in CreateCertErrorRunnable for non-overridable errors r=briansmith a=bajaj
8334da282e425ec479875a5a107f158e31e8f9a5
created 2013-12-09 09:12 -0800
pushed 2013-12-10 14:01 +0000
Camilo Viecco Camilo Viecco - Bug 936808 - Serialize calls to PK11 routines in SSLServerCertVerification. r=briansmith, a=dveditz
bb4b199648f34af38d59a477a0cd7278ffb0b3e4
created 2013-10-15 01:14 -0700
pushed 2013-12-09 19:58 +0000
Brian Smith Brian Smith - Bug 754356: Remove TLS intolerance timeout logic, r=honzab
ca5280f3d696c1d519cad78ed39757ee301d5163
created 2013-10-26 00:51 -0700
pushed 2013-12-09 19:58 +0000
Brian Smith Brian Smith - Backed out changeset 673ca84a9171 because of wrong bug number in commit message
673ca84a9171f87b22bd736dba7be879583d316e
created 2013-10-15 01:14 -0700
pushed 2013-12-09 19:58 +0000
Brian Smith Brian Smith - Bug 450280: Remove timeout logic for TLS intolerance, r=honzab
5db1f111ac1972307ec97a6c4819cf5811bff503
created 2013-10-11 00:17 -0700
pushed 2013-12-09 19:58 +0000
Brian Smith Brian Smith - Bug 839310: Expand TLS intolerance logic to work for versions beyond TLS 1.0, r=keeler, r=wtc
a13edd3c49e7a8d3a98c3f7f9a0a1c0e748aa83e
created 2013-10-02 15:08 -0700
pushed 2013-12-09 19:58 +0000
David Keeler David Keeler - bug 914034 - cache stapled OCSP responses on the cert verification thread r=briansmith
64e2f1061cdef29d3e643b57426086d8fe7d5e3c
created 2013-09-29 17:20 -0400
pushed 2013-12-09 19:58 +0000
Ehsan Akhgari Ehsan Akhgari - Backed out changeset a73ffb0d0c97 because of build bustage
a73ffb0d0c97eb26747349b2d99c5af611f0c6f3
created 2013-09-29 16:42 -0400
pushed 2013-12-09 19:58 +0000
Ehsan Akhgari Ehsan Akhgari - Remove a number of unused variables, no bug
f57dd2d6ec4d9a4084ea7f26826cbe79fc5d29f4
created 2013-09-26 14:07 -0400
pushed 2013-12-09 19:58 +0000
patilkr24 patilkr24 - Bug 898712 - Add an error category to SSL errors in the browser console. r=bsmith
83e55c91aa8015e325b24cc09620066543a33827
created 2013-10-11 00:17 -0700
pushed 2013-11-09 23:57 +0000
Brian Smith Brian Smith - Bug 839310: Expand TLS intolerance logic to work for versions beyond TLS 1.0, r=keeler, r=wtc, a=lsblakk
2dc0d50848e428fc550302807ea37c207ae9d15d
created 2013-10-15 01:14 -0700
pushed 2013-11-05 00:57 +0000
Brian Smith Brian Smith - Bug 754356 - Remove TLS intolerance timeout logic. r=honzab, a=lsblakk
d75a3d6ca76282a1285ba1bab973902241a92a9a
created 2013-11-04 17:37 -0500
pushed 2013-11-04 22:38 +0000
Ryan VanderMeulen Ryan VanderMeulen - Backed out changeset 1f661a4ca15c (bug 754356) for suspicion of causing xpcshell failures. a=backout
1f661a4ca15c2c2e15f6d04a635ac791f50dd445
created 2013-10-15 01:14 -0700
pushed 2013-11-04 20:49 +0000
Brian Smith Brian Smith - Bug 754356 - Remove TLS intolerance timeout logic. r=honzab, a=lsblakk
e87c5779660a96ae2e0d68be665665b6e65c43b2
created 2013-10-02 15:08 -0700
pushed 2013-10-28 21:59 +0000
David Keeler David Keeler - Bug 914034 - Cache stapled OCSP responses on the cert verification thread. r=briansmith, a=akeybl
192825330b3e4674d239f4563188dfb772ef7f25
created 2013-09-03 08:55 -0400
pushed 2013-10-28 21:59 +0000
Po-Chun Chang Po-Chun Chang - Bug 908527 - Avoid wasted work in PSM_SSL_BlacklistDigiNotar(). r=cviecoo
25593587283a51ca9711ef95cbe35b0159fac989
created 2013-08-02 16:23 -0700
pushed 2013-10-28 21:59 +0000
David Keeler David Keeler - bug 887052 - refactor nsISiteSecurityService for multiple headers r=cviecco r=mcmanus r=jst sr=jst
b44c631a881a54275852e0eab68955272e6b163b
created 2013-08-02 15:48 -0700
pushed 2013-10-28 21:59 +0000
David Keeler David Keeler - bug 887052 - rename nsIStrictTransportSecurityService to nsISiteSecurityService for refactoring r=cviecco r=mcmanus r=jst sr=jst
8102ebf36ce928fffdc0626535543f3f934dcc2d
created 2013-08-05 16:18 -0400
pushed 2013-10-28 21:59 +0000
Ryan VanderMeulen Ryan VanderMeulen - Backed out changesets 5f8a88c6d0c8 and 97fcb5a154d8 (bug 887052) for OSX mochitest-other orange.
5f8a88c6d0c84c57eb67fd8a39475b7d6bbf938b
created 2013-07-01 10:49 -0700
pushed 2013-10-28 21:59 +0000
David Keeler David Keeler - bug 887052 - refactor nsISiteSecurityService for multiple headers r=cviecco r=mcmanus r=jst sr=jst
97fcb5a154d8d64dea2398b4dbaa29204d1bda69
created 2013-07-01 09:30 -0700
pushed 2013-10-28 21:59 +0000
David Keeler David Keeler - bug 887052 - rename nsIStrictTransportSecurityService to nsISiteSecurityService for refactoring r=cviecco r=mcmanus r=jst sr=jst
676ed933b962dfbdb787765776a04a45e4e5accb
created 2013-10-02 15:08 -0700
pushed 2013-10-21 19:54 +0000
David Keeler David Keeler - bug 914034 - cache stapled OCSP responses on the cert verification thread r=briansmith a=akeybl
e2995028244eee47debe96c4c1296cc4aa6d6f6b
created 2013-07-08 14:56 -0700
pushed 2013-09-16 19:14 +0000
David Keeler David Keeler - bug 889831 - always call SSL_PeerStapledOCSPResponses r=bsmith
ae51db07aed40ba1160ff3147e02bc38225e70ae
created 2013-06-24 00:57 -0700
pushed 2013-09-16 19:14 +0000
Nathan Froyd Nathan Froyd - Bug 857076: fix various build warnings in security/manager/ssl/src/, r=bsmith
98cfdd66fe876af6e7ade4b3550feb504340df92
created 2013-06-17 16:45 -0700
pushed 2013-09-16 19:14 +0000
David Keeler David Keeler - bug 700693 - OCSP stapling PSM changes r=bsmith
6b2f29bc6da8d490c0d8f1f0f4c1c79768b3052b
created 2013-06-22 15:57 -0700
pushed 2013-08-05 18:49 +0000
Brian Smith Brian Smith - Bug 879137, Part 3: Move PSMContentListener to its own source file, r=keeler
8cac85f8f5125eda0fa44845fa2acb742b0e4119
created 2013-06-22 16:45 -0700
pushed 2013-08-05 18:49 +0000
Brian Smith Brian Smith - Backout 308e3cd73c5f, cc9980cb3db2, f5591bedc40e due to build failure
f5591bedc40ed2075c95375a5594297fba1c23b1
created 2013-06-22 15:57 -0700
pushed 2013-08-05 18:49 +0000
Brian Smith Brian Smith - Bug 879137, Part 3: Move PSMContentListener to its own source file, r=keeler
9274b04dcc5da17d728daef4f5ea8c107e068c85
created 2013-06-20 19:50 -0400
pushed 2013-08-05 18:49 +0000
Ryan VanderMeulen Ryan VanderMeulen - Backed out changesets 448ba56d9ba4 and 8cea4b4646ef (bug 700693) for intermittent failures.
8cea4b4646efd5e42f0e79152b19d5a12d609ae6
created 2013-06-17 16:45 -0700
pushed 2013-08-05 18:49 +0000
David Keeler David Keeler - bug 700693 - OCSP stapling PSM changes r=bsmith
e088156c89d0a650c666fc48abc414da41d4f0e8
created 2012-10-27 00:11 -0700
pushed 2013-06-24 18:52 +0000
Brian Smith Brian Smith - Bug 813418 - Centralize certificate validation into CertVerifier part1(cviecco) r=bsmith
f9405d359a22f98b952f2d0bf4d19d27f30df10e
created 2013-04-17 17:17 -0700
pushed 2013-06-24 18:52 +0000
Brian Smith Brian Smith - Bug 787155: Avoid using libpkix on B2G to work around crash in PKIX_List_GetItem and improve performance, r=honzab, a=tef+
f75ceb00fca953a5bbb2c9179695ac56637fdcf2
created 2013-04-15 16:45 -0700
pushed 2013-06-24 18:52 +0000
Camilo Viecco Camilo Viecco - Bug 813418 - Backout 2f47fcb0a648 due to bustage CLOSED TREE
6d5ac3930709417d6b09232b6e25b04939be4813
created 2013-04-15 16:44 -0700
pushed 2013-06-24 18:52 +0000
Camilo Viecco Camilo Viecco - Bug 813418 - Backout 7bcdee03b55 due to bustage CLOSED TREE
7bcdee03b55334d8fb263e03590708f8b281c83d
created 2013-04-15 15:39 -0700
pushed 2013-06-24 18:52 +0000
Camilo Viecco Camilo Viecco - Bug 813418 - Centralize certificate validation (Part 3 Getting chain form verify). r=bsmith
2f47fcb0a648ae0d0153e146d37b186a5287ffc2
created 2012-10-27 00:11 -0700
pushed 2013-06-24 18:52 +0000
Brian Smith Brian Smith - Bug 813418 - Centralize certificate validation (Part 2 centralize verfification) r=bsmith
da2b24b1fc7ca092dcee6935b23f955b331ad8ed
created 2013-01-02 08:14 -0800
pushed 2013-02-19 18:06 +0000
Camilo Viecco Camilo Viecco - Bug 799267 - AuthCertificate Telemetry (measuring first auth, pkix and classic) r=bsmith
21bd64a6b46d231bfe4b0f881b9ad88b1cb3dce6
created 2012-12-19 22:07 +0000
pushed 2013-02-19 18:06 +0000
Ed Morley Ed Morley - Backout 851fd44eeb42 (bug 799267) for leaks on a CLOSED TREE
851fd44eeb42b81c822a40e6baf60d16056b90cd
created 2012-12-19 13:05 -0800
pushed 2013-02-19 18:06 +0000
Camilo Viecco Camilo Viecco - Bug 799267 - Telemetry for Cert Verification (PKIX and classic) in SSLServerCertVerification r=bsmith
8d86cc44bcee2de928b0ae2e51ad4402f0de00e7
created 2012-12-06 22:05 -0500
pushed 2013-02-19 18:06 +0000
Josh Matthews Josh Matthews - Bug 769288 - Part 2: Avoid storing intermediate cert data for private contexts. r=bsmith sr=mayhemer
less more (0) -100 -60 tip