help
|
diff browse annotate |
8a368aa4a72a3a2ecfed28a699bab302466575f8 created 2014-02-27 01:15 -0800 pushed 2014-03-17 21:55 +0000 |
Brian Smith | Brian Smith - Backout bug 967975 (cset bd81c8232ffa) temporarily to make uplifting OCSP patches easier, r=me, a=will-reland-immediately |
|
diff browse annotate |
bd81c8232ffa98795e21e4edcdd6d909c719e5e1 created 2014-02-13 14:53 -0800 pushed 2014-03-17 21:55 +0000 |
David Keeler | David Keeler - bug 967975 - certificate error override telemetry r=briansmith a=sylvestre |
|
diff browse annotate |
676c7d391cd5d83ecb80b0bf149951a0f04a3a2c created 2014-02-10 11:41 -0800 pushed 2014-03-17 21:55 +0000 |
Brian Smith | Brian Smith - Bug 878932, Part 1: add insanity::pkix as an option for certificate verification, r=keeler, r=cviecco, a=sledru |
|
diff browse annotate |
a3bd9bdeac7334c57ae01bb9b70f858e8900f68c created 2013-09-27 19:53 -0700 pushed 2014-03-17 21:55 +0000 |
Brian Smith | Brian Smith - Bug 891066, Part 8: Add stapled OCSP response to CertVerifier, r=cviecco |
|
diff browse annotate |
3e3ddb3ce8d331b9898c04e1bb90764738366edc created 2013-07-08 16:30 -0700 pushed 2014-03-17 21:55 +0000 |
Brian Smith | Brian Smith - Bug 891066, Part 6: Move SSL server cert verification logic to security/certverifier, r=cviecco |
|
diff browse annotate |
aaad90a5936fe7c70754712365d4b06338dd43f3 created 2014-01-22 17:13 -0800 pushed 2014-03-17 21:55 +0000 |
Brian Smith | Brian Smith - Bug 891066, Part 5: Switch to security::pkix::ScopedCERTCertList, r=cviecco |
|
diff browse annotate |
4c4220bf9e14a7c5871f5631e82fc253617996d4 created 2013-07-01 11:39 -0700 pushed 2014-03-17 21:55 +0000 |
Brian Smith | Brian Smith - Bug 733454: Remove hard-coded blocklisting in PSM for Comodo and DigiNotar, r=cviecco |
|
diff browse annotate |
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d created 2014-01-26 19:36 -0800 pushed 2014-03-17 21:55 +0000 |
Brian Smith | Brian Smith - Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler |
|
diff browse annotate |
99cf3634be5dadf488320b12e5c884e6d9363870 created 2014-01-19 14:05 -0800 pushed 2014-03-17 21:55 +0000 |
Brian Smith | Brian Smith - Bug 891066, Part 1: Remove CertVerifier's dependency on nsNSSComponent, r=keeler, r=cviecco |
|
diff browse annotate |
914e2811cfca94cda5ac99a6252b9e8f1c37f9d1 created 2014-01-21 17:30 -0800 pushed 2014-03-17 21:55 +0000 |
Brian Smith | Brian Smith - Bug 961454: Clean up whitespace in key PSM files, r=keeler, r=cviecco |
|
diff browse annotate |
f95bc5df7fcfbd8801a8f043a0d9e25148f3bae9 created 2014-01-17 11:57 -0800 pushed 2014-03-17 21:55 +0000 |
Raymond Etornam Agbeame(:retornam) | Raymond Etornam Agbeame(:retornam) - Bug 950169 - remove unused arguments for LogInvalidCertError r=keeler |
|
diff browse annotate |
2bbbf1068a45bd321080207285a3bccd147d6471 created 2014-02-13 14:53 -0800 pushed 2014-02-21 21:10 +0000 |
David Keeler | David Keeler - bug 967975 - certificate error override telemetry r=briansmith a=lsblakk |
|
diff browse annotate |
dffdacbb272c95f3b666f5526866678ebf45be14 created 2014-01-12 19:31 -0800 pushed 2014-02-04 01:06 +0000 |
Brian Smith | Brian Smith - Bug 959026 - Add telemetry about cases where we don't do OCSP fetching when we expect to. r=keeler, a=bajaj |
|
diff browse annotate |
90581f8d3cec04e020ee755b1fbc78f82ddb9d59 created 2013-12-16 09:32 -0800 pushed 2014-02-04 01:06 +0000 |
David Keeler | David Keeler - bug 887321 - initial OCSP stapling telemetry r=briansmith a=bajaj |
|
diff browse annotate |
3c88ff023416dcbba54ac3cd6fa6f6c99d53330c created 2013-12-09 09:12 -0800 pushed 2014-02-04 01:06 +0000 |
Camilo Viecco | Camilo Viecco - Bug 936808 - Serialize calls to PK11 routines in SSLServerCertVerification. r=briansmith, a=dveditz |
|
diff browse annotate |
fc7b76d9da1ec1b461410baf1553687441c94b64 created 2013-11-25 15:40 -0800 pushed 2014-02-04 01:06 +0000 |
David Keeler | David Keeler - bug 929617 - disregard expired stapled OCSP responses, acquire fresh ones r=briansmith |
|
diff browse annotate |
e781364ed4f8ad008659a0076dd3f73ebabfd621 created 2013-11-26 13:49 -0800 pushed 2014-02-04 01:06 +0000 |
David Keeler | David Keeler - bug 943115 - return early in CreateCertErrorRunnable for non-overridable errors r=briansmith |
|
diff browse annotate |
86cf8832c658e37212309c3d42fae0aa47710150 created 2014-01-12 19:31 -0800 pushed 2014-01-15 21:07 +0000 |
Brian Smith | Brian Smith - Bug 959026 - Add telemetry about cases where we don't do OCSP fetching when we expect to. r=keeler, a=bajaj |
|
diff browse annotate |
741a8c5658a9c171d11d2e870c7545e2b35ec6f9 created 2013-12-16 09:32 -0800 pushed 2014-01-03 18:21 +0000 |
David Keeler | David Keeler - bug 887321 - initial OCSP stapling telemetry r=briansmith a=bajaj |
|
diff browse annotate |
171046c2495fe4d72b293af29079b22b0b9e38fc created 2013-11-25 15:40 -0800 pushed 2014-01-03 18:21 +0000 |
David Keeler | David Keeler - bug 929617 - disregard expired stapled OCSP responses, acquire fresh ones r=briansmith a=bajaj |
|
diff browse annotate |
1786928ad7b2e6df873721cdc6d8812cfb44ae5a created 2013-11-26 13:49 -0800 pushed 2014-01-03 18:21 +0000 |
David Keeler | David Keeler - bug 943115 - return early in CreateCertErrorRunnable for non-overridable errors r=briansmith a=bajaj |
|
diff browse annotate |
8334da282e425ec479875a5a107f158e31e8f9a5 created 2013-12-09 09:12 -0800 pushed 2013-12-10 14:01 +0000 |
Camilo Viecco | Camilo Viecco - Bug 936808 - Serialize calls to PK11 routines in SSLServerCertVerification. r=briansmith, a=dveditz |
|
diff browse annotate |
bb4b199648f34af38d59a477a0cd7278ffb0b3e4 created 2013-10-15 01:14 -0700 pushed 2013-12-09 19:58 +0000 |
Brian Smith | Brian Smith - Bug 754356: Remove TLS intolerance timeout logic, r=honzab |
|
diff browse annotate |
ca5280f3d696c1d519cad78ed39757ee301d5163 created 2013-10-26 00:51 -0700 pushed 2013-12-09 19:58 +0000 |
Brian Smith | Brian Smith - Backed out changeset 673ca84a9171 because of wrong bug number in commit message |
|
diff browse annotate |
673ca84a9171f87b22bd736dba7be879583d316e created 2013-10-15 01:14 -0700 pushed 2013-12-09 19:58 +0000 |
Brian Smith | Brian Smith - Bug 450280: Remove timeout logic for TLS intolerance, r=honzab |
|
diff browse annotate |
5db1f111ac1972307ec97a6c4819cf5811bff503 created 2013-10-11 00:17 -0700 pushed 2013-12-09 19:58 +0000 |
Brian Smith | Brian Smith - Bug 839310: Expand TLS intolerance logic to work for versions beyond TLS 1.0, r=keeler, r=wtc |
|
diff browse annotate |
a13edd3c49e7a8d3a98c3f7f9a0a1c0e748aa83e created 2013-10-02 15:08 -0700 pushed 2013-12-09 19:58 +0000 |
David Keeler | David Keeler - bug 914034 - cache stapled OCSP responses on the cert verification thread r=briansmith |
|
diff browse annotate |
64e2f1061cdef29d3e643b57426086d8fe7d5e3c created 2013-09-29 17:20 -0400 pushed 2013-12-09 19:58 +0000 |
Ehsan Akhgari | Ehsan Akhgari - Backed out changeset a73ffb0d0c97 because of build bustage |
|
diff browse annotate |
a73ffb0d0c97eb26747349b2d99c5af611f0c6f3 created 2013-09-29 16:42 -0400 pushed 2013-12-09 19:58 +0000 |
Ehsan Akhgari | Ehsan Akhgari - Remove a number of unused variables, no bug |
|
diff browse annotate |
f57dd2d6ec4d9a4084ea7f26826cbe79fc5d29f4 created 2013-09-26 14:07 -0400 pushed 2013-12-09 19:58 +0000 |
patilkr24 | patilkr24 - Bug 898712 - Add an error category to SSL errors in the browser console. r=bsmith |
|
diff browse annotate |
83e55c91aa8015e325b24cc09620066543a33827 created 2013-10-11 00:17 -0700 pushed 2013-11-09 23:57 +0000 |
Brian Smith | Brian Smith - Bug 839310: Expand TLS intolerance logic to work for versions beyond TLS 1.0, r=keeler, r=wtc, a=lsblakk |
|
diff browse annotate |
2dc0d50848e428fc550302807ea37c207ae9d15d created 2013-10-15 01:14 -0700 pushed 2013-11-05 00:57 +0000 |
Brian Smith | Brian Smith - Bug 754356 - Remove TLS intolerance timeout logic. r=honzab, a=lsblakk |
|
diff browse annotate |
d75a3d6ca76282a1285ba1bab973902241a92a9a created 2013-11-04 17:37 -0500 pushed 2013-11-04 22:38 +0000 |
Ryan VanderMeulen | Ryan VanderMeulen - Backed out changeset 1f661a4ca15c (bug 754356) for suspicion of causing xpcshell failures. a=backout |
|
diff browse annotate |
1f661a4ca15c2c2e15f6d04a635ac791f50dd445 created 2013-10-15 01:14 -0700 pushed 2013-11-04 20:49 +0000 |
Brian Smith | Brian Smith - Bug 754356 - Remove TLS intolerance timeout logic. r=honzab, a=lsblakk |
|
diff browse annotate |
e87c5779660a96ae2e0d68be665665b6e65c43b2 created 2013-10-02 15:08 -0700 pushed 2013-10-28 21:59 +0000 |
David Keeler | David Keeler - Bug 914034 - Cache stapled OCSP responses on the cert verification thread. r=briansmith, a=akeybl |
|
diff browse annotate |
192825330b3e4674d239f4563188dfb772ef7f25 created 2013-09-03 08:55 -0400 pushed 2013-10-28 21:59 +0000 |
Po-Chun Chang | Po-Chun Chang - Bug 908527 - Avoid wasted work in PSM_SSL_BlacklistDigiNotar(). r=cviecoo |
|
diff browse annotate |
25593587283a51ca9711ef95cbe35b0159fac989 created 2013-08-02 16:23 -0700 pushed 2013-10-28 21:59 +0000 |
David Keeler | David Keeler - bug 887052 - refactor nsISiteSecurityService for multiple headers r=cviecco r=mcmanus r=jst sr=jst |
|
diff browse annotate |
b44c631a881a54275852e0eab68955272e6b163b created 2013-08-02 15:48 -0700 pushed 2013-10-28 21:59 +0000 |
David Keeler | David Keeler - bug 887052 - rename nsIStrictTransportSecurityService to nsISiteSecurityService for refactoring r=cviecco r=mcmanus r=jst sr=jst |
|
diff browse annotate |
8102ebf36ce928fffdc0626535543f3f934dcc2d created 2013-08-05 16:18 -0400 pushed 2013-10-28 21:59 +0000 |
Ryan VanderMeulen | Ryan VanderMeulen - Backed out changesets 5f8a88c6d0c8 and 97fcb5a154d8 (bug 887052) for OSX mochitest-other orange. |
|
diff browse annotate |
5f8a88c6d0c84c57eb67fd8a39475b7d6bbf938b created 2013-07-01 10:49 -0700 pushed 2013-10-28 21:59 +0000 |
David Keeler | David Keeler - bug 887052 - refactor nsISiteSecurityService for multiple headers r=cviecco r=mcmanus r=jst sr=jst |
|
diff browse annotate |
97fcb5a154d8d64dea2398b4dbaa29204d1bda69 created 2013-07-01 09:30 -0700 pushed 2013-10-28 21:59 +0000 |
David Keeler | David Keeler - bug 887052 - rename nsIStrictTransportSecurityService to nsISiteSecurityService for refactoring r=cviecco r=mcmanus r=jst sr=jst |
|
diff browse annotate |
676ed933b962dfbdb787765776a04a45e4e5accb created 2013-10-02 15:08 -0700 pushed 2013-10-21 19:54 +0000 |
David Keeler | David Keeler - bug 914034 - cache stapled OCSP responses on the cert verification thread r=briansmith a=akeybl |
|
diff browse annotate |
e2995028244eee47debe96c4c1296cc4aa6d6f6b created 2013-07-08 14:56 -0700 pushed 2013-09-16 19:14 +0000 |
David Keeler | David Keeler - bug 889831 - always call SSL_PeerStapledOCSPResponses r=bsmith |
|
diff browse annotate |
ae51db07aed40ba1160ff3147e02bc38225e70ae created 2013-06-24 00:57 -0700 pushed 2013-09-16 19:14 +0000 |
Nathan Froyd | Nathan Froyd - Bug 857076: fix various build warnings in security/manager/ssl/src/, r=bsmith |
|
diff browse annotate |
98cfdd66fe876af6e7ade4b3550feb504340df92 created 2013-06-17 16:45 -0700 pushed 2013-09-16 19:14 +0000 |
David Keeler | David Keeler - bug 700693 - OCSP stapling PSM changes r=bsmith |
|
diff browse annotate |
6b2f29bc6da8d490c0d8f1f0f4c1c79768b3052b created 2013-06-22 15:57 -0700 pushed 2013-08-05 18:49 +0000 |
Brian Smith | Brian Smith - Bug 879137, Part 3: Move PSMContentListener to its own source file, r=keeler |
|
diff browse annotate |
8cac85f8f5125eda0fa44845fa2acb742b0e4119 created 2013-06-22 16:45 -0700 pushed 2013-08-05 18:49 +0000 |
Brian Smith | Brian Smith - Backout 308e3cd73c5f, cc9980cb3db2, f5591bedc40e due to build failure |
|
diff browse annotate |
f5591bedc40ed2075c95375a5594297fba1c23b1 created 2013-06-22 15:57 -0700 pushed 2013-08-05 18:49 +0000 |
Brian Smith | Brian Smith - Bug 879137, Part 3: Move PSMContentListener to its own source file, r=keeler |
|
diff browse annotate |
9274b04dcc5da17d728daef4f5ea8c107e068c85 created 2013-06-20 19:50 -0400 pushed 2013-08-05 18:49 +0000 |
Ryan VanderMeulen | Ryan VanderMeulen - Backed out changesets 448ba56d9ba4 and 8cea4b4646ef (bug 700693) for intermittent failures. |
|
diff browse annotate |
8cea4b4646efd5e42f0e79152b19d5a12d609ae6 created 2013-06-17 16:45 -0700 pushed 2013-08-05 18:49 +0000 |
David Keeler | David Keeler - bug 700693 - OCSP stapling PSM changes r=bsmith |
|
diff browse annotate |
e088156c89d0a650c666fc48abc414da41d4f0e8 created 2012-10-27 00:11 -0700 pushed 2013-06-24 18:52 +0000 |
Brian Smith | Brian Smith - Bug 813418 - Centralize certificate validation into CertVerifier part1(cviecco) r=bsmith |
|
diff browse annotate |
f9405d359a22f98b952f2d0bf4d19d27f30df10e created 2013-04-17 17:17 -0700 pushed 2013-06-24 18:52 +0000 |
Brian Smith | Brian Smith - Bug 787155: Avoid using libpkix on B2G to work around crash in PKIX_List_GetItem and improve performance, r=honzab, a=tef+ |
|
diff browse annotate |
f75ceb00fca953a5bbb2c9179695ac56637fdcf2 created 2013-04-15 16:45 -0700 pushed 2013-06-24 18:52 +0000 |
Camilo Viecco | Camilo Viecco - Bug 813418 - Backout 2f47fcb0a648 due to bustage CLOSED TREE |
|
diff browse annotate |
6d5ac3930709417d6b09232b6e25b04939be4813 created 2013-04-15 16:44 -0700 pushed 2013-06-24 18:52 +0000 |
Camilo Viecco | Camilo Viecco - Bug 813418 - Backout 7bcdee03b55 due to bustage CLOSED TREE |
|
diff browse annotate |
7bcdee03b55334d8fb263e03590708f8b281c83d created 2013-04-15 15:39 -0700 pushed 2013-06-24 18:52 +0000 |
Camilo Viecco | Camilo Viecco - Bug 813418 - Centralize certificate validation (Part 3 Getting chain form verify). r=bsmith |
|
diff browse annotate |
2f47fcb0a648ae0d0153e146d37b186a5287ffc2 created 2012-10-27 00:11 -0700 pushed 2013-06-24 18:52 +0000 |
Brian Smith | Brian Smith - Bug 813418 - Centralize certificate validation (Part 2 centralize verfification) r=bsmith |
|
diff browse annotate |
da2b24b1fc7ca092dcee6935b23f955b331ad8ed created 2013-01-02 08:14 -0800 pushed 2013-02-19 18:06 +0000 |
Camilo Viecco | Camilo Viecco - Bug 799267 - AuthCertificate Telemetry (measuring first auth, pkix and classic) r=bsmith |
|
diff browse annotate |
21bd64a6b46d231bfe4b0f881b9ad88b1cb3dce6 created 2012-12-19 22:07 +0000 pushed 2013-02-19 18:06 +0000 |
Ed Morley | Ed Morley - Backout 851fd44eeb42 (bug 799267) for leaks on a CLOSED TREE |
|
diff browse annotate |
851fd44eeb42b81c822a40e6baf60d16056b90cd created 2012-12-19 13:05 -0800 pushed 2013-02-19 18:06 +0000 |
Camilo Viecco | Camilo Viecco - Bug 799267 - Telemetry for Cert Verification (PKIX and classic) in SSLServerCertVerification r=bsmith |
|
diff browse annotate |
8d86cc44bcee2de928b0ae2e51ad4402f0de00e7 created 2012-12-06 22:05 -0500 pushed 2013-02-19 18:06 +0000 |
Josh Matthews | Josh Matthews - Bug 769288 - Part 2: Avoid storing intermediate cert data for private contexts. r=bsmith sr=mayhemer |