security/manager/ssl/src/SSLServerCertVerification.cpp
b7030189c2ca5697c8fba43220511ddc39fcce98
created 2014-02-23 22:15 -0800
pushed 2014-04-28 18:51 +0000
Brian Smith Brian Smith - Bug 921885: Use insanity::pkix for EV cert verification when insanity::pkix is the selected implementation, r=cviecco, r=keeler
12661b7737d42db4edf9f172929c52611bb79a28
created 2014-02-22 19:08 -0800
pushed 2014-04-28 18:51 +0000
Brian Smith Brian Smith - Bug 975122: Allow cert error overrides when insanity::pkix is used, r?cviecco, r?keeler
b6aa1e70e482a47b7a8177193b209c5fe148742a
created 2014-02-13 14:53 -0800
pushed 2014-04-28 18:51 +0000
David Keeler David Keeler - bug 967975 - certificate error override telemetry r=briansmith
5eece3c778aaecfe6c4bcbeaae863f611ef47280
created 2014-02-10 11:41 -0800
pushed 2014-04-28 18:51 +0000
Brian Smith Brian Smith - Bug 878932, Part 1: add insanity::pkix as an option for certificate verification, r=keeler, r=cviecco
6ff203ccf02586c42b7aaac33d573d79bbbaefba
created 2014-02-06 00:12 -0800
pushed 2014-04-28 18:51 +0000
Daniel Holbert Daniel Holbert - Bug 968348: Remove some set-but-never-read variables, an inline a PR_LOGGING-only variable, to fix build warnings in security/manager/ssl/src/. r=keeler
f0eb0b8c20d06a0d02346f3de51709203b3c5fc1
created 2014-02-05 14:14 -0800
pushed 2014-04-28 18:51 +0000
Daniel Holbert Daniel Holbert - Bug 968338 followup: Add missing #include for unused.h. (bustage fix on a CLOSED TREE)
214c6b4f03c707998223d98b6d2f6d87ae523c41
created 2014-02-05 13:39 -0800
pushed 2014-04-28 18:51 +0000
Daniel Holbert Daniel Holbert - Bug 968338: Pass unused-in-some-build-configurations variable 'mFdForLogging' to mozilla::unused, to suppress clang warning in SSLServerCertVerification.cpp. r=bsmith
4dc3ca14787f3b4bbd4c3fd3f4dd419842577cb6
created 2014-02-05 13:39 -0800
pushed 2014-04-28 18:51 +0000
Daniel Holbert Daniel Holbert - (no bug) Fix a few DOS newline characters in SSLServerCertVerification.cpp. (no review, whitespace-only)
836391ce81b854b72c353ca45396ddd225f7e496
created 2014-02-23 22:15 -0800
pushed 2014-03-17 21:55 +0000
Brian Smith Brian Smith - Bug 921885: Use insanity::pkix for EV cert verification when insanity::pkix is the selected implementation, r=cviecco, r=keeler, a=sledru
b81c398392535ca6221537fc4a6839d8b52fc342
created 2014-02-13 14:53 -0800
pushed 2014-03-17 21:55 +0000
David Keeler David Keeler - reland bug 967975 - certificate error override telemetry r=briansmith, a=sledru
8a368aa4a72a3a2ecfed28a699bab302466575f8
created 2014-02-27 01:15 -0800
pushed 2014-03-17 21:55 +0000
Brian Smith Brian Smith - Backout bug 967975 (cset bd81c8232ffa) temporarily to make uplifting OCSP patches easier, r=me, a=will-reland-immediately
bd81c8232ffa98795e21e4edcdd6d909c719e5e1
created 2014-02-13 14:53 -0800
pushed 2014-03-17 21:55 +0000
David Keeler David Keeler - bug 967975 - certificate error override telemetry r=briansmith a=sylvestre
676c7d391cd5d83ecb80b0bf149951a0f04a3a2c
created 2014-02-10 11:41 -0800
pushed 2014-03-17 21:55 +0000
Brian Smith Brian Smith - Bug 878932, Part 1: add insanity::pkix as an option for certificate verification, r=keeler, r=cviecco, a=sledru
a3bd9bdeac7334c57ae01bb9b70f858e8900f68c
created 2013-09-27 19:53 -0700
pushed 2014-03-17 21:55 +0000
Brian Smith Brian Smith - Bug 891066, Part 8: Add stapled OCSP response to CertVerifier, r=cviecco
3e3ddb3ce8d331b9898c04e1bb90764738366edc
created 2013-07-08 16:30 -0700
pushed 2014-03-17 21:55 +0000
Brian Smith Brian Smith - Bug 891066, Part 6: Move SSL server cert verification logic to security/certverifier, r=cviecco
aaad90a5936fe7c70754712365d4b06338dd43f3
created 2014-01-22 17:13 -0800
pushed 2014-03-17 21:55 +0000
Brian Smith Brian Smith - Bug 891066, Part 5: Switch to security::pkix::ScopedCERTCertList, r=cviecco
4c4220bf9e14a7c5871f5631e82fc253617996d4
created 2013-07-01 11:39 -0700
pushed 2014-03-17 21:55 +0000
Brian Smith Brian Smith - Bug 733454: Remove hard-coded blocklisting in PSM for Comodo and DigiNotar, r=cviecco
2dc56ee0e0e51a35ac0573b57451ad79361e6d0d
created 2014-01-26 19:36 -0800
pushed 2014-03-17 21:55 +0000
Brian Smith Brian Smith - Bug 891066, part 2: Move CertVerifier to security/certverifier, r=keeler
99cf3634be5dadf488320b12e5c884e6d9363870
created 2014-01-19 14:05 -0800
pushed 2014-03-17 21:55 +0000
Brian Smith Brian Smith - Bug 891066, Part 1: Remove CertVerifier's dependency on nsNSSComponent, r=keeler, r=cviecco
914e2811cfca94cda5ac99a6252b9e8f1c37f9d1
created 2014-01-21 17:30 -0800
pushed 2014-03-17 21:55 +0000
Brian Smith Brian Smith - Bug 961454: Clean up whitespace in key PSM files, r=keeler, r=cviecco
f95bc5df7fcfbd8801a8f043a0d9e25148f3bae9
created 2014-01-17 11:57 -0800
pushed 2014-03-17 21:55 +0000
Raymond Etornam Agbeame(:retornam) Raymond Etornam Agbeame(:retornam) - Bug 950169 - remove unused arguments for LogInvalidCertError r=keeler
2bbbf1068a45bd321080207285a3bccd147d6471
created 2014-02-13 14:53 -0800
pushed 2014-02-21 21:10 +0000
David Keeler David Keeler - bug 967975 - certificate error override telemetry r=briansmith a=lsblakk
dffdacbb272c95f3b666f5526866678ebf45be14
created 2014-01-12 19:31 -0800
pushed 2014-02-04 01:06 +0000
Brian Smith Brian Smith - Bug 959026 - Add telemetry about cases where we don't do OCSP fetching when we expect to. r=keeler, a=bajaj
90581f8d3cec04e020ee755b1fbc78f82ddb9d59
created 2013-12-16 09:32 -0800
pushed 2014-02-04 01:06 +0000
David Keeler David Keeler - bug 887321 - initial OCSP stapling telemetry r=briansmith a=bajaj
3c88ff023416dcbba54ac3cd6fa6f6c99d53330c
created 2013-12-09 09:12 -0800
pushed 2014-02-04 01:06 +0000
Camilo Viecco Camilo Viecco - Bug 936808 - Serialize calls to PK11 routines in SSLServerCertVerification. r=briansmith, a=dveditz
fc7b76d9da1ec1b461410baf1553687441c94b64
created 2013-11-25 15:40 -0800
pushed 2014-02-04 01:06 +0000
David Keeler David Keeler - bug 929617 - disregard expired stapled OCSP responses, acquire fresh ones r=briansmith
e781364ed4f8ad008659a0076dd3f73ebabfd621
created 2013-11-26 13:49 -0800
pushed 2014-02-04 01:06 +0000
David Keeler David Keeler - bug 943115 - return early in CreateCertErrorRunnable for non-overridable errors r=briansmith
86cf8832c658e37212309c3d42fae0aa47710150
created 2014-01-12 19:31 -0800
pushed 2014-01-15 21:07 +0000
Brian Smith Brian Smith - Bug 959026 - Add telemetry about cases where we don't do OCSP fetching when we expect to. r=keeler, a=bajaj
741a8c5658a9c171d11d2e870c7545e2b35ec6f9
created 2013-12-16 09:32 -0800
pushed 2014-01-03 18:21 +0000
David Keeler David Keeler - bug 887321 - initial OCSP stapling telemetry r=briansmith a=bajaj
171046c2495fe4d72b293af29079b22b0b9e38fc
created 2013-11-25 15:40 -0800
pushed 2014-01-03 18:21 +0000
David Keeler David Keeler - bug 929617 - disregard expired stapled OCSP responses, acquire fresh ones r=briansmith a=bajaj
1786928ad7b2e6df873721cdc6d8812cfb44ae5a
created 2013-11-26 13:49 -0800
pushed 2014-01-03 18:21 +0000
David Keeler David Keeler - bug 943115 - return early in CreateCertErrorRunnable for non-overridable errors r=briansmith a=bajaj
8334da282e425ec479875a5a107f158e31e8f9a5
created 2013-12-09 09:12 -0800
pushed 2013-12-10 14:01 +0000
Camilo Viecco Camilo Viecco - Bug 936808 - Serialize calls to PK11 routines in SSLServerCertVerification. r=briansmith, a=dveditz
bb4b199648f34af38d59a477a0cd7278ffb0b3e4
created 2013-10-15 01:14 -0700
pushed 2013-12-09 19:58 +0000
Brian Smith Brian Smith - Bug 754356: Remove TLS intolerance timeout logic, r=honzab
ca5280f3d696c1d519cad78ed39757ee301d5163
created 2013-10-26 00:51 -0700
pushed 2013-12-09 19:58 +0000
Brian Smith Brian Smith - Backed out changeset 673ca84a9171 because of wrong bug number in commit message
673ca84a9171f87b22bd736dba7be879583d316e
created 2013-10-15 01:14 -0700
pushed 2013-12-09 19:58 +0000
Brian Smith Brian Smith - Bug 450280: Remove timeout logic for TLS intolerance, r=honzab
5db1f111ac1972307ec97a6c4819cf5811bff503
created 2013-10-11 00:17 -0700
pushed 2013-12-09 19:58 +0000
Brian Smith Brian Smith - Bug 839310: Expand TLS intolerance logic to work for versions beyond TLS 1.0, r=keeler, r=wtc
a13edd3c49e7a8d3a98c3f7f9a0a1c0e748aa83e
created 2013-10-02 15:08 -0700
pushed 2013-12-09 19:58 +0000
David Keeler David Keeler - bug 914034 - cache stapled OCSP responses on the cert verification thread r=briansmith
64e2f1061cdef29d3e643b57426086d8fe7d5e3c
created 2013-09-29 17:20 -0400
pushed 2013-12-09 19:58 +0000
Ehsan Akhgari Ehsan Akhgari - Backed out changeset a73ffb0d0c97 because of build bustage
a73ffb0d0c97eb26747349b2d99c5af611f0c6f3
created 2013-09-29 16:42 -0400
pushed 2013-12-09 19:58 +0000
Ehsan Akhgari Ehsan Akhgari - Remove a number of unused variables, no bug
f57dd2d6ec4d9a4084ea7f26826cbe79fc5d29f4
created 2013-09-26 14:07 -0400
pushed 2013-12-09 19:58 +0000
patilkr24 patilkr24 - Bug 898712 - Add an error category to SSL errors in the browser console. r=bsmith
83e55c91aa8015e325b24cc09620066543a33827
created 2013-10-11 00:17 -0700
pushed 2013-11-09 23:57 +0000
Brian Smith Brian Smith - Bug 839310: Expand TLS intolerance logic to work for versions beyond TLS 1.0, r=keeler, r=wtc, a=lsblakk
2dc0d50848e428fc550302807ea37c207ae9d15d
created 2013-10-15 01:14 -0700
pushed 2013-11-05 00:57 +0000
Brian Smith Brian Smith - Bug 754356 - Remove TLS intolerance timeout logic. r=honzab, a=lsblakk
d75a3d6ca76282a1285ba1bab973902241a92a9a
created 2013-11-04 17:37 -0500
pushed 2013-11-04 22:38 +0000
Ryan VanderMeulen Ryan VanderMeulen - Backed out changeset 1f661a4ca15c (bug 754356) for suspicion of causing xpcshell failures. a=backout
1f661a4ca15c2c2e15f6d04a635ac791f50dd445
created 2013-10-15 01:14 -0700
pushed 2013-11-04 20:49 +0000
Brian Smith Brian Smith - Bug 754356 - Remove TLS intolerance timeout logic. r=honzab, a=lsblakk
e87c5779660a96ae2e0d68be665665b6e65c43b2
created 2013-10-02 15:08 -0700
pushed 2013-10-28 21:59 +0000
David Keeler David Keeler - Bug 914034 - Cache stapled OCSP responses on the cert verification thread. r=briansmith, a=akeybl
192825330b3e4674d239f4563188dfb772ef7f25
created 2013-09-03 08:55 -0400
pushed 2013-10-28 21:59 +0000
Po-Chun Chang Po-Chun Chang - Bug 908527 - Avoid wasted work in PSM_SSL_BlacklistDigiNotar(). r=cviecoo
25593587283a51ca9711ef95cbe35b0159fac989
created 2013-08-02 16:23 -0700
pushed 2013-10-28 21:59 +0000
David Keeler David Keeler - bug 887052 - refactor nsISiteSecurityService for multiple headers r=cviecco r=mcmanus r=jst sr=jst
b44c631a881a54275852e0eab68955272e6b163b
created 2013-08-02 15:48 -0700
pushed 2013-10-28 21:59 +0000
David Keeler David Keeler - bug 887052 - rename nsIStrictTransportSecurityService to nsISiteSecurityService for refactoring r=cviecco r=mcmanus r=jst sr=jst
8102ebf36ce928fffdc0626535543f3f934dcc2d
created 2013-08-05 16:18 -0400
pushed 2013-10-28 21:59 +0000
Ryan VanderMeulen Ryan VanderMeulen - Backed out changesets 5f8a88c6d0c8 and 97fcb5a154d8 (bug 887052) for OSX mochitest-other orange.
5f8a88c6d0c84c57eb67fd8a39475b7d6bbf938b
created 2013-07-01 10:49 -0700
pushed 2013-10-28 21:59 +0000
David Keeler David Keeler - bug 887052 - refactor nsISiteSecurityService for multiple headers r=cviecco r=mcmanus r=jst sr=jst
97fcb5a154d8d64dea2398b4dbaa29204d1bda69
created 2013-07-01 09:30 -0700
pushed 2013-10-28 21:59 +0000
David Keeler David Keeler - bug 887052 - rename nsIStrictTransportSecurityService to nsISiteSecurityService for refactoring r=cviecco r=mcmanus r=jst sr=jst
676ed933b962dfbdb787765776a04a45e4e5accb
created 2013-10-02 15:08 -0700
pushed 2013-10-21 19:54 +0000
David Keeler David Keeler - bug 914034 - cache stapled OCSP responses on the cert verification thread r=briansmith a=akeybl
e2995028244eee47debe96c4c1296cc4aa6d6f6b
created 2013-07-08 14:56 -0700
pushed 2013-09-16 19:14 +0000
David Keeler David Keeler - bug 889831 - always call SSL_PeerStapledOCSPResponses r=bsmith
ae51db07aed40ba1160ff3147e02bc38225e70ae
created 2013-06-24 00:57 -0700
pushed 2013-09-16 19:14 +0000
Nathan Froyd Nathan Froyd - Bug 857076: fix various build warnings in security/manager/ssl/src/, r=bsmith
98cfdd66fe876af6e7ade4b3550feb504340df92
created 2013-06-17 16:45 -0700
pushed 2013-09-16 19:14 +0000
David Keeler David Keeler - bug 700693 - OCSP stapling PSM changes r=bsmith
6b2f29bc6da8d490c0d8f1f0f4c1c79768b3052b
created 2013-06-22 15:57 -0700
pushed 2013-08-05 18:49 +0000
Brian Smith Brian Smith - Bug 879137, Part 3: Move PSMContentListener to its own source file, r=keeler
8cac85f8f5125eda0fa44845fa2acb742b0e4119
created 2013-06-22 16:45 -0700
pushed 2013-08-05 18:49 +0000
Brian Smith Brian Smith - Backout 308e3cd73c5f, cc9980cb3db2, f5591bedc40e due to build failure
f5591bedc40ed2075c95375a5594297fba1c23b1
created 2013-06-22 15:57 -0700
pushed 2013-08-05 18:49 +0000
Brian Smith Brian Smith - Bug 879137, Part 3: Move PSMContentListener to its own source file, r=keeler
9274b04dcc5da17d728daef4f5ea8c107e068c85
created 2013-06-20 19:50 -0400
pushed 2013-08-05 18:49 +0000
Ryan VanderMeulen Ryan VanderMeulen - Backed out changesets 448ba56d9ba4 and 8cea4b4646ef (bug 700693) for intermittent failures.
8cea4b4646efd5e42f0e79152b19d5a12d609ae6
created 2013-06-17 16:45 -0700
pushed 2013-08-05 18:49 +0000
David Keeler David Keeler - bug 700693 - OCSP stapling PSM changes r=bsmith
less more (0) -100 -60 tip