Moonchild
b9e6492480
[NSS] Update NSS to 3.90.9
2026-01-14 22:30:19 +01:00
Moonchild
74398ca61c
Update NSS version to 3.90.8
2025-12-15 20:32:01 +01:00
Moonchild
02abee0980
[NSS] Destroy certificate on error paths
2025-12-15 19:54:00 +01:00
Moonchild
4f9775b779
[NSS] Avoid leak in pkcs12 decoder.
2025-08-20 16:20:53 +02:00
Sergey Larin
50d8f81ba0
No Issue - Disable VSX extensions
...
There is no detection script for them as for AltiVec, and
it's breaking older machines (PowerMac G5 in particular).
2025-07-09 08:18:47 +00:00
Moonchild
b526a3ecc2
No issue - Roll forward root cert data update.
...
Include manually-added intermediate cert (like Mozilla) to deal with
SSL.com cross-signed and AAA broken trust chain.
2025-06-23 15:41:43 +02:00
Moonchild
f66803171e
No issue - NSS 3.90.7.1: Roll back root cert data update.
...
This reverts the root certificate refresh performed in 3.90.5.1 due to
root certificate trust issues seen on the 'net. Apparently the certdata
Mozilla uses is incorrect or not fully compatible with our code.
2025-06-21 18:27:20 +02:00
Moonchild
a02860fe46
Issue #2723 - Remove obsolete NPN prefs and callbacks.
...
NPN was removed from NSS a long time ago, this effectively does nothing.
ALPN also should be default-enabled (we do this by pref but the component
itself should have a sane default) so this was flipped as a drive-by fix.
Resolves #2723
2025-06-16 20:33:16 +02:00
Moonchild
7528917ad3
Merge pull request 'Fixes for building with LLVM 19 included with FreeBSD 13.5.' ( #2740 ) from dbsoft/UXP:llvm19-fixes into master
...
Reviewed-on: https://repo.palemoon.org/MoonchildProductions/UXP/pulls/2740
2025-05-06 09:15:49 +00:00
Brian Smith
6571624431
No Issue - Fixes for building with LLVM 19 included with FreeBSD 13.5.
...
Fix a conflict with libc++ 19 and the old Mozilla (re)alloc macros.
LLVM 18+ does not allow std::char_traits<unsigned char> so avoid it.
https://bugzilla.mozilla.org/show_bug.cgi?id=1849070
Partial NSS upgrade to replace ByteString with a class.
https://bugzilla.mozilla.org/show_bug.cgi?id=1851092
2025-05-05 13:12:42 -05:00
Moonchild
c9c6c7a7ec
[NSS] Update NSS version to 3.90.7
2025-04-30 00:54:40 +02:00
Moonchild
679971833e
[NSS] Update built-in data
2025-04-30 00:54:15 +02:00
Moonchild
c97f283b25
[NSS] Improve locking in nssPKIObject_GetInstances.
2025-04-29 23:52:20 +02:00
Moonchild
c5cda4764a
[NSS] Fix build bustage due to typo.
2025-02-04 19:46:09 +01:00
Moonchild
4ac9fc228f
[NSS] Bump NSS version to 3.90.6
2025-02-04 18:12:32 +01:00
Moonchild
2d648f06de
[NSS] Ensure zero-initialization of collectArgs.cert
2025-02-04 18:12:01 +01:00
Moonchild
b35f4febad
[NSS] Simplify error handling in get_token_objects_for_cache.
2025-02-04 18:09:28 +01:00
Moonchild
e2c9d26a23
No issue - Update NSS to 3.90.5.1
...
Root certificates refresh.
2025-01-22 17:31:37 +01:00
Moonchild
cd78019ba6
Update NSS to 3.90.5
2024-11-28 11:11:09 +01:00
Moonchild
1fd02db477
Update NSS to 3.90.4
...
Note: manually updated the version indicators due to BZ Bug 1912012
(https://bugzilla.mozilla.org/show_bug.cgi?id=1912012 )
2024-08-07 13:03:17 +02:00
Moonchild
27ce4ea0fa
No issue - Update NSS to 3.90.3
2024-07-09 21:18:25 +02:00
Moonchild
d8acf27de1
Issue #2516 - Part 3: Reconfigure platform to no longer build NSS DBM back-end.
2024-06-03 19:27:37 +02:00
Moonchild
de2bd6aa57
Issue #2516 - Part 2: Remove MOZ_SECURITY_SQLSTORE and always use SQLite db back-end.
2024-06-03 18:49:41 +02:00
Moonchild
70b1711085
Issue #2505 - Part 4: Restore PK11_IsFips symbol for Mac building secutil.
2024-05-01 14:15:22 +02:00
Moonchild
49aa1346da
Issue #2505 - Part 3: Remove FIPS interfaces and controls.
2024-05-01 13:38:01 +02:00
Moonchild
aba23a13a3
Issue #2505 - Part 2: Update NSS to 3.90.2
...
This re-lands the NSS update that was backed out previously for RC bustage.
2024-05-01 13:37:30 +02:00
Moonchild
21c13fc9cd
Revert "Update NSS to 3.90.2"
...
This reverts commit a79400a939 .
2024-03-23 07:47:14 +01:00
Moonchild
889e3e3805
Revert "Undo build system change from NSS update to fix missing command-line utils."
...
This reverts commit 999640b68c .
2024-03-23 07:46:55 +01:00
Moonchild
999640b68c
Undo build system change from NSS update to fix missing command-line utils.
2024-03-21 21:54:22 +01:00
Moonchild
a79400a939
Update NSS to 3.90.2
2024-03-20 14:23:51 +01:00
Moonchild
7182490961
[HSTS] Let parent hosts determine whether HSTS subs should be applied.
...
This aligns with the wording in RFC 6797.
2024-01-24 19:35:02 +01:00
John Schanck
2fdc4c71ce
[NSS] add a defensive check for large ssl_DefSend return values.
2024-01-24 17:19:35 +01:00
Brian Smith
8cffdc299f
Issue #2051 - Part 1 - Initial changes to get UXP building on Mac 10.5 PowerPC.
...
Additionally update the version detection back to 10.5 and forward to 14.
Fill some parts with code from TenFourFox when changes are not obvious.
Using gcc 7 from MacPorts, the gcc 4.8 TenFourFox used is too old.
Don't use GNU as on MacPPC it is too old.
Fix struct/class sizes by limiting bool size.
2023-11-23 01:42:11 -06:00
Moonchild
15d1f659a4
Issue #2249 - Stop advertising FIPS being a thing in the device manager.
...
If it can't be enabled, don't show the button at all
(don't just disable it)
2023-11-16 21:15:19 +01:00
Moonchild
8f80ba860d
Issue #2366 - Part 4: Remove old code in security/pkix
2023-11-14 17:43:13 +01:00
Moonchild
cb509b2318
Issue #2366 - Part 3: Support RSA-PSS signatures on certificates
2023-11-14 17:36:42 +01:00
Moonchild
c1e972f199
Issue #2366 - Part 2: PSM changes for pkix signature verification changes.
...
NSS 3.77 changed how mozilla::pkix verifies signatures.
This patch makes the corresponding changes in PSM.
2023-11-14 17:35:44 +01:00
Moonchild
d8e44207ed
Issue #2366 - Part 1: Switch PKIX handling over to NSS mozpkix
2023-11-14 17:28:39 +01:00
Moonchild
9816215ea7
Issue #2381 - Remove system-nspr/nss leftovers
...
Resolves #2381
2023-11-13 00:26:23 +01:00
Moonchild
294698153c
Issue #1053 - Remove Android block in security/moz.build
...
Just ran across this, and thought I'd kick it off while there.
2023-11-13 00:02:06 +01:00
Moonchild
734f0957fb
Issue #2343 - replace MOZ_FALLTHROUGH with [[fallthrough]]
...
Basically a S&R. Removed the macro and adjusts IDL codegen accordingly.
2023-11-11 14:27:03 +01:00
Moonchild
ccc8c3b988
Issue #2342 : Use [[nodiscard]] in /uriloader /widget
...
Also a few misc low-volume places.
2023-11-08 13:49:51 +01:00
Brian Smith
688394928d
No Issue - Updates to Mac packaging for notarization. Add Mac entitlements.
...
Switch to using "create" instead of "makehybrid" when creating the disk image.
This fixes bogus extended attributes which interfere with the code signature.
Finally add any -bin or dylibs in the Resources folder since --deep skips that folder.
2023-05-08 20:18:12 -05:00
Moonchild
b9da018639
Issue #1656 - Remove more vim control lines.
...
Vim control lines were re-introduced or not entirely cleaned up.
This nukes them again.
Removing from modules, netwerk, security, storage, testing, toolkit, and
a few scattered misc files. More to come.
2023-05-05 15:20:27 +02:00
Moonchild
ad7ffc0525
Issue #2180 - Follow-up: Move sentinel check up a bit.
2023-03-28 17:59:19 +02:00
Moonchild
500ece900a
Issue #2180 - Add pref to control NSS TLS 1.3 protocol downgrade sentinel
2023-03-28 15:13:09 +02:00
FranklinDM
9475b959d7
Issue #2148 - Make Vector not use AlignedStorage for its inline element storage
...
See Bug 1338374 1/2
2023-03-15 13:01:21 +01:00
Moonchild
3f7b0b7164
Issue #1693 - Follow-up: restore exported NSS symbols for mailnews.
...
This restores the erroneously-removed CMS* symbol exports, as well as a
few NSS functions that are likely to be used or have utility value in
applications.
2023-03-07 17:36:12 +01:00
Moonchild
98e96503e6
Issue #1693 - Follow-up: restore exported NSS symbol for debug builds.
...
Tag #1382
2023-03-06 15:18:25 +01:00
Job Bautista
1c811a1476
Issue #1693 - Update NSS symbols file for 3.79.4 upgrade
...
Based on latest SeaMonkey's security/nss.symbols, as well as some
unresolved external symbols I found myself.
2023-03-04 13:57:07 +08:00