Moonchild
a02860fe46
Issue #2723 - Remove obsolete NPN prefs and callbacks.
...
NPN was removed from NSS a long time ago, this effectively does nothing.
ALPN also should be default-enabled (we do this by pref but the component
itself should have a sane default) so this was flipped as a drive-by fix.
Resolves #2723
2025-06-16 20:33:16 +02:00
Moonchild
d8acf27de1
Issue #2516 - Part 3: Reconfigure platform to no longer build NSS DBM back-end.
2024-06-03 19:27:37 +02:00
Moonchild
de2bd6aa57
Issue #2516 - Part 2: Remove MOZ_SECURITY_SQLSTORE and always use SQLite db back-end.
2024-06-03 18:49:41 +02:00
Moonchild
49aa1346da
Issue #2505 - Part 3: Remove FIPS interfaces and controls.
2024-05-01 13:38:01 +02:00
Moonchild
7182490961
[HSTS] Let parent hosts determine whether HSTS subs should be applied.
...
This aligns with the wording in RFC 6797.
2024-01-24 19:35:02 +01:00
Brian Smith
8cffdc299f
Issue #2051 - Part 1 - Initial changes to get UXP building on Mac 10.5 PowerPC.
...
Additionally update the version detection back to 10.5 and forward to 14.
Fill some parts with code from TenFourFox when changes are not obvious.
Using gcc 7 from MacPorts, the gcc 4.8 TenFourFox used is too old.
Don't use GNU as on MacPPC it is too old.
Fix struct/class sizes by limiting bool size.
2023-11-23 01:42:11 -06:00
Moonchild
15d1f659a4
Issue #2249 - Stop advertising FIPS being a thing in the device manager.
...
If it can't be enabled, don't show the button at all
(don't just disable it)
2023-11-16 21:15:19 +01:00
Moonchild
cb509b2318
Issue #2366 - Part 3: Support RSA-PSS signatures on certificates
2023-11-14 17:36:42 +01:00
Moonchild
c1e972f199
Issue #2366 - Part 2: PSM changes for pkix signature verification changes.
...
NSS 3.77 changed how mozilla::pkix verifies signatures.
This patch makes the corresponding changes in PSM.
2023-11-14 17:35:44 +01:00
Moonchild
d8e44207ed
Issue #2366 - Part 1: Switch PKIX handling over to NSS mozpkix
2023-11-14 17:28:39 +01:00
Moonchild
734f0957fb
Issue #2343 - replace MOZ_FALLTHROUGH with [[fallthrough]]
...
Basically a S&R. Removed the macro and adjusts IDL codegen accordingly.
2023-11-11 14:27:03 +01:00
Moonchild
ccc8c3b988
Issue #2342 : Use [[nodiscard]] in /uriloader /widget
...
Also a few misc low-volume places.
2023-11-08 13:49:51 +01:00
Moonchild
b9da018639
Issue #1656 - Remove more vim control lines.
...
Vim control lines were re-introduced or not entirely cleaned up.
This nukes them again.
Removing from modules, netwerk, security, storage, testing, toolkit, and
a few scattered misc files. More to come.
2023-05-05 15:20:27 +02:00
Moonchild
ad7ffc0525
Issue #2180 - Follow-up: Move sentinel check up a bit.
2023-03-28 17:59:19 +02:00
Moonchild
500ece900a
Issue #2180 - Add pref to control NSS TLS 1.3 protocol downgrade sentinel
2023-03-28 15:13:09 +02:00
Moonchild
c6c045a7f7
Issue #1966 - Remove support for Firefox Marketplace "apps"
...
Because UXP may be a platform, but it's not a mobile OS.
2022-07-22 02:30:42 +00:00
FranklinDM
3a565183f0
Issue #738 - Follow-up: Remove explicit session cache cleanup routine from ShutdownNSS
...
This is no longer needed because the call to SSL_ConfigServerSessionIDCache on startup was already removed (see 1425f020c4 ), meaning LocksInitializedEarly does not become true and only causes an assertion on debug builds.
On the other hand, SSL_ClearSessionCache is already called on XPCOM shutdown and calling it again here is redundant.
Additional context: https://bugzilla.mozilla.org/show_bug.cgi?id=1485087#c5
Based on https://bugzilla.mozilla.org/show_bug.cgi?id=1485087
2022-04-18 23:44:27 +08:00
Moonchild
534de5cc5b
Issue #21 - Remove remaining telemetry structs, callers and flags.
2022-04-02 14:49:45 +02:00
Moonchild
ee86d3eb9c
Issue #21 - Remove Telemetry plumbing and fix build.
...
Note this won't give working applications. Requires FE changes and
additional js module changes (next part).
2022-04-02 14:39:54 +02:00
Moonchild
c14bb310ce
Issue #1053 - Clean up docs and some code comments.
...
Polish only, no code changes.
2022-04-01 15:26:49 +02:00
Moonchild
28a3cd1028
Issue #1053 - First pass Android defines and remove Android Annotation
...
processors, some Andoid packaging stuff, Eclipse IDE support et al.
2022-04-01 15:17:54 +02:00
Moonchild
1caa678592
Issue #1831 - Add an option to enable TLS 1.3 "compatibility" mode.
...
Critical note: this potentially reduces the strength of TLS 1.3 and
should only be enabled if absolutely necessary to access a site.
A browser restart is required for the pref change to take effect as it
is set on NSS initialization.
Resolves #1831
2022-04-01 14:52:46 +02:00
Moonchild
ddaee7c1be
Issue #1830 - Remove --disable-xul config and conditionals.
2022-04-01 14:47:16 +02:00
Moonchild
005d9c42d3
Issue #1746 - Update pkix code with later NSS code.
2021-03-14 13:06:22 +00:00
Moonchild
85b0f705d9
Issue #457 - Remove duplicate PKCS11 definitions
2021-02-24 11:09:47 +00:00
Moonchild
29271977c9
[security] Hold mutex when accessing TSI fields.
2021-02-24 11:08:36 +00:00
adesh
5ef801fdc5
Issue #1280 - Follow-up: Get rid of HPKP pinning mode.
...
This was a leftover from HPKP removal.
Also remove a couple of unused variables from security/manager/ssl/nsSiteSecurityService.cpp.
2020-11-10 23:07:22 -05:00
Moonchild
6a4c3caa8e
Issue #1656 - Nuke the remaining vim lines in UXP
...
Closes #1656
2020-10-26 19:09:16 +00:00
Moonchild
4a42352e64
Issue #1656 - Part 8: Devtools and misc.
2020-09-24 08:10:23 +00:00
Moonchild
d5a2c45aad
Issue #1656 - Part 6: Clean up the build files
2020-09-23 15:52:00 +00:00
Moonchild
528b88d704
Issue #1656 - Part 3: Nuke more vim config lines in the tree.
...
Another S&R run with some smarter matching.
2020-09-23 15:14:30 +00:00
Moonchild
a680bdc637
Issue #1656 - Part 1: Nuke most vim config lines in the tree.
...
Since these are just interpreted comments, there's 0 impact on actual code.
This removes all lines that match /* vim: set(.*)tw=80: */ with S&R -- there are
a few others scattered around which will be removed manually in a second part.
2020-09-23 13:55:00 +00:00
Moonchild
b0901eb099
Issue #439 - Remove, fix and clean up automated tests
...
With the big amount of code churn around DOM a lot of tests
broke severely enough that they caused build bustage.
This commit cleans up, removes or otherwise fixes tests
that are broken, no longer relevant or obsolete.
2020-06-08 18:12:08 +00:00
wolfbeast
a205ee7040
Issue #1280 - Un-bust certerror pages and ForgetAboutSite
2020-03-31 09:44:30 +02:00
wolfbeast
0afd46b48d
Issue #1280 - Part 2: Remove HPKP tests.
2020-03-28 11:02:10 +01:00
wolfbeast
55aa6ce7b3
Issue #1280 - Part 1: Remove HPKP components.
...
This also removes leftover plumbing for storing preload information
in SiteSecurityService since no service still uses it.
2020-03-28 01:06:56 +01:00
wolfbeast
e9723a6fdb
Issue #1498 - Part 6: Remove STS preloadlist pref.
2020-03-27 23:27:07 +01:00
wolfbeast
50ebd35073
Issue #1498 - Part 5: Update SSService CID and correct mismatch.
2020-03-27 16:16:43 +01:00
wolfbeast
8ea2c0d5ed
Issue #1498 - Part 4: Remove clearPreloads.
...
Also tag #1280
2020-03-27 15:13:00 +01:00
wolfbeast
9c4aef8675
Issue #1498 - Part 3: Remove support for storing "knockout" values.
2020-03-27 15:07:34 +01:00
wolfbeast
09a229c702
Issue #1498 - Part 1: Stop persisting preload states.
...
Since we don't use preloading anymore for either HPKP or HSTS, we no
longer need persistent storage in the profile for preload states.
Tag #1280 also
2020-03-27 14:02:23 +01:00
wolfbeast
595c8d53df
Issue #1498 - Part 1: Stop using HSTS preload lists.
2020-03-27 12:49:01 +01:00
Matt A. Tobin
bc127ada3b
Take nsSiteSecurityService out of UNIFIED_SOURCES
...
It exceeded the obj file sections limit because of the HSTS preload list so it cannot be built in UNIFIED mode.
2020-03-25 01:02:52 -04:00
wolfbeast
cc9b40cc21
Issue #447 - Update HSTS preload list
2020-03-24 20:35:47 +00:00
wolfbeast
6f1d8fcce1
Issue #1467 - Part 4: Rename NSS_SQLSTORE to MOZ_SECURITY_SQLSTORE.
...
Rename the build config option accordingly.
2020-03-19 23:01:29 +01:00
wolfbeast
6cbe27d149
Issue #1467 - Part 3: Use UTF-8 file paths for NSS-SQL database.
2020-03-17 20:14:22 +01:00
wolfbeast
2a4827ea40
Issue #1467 - Part 1: Set up conditional NSS-SQL builds.
...
- Adds buildconfig option --enable-nss-sqlstore
- Prefixes NSS dbinit with either sql: or dbm: depending on config
- Pre-initializes mozStorage when NSS-SQL storage is used to prevent
an sqlite3_config race in NSS Init
2020-03-16 13:38:19 +01:00
Matt A. Tobin
9b86872d37
Issue #1053 - Remove android support from nsNSSComponent.cpp
2020-02-28 16:51:00 -05:00
wolfbeast
33ad27614a
Issue #447 - Update HSTS preload list & reduce debug spew
...
Commented out spewing dump() statements in loops. With the ever growing
HSTS list it takes too much time and is pointless to display.
2020-02-01 01:37:52 +00:00
wolfbeast
8198126c39
Be more consistent about decoding IP addresses in PSM.
2020-01-09 21:39:28 +01:00