17 Commits

Author SHA1 Message Date
adesh 5ef801fdc5 Issue #1280 - Follow-up: Get rid of HPKP pinning mode.
This was a leftover from HPKP removal.

Also remove a couple of unused variables from security/manager/ssl/nsSiteSecurityService.cpp.
2020-11-10 23:07:22 -05:00
wolfbeast 6f1d8fcce1 Issue #1467 - Part 4: Rename NSS_SQLSTORE to MOZ_SECURITY_SQLSTORE.
Rename the build config option accordingly.
2020-03-19 23:01:29 +01:00
wolfbeast 6cbe27d149 Issue #1467 - Part 3: Use UTF-8 file paths for NSS-SQL database. 2020-03-17 20:14:22 +01:00
wolfbeast 2a4827ea40 Issue #1467 - Part 1: Set up conditional NSS-SQL builds.
- Adds buildconfig option --enable-nss-sqlstore
- Prefixes NSS dbinit with either sql: or dbm: depending on config
- Pre-initializes mozStorage when NSS-SQL storage is used to prevent
  an sqlite3_config race in NSS Init
2020-03-16 13:38:19 +01:00
Matt A. Tobin 9b86872d37 Issue #1053 - Remove android support from nsNSSComponent.cpp 2020-02-28 16:51:00 -05:00
adeshkp 5335681cd2 Telemetry: Remove stubs and related code 2019-01-12 06:20:31 -05:00
wolfbeast d5a1b34c05 Remove AccumulateCipherSuite()
This resolves #858
2018-11-08 11:32:49 +01:00
wolfbeast ab961aeb54 Remove all C++ Telemetry Accumulation calls.
This creates a number of stubs and leaves some surrounding code that may be irrelevant (eg. recorded time stamps, status variables).
Stub resolution/removal should be a follow-up to this.
2018-09-03 10:11:38 +02:00
wolfbeast 1425f020c4 Remove support for TLS session caches in TLSServerSocket.
This resolves #738
2018-09-01 23:45:10 +02:00
wolfbeast bfc5b53cf9 Fix missed in32->int64 in df85212009
Tag #709.
2018-08-17 19:23:37 +02:00
wolfbeast 26debee733 Reinstate RC4 and mark 3DES weak.
Tag #709
2018-08-17 06:39:04 +02:00
wolfbeast df85212009 Extend {EnabledWeakCiphers} bit field to allow more cipher suites.
Tag #709.
2018-08-17 06:33:23 +02:00
JustOff 6603359347 Request NSS to use DBM as the storage file format 2018-06-06 15:24:07 +02:00
wolfbeast d98565a287 Disable 3DES cipher by default + re-order a few things.
Issue #4 point 4
2018-02-02 19:06:52 +01:00
wolfbeast acaf15453c Add RSA-AES + SHA256/384 suites for web compatibility.
Sites with these ciphers (commonly IIS) would otherwise fall back to weak 3DES that will be disabled by default.

Issue #4 points 2 and 3
2018-02-02 19:05:37 +01:00
wolfbeast 3b70762534 Add Camellia to the active cipher suites.
Issue #4 point 1.

Camellia is a strong, modern, safe cipher with no known weaknesses or reduced strength attacks.
The cipher has been approved for use by the ISO/IEC, the European Union's NESSIE project and the Japanese CRYPTREC project.
2018-02-02 19:04:33 +01:00
Matt A. Tobin 5f8de423f1 Add m-esr52 at 52.6.0 2018-02-02 04:16:08 -05:00