Commit Graph

68 Commits

Author SHA1 Message Date
wolfbeast 8198126c39 Be more consistent about decoding IP addresses in PSM. 2020-01-09 21:39:28 +01:00
wolfbeast f71108680b Issue #1118 - Part 6: Fix various tests that are no longer correct.
The behavior change of document.open() requires these tests to be
changed to account for the new spec behavior.
2019-12-22 23:48:40 +01:00
wolfbeast fcea217aac Issue #447 - Update HSTS preload list 2019-11-19 09:46:25 +00:00
wolfbeast f4cc93fc9e Issue #1289 - Part 3: Update tests. 2019-11-14 12:17:00 +01:00
wolfbeast d5a604bb89 Issue #1289 - Part 2: Clear out the preload list except for test
domains.
2019-11-14 12:16:21 +01:00
wolfbeast 0a8dff5256 Issue #1289 - Part 1: Add a pref to disable HPKP header processing. 2019-11-14 12:13:54 +01:00
wolfbeast 736d25cbec Issue #447 - Improve the getHSTSPreloadList script
- Use HEAD instead of GET for probe to avoid loading pages
- Reduce retries to 2
- Reduce timeout to 10 s (since we're just getting a HEAD this is royal)
- Identify ourselves to websites as an automated tool
- Improve performance of list merging (O(n^2) was getting too expensive)
- Add a total counter and perform GC every 200 requests
2019-11-09 13:10:23 +01:00
wolfbeast 78e8ad72f9 Issue #447 - Update HSTS preload list. 2019-11-09 11:02:21 +01:00
wolfbeast 6df8aa4953 Issue #1064 - Part 3: Fix notifyObservers() call. 2019-11-04 15:05:23 +01:00
wolfbeast 5f37447acd Issue #1064 - Part 2: Fix shorthand and services module import. 2019-11-04 15:04:12 +01:00
wolfbeast c5c44d1207 Merge branch 'master' into certexception-work 2019-11-04 13:31:30 +01:00
wolfbeast e3c13af976 Properly implement various HSTS states.
Previously, HSTS preload list values could be overridden temporarily due
to counter-intuitive behavior of the API's removeState function.
This adds an explicit flag to the API for writing knockout values to
the Site Security Service, with the default resetting to whatever the
preload list state is.
2019-09-05 18:23:12 +02:00
wolfbeast a63272b530 No issue: Clean up exceptionDialog.js
- Fix some quoting, comments and inconsistencies and code style
- Swap manually grabbing service components out for using `Services.*`
2019-08-17 22:33:51 +02:00
wolfbeast 3252e22000 Issue #1064: Don't get certificate details synchronously.
This avoids getting data synchronously on the main thread in an XHR
(which has been deprecated for a long time and _may_ actually be blocked
in our networking) and attempts to be more predictable by always firing
an update request for the dialog from the XHR request handlers.
2019-08-17 22:28:30 +02:00
trav90 fc4dc10d0a Update HSTS preload list
Tag #447
2019-06-26 19:31:51 -05:00
wolfbeast c7138e3b92 Update HSTS preload list
Tag #447
2019-05-28 08:32:43 +00:00
Matt A. Tobin 325b204d26 Issue #1053 - Drop support Android and remove Fennec - Part 1b: Remove MOZ_FENNEC 2019-04-23 15:56:35 -04:00
adeshkp b10712de87 Remove SecurityUI telemetry. 2019-04-21 13:02:52 -04:00
adeshkp 52be954e59 Fix order of member variables in a couple of initializer lists 2019-03-14 09:52:03 -04:00
trav90 a31b9e067c Update HSTS preload list
Tag #447
2019-01-31 08:50:29 -06:00
Ascrod a74b093471 Fix check for HSTS when service is disabled. 2019-01-17 18:18:49 -05:00
Ascrod 3afb818f20 Add preference for fully disabling HSTS. 2019-01-16 19:33:09 -05:00
adeshkp acf1406e0e Remove a pointless switch after telemetry cleanup 2019-01-14 09:32:12 -05:00
adeshkp 5335681cd2 Telemetry: Remove stubs and related code 2019-01-12 06:20:31 -05:00
trav90 483267ba97 Update HSTS preload list
Tag #447
2019-01-02 16:41:46 -06:00
trav90 f0fe6b69db Update HSTS preload list
Tag #447
2018-12-15 17:51:30 -06:00
trav90 3eef7ab260 Update HSTS preload list
Tag #447
2018-11-27 07:32:12 -06:00
wolfbeast d5a1b34c05 Remove AccumulateCipherSuite()
This resolves #858
2018-11-08 11:32:49 +01:00
wolfbeast f42d6c39fe Remove ancient workaround in client certificate code
Apparently a prehistoric server implementation would send a certificate_authorities field
that didn't include the outer DER SEQUENCE tag, so PSM attempted to detect this and
work around it.
This prehistoric server implementation isn't in use anywhere anymore, so this 18-yo
server bug workaround can be removed.
2018-11-02 11:39:21 +01:00
wolfbeast 52b989d535 Make sure nsNSSCertList handling checks for valid certs. 2018-11-02 02:08:44 +01:00
trav90 76825544ff Update HSTS preload list
Tag #447
2018-10-27 07:32:12 -05:00
trav90 b927e0d5ca Update HSTS preload list
Tag #447
2018-10-12 21:07:35 -05:00
wolfbeast 95379e3377 Ensure we got an nsISSLStatus when deserializing in TransportSecurityInfo. 2018-10-04 22:24:52 +02:00
trav90 778b3c4d7e Update HSTS preload list
Tag #447
2018-09-29 08:37:22 -05:00
wolfbeast 347aea437f Get rid of the incorrect mechanism to remove insecure fallback hosts.
This fixes #797.
2018-09-29 10:09:13 +02:00
trav90 2f64d5eeec Update HSTS preload list
Tag #447
2018-09-11 17:30:37 -05:00
wolfbeast ab961aeb54 Remove all C++ Telemetry Accumulation calls.
This creates a number of stubs and leaves some surrounding code that may be irrelevant (eg. recorded time stamps, status variables).
Stub resolution/removal should be a follow-up to this.
2018-09-03 10:11:38 +02:00
wolfbeast 1425f020c4 Remove support for TLS session caches in TLSServerSocket.
This resolves #738
2018-09-01 23:45:10 +02:00
trav90 cc0e6c7ece Update HSTS preload list
Tag #447
2018-08-27 05:43:33 -05:00
wolfbeast bfc5b53cf9 Fix missed in32->int64 in df85212009
Tag #709.
2018-08-17 19:23:37 +02:00
wolfbeast 26debee733 Reinstate RC4 and mark 3DES weak.
Tag #709
2018-08-17 06:39:04 +02:00
wolfbeast df85212009 Extend {EnabledWeakCiphers} bit field to allow more cipher suites.
Tag #709.
2018-08-17 06:33:23 +02:00
trav90 e79f2ee694 Update HSTS preload list
Tag #447
2018-08-01 05:42:29 -05:00
yami bdcae58fa6 replace "certErrorCodePrefix2" with "certErrorCodePrefix" 2018-07-22 15:29:06 +02:00
trav90 4d358ef73c Update HSTS preload list
Tag #447
2018-07-17 05:53:04 -05:00
wolfbeast 535e9399e6 Remove SSL Error Reporting telemetry 2018-06-29 17:40:01 +02:00
trav90 ba241f0825 Update HSTS preload list
Tag #447
2018-06-21 05:29:04 -05:00
wolfbeast 7d3b69729b Fix SSL status ambiguity.
- Adds CipherSuite string with the full suite
- Changes CipherName to be the actual cipher name instead of the (erroneous) full suite like Firefox does.
2018-06-20 19:14:58 +02:00
JustOff b1ddd8a8af [PALEMOON] Add missed strings required by page info 2018-06-08 19:10:23 +03:00
Moonchild 306f3865cc Merge pull request #461 from trav90/HSTS
Improve HSTS preload list generation
2018-06-07 15:03:27 +02:00