1
0
mirror of https://github.com/roytam1/UXP.git synced 2026-05-27 08:19:56 +00:00
Commit Graph

21 Commits

Author SHA1 Message Date
Moonchild f6f0a495a7 Issue #2180 - Follow-up: Move sentinel check up a bit. 2023-03-29 11:05:39 +08:00
Moonchild dc4bf9b823 Issue #2180 - Add pref to control NSS TLS 1.3 protocol downgrade sentinel 2023-03-29 11:05:16 +08:00
Moonchild ca93d4b42d Issue #1831 - Add an option to enable TLS 1.3 "compatibility" mode.
Critical note: this potentially reduces the strength of TLS 1.3 and
should only be enabled if absolutely necessary to access a site.
A browser restart is required for the pref change to take effect as it
is set on NSS initialization.

Resolves #1831
2023-03-29 11:04:44 +08:00
FranklinDM 031a928950 Issue #738 - Follow-up: Remove explicit session cache cleanup routine from ShutdownNSS
This is no longer needed because the call to SSL_ConfigServerSessionIDCache on startup was already removed (see 1425f020c47b3cbe134f71717299714aead28502), meaning LocksInitializedEarly does not become true and only causes an assertion on debug builds.

On the other hand, SSL_ClearSessionCache is already called on XPCOM shutdown and calling it again here is redundant.

Additional context: https://bugzilla.mozilla.org/show_bug.cgi?id=1485087#c5

Based on https://bugzilla.mozilla.org/show_bug.cgi?id=1485087
2022-04-21 21:46:24 +08:00
adesh 2924d30a83 Issue #1280 - Follow-up: Get rid of HPKP pinning mode.
This was a leftover from HPKP removal.

Also remove a couple of unused variables from security/manager/ssl/nsSiteSecurityService.cpp.
2020-11-19 21:11:43 +08:00
wolfbeast 8778ddfc52 Issue #1467 - Part 4: Rename NSS_SQLSTORE to MOZ_SECURITY_SQLSTORE.
Rename the build config option accordingly.
2020-04-03 09:14:07 +08:00
wolfbeast ff29b77edc Issue #1467 - Part 3: Use UTF-8 file paths for NSS-SQL database. 2020-04-03 09:14:04 +08:00
wolfbeast 5efa1a9e43 Issue #1467 - Part 1: Set up conditional NSS-SQL builds.
- Adds buildconfig option --enable-nss-sqlstore
- Prefixes NSS dbinit with either sql: or dbm: depending on config
- Pre-initializes mozStorage when NSS-SQL storage is used to prevent
  an sqlite3_config race in NSS Init
2020-04-03 09:12:04 +08:00
Matt A. Tobin 56f64bd775 Issue #1053 - Remove android support from nsNSSComponent.cpp 2020-03-05 09:38:27 +08:00
adeshkp aea50f182f Telemetry: Remove stubs and related code 2019-02-16 00:24:04 +08:00
wolfbeast d8ccdaa0d9 Remove AccumulateCipherSuite()
This resolves #858
2019-02-16 00:19:07 +08:00
wolfbeast 8c8145e620 Remove all C++ Telemetry Accumulation calls.
This creates a number of stubs and leaves some surrounding code that may be irrelevant (eg. recorded time stamps, status variables).
Stub resolution/removal should be a follow-up to this.
2019-02-16 00:12:32 +08:00
wolfbeast e2e197cada Remove support for TLS session caches in TLSServerSocket.
This resolves #738
2019-02-16 00:12:22 +08:00
wolfbeast 4debc9246e Fix missed in32->int64 in df852120098dc7ba5df4a76126c6297c6d2d1b7b
Tag #709.
2019-02-16 00:11:26 +08:00
wolfbeast 8effb3030e Reinstate RC4 and mark 3DES weak.
Tag #709
2019-02-16 00:11:24 +08:00
wolfbeast 7f72783c00 Extend {EnabledWeakCiphers} bit field to allow more cipher suites.
Tag #709.
2019-02-16 00:11:23 +08:00
JustOff 7ff80ee648 Request NSS to use DBM as the storage file format 2019-02-16 00:01:09 +08:00
wolfbeast 504e1d12bb Disable 3DES cipher by default + re-order a few things.
Issue #4 point 4
2019-02-14 14:28:30 +08:00
wolfbeast 05d35d3d18 Add RSA-AES + SHA256/384 suites for web compatibility.
Sites with these ciphers (commonly IIS) would otherwise fall back to weak 3DES that will be disabled by default.

Issue #4 points 2 and 3
2019-02-14 14:28:29 +08:00
wolfbeast 3ecea693f6 Add Camellia to the active cipher suites.
Issue #4 point 1.

Camellia is a strong, modern, safe cipher with no known weaknesses or reduced strength attacks.
The cipher has been approved for use by the ISO/IEC, the European Union's NESSIE project and the Japanese CRYPTREC project.
2019-02-14 14:28:27 +08:00
roytam1 dcd9973243 import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo 2018-01-19 03:59:58 +08:00