roytam1
|
6ffc4f1522
|
import from UXP: Bug 2029323 - Improve size calculations in CMS content buffering (0329082c)
|
2026-04-27 14:34:06 +08:00 |
|
roytam1
|
a81abc48d8
|
import from UXP: Bug 2029425 - Heap use-after-free in cert_VerifyCertChainOld via dangling certsList[] entry on NameConstraints violation. (aad6fdd5)
|
2026-04-27 14:33:39 +08:00 |
|
roytam1
|
4dc05471f5
|
import from UXP: Bug 2030135 - improve error handling in PK11_ImportPrivateKeyInfoAndReturnKey (a8571576)
|
2026-04-27 14:08:13 +08:00 |
|
roytam1
|
df3e0635ec
|
import from UXP: Bug 2029462 - store email on subject cache_entry in NSS trust domain. (7937766f)
|
2026-04-27 14:03:52 +08:00 |
|
roytam1
|
a057cae18d
|
import from UXP: [security] Ensure DispatchToMainThreadAndWait isn't interrupted. (69bd6af8)
|
2026-04-27 14:03:24 +08:00 |
|
roytam1
|
4378c0b3c1
|
import from UXP: [NSS] Clarify extension negotiation mechanism for TLS Handshakes. (e4fd587a)
|
2026-04-27 12:19:18 +08:00 |
|
roytam1
|
028ac906b7
|
import from UXP: [NSS] Deep copy profile data in CERT_FindSMimeProfile. (5f41bdff)
|
2026-04-27 11:54:34 +08:00 |
|
roytam1
|
8679b848ce
|
import from UXP: [NSS] Reject excessively large ASN.1 SEQUENCE OF in quickder. (9dd4cfcc)
|
2026-04-27 11:48:15 +08:00 |
|
roytam1
|
94fb8c8a67
|
import from UXP: [NSS] Improve input validation in DSAU signature decoding (d6ff046d)
|
2026-04-27 11:30:12 +08:00 |
|
roytam1
|
0fa7b241a3
|
import from UXP: [NSS] Fix memory leak in NSC_GenerateKey error path. (69fdabab)
|
2026-04-24 10:01:00 +08:00 |
|
roytam1
|
a55328afdc
|
import from UXP: [NSS] Protect rwSessionCount with slotLock. (29233ebc)
|
2026-04-24 10:00:22 +08:00 |
|
roytam1
|
f260735d94
|
import from UXP: [NSS] ensure permittedSubtrees don't match wildcards that could be outside the permitted tree. (662d60c5)
|
2026-04-23 10:09:04 +08:00 |
|
roytam1
|
a02ab89ea7
|
import from UXP: [NSS] Update NSS (custom) (61c6b4c1)
|
2026-04-03 00:02:11 +08:00 |
|
roytam1
|
3381dabad7
|
import from UXP: [NSS] Update NSS (464b24c6)
|
2026-01-15 23:05:26 +08:00 |
|
roytam1
|
b39f71e0fc
|
import from UXP: [NSS] Destroy certificate on error paths (01d89493)
|
2025-12-18 00:04:30 +08:00 |
|
roytam1
|
58e09f3c76
|
update timezone tld and ev root data
|
2025-12-05 10:29:53 +08:00 |
|
roytam1
|
db7a51891d
|
nss: update certdata and bump ckbi version to 2.82
|
2025-12-03 23:19:01 +08:00 |
|
roytam1
|
69d606e5d9
|
import from UXP: [NSS] Avoid leak in pkcs12 decoder. (fe21538d)
|
2025-08-21 16:16:42 +08:00 |
|
roytam1
|
9815f45333
|
nss: update certdata and bump ckbi version to 2.80
- Bug 1974511 - Add SwissSign 2022 Roots to NSS r=jschanck
- Bug 1972391 - Add TrustAsia Dedicated Roots to NSS r=jschanck
- Bug 1961848 - Remove expired Baltimore CyberTrust Root r=jschanck
- Bug 1978677 - remove expired explicitly distrusted DigiNotar lookalike root r=nss-reviewers,jschanck
|
2025-08-21 15:55:24 +08:00 |
|
roytam1
|
4fff1ea8bf
|
nss: merge changes from upstream UXP
|
2025-06-28 06:31:21 +08:00 |
|
roytam1
|
50af71f274
|
nss: update certdata and bump ckbi version to 2.78
|
2025-06-28 00:43:26 +08:00 |
|
roytam1
|
7d334e0132
|
ported from UXP: Issue #2723 - Remove obsolete NPN prefs and callbacks. (59601788)
most of them are done already.
|
2025-06-17 14:19:03 +08:00 |
|
roytam1
|
8a4ba96e27
|
import from UXP: No Issue - Fixes for building with LLVM 19 included with FreeBSD 13.5. Fix a conflict with libc++ 19 and the old Mozilla (re)alloc macros. LLVM 18+ does not allow std::char_traits<unsigned char> so avoid it. https://bugzilla.mozilla.org/show_bug.cgi?id=1849070 Partial NSS upgrade to replace ByteString with a class. https://bugzilla.mozilla.org/show_bug.cgi?id=1851092 (e8b3077d)
|
2025-05-14 14:48:51 +08:00 |
|
roytam1
|
3be6873e4c
|
import from custom branch of UXP: nss: update builtin certstore and bump ckbi version (5384bb6d)
|
2025-04-30 23:40:40 +08:00 |
|
roytam1
|
82ac7d1b29
|
import from UXP: [NSS] Improve locking in nssPKIObject_GetInstances. (be9a6ed2)
|
2025-04-30 23:39:10 +08:00 |
|
roytam1
|
584dfd8036
|
nss: update nssckbi to 2.74
|
2025-02-13 23:50:42 +08:00 |
|
roytam1
|
d645d6d4ee
|
import from UXP: [NSS] Ensure zero-initialization of collectArgs.cert (dcb76fe0)
|
2025-02-06 10:01:26 +08:00 |
|
roytam1
|
6753bc9f5b
|
import from UXP: [NSS] Simplify error handling in get_token_objects_for_cache. (ecb18ddf)
|
2025-02-06 10:00:32 +08:00 |
|
roytam1
|
92d71e3d9d
|
import from custom branch of UXP: nss: update nssckbi to 2.72 (e26468c8)
|
2024-11-29 21:15:27 +08:00 |
|
roytam1
|
d7feb3867b
|
import from UXP: [NSS] Bug 1899402 - Correctly destroy bulkkey in error scenario. r=jschanck (e8252090)
|
2024-11-29 21:14:01 +08:00 |
|
roytam1
|
7c623784fb
|
nss: update nssckbi to 2.68
|
2024-06-09 07:15:31 +08:00 |
|
roytam1
|
22b538979b
|
nss: update nssckbi to 2.66
|
2024-05-26 06:59:35 +08:00 |
|
roytam1
|
9453c5a110
|
import from UXP: [NSS] add a defensive check for large ssl_DefSend return values. (266b96a5)
|
2024-01-25 13:58:24 +08:00 |
|
roytam1
|
349b1cd5c2
|
[NSS] change cipher preference
|
2023-11-17 14:26:51 +08:00 |
|
roytam1
|
e3db060841
|
nss: update nssckbi to 2.64
|
2023-11-16 10:15:17 +08:00 |
|
roytam1
|
9c189c7a81
|
partly import changes from tenfourfox:
- update ESR base to 115; update EV roots, HSTS, pins, TLDs, TZs; security pullup (55284dd80)
|
2023-09-01 11:19:31 +08:00 |
|
roytam1
|
6844ae526e
|
nss: update nssckbi to 2.62
|
2023-08-24 10:09:05 +08:00 |
|
roytam1
|
d8f486f26d
|
ported from UXP: Issue #1956 - Allow building with newer MSVC versions.
|
2023-06-26 10:44:45 +08:00 |
|
roytam1
|
abe8bd4fc6
|
import from UXP: No Issue - Updates to Mac packaging for notarization. Add Mac entitlements. Switch to using "create" instead of "makehybrid" when creating the disk image. This fixes bogus extended attributes which interfere with the code signature. Finally add any -bin or dylibs in the Resources folder since --deep skips that folder. (fae36a95)
|
2023-05-10 12:10:01 +08:00 |
|
roytam1
|
7fc67fe8b9
|
ported from UXP: Issue #1656 - Remove more vim control lines. (a39fd9e7)
|
2023-05-05 23:15:47 +08:00 |
|
roytam1
|
7781c1d576
|
ported from UXP: Issue #2180 - Follow-up: Move sentinel check up a bit. (f6f0a495)
|
2023-03-30 10:55:59 +08:00 |
|
roytam1
|
ecc48cd55e
|
ported from UXP: Issue #2180 - Add pref to control NSS TLS 1.3 protocol downgrade sentinel (dc4bf9b8)
|
2023-03-30 10:52:46 +08:00 |
|
roytam1
|
29e66b43a3
|
ported from UXP: Issue #1831 - Add an option to enable TLS 1.3 "compatibility" mode. (ca93d4b4)
|
2023-03-30 10:50:18 +08:00 |
|
roytam1
|
965181305d
|
import from UXP: Issue #2148 - Make Vector not use AlignedStorage for its inline element storage (0365f940)
|
2023-03-15 23:12:24 +08:00 |
|
roytam1
|
d747e5caf3
|
import from UXP: [NSS] Update NSS to pick up fixes. (cdda874c)
|
2023-02-20 12:09:48 +08:00 |
|
roytam1
|
9683df81f8
|
imported changes from mozilla NSS:
- Bug 1794495 - Remove Network Solutions Certificate Authority. r=KathleenWilson (64a28c8d60)
- Bug 1794507 - Remove SwissSign Platinum CA - G2 from NSS. r=KathleenWilson (f2c2308403)
- Bug 1797559 - Remove EC-ACC root cert from NSS. r=KathleenWilson (4f1985c8dd)
- Bug 1799038 - Remove Staat der Nederlanden EV Root CA from NSS. r=KathleenWilson (9151be4c45)
- Bug 1794506 - Set nssckbi version number to 2.60. r=nss-reviewers,bbeurdouche (39fc42e136)
- Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates. r=KathleenWilson (a871902c05)
|
2022-12-07 13:00:53 +08:00 |
|
roytam1
|
c0bfcc9af3
|
partly import changes from tenfourfox:
- 102ESR: rev EV roots, TLS roots, TLDs, tzdata, HSTS, pins (c47bef11f)
|
2022-09-19 16:30:52 +08:00 |
|
roytam1
|
359046ad52
|
update NSS builtin certstore to Sep 2022 version from mozilla upstream.
|
2022-09-19 16:29:17 +08:00 |
|
roytam1
|
37499aa394
|
Revert "ported from UXP: Issue #1966 - Remove support for Firefox Marketplace "apps" (11680c89)"
This reverts commit 111fb139c7.
|
2022-07-30 07:17:40 +08:00 |
|
roytam1
|
c74919b869
|
nss: sync with UXP (as of rev c78a86f7)
|
2022-07-29 11:13:11 +08:00 |
|