Commit Graph

162 Commits

Author SHA1 Message Date
roytam1 6ffc4f1522 import from UXP: Bug 2029323 - Improve size calculations in CMS content buffering (0329082c) 2026-04-27 14:34:06 +08:00
roytam1 a81abc48d8 import from UXP: Bug 2029425 - Heap use-after-free in cert_VerifyCertChainOld via dangling certsList[] entry on NameConstraints violation. (aad6fdd5) 2026-04-27 14:33:39 +08:00
roytam1 4dc05471f5 import from UXP: Bug 2030135 - improve error handling in PK11_ImportPrivateKeyInfoAndReturnKey (a8571576) 2026-04-27 14:08:13 +08:00
roytam1 df3e0635ec import from UXP: Bug 2029462 - store email on subject cache_entry in NSS trust domain. (7937766f) 2026-04-27 14:03:52 +08:00
roytam1 a057cae18d import from UXP: [security] Ensure DispatchToMainThreadAndWait isn't interrupted. (69bd6af8) 2026-04-27 14:03:24 +08:00
roytam1 4378c0b3c1 import from UXP: [NSS] Clarify extension negotiation mechanism for TLS Handshakes. (e4fd587a) 2026-04-27 12:19:18 +08:00
roytam1 028ac906b7 import from UXP: [NSS] Deep copy profile data in CERT_FindSMimeProfile. (5f41bdff) 2026-04-27 11:54:34 +08:00
roytam1 8679b848ce import from UXP: [NSS] Reject excessively large ASN.1 SEQUENCE OF in quickder. (9dd4cfcc) 2026-04-27 11:48:15 +08:00
roytam1 94fb8c8a67 import from UXP: [NSS] Improve input validation in DSAU signature decoding (d6ff046d) 2026-04-27 11:30:12 +08:00
roytam1 0fa7b241a3 import from UXP: [NSS] Fix memory leak in NSC_GenerateKey error path. (69fdabab) 2026-04-24 10:01:00 +08:00
roytam1 a55328afdc import from UXP: [NSS] Protect rwSessionCount with slotLock. (29233ebc) 2026-04-24 10:00:22 +08:00
roytam1 f260735d94 import from UXP: [NSS] ensure permittedSubtrees don't match wildcards that could be outside the permitted tree. (662d60c5) 2026-04-23 10:09:04 +08:00
roytam1 a02ab89ea7 import from UXP: [NSS] Update NSS (custom) (61c6b4c1) 2026-04-03 00:02:11 +08:00
roytam1 3381dabad7 import from UXP: [NSS] Update NSS (464b24c6) 2026-01-15 23:05:26 +08:00
roytam1 b39f71e0fc import from UXP: [NSS] Destroy certificate on error paths (01d89493) 2025-12-18 00:04:30 +08:00
roytam1 58e09f3c76 update timezone tld and ev root data 2025-12-05 10:29:53 +08:00
roytam1 db7a51891d nss: update certdata and bump ckbi version to 2.82 2025-12-03 23:19:01 +08:00
roytam1 69d606e5d9 import from UXP: [NSS] Avoid leak in pkcs12 decoder. (fe21538d) 2025-08-21 16:16:42 +08:00
roytam1 9815f45333 nss: update certdata and bump ckbi version to 2.80
- Bug 1974511 - Add SwissSign 2022 Roots to NSS r=jschanck
- Bug 1972391 - Add TrustAsia Dedicated Roots to NSS r=jschanck
- Bug 1961848 - Remove expired Baltimore CyberTrust Root r=jschanck
- Bug 1978677 - remove expired explicitly distrusted DigiNotar lookalike root r=nss-reviewers,jschanck
2025-08-21 15:55:24 +08:00
roytam1 4fff1ea8bf nss: merge changes from upstream UXP 2025-06-28 06:31:21 +08:00
roytam1 50af71f274 nss: update certdata and bump ckbi version to 2.78 2025-06-28 00:43:26 +08:00
roytam1 7d334e0132 ported from UXP: Issue #2723 - Remove obsolete NPN prefs and callbacks. (59601788)
most of them are done already.
2025-06-17 14:19:03 +08:00
roytam1 8a4ba96e27 import from UXP: No Issue - Fixes for building with LLVM 19 included with FreeBSD 13.5. Fix a conflict with libc++ 19 and the old Mozilla (re)alloc macros. LLVM 18+ does not allow std::char_traits<unsigned char> so avoid it. https://bugzilla.mozilla.org/show_bug.cgi?id=1849070 Partial NSS upgrade to replace ByteString with a class. https://bugzilla.mozilla.org/show_bug.cgi?id=1851092 (e8b3077d) 2025-05-14 14:48:51 +08:00
roytam1 3be6873e4c import from custom branch of UXP: nss: update builtin certstore and bump ckbi version (5384bb6d) 2025-04-30 23:40:40 +08:00
roytam1 82ac7d1b29 import from UXP: [NSS] Improve locking in nssPKIObject_GetInstances. (be9a6ed2) 2025-04-30 23:39:10 +08:00
roytam1 584dfd8036 nss: update nssckbi to 2.74 2025-02-13 23:50:42 +08:00
roytam1 d645d6d4ee import from UXP: [NSS] Ensure zero-initialization of collectArgs.cert (dcb76fe0) 2025-02-06 10:01:26 +08:00
roytam1 6753bc9f5b import from UXP: [NSS] Simplify error handling in get_token_objects_for_cache. (ecb18ddf) 2025-02-06 10:00:32 +08:00
roytam1 92d71e3d9d import from custom branch of UXP: nss: update nssckbi to 2.72 (e26468c8) 2024-11-29 21:15:27 +08:00
roytam1 d7feb3867b import from UXP: [NSS] Bug 1899402 - Correctly destroy bulkkey in error scenario. r=jschanck (e8252090) 2024-11-29 21:14:01 +08:00
roytam1 7c623784fb nss: update nssckbi to 2.68 2024-06-09 07:15:31 +08:00
roytam1 22b538979b nss: update nssckbi to 2.66 2024-05-26 06:59:35 +08:00
roytam1 9453c5a110 import from UXP: [NSS] add a defensive check for large ssl_DefSend return values. (266b96a5) 2024-01-25 13:58:24 +08:00
roytam1 349b1cd5c2 [NSS] change cipher preference 2023-11-17 14:26:51 +08:00
roytam1 e3db060841 nss: update nssckbi to 2.64 2023-11-16 10:15:17 +08:00
roytam1 9c189c7a81 partly import changes from tenfourfox:
- update ESR base to 115; update EV roots, HSTS, pins, TLDs, TZs; security pullup (55284dd80)
2023-09-01 11:19:31 +08:00
roytam1 6844ae526e nss: update nssckbi to 2.62 2023-08-24 10:09:05 +08:00
roytam1 d8f486f26d ported from UXP: Issue #1956 - Allow building with newer MSVC versions. 2023-06-26 10:44:45 +08:00
roytam1 abe8bd4fc6 import from UXP: No Issue - Updates to Mac packaging for notarization. Add Mac entitlements. Switch to using "create" instead of "makehybrid" when creating the disk image. This fixes bogus extended attributes which interfere with the code signature. Finally add any -bin or dylibs in the Resources folder since --deep skips that folder. (fae36a95) 2023-05-10 12:10:01 +08:00
roytam1 7fc67fe8b9 ported from UXP: Issue #1656 - Remove more vim control lines. (a39fd9e7) 2023-05-05 23:15:47 +08:00
roytam1 7781c1d576 ported from UXP: Issue #2180 - Follow-up: Move sentinel check up a bit. (f6f0a495) 2023-03-30 10:55:59 +08:00
roytam1 ecc48cd55e ported from UXP: Issue #2180 - Add pref to control NSS TLS 1.3 protocol downgrade sentinel (dc4bf9b8) 2023-03-30 10:52:46 +08:00
roytam1 29e66b43a3 ported from UXP: Issue #1831 - Add an option to enable TLS 1.3 "compatibility" mode. (ca93d4b4) 2023-03-30 10:50:18 +08:00
roytam1 965181305d import from UXP: Issue #2148 - Make Vector not use AlignedStorage for its inline element storage (0365f940) 2023-03-15 23:12:24 +08:00
roytam1 d747e5caf3 import from UXP: [NSS] Update NSS to pick up fixes. (cdda874c) 2023-02-20 12:09:48 +08:00
roytam1 9683df81f8 imported changes from mozilla NSS:
- Bug 1794495 - Remove Network Solutions Certificate Authority. r=KathleenWilson (64a28c8d60)
- Bug 1794507 - Remove SwissSign Platinum CA - G2 from NSS. r=KathleenWilson (f2c2308403)
- Bug 1797559 - Remove EC-ACC root cert from NSS. r=KathleenWilson (4f1985c8dd)
- Bug 1799038 - Remove Staat der Nederlanden EV Root CA from NSS. r=KathleenWilson (9151be4c45)
- Bug 1794506 - Set nssckbi version number to 2.60. r=nss-reviewers,bbeurdouche (39fc42e136)
- Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates. r=KathleenWilson (a871902c05)
2022-12-07 13:00:53 +08:00
roytam1 c0bfcc9af3 partly import changes from tenfourfox:
- 102ESR: rev EV roots, TLS roots, TLDs, tzdata, HSTS, pins (c47bef11f)
2022-09-19 16:30:52 +08:00
roytam1 359046ad52 update NSS builtin certstore to Sep 2022 version from mozilla upstream. 2022-09-19 16:29:17 +08:00
roytam1 37499aa394 Revert "ported from UXP: Issue #1966 - Remove support for Firefox Marketplace "apps" (11680c89)"
This reverts commit 111fb139c7.
2022-07-30 07:17:40 +08:00
roytam1 c74919b869 nss: sync with UXP (as of rev c78a86f7) 2022-07-29 11:13:11 +08:00