roytam1
|
b39f71e0fc
|
import from UXP: [NSS] Destroy certificate on error paths (01d89493)
|
2025-12-18 00:04:30 +08:00 |
|
roytam1
|
58e09f3c76
|
update timezone tld and ev root data
|
2025-12-05 10:29:53 +08:00 |
|
roytam1
|
db7a51891d
|
nss: update certdata and bump ckbi version to 2.82
|
2025-12-03 23:19:01 +08:00 |
|
roytam1
|
69d606e5d9
|
import from UXP: [NSS] Avoid leak in pkcs12 decoder. (fe21538d)
|
2025-08-21 16:16:42 +08:00 |
|
roytam1
|
9815f45333
|
nss: update certdata and bump ckbi version to 2.80
- Bug 1974511 - Add SwissSign 2022 Roots to NSS r=jschanck
- Bug 1972391 - Add TrustAsia Dedicated Roots to NSS r=jschanck
- Bug 1961848 - Remove expired Baltimore CyberTrust Root r=jschanck
- Bug 1978677 - remove expired explicitly distrusted DigiNotar lookalike root r=nss-reviewers,jschanck
|
2025-08-21 15:55:24 +08:00 |
|
roytam1
|
4fff1ea8bf
|
nss: merge changes from upstream UXP
|
2025-06-28 06:31:21 +08:00 |
|
roytam1
|
50af71f274
|
nss: update certdata and bump ckbi version to 2.78
|
2025-06-28 00:43:26 +08:00 |
|
roytam1
|
7d334e0132
|
ported from UXP: Issue #2723 - Remove obsolete NPN prefs and callbacks. (59601788)
most of them are done already.
|
2025-06-17 14:19:03 +08:00 |
|
roytam1
|
8a4ba96e27
|
import from UXP: No Issue - Fixes for building with LLVM 19 included with FreeBSD 13.5. Fix a conflict with libc++ 19 and the old Mozilla (re)alloc macros. LLVM 18+ does not allow std::char_traits<unsigned char> so avoid it. https://bugzilla.mozilla.org/show_bug.cgi?id=1849070 Partial NSS upgrade to replace ByteString with a class. https://bugzilla.mozilla.org/show_bug.cgi?id=1851092 (e8b3077d)
|
2025-05-14 14:48:51 +08:00 |
|
roytam1
|
3be6873e4c
|
import from custom branch of UXP: nss: update builtin certstore and bump ckbi version (5384bb6d)
|
2025-04-30 23:40:40 +08:00 |
|
roytam1
|
82ac7d1b29
|
import from UXP: [NSS] Improve locking in nssPKIObject_GetInstances. (be9a6ed2)
|
2025-04-30 23:39:10 +08:00 |
|
roytam1
|
584dfd8036
|
nss: update nssckbi to 2.74
|
2025-02-13 23:50:42 +08:00 |
|
roytam1
|
d645d6d4ee
|
import from UXP: [NSS] Ensure zero-initialization of collectArgs.cert (dcb76fe0)
|
2025-02-06 10:01:26 +08:00 |
|
roytam1
|
6753bc9f5b
|
import from UXP: [NSS] Simplify error handling in get_token_objects_for_cache. (ecb18ddf)
|
2025-02-06 10:00:32 +08:00 |
|
roytam1
|
92d71e3d9d
|
import from custom branch of UXP: nss: update nssckbi to 2.72 (e26468c8)
|
2024-11-29 21:15:27 +08:00 |
|
roytam1
|
d7feb3867b
|
import from UXP: [NSS] Bug 1899402 - Correctly destroy bulkkey in error scenario. r=jschanck (e8252090)
|
2024-11-29 21:14:01 +08:00 |
|
roytam1
|
7c623784fb
|
nss: update nssckbi to 2.68
|
2024-06-09 07:15:31 +08:00 |
|
roytam1
|
22b538979b
|
nss: update nssckbi to 2.66
|
2024-05-26 06:59:35 +08:00 |
|
roytam1
|
9453c5a110
|
import from UXP: [NSS] add a defensive check for large ssl_DefSend return values. (266b96a5)
|
2024-01-25 13:58:24 +08:00 |
|
roytam1
|
349b1cd5c2
|
[NSS] change cipher preference
|
2023-11-17 14:26:51 +08:00 |
|
roytam1
|
e3db060841
|
nss: update nssckbi to 2.64
|
2023-11-16 10:15:17 +08:00 |
|
roytam1
|
9c189c7a81
|
partly import changes from tenfourfox:
- update ESR base to 115; update EV roots, HSTS, pins, TLDs, TZs; security pullup (55284dd80)
|
2023-09-01 11:19:31 +08:00 |
|
roytam1
|
6844ae526e
|
nss: update nssckbi to 2.62
|
2023-08-24 10:09:05 +08:00 |
|
roytam1
|
d8f486f26d
|
ported from UXP: Issue #1956 - Allow building with newer MSVC versions.
|
2023-06-26 10:44:45 +08:00 |
|
roytam1
|
abe8bd4fc6
|
import from UXP: No Issue - Updates to Mac packaging for notarization. Add Mac entitlements. Switch to using "create" instead of "makehybrid" when creating the disk image. This fixes bogus extended attributes which interfere with the code signature. Finally add any -bin or dylibs in the Resources folder since --deep skips that folder. (fae36a95)
|
2023-05-10 12:10:01 +08:00 |
|
roytam1
|
7fc67fe8b9
|
ported from UXP: Issue #1656 - Remove more vim control lines. (a39fd9e7)
|
2023-05-05 23:15:47 +08:00 |
|
roytam1
|
7781c1d576
|
ported from UXP: Issue #2180 - Follow-up: Move sentinel check up a bit. (f6f0a495)
|
2023-03-30 10:55:59 +08:00 |
|
roytam1
|
ecc48cd55e
|
ported from UXP: Issue #2180 - Add pref to control NSS TLS 1.3 protocol downgrade sentinel (dc4bf9b8)
|
2023-03-30 10:52:46 +08:00 |
|
roytam1
|
29e66b43a3
|
ported from UXP: Issue #1831 - Add an option to enable TLS 1.3 "compatibility" mode. (ca93d4b4)
|
2023-03-30 10:50:18 +08:00 |
|
roytam1
|
965181305d
|
import from UXP: Issue #2148 - Make Vector not use AlignedStorage for its inline element storage (0365f940)
|
2023-03-15 23:12:24 +08:00 |
|
roytam1
|
d747e5caf3
|
import from UXP: [NSS] Update NSS to pick up fixes. (cdda874c)
|
2023-02-20 12:09:48 +08:00 |
|
roytam1
|
9683df81f8
|
imported changes from mozilla NSS:
- Bug 1794495 - Remove Network Solutions Certificate Authority. r=KathleenWilson (64a28c8d60)
- Bug 1794507 - Remove SwissSign Platinum CA - G2 from NSS. r=KathleenWilson (f2c2308403)
- Bug 1797559 - Remove EC-ACC root cert from NSS. r=KathleenWilson (4f1985c8dd)
- Bug 1799038 - Remove Staat der Nederlanden EV Root CA from NSS. r=KathleenWilson (9151be4c45)
- Bug 1794506 - Set nssckbi version number to 2.60. r=nss-reviewers,bbeurdouche (39fc42e136)
- Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates. r=KathleenWilson (a871902c05)
|
2022-12-07 13:00:53 +08:00 |
|
roytam1
|
c0bfcc9af3
|
partly import changes from tenfourfox:
- 102ESR: rev EV roots, TLS roots, TLDs, tzdata, HSTS, pins (c47bef11f)
|
2022-09-19 16:30:52 +08:00 |
|
roytam1
|
359046ad52
|
update NSS builtin certstore to Sep 2022 version from mozilla upstream.
|
2022-09-19 16:29:17 +08:00 |
|
roytam1
|
37499aa394
|
Revert "ported from UXP: Issue #1966 - Remove support for Firefox Marketplace "apps" (11680c89)"
This reverts commit 111fb139c7.
|
2022-07-30 07:17:40 +08:00 |
|
roytam1
|
c74919b869
|
nss: sync with UXP (as of rev c78a86f7)
|
2022-07-29 11:13:11 +08:00 |
|
roytam1
|
111fb139c7
|
ported from UXP: Issue #1966 - Remove support for Firefox Marketplace "apps" (11680c89)
|
2022-07-28 09:10:05 +08:00 |
|
roytam1
|
ddf183eb44
|
import from UXP: Update NSS (2e9df177)
|
2022-07-06 11:26:26 +08:00 |
|
roytam1
|
c8f029d273
|
imported from mozilla NSS: Bug 1759794 - protect SFTKSlot needLogin with slotLock. r=rrelyea (1bbd8d8c)
|
2022-06-17 10:57:15 +08:00 |
|
roytam1
|
7b2f47914f
|
imported from mozilla NSS: Bug 1771497 - Uninitialized value in cert_VerifyCertChainOld. r=nss-reviewers,djackson (23be110c)
|
2022-06-17 10:56:47 +08:00 |
|
roytam1
|
f60d2b52ac
|
imported from mozilla NSS: Bug 1771495 - unchecked return code in sec_DecodeSigAlg. r=nss-reviewers,djackson (d4fb4b83)
|
2022-06-17 10:33:44 +08:00 |
|
roytam1
|
96862abeac
|
imported from mozilla NSS: Bug 1771498 - Uninitialized value in cert_ComputeCertType. r=djackson (b28bc4cd)
|
2022-06-17 10:33:12 +08:00 |
|
roytam1
|
ecec7995e0
|
imported cert related changes from mozilla NSS:
- Bug 1764392 - Add DigitCert Roots r=nss-reviewers,jschanck (0863d9ec)
- Bug 1768970 - Add Certainly Roots. r=nss-reviewers,jschanck (6307e75b)
- Bug 1770267 - Add E-Tugra Roots. r=nss-reviewers,jschanck (9555008f)
- Bug 1759815 - Remove Hellenic Academic 2011 Root. r=nss-reviewers,jschanck (9c2cbf14)
- Bug 1764206 - Bump nssckbi version number for June. r=nss-reviewers,jschanck (b3acf3d9)
|
2022-06-17 09:55:50 +08:00 |
|
roytam1
|
ea6e33cd0e
|
import from nss upstream: Bug 1767590 - Initialize pointers passed to NSS_CMSDigestContext_FinishMultiple r=#nss-reviewers,kaie (118b893f8e)
|
2022-06-02 10:20:07 +08:00 |
|
roytam1
|
7f798ba026
|
import from UXP: Issue #738 - Follow-up: Remove explicit session cache cleanup routine from ShutdownNSS (031a9289)
|
2022-05-06 23:09:44 +08:00 |
|
roytam1
|
2a8ddb9d37
|
import changes from tenfourfox: #651: update HSTS, pins, TLDs, TZ data (fbd13e3c8)
|
2022-05-06 16:34:04 +08:00 |
|
roytam1
|
7dbfa36c10
|
import from custom branch of UXP: zlib: also pick up https://github.com/madler/zlib/commit/4346a16853e19b45787ce933666026903fb8f3f8 (eb6e4fba)
|
2022-04-29 23:30:02 +08:00 |
|
roytam1
|
86ba32da46
|
ported from UXP: Issue #1746 - Update pkix code with later NSS code. (ed26fe34)
|
2022-04-23 00:17:36 +08:00 |
|
roytam1
|
de2bd6e273
|
import from UXP: Issue #457 - Remove duplicate PKCS11 definitions (9fd40b1c)
|
2022-04-22 23:42:26 +08:00 |
|
roytam1
|
7a341cd816
|
ported from UXP: [security] Hold mutex when accessing TSI fields. (ef29cca2)
|
2022-04-22 23:40:22 +08:00 |
|