Commit Graph

148 Commits

Author SHA1 Message Date
roytam1 b39f71e0fc import from UXP: [NSS] Destroy certificate on error paths (01d89493) 2025-12-18 00:04:30 +08:00
roytam1 58e09f3c76 update timezone tld and ev root data 2025-12-05 10:29:53 +08:00
roytam1 db7a51891d nss: update certdata and bump ckbi version to 2.82 2025-12-03 23:19:01 +08:00
roytam1 69d606e5d9 import from UXP: [NSS] Avoid leak in pkcs12 decoder. (fe21538d) 2025-08-21 16:16:42 +08:00
roytam1 9815f45333 nss: update certdata and bump ckbi version to 2.80
- Bug 1974511 - Add SwissSign 2022 Roots to NSS r=jschanck
- Bug 1972391 - Add TrustAsia Dedicated Roots to NSS r=jschanck
- Bug 1961848 - Remove expired Baltimore CyberTrust Root r=jschanck
- Bug 1978677 - remove expired explicitly distrusted DigiNotar lookalike root r=nss-reviewers,jschanck
2025-08-21 15:55:24 +08:00
roytam1 4fff1ea8bf nss: merge changes from upstream UXP 2025-06-28 06:31:21 +08:00
roytam1 50af71f274 nss: update certdata and bump ckbi version to 2.78 2025-06-28 00:43:26 +08:00
roytam1 7d334e0132 ported from UXP: Issue #2723 - Remove obsolete NPN prefs and callbacks. (59601788)
most of them are done already.
2025-06-17 14:19:03 +08:00
roytam1 8a4ba96e27 import from UXP: No Issue - Fixes for building with LLVM 19 included with FreeBSD 13.5. Fix a conflict with libc++ 19 and the old Mozilla (re)alloc macros. LLVM 18+ does not allow std::char_traits<unsigned char> so avoid it. https://bugzilla.mozilla.org/show_bug.cgi?id=1849070 Partial NSS upgrade to replace ByteString with a class. https://bugzilla.mozilla.org/show_bug.cgi?id=1851092 (e8b3077d) 2025-05-14 14:48:51 +08:00
roytam1 3be6873e4c import from custom branch of UXP: nss: update builtin certstore and bump ckbi version (5384bb6d) 2025-04-30 23:40:40 +08:00
roytam1 82ac7d1b29 import from UXP: [NSS] Improve locking in nssPKIObject_GetInstances. (be9a6ed2) 2025-04-30 23:39:10 +08:00
roytam1 584dfd8036 nss: update nssckbi to 2.74 2025-02-13 23:50:42 +08:00
roytam1 d645d6d4ee import from UXP: [NSS] Ensure zero-initialization of collectArgs.cert (dcb76fe0) 2025-02-06 10:01:26 +08:00
roytam1 6753bc9f5b import from UXP: [NSS] Simplify error handling in get_token_objects_for_cache. (ecb18ddf) 2025-02-06 10:00:32 +08:00
roytam1 92d71e3d9d import from custom branch of UXP: nss: update nssckbi to 2.72 (e26468c8) 2024-11-29 21:15:27 +08:00
roytam1 d7feb3867b import from UXP: [NSS] Bug 1899402 - Correctly destroy bulkkey in error scenario. r=jschanck (e8252090) 2024-11-29 21:14:01 +08:00
roytam1 7c623784fb nss: update nssckbi to 2.68 2024-06-09 07:15:31 +08:00
roytam1 22b538979b nss: update nssckbi to 2.66 2024-05-26 06:59:35 +08:00
roytam1 9453c5a110 import from UXP: [NSS] add a defensive check for large ssl_DefSend return values. (266b96a5) 2024-01-25 13:58:24 +08:00
roytam1 349b1cd5c2 [NSS] change cipher preference 2023-11-17 14:26:51 +08:00
roytam1 e3db060841 nss: update nssckbi to 2.64 2023-11-16 10:15:17 +08:00
roytam1 9c189c7a81 partly import changes from tenfourfox:
- update ESR base to 115; update EV roots, HSTS, pins, TLDs, TZs; security pullup (55284dd80)
2023-09-01 11:19:31 +08:00
roytam1 6844ae526e nss: update nssckbi to 2.62 2023-08-24 10:09:05 +08:00
roytam1 d8f486f26d ported from UXP: Issue #1956 - Allow building with newer MSVC versions. 2023-06-26 10:44:45 +08:00
roytam1 abe8bd4fc6 import from UXP: No Issue - Updates to Mac packaging for notarization. Add Mac entitlements. Switch to using "create" instead of "makehybrid" when creating the disk image. This fixes bogus extended attributes which interfere with the code signature. Finally add any -bin or dylibs in the Resources folder since --deep skips that folder. (fae36a95) 2023-05-10 12:10:01 +08:00
roytam1 7fc67fe8b9 ported from UXP: Issue #1656 - Remove more vim control lines. (a39fd9e7) 2023-05-05 23:15:47 +08:00
roytam1 7781c1d576 ported from UXP: Issue #2180 - Follow-up: Move sentinel check up a bit. (f6f0a495) 2023-03-30 10:55:59 +08:00
roytam1 ecc48cd55e ported from UXP: Issue #2180 - Add pref to control NSS TLS 1.3 protocol downgrade sentinel (dc4bf9b8) 2023-03-30 10:52:46 +08:00
roytam1 29e66b43a3 ported from UXP: Issue #1831 - Add an option to enable TLS 1.3 "compatibility" mode. (ca93d4b4) 2023-03-30 10:50:18 +08:00
roytam1 965181305d import from UXP: Issue #2148 - Make Vector not use AlignedStorage for its inline element storage (0365f940) 2023-03-15 23:12:24 +08:00
roytam1 d747e5caf3 import from UXP: [NSS] Update NSS to pick up fixes. (cdda874c) 2023-02-20 12:09:48 +08:00
roytam1 9683df81f8 imported changes from mozilla NSS:
- Bug 1794495 - Remove Network Solutions Certificate Authority. r=KathleenWilson (64a28c8d60)
- Bug 1794507 - Remove SwissSign Platinum CA - G2 from NSS. r=KathleenWilson (f2c2308403)
- Bug 1797559 - Remove EC-ACC root cert from NSS. r=KathleenWilson (4f1985c8dd)
- Bug 1799038 - Remove Staat der Nederlanden EV Root CA from NSS. r=KathleenWilson (9151be4c45)
- Bug 1794506 - Set nssckbi version number to 2.60. r=nss-reviewers,bbeurdouche (39fc42e136)
- Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates. r=KathleenWilson (a871902c05)
2022-12-07 13:00:53 +08:00
roytam1 c0bfcc9af3 partly import changes from tenfourfox:
- 102ESR: rev EV roots, TLS roots, TLDs, tzdata, HSTS, pins (c47bef11f)
2022-09-19 16:30:52 +08:00
roytam1 359046ad52 update NSS builtin certstore to Sep 2022 version from mozilla upstream. 2022-09-19 16:29:17 +08:00
roytam1 37499aa394 Revert "ported from UXP: Issue #1966 - Remove support for Firefox Marketplace "apps" (11680c89)"
This reverts commit 111fb139c7.
2022-07-30 07:17:40 +08:00
roytam1 c74919b869 nss: sync with UXP (as of rev c78a86f7) 2022-07-29 11:13:11 +08:00
roytam1 111fb139c7 ported from UXP: Issue #1966 - Remove support for Firefox Marketplace "apps" (11680c89) 2022-07-28 09:10:05 +08:00
roytam1 ddf183eb44 import from UXP: Update NSS (2e9df177) 2022-07-06 11:26:26 +08:00
roytam1 c8f029d273 imported from mozilla NSS: Bug 1759794 - protect SFTKSlot needLogin with slotLock. r=rrelyea (1bbd8d8c) 2022-06-17 10:57:15 +08:00
roytam1 7b2f47914f imported from mozilla NSS: Bug 1771497 - Uninitialized value in cert_VerifyCertChainOld. r=nss-reviewers,djackson (23be110c) 2022-06-17 10:56:47 +08:00
roytam1 f60d2b52ac imported from mozilla NSS: Bug 1771495 - unchecked return code in sec_DecodeSigAlg. r=nss-reviewers,djackson (d4fb4b83) 2022-06-17 10:33:44 +08:00
roytam1 96862abeac imported from mozilla NSS: Bug 1771498 - Uninitialized value in cert_ComputeCertType. r=djackson (b28bc4cd) 2022-06-17 10:33:12 +08:00
roytam1 ecec7995e0 imported cert related changes from mozilla NSS:
- Bug 1764392 - Add DigitCert Roots r=nss-reviewers,jschanck (0863d9ec)
- Bug 1768970 - Add Certainly Roots. r=nss-reviewers,jschanck (6307e75b)
- Bug 1770267 - Add E-Tugra Roots. r=nss-reviewers,jschanck (9555008f)
- Bug 1759815 - Remove Hellenic Academic 2011 Root. r=nss-reviewers,jschanck (9c2cbf14)
- Bug 1764206 - Bump nssckbi version number for June. r=nss-reviewers,jschanck (b3acf3d9)
2022-06-17 09:55:50 +08:00
roytam1 ea6e33cd0e import from nss upstream: Bug 1767590 - Initialize pointers passed to NSS_CMSDigestContext_FinishMultiple r=#nss-reviewers,kaie (118b893f8e) 2022-06-02 10:20:07 +08:00
roytam1 7f798ba026 import from UXP: Issue #738 - Follow-up: Remove explicit session cache cleanup routine from ShutdownNSS (031a9289) 2022-05-06 23:09:44 +08:00
roytam1 2a8ddb9d37 import changes from tenfourfox: #651: update HSTS, pins, TLDs, TZ data (fbd13e3c8) 2022-05-06 16:34:04 +08:00
roytam1 7dbfa36c10 import from custom branch of UXP: zlib: also pick up https://github.com/madler/zlib/commit/4346a16853e19b45787ce933666026903fb8f3f8 (eb6e4fba) 2022-04-29 23:30:02 +08:00
roytam1 86ba32da46 ported from UXP: Issue #1746 - Update pkix code with later NSS code. (ed26fe34) 2022-04-23 00:17:36 +08:00
roytam1 de2bd6e273 import from UXP: Issue #457 - Remove duplicate PKCS11 definitions (9fd40b1c) 2022-04-22 23:42:26 +08:00
roytam1 7a341cd816 ported from UXP: [security] Hold mutex when accessing TSI fields. (ef29cca2) 2022-04-22 23:40:22 +08:00