corysanin/tubestation
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
current
tubestation/security/manager/ssl
History
Alex Kontos ea8e999826 feat: remotesettings disable, use offline dumps
2025-11-06 14:13:55 +00:00
..
cert_storage
Revert "Bug 1966632 - bundle cross-signed "SSL.com TLS Transit ECC CA R2" intermediate. r=keeler" for causing bc failures
2025-05-22 10:29:19 +00:00
crashtests
…
crypto_hash
Bug 1894795 - build(rust): upgrade in-tree base64 deps. 0.21.3 → 0.22.1 in-tree r=webdriver-reviewers,necko-reviewers,whimboo,kershaw
2025-03-21 02:58:31 +00:00
data_storage
Bug 1617369 - Reformat recent rust changes with rustfmt r=emilio,webdriver-reviewers,whimboo
2025-05-21 17:36:16 +00:00
ipcclientcerts
Bug 1722306 - rsclientcerts: remove SlotType distinction r=jschanck
2025-04-16 16:28:00 +00:00
osclientcerts
Bug 1987422 - osclientcerts: null-check before wrapping CF objects a=RyanVM DONTBUILD
2025-10-01 18:09:47 +00:00
rsclientcerts
Bug 1962280 - osclientcerts: avoid unnecessary background thread dispatches r=jschanck
2025-04-30 01:03:54 +00:00
tests
Bug 1977962 - use a subdialog for the certificate exception override dialog if available a=RyanVM DONTBUILD
2025-09-02 20:27:27 +00:00
trust_anchors
Bug 1966632 - bundle cross-signed "SSL.com TLS Transit ECC CA R2" intermediate. r=keeler
2025-05-22 18:22:58 +00:00
addons-public-2018-intermediate.pem
Bug 1954818 - Add intermediate cert used until 2018. r=willdurand,jschanck
2025-03-19 00:32:31 +00:00
addons-public-intermediate.pem
Bug 1914064 - extend AppTrustDomain to support multiple trust anchors r=jschanck,mach-reviewers
2024-09-10 23:14:13 +00:00
addons-public.pem
Bug 1914064 - extend AppTrustDomain to support multiple trust anchors r=jschanck,mach-reviewers
2024-09-10 23:14:13 +00:00
addons-stage-intermediate.pem
Bug 1914064 - extend AppTrustDomain to support multiple trust anchors r=jschanck,mach-reviewers
2024-09-10 23:14:13 +00:00
addons-stage.pem
Bug 1914064 - extend AppTrustDomain to support multiple trust anchors r=jschanck,mach-reviewers
2024-09-10 23:14:13 +00:00
AppSignatureVerification.cpp
Bug 1956726 - Migrate histograms to use Glean APIs in security/manager/ssl/, r=chutten.
2025-04-03 17:30:11 +00:00
AppTrustDomain.cpp
Bug 1922838 - Replace ArrayLength, ArrayEnd and MOZ_ARRAY_LENGTH by standard alternative r=glandium,necko-reviewers,jgilbert,application-update-reviewers,media-playback-reviewers,credential-management-reviewers,anti-tracking-reviewers,places-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,bytesized,janv,dimi,daisuke,karlt,gstoll,canaltinova,timhuang
2024-10-28 08:21:19 +00:00
AppTrustDomain.h
Bug 1914064 - extend AppTrustDomain to support multiple trust anchors r=jschanck,mach-reviewers
2024-09-10 23:14:13 +00:00
CertStorageMemoryReporting.cpp
…
ClientAuthDialogService.sys.mjs
Bug 1966033 - pass the list of acceptable issuers through to the android API for client auth certs r=jschanck,geckoview-reviewers,geckoview-api-reviewers,ohall,owlish
2025-05-22 03:08:23 +00:00
CommonSocketControl.cpp
Bug 1486551 - turn cert revocation error pages into (non-overridable) certificate error pages r=jschanck,fluent-reviewers,webidl,bolsson,smaug
2025-02-27 22:12:46 +00:00
CommonSocketControl.h
Bug 1486551 - turn cert revocation error pages into (non-overridable) certificate error pages r=jschanck,fluent-reviewers,webidl,bolsson,smaug
2025-02-27 22:12:46 +00:00
components.conf
Bug 1953390 - Revert Bug 1910298, r=necko-reviewers,valentin
2025-03-13 15:25:54 +00:00
content-signature-local.pem
Bug 1914064 - extend AppTrustDomain to support multiple trust anchors r=jschanck,mach-reviewers
2024-09-10 23:14:13 +00:00
content-signature-prod.pem
Bug 1914064 - extend AppTrustDomain to support multiple trust anchors r=jschanck,mach-reviewers
2024-09-10 23:14:13 +00:00
content-signature-stage.pem
Bug 1914064 - extend AppTrustDomain to support multiple trust anchors r=jschanck,mach-reviewers
2024-09-10 23:14:13 +00:00
ContentSignatureVerifier.cpp
Bug 1956726 - Migrate histograms to use Glean APIs in security/manager/ssl/, r=chutten.
2025-04-03 17:30:11 +00:00
ContentSignatureVerifier.h
Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw
2025-05-17 19:11:13 +00:00
CredentialManagerSecret.cpp
…
CredentialManagerSecret.h
…
CryptoTask.cpp
…
CryptoTask.h
…
DataStorageManager.cpp
…
DataStorageManager.h
…
DER.sys.mjs
…
EnterpriseRoots.cpp
Bug 1920718 - Annotate all global variable with runtime initialization attributes r=glandium,application-update-reviewers,media-playback-reviewers,anti-tracking-reviewers,places-reviewers,profiler-reviewers,gfx-reviewers,aosmond,lina,nalexander,aabh,geckoview-reviewers,win-reviewers,gstoll,m_kato
2024-10-30 11:05:24 +00:00
EnterpriseRoots.h
…
gen_cert_header.py
Bug 1715287 - [lint] Enable remaining pyupgrade rules and lint tree r=linter-reviewers,webdriver-reviewers,translations-reviewers,whimboo,sylvestre
2025-04-13 17:48:23 +00:00
IPCClientCertsChild.cpp
…
IPCClientCertsChild.h
…
IPCClientCertsParent.cpp
Bug 1722306 - rsclientcerts: remove SlotType distinction r=jschanck
2025-04-16 16:28:00 +00:00
IPCClientCertsParent.h
…
KeychainSecret.cpp
Bug 1922838 - Replace ArrayLength, ArrayEnd and MOZ_ARRAY_LENGTH by standard alternative r=glandium,necko-reviewers,jgilbert,application-update-reviewers,media-playback-reviewers,credential-management-reviewers,anti-tracking-reviewers,places-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,bytesized,janv,dimi,daisuke,karlt,gstoll,canaltinova,timhuang
2024-10-28 08:21:19 +00:00
KeychainSecret.h
…
LibSecret.cpp
Bug 1931419 - use preexisting unique pointer support for GError in LibSecret r=jschanck
2024-11-15 16:39:35 +00:00
LibSecret.h
…
md4.c
…
md4.h
…
metrics.yaml
Bug 1958977 - Extending loading built-ins functionality with loading an external nssckbi from bin if present r=keeler
2025-04-17 14:48:28 +00:00
moz.build
Bug 1954818 - Add intermediate cert used until 2018. r=willdurand,jschanck
2025-03-19 00:32:31 +00:00
nsCertOverrideService.cpp
Bug 1959370 - Add an ability to disable and enable security checks per user context for testing. r=keeler
2025-05-21 08:58:39 +00:00
nsCertOverrideService.h
Bug 1959370 - Add an ability to disable and enable security checks per user context for testing. r=keeler
2025-05-21 08:58:39 +00:00
nsCertTree.cpp
…
nsCertTree.h
…
nsClientAuthRemember.cpp
Bug 1657591 - remember client auth certificate decisions on a per-session basis by default r=jschanck,fluent-reviewers,bolsson
2025-04-02 03:08:40 +00:00
nsClientAuthRemember.h
Bug 1657591 - remember client auth certificate decisions on a per-session basis by default r=jschanck,fluent-reviewers,bolsson
2025-04-02 03:08:40 +00:00
nsICertificateDialogs.idl
…
nsICertOverrideService.idl
Bug 1959370 - Add an ability to disable and enable security checks per user context for testing. r=keeler
2025-05-21 08:58:39 +00:00
nsICertStorage.idl
Bug 1949027 - remove support for legacy CRLite filter format. r=keeler
2025-02-20 06:08:06 +00:00
nsICertTree.idl
…
nsIClientAuthDialogService.idl
Bug 1966033 - pass the list of acceptable issuers through to the android API for client auth certs r=jschanck,geckoview-reviewers,geckoview-api-reviewers,ohall,owlish
2025-05-22 03:08:23 +00:00
nsIClientAuthRememberService.idl
Bug 1657591 - remember client auth certificate decisions on a per-session basis by default r=jschanck,fluent-reviewers,bolsson
2025-04-02 03:08:40 +00:00
nsIContentSignatureVerifier.idl
…
nsICryptoHash.idl
…
nsIDataStorage.idl
Bug 1657591 - nsIDataStorage: support temporary data (again) r=jschanck
2025-04-02 03:08:40 +00:00
nsINSSComponent.idl
…
nsINSSErrorsService.idl
Bug 1950824 - Add nsINSSErrorsService.getErrorName(). r=keeler
2025-03-04 13:45:28 +00:00
nsINSSVersion.idl
…
nsIOSKeyStore.idl
…
nsIOSReauthenticator.idl
…
nsIPK11Token.idl
…
nsIPK11TokenDB.idl
…
nsIPKCS11Module.idl
…
nsIPKCS11ModuleDB.idl
…
nsIPKCS11Slot.idl
…
nsIPublicKeyPinningService.idl
…
nsISecretDecoderRing.idl
…
nsISecurityUITelemetry.idl
…
nsISiteSecurityService.idl
…
nsITLSSocketControl.idl
…
nsITokenPasswordDialogs.idl
…
nsITransportSecurityInfo.idl
…
nsIX509Cert.idl
…
nsIX509CertDB.idl
Bug 1979124 - Remove thirdPartyRoots check in DoHHeuristics a=RyanVM DONTBUILD
2025-08-22 01:36:52 +00:00
nsIX509CertValidity.idl
…
nsNSSCallbacks.cpp
Bug 1958284 - Remove the last leftover call to Telemetry::Accumulate in nsNSSCallbacks.cpp, r=chutten.
2025-04-03 17:51:48 +00:00
nsNSSCallbacks.h
…
nsNSSCertHelper.cpp
Bug 1905453 - collect telemetry on the prevalence of third-party pkcs#11 modules r=jschanck
2024-07-03 23:18:29 +00:00
nsNSSCertHelper.h
Bug 1905453 - collect telemetry on the prevalence of third-party pkcs#11 modules r=jschanck
2024-07-03 23:18:29 +00:00
nsNSSCertificate.cpp
…
nsNSSCertificate.h
Bug 1966547 - Remove unnecessary virtual specifiers. r=nika,necko-reviewers,media-playback-reviewers,permissions-reviewers,timhuang,kershaw,padenot
2025-05-22 05:47:21 +00:00
nsNSSCertificateDB.cpp
Bug 1979124 - Remove thirdPartyRoots check in DoHHeuristics a=RyanVM DONTBUILD
2025-08-22 01:36:52 +00:00
nsNSSCertificateDB.h
Bug 1966547 - Remove unnecessary virtual specifiers. r=nika,necko-reviewers,media-playback-reviewers,permissions-reviewers,timhuang,kershaw,padenot
2025-05-22 05:47:21 +00:00
nsNSSCertTrust.cpp
…
nsNSSCertTrust.h
…
nsNSSComponent.cpp
Bug 1966733 - disable the SSL_DB_LOAD_CERTIFICATE_CHAIN option. r=keeler
2025-05-19 23:34:44 +00:00
nsNSSComponent.h
Bug 1966547 - Remove unnecessary virtual specifiers. r=nika,necko-reviewers,media-playback-reviewers,permissions-reviewers,timhuang,kershaw,padenot
2025-05-22 05:47:21 +00:00
nsNSSHelper.h
…
nsNSSIOLayer.cpp
Bug 1722306 - rsclientcerts: remove SlotType distinction r=jschanck
2025-04-16 16:28:00 +00:00
nsNSSIOLayer.h
Bug 1722306 - rsclientcerts: remove SlotType distinction r=jschanck
2025-04-16 16:28:00 +00:00
nsNSSModule.cpp
…
nsNSSModule.h
…
nsNSSVersion.cpp
…
nsNSSVersion.h
Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw
2025-05-17 19:11:13 +00:00
nsNTLMAuthModule.cpp
Bug 1956726 - Migrate histograms to use Glean APIs in security/manager/ssl/, r=chutten.
2025-04-03 17:30:11 +00:00
nsNTLMAuthModule.h
…
nsPK11TokenDB.cpp
…
nsPK11TokenDB.h
Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw
2025-05-17 19:11:13 +00:00
nsPKCS11Slot.cpp
Bug 1956726 - remove leftover Telemetry.h includes in .cpp files, r=chutten,geckoview-reviewers,cookie-reviewers,win-reviewers,dom-storage-reviewers,gstoll,valentin,m_kato,janv.
2025-04-08 13:03:02 +00:00
nsPKCS11Slot.h
…
nsPKCS12Blob.cpp
Bug 1900619 - Don't use SHA1 for password integrity when creating modern crypto pkcs12 files. r=keeler
2024-09-12 21:09:46 +00:00
nsPKCS12Blob.h
…
nsRandomGenerator.cpp
…
nsRandomGenerator.h
Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw
2025-05-17 19:11:13 +00:00
nsSecureBrowserUI.cpp
…
nsSecureBrowserUI.h
Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw
2025-05-17 19:11:13 +00:00
nsSecurityHeaderParser.cpp
Bug 1891468 - reject HSTS headers where the includeSubdomains directive has an empty value r=jschanck
2024-05-31 20:28:26 +00:00
nsSecurityHeaderParser.h
Bug 1891468 - reject HSTS headers where the includeSubdomains directive has an empty value r=jschanck
2024-05-31 20:28:26 +00:00
NSSErrorsService.cpp
Bug 1965950 - for non-overridable certificate errors, provide the same diagnostic information as for overridable errors r=jschanck,fluent-reviewers,flod
2025-05-21 17:34:15 +00:00
NSSErrorsService.h
Bug 1486551 - turn cert revocation error pages into (non-overridable) certificate error pages r=jschanck,fluent-reviewers,webidl,bolsson,smaug
2025-02-27 22:12:46 +00:00
nsSiteSecurityService.cpp
Bug 1950780 - convert HSTS preload list prefs to static prefs r=nkulatova
2025-03-10 23:34:29 +00:00
nsSiteSecurityService.h
Bug 1950780 - convert HSTS preload list prefs to static prefs r=nkulatova
2025-03-10 23:34:29 +00:00
NSSKeyStore.cpp
…
NSSKeyStore.h
…
nsSSLSocketProvider.cpp
…
nsSSLSocketProvider.h
Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw
2025-05-17 19:11:13 +00:00
NSSSocketControl.cpp
Bug 1945985 - rsclientcerts: only search for new objects when the platform is actually looking for client auth certs r=jschanck
2025-02-18 19:26:59 +00:00
NSSSocketControl.h
Bug 1918484 - replace xyber768d00 with mlkem768x25519 in PSM. r=keeler,necko-reviewers,kershaw
2024-09-13 00:34:44 +00:00
nsSTSPreloadList.inc
No Bug, mozilla-esr140 repo-update HSTS HPKP remote-settings ct-logs - a=pascalc
2025-11-03 15:07:05 +00:00
nsTLSSocketProvider.cpp
…
nsTLSSocketProvider.h
Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw
2025-05-17 19:11:13 +00:00
nsVerificationJob.h
…
OSKeyStore.cpp
Bug 1931419 - prevent concurrent OSKeyStore operations r=jschanck
2024-11-15 16:39:34 +00:00
OSKeyStore.h
Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw
2025-05-17 19:11:13 +00:00
OSReauthenticator.cpp
Bug 1952891: Remove mingw condition to get the password change time r=tjr
2025-03-10 15:52:26 +00:00
OSReauthenticator.h
Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw
2025-05-17 19:11:13 +00:00
OSReauthenticatorDarwin.mm
…
PIPCClientCerts.ipdl
…
PKCS11ModuleDB.cpp
Bug 1879329 - script generated replacement of the GleanMetrics.h includes, r=chutten,valentin,media-playback-reviewers,cookie-reviewers,anti-tracking-reviewers,profiler-reviewers,win-reviewers,rkraesig,emz,aabh,padenot.
2025-01-21 11:21:45 +00:00
PKCS11ModuleDB.h
Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw
2025-05-17 19:11:13 +00:00
PSelectTLSClientAuthCert.ipdl
…
PSMIPCTypes.ipdlh
Bug 1722306 - rsclientcerts: remove SlotType distinction r=jschanck
2025-04-16 16:28:00 +00:00
PSMRunnable.cpp
…
PSMRunnable.h
…
PublicKeyPinningService.cpp
Bug 1956726 - remove leftover Telemetry.h includes in .cpp files, r=chutten,geckoview-reviewers,cookie-reviewers,win-reviewers,dom-storage-reviewers,gstoll,valentin,m_kato,janv.
2025-04-08 13:03:02 +00:00
PublicKeyPinningService.h
…
PublicSSL.h
Bug 1905955 - remove ClearPrivateSSLState() and move its functionality as appropriate r=jschanck,necko-reviewers,kershaw
2024-07-18 00:56:19 +00:00
PVerifySSLServerCert.ipdl
Bug 1900132 - streamline PVerifySSLServerCert protocol r=jschanck
2024-06-05 23:58:02 +00:00
RemoteSecuritySettings.sys.mjs
feat: remotesettings disable, use offline dumps
2025-11-06 14:13:55 +00:00
RootCertificateTelemetryUtils.cpp
Bug 1944631 - Migrate histograms to use Glean APIs for CERT_*, r=chutten.
2025-02-03 19:01:06 +00:00
RootCertificateTelemetryUtils.h
Bug 1944631 - Migrate histograms to use Glean APIs for CERT_*, r=chutten.
2025-02-03 19:01:06 +00:00
RootHashes.inc
Bug 1951349 - land NSS NSS_3_110_BETA1 UPGRADE_NSS_RELEASE, r=keeler
2025-03-21 16:58:33 +00:00
ScopedNSSTypes.h
Bug 1899431 - Use SSL_PeerCertificateChainDER in SSLServerCertVerification. r=keeler
2024-07-18 16:53:57 +00:00
SecretDecoderRing.cpp
…
SecretDecoderRing.h
Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw
2025-05-17 19:11:13 +00:00
SelectTLSClientAuthCertChild.h
…
SelectTLSClientAuthCertParent.h
Bug 1401466 - make the client auth certificate selection dialog tab modal r=jschanck,necko-reviewers,bolsson,kershaw,valentin
2023-08-30 03:05:35 +00:00
SharedCertVerifier.h
Bug 1931437 - a mechanism to selectively skip certificate transparency enforcement r=jschanck,mkaply
2024-11-20 19:57:39 +00:00
SSLServerCertVerification.cpp
Bug 1951494 - ensure socket control is released on the socket thread r=jschanck
2025-03-05 21:26:23 +00:00
SSLServerCertVerification.h
Bug 1915008 - leak mResultTask if dispatch fails in certificate verification r=jschanck
2024-09-09 20:55:21 +00:00
StaticHPKPins.errors
…
StaticHPKPins.h
No Bug, mozilla-esr140 repo-update HSTS HPKP remote-settings ct-logs - a=pascalc
2025-11-03 15:07:05 +00:00
TLSClientAuthCertSelection.cpp
Bug 1966033 - pass the list of acceptable issuers through to the android API for client auth certs r=jschanck,geckoview-reviewers,geckoview-api-reviewers,ohall,owlish
2025-05-22 03:08:23 +00:00
TLSClientAuthCertSelection.h
Bug 1966033 - pass the list of acceptable issuers through to the android API for client auth certs r=jschanck,geckoview-reviewers,geckoview-api-reviewers,ohall,owlish
2025-05-22 03:08:23 +00:00
TransportSecurityInfo.cpp
Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw
2025-05-17 19:11:13 +00:00
TransportSecurityInfo.h
…
VerifySSLServerCertChild.cpp
Bug 1915008 - leak mResultTask if dispatch fails in certificate verification r=jschanck
2024-09-09 20:55:21 +00:00
VerifySSLServerCertChild.h
Bug 1900132 - streamline PVerifySSLServerCert protocol r=jschanck
2024-06-05 23:58:02 +00:00
VerifySSLServerCertParent.cpp
Bug 1915008 - leak mResultTask if dispatch fails in certificate verification r=jschanck
2024-09-09 20:55:21 +00:00
VerifySSLServerCertParent.h
Bug 1900132 - streamline PVerifySSLServerCert protocol r=jschanck
2024-06-05 23:58:02 +00:00
X509.sys.mjs
…
X509CertValidity.cpp
…
X509CertValidity.h
…