tubestation

cert_storage

Revert "Bug 1966632 - bundle cross-signed "SSL.com TLS Transit ECC CA R2" intermediate. r=keeler" for causing bc failures

2025-05-22 10:29:19 +00:00

crashtests

…

crypto_hash

Bug 1894795 - build(rust): upgrade in-tree base64 deps. 0.21.3 → 0.22.1 in-tree r=webdriver-reviewers,necko-reviewers,whimboo,kershaw

2025-03-21 02:58:31 +00:00

data_storage

Bug 1617369 - Reformat recent rust changes with rustfmt r=emilio,webdriver-reviewers,whimboo

2025-05-21 17:36:16 +00:00

ipcclientcerts

Bug 1722306 - rsclientcerts: remove SlotType distinction r=jschanck

2025-04-16 16:28:00 +00:00

osclientcerts

Bug 1964125 - osclientcerts: ensure os-backed resources are dropped before background threads go away r=jschanck

2025-05-05 09:14:20 +00:00

rsclientcerts

Bug 1962280 - osclientcerts: avoid unnecessary background thread dispatches r=jschanck

2025-04-30 01:03:54 +00:00

tests

Bug 1881701 - Change new .eslintrc.mjs files to modules (misc), and export as flat config. r=frontend-codestyle-reviewers,webdriver-reviewers,perftest-reviewers,geckoview-reviewers,devtools-reviewers,sync-reviewers,android-reviewers,mossop,spidermonkey-reviewers,Gijs,ohall,whimboo,nchevobbe,arai,sparky,skhamis,webcompat-reviewers,twisniewski

2025-05-24 17:11:10 +00:00

trust_anchors

Bug 1966632 - bundle cross-signed "SSL.com TLS Transit ECC CA R2" intermediate. r=keeler

2025-05-22 18:22:58 +00:00

addons-public-2018-intermediate.pem

Bug 1954818 - Add intermediate cert used until 2018. r=willdurand,jschanck

2025-03-19 00:32:31 +00:00

addons-public-intermediate.pem

Bug 1914064 - extend AppTrustDomain to support multiple trust anchors r=jschanck,mach-reviewers

2024-09-10 23:14:13 +00:00

addons-public.pem

Bug 1914064 - extend AppTrustDomain to support multiple trust anchors r=jschanck,mach-reviewers

2024-09-10 23:14:13 +00:00

addons-stage-intermediate.pem

Bug 1914064 - extend AppTrustDomain to support multiple trust anchors r=jschanck,mach-reviewers

2024-09-10 23:14:13 +00:00

addons-stage.pem

Bug 1914064 - extend AppTrustDomain to support multiple trust anchors r=jschanck,mach-reviewers

2024-09-10 23:14:13 +00:00

AppSignatureVerification.cpp

Bug 1956726 - Migrate histograms to use Glean APIs in security/manager/ssl/, r=chutten.

2025-04-03 17:30:11 +00:00

AppTrustDomain.cpp

Bug 1922838 - Replace ArrayLength, ArrayEnd and MOZ_ARRAY_LENGTH by standard alternative r=glandium,necko-reviewers,jgilbert,application-update-reviewers,media-playback-reviewers,credential-management-reviewers,anti-tracking-reviewers,places-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,bytesized,janv,dimi,daisuke,karlt,gstoll,canaltinova,timhuang

2024-10-28 08:21:19 +00:00

AppTrustDomain.h

Bug 1914064 - extend AppTrustDomain to support multiple trust anchors r=jschanck,mach-reviewers

2024-09-10 23:14:13 +00:00

CertStorageMemoryReporting.cpp

…

ClientAuthDialogService.sys.mjs

Bug 1966033 - pass the list of acceptable issuers through to the android API for client auth certs r=jschanck,geckoview-reviewers,geckoview-api-reviewers,ohall,owlish

2025-05-22 03:08:23 +00:00

CommonSocketControl.cpp

Bug 1486551 - turn cert revocation error pages into (non-overridable) certificate error pages r=jschanck,fluent-reviewers,webidl,bolsson,smaug

2025-02-27 22:12:46 +00:00

CommonSocketControl.h

Bug 1486551 - turn cert revocation error pages into (non-overridable) certificate error pages r=jschanck,fluent-reviewers,webidl,bolsson,smaug

2025-02-27 22:12:46 +00:00

components.conf

Bug 1953390 - Revert Bug 1910298, r=necko-reviewers,valentin

2025-03-13 15:25:54 +00:00

content-signature-local.pem

Bug 1914064 - extend AppTrustDomain to support multiple trust anchors r=jschanck,mach-reviewers

2024-09-10 23:14:13 +00:00

content-signature-prod.pem

Bug 1914064 - extend AppTrustDomain to support multiple trust anchors r=jschanck,mach-reviewers

2024-09-10 23:14:13 +00:00

content-signature-stage.pem

Bug 1914064 - extend AppTrustDomain to support multiple trust anchors r=jschanck,mach-reviewers

2024-09-10 23:14:13 +00:00

ContentSignatureVerifier.cpp

Bug 1956726 - Migrate histograms to use Glean APIs in security/manager/ssl/, r=chutten.

2025-04-03 17:30:11 +00:00

ContentSignatureVerifier.h

Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw

2025-05-17 19:11:13 +00:00

CredentialManagerSecret.cpp

…

CredentialManagerSecret.h

…

CryptoTask.cpp

…

CryptoTask.h

…

DataStorageManager.cpp

…

DataStorageManager.h

…

DER.sys.mjs

…

EnterpriseRoots.cpp

Bug 1920718 - Annotate all global variable with runtime initialization attributes r=glandium,application-update-reviewers,media-playback-reviewers,anti-tracking-reviewers,places-reviewers,profiler-reviewers,gfx-reviewers,aosmond,lina,nalexander,aabh,geckoview-reviewers,win-reviewers,gstoll,m_kato

2024-10-30 11:05:24 +00:00

EnterpriseRoots.h

…

gen_cert_header.py

Bug 1715287 - [lint] Enable remaining pyupgrade rules and lint tree r=linter-reviewers,webdriver-reviewers,translations-reviewers,whimboo,sylvestre

2025-04-13 17:48:23 +00:00

IPCClientCertsChild.cpp

…

IPCClientCertsChild.h

…

IPCClientCertsParent.cpp

Bug 1722306 - rsclientcerts: remove SlotType distinction r=jschanck

2025-04-16 16:28:00 +00:00

IPCClientCertsParent.h

…

KeychainSecret.cpp

Bug 1922838 - Replace ArrayLength, ArrayEnd and MOZ_ARRAY_LENGTH by standard alternative r=glandium,necko-reviewers,jgilbert,application-update-reviewers,media-playback-reviewers,credential-management-reviewers,anti-tracking-reviewers,places-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,bytesized,janv,dimi,daisuke,karlt,gstoll,canaltinova,timhuang

2024-10-28 08:21:19 +00:00

KeychainSecret.h

…

LibSecret.cpp

Bug 1931419 - use preexisting unique pointer support for GError in LibSecret r=jschanck

2024-11-15 16:39:35 +00:00

LibSecret.h

…

md4.c

…

md4.h

…

metrics.yaml

Bug 1958977 - Extending loading built-ins functionality with loading an external nssckbi from bin if present r=keeler

2025-04-17 14:48:28 +00:00

moz.build

Bug 1954818 - Add intermediate cert used until 2018. r=willdurand,jschanck

2025-03-19 00:32:31 +00:00

nsCertOverrideService.cpp

Bug 1959370 - Add an ability to disable and enable security checks per user context for testing. r=keeler

2025-05-21 08:58:39 +00:00

nsCertOverrideService.h

Bug 1959370 - Add an ability to disable and enable security checks per user context for testing. r=keeler

2025-05-21 08:58:39 +00:00

nsCertTree.cpp

…

nsCertTree.h

…

nsClientAuthRemember.cpp

Bug 1657591 - remember client auth certificate decisions on a per-session basis by default r=jschanck,fluent-reviewers,bolsson

2025-04-02 03:08:40 +00:00

nsClientAuthRemember.h

Bug 1657591 - remember client auth certificate decisions on a per-session basis by default r=jschanck,fluent-reviewers,bolsson

2025-04-02 03:08:40 +00:00

nsICertificateDialogs.idl

…

nsICertOverrideService.idl

Bug 1959370 - Add an ability to disable and enable security checks per user context for testing. r=keeler

2025-05-21 08:58:39 +00:00

nsICertStorage.idl

Bug 1949027 - remove support for legacy CRLite filter format. r=keeler

2025-02-20 06:08:06 +00:00

nsICertTree.idl

…

nsIClientAuthDialogService.idl

Bug 1966033 - pass the list of acceptable issuers through to the android API for client auth certs r=jschanck,geckoview-reviewers,geckoview-api-reviewers,ohall,owlish

2025-05-22 03:08:23 +00:00

nsIClientAuthRememberService.idl

Bug 1657591 - remember client auth certificate decisions on a per-session basis by default r=jschanck,fluent-reviewers,bolsson

2025-04-02 03:08:40 +00:00

nsIContentSignatureVerifier.idl

…

nsICryptoHash.idl

…

nsIDataStorage.idl

Bug 1657591 - nsIDataStorage: support temporary data (again) r=jschanck

2025-04-02 03:08:40 +00:00

nsINSSComponent.idl

…

nsINSSErrorsService.idl

Bug 1950824 - Add nsINSSErrorsService.getErrorName(). r=keeler

2025-03-04 13:45:28 +00:00

nsINSSVersion.idl

…

nsIOSKeyStore.idl

…

nsIOSReauthenticator.idl

…

nsIPK11Token.idl

…

nsIPK11TokenDB.idl

…

nsIPKCS11Module.idl

…

nsIPKCS11ModuleDB.idl

…

nsIPKCS11Slot.idl

…

nsIPublicKeyPinningService.idl

…

nsISecretDecoderRing.idl

…

nsISecurityUITelemetry.idl

…

nsISiteSecurityService.idl

…

nsITLSSocketControl.idl

…

nsITokenPasswordDialogs.idl

…

nsITransportSecurityInfo.idl

…

nsIX509Cert.idl

…

nsIX509CertDB.idl

Bug 1813930 - implement support for client auth certificates on android r=jschanck,geckoview-reviewers,android-reviewers,petru,owlish

2025-03-12 16:16:17 +00:00

nsIX509CertValidity.idl

…

nsNSSCallbacks.cpp

Bug 1958284 - Remove the last leftover call to Telemetry::Accumulate in nsNSSCallbacks.cpp, r=chutten.

2025-04-03 17:51:48 +00:00

nsNSSCallbacks.h

…

nsNSSCertHelper.cpp

Bug 1905453 - collect telemetry on the prevalence of third-party pkcs#11 modules r=jschanck

2024-07-03 23:18:29 +00:00

nsNSSCertHelper.h

Bug 1905453 - collect telemetry on the prevalence of third-party pkcs#11 modules r=jschanck

2024-07-03 23:18:29 +00:00

nsNSSCertificate.cpp

…

nsNSSCertificate.h

Bug 1966547 - Remove unnecessary virtual specifiers. r=nika,necko-reviewers,media-playback-reviewers,permissions-reviewers,timhuang,kershaw,padenot

2025-05-22 05:47:21 +00:00

nsNSSCertificateDB.cpp

Bug 1813930 - implement support for client auth certificates on android r=jschanck,geckoview-reviewers,android-reviewers,petru,owlish

2025-03-12 16:16:17 +00:00

nsNSSCertificateDB.h

Bug 1966547 - Remove unnecessary virtual specifiers. r=nika,necko-reviewers,media-playback-reviewers,permissions-reviewers,timhuang,kershaw,padenot

2025-05-22 05:47:21 +00:00

nsNSSCertTrust.cpp

…

nsNSSCertTrust.h

…

nsNSSComponent.cpp

Bug 1966733 - disable the SSL_DB_LOAD_CERTIFICATE_CHAIN option. r=keeler

2025-05-19 23:34:44 +00:00

nsNSSComponent.h

Bug 1966547 - Remove unnecessary virtual specifiers. r=nika,necko-reviewers,media-playback-reviewers,permissions-reviewers,timhuang,kershaw,padenot

2025-05-22 05:47:21 +00:00

nsNSSHelper.h

…

nsNSSIOLayer.cpp

Bug 1722306 - rsclientcerts: remove SlotType distinction r=jschanck

2025-04-16 16:28:00 +00:00

nsNSSIOLayer.h

Bug 1722306 - rsclientcerts: remove SlotType distinction r=jschanck

2025-04-16 16:28:00 +00:00

nsNSSModule.cpp

…

nsNSSModule.h

…

nsNSSVersion.cpp

…

nsNSSVersion.h

Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw

2025-05-17 19:11:13 +00:00

nsNTLMAuthModule.cpp

Bug 1956726 - Migrate histograms to use Glean APIs in security/manager/ssl/, r=chutten.

2025-04-03 17:30:11 +00:00

nsNTLMAuthModule.h

…

nsPK11TokenDB.cpp

…

nsPK11TokenDB.h

Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw

2025-05-17 19:11:13 +00:00

nsPKCS11Slot.cpp

Bug 1956726 - remove leftover Telemetry.h includes in .cpp files, r=chutten,geckoview-reviewers,cookie-reviewers,win-reviewers,dom-storage-reviewers,gstoll,valentin,m_kato,janv.

2025-04-08 13:03:02 +00:00

nsPKCS11Slot.h

…

nsPKCS12Blob.cpp

Bug 1900619 - Don't use SHA1 for password integrity when creating modern crypto pkcs12 files. r=keeler

2024-09-12 21:09:46 +00:00

nsPKCS12Blob.h

…

nsRandomGenerator.cpp

…

nsRandomGenerator.h

Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw

2025-05-17 19:11:13 +00:00

nsSecureBrowserUI.cpp

…

nsSecureBrowserUI.h

Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw

2025-05-17 19:11:13 +00:00

nsSecurityHeaderParser.cpp

…

nsSecurityHeaderParser.h

…

NSSErrorsService.cpp

Bug 1965950 - for non-overridable certificate errors, provide the same diagnostic information as for overridable errors r=jschanck,fluent-reviewers,flod

2025-05-21 17:34:15 +00:00

NSSErrorsService.h

Bug 1486551 - turn cert revocation error pages into (non-overridable) certificate error pages r=jschanck,fluent-reviewers,webidl,bolsson,smaug

2025-02-27 22:12:46 +00:00

nsSiteSecurityService.cpp

Bug 1950780 - convert HSTS preload list prefs to static prefs r=nkulatova

2025-03-10 23:34:29 +00:00

nsSiteSecurityService.h

Bug 1950780 - convert HSTS preload list prefs to static prefs r=nkulatova

2025-03-10 23:34:29 +00:00

NSSKeyStore.cpp

…

NSSKeyStore.h

…

nsSSLSocketProvider.cpp

…

nsSSLSocketProvider.h

Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw

2025-05-17 19:11:13 +00:00

NSSSocketControl.cpp

Bug 1945985 - rsclientcerts: only search for new objects when the platform is actually looking for client auth certs r=jschanck

2025-02-18 19:26:59 +00:00

NSSSocketControl.h

Bug 1918484 - replace xyber768d00 with mlkem768x25519 in PSM. r=keeler,necko-reviewers,kershaw

2024-09-13 00:34:44 +00:00

nsSTSPreloadList.inc

No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes ct-logs - r=release-managers,dmeehan

2025-05-22 13:04:15 +00:00

nsTLSSocketProvider.cpp

…

nsTLSSocketProvider.h

Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw

2025-05-17 19:11:13 +00:00

nsVerificationJob.h

…

OSKeyStore.cpp

Bug 1931419 - prevent concurrent OSKeyStore operations r=jschanck

2024-11-15 16:39:34 +00:00

OSKeyStore.h

Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw

2025-05-17 19:11:13 +00:00

OSReauthenticator.cpp

Bug 1952891: Remove mingw condition to get the password change time r=tjr

2025-03-10 15:52:26 +00:00

OSReauthenticator.h

Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw

2025-05-17 19:11:13 +00:00

OSReauthenticatorDarwin.mm

…

PIPCClientCerts.ipdl

…

PKCS11ModuleDB.cpp

Bug 1879329 - script generated replacement of the GleanMetrics.h includes, r=chutten,valentin,media-playback-reviewers,cookie-reviewers,anti-tracking-reviewers,profiler-reviewers,win-reviewers,rkraesig,emz,aabh,padenot.

2025-01-21 11:21:45 +00:00

PKCS11ModuleDB.h

Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw

2025-05-17 19:11:13 +00:00

PSelectTLSClientAuthCert.ipdl

…

PSMIPCTypes.ipdlh

Bug 1722306 - rsclientcerts: remove SlotType distinction r=jschanck

2025-04-16 16:28:00 +00:00

PSMRunnable.cpp

…

PSMRunnable.h

…

PublicKeyPinningService.cpp

Bug 1956726 - remove leftover Telemetry.h includes in .cpp files, r=chutten,geckoview-reviewers,cookie-reviewers,win-reviewers,dom-storage-reviewers,gstoll,valentin,m_kato,janv.

2025-04-08 13:03:02 +00:00

PublicKeyPinningService.h

…

PublicSSL.h

Bug 1905955 - remove ClearPrivateSSLState() and move its functionality as appropriate r=jschanck,necko-reviewers,kershaw

2024-07-18 00:56:19 +00:00

PVerifySSLServerCert.ipdl

…

RemoteSecuritySettings.sys.mjs

Bug 1949027 - remove support for legacy CRLite filter format. r=keeler

2025-02-20 06:08:06 +00:00

RootCertificateTelemetryUtils.cpp

Bug 1944631 - Migrate histograms to use Glean APIs for CERT_*, r=chutten.

2025-02-03 19:01:06 +00:00

RootCertificateTelemetryUtils.h

Bug 1944631 - Migrate histograms to use Glean APIs for CERT_*, r=chutten.

2025-02-03 19:01:06 +00:00

RootHashes.inc

Bug 1951349 - land NSS NSS_3_110_BETA1 UPGRADE_NSS_RELEASE, r=keeler

2025-03-21 16:58:33 +00:00

ScopedNSSTypes.h

Bug 1899431 - Use SSL_PeerCertificateChainDER in SSLServerCertVerification. r=keeler

2024-07-18 16:53:57 +00:00

SecretDecoderRing.cpp

…

SecretDecoderRing.h

Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw

2025-05-17 19:11:13 +00:00

SelectTLSClientAuthCertChild.h

…

SelectTLSClientAuthCertParent.h

…

SharedCertVerifier.h

Bug 1931437 - a mechanism to selectively skip certificate transparency enforcement r=jschanck,mkaply

2024-11-20 19:57:39 +00:00

SSLServerCertVerification.cpp

Bug 1951494 - ensure socket control is released on the socket thread r=jschanck

2025-03-05 21:26:23 +00:00

SSLServerCertVerification.h

Bug 1915008 - leak mResultTask if dispatch fails in certificate verification r=jschanck

2024-09-09 20:55:21 +00:00

StaticHPKPins.errors

…

StaticHPKPins.h

No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes ct-logs - r=release-managers,dmeehan

2025-05-22 13:04:15 +00:00

TLSClientAuthCertSelection.cpp

Bug 1966033 - pass the list of acceptable issuers through to the android API for client auth certs r=jschanck,geckoview-reviewers,geckoview-api-reviewers,ohall,owlish

2025-05-22 03:08:23 +00:00

TLSClientAuthCertSelection.h

Bug 1966033 - pass the list of acceptable issuers through to the android API for client auth certs r=jschanck,geckoview-reviewers,geckoview-api-reviewers,ohall,owlish

2025-05-22 03:08:23 +00:00

TransportSecurityInfo.cpp

Bug 1519636 - Reformat recent changes to the Google coding style r=geckoview-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,nalexander,gstoll,tcampbell,janv,julienw

2025-05-17 19:11:13 +00:00

TransportSecurityInfo.h

…

VerifySSLServerCertChild.cpp

Bug 1915008 - leak mResultTask if dispatch fails in certificate verification r=jschanck

2024-09-09 20:55:21 +00:00

VerifySSLServerCertChild.h

…

VerifySSLServerCertParent.cpp

Bug 1915008 - leak mResultTask if dispatch fails in certificate verification r=jschanck

2024-09-09 20:55:21 +00:00

VerifySSLServerCertParent.h

…

X509.sys.mjs

…

X509CertValidity.cpp

…

X509CertValidity.h

…