e73e687b18
- make TLS intolerant server detection over proxies work (this bug 87902) - on connection failure, only retry without TLS when it is really likely to help (bug 149910) - remove obsolete workarounds in SSL i/o layer (see removed comments in patch) - avoid to confuse programmers reading code, by renaming TLSStepUp (which means something else) to the correct term STARTTLS (what the code is actually doing). (As suggested by nelsonb) - If an invalid or expired etc. server certificate is presented, a warning is shown. If the user decides to cancel, network activity should stop immediately. (we currently warn multiple times) (bug 87209) r=javi/darin/ducarroz/dmose sr=alecf
42 lines
1.5 KiB
Plaintext
42 lines
1.5 KiB
Plaintext
/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*-
|
|
*
|
|
* The contents of this file are subject to the Mozilla Public
|
|
* License Version 1.1 (the "License"); you may not use this file
|
|
* except in compliance with the License. You may obtain a copy of
|
|
* the License at http://www.mozilla.org/MPL/
|
|
*
|
|
* Software distributed under the License is distributed on an "AS
|
|
* IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
|
|
* implied. See the License for the specific language governing
|
|
* rights and limitations under the License.
|
|
*
|
|
* The Original Code is mozilla.org code.
|
|
*
|
|
* The Initial Developer of the Original Code is Netscape
|
|
* Communications Corporation. Portions created by Netscape are
|
|
* Copyright (C) 1998 Netscape Communications Corporation. All
|
|
* Rights Reserved.
|
|
*
|
|
* Contributor(s):
|
|
* Hubbie Shaw
|
|
* Doug Turner <dougt@netscape.com>
|
|
*/
|
|
|
|
#include "nsISocketProvider.idl"
|
|
|
|
[noscript, uuid(856a93d0-5415-11d3-bbc8-0000861d1237)]
|
|
interface nsISSLSocketProvider : nsISocketProvider {
|
|
};
|
|
|
|
%{C++
|
|
#define NS_ISSLSOCKETPROVIDER_CONTRACTID NS_NETWORK_SOCKET_CONTRACTID_PREFIX "ssl"
|
|
#define NS_ISSLSOCKETPROVIDER_CLASSNAME "Mozilla SSL Socket Provider Component"
|
|
|
|
/* This code produces a normal socket which can be used to initiate the STARTTLS protocol
|
|
* by calling its nsISSLSocketControl->StartTLS()
|
|
*/
|
|
#define NS_STARTTLSSOCKETPROVIDER_CONTRACTID NS_NETWORK_SOCKET_CONTRACTID_PREFIX "starttls"
|
|
#define NS_STARTTLSSOCKETPROVIDER_CLASSNAME "Mozilla STARTTLS Capable Socket Provider Component"
|
|
|
|
%}
|