summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Added tag NSS_3_83_RTM for changeset 25fb4eb2656aNSS_3_83_BRANCHJohn M. Schanck2022-09-150-0/+0
|
* Documentation: Release notes for NSS 3.83NSS_3_83_RTMJohn M. Schanck2022-09-152-8/+96
|
* Set version numbers to 3.83 finalJohn M. Schanck2022-09-153-6/+6
|
* Added tag NSS_3_83_BETA2 for changeset ac770ada01faJohn M. Schanck2022-09-090-0/+0
|
* Backed out changeset ed04d4729b99NSS_3_83_BETA2John M. Schanck2022-09-092-32/+12
|
* Backed out changeset b225a756abc2John M. Schanck2022-09-091-13/+9
|
* Added tag NSS_3_83_BETA1 for changeset 97fec8885336John M. Schanck2022-09-080-0/+0
|
* Set version numbers to 3.83 betaNSS_3_83_BETA1John M. Schanck2022-09-083-6/+6
|
* Bug 1789886 - resource leak in NSC_OpenSession. r=bbeurdoucheJohn M. Schanck2022-09-081-9/+13
| | | | Differential Revision: https://phabricator.services.mozilla.com/D156875
* Bug 1788875 - Remove set-but-unused variables from ↵John M. Schanck2022-09-081-14/+2
| | | | | | SEC_PKCS12DecoderValidateBags. r=nss-reviewers,bbeurdouche Differential Revision: https://phabricator.services.mozilla.com/D156731
* Bug 1563221 remove older oses that are unused part3/ BeOS ↵Ludovic Hirlimann2022-09-0723-152/+31
| | | | | | | | r=nss-reviewers,djackson Depends on D36757 Differential Revision: https://phabricator.services.mozilla.com/D37215
* Bug 1563221 remove older unix support in NSS part 3 Irix ↵Ludovic Hirlimann2022-09-0712-213/+2
| | | | | | | | r=nss-reviewers,djackson Depends on D36756 Differential Revision: https://phabricator.services.mozilla.com/D36757
* Bug 1563221 remove support for older unix in NSS part 2 DGUX ↵Ludovic Hirlimann2022-09-071-1/+1
| | | | | | | | r=nss-reviewers,djackson Depends on D36755 Differential Revision: https://phabricator.services.mozilla.com/D36756
* Bug 1563221 remove support for older unix in NSS part 1 OSF ↵Ludovic Hirlimann2022-09-0722-284/+3
| | | | | | r=nss-reviewers,djackson Differential Revision: https://phabricator.services.mozilla.com/D36755
* Bug 1778413 - Set nssckbi version number to 2.58. r=nss-reviewers,bbeurdoucheJohn M. Schanck2022-09-071-2/+2
| | | | | | Depends on D156583 Differential Revision: https://phabricator.services.mozilla.com/D156616
* Bug 1785297 - Add two SECOM root certificates to NSS. r=KathleenWilsonJohn M. Schanck2022-09-071-0/+284
| | | | | | Depends on D156582 Differential Revision: https://phabricator.services.mozilla.com/D156583
* Bug 1787075 - Add two DigitalSign root certificates to NSS. r=KathleenWilsonJohn M. Schanck2022-09-071-0/+297
| | | | | | Depends on D156581 Differential Revision: https://phabricator.services.mozilla.com/D156582
* Bug 1778412 - Remove Camerfirma Global Chambersign Root from NSS. ↵John M. Schanck2022-09-071-164/+0
| | | | | | r=KathleenWilson Differential Revision: https://phabricator.services.mozilla.com/D156581
* Bug 1767921 - check SFTKSlot head after acquiring session lock. r=rrelyeaJohn M. Schanck2022-09-062-12/+32
| | | | Differential Revision: https://phabricator.services.mozilla.com/D147992
* Dummy change, trigger a build to test latest NSPR commits.Kai Engert2022-08-301-1/+0
|
* Bug 1771100 - Added bug reference and description to disabled ↵Leander Schwarz2022-08-261-1/+1
| | | | | | *UnsolicitedServerNameAck bogo ECH test. r=djackson Differential Revision: https://phabricator.services.mozilla.com/D152739
* Bug 1779361 - Removed skipping of ECH on equality of private and public SNI ↵Leander Schwarz2022-08-262-6/+1
| | | | | | server name. r=djackson Differential Revision: https://phabricator.services.mozilla.com/D151696
* Bug 1779357 - Added comment and bug reference to *ECH*RandomHRRExtension ↵Leander Schwarz2022-08-261-1/+1
| | | | | | bogo test. r=djackson Differential Revision: https://phabricator.services.mozilla.com/D151695
* Bug 1779370 - Added Bogo shim client HRR test support. Fixed overwriting of ↵Leander Schwarz2022-08-263-2/+19
| | | | | | CHInner.random on HRR. r=djackson Differential Revision: https://phabricator.services.mozilla.com/D151692
* Bug 1779234 - Added check for server only sending ECH extension with retry ↵Leander Schwarz2022-08-264-9/+41
| | | | | | | | | | | | configs in EncryptedExtensions and if not accepting ECH. Changed config setting behavior to skip configs with unsupported mandatory extensions instead of failing. r=djackson The following bogo tests test the changed behavior: - TLS-ECH-GREASE-Client-TLS12-RejectRetryConfigs - TLS-ECH-Client-TLS12-RejectRetryConfigs - This and above test, test correct rejection of TLS 1.2 server ECH extension with rettry configs (outside EncryptedExtensions) - TLS-ECH-Client-Accept-RejectRetryConfigs - Test correct rejection of retry configs received even though ECH was acceped by server. - TLS-ECH-Client-SelectECHConfig - Tests correct skipping of unsupported (mandatory extension) configs. Differential Revision: https://phabricator.services.mozilla.com/D151607
* Bug 1771100 - Added ECH client support to BoGo shim. Changed CHInner ↵Leander Schwarz2022-08-264-13/+64
| | | | | | creation to skip TLS 1.2 only extensions to comply with BoGo. r=djackson Differential Revision: https://phabricator.services.mozilla.com/D151489
* Bug 1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH server ↵Leander Schwarz2022-08-2610-34/+96
| | | | | | accept_confirmation bugs. r=djackson Differential Revision: https://phabricator.services.mozilla.com/D153479
* Bug 1771100 - Update BoGo tests to recent BoringSSL version. r=djacksonLeander Schwarz2022-08-264-81/+112
| | | | | | | | | | It was required to update docker-interop image to ubuntu 20.04 since a newer Go release was required for the BoGo tests to run. See nss/gtests/nss_bogo_shim/config.json for a list of disabled BoGo test, including short descriptions/bug links. A -loose-local-errors falg was added to Bogo (runner.go) to allow usage of more tests by ignoring differences in local errors on the Go side of test connections, similar to the remote error 'suppression' used. The code is patched to the BoGo runner after cloning in nss/tests/bogo/bogo.sh and can be found in nss/gtests/nss_bogo_shim/nss_loose_local_errors.patch. Differential Revision: https://phabricator.services.mozilla.com/D147675
* Bug 1785846 - Bump minimum NSPR version to 4.34.1. r=nss-reviewers,bbeurdoucheRyan VanderMeulen2022-08-181-1/+1
| | | | Differential Revision: https://phabricator.services.mozilla.com/D154994
* Update documentation to mention NSS ESR 3.71.1Anna Weine2022-08-181-2/+3
|
* Documentation: Release notes for NSS 3.79.1Anna Weine2022-08-181-0/+62
|
* Set version numbers to 3.83 BetaAnna Weine2022-08-182-7/+1
|
* Documentation: release notes for NSS 3.82Anna Weine2022-08-182-9/+70
|
* Bug 1330271 - check for null template in sec_asn1{d,e}_push_state. ↵NSS_3_82_BETA1John M. Schanck2022-08-182-1/+10
| | | | | | | | | | r=nss-reviewers,djackson Some of our dynamic template choosers, e.g. sec_pkcs12_choose_attr_type, can return NULL. This patch adds some defensive checks to avoid crashes when they do. Differential Revision: https://phabricator.services.mozilla.com/D150290
* Bug 1735925 - QuickDER: Forbid NULL tags with non-zero length. ↵John M. Schanck2022-08-181-0/+5
| | | | | | r=nss-reviewers,djackson Differential Revision: https://phabricator.services.mozilla.com/D148413
* Bug 1784724 - Initialize local variables in ↵Mike Hommey2022-08-151-3/+3
| | | | | | TlsConnectTestBase::ConnectAndCheckCipherSuite. r=bbeurdouche,nss-reviewers Differential Revision: https://phabricator.services.mozilla.com/D154594
* Bug 1784191 - Cast the result of GetProcAddress. r=bbeurdouche,nss-reviewersMike Hommey2022-08-121-1/+1
| | | | | | | | | | clang trunk recently added a check for incompatible function pointers, and now is not happy with a FARPROC being given as a PRThreadPrivateDTOR, because that's not the same signature. But FARPROC is the "normal" return type from GetProcAddress, but OTOH, it's not the actual type signature for PR_Free. Differential Revision: https://phabricator.services.mozilla.com/D154337
* Dummy change, trigger a build to test latest NSPR commits.Kai Engert2022-08-041-0/+1
|
* Bug 1681099, pk11wrap: Tighten certificate lookup based on PKCS #11 URI, ↵Daiki Ueno2022-07-267-60/+353
| | | | | | | | | | r=kjacobs,rrelyea Previously we only used the "object" attribute (mapped to CKA_LABEL) to find certificates by PKCS #11 URI. This updates the logic to match also with "id" (mapped to CKA_ID) and reject the request if a "type" attribute is present with the value other than "cert". Note: as "id" may not be null-terminated, the PKCS #11 URI API had to be revamped to allow binary blobs. This is still not perfect because PK11URIAttribute doesn't have a length field of value. Differential Revision: https://phabricator.services.mozilla.com/D98940
* Set version numbers to 3.82 betaDennis Jackson2022-07-214-7/+7
|
* Documentation: release notes for NSS 3.81Dennis Jackson2022-07-212-21/+69
|
* Bug 1777672 - Gracefully handle null nickname in ↵NSS_3_81_BETA1Kai Engert2022-07-181-4/+8
| | | | | | CERT_GetCertNicknameWithValidity. r=rrelyea Differential Revision: https://phabricator.services.mozilla.com/D150857
* Bug 1779285: Add no_application_protocol alert handler and test client error ↵Dennis Jackson2022-07-132-0/+4
| | | | | | code is set. r=mt,nss-reviewers. Differential Revision: https://phabricator.services.mozilla.com/D151645
* Bug 1775359 - make NSS_SecureMemcmp 0/1 valued. r=nss-reviewers,mtJohn M. Schanck2022-07-111-10/+13
| | | | Differential Revision: https://phabricator.services.mozilla.com/D149931
* Bug 1762831: Enable aarch64 hardware crypto support on OpenBSD. ↵Christian Weisgerber2022-06-301-0/+16
| | | | | | | | r=nss-reviewers,bbeurdouche Submitted on behalf of Landry Breuil & Christian Weisgerber. Differential Revision: https://phabricator.services.mozilla.com/D150752
* Set version numbers to 3.81 BetaJohn M. Schanck2022-06-235-12/+7
|
* Documentation: release notes for NSS 3.80John M. Schanck2022-06-232-18/+98
|
* Add libssl3 abi-check exception for SSL_ClientCertCallbackCompleteJohn M. Schanck2022-06-221-0/+5
|
* Bug 1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h. r=djacksonJohn M. Schanck2022-06-211-1/+1
| | | | Differential Revision: https://phabricator.services.mozilla.com/D149592
* Set version numbers to 3.80 BetaNSS_3_80_BETA1Dennis Jackson2022-06-165-14/+6
|
View Lorry Controller Status