summaryrefslogtreecommitdiff
path: root/lib/ckfw
Commit message (Collapse)AuthorAgeFilesLines
* Bug 1822921 - Add BJCA Global Root CA1 and CA2 root certificates ↵Dennis Jackson2023-05-051-0/+283
| | | | | | r=nss-reviewers,jschanck Differential Revision: https://phabricator.services.mozilla.com/D177241
* Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and ↵John M. Schanck2022-11-301-6/+25
| | | | | | CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates. r=KathleenWilson Differential Revision: https://phabricator.services.mozilla.com/D163527
* Bug 1794506 - Set nssckbi version number to 2.60. r=nss-reviewers,bbeurdoucheJohn M. Schanck2022-11-291-2/+2
| | | | | | Depends on D162769 Differential Revision: https://phabricator.services.mozilla.com/D162770
* Bug 1799038 - Remove Staat der Nederlanden EV Root CA from NSS. r=KathleenWilsonJohn M. Schanck2022-11-291-166/+0
| | | | | | Depends on D162768 Differential Revision: https://phabricator.services.mozilla.com/D162769
* Bug 1797559 - Remove EC-ACC root cert from NSS. r=KathleenWilsonJohn M. Schanck2022-11-291-202/+0
| | | | | | Depends on D162767 Differential Revision: https://phabricator.services.mozilla.com/D162768
* Bug 1794507 - Remove SwissSign Platinum CA - G2 from NSS. r=KathleenWilsonJohn M. Schanck2022-11-291-168/+0
| | | | | | Depends on D162766 Differential Revision: https://phabricator.services.mozilla.com/D162767
* Bug 1794495 - Remove Network Solutions Certificate Authority. r=KathleenWilsonJohn M. Schanck2022-11-291-146/+0
| | | | Differential Revision: https://phabricator.services.mozilla.com/D162766
* Bug 1796281 - Followup: add missing stdint.h include. r=nss-reviewers,mtMike Hommey2022-10-201-0/+2
| | | | Differential Revision: https://phabricator.services.mozilla.com/D159800
* Bug 1796281 - Fix -Wint-to-void-pointer-cast warnings. r=nss-reviewers,jschanckMike Hommey2022-10-191-11/+11
| | | | Differential Revision: https://phabricator.services.mozilla.com/D159772
* Bug 1795241 - Fix unreachable-code warnings. r=nss-reviewers,jschanckMike Hommey2022-10-191-2/+3
| | | | Differential Revision: https://phabricator.services.mozilla.com/D159371
* Bug 1792821 - Updating the clang-format version to 10. r=jschanckAnna Weine2022-10-072-3/+2
| | | | Differential Revision: https://phabricator.services.mozilla.com/D158323
* Bug 1778413 - Set nssckbi version number to 2.58. r=nss-reviewers,bbeurdoucheJohn M. Schanck2022-09-071-2/+2
| | | | | | Depends on D156583 Differential Revision: https://phabricator.services.mozilla.com/D156616
* Bug 1785297 - Add two SECOM root certificates to NSS. r=KathleenWilsonJohn M. Schanck2022-09-071-0/+284
| | | | | | Depends on D156582 Differential Revision: https://phabricator.services.mozilla.com/D156583
* Bug 1787075 - Add two DigitalSign root certificates to NSS. r=KathleenWilsonJohn M. Schanck2022-09-071-0/+297
| | | | | | Depends on D156581 Differential Revision: https://phabricator.services.mozilla.com/D156582
* Bug 1778412 - Remove Camerfirma Global Chambersign Root from NSS. ↵John M. Schanck2022-09-071-164/+0
| | | | | | r=KathleenWilson Differential Revision: https://phabricator.services.mozilla.com/D156581
* Bug 1764206 - Bump nssckbi version number for June. r=nss-reviewers,jschanckDennis Jackson2022-06-101-2/+2
| | | | | | Depends on D148829 Differential Revision: https://phabricator.services.mozilla.com/D148830
* Bug 1759815 - Remove Hellenic Academic 2011 Root. r=nss-reviewers,jschanckDennis Jackson2022-06-101-158/+0
| | | | | | Depends on D148828 Differential Revision: https://phabricator.services.mozilla.com/D148829
* Bug 1770267 - Add E-Tugra Roots. r=nss-reviewers,jschanckDennis Jackson2022-06-101-0/+317
| | | | | | Depends on D148827 Differential Revision: https://phabricator.services.mozilla.com/D148828
* Bug 1768970 - Add Certainly Roots. r=nss-reviewers,jschanckDennis Jackson2022-06-101-0/+265
| | | | | | Depends on D148824 Differential Revision: https://phabricator.services.mozilla.com/D148827
* Bug 1764392 - Add DigitCert Roots r=nss-reviewers,jschanckDennis Jackson2022-06-101-0/+556
| | | | Differential Revision: https://phabricator.services.mozilla.com/D148824
* Bug 1766978 - improve error handling after ↵NSS_3_79_BETA1John M. Schanck2022-05-191-5/+11
| | | | | | nssCKFWInstance_CreateObjectHandle. r=djackson Differential Revision: https://phabricator.services.mozilla.com/D146765
* Bug 1754890 - Add two D-TRUST 2020 root certificates. r=KathleenWilsonNSS_3_77_BETA1John M. Schanck2022-03-241-0/+246
| | | | | | Depends on D141920 Differential Revision: https://phabricator.services.mozilla.com/D141921
* Bug 1751298 - Add Telia Root CA v2 root certificate. r=KathleenWilsonJohn M. Schanck2022-03-241-0/+165
| | | | | | Depends on D141919 Differential Revision: https://phabricator.services.mozilla.com/D141920
* Bug 1751305 - Remove expired explicitly distrusted certificates from ↵John M. Schanck2022-03-241-311/+0
| | | | | | certdata.txt. r=KathleenWilson Differential Revision: https://phabricator.services.mozilla.com/D141919
* Bug 1679803 - Add SHA256 fingerprint comments to old certdata.txt entries. ↵John M. Schanck2022-02-081-181/+181
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | r=nss-reviewers,bbeurdouche The new SHA256 hashes were calculated using the script below, which reads certificates out of the builtin token and re-processing them with the current version of addbuiltin. One of the "Autoridad de Certificacion Firmaprofesional CIF A62634068" certificates had to be handled manually because of Bug 456858. ``` #!/bin/bash NSS_LIB=<path to dist/Debug/lib> WORK=/tmp/nssdb/ LIST=${WORK}/list.txt OUT=${WORK}/certdata.txt rm -rf ${WORK} mkdir -p ${WORK} modutil -force -dbdir "sql:${WORK}" -create modutil -force -dbdir "sql:${WORK}" -add "nssckbi" -libfile "${NSS_LIB}/libnssckbi.so" certutil -d "sql:${WORK}" -L -h "Builtin Object Token" | grep Builtin > ${LIST} sed -i 's/\s*\(C\?,C\?,C\?\)\s*$/;\1/' ${LIST} while IFS=";" read -r name trust do certutil -d "sql:${WORK}" -L -n "${name}" -r 1> "${WORK}/${name}.der" addbuiltin -t "${trust}" -n "${name/Builtin Object Token:/}" -i "${WORK}/${name}.der" done < ${LIST} >> ${OUT} ``` Differential Revision: https://phabricator.services.mozilla.com/D136508
* Bug 1321398 - Allow to override python for the build. r=bbeurdoucheMike Hommey2022-01-042-2/+2
| | | | Differential Revision: https://phabricator.services.mozilla.com/D134739
* Bug 1733003 - Set nssckbi version number to 2.54. r=bbeurdoucheJohn M. Schanck2021-12-131-2/+2
| | | | | | Depends on D132823 Differential Revision: https://phabricator.services.mozilla.com/D132824
* Bug 1735407 - Replace Google Trust Services LLC (GTS) R4 root certificate in ↵John M. Schanck2021-12-131-110/+108
| | | | | | | | NSS. r=KathleenWilson Depends on D132822 Differential Revision: https://phabricator.services.mozilla.com/D132823
* Bug 1735407 - Replace Google Trust Services LLC (GTS) R3 root certificate in ↵John M. Schanck2021-12-131-110/+108
| | | | | | | | NSS. r=KathleenWilson Depends on D132821 Differential Revision: https://phabricator.services.mozilla.com/D132822
* Bug 1735407 - Replace Google Trust Services LLC (GTS) R2 root certificate in ↵John M. Schanck2021-12-131-163/+161
| | | | | | | | NSS. r=KathleenWilson Depends on D132820 Differential Revision: https://phabricator.services.mozilla.com/D132821
* Bug 1735407 - Replace Google Trust Services LLC (GTS) R1 root certificate in ↵John M. Schanck2021-12-131-163/+161
| | | | | | | | NSS. r=KathleenWilson Depends on D132819 Differential Revision: https://phabricator.services.mozilla.com/D132820
* Bug 1735407 - Replace GlobalSign ECC Root CA R4 in NSS. r=KathleenWilsonJohn M. Schanck2021-12-131-111/+108
| | | | | | Depends on D132805 Differential Revision: https://phabricator.services.mozilla.com/D132819
* Bug 1733560 - Remove Expired Root Certificates from NSS - DST Root CA X3. ↵John M. Schanck2021-12-131-130/+0
| | | | | | | | r=KathleenWilson Depends on D132806 Differential Revision: https://phabricator.services.mozilla.com/D132805
* Bug 1740807 - Remove Expiring Cybertrust Global Root and GlobalSign root ↵John M. Schanck2021-12-131-266/+0
| | | | | | | | certificates from NSS. r=KathleenWilson Depends on D132761 Differential Revision: https://phabricator.services.mozilla.com/D132806
* Bug 1741930 - Add renewed Autoridad de Certificacion Firmaprofesional CIF ↵John M. Schanck2021-12-131-0/+176
| | | | | | | | A62634068 root certificate to NSS. r=KathleenWilson Depends on D132756 Differential Revision: https://phabricator.services.mozilla.com/D132761
* Bug 1740095 - Add iTrusChina ECC root certificate to NSS. r=KathleenWilsonJohn M. Schanck2021-12-131-0/+111
| | | | | | Depends on D132755 Differential Revision: https://phabricator.services.mozilla.com/D132756
* Bug 1740095 - Add iTrusChina RSA root certificate to NSS. r=KathleenWilsonJohn M. Schanck2021-12-131-0/+163
| | | | | | Depends on D132752 Differential Revision: https://phabricator.services.mozilla.com/D132755
* Bug 1738805 - Add ISRG Root X2 root certificate to NSS. r=KathleenWilsonJohn M. Schanck2021-12-131-0/+114
| | | | | | Depends on D132754 Differential Revision: https://phabricator.services.mozilla.com/D132752
* Bug 1733012 - Add Chunghwa Telecom's HiPKI Root CA - G1 root certificate to ↵John M. Schanck2021-12-131-0/+167
| | | | | | NSS. r=KathleenWilson Differential Revision: https://phabricator.services.mozilla.com/D132754
* Bug 1717716 - Set nssckbi version number to 2.52. r=rrelyeaNSS_3_71_BETA1Benjamin Beurdouche2021-09-161-2/+2
|
* Bug 1717707 - Add HARICA Client ECC Root CA 2021. r=KathleenWilsonBenjamin Beurdouche2021-09-071-0/+124
| | | | | | Depends on D124568 Differential Revision: https://phabricator.services.mozilla.com/D124569
* Bug 1717707 - Add HARICA Client RSA Root CA 2021. r=KathleenWilsonBenjamin Beurdouche2021-09-071-0/+177
| | | | | | Depends on D124567 Differential Revision: https://phabricator.services.mozilla.com/D124568
* Bug 1717707 - Add HARICA TLS ECC Root CA 2021. r=KathleenWilsonBenjamin Beurdouche2021-09-071-0/+121
| | | | | | Depends on D124566 Differential Revision: https://phabricator.services.mozilla.com/D124567
* Bug 1717707 - Add HARICA TLS RSA Root CA 2021. r=KathleenWilsonBenjamin Beurdouche2021-09-071-0/+174
| | | | | | Depends on D124565 Differential Revision: https://phabricator.services.mozilla.com/D124566
* Bug 1728394 - Add TunTrust Root CA certificate to NSS. r=KathleenWilsonBenjamin Beurdouche2021-09-071-0/+175
| | | | Differential Revision: https://phabricator.services.mozilla.com/D124565
* Bug 1715720 - Fix nssckbi version number in NSS 3.67 (was supposed to be ↵Benjamin Beurdouche2021-06-101-2/+2
| | | | | | incremented in 3.66). r=beurdouche Differential Revision: https://phabricator.services.mozilla.com/D117400
* Bug 1710716 - Remove Expired Sonera Class2 CA from NSS. r=bwilsonNSS_3_66_BETA1Benjamin Beurdouche2021-05-251-123/+0
| | | | | | Depends on D115882 Differential Revision: https://phabricator.services.mozilla.com/D115883
* Bug 1710716 - Remove Expired Root Certificates from NSS - QuoVadis Root ↵Benjamin Beurdouche2021-05-251-181/+0
| | | | | | | | Certification Authority. r=bwilson Depends on D115877 Differential Revision: https://phabricator.services.mozilla.com/D115882
* Bug 1708307 - Remove Trustis FPS Root CA from NSS. r=bwilsonBenjamin Beurdouche2021-05-251-134/+0
| | | | Differential Revision: https://phabricator.services.mozilla.com/D115877
* Bug 1707097 - Add Certum Trusted Root CA to NSS. r=bwilsonBenjamin Beurdouche2021-05-251-0/+179
| | | | | | Depends on D115890 Differential Revision: https://phabricator.services.mozilla.com/D115891