summaryrefslogtreecommitdiff
path: root/nss.gyp
Commit message (Collapse)AuthorAgeFilesLines
* Sigh, even when I explicitly push to nss-try, it's pushing to nss!Robert Relyea2023-02-271-1/+0
|
* Add liboqsRobert Relyea2023-02-271-0/+1
|
* This change was supposed to be pushed to nss-try,Robert Relyea2023-02-271-1/+0
| | | | but something went out of wack. Back this change out of the tip
* Add liboqsRobert Relyea2023-02-271-0/+1
|
* Bug 1796504 - Skip building modutil and shlibsign when building in Firefox. ↵Mike Hommey2022-10-201-2/+2
| | | | | | | | | | r=nss-reviewers,mt shlibsign hasn't been used since bug 1620158. I'm not sure modutil was ever actually used, but it was related included in relation to the .chk signatures too, which we don't produce anymore. Differential Revision: https://phabricator.services.mozilla.com/D159827
* Bug 1792103 - Add a flag to disable building libnssckbi. r=djacksonNSS_3_84_BETA1John M. Schanck2022-10-051-1/+5
| | | | Differential Revision: https://phabricator.services.mozilla.com/D157990
* Bug 1396616 - Update nssUTF8_Length to RFC 3629 and fix buffer overrun. ↵Masatoshi Kimura2022-03-221-0/+1
| | | | | | r=nss-reviewers,jschanck Differential Revision: https://phabricator.services.mozilla.com/D139790
* Bug 1729550 NSS needs FiPS 140-3 version indicators.NSS_3_73_BETA1Robert Relyea2021-09-071-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 1. This patch adds a new command, validation, which dumps the validation objects ina given token. It defaults to the softoken. 2. It sets up the infrastructure to allow creation at init time of token specific objects (like validation objects and profile objects) by: 2a. factoring out the code to get the next available object handle to a new function call sftk_getNextHandle(). 2b. The object freelists are now initialized before SFTK_SlotInit, so that SFTK_SlotInit can initialize these new token objects. 2c. A new staticly defined session is created to hand these object on. 2c1. sftk_NewSession and sftk_FreeSession has the initialization and clearing functions factored out from the actual space freeing clearing so they can be used on this staticly allocated session. (NOTE: NSS has two ways it handles this internally: use of Init/New Clear/Free functions as in this patch, or the use of a bool called 'FreeIt' added to the original function. There is no technical reason for why I used Init/New other than I didn't have to go change all the places the currently call them. These are internal private functions, so it's ok to change their signatures. 2c2. The static sessions are initialized on freed when the slot is created and destroyed. 3. For fips slot the validation object is created. The version number is selected at compile time with a build time environment variable. If no version number is provided, a default version number (related to the NSS version) is selected as well as the string 'unvalidated'. 4. The NSS spefic defines for Validation objects are defined in the NSS vendor space (until PKCS #11 v3.2 comes out with the official values). Differential Revision: https://phabricator.services.mozilla.com/D124951
* Bug 1709750 - Read HPKE vectors from official JSON, r=djacksonMartin Thomson2021-08-101-2/+0
| | | | | | Added check for required fields Differential Revision: https://phabricator.services.mozilla.com/D119046
* Bug 1720232 SQLite calls could timeout in starvation situations.Robert Relyea2021-07-151-0/+1
| | | | | | | | Some of our servers could cause random failures when trying to generate many key pairs from multiple threads. This is caused because some threads would starve long enough for them to give up on getting a begin transaction on sqlite. sqlite only allows one transaction at a time. Also, there were some bugs in error handling of the broken transaction case where NSS would try to cancel a transation after the begin failed (most cases were correct, but one case in particular was problematic). Differential Revision: https://phabricator.services.mozilla.com/D120032
* Bug 1678384 - Add a build flag to allow building nssckbi-testlib in m-c ↵Benjamin Beurdouche2020-11-301-0/+11
| | | | | | r=kjacobs Differential Revision: https://phabricator.services.mozilla.com/D98154
* Bug 1577803, gtests: import pkcs11testmodule from Firefox, r=rrelyeaDaiki Ueno2019-11-051-0/+1
| | | | | | | | | | | | | | | | Summary: This adds a mock PKCS #11 module from Firefox and add basic tests around it. This is needed for proper testing of PKCS #11 v3.0 profile objects (D45669). Reviewers: rrelyea Reviewed By: rrelyea Subscribers: reviewbot Bug #: 1577803 Differential Revision: https://phabricator.services.mozilla.com/D47060
* Bug 1465613 - Created two new fields for scheduled distrust from builtins ↵Marcus Burghardt2019-10-111-0/+1
| | | | | | | | | and updated support commands. r=jcj,kjacobs,mt Added two new fields do scheduled distrust of CAs in nssckbi/builtins. Also, created a testlib to validate these fields with gtests. Differential Revision: https://phabricator.services.mozilla.com/D36597
* Bug 1577359 - Build atob and btoa for Thunderbird. r=jcjKai Engert2019-09-111-0/+2
|
* Bug 1550708 - NSS gyp build system should produce libfreebl_64fpu_3.so for ↵Petr Sumbera2019-06-051-1/+10
| | | | | | Solaris SPARC r=jcj Differential Revision: https://phabricator.services.mozilla.com/D30628
* Bug 1548179 - Remove --test (test_build) option from build.sh (replaced by ↵Kevin Jacobs2019-05-151-6/+1
| | | | | | --static), remove Test builds from taskcluster since we exercise pk11_gtest and mpi_gtests in non-static builds already. r=mt,jcj Differential Revision: https://phabricator.services.mozilla.com/D30998
* Bug 1549608 - Do not sign dbm3 lib if DBM is disabled. r=jcjNSS_3_44_BETA2Edouard Oger2019-05-071-0/+4
| | | | Differential Revision: https://phabricator.services.mozilla.com/D30138
* Bug 1548398 - Add freebl_gtest to nss.gyp, fix freebl_gtest ↵NSS_3_44_BETA1Kevin Jacobs2019-05-031-0/+1
| | | | | | | | | | cross-compilation and gcc-4.8 support. r=jcj Updated gyp files to add -msse2 GCC option, iff the compiler is gcc and target is x64 or ia32. Root cause for the 4.8 failure is a gcc bug where the "#pragma GCC target("sse2")" option used in gcm.h doesn't work when compiling C++ code, as the gtests do. Differential Revision: https://phabricator.services.mozilla.com/D29886
* Backed out changeset 5059d47bd423 (bug 1548398) for GCC 4.8 failures in gcm.hJ.C. Jones2019-05-021-1/+0
|
* Bug 1548398 - Add freebl_gtest to nss.gyp, fix freebl_gtest ↵Kevin Jacobs2019-05-021-0/+1
| | | | | | cross-compilation. r=jcj Differential Revision: https://phabricator.services.mozilla.com/D29581
* Bug 1529308, amend earlier commit 68578ca0ba17f205e4f92512157368eaf1694eb3, ↵Kai Engert2019-03-141-2/+0
| | | | which wasn't the reviewed patch. r=jcj
* Bug 1521174 - Add some initial S/MIME gtests r=mtJ.C. Jones2018-12-101-0/+1
| | | | Differential Revision: https://phabricator.services.mozilla.com/D17014
* Bug 1529308 - Use a new comm_client flag in nss.gyp, which enables TB to ↵Kai Engert2019-02-281-0/+7
| | | | build cmsutil. r=jcj
* Backed out changeset d734d20b38d8J.C. Jones2019-02-251-1/+1
| | | | Bustage in m-c due to unexported symbols for cmsutil.
* Bug 1011625, Build cmsutil for Thunderbird, r=jcjKai Engert2019-02-211-1/+1
|
* Bug 1496124 - Populate public values for imported private keys, r=mtRobert Relyea2018-11-081-0/+1
|
* Bug 1519231 - Disable nsssysinit for Firefox builds, r=tedMartin Thomson2019-01-111-1/+9
|
* Bug 818686 - XDG Base Directory Specification support with fallback, r=mtNSS_3_42_BETA1Edênis Freindorfer Azevedo2019-01-101-0/+1
| | | | | | | | | | | | | | | | | | | | Summary: We check if $HOME/.pki and $HOME/.pki/nssdb exist; if they do, then we use this path. Otherwise, use ${XDG_DATA_HOME:-$HOME/.local/share}/pki/nssdb Test Plan: Create dummy empty dir and set HOME to it. Then, check if getUserDb returns: 1. $HOME/.pki/nssdb when this path exists; 2. $HOME/.local/share/pki/nssdb when $HOME/.pki/nssdb does not and XDG_DATA_HOME is not defined; 3. $XDG_DATA_HOME/pki/nssdb when $HOME/.pki/nssdb does not exist and XDG_DATA_HOME is defined. Reviewers: mt Reviewed By: mt Bug #: 818686 Differential Revision: https://phabricator.services.mozilla.com/D14007
* Bug 1479787 - build mozpkix as part of NSS, r=mt,keelerFranziskus Kiefer2018-08-031-97/+116
| | | | | | Differential Revision: https://phabricator.services.mozilla.com/D2719 Differential Revision: https://phabricator.services.mozilla.com/D2720 Differential Revision: https://phabricator.services.mozilla.com/D2861
* Bug 1474887, nss-policy-check: a tool to check a NSS policy configuration ↵Kai Engert2018-07-171-0/+1
| | | | for errors, r=rrelyea
* Bug 1424663 - vectorized ChaCha20 from HACL* for SSSE3 and ARM NEON, r=ttaubertFranziskus Kiefer2018-02-191-0/+1
| | | | | | | | | | | | | | Summary: This adds the vectorized ChaCha20 implementation from HACL* to NSS and replaces the old vectorized code. Note that this is not used on Android as we currently have no way of testing this for Android or use it on Android for Firefox. Reviewers: ttaubert Reviewed By: ttaubert Bug #: 1424663 Differential Revision: https://phabricator.services.mozilla.com/D467
* Bug 1426602 - Remove certcgi command from NSS - r=franziskus,kaieJonathan Kingston2017-12-211-1/+0
|
* Bug 1202413, because PK11_CreateGenericObject() leaks by design, add ↵NSS_3_34_BETA1Bob Relyea2017-10-301-0/+1
| | | | non-leaking PK11_CreateManagedGenericObject() API, early patch reviewed by Martin Thomson, r=kaie
* Bug 1400844, Implement handling of RSA-PSS signatures on certificates, r=mtDaiki Ueno2017-10-241-0/+1
| | | | This series adds high level API to sign and verify RSA-PSS signatures on certificates and utilizes them in tools.
* Bug 1396830 - add blake2b to freebl, r=mtFranziskus Kiefer2017-06-291-0/+1
| | | | Differential Revision: https://nss-review.dev.mozaws.net/D362
* Bug 1370667 - don't do startup tests when not in fips mode, r=ttaubert,rrelyeaFranziskus Kiefer2017-08-181-1/+5
| | | | Differential Revision: https://nss-review.dev.mozaws.net/D348
* Bug 1379273 - make softoken resettable via PK11_ResetToken r=franziskus,ttaubertDavid Keeler2017-08-011-0/+1
| | | | | | | | | | | | | | | Summary: Two issues prevented PK11_ResetToken from working properly: 1. The backing DB tables would be dropped and never recreated, preventing future operations from working. 2. The needLogin property of the SFTKSlot would not be updated properly, preventing PK11_InitPin (and thus other operations) from succeeding. Reviewers: ttaubert, franziskus Reviewed By: ttaubert, franziskus Differential Revision: https://nss-review.dev.mozaws.net/D382
* Bug 1372515 - allow enabling libpkix in gyp builds, r=ttaubertFranziskus Kiefer2017-06-091-16/+2
| | | | Differential Revision: https://nss-review.dev.mozaws.net/D350
* Bug 1342137 - Permit unknown dotted-decimal X500 Principals ↵J.C. Jones2017-05-111-0/+1
| | | | | | | | | | | | | | r=franziskus,ttaubert RFC 1485 permits principals with OIDs in either "1.2=Name" or "OID.1.2=Name" form. This patch permits such forms, for unknown OIDs. This patch adds disabled tests which should fail, but do not, and need further cleanup. Original patch courtesy of Miklos Vajna. Differential Revision: https://nss-review.dev.mozaws.net/D310
* Bug 1334054 - fix CERT_FormatName output buffer length calculation r=franziskusDavid Keeler2017-05-101-0/+1
| | | | | | | | | | | | | | Summary: Before this patch, CERT_FormatName attempted to account for the length of the additional formatting in its output buffer length, but added an insufficient amount (a fixed 128 bytes). This patch dynamically accounts for the additional space required by the formatting output (it can over-account in some cases, but this is unlikely to be a performance concern compared to the original implementation). Reviewers: franziskus Differential Revision: https://nss-review.dev.mozaws.net/D307
* Bug 1345089 - add prng kat tests, r=ttaubertFranziskus Kiefer2017-02-281-1/+2
| | | | Differential Revision: https://nss-review.dev.mozaws.net/D237
* Bug 1333361 - Fix static fuzzing builds r=franziskusTim Taubert2017-01-251-1/+0
| | | | Differential Revision: https://nss-review.dev.mozaws.net/D170
* Bug 1330655 - Make NSS build within OSS-Fuzz r=franziskusTim Taubert2017-01-201-2/+6
| | | | Differential Revision: https://nss-review.dev.mozaws.net/D161
* Bug 1330980 - Add first version of new "nss" tool r=ttaubertStefan Gschiel2017-01-131-0/+1
| | | | Differential Revision: https://nss-review.dev.mozaws.net/D84
* Bug 1330563 - GYP: Remove unused gtests/common/common.gyp r=mtTim Taubert2017-01-121-1/+0
| | | | Differential Revision: https://nss-review.dev.mozaws.net/D146
* Bug 1317924 - resurrect mpi tests, r=ttaubertFranziskus Kiefer2016-11-161-0/+6
| | | | Differential Revision: https://nss-review.dev.mozaws.net/D68
* bug 1315263 - Add a way to skip shlibsign in gyp build. r=franziskusTed Mielczarek2016-11-041-32/+36
|
* bug 1315231 - fix gyp build on windows. r=franziskusTed Mielczarek2016-11-091-0/+1
|
* Bug 1316274 - Fuzzing mode: Move fuzz/ to GYP, remove Makefiles and ↵Tim Taubert2016-11-111-2/+9
| | | | | | | | | manifests r=franziskus Differential Revision: https://nss-review.dev.mozaws.net/D52 * * * fixup From ab8763469977a338a61d610ed69ef045244630f3 Mon Sep 17 00:00:00 2001
* Bug 1310612 - move gtests to a directory of that name, r=franziskusMartin Thomson2016-10-281-7/+7
|
View Lorry Controller Status