nagai/fune
3
0
Fork 0
forked from mirrors/gecko-dev
Code Pull requests Activity
fune/security/manager/ssl
History
Dana Keeler b68af086e7 Bug 1940172 - regenerate test certificates for 2025 r=jschanck,necko-reviewers,kershaw,robwu,extension-reviewers a=test-only 
* the certificates were regenerated using ./mach generate-test-certs
* the build/pgo/certs/ changes were made using ./mach python build/pgo/genpgocert.py
* the zip files in security/manager/ssl/tests/unit/test_signed_apps/ were updated per the directions in the corresponding moz.build file
* security/manager/ssl/tests/unit/test_cert_override_read.js was updated per the instructions in its output
* this text was copied and updated from the previous regeneration bug, bug 1874627

These certificates and other test artifacts will now expire in 2026.
2025-01-08 17:41:58 +00:00
..
builtins Bug 1899656 - add a mock builtins module for tests. r=glandium,keeler 2024-06-03 18:08:05 +00:00
cert_storage Bug 1879857 - Update Glean to v57.0.0. r=chutten,supply-chain-reviewers,mach-reviewers 2024-02-13 20:47:02 +00:00
crashtests
crypto_hash Bug 1894826 - Don't update digest when given string is empty. r=jschanck 2024-05-02 22:49:28 +00:00
data_storage Bug 1873080 - change data_storage.entries metric to quantity metrics r=jschanck 2024-01-05 19:49:36 +00:00
ipcclientcerts Bug 1883615 - Move libdl checks to moz.configure and make libdl dependencies explicit r=glandium 2024-05-15 20:29:07 +00:00
osclientcerts Bug 1893057 - build: use libloading 0.8, fake 0.7 over 0.8 r=glandium,webgpu-reviewers,jimb 2024-05-02 18:17:36 +00:00
rsclientcerts Bug 1834940 - Add iOS support to client cert modules. r=keeler 2024-02-29 01:01:23 +00:00
tests Bug 1940172 - regenerate test certificates for 2025 r=jschanck,necko-reviewers,kershaw,robwu,extension-reviewers a=test-only 2025-01-08 17:41:58 +00:00
addons-public-intermediate.crt Bug 1891421 - Update add-on production certs. r=jschanck 2024-05-13 17:42:13 +00:00
addons-public.crt Bug 1891421 - Update add-on production certs. r=jschanck 2024-05-13 17:42:13 +00:00
addons-stage-intermediate.crt Bug 1886708 - Replace add-on staging certs with cas-new. r=jschanck 2024-04-03 07:53:58 +00:00
addons-stage.crt Bug 1886708 - Replace add-on staging certs with cas-new. r=jschanck 2024-04-03 07:53:58 +00:00
AppSignatureVerification.cpp Bug 1883100 - return the algorithms of signatures verified in openSignedAppFileAsync r=jschanck,robwu 2024-03-05 19:05:21 +00:00
AppTrustDomain.cpp Bug 1885354 - Hardcode intermediate addons-stage cert r=jschanck 2024-03-15 22:52:48 +00:00
AppTrustDomain.h
CertStorageMemoryReporting.cpp
ClientAuthDialogService.sys.mjs Bug 1888751 - Use getMostRecentBrowserWindow when where is no gDialogBox, r=Gijs 2024-04-18 10:29:48 +00:00
CommonSocketControl.cpp Bug 1851294 - Add nsITLSSocketControl.asyncStartTLS r=jschanck,necko-reviewers,kershaw 2024-04-19 09:42:41 +00:00
CommonSocketControl.h
components.conf Bug 1895232 - Convert do_GetService to using components::*::service in netwerk/ r=valentin,cookie-reviewers,places-reviewers 2024-05-30 21:18:43 +00:00
content-signature-local.crt
content-signature-prod.crt Bug 1895539: update production content signature root certificate r=willdurand,jschanck 2024-05-14 12:36:42 +00:00
content-signature-stage.crt Bug 1888488: update staging content signing root certificate to new cas_new root certificate r=jschanck 2024-04-05 12:59:28 +00:00
ContentSignatureVerifier.cpp Bug 1891468 - reject HSTS headers where the includeSubdomains directive has an empty value r=jschanck 2024-05-31 20:28:26 +00:00
ContentSignatureVerifier.h
CredentialManagerSecret.cpp
CredentialManagerSecret.h
CryptoTask.cpp
CryptoTask.h
DataStorageManager.cpp
DataStorageManager.h
DER.sys.mjs
EnterpriseRoots.cpp Bug 1893683 - Remove ns{A,C}String and other xpcom dependencies from nsStringBuffer. r=smaug,media-playback-reviewers,karlt 2024-05-09 08:34:35 +00:00
EnterpriseRoots.h Bug 1874054 - prevent loading known built-in roots as third party certificates from the OS r=jschanck 2024-01-17 22:41:04 +00:00
gen_cert_header.py Bug 1894783 - check cert format in gen_cert_header.py. r=nkulatova 2024-05-14 19:34:49 +00:00
IPCClientCertsChild.cpp
IPCClientCertsChild.h
IPCClientCertsParent.cpp
IPCClientCertsParent.h
KeychainSecret.cpp
KeychainSecret.h Bug 1871011 - use policy APIs rather than building certificate chains to determine enterprise roots on macOS r=jschanck 2024-01-25 20:35:06 +00:00
LibSecret.cpp
LibSecret.h
md4.c
md4.h
metrics.yaml Bug 1885138 - Enabling Brotli Certificate Encoding for Nightly r=jschanck 2024-06-06 10:41:01 +00:00
moz.build Bug 1885354 - Hardcode intermediate addons-stage cert r=jschanck 2024-03-15 22:52:48 +00:00
nsCertOverrideService.cpp Bug 1892257 - Move nsStringBuffer to mfbt. r=nika,xpcom-reviewers,glandium 2024-05-14 14:24:26 +00:00
nsCertOverrideService.h
nsCertTree.cpp
nsCertTree.h
nsClientAuthRemember.cpp Bug 1892257 - Move nsStringBuffer to mfbt. r=nika,xpcom-reviewers,glandium 2024-05-14 14:24:26 +00:00
nsClientAuthRemember.h Bug 1866035 - check for a remembered client authentication certificate earlier r=jschanck 2024-02-12 22:21:15 +00:00
nsICertificateDialogs.idl
nsICertOverrideService.idl
nsICertStorage.idl Bug 1873386 - Interfaces referenced from scriptable members need to be [scriptable] r=necko-reviewers,jschanck,mccr8,valentin 2024-04-09 11:29:22 +00:00
nsICertTree.idl Bug 1883217 - Remove unused defines in IDL files r=webdriver-reviewers,necko-reviewers,credential-management-reviewers,places-reviewers,dom-core,Standard8,valentin,mccr8,sgalich 2024-03-06 19:04:25 +00:00
nsIClientAuthDialogService.idl Bug 1881863 - Part 1: Standardize on boolean over bool in xpidl, r=xpcom-reviewers,necko-reviewers,valentin,extension-reviewers,application-update-reviewers,media-playback-reviewers,credential-management-reviewers,search-reviewers,anti-tracking-reviewers,places-reviewers,nalexander,emilio,zombie,sgalich,karlt,lina,Standard8 2024-04-04 18:45:21 +00:00
nsIClientAuthRememberService.idl Bug 1881863 - Part 1: Standardize on boolean over bool in xpidl, r=xpcom-reviewers,necko-reviewers,valentin,extension-reviewers,application-update-reviewers,media-playback-reviewers,credential-management-reviewers,search-reviewers,anti-tracking-reviewers,places-reviewers,nalexander,emilio,zombie,sgalich,karlt,lina,Standard8 2024-04-04 18:45:21 +00:00
nsIContentSignatureVerifier.idl
nsICryptoHash.idl
nsIDataStorage.idl Bug 1881863 - Part 1: Standardize on boolean over bool in xpidl, r=xpcom-reviewers,necko-reviewers,valentin,extension-reviewers,application-update-reviewers,media-playback-reviewers,credential-management-reviewers,search-reviewers,anti-tracking-reviewers,places-reviewers,nalexander,emilio,zombie,sgalich,karlt,lina,Standard8 2024-04-04 18:45:21 +00:00
nsINSSComponent.idl Bug 1881863 - Part 1: Standardize on boolean over bool in xpidl, r=xpcom-reviewers,necko-reviewers,valentin,extension-reviewers,application-update-reviewers,media-playback-reviewers,credential-management-reviewers,search-reviewers,anti-tracking-reviewers,places-reviewers,nalexander,emilio,zombie,sgalich,karlt,lina,Standard8 2024-04-04 18:45:21 +00:00
nsINSSErrorsService.idl
nsINSSVersion.idl Bug 1883217 - Remove unused defines in IDL files r=webdriver-reviewers,necko-reviewers,credential-management-reviewers,places-reviewers,dom-core,Standard8,valentin,mccr8,sgalich 2024-03-06 19:04:25 +00:00
nsIOSKeyStore.idl Bug 1886783 - Add a method to OSKeyStore.sys.mjs to allow exporting the store secret. r=jschanck 2024-05-24 15:51:29 +00:00
nsIOSReauthenticator.idl
nsIPK11Token.idl
nsIPK11TokenDB.idl Bug 1883217 - Remove unused defines in IDL files r=webdriver-reviewers,necko-reviewers,credential-management-reviewers,places-reviewers,dom-core,Standard8,valentin,mccr8,sgalich 2024-03-06 19:04:25 +00:00
nsIPKCS11Module.idl
nsIPKCS11ModuleDB.idl
nsIPKCS11Slot.idl
nsIPublicKeyPinningService.idl Bug 1881863 - Part 1: Standardize on boolean over bool in xpidl, r=xpcom-reviewers,necko-reviewers,valentin,extension-reviewers,application-update-reviewers,media-playback-reviewers,credential-management-reviewers,search-reviewers,anti-tracking-reviewers,places-reviewers,nalexander,emilio,zombie,sgalich,karlt,lina,Standard8 2024-04-04 18:45:21 +00:00
nsISecretDecoderRing.idl
nsISecurityUITelemetry.idl
nsISiteSecurityService.idl
nsITLSSocketControl.idl Bug 1851294 - Add nsITLSSocketControl.asyncStartTLS r=jschanck,necko-reviewers,kershaw 2024-04-19 09:42:41 +00:00
nsITokenPasswordDialogs.idl
nsITransportSecurityInfo.idl
nsIX509Cert.idl Bug 1881863 - Part 1: Standardize on boolean over bool in xpidl, r=xpcom-reviewers,necko-reviewers,valentin,extension-reviewers,application-update-reviewers,media-playback-reviewers,credential-management-reviewers,search-reviewers,anti-tracking-reviewers,places-reviewers,nalexander,emilio,zombie,sgalich,karlt,lina,Standard8 2024-04-04 18:45:21 +00:00
nsIX509CertDB.idl Bug 1890795 - Count number of trust objects in db, r=jschanck,firefox-desktop-core-reviewers 2024-04-23 16:50:07 +00:00
nsIX509CertValidity.idl
nsNSSCallbacks.cpp Bug 1879954 - exempt errors after Server Hello from Xyber retry logic. r=keeler 2024-02-15 21:01:33 +00:00
nsNSSCallbacks.h Bug 1879954 - exempt errors after Server Hello from Xyber retry logic. r=keeler 2024-02-15 21:01:33 +00:00
nsNSSCertHelper.cpp
nsNSSCertHelper.h
nsNSSCertificate.cpp Bug 1867624 - remove nsIX509Cert.isBuiltInRoot for blocking the main thread r=jschanck,extension-reviewers,application-update-reviewers,nalexander,robwu 2023-12-18 17:28:32 +00:00
nsNSSCertificate.h
nsNSSCertificateDB.cpp Bug 1890795 - Count number of trust objects in db, r=jschanck,firefox-desktop-core-reviewers 2024-04-23 16:50:07 +00:00
nsNSSCertificateDB.h
nsNSSCertTrust.cpp
nsNSSCertTrust.h
nsNSSComponent.cpp Bug 1881117 - add convenience functions for listing third party certificates r=jschanck 2024-02-23 00:13:07 +00:00
nsNSSComponent.h Bug 1875906 - run the intermediate preloading healer on the socket thread r=jschanck 2024-01-24 17:55:54 +00:00
nsNSSHelper.h
nsNSSIOLayer.cpp Bug 1885138 - Enabling Brotli Certificate Encoding for Nightly r=jschanck 2024-06-06 10:41:01 +00:00
nsNSSIOLayer.h Bug 1885138 - Enabling Brotli Certificate Encoding for Nightly r=jschanck 2024-06-06 10:41:01 +00:00
nsNSSModule.cpp
nsNSSModule.h
nsNSSVersion.cpp
nsNSSVersion.h
nsNTLMAuthModule.cpp
nsNTLMAuthModule.h
nsPK11TokenDB.cpp
nsPK11TokenDB.h
nsPKCS11Slot.cpp
nsPKCS11Slot.h
nsPKCS12Blob.cpp
nsPKCS12Blob.h
nsRandomGenerator.cpp
nsRandomGenerator.h
nsSecureBrowserUI.cpp
nsSecureBrowserUI.h
nsSecurityHeaderParser.cpp Bug 1891468 - reject HSTS headers where the includeSubdomains directive has an empty value r=jschanck 2024-05-31 20:28:26 +00:00
nsSecurityHeaderParser.h Bug 1891468 - reject HSTS headers where the includeSubdomains directive has an empty value r=jschanck 2024-05-31 20:28:26 +00:00
NSSErrorsService.cpp
NSSErrorsService.h
nsSiteSecurityService.cpp Bug 1891468 - reject HSTS headers where the includeSubdomains directive has an empty value r=jschanck 2024-05-31 20:28:26 +00:00
nsSiteSecurityService.h Bug 1870262 - a subdomain of any HSTS superdomain that asserts includeSubdomains is HSTS r=jschanck 2023-12-18 16:27:14 +00:00
NSSKeyStore.cpp Bug 1896781 - implement NSSKeyStore::RetrieveSecret. r=mt 2024-05-24 15:51:28 +00:00
NSSKeyStore.h
nsSSLSocketProvider.cpp
nsSSLSocketProvider.h
NSSSocketControl.cpp Bug 1851294 - Use nsMainThreadPtrHolder<Promise> to avoid assertion r=necko-reviewers,kershaw 2024-04-22 08:04:35 +00:00
NSSSocketControl.h Bug 1851294 - Add nsITLSSocketControl.asyncStartTLS r=jschanck,necko-reviewers,kershaw 2024-04-19 09:42:41 +00:00
nsSTSPreloadList.inc No Bug, mozilla-esr128 repo-update HSTS HPKP remote-settings tld-suffixes - a=RyanVM 2024-12-17 17:36:27 +00:00
nsTLSSocketProvider.cpp
nsTLSSocketProvider.h
nsVerificationJob.h
OSKeyStore.cpp Bug 1886783 - Add a method to OSKeyStore.sys.mjs to allow exporting the store secret. r=jschanck 2024-05-24 15:51:29 +00:00
OSKeyStore.h Bug 1886783 - Add a method to OSKeyStore.sys.mjs to allow exporting the store secret. r=jschanck 2024-05-24 15:51:29 +00:00
OSReauthenticator.cpp
OSReauthenticator.h
OSReauthenticatorDarwin.mm Bug 1843207 - Stop using nsCocoaUtils::ToNSString in OSReauthenticatorDarwin.mm. r=nika 2024-03-13 20:54:20 +00:00
PIPCClientCerts.ipdl Bug 1867360 - Require toplevel protocols to specify which processes they expect to be bound in, r=decoder,ipc-reviewers,necko-reviewers,media-playback-reviewers,profiler-reviewers,win-reviewers,aosmond,rkraesig,mccr8,kershaw 2024-01-18 23:07:18 +00:00
PKCS11ModuleDB.cpp
PKCS11ModuleDB.h
PSelectTLSClientAuthCert.ipdl Bug 1867360 - Require toplevel protocols to specify which processes they expect to be bound in, r=decoder,ipc-reviewers,necko-reviewers,media-playback-reviewers,profiler-reviewers,win-reviewers,aosmond,rkraesig,mccr8,kershaw 2024-01-18 23:07:18 +00:00
PSMIPCTypes.ipdlh
PSMRunnable.cpp
PSMRunnable.h
PublicKeyPinningService.cpp
PublicKeyPinningService.h
PublicSSL.h
PVerifySSLServerCert.ipdl Bug 1900132 - streamline PVerifySSLServerCert protocol r=jschanck 2024-06-05 23:58:02 +00:00
RemoteSecuritySettings.sys.mjs Bug 1908481 - add a pref to select the user's CRLite filter channel. a=dmeehan 2024-07-25 16:35:08 +00:00
RootCertificateTelemetryUtils.cpp
RootCertificateTelemetryUtils.h
RootHashes.inc Bug 1905161 - land NSS NSS_3_101_1_RTM UPGRADE_NSS_RELEASE, r=keeler a=RyanVM 2024-06-30 17:09:25 +00:00
ScopedNSSTypes.h
SecretDecoderRing.cpp
SecretDecoderRing.h
SelectTLSClientAuthCertChild.h
SelectTLSClientAuthCertParent.h
SharedCertVerifier.h Bug 1874054 - use nsTArray instead of Vector for enterprise certs r=jschanck 2024-01-17 22:41:04 +00:00
SharedSSLState.cpp
SharedSSLState.h
SSLServerCertVerification.cpp Bug 1915008 - leak mResultTask if dispatch fails in certificate verification (esr128) a=diannaS 2024-09-20 21:04:58 +00:00
SSLServerCertVerification.h Bug 1915008 - leak mResultTask if dispatch fails in certificate verification (esr128) a=diannaS 2024-09-20 21:04:58 +00:00
StaticHPKPins.errors
StaticHPKPins.h No Bug, mozilla-esr128 repo-update HSTS HPKP remote-settings tld-suffixes - a=RyanVM 2024-12-17 17:36:27 +00:00
TLSClientAuthCertSelection.cpp Bug 1866035 - check for a remembered client authentication certificate earlier r=jschanck 2024-02-12 22:21:15 +00:00
TLSClientAuthCertSelection.h Bug 1866035 - build potential client auth certificate chains off the main thread r=jschanck 2024-02-12 22:21:15 +00:00
TransportSecurityInfo.cpp
TransportSecurityInfo.h
VerifySSLServerCertChild.cpp Bug 1915008 - leak mResultTask if dispatch fails in certificate verification (esr128) a=diannaS 2024-09-20 21:04:58 +00:00
VerifySSLServerCertChild.h Bug 1900132 - streamline PVerifySSLServerCert protocol r=jschanck 2024-06-05 23:58:02 +00:00
VerifySSLServerCertParent.cpp Bug 1915008 - leak mResultTask if dispatch fails in certificate verification (esr128) a=diannaS 2024-09-20 21:04:58 +00:00
VerifySSLServerCertParent.h Bug 1900132 - streamline PVerifySSLServerCert protocol r=jschanck 2024-06-05 23:58:02 +00:00
X509.sys.mjs
X509CertValidity.cpp
X509CertValidity.h