kaie%kuix.de
2c42993ab5
bug 363455, Enhance PSM's SSL handling on blocking sockets
...
r=wtchang
git-svn-id: svn://10.0.0.236/trunk@220166 18797224-902f-48f8-a5cc-f745e15eee43
2007-02-15 02:46:25 +00:00
kaie%kuix.de
18d84094c0
bug 368126, client abandons SSL connection during bad cert dialogs
...
bug 365898, SSL handshake timeout is too short
r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@219906 18797224-902f-48f8-a5cc-f745e15eee43
2007-02-09 19:12:33 +00:00
kaie%kuix.de
df796d13a7
Bug 355409, unable to search LDAP server (over SSL) with tbird 2.0 build, but 1.5.0.7 works
...
r=wtchang
git-svn-id: svn://10.0.0.236/trunk@216845 18797224-902f-48f8-a5cc-f745e15eee43
2006-12-11 13:51:25 +00:00
kaie%kuix.de
4e7811927f
Bug 356109, Improve KU_NON_REPUDIATION indication in client auth prompt
...
r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@214969 18797224-902f-48f8-a5cc-f745e15eee43
2006-11-08 18:14:21 +00:00
kaie%kuix.de
c966cb3fa5
Bug 328346, Certificates with keyusage nonRepudiation should not be used as SSL client certificates
...
Checking in incremental patch to fix an obvious mistake.
r=kengert
git-svn-id: svn://10.0.0.236/trunk@214608 18797224-902f-48f8-a5cc-f745e15eee43
2006-11-02 18:51:27 +00:00
kaie%kuix.de
9b2d5803d5
Bug 328346, Certificates with keyusage nonRepudiation should not be used as SSL client certificates
...
r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@213386 18797224-902f-48f8-a5cc-f745e15eee43
2006-10-10 02:04:40 +00:00
timeless%mozdev.org
10f826390b
Bug 336094 [@ nsNSSSocketInfo::GetSSLStatus]
...
patch by kaie r=timeless sr=rrelyea
git-svn-id: svn://10.0.0.236/trunk@211868 18797224-902f-48f8-a5cc-f745e15eee43
2006-09-16 23:44:02 +00:00
kaie%kuix.de
da6cd31639
Bug 340359, SSL Server stalls on v3 hello using TLS hello extensions
...
r=darin
git-svn-id: svn://10.0.0.236/trunk@208312 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-24 18:14:40 +00:00
kaie%kuix.de
0172cc4df1
Bug 342646, Trunk crashes while opening HTTPS links with Ad Muncher running
...
r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@206749 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-07 20:15:45 +00:00
kaie%kuix.de
d1ad44e1b5
bug 236933, add on patch to address l10n review comments, renames string ids
...
r=l10n
git-svn-id: svn://10.0.0.236/trunk@201522 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-04 10:48:48 +00:00
kaie%kuix.de
8d9678439d
Additional checkin for bug 236933, Patch 5 - strings,
...
in order to improve the error messages on weak crypto sites.
ui-r=beltzner, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@201405 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-01 03:18:34 +00:00
kaie%kuix.de
9f6ce4bc5f
Bug 343230, When retrying on TLS intolerance sites, use SSL v2 compatible hellos
...
r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@201404 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-01 03:11:21 +00:00
kaie%kuix.de
30a3100017
Bug 335859, "<site> has received an incorrect or unexpected message. Error Code: -12229" when visiting site with SSL2
...
disabled
r=nelson
git-svn-id: svn://10.0.0.236/trunk@201382 18797224-902f-48f8-a5cc-f745e15eee43
2006-06-30 21:35:28 +00:00
kaie%kuix.de
2173cc63f5
Bug 331977, No error dialog is presented if an SSL rehandshake fails
...
r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@201378 18797224-902f-48f8-a5cc-f745e15eee43
2006-06-30 21:22:22 +00:00
kaie%kuix.de
b6b074e0d7
bug 338421, Can no longer create SSL session to Cisco VPN concentrator by host name
...
Patch contributed by Bill Gianopoulos
r=kengert/nelson
git-svn-id: svn://10.0.0.236/trunk@198068 18797224-902f-48f8-a5cc-f745e15eee43
2006-05-20 02:36:48 +00:00
darin%meer.net
42edf059cf
landing patch for bug 326273 "Implement nsIThreadManager" (Mac portions by Mark Mentovai) with reviews from bienvenu, bsmedberg, bzbarsky, josh, roc, and ssieb
...
git-svn-id: svn://10.0.0.236/trunk@196254 18797224-902f-48f8-a5cc-f745e15eee43
2006-05-10 17:30:15 +00:00
timeless%mozdev.org
1921c20288
Bug 334193 nsContinueDespiteCertError's default case should set rv
...
r=kaie sr=bz
git-svn-id: svn://10.0.0.236/trunk@196120 18797224-902f-48f8-a5cc-f745e15eee43
2006-05-06 22:33:44 +00:00
gijskruitbosch%gmail.com
028552fd0d
Bug 153232 - Missing break; for BAD_SIGNATURE case
...
r+sr = Kai Engert
git-svn-id: svn://10.0.0.236/trunk@195352 18797224-902f-48f8-a5cc-f745e15eee43
2006-04-25 14:33:15 +00:00
kaie%kuix.de
b3a84b66f4
Bug 333691, [@ nsSSLThread::requestPoll - nsSSLIOLayerPoll]
...
r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@194977 18797224-902f-48f8-a5cc-f745e15eee43
2006-04-20 16:21:57 +00:00
kaie%kuix.de
e4ab14cd87
bug 111384, Support OCSP requests through a proxy
...
combined r= by darin / rrelyea
second checkin attempt
git-svn-id: svn://10.0.0.236/trunk@193501 18797224-902f-48f8-a5cc-f745e15eee43
2006-04-04 13:14:40 +00:00
kaie%kuix.de
3881f77126
backing out my checkin, because we can't reproduce the tinderbox test
...
failure
git-svn-id: svn://10.0.0.236/trunk@193495 18797224-902f-48f8-a5cc-f745e15eee43
2006-04-04 09:48:08 +00:00
kaie%kuix.de
c88b58645c
bug 111384, Support OCSP requests through a proxy
...
combined r= by darin / rrelyea
git-svn-id: svn://10.0.0.236/trunk@193483 18797224-902f-48f8-a5cc-f745e15eee43
2006-04-04 06:41:37 +00:00
cbiesinger%web.de
6322c04952
bug 183156 remove *UCS2* functions, replacing them with *UTF16* ones
...
r+sr=darin
git-svn-id: svn://10.0.0.236/trunk@188844 18797224-902f-48f8-a5cc-f745e15eee43
2006-02-03 14:18:39 +00:00
kaie%kuix.de
dcf905f887
bug 149834, Enhance PSM speed by using new NSS API CERT_VerifyCertificateNow
...
Patch by John G. Myers, r=kengert
git-svn-id: svn://10.0.0.236/trunk@187224 18797224-902f-48f8-a5cc-f745e15eee43
2006-01-10 02:14:04 +00:00
kaie%kuix.de
7847853bee
Bug 220815, Non localisable strings in nsCertPicker.cpp and nsNSSIOLayer.cpp
...
r=jgmyers, sr=shaver
git-svn-id: svn://10.0.0.236/trunk@185620 18797224-902f-48f8-a5cc-f745e15eee43
2005-12-02 23:08:44 +00:00
timeless%mozdev.org
652e9cace4
Bug 299099 remove useless references to nsVoidArray
...
r=kaie sr=bz
git-svn-id: svn://10.0.0.236/trunk@185496 18797224-902f-48f8-a5cc-f745e15eee43
2005-12-01 04:23:37 +00:00
darin%meer.net
ca087614d5
fixes bug 304286 "Certificate failures during automatic check for updates should not give user choice to connect anyway" r=biesi sr=dveditz
...
git-svn-id: svn://10.0.0.236/trunk@182294 18797224-902f-48f8-a5cc-f745e15eee43
2005-10-15 02:46:06 +00:00
timeless%mozdev.org
236e5ac36b
Bug 283569 OOM crash [@ nsNSS_SSLGetClientAuthData]
...
patch by b.jacques@planet.nl r=kaie sr=darin a=bsmedberg
git-svn-id: svn://10.0.0.236/trunk@176970 18797224-902f-48f8-a5cc-f745e15eee43
2005-08-02 14:22:50 +00:00
darin%meer.net
bd1832db3c
fixes bug 285991 "leak loading site from HTTPS" r=biesi sr=dbaron
...
git-svn-id: svn://10.0.0.236/trunk@171762 18797224-902f-48f8-a5cc-f745e15eee43
2005-04-06 01:35:06 +00:00
bsmedberg%covad.net
f4f72beaa1
Bug 282057 - brand.dtd/properties live in the wrong chrome package... xulrunner apps cannot provide these files, which means they can't use various toolkit features r=darin moa=Neil (seamonkey)
...
git-svn-id: svn://10.0.0.236/trunk@170499 18797224-902f-48f8-a5cc-f745e15eee43
2005-03-10 04:38:35 +00:00
kjh-5727%comcast.net
f774e416d9
Bug 232068: security should use newer nsIPrefService APIs instead of nsIPref. Patch by Mikael Parknert (mikael@parknert.se), r=bienvenu, sr=darin.
...
git-svn-id: svn://10.0.0.236/trunk@161859 18797224-902f-48f8-a5cc-f745e15eee43
2004-09-07 18:54:02 +00:00
gerv%gerv.net
43cb9e1492
Bug 236613: change to MPL/LGPL/GPL tri-license.
...
git-svn-id: svn://10.0.0.236/trunk@155484 18797224-902f-48f8-a5cc-f745e15eee43
2004-04-25 15:03:26 +00:00
jgmyers%speakeasy.net
3521cbf59b
Clean up TLS intolerant restart code: but 191417 p=darin r=kaie sr=bryner
...
git-svn-id: svn://10.0.0.236/trunk@153821 18797224-902f-48f8-a5cc-f745e15eee43
2004-03-10 05:28:39 +00:00
jgmyers%speakeasy.net
f750abe8b1
Clean up string stuff: bug 232812 r=ssaux sr=jag
...
git-svn-id: svn://10.0.0.236/trunk@153266 18797224-902f-48f8-a5cc-f745e15eee43
2004-02-26 04:07:23 +00:00
bryner%brianryner.com
4995514c49
Updating my email address
...
git-svn-id: svn://10.0.0.236/trunk@147418 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-29 06:04:02 +00:00
darin%meer.net
f95b2ef09c
landing patch for bug 205726 "DNS rewrite" r=dougt sr=bryner
...
git-svn-id: svn://10.0.0.236/trunk@146796 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-11 20:32:33 +00:00
jaggernaut%netscape.com
f34216bf2d
Bug 25886: Get rid of a bunch of unused NS_DEFINE_IID, NS_DEFINE_CID. r=caillon, sr=dbaron
...
git-svn-id: svn://10.0.0.236/trunk@144992 18797224-902f-48f8-a5cc-f745e15eee43
2003-07-20 07:47:59 +00:00
wtc%netscape.com
e9f14945d3
Bug 118832: do not include NSS private header files. "genname.h" is simply
...
not needed. "crmfi.h" can be avoided by using the public function
CRMF_EncodeCertReqMessages. r=kaie. sr=bryner. a=asa for mozilla 1.3.
Modified Files: Makefile.in nsCrypto.cpp nsNSSIOLayer.cpp
git-svn-id: svn://10.0.0.236/trunk@138034 18797224-902f-48f8-a5cc-f745e15eee43
2003-02-20 14:56:10 +00:00
kaie%netscape.com
a6730a669f
b=188363 Bad error messages when server uses an invalid cert (-8054)
...
r=nelsonb sr=blizzard
git-svn-id: svn://10.0.0.236/trunk@136789 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-22 03:41:35 +00:00
kaie%netscape.com
f94f02d55a
b=189205 Implement early shutdown of NSS resources
...
r=javi sr=darin
git-svn-id: svn://10.0.0.236/trunk@136592 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-18 14:03:00 +00:00
dbaron%dbaron.org
6ed727cbe8
Bug 178643: Remove uses of NS_INIT_ISUPPORTS, since it is no longer needed. r=timeless sr=jag
...
git-svn-id: svn://10.0.0.236/trunk@136028 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-08 23:19:20 +00:00
kaie%netscape.com
7e6de39a8e
b=177260 Fix known leaks in PSM, track blocking PSM UI, track open SSL sockets
...
r=javi sr=darin
git-svn-id: svn://10.0.0.236/trunk@135905 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-06 22:23:49 +00:00
kaie%netscape.com
5715a6d3b9
b=168450 Cleanup some PSM code and add JavaDoc documentation to all freeze candidates
...
r=javi sr=alecf
git-svn-id: svn://10.0.0.236/trunk@133794 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-14 00:50:02 +00:00
kaie%netscape.com
499d158fb3
b=166655 ERROR -12227 / Extend the list of TLS intolerance error codes
...
r=javi sr=jag a=blizzard
git-svn-id: svn://10.0.0.236/trunk@133012 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-05 14:49:52 +00:00
kaie%netscape.com
0a87137472
b=163605 Use of blocking I/O for SSL in PSM stalls network activity
...
r=javi sr=darin a=asa
git-svn-id: svn://10.0.0.236/trunk@132095 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-16 22:20:42 +00:00
kaie%netscape.com
9ab7f38615
b=169932 Replace wstring with AString in IDL
...
r=darin sr=alecf
git-svn-id: svn://10.0.0.236/trunk@130278 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-23 20:17:16 +00:00
kaie%netscape.com
16fe65898b
b=166664 Remove obsolete interface nsISecurityManagerComponent
...
r=javi sr=alecf
git-svn-id: svn://10.0.0.236/trunk@129802 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-17 19:09:11 +00:00
kaie%netscape.com
49287355c4
b=168448 PSM embedding freeze/ step 1/ move stuff & change data types
...
r=javi sr=alecf
git-svn-id: svn://10.0.0.236/trunk@129797 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-17 18:51:22 +00:00
kaie%netscape.com
a3c72acc3c
b=157927 Fix memory leaks in nsNSSCertificate.cpp, fix some compiler warnings, do some cleanup.
...
r=javi sr=jag
git-svn-id: svn://10.0.0.236/trunk@127939 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-23 10:40:27 +00:00
kaie%netscape.com
0b1add5b4a
Patch from bug 87902 to fix SSL/TLS logic.
...
- make TLS intolerant server detection over proxies work
(this bug 87902)
- on connection failure, only retry without TLS when it is really
likely to help (bug 149910)
- remove obsolete workarounds in SSL i/o layer
(see removed comments in patch)
- avoid to confuse programmers reading code,
by renaming TLSStepUp (which means something else)
to the correct term STARTTLS (what the code is actually doing).
(As suggested by nelsonb)
- If an invalid or expired etc. server certificate is presented,
a warning is shown. If the user decides to cancel,
network activity should stop immediately.
(we currently warn multiple times) (bug 87209)
r=javi/darin/ducarroz/dmose sr=alecf
git-svn-id: svn://10.0.0.236/trunk@127298 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-14 23:43:28 +00:00