Commits · 33fd8c84d1db1faa74ab029f50c91ed1b15287e2 · The Tor Project / Applications / Tor Browser

14 Jan, 2021 1 commit

Bug 1686615 - replace pgo certs. r=kjacobs, a=release · 33fd8c84

Aki Sasaki authored Jan 14, 2021

via `./mach python build/pgo/genpgocert.py` per https://bugzilla.mozilla.org/show_bug.cgi?id=1525191#c1

Differential Revision: https://phabricator.services.mozilla.com/D101697

33fd8c84

26 Feb, 2020 1 commit

Bug 1616675 - Add an IPv4 secure service to mochitests' ssltunnel r=keeler · 5f3cbafe

J.C. Jones authored Feb 26, 2020

WebAuthn needs to write a test to confirm it's prohibited when accessed via
an IP address. This adds the capability to get a SecureContext for an IP host.
It uses 127.0.0.2 so as to bypass restrictions on 127.0.0.1, and the use of .1
as a special-market in ssltunnel.

Differential Revision: https://phabricator.services.mozilla.com/D63570

--HG--
extra : moz-landing-system : lando

5f3cbafe

05 Feb, 2020 1 commit

Bug 1613275 - Regenerate expired certs not handled by Bug 1607845 a=RyanVM CLOSED TREE · 3a0a8e27

J.C. Jones authored Feb 04, 2020

commands:

openssl x509 -in security/manager/ssl/tests/unit/test_missing_intermediate/missing-intermediate.pem -outform der -out security/manager/ssl/tests/unit/test_missing_intermediate/missing-intermediate.der

mach python ./build/pgo/genpgocert.py

./mach python ./security/manager/ssl/tests/unit/pycert.py <security/manager/ssl/tests/unit/test_certDB_import/emailEE.pem.certspec >security/manager/ssl/tests/unit/test_certDB_import/emailEE.pem
./mach python ./security/manager/ssl/tests/unit/pycert.py <security/manager/ssl/tests/unit/test_certDB_import/importedCA.pem.certspec >security/manager/ssl/tests/unit/test_certDB_import/importedCA.pem
./mach python ./security/manager/ssl/tests/unit/pycert.py <security/manager/ssl/tests/unit/test_intermediate_preloads/ee.pem.certspec >security/manager/ssl/tests/unit/test_intermediate_preloads/ee.pem
./mach python ./security/manager/ssl/tests/unit/pycert.py <security/manager/ssl/tests/unit/test_intermediate_preloads/ee2.pem.certspec >security/manager/ssl/tests/unit/test_intermediate_preloads/ee2.pem
./mach python ./security/manager/ssl/tests/unit/pycert.py <security/manager/ssl/tests/unit/test_intermediate_preloads/int.pem.certspec >security/manager/ssl/tests/unit/test_intermediate_preloads/int.pem
./mach python ./security/manager/ssl/tests/unit/pycert.py <security/manager/ssl/tests/unit/test_intermediate_preloads/int2.pem.certspec >security/manager/ssl/tests/unit/test_intermediate_preloads/int2.pem


Differential Revision: https://phabricator.services.mozilla.com/D61653

--HG--
extra : amend_source : ba63f416c91785a479695f342cf8db70ccd49cba

3a0a8e27

02 Nov, 2019 1 commit

Bug 1584479 - Part 2: Update socialtracking test. r=Ehsan · 7f0b6eec

Nihanth Subramanya authored Nov 02, 2019

Differential Revision: https://phabricator.services.mozilla.com/D51444

--HG--
extra : moz-landing-system : lando

7f0b6eec

01 Nov, 2019 2 commits

Backed out 4 changesets (bug 1584479) for Browser-chrome failures in... · b9074d53

Dorel Luca authored Nov 02, 2019

Backed out 4 changesets (bug 1584479) for Browser-chrome failures in toolkit/components/antitracking/test/browser/browser_socialtracking.js

Backed out changeset b0d9877bd8b0 (bug 1584479)
Backed out changeset d2c56bd61b08 (bug 1584479)
Backed out changeset 0edb22786545 (bug 1584479)
Backed out changeset 7e03b392edb3 (bug 1584479)

b9074d53

Bug 1584479 - Part 2: Update socialtracking test. r=Ehsan · 1429cf6a

Nihanth Subramanya authored Nov 01, 2019

Differential Revision: https://phabricator.services.mozilla.com/D51444

--HG--
extra : moz-landing-system : lando

1429cf6a

15 May, 2019 1 commit
- Bug 1535210 - Set SSL STATE_IS_BROKEN flag for TLS1.0 and TLS 1.1 connections. r=keeler · b93f23a6
  Kevin Jacobs authored May 15, 2019
```
Differential Revision: https://phabricator.services.mozilla.com/D29576

--HG--
extra : moz-landing-system : lando
```
  b93f23a6
18 Apr, 2019 1 commit

Bug 1500533 - Ensure that TLS session resumption tickets are only consumed if... · ccfae51c

Ehsan Akhgari authored Apr 18, 2019

Bug 1500533 - Ensure that TLS session resumption tickets are only consumed if the channel isn't isolated by anti-tracking checks; r=michal,baku

Differential Revision: https://phabricator.services.mozilla.com/D26996

--HG--
extra : moz-landing-system : lando

ccfae51c

11 Apr, 2019 2 commits

Backed out changeset acb04833e713 (bug 1500533) for assertion failure in... · 76651301
Oana Pop Rus authored Apr 11, 2019
```
Backed out changeset acb04833e713 (bug 1500533) for assertion failure in nsHttpChannel.cpp on a CLOSED TREE
```
76651301

Bug 1500533 - Ensure that TLS session resumption tickets are only consumed if... · bf2a5e6e

Ehsan Akhgari authored Apr 11, 2019

Bug 1500533 - Ensure that TLS session resumption tickets are only consumed if the channel isn't isolated by anti-tracking checks; r=michal,baku

Differential Revision: https://phabricator.services.mozilla.com/D26996

--HG--
extra : moz-landing-system : lando

bf2a5e6e

05 Feb, 2019 1 commit

Bug 1525191 - Regenerate certs CLOSED TREE a=tomprince · c03a82f8

Wes Kocher authored Feb 04, 2019


Differential Revision: https://phabricator.services.mozilla.com/D18632

--HG--
extra : amend_source : 028e3e34ede69bc05f9f8ea147bee02a4e9e2de5

c03a82f8

06 Feb, 2019 1 commit

Bug 1522565 - Tests for cryptominers and fingerprinters sub-panels. r=nhnt11 · 731692a3

Johann Hofmann authored Feb 06, 2019

Differential Revision: https://phabricator.services.mozilla.com/D18827

--HG--
extra : rebase_source : f1e874a43c204f807259cc5249d4e872e25fba26

731692a3

17 Nov, 2018 1 commit
- Backed out changeset eb21007e7da0 (bug 1501991) for geckoview failures on several tests. · d1b2c17c
  Cosmin Sabou authored Nov 17, 2018
  
  d1b2c17c
16 Nov, 2018 3 commits
- Bug 1501991 - Add a sub-panel for Trackers in the control center. r=Jamie,Ehsan · 624a3d51
  Johann Hofmann authored Nov 16, 2018
```
Differential Revision: https://phabricator.services.mozilla.com/D11611

--HG--
extra : moz-landing-system : lando
```
  624a3d51
- Backed out changeset f73e25fa0d8c (bug 1501991) for multiple failures e.g... · 2ef5ceaf
  Gurzau Raul authored Nov 16, 2018
```
Backed out changeset f73e25fa0d8c (bug 1501991) for multiple failures e.g browser_storage_dynamic_windows.js on a CLOSED TREE
```
  2ef5ceaf
- Bug 1501991 - Add a sub-panel for Trackers in the control center. r=Jamie,Ehsan · 1b222753
  Johann Hofmann authored Nov 16, 2018
```
Differential Revision: https://phabricator.services.mozilla.com/D11611

--HG--
extra : moz-landing-system : lando
```
  1b222753
06 Nov, 2018 1 commit

Bug 1501991 - Add a sub-panel for Trackers in the control center. r=Ehsan,Jamie · dda53de0

Johann Hofmann authored Nov 06, 2018

Differential Revision: https://phabricator.services.mozilla.com/D11611

--HG--
extra : rebase_source : eebb084d0fed7a66b0dc5bbe7bc5e06b040a0275
extra : amend_source : f8070e363841ad3d9b2418920e0f695c906de105

dda53de0

05 Nov, 2018 1 commit
- Bug 1504194 - Part 3: Add tests for granting access to trackers across the same eTLD+1 r=baku · 2cde9dfe
  Ehsan Akhgari authored Nov 05, 2018
```
Depends on D10789

Differential Revision: https://phabricator.services.mozilla.com/D10790

--HG--
extra : moz-landing-system : lando
```
  2cde9dfe
07 Oct, 2018 1 commit

Bug 583181 - Part 1: Add test for current navigator.buildID behavior. r=hsivonen · 908795a2

Chris Peterson authored Oct 07, 2018

The incorrect LEGACY_BUILD_ID will be fixed in a subsequent changeset.

We must add https://www.mozilla.org/ to server-locations.txt and regenerate the mochitest certificates [1] because the new navigator.buildID test pretends to load content from https://www.mozilla.org/.

[1] https://searchfox.org/mozilla-central/source/build/pgo/certs/README

Differential Revision: https://phabricator.services.mozilla.com/D7982

--HG--
rename : dom/tests/mochitest/bugs/test_bug351601.html => dom/tests/mochitest/bugs/test_navigator_buildID.html
extra : rebase_source : 1deb142930f1a7a570cf719c4cb2bed8adfeabe2
extra : source : 408bff32f9623513a271cdf043d11ba6d1318e03

908795a2

23 Apr, 2018 1 commit

Bug 1441338 - Change pgo certificates to use certspec/keyspec files r=keeler r=franziskus · 6fad8e3f

J.C. Jones authored Apr 23, 2018

(This also fixes Bug 879740 and Bug 1204543.)

build/pgo/certs contains an NSS database set that has a bunch of hand-generated
certificates, and many of these hand-generated certificates are specifically
depended upon for a variety of unit tests. This patch changes all of these to
use the "pycert.py" and "pykey.py" utilities that produce deterministic keys
and certificates.

The naming convention here is new, and defined in the README. It is based on
the mochitest runtest.py naming convention that imports .ca and .client
PEM-encoded certificates.

Unfortunately, the updates to build/pgo/genpgocert.py to generate these files
depends on OpenSSL in order to produce PKCS12 archives for pk11tool to import
into NSS. This could be done with pure-NSS tooling, but it'd require some new
command line functionality, which is out-of-scope for this change.

Note that build/pgo/genpgocert.py no longer takes arguments when run. It's not
run automatically anywhere that I can see, but could (reasonably) be, now.

Differential Revision: https://phabricator.services.mozilla.com/D971

--HG--
extra : amend_source : bc389b9b0a807a4889feb14db439daa28635dfe9

6fad8e3f

12 Jan, 2009 1 commit
- Bug 456001 - Need automated testing for SSL client auth, r=jwalden · 2973bcda
  Honza Bambas authored Jan 12, 2009
  
  2973bcda
05 Feb, 2020 1 commit

Bug 1613275 - Regenerate expired certs not handled by Bug 1607845 a=RyanVM CLOSED TREE · 814ad019

J.C. Jones authored Feb 04, 2020

commands:

openssl x509 -in security/manager/ssl/tests/unit/test_missing_intermediate/missing-intermediate.pem -outform der -out security/manager/ssl/tests/unit/test_missing_intermediate/missing-intermediate.der

mach python ./build/pgo/genpgocert.py

./mach python ./security/manager/ssl/tests/unit/pycert.py <security/manager/ssl/tests/unit/test_certDB_import/emailEE.pem.certspec >security/manager/ssl/tests/unit/test_certDB_import/emailEE.pem
./mach python ./security/manager/ssl/tests/unit/pycert.py <security/manager/ssl/tests/unit/test_certDB_import/importedCA.pem.certspec >security/manager/ssl/tests/unit/test_certDB_import/importedCA.pem
./mach python ./security/manager/ssl/tests/unit/pycert.py <security/manager/ssl/tests/unit/test_intermediate_preloads/ee.pem.certspec >security/manager/ssl/tests/unit/test_intermediate_preloads/ee.pem
./mach python ./security/manager/ssl/tests/unit/pycert.py <security/manager/ssl/tests/unit/test_intermediate_preloads/ee2.pem.certspec >security/manager/ssl/tests/unit/test_intermediate_preloads/ee2.pem
./mach python ./security/manager/ssl/tests/unit/pycert.py <security/manager/ssl/tests/unit/test_intermediate_preloads/int.pem.certspec >security/manager/ssl/tests/unit/test_intermediate_preloads/int.pem
./mach python ./security/manager/ssl/tests/unit/pycert.py <security/manager/ssl/tests/unit/test_intermediate_preloads/int2.pem.certspec >security/manager/ssl/tests/unit/test_intermediate_preloads/int2.pem


Differential Revision: https://phabricator.services.mozilla.com/D61653

--HG--
extra : source : 2319a64a3cd8ef4ac0b5a3204da43f8c12bb48fc

814ad019

05 Feb, 2019 1 commit

Bug 1525191 - Regenerate certs CLOSED TREE a=tomprince,timebomb-fix · aafdc73f

Wes Kocher authored Feb 04, 2019


Differential Revision: https://phabricator.services.mozilla.com/D18632

--HG--
extra : source : f9b86dec401e29519598cb5f035c9e0dee13cc79

aafdc73f

23 Apr, 2018 1 commit

Bug 1441338 - Change pgo certificates to use certspec/keyspec files r=keeler... · 420b7c89

J.C. Jones authored Apr 23, 2018

Bug 1441338 - Change pgo certificates to use certspec/keyspec files r=keeler r=franziskus a=jcristau

(This also fixes Bug 879740 and Bug 1204543.)

build/pgo/certs contains an NSS database set that has a bunch of hand-generated
certificates, and many of these hand-generated certificates are specifically
depended upon for a variety of unit tests. This patch changes all of these to
use the "pycert.py" and "pykey.py" utilities that produce deterministic keys
and certificates.

The naming convention here is new, and defined in the README. It is based on
the mochitest runtest.py naming convention that imports .ca and .client
PEM-encoded certificates.

Unfortunately, the updates to build/pgo/genpgocert.py to generate these files
depends on OpenSSL in order to produce PKCS12 archives for pk11tool to import
into NSS. This could be done with pure-NSS tooling, but it'd require some new
command line functionality, which is out-of-scope for this change.

Note that build/pgo/genpgocert.py no longer takes arguments when run. It's not
run automatically anywhere that I can see, but could (reasonably) be, now.

(This patch rebased for Beta)

Differential Revision: https://phabricator.services.mozilla.com/D971

420b7c89

05 Feb, 2019 1 commit

Bug 1525191 - Regenerate certs CLOSED TREE a=tomprince,timebomb-fix · 3ad85503

Wes Kocher authored Feb 04, 2019


Differential Revision: https://phabricator.services.mozilla.com/D18632

--HG--
extra : source : f9b86dec401e29519598cb5f035c9e0dee13cc79
extra : intermediate-source : f4e6efbb6b2e859e2eb01c075dac5697bca02382

3ad85503