Closed
Bug 1586855
Opened 5 years ago
Closed 5 years ago
incorporate CRLite filters into cert_storage
Categories
(Core :: Security: PSM, enhancement, P1)
Core
Security: PSM
Tracking
()
RESOLVED
FIXED
mozilla73
| Tracking | Status | |
|---|---|---|
| firefox73 | --- | fixed |
People
(Reporter: keeler, Assigned: keeler)
References
(Blocks 1 open bug)
Details
(Whiteboard: [psm-assigned])
Attachments
(1 file)
|
(deleted),
text/x-phabricator-request
|
Details |
Bug 1563056 added the ability to download CRLite filters, but we don't do anything with them yet. This bug will extend cert_storage to be able to use them.
|
Assignee | |
Comment 1•5 years ago
|
||
bug 1586855 - incorporate CRLite filters into cert_storage r?jcj,kjacobs
This patch implements CRLite lookups for TLS server certificate revocation
information in telemetry-only mode. It adds a new preference
"security.pki.crlite_mode" to control the behavior of this feature. Setting
this preference to 0 disables it completely. Setting it to 1 enables telemetry
collection only (the default). Setting it to 2 enables enforcing revocation
information found via CRLite.
|
||
Updated•5 years ago
|
Attachment #9110377 -
Attachment description: bug 1586855 - ./mach vendor rust → bug 1586855 - incorporate CRLite filters into cert_storage r?jcj,kjacobs
Pushed by dkeeler@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/16350e08d34f incorporate CRLite filters into cert_storage r=jcj,kjacobs
|
||
Comment 3•5 years ago
|
||
| bugherder | ||
Status: NEW → RESOLVED
Closed: 5 years ago
status-firefox73:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla73
You need to log in
before you can comment on or make changes to this bug.
Description
•