diff options
author | adesh <adeshk@hotmail.com> | 2020-11-10 04:22:12 -0500 |
---|---|---|
committer | adesh <adeshk@hotmail.com> | 2020-11-10 23:07:22 -0500 |
commit | 5ef801fdc5744daf9455fc6dcf90d3f7c60ae084 (patch) | |
tree | 75f97c59a685652a7b06e3d7ae00757affcfbb8d /security/certverifier/CertVerifier.h | |
parent | 0ba1d49ae5564a9e0b141b656a8cdc68e7582baf (diff) | |
download | UXP-5ef801fdc5744daf9455fc6dcf90d3f7c60ae084.tar UXP-5ef801fdc5744daf9455fc6dcf90d3f7c60ae084.tar.gz UXP-5ef801fdc5744daf9455fc6dcf90d3f7c60ae084.tar.lz UXP-5ef801fdc5744daf9455fc6dcf90d3f7c60ae084.tar.xz UXP-5ef801fdc5744daf9455fc6dcf90d3f7c60ae084.zip |
Issue #1280 - Follow-up: Get rid of HPKP pinning mode.
This was a leftover from HPKP removal.
Also remove a couple of unused variables from security/manager/ssl/nsSiteSecurityService.cpp.
Diffstat (limited to 'security/certverifier/CertVerifier.h')
-rw-r--r-- | security/certverifier/CertVerifier.h | 13 |
1 files changed, 2 insertions, 11 deletions
diff --git a/security/certverifier/CertVerifier.h b/security/certverifier/CertVerifier.h index 6bae219ce..54568c087 100644 --- a/security/certverifier/CertVerifier.h +++ b/security/certverifier/CertVerifier.h @@ -139,13 +139,6 @@ public: /*optional out*/ SHA1ModeResult* sha1ModeResult = nullptr, /*optional out*/ CertificateTransparencyInfo* ctInfo = nullptr); - enum PinningMode { - pinningDisabled = 0, - pinningAllowUserCAMITM = 1, - pinningStrict = 2, - pinningEnforceTestMode = 3 - }; - enum class SHA1Mode { Allowed = 0, Forbidden = 1, @@ -172,7 +165,7 @@ public: CertVerifier(OcspDownloadConfig odc, OcspStrictConfig osc, OcspGetConfig ogc, uint32_t certShortLifetimeInDays, - PinningMode pinningMode, SHA1Mode sha1Mode, + SHA1Mode sha1Mode, BRNameMatchingPolicy::Mode nameMatchingMode, NetscapeStepUpPolicy netscapeStepUpPolicy, CertificateTransparencyMode ctMode); @@ -184,7 +177,6 @@ public: const bool mOCSPStrict; const bool mOCSPGETEnabled; const uint32_t mCertShortLifetimeInDays; - const PinningMode mPinningMode; const SHA1Mode mSHA1Mode; const BRNameMatchingPolicy::Mode mNameMatchingMode; const NetscapeStepUpPolicy mNetscapeStepUpPolicy; @@ -214,8 +206,7 @@ private: mozilla::pkix::Result IsCertBuiltInRoot(CERTCertificate* cert, bool& result); mozilla::pkix::Result CertListContainsExpectedKeys( - const CERTCertList* certList, const char* hostname, mozilla::pkix::Time time, - CertVerifier::PinningMode pinningMode); + const CERTCertList* certList, const char* hostname, mozilla::pkix::Time time); } } // namespace mozilla::psm |