Mirrors/servo
1
0
Fork 0
mirror of https://github.com/servo/servo.git synced 2025-10-12 22:40:19 +01:00
Code Issues Projects Releases Packages Wiki Activity
servo/components
History
bors-servo 1974c875a1
Auto merge of #24976 - Darkspirit:openssl, r=avadacatavra 
Add ALPN and signature algorithms to OpenSSL config

* Updated http crate from 0.1.17 [to 0.1.20](https://github.com/hyperium/http/blob/master/CHANGELOG.md#0120-november-26-2019).
* Updated hyper from 0.12.33 [to 0.12.35](https://github.com/hyperium/hyper/compare/v0.12.33...v0.12.35).
* Updated hyper-openssl from 0.7.0 [to 0.7.1](https://github.com/sfackler/hyper-openssl/blob/master/CHANGELOG.md#v071---2019-03-01).
* Updated openssl crate from 0.10.11 [to 0.10.26](https://github.com/sfackler/rust-openssl/blob/master/openssl/CHANGELOG.md#v01026---2019-11-22).
  * Set ALPN to h2+http/1.1 for https (Enabled HTTP2) and http/1.1 for websockets.
  * Restricted signature algorithms to the same list across platforms: EdDSA at first, then ECDSA certificates, then TLS 1.3's RSA(-PSS), then classic RSA (PKCS 1.5).
Thereby we disabled the [following](https://www.ssllabs.com/ssltest/viewClient.html?name=OpenSSL&version=1.1.1c&key=165) non-web-standard signature algorithms: SHA512/ECDSA, SHA224/ECDSA, SHA1/ECDSA, SHA224/RSA, SHA224/DSA, SHA1/DSA, SHA256/DSA, SHA384/DSA, SHA512/DSA. [SHA1/RSA](https://tools.ietf.org/html/draft-ietf-tls-md5-sha1-deprecate-00) is almost dead and now only used by a few old and broken F5 load balancers: Like TLS 1.0 deprecation, we can again deprecate this some months earlier than other browsers.
  * Added Chacha20 to TLS 1.2 ciphersuite list and preferred it like Firefox and [Rustls](4b13a322c0/rustls/src/suites.rs (L377)). Removed legacy and privacy-hostile plain RSA (AES256-SHA, AES128-SHA).
Compared to [Mozilla intermediate v5](https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28recommended.29) we keep ECDHE-RSA-AES256-SHA and ECDHE-RSA-AES128-SHA for now, but won't reintroduce deprecated DHE.
  * Switched server-side to [Mozilla intermediate v5](https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28recommended.29) in components/net/tests/main.rs. (The new `modern` would have been TLSv1.3-only, therefore only worked with OpenSSL 1.1.1 which is unfortunately not yet used on every target.)
  * Renamed `ssl_connector_builder(certs)` to the more neutral and long-term better fitting `create_tls_config(certs, alpn)` as it was done in #24764.

---
<!-- Thank you for contributing to Servo! Please replace each `[ ]` by `[X]` when the step is complete, and replace `___` with appropriate data: -->
- [x] `./mach build -d` does not report any errors
- [x] `./mach test-tidy` does not report any errors
2019-12-09 19:21:43 -05:00
..
allocator Update jemalloc-sys to 0.3.2 2019-11-20 00:00:00 +00:00
atoms Add support for squeeze events 2019-11-22 13:58:13 -08:00
background_hang_monitor Use surfman for managing GL surfaces 2019-11-01 08:47:11 -05:00
bluetooth Update rand to 0.7 (fixes #24448) 2019-10-23 15:34:48 +02:00
bluetooth_traits
canvas Add extra debug assertions for WebGL errors 2019-12-06 14:56:46 -06:00
canvas_traits style: Don't specify minor version for cssparser. 2019-11-30 20:45:06 +01:00
compositing Use non-IPC webrender API over explicit IPC channels. 2019-11-27 20:47:53 -05:00
config Initial implementation of WebGPU API 2019-11-21 08:30:26 +01:00
config_plugins Bump all in-tree components to syn 1 2019-09-27 13:29:55 +02:00
constellation Use non-IPC webrender API over explicit IPC channels. 2019-11-27 20:47:53 -05:00
debugger
deny_public_fields Bump all in-tree components to syn 1 2019-09-27 13:29:55 +02:00
derive_common derive_common: Fix example in documentation 2019-11-07 18:52:30 -06:00
devtools devtools: save and send cached messages 2019-12-06 10:10:43 +01:00
devtools_traits devtools: save and send cached messages 2019-12-06 10:10:43 +01:00
dom_struct Use #![register_tool] instead of #![register_attr] 2019-11-15 17:24:42 +01:00
domobject_derive Bump all in-tree components to syn 1 2019-09-27 13:29:55 +02:00
embedder_traits Auto merge of #24885 - shnmorimoto:implement_mediasession_set_positon_state, r=ferjm 2019-12-03 12:13:06 -05:00
fallible
geometry Fix some warnings new in Rust Nightly 2019-11-08 11:45:16 +01:00
gfx Use non-IPC webrender API over explicit IPC channels. 2019-11-27 20:47:53 -05:00
gfx_traits Replace DisplayList::is_contentful with tracking during conversion to WR display lists 2019-09-06 17:15:53 +02:00
hashglobe Fix some warnings new in Rust Nightly 2019-11-08 11:45:16 +01:00
jstraceable_derive Bump all in-tree components to syn 1 2019-09-27 13:29:55 +02:00
layout layout: Ensure truncated fragment is updated with results of collecting inner fragment's stacking contexts. 2019-12-09 09:57:48 +01:00
layout_2020 Auto merge of #25033 - servo:intrinsic, r=nox 2019-12-04 16:23:33 -05:00
layout_thread style: Fix servo build. 2019-11-30 20:45:08 +01:00
layout_thread_2020 Add a request_content_sizes parameter to IndependentFormattingContext::construct 2019-12-03 15:11:35 +01:00
layout_traits Use non-IPC webrender API over explicit IPC channels. 2019-11-27 20:47:53 -05:00
malloc_size_of style: Don't specify minor version for cssparser. 2019-11-30 20:45:06 +01:00
media Use non-IPC webrender API over explicit IPC channels. 2019-11-27 20:47:53 -05:00
metrics Replace DisplayList::is_contentful with tracking during conversion to WR display lists 2019-09-06 17:15:53 +02:00
msg Use non-IPC webrender API over explicit IPC channels. 2019-11-27 20:47:53 -05:00
net Add ALPN and signature algorithms to OpenSSL config 2019-11-30 05:18:00 +01:00
net_traits Use non-IPC webrender API over explicit IPC channels. 2019-11-27 20:47:53 -05:00
pixels Addresses issues raised in #24465; removes redundancy in set_bitmap_dimensions 2019-11-10 18:37:14 -05:00
profile begin messageport, transferable objects, impl 2019-10-19 14:12:22 +08:00
profile_traits begin messageport, transferable objects, impl 2019-10-19 14:12:22 +08:00
rand Update rand to 0.7 (fixes #24448) 2019-10-23 15:34:48 +02:00
range
remutex
script Auto merge of #25035 - szeged:wgpu-core, r=jdm 2019-12-08 14:38:40 -05:00
script_layout_interface Use non-IPC webrender API over explicit IPC channels. 2019-11-27 20:47:53 -05:00
script_plugins Upgrade to rustc 1.41.0-nightly (7afe6d9d1 2019-12-03) 2019-12-04 12:29:17 +01:00
script_traits Use non-IPC webrender API over explicit IPC channels. 2019-11-27 20:47:53 -05:00
selectors style: Don't specify minor version for cssparser. 2019-11-30 20:45:06 +01:00
servo Auto merge of #24875 - jdm:wr-no-ipc, r=asajeffrey 2019-11-27 20:48:13 -05:00
servo_arc style: Simplify code for keeping alive shared memory until all sheets go away. 2019-11-30 20:44:56 +01:00
size_of_test
std_test_override
style Auto merge of #25033 - servo:intrinsic, r=nox 2019-12-04 16:23:33 -05:00
style_derive Bump all in-tree components to syn 1 2019-09-27 13:29:55 +02:00
style_traits style: Don't specify minor version for cssparser. 2019-11-30 20:45:06 +01:00
to_shmem style: Don't specify minor version for cssparser. 2019-11-30 20:45:06 +01:00
to_shmem_derive Bump all in-tree components to syn 1 2019-09-27 13:29:55 +02:00
url Update rand to 0.7 (fixes #24448) 2019-10-23 15:34:48 +02:00
webdriver_server Update rand to 0.7 (fixes #24448) 2019-10-23 15:34:48 +02:00
webgpu Replace wgpu-native with wgpu-core 2019-12-06 12:49:56 +01:00
webrender_traits Use non-IPC webrender API over explicit IPC channels. 2019-11-27 20:47:53 -05:00
webvr Remove unused dependencies 2019-10-01 21:15:53 +09:00
webvr_traits Replace use of gleam in webgl with sparkle. 2019-09-11 11:40:04 -04:00