Closed Bug 1789520 Opened 2 years ago Closed 2 years ago

Investigate replacing libnssckbi with a rust implementation

Categories

(Core :: Security: PSM, task, P3)

task

Tracking

()

RESOLVED FIXED
108 Branch
Tracking Status
firefox108 --- fixed

People

(Reporter: jschanck, Assigned: jschanck)

References

Details

Attachments

(1 file)

The PKCS#11 module that stores builtin roots (libnssckbi) suffers from some performance, stability, and maintainability issues. It would be easy to re-write it in rust, especially given our experience with ipcclientcerts.

See Also: → 1787616, 1766978
Attachment #9293381 - Attachment description: WIP: Bug 1789520 - wip: rust implementation of nssckbi. r=keeler → Bug 1789520 - rust implementation of nssckbi. r=keeler
Depends on: 1792103
Blocks: 1794045
Status: NEW → ASSIGNED
Depends on: 1783782
Depends on: 1797869
No longer depends on: 1783782
Pushed by jschanck@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/48c17ad1a83a
rust implementation of nssckbi. r=keeler,supply-chain-reviewers
Status: ASSIGNED → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Target Milestone: --- → 108 Branch
Regressions: 1798499
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: