Closed Bug 1789520 Opened 3 years ago Closed 2 years ago

Investigate replacing libnssckbi with a rust implementation

Categories

(Core :: Security: PSM, task, P3)

Product:
Core
Component:
Security: PSM
Type:
task

Tracking

()

Status:
RESOLVED FIXED
Milestone:
108 Branch
Tracking Flags:
Tracking Status
firefox108 --- fixed

People

(Reporter: jschanck, Assigned: jschanck)

References

Details

Attachments

(1 file)

Bug 1789520 - rust implementation of nssckbi. r=keeler
48 bytes, text/x-phabricator-request
Details | Review

The PKCS#11 module that stores builtin roots (libnssckbi) suffers from some performance, stability, and maintainability issues. It would be easy to re-write it in rust, especially given our experience with ipcclientcerts.

See Also: → 1787616, 1766978
Attachment #9293381 - Attachment description: WIP: Bug 1789520 - wip: rust implementation of nssckbi. r=keeler → Bug 1789520 - rust implementation of nssckbi. r=keeler
Depends on: 1792103
Blocks: 1794045
Status: NEW → ASSIGNED
Depends on: 1783782
Depends on: 1797869
No longer depends on: 1783782
Pushed by jschanck@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/48c17ad1a83a rust implementation of nssckbi. r=keeler,supply-chain-reviewers

https://hg.mozilla.org/mozilla-central/rev/48c17ad1a83a

Status: ASSIGNED → RESOLVED
Closed: 2 years ago
status-firefox108: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 108 Branch
Regressions: 1798499
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: