Adding upstream version 115.7.0esr.upstream/115.7.0esr

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

15 files changed, 379 insertions, 0 deletions

diff --git a/third_party/rust/nss-gk-api/bindings/bindings.toml b/third_party/rust/nss-gk-api/bindings/bindings.toml
new file mode 100644
index 0000000000..15c640765c
--- /dev/null
+++ b/third_party/rust/nss-gk-api/bindings/bindings.toml
@@ -0,0 +1,280 @@
+# In this file, every section corresponds to a header file.
+# A corresponding binding file will be created in $OUT_DIR.
+#
+# This configuration is processed by build.rs to populate `exclude` for each
+# header with the types/variables/functions/enums declared for generation in
+# other headers.
+
+[nspr_types]
+types = [
+    "PRBool",
+    "PRIntn",
+    "PRInt16",
+    "PRInt32",
+    "PRInt64",
+    "PROffset32",
+    "PROffset64",
+    "PRSize",
+    "PRStatus",
+    "PRUintn",
+    "PRUint8",
+    "PRUint16",
+    "PRUint32",
+    "PRUint64",
+    "PRUword",
+]
+variables = [
+    "PR_FALSE",
+    "PR_TRUE",
+]
+
+[nss_prelude]
+types = [
+    "SECItem",
+    "SECItemArray",
+    "SECItemStr",
+    "SECStatus",
+]
+functions = [
+    "SECITEM_FreeItem",
+]
+enums = [
+    "_SECStatus",
+    "SECItemType",
+]
+
+[nss_ssl]
+types = [
+    "SSLAlertDescription",
+    "SSLExtensionType",
+    "SSLNamedGroup",
+    "SSLProtocolVariant",
+    "SSLSignatureScheme",
+]
+functions = [
+    "SSL_AlertSentCallback",
+    "SSL_AuthCertificateComplete",
+    "SSL_AuthCertificateHook",
+    "SSL_CipherPrefSet",
+    "SSL_ConfigServerCert",
+    "SSL_ConfigServerSessionIDCache",
+    "SSL_DestroyResumptionTokenInfo",
+    "SSL_GetChannelInfo",
+    "SSL_GetImplementedCiphers",
+    "SSL_GetNextProto",
+    "SSL_GetNumImplementedCiphers",
+    "SSL_GetPreliminaryChannelInfo",
+    "SSL_GetResumptionTokenInfo",
+    "SSL_ForceHandshake",
+    "SSL_ImportFD",
+    "SSL_NamedGroupConfig",
+    "SSL_OptionSet",
+    "SSL_OptionGetDefault",
+    "SSL_PeerCertificate",
+    "SSL_PeerCertificateChain",
+    "SSL_PeerSignedCertTimestamps",
+    "SSL_PeerStapledOCSPResponses",
+    "SSL_ResetHandshake",
+    "SSL_SetNextProtoNego",
+    "SSL_SetURL",
+    "SSL_VersionRangeSet",
+]
+enums = [
+    "SSLAuthType",
+    "SSLCipherAlgorithm",
+    "SSLCompressionMethod",
+    "SSLExtensionType",
+    "SSLKEAType",
+    "SSLMACAlgorithm",
+    "SSLNamedGroup",
+    "SSLNextProtoState",
+    "SSLProtocolVariant",
+    "SSLSignatureScheme",
+]
+variables = [
+    "SSL_LIBRARY_VERSION_TLS_\\d_\\d",
+    "SSL_NumImplementedCiphers",
+    "ssl_preinfo_.*",
+]
+opaque = [
+    "SSLExtraServerCertData",
+]
+
+[nss_sslopt]
+variables = [
+    "SSL_REQUEST_CERTIFICATE",
+    "SSL_REQUIRE_CERTIFICATE",
+    "SSL_NO_LOCKS",
+    "SSL_ENABLE_SESSION_TICKETS",
+    "SSL_ENABLE_OCSP_STAPLING",
+    "SSL_ENABLE_ALPN",
+    "SSL_ENABLE_EXTENDED_MASTER_SECRET",
+    "SSL_ENABLE_SIGNED_CERT_TIMESTAMPS",
+    "SSL_ENABLE_0RTT_DATA",
+    "SSL_RECORD_SIZE_LIMIT",
+    "SSL_ENABLE_TLS13_COMPAT_MODE",
+    "SSL_ENABLE_HELLO_DOWNGRADE_CHECK",
+    "SSL_SUPPRESS_END_OF_EARLY_DATA",
+]
+
+[nss_ciphers]
+variables = ["TLS_.*"]
+exclude = [
+    ".*_(?:EXPORT(?:1024)?|anon|DES|RC4)_.*",
+    ".*_(?:MD5|NULL_SHA)",
+]
+
+[nss_secerr]
+types = ["SECErrorCodes"]
+enums = ["SECErrorCodes"]
+
+[nss_sslerr]
+types = ["SSLErrorCodes"]
+enums = ["SSLErrorCodes"]
+
+[nss_init]
+functions = [
+    "NSS_Initialize",
+    "NSS_IsInitialized",
+    "NSS_NoDB_Init",
+    "NSS_SetDomesticPolicy",
+    "NSS_Shutdown",
+    "NSS_VersionCheck",
+]
+variables = [
+    "NSS_INIT_READONLY",
+    "SECMOD_DB",
+]
+
+[nss_p11]
+types = [
+    "CERTCertList",
+    "CERTCertListNode",
+    "HpkeAeadId",
+    "HpkeKdfId",
+    "HpkeKemId",
+]
+functions = [
+    "CERT_DestroyCertificate",
+    "CERT_DestroyCertList",
+    "CERT_GetCertificateDer",
+    "PK11_CipherOp",
+    "PK11_CreateContextBySymKey",
+    "PK11_Decrypt",
+    "PK11_DestroyContext",
+    "PK11_DigestOp",
+    "PK11_DigestFinal",
+    "PK11_Encrypt",
+    "PK11_ExtractKeyValue",
+    "PK11_FindCertFromNickname",
+    "PK11_FindKeyByAnyCert",
+    "PK11_FreeSlot",
+    "PK11_FreeSymKey",
+    "PK11_GenerateKeyPairWithOpFlags",
+    "PK11_GenerateRandom",
+    "PK11_GetBlockSize",
+    "PK11_GetInternalSlot",
+    "PK11_GetKeyData",
+    "PK11_GetMechanism",
+    "PK11_HashBuf",
+    "PK11_HPKE_Serialize",
+    "PK11_ImportDataKey",
+    "PK11_ImportDERPrivateKeyInfoAndReturnKey",
+    "PK11_ImportSymKey",
+    "PK11_PubDeriveWithKDF",
+    "PK11_ReadRawAttribute",
+    "PK11_ReferenceSymKey",
+    "SECKEY_CopyPrivateKey",
+    "SECKEY_CopyPublicKey",
+    "SECKEY_DecodeDERSubjectPublicKeyInfo",
+    "SECKEY_DestroyPrivateKey",
+    "SECKEY_DestroyPublicKey",
+    "SECKEY_DestroySubjectPublicKeyInfo",
+    "SECKEY_ExtractPublicKey",
+    "SECKEY_ConvertToPublicKey",
+    "SECOID_FindOIDByTag",
+]
+enums = [
+    "HpkeAeadId",
+    "HpkeKdfId",
+    "HpkeKemId",
+    "PK11ObjectType",
+    "PK11Origin",
+    "SECOidTag",
+]
+opaque = [
+    "CERTCertificateStr",
+    "PK11ContextStr",
+    "PK11SlotInfoStr",
+    "PK11SymKeyStr",
+    "SECKEYPrivateKeyStr",
+    "SECKEYPublicKeyStr",
+]
+variables = [
+    "AES_BLOCK_SIZE",
+    "PK11_ATTR_INSENSITIVE",
+    "PK11_ATTR_PRIVATE",
+    "PK11_ATTR_PUBLIC",
+    "PK11_ATTR_SENSITIVE",
+    "PK11_ATTR_SESSION",
+    "SEC_ASN1_OBJECT_ID",
+    "SHA256_LENGTH",
+]
+
+[nspr_err]
+variables = ["PR_.*_ERROR"]
+
+[nspr_error]
+types = [
+    "PRErrorCode",
+]
+functions = [
+    "PR_ErrorToName",
+    "PR_ErrorToString",
+    "PR_GetError",
+    "PR_SetError",
+]
+variables = [
+    "PR_LANGUAGE_I_DEFAULT",
+]
+
+[nspr_io]
+types = [
+    "PRFileDesc",
+    "PRFileInfo",
+    "PRFileInfo64",
+    "PRFilePrivate",
+    "PRIOMethods",
+    "PRIOVec",
+    "PRSeekFN",
+    "PRSeek64FN",
+]
+functions = [
+    "PR_Close",
+    "PR_CreateIOLayerStub",
+    "PR_GetUniqueIdentity",
+]
+variables = [
+    "PR_AF_INET",
+]
+# opaque is for the stuff we don't plan to use, but we need for function signatures.
+opaque = [
+    "PRFileDesc",
+    "PRFileInfo",
+    "PRFileInfo64",
+    "PRFilePrivate",
+    "PRIOVec",
+]
+enums = [
+    "PRDescType",
+    "PRSeekWhence",
+]
+
+[nspr_time]
+types = ["PRTime"]
+functions = ["PR_Now"]
+
+[mozpkix]
+cplusplus = true
+types = ["mozilla::pkix::ErrorCode"]
+enums = ["mozilla::pkix::ErrorCode"]
diff --git a/third_party/rust/nss-gk-api/bindings/mozpkix.hpp b/third_party/rust/nss-gk-api/bindings/mozpkix.hpp
new file mode 100644
index 0000000000..d0a6cb5861
--- /dev/null
+++ b/third_party/rust/nss-gk-api/bindings/mozpkix.hpp
@@ -0,0 +1 @@
+#include "mozpkix/pkixnss.h"
\ No newline at end of file
diff --git a/third_party/rust/nss-gk-api/bindings/nspr_err.h b/third_party/rust/nss-gk-api/bindings/nspr_err.h
new file mode 100644
index 0000000000..204e771c49
--- /dev/null
+++ b/third_party/rust/nss-gk-api/bindings/nspr_err.h
@@ -0,0 +1,7 @@
+// Licensed under the Apache License, Version 2.0 <LICENSE-APACHE or
+// http://www.apache.org/licenses/LICENSE-2.0> or the MIT license
+// <LICENSE-MIT or http://opensource.org/licenses/MIT>, at your
+// option. This file may not be copied, modified, or distributed
+// except according to those terms.
+
+#include "prerr.h"
diff --git a/third_party/rust/nss-gk-api/bindings/nspr_error.h b/third_party/rust/nss-gk-api/bindings/nspr_error.h
new file mode 100644
index 0000000000..8ff8ce202d
--- /dev/null
+++ b/third_party/rust/nss-gk-api/bindings/nspr_error.h
@@ -0,0 +1,7 @@
+// Licensed under the Apache License, Version 2.0 <LICENSE-APACHE or
+// http://www.apache.org/licenses/LICENSE-2.0> or the MIT license
+// <LICENSE-MIT or http://opensource.org/licenses/MIT>, at your
+// option. This file may not be copied, modified, or distributed
+// except according to those terms.
+
+#include "prerror.h"
diff --git a/third_party/rust/nss-gk-api/bindings/nspr_io.h b/third_party/rust/nss-gk-api/bindings/nspr_io.h
new file mode 100644
index 0000000000..9997fb812e
--- /dev/null
+++ b/third_party/rust/nss-gk-api/bindings/nspr_io.h
@@ -0,0 +1,7 @@
+// Licensed under the Apache License, Version 2.0 <LICENSE-APACHE or
+// http://www.apache.org/licenses/LICENSE-2.0> or the MIT license
+// <LICENSE-MIT or http://opensource.org/licenses/MIT>, at your
+// option. This file may not be copied, modified, or distributed
+// except according to those terms.
+
+#include "prio.h"
diff --git a/third_party/rust/nss-gk-api/bindings/nspr_time.h b/third_party/rust/nss-gk-api/bindings/nspr_time.h
new file mode 100644
index 0000000000..f5596577fa
--- /dev/null
+++ b/third_party/rust/nss-gk-api/bindings/nspr_time.h
@@ -0,0 +1,7 @@
+// Licensed under the Apache License, Version 2.0 <LICENSE-APACHE or
+// http://www.apache.org/licenses/LICENSE-2.0> or the MIT license
+// <LICENSE-MIT or http://opensource.org/licenses/MIT>, at your
+// option. This file may not be copied, modified, or distributed
+// except according to those terms.
+
+#include "prtime.h"
diff --git a/third_party/rust/nss-gk-api/bindings/nspr_types.h b/third_party/rust/nss-gk-api/bindings/nspr_types.h
new file mode 100644
index 0000000000..624587560b
--- /dev/null
+++ b/third_party/rust/nss-gk-api/bindings/nspr_types.h
@@ -0,0 +1,7 @@
+// Licensed under the Apache License, Version 2.0 <LICENSE-APACHE or
+// http://www.apache.org/licenses/LICENSE-2.0> or the MIT license
+// <LICENSE-MIT or http://opensource.org/licenses/MIT>, at your
+// option. This file may not be copied, modified, or distributed
+// except according to those terms.
+
+#include "prtypes.h"
diff --git a/third_party/rust/nss-gk-api/bindings/nss_ciphers.h b/third_party/rust/nss-gk-api/bindings/nss_ciphers.h
new file mode 100644
index 0000000000..f064f39c5d
--- /dev/null
+++ b/third_party/rust/nss-gk-api/bindings/nss_ciphers.h
@@ -0,0 +1,8 @@
+// Licensed under the Apache License, Version 2.0 <LICENSE-APACHE or
+// http://www.apache.org/licenses/LICENSE-2.0> or the MIT license
+// <LICENSE-MIT or http://opensource.org/licenses/MIT>, at your
+// option. This file may not be copied, modified, or distributed
+// except according to those terms.
+
+#define SSL_DISABLE_DEPRECATED_CIPHER_SUITE_NAMES
+#include "sslproto.h"
diff --git a/third_party/rust/nss-gk-api/bindings/nss_init.h b/third_party/rust/nss-gk-api/bindings/nss_init.h
new file mode 100644
index 0000000000..ae111bac2b
--- /dev/null
+++ b/third_party/rust/nss-gk-api/bindings/nss_init.h
@@ -0,0 +1,8 @@
+// Licensed under the Apache License, Version 2.0 <LICENSE-APACHE or
+// http://www.apache.org/licenses/LICENSE-2.0> or the MIT license
+// <LICENSE-MIT or http://opensource.org/licenses/MIT>, at your
+// option. This file may not be copied, modified, or distributed
+// except according to those terms.
+
+#include "nss.h"
+#include "ssl.h" // For NSS_SetDomesticPolicy
diff --git a/third_party/rust/nss-gk-api/bindings/nss_p11.h b/third_party/rust/nss-gk-api/bindings/nss_p11.h
new file mode 100644
index 0000000000..7de50eebec
--- /dev/null
+++ b/third_party/rust/nss-gk-api/bindings/nss_p11.h
@@ -0,0 +1,9 @@
+// Licensed under the Apache License, Version 2.0 <LICENSE-APACHE or
+// http://www.apache.org/licenses/LICENSE-2.0> or the MIT license
+// <LICENSE-MIT or http://opensource.org/licenses/MIT>, at your
+// option. This file may not be copied, modified, or distributed
+// except according to those terms.
+
+#include "cert.h"
+#include "keyhi.h"
+#include "pk11pub.h"
diff --git a/third_party/rust/nss-gk-api/bindings/nss_prelude.h b/third_party/rust/nss-gk-api/bindings/nss_prelude.h
new file mode 100644
index 0000000000..72af8f03c9
--- /dev/null
+++ b/third_party/rust/nss-gk-api/bindings/nss_prelude.h
@@ -0,0 +1,8 @@
+// Licensed under the Apache License, Version 2.0 <LICENSE-APACHE or
+// http://www.apache.org/licenses/LICENSE-2.0> or the MIT license
+// <LICENSE-MIT or http://opensource.org/licenses/MIT>, at your
+// option. This file may not be copied, modified, or distributed
+// except according to those terms.
+
+#include "seccomon.h"
+#include "secitem.h"
diff --git a/third_party/rust/nss-gk-api/bindings/nss_secerr.h b/third_party/rust/nss-gk-api/bindings/nss_secerr.h
new file mode 100644
index 0000000000..c2b2d4020c
--- /dev/null
+++ b/third_party/rust/nss-gk-api/bindings/nss_secerr.h
@@ -0,0 +1,7 @@
+// Licensed under the Apache License, Version 2.0 <LICENSE-APACHE or
+// http://www.apache.org/licenses/LICENSE-2.0> or the MIT license
+// <LICENSE-MIT or http://opensource.org/licenses/MIT>, at your
+// option. This file may not be copied, modified, or distributed
+// except according to those terms.
+
+#include "secerr.h"
diff --git a/third_party/rust/nss-gk-api/bindings/nss_ssl.h b/third_party/rust/nss-gk-api/bindings/nss_ssl.h
new file mode 100644
index 0000000000..1cde112cf2
--- /dev/null
+++ b/third_party/rust/nss-gk-api/bindings/nss_ssl.h
@@ -0,0 +1,9 @@
+// Licensed under the Apache License, Version 2.0 <LICENSE-APACHE or
+// http://www.apache.org/licenses/LICENSE-2.0> or the MIT license
+// <LICENSE-MIT or http://opensource.org/licenses/MIT>, at your
+// option. This file may not be copied, modified, or distributed
+// except according to those terms.
+
+#include "sslproto.h"
+#include "ssl.h"
+#include "sslexp.h"
diff --git a/third_party/rust/nss-gk-api/bindings/nss_sslerr.h b/third_party/rust/nss-gk-api/bindings/nss_sslerr.h
new file mode 100644
index 0000000000..74a836f1e8
--- /dev/null
+++ b/third_party/rust/nss-gk-api/bindings/nss_sslerr.h
@@ -0,0 +1,7 @@
+// Licensed under the Apache License, Version 2.0 <LICENSE-APACHE or
+// http://www.apache.org/licenses/LICENSE-2.0> or the MIT license
+// <LICENSE-MIT or http://opensource.org/licenses/MIT>, at your
+// option. This file may not be copied, modified, or distributed
+// except according to those terms.
+
+#include "sslerr.h"
diff --git a/third_party/rust/nss-gk-api/bindings/nss_sslopt.h b/third_party/rust/nss-gk-api/bindings/nss_sslopt.h
new file mode 100644
index 0000000000..a14e1e69d1
--- /dev/null
+++ b/third_party/rust/nss-gk-api/bindings/nss_sslopt.h
@@ -0,0 +1,7 @@
+// Licensed under the Apache License, Version 2.0 <LICENSE-APACHE or
+// http://www.apache.org/licenses/LICENSE-2.0> or the MIT license
+// <LICENSE-MIT or http://opensource.org/licenses/MIT>, at your
+// option. This file may not be copied, modified, or distributed
+// except according to those terms.
+
+#include "ssl.h"