Граф коммитов

85 Коммитов

Автор SHA1 Сообщение Дата
relyea%netscape.com d62c65c9a6 Remove dependancy on direct calls inside softoken. 2001-09-20 21:26:40 +00:00
nelsonb%netscape.com 0e45538807 Implement new function SSL_GetChannelInfo(). Bugzilla bug 78959. 2001-09-18 01:59:21 +00:00
wtc%netscape.com 4ba020ddd2 Bugzilla bug 94685: deleted the unreferenced label 'no_wrapped_key'. 2001-08-22 23:15:45 +00:00
javi%netscape.com 86f0b37c13 Check to make sure we're still logged into a slot when trying
to re-use a client-auth session.
2001-08-22 22:50:26 +00:00
wtc%netscape.com fcc917f873 NSS 3.3 has been renamed NSS 3.4. Two '-' chars should be '+'. 2001-07-03 17:41:19 +00:00
nelsonb%netscape.com 37217ae4f0 Change PR_Writev so it will drive the handshake when len == 0.
Patch by John G Myers.  Bug 87359.
2001-06-23 00:01:17 +00:00
nelsonb%netscape.com 7aef7b8c79 The environment variable NSS_SSL_SERVER_CACHE_MUTEX_TIMEOUT specifies
the maximum amount of time to wait before recovering a session cache
mutex (semaphore) from a dead process on Unix.
2001-06-22 03:38:05 +00:00
nelsonb%netscape.com 5b19a40e9e Fix bug 68869. Don't ignore TLS no certificate messages when the server
requires client auth.  Work around bug in NT TCP stack by only shutting
down the socket for SEND (not for BOTH) after sending a bad_certificate
alert.  This avoids bogus CONNECTION_RESET_BY_PEER errors at the client.
2001-06-13 21:14:54 +00:00
nelsonb%netscape.com 83a08b6967 Don't use PR_Atomic functions on AIX since PPC cpus require memory
barrier instructions.
2001-06-12 22:53:00 +00:00
nelsonb%netscape.com 35577f7c85 Add two new functions to permit application tuning of the number of SSL
server session cache locks.  We may yet decide to back this out for the
NSS 3.3 release.  Modified Files: ssl.def ssl.h sslsnce.c
2001-06-12 20:27:12 +00:00
nelsonb%netscape.com 2fb89eeb0a Use NSPR's Atomic increment and decrement functions in the simulated
Posix semaphore code to make the non-contention case really fast.
Modified Files: sslmutex.c sslmutex.h
2001-06-12 01:10:01 +00:00
nelsonb%netscape.com 7ae1c3135d Reduce warnings on Unix platforms that don't like bitfields in chars. 2001-06-09 19:45:22 +00:00
nelsonb%netscape.com f41192132c Fix two bugs found in nightly QA. On Solaris/x86, don't assert that the
sid cache entry is a multiple of 8 bytes long.  On OSF1, reduce the
maximum number of POSIX semaphores so it doesn't exceed the per-process
limit of 256.
2001-06-09 19:30:21 +00:00
nelsonb%netscape.com 26c1355d94 Change ssl_Time() to use time() instead of PR_Now on systems that have it. 2001-06-09 03:20:13 +00:00
nelsonb%netscape.com 9509618196 3 Changes:
1. New SSL server session cache implementation that uses finer grained
locking to reduce lock contention, and does 128-way associative caching.
2. rename symbol SSL_SESSIONID_BYTES to SSL2_SESSIONID_BYTES.
3. Work around compiler bug on Solaris i386.
Modified Files:
    manifest.mn sslcon.c sslimpl.h sslsecur.c sslsnce.c
2001-06-09 03:18:09 +00:00
nelsonb%netscape.com 6166732e49 Portable POSIX-like unnamed semaphores that work in process-shared memory. 2001-06-08 02:56:31 +00:00
nelsonb%netscape.com 6bfd47f3e1 Fix bug that caused version number to be wrong in SSL3 client hellos
when restarting an SSL3 (not TLS) session.  (no bug number)
2001-06-05 00:26:37 +00:00
wtc%netscape.com 70ba3f51b2 Bugzilla bug #77199: Make NSS build under OS/2. Thanks to Javier
Pedemonte <pedemont@us.ibm.com> for the patch.
Modified Files:
        coreconf/OS2.mk coreconf/rules.mk coreconf/ruleset.mk
        nss/lib/freebl/Makefile nss/lib/pkcs12/p12.h nss/lib/ssl/ssl.h
        nss/lib/util/secport.h
2001-05-21 21:25:32 +00:00
nelsonb%netscape.com 6b57d89463 Add a workaround for bug 80092. If the last write returned WOULDBLOCK
and data is now buffered for sending and the application calls PR_Poll
to poll on read, poll on write also.  This way, if the socket becomes
writable, the application's read attempt will send (more of) the buffered
write data.
2001-05-18 20:44:35 +00:00
nelsonb%netscape.com da41cda585 Only disable Nagle delays on those platforms that benefit from doing so. 2001-05-10 02:37:59 +00:00
nelsonb%netscape.com 975e24163f Disable TCP Nagle delays on SSL sockets for NSS 3.3. Bug 67898.
Modified Files:
	ssldef.c sslimpl.h sslsecur.c sslsock.c
2001-05-08 23:12:34 +00:00
nelsonb%netscape.com e49455a04c Eliminate cause of assertion failure that occurs when SSL is not the top
protocol on the socket's stack.
2001-04-26 21:53:11 +00:00
nelsonb%netscape.com 9bd14a2bc5 Merge in NSS 3.2.1 changes. (VersionCheck function) 2001-04-11 22:52:09 +00:00
nelsonb%netscape.com f8e2a2a948 Implementation of 5 DHE ciphersuites, client side only.
Contributed by Dr Stephen Henson <stephen.henson@gemplus.com>
2001-04-11 00:29:18 +00:00
nelsonb%netscape.com 661c26b99c Fix a couple of memory leaks that occur in rare error paths. 2001-03-31 02:49:59 +00:00
nelsonb%netscape.com 3ef58c1b72 Fix bug in SSL_ResetHandshake introduced in last checkin. 2001-03-20 00:39:02 +00:00
nelsonb%netscape.com 46c15355d3 Reinterpret the READ and WRITE poll flags depending on the state of the
socket and the SSL handshake.  Rename the badly named "connected" flag.
Bugzilla bugs 56924, 56926, 66706.
Modified Files:
    ssl3con.c sslauth.c sslcon.c ssldef.c sslgathr.c sslimpl.h
    sslsecur.c sslsock.c
2001-03-16 23:26:06 +00:00
relyea%netscape.com b22a7c1f09 bug 70992 patches to build 4.2 BSD 2001-03-13 19:02:05 +00:00
nelsonb%netscape.com ecb09e90e8 Modify ssl_FindSocket() to set error PR_BAD_DESCRIPTOR_ERROR when it
cannot find the SSL layer on the specified PRFileDesc. Ensure all
callers detect when ssl_FindSocket returns NULL and handle it properly.
Bug 68241. Reviewed by jgmyers and relyea.
Modified Files:
 	prelib.c sslauth.c sslsecur.c sslsock.c
2001-02-09 02:11:31 +00:00
nelsonb%netscape.com 7dcf6f9722 Make SSL API consistent in using SECStatus as return value for functions
that return only values in that enumeration.  Bug 68097. R&A = relyea.
Modified Files:
 	lib/ssl/ssl.h lib/ssl/sslauth.c lib/ssl/sslsecur.c
 	lib/ssl/sslsnce.c lib/ssl/sslsock.c cmd/selfserv/selfserv.c
 	cmd/strsclnt/strsclnt.c
2001-02-09 00:32:14 +00:00
wtc%netscape.com 782588654c Need to include "prthread.h" for the PRThread type. 2001-02-07 17:50:43 +00:00
nelsonb%netscape.com 720374d8c3 When half-duplex applications (e.g. one thread per socket, doing alternate
reading and writing) call PR_Send and PR_Recv with a non-infinite timeout
value, use that value for both underlying read and write operations.
Fixes bug 67402.  Reviewed by Wan-Teh.
2001-02-07 02:06:05 +00:00
nelsonb%netscape.com 4207bb1bdb Coalesce the final Finished message in the SSL handshake and the first
record of application data into a single write, when possible, to avoid
TCP's "Nagle" delays.  Fixes bug 67898.  r&a: wtc.  Modified Files:
	ssl3con.c sslimpl.h sslsecur.c sslsock.c
2001-02-07 00:34:56 +00:00
wtc%netscape.com a83eb31b00 Bugzilla bug #63768: removed references to the obsolete PURE_LIBRARY,
HAVE_PURIFY etc. make variables in NSS files.  Reviewed by nelson Bolyard.
Modified Files:
	cmd/platrules.mk cmd/crmf-cgi/config.mk cmd/crmftest/config.mk
	cmd/lib/config.mk cmd/zlib/config.mk lib/base/config.mk
	lib/certdb/config.mk lib/certhigh/config.mk lib/ckfw/config.mk
	lib/crmf/config.mk lib/cryptohi/config.mk
	lib/fortcrypt/swfort/config.mk lib/freebl/config.mk
	lib/jar/config.mk lib/nss/config.mk lib/pk11wrap/config.mk
	lib/pkcs12/config.mk lib/pkcs7/config.mk lib/smime/config.mk
	lib/softoken/config.mk lib/ssl/config.mk lib/util/config.mk
2001-02-02 01:49:57 +00:00
wtc%netscape.com 899e61b6cb Bugzilla bug #62855: added stubs for the SSL session cache functions so
that selfserv can link without unresolved symbols on OS/2.
2001-01-31 23:43:47 +00:00
wtc%netscape.com 104ac36a8d Bugzilla bug #66367: rename the internal NSS functions that we have to
export from the NSS shared library.  Reviewed by Bob Relyea.
Modified Files:
	nss/lib/certdb/certdb.c nss/lib/certdb/pcertdb.c
	nss/lib/nss/Makefile nss/lib/nss/manifest.mn
	nss/lib/nss/nss.def nss/lib/pk11wrap/pk11skey.c
	nss/lib/pkcs12/p12d.c nss/lib/pkcs12/p12e.c
	nss/lib/pkcs12/p12local.c nss/lib/pkcs7/certread.c
	nss/lib/pkcs7/p7decode.c nss/lib/pkcs7/p7encode.c
	nss/lib/smime/cmsutil.c nss/lib/softoken/secpkcs5.c
	nss/lib/ssl/ssl3con.c nss/lib/ssl/sslcon.c
	nss/lib/ssl/sslnonce.c nss/lib/ssl/sslsnce.c
	nss/lib/util/nsslocks.c
Added Files:
	nss/lib/nss/nssrenam.h
2001-01-30 21:02:28 +00:00
relyea%netscape.com 5f1c5255b8 Bug 65902 Add OSF/1 to the OS's that can restrict symbols in shared libraries 2001-01-19 07:50:58 +00:00
wtc%netscape.com c33e0a8553 Add library version info to the NSS, S/MIME, and SSL shared libraries.
Define the NSS version macros and add NSS_VersionCheck in nss.h.
Add linker option to record internal name of shared libraries.
Add Windows resource files.  Add rcs and sccs id strings that can be
retrieved with 'ident' and 'what'.
Modified Files:
	coreconf/HP-UX.mk coreconf/OSF1.mk coreconf/SunOS5.mk
        coreconf/WIN954.0.mk coreconf/WINNT4.0.mk coreconf/WINNT5.0.mk
	coreconf/rules.mk nss/lib/nss/config.mk
	nss/lib/nss/manifest.mn nss/lib/nss/nss.h
	nss/lib/nss/nssinit.c nss/lib/smime/config.mk
	nss/lib/smime/manifest.mn nss/lib/ssl/config.mk
	nss/lib/ssl/manifest.mn
Added Files:
	nss/lib/nss/nss.rc nss/lib/nss/nssver.c nss/lib/smime/smime.rc
	nss/lib/smime/smimever.c nss/lib/ssl/ssl.rc
	nss/lib/ssl/sslver.c
2001-01-18 20:29:10 +00:00
wtc%netscape.com 6f7422a77a Bugzilla bug #65416: assign values explicitly to enumeration constants.
The same values that the compiler would assign are assigned, with only
one exception (cmmfNoPKIStatus in cmmft.h).  This is patch id=22555,
reviewed by Nelson Bolyard.
2001-01-18 16:36:43 +00:00
nelsonb%netscape.com edc48f136d Send SSL 3.x alert records when a version mismatch occurs.
Use the other party's version number to decide which alert to send.
Bug 65142.  R&A: relyea.
2001-01-13 02:32:39 +00:00
nelsonb%netscape.com 14c87961d5 Add implementation of SSL_RSA_WITH_RC4_128_SHA SSL3 cipher suite,
which is not enabled by default.  Bug 59795.
2001-01-13 02:05:15 +00:00
nelsonb%netscape.com d5ae266115 Remove all vestiges of old pre-NSS socks client implementation from NSS.
Bug 51471.
2001-01-13 01:52:59 +00:00
relyea%netscape.com b81edc1838 Add HP to the platforms that handle restricted symbols 2001-01-07 00:25:29 +00:00
relyea%netscape.com a1caf9ee0d Conform to the new .def rules 2001-01-06 23:52:11 +00:00
nelsonb%netscape.com 800d49e219 Remove 8 deprecated functions from export list. 2001-01-06 23:10:30 +00:00
relyea%netscape.com 69531a060f Merge UNIX and Win Data types 2001-01-06 21:36:59 +00:00
nelsonb%netscape.com 1962fdcb4f Remove declarations of SOCKS support functions, which have never worked
in NSS 3.x and are not supported.  Ifdef out declarations of deprecated
functions, since they are not exported by ssl3.dll.
2001-01-06 20:56:40 +00:00
relyea%netscape.com c3228676cf 1) Add AIX to the exportted symbols controlled plaform.
2) reduce the exported symbol list down to one
2001-01-06 01:59:03 +00:00
nelsonb%netscape.com f4895bd017 Use _WIN32 instead of _WINDOWS in windows-dependent ifdefs. 2001-01-05 23:53:38 +00:00
nelsonb%netscape.com 1311ab52d4 Changes to deal with exporting data from Windows DLLs.
SECHashObjects[] is no longer exported.
New function HASH_GetHashObject returns pointer to selected const object.
SSL statistics are now in a structure whose address is obtained via a
call to SSL_GetStatistics().
On NT, the new symbol NSS_USE_STATIC_LIBS must be declared in programs
that use the static SSL library.
Also, propagate "const" declaration for SECHashObjects.
2001-01-05 01:38:26 +00:00