Граф коммитов

272 Коммитов

Автор SHA1 Сообщение Дата
chrisk%netscape.com 23cd2f3659 First feeble attempt at fixing the problem that our definition of
Diffie-Hellman key parameters does not encompass all the optional
fields defined in RFC2459, section 7.3.2 (namely j and validationParams).

I added comments reminding us of the fact that PQGParams need to be
extended to hold these, and fixed the ASN1 prototype from its previous
totally broken status to one that decodes prime, subPrime and base
correctly, and skips the rest.

This avoids failure in public key extraction (which is part of verification)
with DH certs.
2000-06-20 16:22:36 +00:00
chrisk%netscape.com 3550ea9e23 Fix problem where DH certs were always rejected when verifying them
for EMail encryption.
A Diffie-Hellman key needs to be tested for KU_KEY_AGREEMENT, not
KU_KEY_ENCIPHERMENT.
2000-06-20 16:15:32 +00:00
chrisk%netscape.com 568524e3be Fixed bug in sequence printing code: array counter was overshooting by one 2000-06-20 14:35:17 +00:00
chrisk%netscape.com c8e8241728 Fix bug in decoder:
When encoding indefinitely & encountering an optional field at the end of
a sequence, right after an IMPLICIT or POINTER template, the decoder
was not propagating the optionalness and the end-of-contents condition
correctly as it hits the end-of-contents octets instead of the optional
field. This is because IMPLICIT and POINTER push TWO states to look
for the next tag, not just one.
(The first state is "afterImplicit" or "afterPointer", the second one
starts with "beforeIdentifier" as usual).
This finally makes decoding envelopedData messages in cmsutil work.
2000-06-20 13:24:01 +00:00
ddrinan%netscape.com de67b92a1b We need libnlslocale for unix 2000-06-20 02:43:46 +00:00
cotter%netscape.com 2821055584 Added first draft of PSM 1.2 release notes. 2000-06-19 23:58:25 +00:00
javi%netscape.com 066d8f24d8 Whomping SECURITY_CLIENT_BRANCH onto tip. 2000-06-19 23:05:49 +00:00
javi%netscape.com a82cfc01fa Whomping SECURITY_CLIENT_BRANCH onto tip. 2000-06-19 22:58:15 +00:00
thayes%netscape.com 4cd82c9914 Fix double free of item value that is in an arena. 2000-06-16 23:26:16 +00:00
javi%netscape.com 098648d866 Watch out for the case where the user hits Cancel. Don't wanna dead-lock
waiting for a message that will never show up.
2000-06-16 23:22:39 +00:00
javi%netscape.com fba4cd21d3 Work around for Mozilla. If we're told to wait for a resource to shut down
that isn't a keygen context, sleep for a second so that the user actually
sees the dialog instead of a window that mysteriously appears and disappears
without ever showing them anything.
2000-06-16 22:45:48 +00:00
ddrinan%netscape.com 9587b38239 Include nslocale component 2000-06-16 22:40:13 +00:00
beard%netscape.com 17a3d47248 bug 19119: export file for PSM[Debug].shlb. 2000-06-16 22:25:43 +00:00
beard%netscape.com 5ff5374817 bug 19119, changes for XP_MAC to allow client to synchronize with server thread. a=ddrinan, r=gordon 2000-06-16 22:21:16 +00:00
beard%netscape.com bca0804eec (not part of build) added nlslayer.cpp. 2000-06-16 22:18:38 +00:00
javi%netscape.com f0e57c08d9 Some tweaks to key gen context and oldfunc.c so that Mozilla can more
easily handle the KEYGEN tag.
2000-06-16 22:08:16 +00:00
javi%netscape.com c8f7ba26ce Make some API changes so that the Mozilla client can more easily handle
the KEYGEN tag.
2000-06-16 22:05:18 +00:00
beard%netscape.com 97d9238830 bug #19119: Added call to initialize Mac toolbox. (not part of build) 2000-06-16 21:12:27 +00:00
javi%netscape.com 0f84a60c10 Add some attributes to query URL's for setting the password and for
choosing which token to use when processing a KEYGEN tag.x
2000-06-16 20:48:25 +00:00
ddrinan%netscape.com 71c92a89ba Fixed build bustage for linux 2000-06-16 17:17:49 +00:00
cotter%netscape.com 0527c678f9 Updated OSCP help. 2000-06-16 05:45:58 +00:00
ddrinan%netscape.com 38e0c15f88 Fix for bug# 34384 2000-06-16 01:47:18 +00:00
mcgreer%netscape.com 5c4d045072 attempt to add token support for listing certs & keys 2000-06-16 00:38:44 +00:00
mcgreer%netscape.com 1a4bf955be more cleanup on cert listing 2000-06-16 00:36:43 +00:00
ddrinan%netscape.com 0675702db4 Use M16 version of nlslayer for unix 2000-06-15 21:34:56 +00:00
thayes%netscape.com adc6554ab2 Change password prompt and retry text. 2000-06-15 21:13:35 +00:00
javi%netscape.com b9608d0541 Add help targets for cert pretty print and issuer not found when walking
the certificate chain.
2000-06-15 21:02:45 +00:00
ddrinan%netscape.com af2686f4b9 Use the M16 version of nlslayer 2000-06-15 20:22:12 +00:00
ddrinan%netscape.com 507c38bfb2 Use the intl M16 interfaces 2000-06-15 20:02:52 +00:00
chrisk%netscape.com 9f56a873d3 Add generation of SMIMECapabilities 2000-06-14 23:17:52 +00:00
chrisk%netscape.com fa197d9014 canonicalization step adds CRs to LFs only of there are no CRs present. 2000-06-14 23:15:06 +00:00
chrisk%netscape.com 9cbdb3d252 Make example 5.7 of ietf-smime-examples draft decode correctly
(we still cannot look up certs by SubjectKeyID, so it won't verify)
2000-06-14 23:12:48 +00:00
beard%netscape.com 53d28df585 (not part of build) added non-debug target (PSM.shlb) 2000-06-14 03:25:37 +00:00
beard%netscape.com 1712fb7c0e (not part of build) added mozilla/security/nss/lib/smime to access paths, added nlslayer.cpp directly (rather than building as a separate library). 2000-06-14 03:18:10 +00:00
beard%netscape.com 32dc89c957 (not part of build) added mozilla/security/nss/lib/smime to access paths. 2000-06-14 03:16:41 +00:00
ddrinan%netscape.com 88e79e328c Move nlslayer from my machine to sbc 2000-06-13 23:54:37 +00:00
cls%seawood.org 7c56b4260d Applying BeOS fixes for PSM to tip. Bug #39164 2000-06-13 23:13:48 +00:00
chrisk%netscape.com f7113ab1b2 Merge smimetk_branch to tip... 2000-06-13 21:56:37 +00:00
relyea%netscape.com d43393b11b reuse old key structures on a given token rather than building it up and
tearing it down every time.
2000-06-13 21:37:28 +00:00
relyea%netscape.com 78671954d3 Reuse old Object structures rather than build and free them every time. 2000-06-13 21:34:52 +00:00
chrisk%netscape.com 67e0b44687 Fix DSA / BLAPI interface by creating stub functions that have the
correct signature for being called via context->update or context->verify.
2000-06-12 23:43:42 +00:00
mcgreer%netscape.com dd3dd4e3e1 added roots. 2000-06-12 22:39:02 +00:00
chrisk%netscape.com 091d437eca Sorted output for certutil -L 2000-06-12 22:25:40 +00:00
thayes%netscape.com 6106f2cc7c Change password dialogs to account for expanded capabilities (beyond
just certificates)
2000-06-12 20:38:10 +00:00
thayes%netscape.com 8d09de22cf Fix cleanup code in Decrypt to check for NULL pointers 2000-06-12 20:19:39 +00:00
thayes%netscape.com d562a12ca9 Add permanent (token) key for supporting Secret Decoder Ring (SDR)
Bug 26085
2000-06-10 19:00:45 +00:00
cotter%netscape.com b9bccd5ac3 Latest fixes re SDR & pswd mgr. 2000-06-06 22:23:50 +00:00
nelsonb%netscape.com 9d2744f5ce Carry forward fix from NSS 2.8 for servers that don't do ssl2. 2000-06-06 20:32:18 +00:00
javi%netscape.com cd6d0787cd Make SendUIEvent take a bit for isModal instead of always hard-coding it
to true.
2000-06-05 20:21:23 +00:00
javi%netscape.com 80e2d2ccc8 For optimized builds, we have to link in an extra library to avoid
undefined symbols.
2000-06-05 20:10:39 +00:00