Граф коммитов

3451 Коммитов

Автор SHA1 Сообщение Дата
wtchang%redhat.com 38c071cb45 Bugzilla Bug 284386: the OID for RFC 1327 ucl was incorrectly encoded. 2005-03-14 18:04:44 +00:00
wtchang%redhat.com 5a13096fee Bugzilla Bug 284386: fixed build error using gcc4. gcc4 disallows arrays
of incomplete element type (which are invalid in C).  We moved the
declaration of nss_builtin_oids to pki1.h, after the definition of NSSOID.
r=caillon.
Modified Files: oiddata.h oidgen.perl pki1.h
2005-03-14 18:02:00 +00:00
christophe.ravel.bugs%sun.com 0f7ac130b6 238319: Sun packages changes
Uprev rpm release number.
2005-03-11 23:06:42 +00:00
julien.pierre.bugs%sun.com 49a5cedc08 Fix for 176705 - fix rpath on AMD64 platform. r=saul, sr=wtchang 2005-03-09 23:04:49 +00:00
neil.williams%sun.com 5431bc6445 r=nelson Bug=263779 2005-03-09 23:02:48 +00:00
nelsonb%netscape.com d126b39b34 Do not crash if Server SID cache is uninitialized. Bug 237724 r=Julien
Instead, if SSL_NO_CACHE is not set, return an error code.
2005-03-09 05:20:44 +00:00
nelsonb%netscape.com b4a5eb6864 Add root CA certs for XRamp, Camerafina and NetLock.
Bugs 274723. 275576, and 280744.  r=Jullien.Pierre
2005-03-08 08:44:57 +00:00
julien.pierre.bugs%sun.com d501f3ab57 Fix for 285233 - need extra symbols to be exported to support CRL generation. Ch
ecking in for alexei volkov . r=nelson
2005-03-08 07:08:48 +00:00
julien.pierre.bugs%sun.com c62079e031 Fix for bug 270689 . minor issues remaining with list cleanup and on-the-fly lock creation 2005-03-08 05:52:33 +00:00
nelsonb%netscape.com f6cd864211 Correctly print cert request attributes in pp. Bug 284191. r=neil.williams 2005-03-08 01:20:04 +00:00
wtchang%redhat.com 11ee6948b1 Bugzilla Bug 284839: checked in Bob Relyea's patch to improve the
responsiveness of SECMOD_WaitForAnyTokenEvent. r=wtc,nelsonb.
Modified Files: lib/dev/dev.h lib/dev/devslot.c lib/pk11wrap/pk11util.c
2005-03-07 21:20:38 +00:00
wtchang%redhat.com c6b963e853 Bugzilla Bug 263779: update the comment to reflect the new code.
Modified Files: secoid.c secoidt.h
2005-03-07 18:34:48 +00:00
nelsonb%netscape.com f9e9a4b85f Export CERT_SequenceOfCertExtensionTemplate on Windows.
Fix type of "attributes" member of struct CERTCertificateRequestStr.
Bug 284200.  r=nelson.williams & wtchang.
2005-03-05 08:03:04 +00:00
wtchang%redhat.com 007248241e Bugzilla Bug 221425: enable all.sh to run with Cygwin. Also fixed an
incorrect line continuation (of a tstclnt command line) in ssl.sh.
r=nelsonb,jpierre
Modified files: init.sh ssl.sh
2005-03-05 02:00:30 +00:00
wtchang%redhat.com e14aed2199 Added a blank line after the triple license header to match the output
of the new oidgen.perl.
2005-03-04 18:30:12 +00:00
julien.pierre.bugs%sun.com afed9f1c17 Fix for 283765. Fix for UMR in NSSUsage. r=julien 2005-03-04 04:32:04 +00:00
julien.pierre.bugs%sun.com e31568eecd Fix crash in CRL sorting callbacks from qsort. 2005-03-03 04:07:26 +00:00
neil.williams%sun.com aa670cb0b1 Bug 263779 r=nelson@bolyard.com
This patch adds a new OID which is needed for the certutil patch which will follow.
2005-03-02 02:54:54 +00:00
christophe.ravel.bugs%sun.com 7cc6cea977 238319: Sun packages changes.
Add addbuiltin, pk11priv.h, pk11pub.h
2005-02-28 17:45:20 +00:00
nelsonb%netscape.com d614d9c9ff Report invalid key when key import fails. Do not go on and use invalid
key handle.  Bug 283642.  r=relyea
2005-02-27 15:25:46 +00:00
julien.pierre.bugs%sun.com 0923544a58 Fix for bug 283761 - use of memset in selfserv is inefficient. r=nelson 2005-02-26 04:57:32 +00:00
christophe.ravel.bugs%sun.com 8105f005e3 238319: Sun packages changes.
Add Mozilla license.
2005-02-26 02:20:42 +00:00
julien.pierre.bugs%sun.com cd9154c2e8 Fix for bug 272327 . AMD64 assembly optimization for bignum multiply. r=nelson 2005-02-25 04:30:11 +00:00
julien.pierre.bugs%sun.com f8a1159f11 Move static functions out of certi.h header file and into crl.c source file, to remove warnings with gcc 2005-02-25 00:54:29 +00:00
julien.pierre.bugs%sun.com 1861144044 Undo accidental deletion of PORT_ZFree 2005-02-24 06:02:16 +00:00
julien.pierre.bugs%sun.com a4621e0461 Fix for bug 270742 - incorporate AMD64 implementation of arcfour . Code donated by Marc Bevand, and integrated by Nelson . r=wtchang 2005-02-24 02:09:41 +00:00
julien.pierre.bugs%sun.com 09e544676a Fix for 269581 - cache the value of CKA_PRIVATE on private keys to avoid unnecessary C_GetAttributeValue . Also fix i
ncorrect logic in attribute tests. r=rrelyea,wtchang
2005-02-24 00:38:23 +00:00
julien.pierre.bugs%sun.com 0a4b279c0f Fix for 269581 - cache the value of CKA_PRIVATE on private keys to avoid unnecessary C_GetAttributeValue . Also fix incorrect logic in attribute tests. r=rrelyea,wtchang 2005-02-24 00:35:51 +00:00
julien.pierre.bugs%sun.com 8ac2cbecc8 Fix compiler warnings under Linux 2005-02-24 00:22:59 +00:00
julien.pierre.bugs%sun.com 2c3c71caa0 Add comment for bug 243585 2005-02-24 00:22:23 +00:00
wtchang%redhat.com e180302d71 Bugzilla Bug 282527: fixed a bug that prevented certutil from generating
a cert with multiple DNS names in the subjectAltName extension.  The patch
is contributed by Neil Williams of Sun. r=wtc.
2005-02-23 23:44:09 +00:00
wtchang%redhat.com 2887e52c23 Bugzilla Bug 282370: Added OID for PKIX_CA_ISSUERS. The patch is
contributed by Martin v. L�wis <martin@v.loewis.de>. r=nelson,wtc.
Modified Files: secoid.c secoidt.h
2005-02-23 19:43:02 +00:00
wtchang%redhat.com cf7f00183c Bug 236613: fixed the fallout from the change to MPL/LGPL/GPL tri-license.
Our script for processing the *.def on the Mac cannot handle blank lines.
Modified Files: nssckbi.def nss.def smime.def softokn.def ssl.def
2005-02-23 19:25:39 +00:00
wtchang%redhat.com 07d5483970 Bugzilla Bug 282367: Export CERT_DestroyUserNotice from the nss shared
library.  Added a CERT_DestroyUserNotice call to cmd/lib/pppolicy.c to
fix a leak of CERTUserNotice. r=nelsonb.
Modified Files: lib/nss/nss.def cmd/lib/pppolicy.c
2005-02-22 20:02:22 +00:00
julien.pierre.bugs%sun.com 66bc594587 Fix compilation on AIX 2005-02-15 19:26:28 +00:00
julien.pierre.bugs%sun.com 1b8fc2a9d7 Fix for 243585 - add the ability to use CRL objects from RAM . r=nelson, neil.williams 2005-02-15 06:26:43 +00:00
nelsonb%netscape.com 756dbad584 Export HASH_Clone HASH_HashBuf HASH_ResultLenContext
Bug 273444, r=julien.pierre
2005-02-12 06:39:23 +00:00
julien.pierre.bugs%sun.com 37fdc5fab9 Fix for 281761 - VFY_CreateContext passes wrong key object; and other cleanup. r=nelson 2005-02-10 08:05:54 +00:00
neil.williams%sun.com a7dcc795a8 Bug#:280602 Added list option to pk12uti, test for it.
r=nelson@bolyard.com
2005-02-08 01:04:50 +00:00
gerv%gerv.net f45b5900c8 Bug 236613: change to MPL/LGPL/GPL tri-license. 2005-02-02 22:28:27 +00:00
wtchang%redhat.com 4c5ddcd96b Wrap long lines. 2005-01-27 21:33:59 +00:00
wtchang%redhat.com 2aadb23379 Bugzilla Bug 279621: removed relnotes.txt, which contains HCL 1.7.5 release
notes.
2005-01-27 19:06:07 +00:00
wtchang%redhat.com 82b1183c84 Bugzilla Bug 267158: removed the $Name$ RCS keyword from our source files.
This keyword adds noise to the output of "ident libnss3.so | grep NSS"
on our debug build, and appears to cause spurious CVS conflicts. r=nelsonb.
2005-01-20 02:25:51 +00:00
wtchang%redhat.com d0724fcd94 Bugzilla Bug 278381: fixed double frees and mismatch of format specifers
and arguments. The patch is contributed by Tim Ruehsen
<tim.ruehsen@gmx.de>. r=wtc,relyea.
2005-01-14 18:59:20 +00:00
wtchang%redhat.com 467935176b Bugzilla Bug 276180: defend against invalid arguments to PK11_HashBuf
and PK11_DigestOp. r=nelsonb.
2005-01-04 22:00:01 +00:00
wtchang%redhat.com ddbea8b6fc Bugzilla bug 273624: fixed the regression (from NSS 3.3.x) that
NSS_Initialize didn't report the SEC_ERROR_BAD_DATABASE error if
the NSS databases haven't been created.  r=nelsonb,relyea.
Modified Files: pk11wrap/pk11err.c pk11wrap/pk11load.c
                softoken/dbinit.c softoken/pkcs11n.h
2005-01-04 18:20:00 +00:00
nelsonb%netscape.com 897bade8c1 Initialize 4 variables. Plug UMR reports. Bug 263691. r=wtchang 2004-12-24 07:13:35 +00:00
nelsonb%netscape.com c50e280c7b Add end of list marker to SECErrorCodes enum in secerr.h.
Bug  273611, r=Saul.edwards
2004-12-23 23:42:25 +00:00
julien.pierre.bugs%sun.com 99bef0be47 Fix for 273993 . SSL client cache grows with non-restartable sessions . r=saul,nelson 2004-12-17 02:01:35 +00:00
julien.pierre.bugs%sun.com 6c048409ed Fix for 266206 - avoid calling getdtablesize twice 2004-12-08 23:00:19 +00:00
julien.pierre.bugs%sun.com 5ab2c1cd4b Fix for bug 270689 - race condition in softoken list lock creation . r=nelson 2004-12-08 01:13:54 +00:00
julien.pierre.bugs%sun.com 7bcac0c35b Check for NULL PRFileDesc before closing them . r=saul,nelson 2004-12-07 06:25:34 +00:00
nelsonb%netscape.com 5bf350b4f7 Workaround the occasional SSL server cert that has the step-up OID but
not the SSL server OID.  Patch by Aaron Spangler <aaron@spangler.ods.org>
Bug 231775. r=nelson
2004-12-02 22:08:14 +00:00
nelsonb%netscape.com c33c315aee When attempting to find an SMIME profile for a given email address,
firt ensure that the email address is not NULL and not empty.
Bugzilla bug 263596. r=wan-teh.
Modified Files: lib/certdb/stanpcertdb.c lib/pk11wrap/pk11nobj.c
2004-12-02 21:34:15 +00:00
nelsonb%netscape.com 5b13f09e65 Fixes bugs 258416, 261374, 261375, 261379, 271551 and 271585
Modified Files: certdata.c certdata.txt nssckbi.h
r=relyea.  Add root CA certs for
    QuoVadis Root CA                        C,C,C
    Security Communication Root CA          C,C,C
    Sonera Class 1 Root CA                  C,C,C
    Sonera Class 2 Root CA                  C,C,C
    Staat der Nederlanden Root CA           C,C,C
    TDC Internet Root CA                    C,C,C
    TDC OCES Root CA                        C,C,C
    UTN DATACorp SGC Root CA                C,p,p
    UTN USERFirst Email Root CA             p,C,p
    UTN USERFirst Hardware Root CA          C,p,p
    UTN USERFirst Object Root CA            p,p,C
2004-12-02 19:47:45 +00:00
christophe.ravel.bugs%sun.com b9517a325d 238319: Sun packaging changes.
Port from NSS_3_9_BRANCH.
2004-11-29 16:31:50 +00:00
nelsonb%netscape.com 08836590b0 Do case-insensitive comparisons of hostnames to wildcarded names.
Bug 266651.  Patch contributed by Ken Key <key+mozilla@ksquared.net>.
2004-11-19 23:54:10 +00:00
wchang0222%aol.com 7c98ff6077 Bugzilla bug 268502: fixed some function declaration problems. r=jpierre,
relyea.
2004-11-18 23:51:37 +00:00
julien.pierre.bugs%sun.com 94b08bc344 Fix bugzilla 268521 - C_CloseSession getting called after C_CloseAllSessions . r=relyea, nelsonb 2004-11-09 23:19:24 +00:00
wchang0222%aol.com 3b305b181f Bugzilla bug 248435: declare the exported functions CERT_DecodeGeneralName
and CERT_EncodeGeneralName in the public header cert.h.  r=jpierre.
Modified Files: cert.h genname.h xconst.c
2004-11-09 06:13:32 +00:00
wchang0222%aol.com 896b606026 Removed a useless makefile rule. 2004-11-05 02:46:09 +00:00
wchang0222%aol.com 254aeee16c Bugzilla bug 261794: cvs removed obsolete .cvsignore files that contain
only files that have since been checked into CVS.  r=gerv.
Removed Files: ckfw/.cvsignore pki1/.cvsignore
2004-11-05 02:28:40 +00:00
wchang0222%aol.com 382316cb4d Define the macro 'verbose' as -1 to turn all all zlib trace messages in
debug builds.  This is to be consistent with our modifications to the old
zlib (Bugzilla bug 131826).
2004-11-04 16:23:19 +00:00
wchang0222%aol.com 37654a1a9c Removed the definition of 'errno' as a global variable for WinCE. Our
WinCE port implements 'errno' as thread local storage.
2004-11-04 06:14:23 +00:00
wchang0222%aol.com f4dfeee106 The test programs $(PROGRAMS) need to be added to TARGETS, otherwise
they won't get built and the libs target will fail trying to install them.
2004-11-04 06:09:24 +00:00
wchang0222%aol.com 1540a23e93 Added makefile rules to build the test programs (example and minigzip) and
the test target to run the tests.
Modified Files: Makefile config.mk manifest.mn
2004-11-03 02:17:04 +00:00
wchang0222%aol.com bf8833c4b9 Bugzilla bug 131826: upgraded to zlib 1.2.2. a=relyea,jpierre.
Modified Files:
	README adler32.c compress.c config.mk crc32.c deflate.c
	deflate.h example.c gzio.c inffast.c inffast.h inffixed.h
	inflate.c inftrees.c inftrees.h manifest.mn minigzip.c trees.c
	uncompr.c zconf.h zlib.h zutil.c zutil.h
Added Files:
	crc32.h infback.c inflate.h
Removed Files:
	infblock.c infblock.h infcodes.c infcodes.h infutil.c
	infutil.h makefile.win maketree.c netscape_mods.doc zip16.def
2004-11-02 23:40:10 +00:00
julien.pierre.bugs%sun.com 358d31e347 Fix for 266940 . increase MAX_THREADS in selfserv 2004-10-31 00:22:56 +00:00
julien.pierre.bugs%sun.com 504b389434 Fix for 266206 . close only up to 64k descriptors. 2004-10-29 06:14:22 +00:00
julien.pierre.bugs%sun.com 781aca838b Fix for bug 262192 . assert and check attribute ptr 2004-10-24 18:31:27 +00:00
julien.pierre.bugs%sun.com 464720d125 Fix for bug 265707 - SECMOD_FindSlot always returns NULL. r=relyea 2004-10-24 18:25:04 +00:00
julien.pierre.bugs%sun.com 0571dde1e9 Fix for 265708. - count should be CK_ULONG 2004-10-23 20:23:50 +00:00
julien.pierre.bugs%sun.com c2ba47a939 Fix for 265504 - cmsutil dumps core with invalid option set. r=wtc 2004-10-22 22:39:47 +00:00
wchang0222%aol.com 0e502115b8 Bugzilla bug 265686: the 'name' argument to PK11_FindSlotByName should be
const char *.  The patch is contributed by timeless@bemail.org. r=wtc.
Modified files: pk11pub.h pk11slot.c
2004-10-22 22:13:45 +00:00
relyea%netscape.com e93a53498f [Bug 262274] visibility of PK11_GetCertFromPrivateKey and CERT_DecodeDERCertificate 2004-10-14 22:34:47 +00:00
relyea%netscape.com e56b27e7a7 bug 262774 export PK11_GetCertFromPrivateKey publically. 2004-10-14 22:15:21 +00:00
relyea%netscape.com 5be4b0f4b4 Fix regression where PK11LogoutAll will crash when called when NSS is not initialized. 2004-10-11 22:37:41 +00:00
julien.pierre.bugs%sun.com e6651557ec Fix for 259003 - port NSS to Solaris AMD64 . r=wtc 2004-10-11 02:15:42 +00:00
julien.pierre.bugs%sun.com 69a7452f8e Include nssrwlk.h for NSSRWLock_ funtions 2004-10-07 04:36:03 +00:00
julien.pierre.bugs%sun.com ff3b02711f Remove unused variable 2004-10-07 04:14:18 +00:00
julien.pierre.bugs%sun.com e5604f6a11 Include secmodi.h for SECMOD_NewListLock 2004-10-07 04:08:16 +00:00
julien.pierre.bugs%sun.com 604d7f6c98 Remove unused variable 2004-10-07 04:04:25 +00:00
julien.pierre.bugs%sun.com 61e303f6e7 Remove unused variables 2004-10-07 04:03:35 +00:00
julien.pierre.bugs%sun.com fc043a3854 initialize variable 2004-10-07 03:57:19 +00:00
julien.pierre.bugs%sun.com ed405e7ea1 Remove unused variables 2004-10-07 03:56:37 +00:00
julien.pierre.bugs%sun.com acc95e4dd9 Remove unused variable 2004-10-07 03:55:25 +00:00
julien.pierre.bugs%sun.com 1fce2635d0 Avoid divide by zero iteration 2004-10-01 03:19:30 +00:00
wchang0222%aol.com 202405c65b Print the error message if NSS_NoDB_Init fails. 2004-09-30 00:49:36 +00:00
nelsonb%netscape.com 5178c6777b Fix bugzilla bug 261496. Absent OPTIONAL CHOICEs should not cause fatal
errors.  Fix printing code to not crash on missing optional nextUpdate.
r=julien.pierre
2004-09-27 22:41:41 +00:00
nelsonb%netscape.com ebadd0ad21 Fix bug 261333. Use the modulus length for the length of the output
buffer, not the length of the input data.  r=julien.pierre
2004-09-24 21:44:20 +00:00
nelsonb%netscape.com e4191760ba Patch by kinmoz@netscape.net. Fix bug 260882 by clearing the valid
cache flag (named "searchedObjectType") even when the cache was empty.
2004-09-22 01:45:26 +00:00
saul.edwards%sun.com 035652083f 258779: Add /usr/lib/mps to RPATH for Solaris 10. 2004-09-17 22:25:50 +00:00
saul.edwards%sun.com ca0a1ce2ad 245518: Add /usr/lib/mps to RPATH for tools. 2004-09-17 21:59:04 +00:00
nelsonb%netscape.com 5f3c5e717c Increase the maximum allowable size of the prime field for DH computations.
bug 259229.
2004-09-17 00:34:52 +00:00
saul.edwards%sun.com a72892ef68 Bug 245915: Add NSS_IsInitialized prototype to header. 2004-09-16 16:31:45 +00:00
nelsonb%netscape.com 85d9ad67fc Two new functions: PK11_PubEncryptPKCS1 and PK11_PrivDecryptPKCS1.
Bugzilla bug 258366. Ported from NSS 3.9 branch.
2004-09-08 02:52:15 +00:00
nelsonb%netscape.com 11b916c95a export CERT_ConvertAndDecodeCertificate and SEC_PKCS7EncodeItem from
libSMIME.  Bugzilla bug 258362.  Fix ported from 3.9 branch.
2004-09-08 01:20:46 +00:00
nelsonb%netscape.com 24904acb6f Add root CA certs for Certum, Comodo, and IPS.
Bugzilla bugs 242040 244982 252132.
2004-09-03 04:35:28 +00:00
wchang0222%aol.com bad8733fd8 Added a comment explaining how NSS_BUILTINS_LIBRARY_VERSION_MINOR should be
incremented.
2004-08-31 17:39:15 +00:00
wchang0222%aol.com 9bb982aa69 Bugzilla bug 252375: added version information to the nssckbi shared
library. r=relyea.
Modified Files: config.mk manifest.mn nssckbi.h
Added Files: ckbiver.c nssckbi.rc
2004-08-31 17:28:50 +00:00
jpierre%netscape.com d6e93928ed Fix for 254393 - r=nelsonb . PK11_FindKeyByAnyCert returned invalid key objects 2004-08-06 02:24:31 +00:00
jpierre%netscape.com 5b46cda86f Fix for 249488 - make Single-Threaded mode work 2004-08-03 23:24:37 +00:00
relyea%netscape.com c2b70291da 1) Add time command to time specific functions.
2) improve the help system.
3) bug fixes for arrays.
2004-07-30 00:25:21 +00:00
relyea%netscape.com b4b4a3f900 Error strings for new error codes. 2004-07-30 00:19:49 +00:00
relyea%netscape.com e715f98c50 Bugzilla Bug 252702
NSS needs to handle better token insertion and removal.

Applied from patch to NSS 3.9
2004-07-29 23:38:14 +00:00
jpierre%netscape.com 14456163f2 Fix for 249488 - root cert module requires locking functions in CK_C_INITIALIZE_ARGS . r=ian, sr=relyea 2004-07-29 22:51:00 +00:00
nelsonb%netscape.com 20e64eb7e5 Correct option parsing, and add missing error messages. 2004-07-28 21:10:07 +00:00
nelsonb%netscape.com c55043fc52 Support GeneralizeTime in the CRMF library. Bug 219080. r=julien.
Patch by nelson and julien.
2004-07-27 05:06:02 +00:00
relyea%netscape.com 7e82fd4194 Bug 250687
NSS Crashes or leaks Cert references if bad certs are passed up by PKCS #11 modules.
r=nelson
sr=ian
2004-07-21 18:18:05 +00:00
relyea%netscape.com 57260fe853 Backing out pk11cert.c changes (not ready for checkin yet). (revert to 1.133) 2004-07-20 23:04:31 +00:00
relyea%netscape.com 950ffdabc7 Fix optimized builds (make tinderbox go green). 2004-07-20 23:02:04 +00:00
relyea%netscape.com c5e993c9fd Missed function definition in previous checkin. 2004-07-19 22:37:48 +00:00
relyea%netscape.com d0af60d089 refactor pk11util, splitting large single files down to a managable size.
bug 246130. The new factor is:

pk11akey.c - asymetric keys constructed from pk11cert.c and pk11skey.c
pk11auth.c - authentication/password management factored from pk11slot.c
pk11cert.c - cert code with private key, crls and trust factored out.
pk11ctx.c -- pkcs11 context code, factored out of pk11skey.c
new pk11func.h -- for backward compatibility.
pk11mech.c - mechanism mapping code, factored mostly from pk11slot.c
pk11nobj.c - netscape objects (crls and trust), factored mostly from pk11cert.c
pk11obj.c - generic object support, factored from pk11skey.c pk11slot.c and
pk11cert.c
pk11priv.h -- private functions factored from pk11func.h
pk11pub.h -- public functions factored from pk11func.h
pk11skey.c - now only symetric key ops; private, public key ops, generic ops
and crypto contexs have been factored out.
pk11slot.c - still slot operations. Authentication, generic object ops,
mechanism mapping has been factored out.

This patch should only have refactoring, no new functions or other changes.
2004-07-19 22:12:38 +00:00
nelsonb%netscape.com 371f19c6b9 Use the "c beautifier" (cb) to give this code a common K&R style with
an indentation of 4.  Also rewrap a few strangely wrapped lines.
Bug 249330.
2004-07-16 00:04:47 +00:00
nelsonb%netscape.com 2ed86b689a Apply review feedback to signtool sources. Add test case to QA tests.
Bug 248751.
2004-07-15 22:21:57 +00:00
nelsonb%netscape.com 07c4feeb45 Add -X option to produce signed XPI files for mozilla. Bug 248751.
Path contributed by jeff klawiter <jeff@j-maxx.net>. r=nelson
2004-07-15 00:01:50 +00:00
nelsonb%netscape.com 98afc62590 Allow subtemplates to have the SEC_ASN1_DYNAMIC flag without asserting.
Bug 245429. Patch 4 of 5.  r=relyea.
2004-07-13 06:02:54 +00:00
nelsonb%netscape.com 55aa7ccc43 Fix some casts. Wrap some long lines. Remove a bogus assert.
Factor a function call out of the arguments of another function call,
which is mostly to make that code more easily debugged.
This is patch 3 of 5 for bug 245429. r=wtc.
2004-07-13 05:52:24 +00:00
nelsonb%netscape.com f7b4d4bbb7 Function sec_asn1e_write_contents was two functions combined into one,
separated by one huge if-then-else.  They do different things and take
different arguments.  So, I split them into two separate functions:
sec_asn1e_write_contents and sec_asn1e_write_contents_from_buf
the latter of which takes a buf pointer and length argument.
The if statement that chooses between the two is now in the caller.
This is patch 2 of 5 for bug 245429.  r=wtc.
2004-07-13 05:49:48 +00:00
nelsonb%netscape.com f961aed641 rename "explicit" to "isExplicit" because MSVC6 thinks explicit is a c
keyword.  rename "ignore_stream" to "disallowStreaming" because it
doesn't merely ignore.  rename "ignoresubstream" to "disallowStreaming"
for the same reason.  Patch 1 of 5 for bug 245429. sr=wtc.
2004-07-13 05:44:47 +00:00
nelsonb%netscape.com 55151bc829 Greatly improve the output of the PKCS12 encoder. Adds output buffering
to the output callback function that is called by the ASN.1 encoders,
and which feeds into the next PKCS7 encoder in the outward direction.
Bug 210179.  sr=relyea
2004-07-13 05:31:34 +00:00
nelsonb%netscape.com 33f87dfef9 Ensure that the CRMF library always uses a non-null pool pointer when it
calls the ASN1 Decoder.  This prevents leaks.  Bug 178898. r=relyea.
2004-07-13 05:12:31 +00:00
wchang0222%aol.com 409574ee15 Bugzilla bug 248981: PKCS #11 modules that are based on older lib/ckfw (for
example, the nssckbi module) save a pointer to the CK_C_INITIALIZE_ARGS
passed to them. So if we pass a pointer to the stack variable moduleArgs,
the pointer will point to a structure that has gone out of scope. To
prevent crashes in these broken modules, we continue to pass a pointer to
the global secmodLockFunctions whenever we can. r=relyea.
2004-07-08 23:23:50 +00:00
wchang0222%aol.com f3c6f7397f Bugzilla bug 249284: removed a duplicate declaration of
CERT_DecodeDERCertificate. r=nelsonb. Thanks to Chris Newman
of Sun for the bug report.
2004-07-07 00:48:53 +00:00
jpierre%netscape.com 4bfc6dca87 Fix for 248981 - make SECMOD_LoadPKCS11Module thread safe. r=relyea 2004-07-01 19:20:51 +00:00
nelsonb%netscape.com e054aef7bf Output properly encoded PQGParams. r=wtc. Bug 247738. 2004-07-01 02:07:02 +00:00
jpierre%netscape.com 309d389ab8 Fix for 249310 - add option to disable SSL2 in selfserv . r=nelson 2004-07-01 02:06:31 +00:00
nelsonb%netscape.com 23b32f634b Treat non-repudiation-only certs as valid signature certs.
Bug 240456.  r=wtc, sr=relyea.
2004-07-01 00:26:00 +00:00
nelsonb%netscape.com 3bc297e56b Correct NSS to use the most specific, not most general CN attribute in
a cert subject name.  Bug 197964.  r=wtc.
2004-07-01 00:21:42 +00:00
nelsonb%netscape.com 1d3641f999 Follow the SSL2 specification more closely in accepting and rejecting
SSL messages.  Previously NSS would reject some it should accept
and vice versa.  Bugscape bug 57121. r=wtc,julien
2004-06-24 02:02:39 +00:00
nelsonb%netscape.com 35ab44f5ac Fix certutil's ability to read PQG files. Make certutil able to read
the files produced by the command "makepqg -a".  Plug some memory leaks.
r=relyea,vipul  Bug 247739
2004-06-23 22:23:00 +00:00
relyea%netscape.com 501db85dbc Bug 244914, 244907 r=nelsonb
Add support for unprotected private keys without requiring authentication.
Add support to access application specific PKCS #11 objects through NSS.
2004-06-21 23:01:53 +00:00
nelsonb%netscape.com 3b8151e40a Initialize the "type" member in the SECItems returned by
PK11_PQG_ParamGetSeedLen so encoded values will be correct.
Bug 247737. r=relyea.
2004-06-21 19:22:02 +00:00
saul.edwards%sun.com 172f3b4cbc Bug 245518: add RPATH to BUILD_SUN_PKG, add $ORIGIN to rpath 2004-06-19 06:09:03 +00:00
jpierre%netscape.com a11c975bed Fix for 237934 - nss_InitLock not atomic. r=nelson 2004-06-19 03:21:39 +00:00
jpierre%netscape.com 65862c5e4f Wrap long lines 2004-06-18 02:03:30 +00:00
jpierre%netscape.com e8c134e6c5 Restore comment that got removed accidentally. And fix typo in it. 2004-06-18 01:34:11 +00:00
jpierre%netscape.com 6aa648b89e Fix for 247406 . r=wchang0222,glen.beasley 2004-06-18 01:28:41 +00:00
jpierre%netscape.com b03fe203f6 Fix for 178897 . QuickDER optimizations . r=nelsonb 2004-06-18 00:38:45 +00:00
jpierre%netscape.com 3f739f181e Backout part of the QuickDER changes from 178895 . r=relyea 2004-06-17 23:23:59 +00:00
nelsonb%netscape.com 44e789e395 Destroy cert references held inside the CMMFCertRepContent struct when
that struct is being destroyed.  Plugs a cert reference leak.
Bug 245420.  r=wtc.
2004-06-17 22:12:34 +00:00
wchang0222%aol.com 8cb927d373 Bugzilla bug 233320: pk11_OpenKeyDB should not return SECFailure (not a
CK_RV value).  Removed two unnecessary assignment statements.  r=relyea.
2004-06-11 22:25:13 +00:00
nelsonb%netscape.com 17e15e8590 Don't crash when CERT_DestroyCertificate is called with a cert with a
null arena pointer.  Bug 245943. r=julien
2004-06-09 07:47:51 +00:00
nelsonb%netscape.com c89fea6d2e Fold function definition so editor can find it. 2004-06-09 02:22:38 +00:00
jpierre%netscape.com 909489401d Fix for 178895 - QuickDER optimizations. r=relyea 2004-06-05 00:50:32 +00:00
nelsonb%netscape.com 6edf60ce5c Make crmftest compile and run with NSS 3.10 shared libraries.
Enhance the command line parsing to permit portions of the tests
to be individually selected.  The code still doesn't all run
to completion without errors, but it gets MUCH farther than before.
Bug 244329.
2004-06-03 03:56:48 +00:00
nelsonb%netscape.com 45fbe7addd Fix an erroneous assertion. Clean up some other code. Bug 244929.
r= jpierre, wtc.
2004-06-03 03:41:07 +00:00
nelsonb%netscape.com 4bc475a605 Export symbols needed for crmftest. r=relyea. bug 244329. 2004-06-02 22:19:33 +00:00
jpierre%netscape.com 8f86eb3572 Fix for 244915 . resolve issues from previous patch 2004-06-02 01:56:43 +00:00
jpierre%netscape.com 6986ea78e8 Fix for 244915 - r=wtc, misterssl . Correctly build freebl on Solaris 10 2004-06-02 00:40:53 +00:00
bishakhabanerjee%netscape.com 4cb1108d34 chenged log names to better align them in summary, added SMIME test output
to emailed log summary
2004-05-27 22:09:03 +00:00
nelsonb%netscape.com f2dedf230d a) adds the missing code to put stdin into binary mode.
b) add the -i option to the usage message
c) builds addbuiltins with shared libs
   (includes "nssrenam.h" for some symbols)
d) build addbuiltins as part of the normal builds.
2004-05-25 21:47:44 +00:00
jpierre%netscape.com 3c9a7eb176 Fix for 244095 - link NSS libraries with -R $ORIGIN on Solaris 2004-05-25 00:13:12 +00:00
nelsonb%netscape.com ed9a466108 Fix crash when array member is used as variable. Bug 243655. r=relyea. 2004-05-22 01:24:22 +00:00
nelsonb%netscape.com 6481991845 Use "slop time" in nextUpdate validity check for CRLs. Bug 242146.
r=julien.pierre
2004-05-22 01:03:26 +00:00
nelsonb%netscape.com 81bf125709 Add missing license block. Wrap long lines. Bug 243580. r=relyea. 2004-05-22 00:56:46 +00:00
bishakhabanerjee%netscape.com f7ffa7b7e8 script to run NISCC tests; cvs pull of NSS and does special build, runs SMIME
and SSL tests, logs results to file, summarizes log results
2004-05-20 00:56:40 +00:00
ian.mcgreer%sun.com 92584e19c6 certdata.c is checked in and shouldn't be ignored 2004-05-17 20:47:35 +00:00
ian.mcgreer%sun.com be72ca16c5 bug 180268, reimplement ssl step-up for builtins 2004-05-17 20:08:38 +00:00
wchang0222%aol.com 081ede0ac7 Bugscape bug 57081: If the make variable NISCC_TEST is defined at build
time, add -DNISCC_TEST to the compile command line.  The NISCC_TEST macro
enables special code that's conditionally compiled for NISCC testing.
Modified Files:
	cmd/smimetools/Makefile cmd/smimetools/cmsutil.c
	lib/ssl/config.mk lib/ssl/manifest.mn
2004-05-13 01:29:15 +00:00
relyea%netscape.com 5d4e32454a scripts for pk11util 2004-05-12 23:49:39 +00:00
ian.mcgreer%sun.com 1d3c78cf5a program for generating FIPS algorithm test results 2004-05-12 17:30:31 +00:00
jpierre%netscape.com 79af302c8e Fix for 242984 - crash with application having incomplete PRIOMethods. r=nelsonb,wtc 2004-05-11 03:48:25 +00:00
jpierre%netscape.com b97913e992 Fix for 240361 - crash in CERT_CheckValidTimes 2004-05-11 02:43:10 +00:00
jpierre%netscape.com 576e2a2776 Fix for 202979 . Resolve binary compatibility issue for CERT_ImportCerts . r=wtc, jpierre 2004-05-05 01:15:39 +00:00
relyea%netscape.com 1d997eb6cd Fix mechanism command. 2004-05-05 00:36:52 +00:00
wchang0222%aol.com 59319a778c Bugzilla bug 238914: declare namesRunningOffset as unsigned long to avoid
overflow. Fixed a regression introduced by the previous checkin ('nss' is
allowed to be NULL).  Set slotStrings[i] to NULL after freeing to avoid
double-free. r=relyea,nelsonb.
2004-04-30 23:41:44 +00:00
gerv%gerv.net 9bd361a285 Bug 236613: change to MPL/LGPL/GPL tri-license. Restore Id: lines. 2004-04-27 23:04:40 +00:00
gerv%gerv.net 3634d4d94b Bug 236613: change to MPL/LGPL/GPL tri-license. 2004-04-25 15:03:26 +00:00
wchang0222%aol.com 76e3cc1538 Bugzilla bug 90906: removed unused variable 'size'. The patch is from
Serge GAUTHERIE <gautheri@noos.fr>. r=wtc.
2004-04-21 18:57:51 +00:00
nelsonb%netscape.com 542f76a15a Change ssl test scripts to invoke tstclnt with the server's FQDN.
Necessary because of fix to bug 234058.
2004-04-08 03:01:02 +00:00
nelsonb%netscape.com abe92ad094 Remove code that attempted to compare simple host names in URLs with
FQDNs in certificate host names.  This was insecure.  Bug 234058. r=wtc.
2004-04-08 00:17:46 +00:00
relyea%netscape.com e4ab49876e Fix missing indexes when fetching lengths (get tinderbox working again). 2004-04-07 19:00:08 +00:00
relyea%netscape.com 66be1e00e1 Bug 239827: Fix race condition in unwrap private key (if target key is symetric). 2004-04-07 01:18:46 +00:00
relyea%netscape.com 77bd494c63 Bug 238914. r=wchang sr=misterSSL
Agressive checks on database data before we actually reference it. This
should prevent crashes because of invalid databases.
2004-04-07 00:58:58 +00:00
wchang0222%aol.com a032d5bd44 Bugzilla bug 238565: made the comment match the code. r=nelsonb. 2004-03-27 01:51:25 +00:00
wchang0222%aol.com ec68ee33b1 Bugzilla bug 237934: in nss_InitLock, nss_InitMonitor, and
NSSRWLock_AtomicCreate, we need to doublecheck the lock/monitor's pointer
after we acquired the spin lock.  r=nelsonb,jpierre.
Modified Files: nsslocks.c nssrwlk.c
2004-03-27 01:08:15 +00:00
nelsonb%netscape.com c0104f0a69 Correct the parsing of certain forms of GeneralName. Bug 233586.
r=julien.pierre
2004-03-26 01:15:33 +00:00
nelsonb%netscape.com dade383614 Fix a regression introduced by rev 1.19, after NSS 3.9 was released.
r=julien.pierre.  bugscape 56484.
2004-03-23 03:29:56 +00:00
wchang0222%aol.com 8ebba422fc Bugzilla bug 237870: link the MinGW build with wsock32.dll (Winsock 1)
instead of ws2_32.dll (Winsock 2).  Thanks to neil@parkwaycc.co.uk for the
patch.  r=wtc.
2004-03-23 01:59:40 +00:00
relyea%netscape.com d5abab03d4 Program to decrypt passwords inline from prefs files 2004-03-23 00:46:38 +00:00
relyea%netscape.com 70a5776e59 Fix arrays handling strings, and help 2004-03-13 02:44:26 +00:00
jpierre%netscape.com b391292c65 Remove unused file 2004-03-11 10:03:24 +00:00
jpierre%netscape.com 9383b61a6e Fix for bug 143456 - add -P option for dbprefix to selfserv . r=MisterSSL 2004-03-10 02:47:13 +00:00
nelsonb%netscape.com c4b2be519c Add conditionally compiled code for NISCC testing of NSS's SSL library.
patch by Ian McGreer.  Bugscape bug 53322.
2004-03-05 23:28:57 +00:00
bishakhabanerjee%netscape.com 195f404925 adding platform RH_Linux_7.3 2004-03-04 22:47:43 +00:00
bishakhabanerjee%netscape.com fa54334072 adjusting the platform strings as the header file specifies 2004-03-04 20:16:36 +00:00
bishakhabanerjee%netscape.com 5f21e877ae removed old,unused platforms; and added newer used ones 2004-03-04 00:35:09 +00:00
jpierre%netscape.com f1a9128ad1 Fix for 235874 - crash in PK11_DigestKey . r=wtc, nelsonb 2004-03-03 03:18:56 +00:00
nelsonb%netscape.com a74bbe4b09 Detect NULL arguments to CERT_DecodeTrustString instead of crashing.
Bug 235617. r=wtc.
2004-02-26 00:05:29 +00:00
bishakhabanerjee%netscape.com c93fcbd840 fix for Bugzilla bug 232481: removed a loop in smime.sh 2004-02-25 23:05:41 +00:00
bishakhabanerjee%netscape.com c0e6a51ba4 added negative cert import function, changed relevant Policies tests accordingly 2004-02-25 22:34:25 +00:00
nelsonb%netscape.com 7debba55ce Import base64 encoded certificate files with old MAC line endings.
Bug 221272. sr=wtc.
2004-02-16 23:52:46 +00:00
wchang0222%aol.com 46de977590 Removed unused function _OS_SELECT for AIX. Thanks to Philip K. Warren
<pkw@us.ibm.com> for reporting this.
2004-02-13 03:13:04 +00:00
wchang0222%aol.com d384e9659d Bugzilla bug 233048: 1. Support doing 64-bit Solaris SPARC builds using
gcc.  2. Enable all.sh to work with gcc-compiled NSS tests which require
setting LD_LIBRARY_PATH to point to the directory where libgcc.so resides.
The patch is contributed by Vladim�r Marek <Vladimir.Marek@printsoft.cz>.
r=wtc,nelsonb.
Modified Files: coreconf/SunOS5.mk nss/tests/common/init.sh
2004-02-13 02:47:53 +00:00
jpierre%netscape.com 42b100808b Fix strings in SECU_PrintError. bug 233493 2004-02-12 02:08:59 +00:00
wchang0222%aol.com 43586b3b97 Bugzilla bug 229297: fixed compiler warning "conversion from 'double' to
'long', possible loss of data".  r=jpierre,relyea.
2004-02-11 19:43:29 +00:00
wchang0222%aol.com 9d027a18fc Bugzilla bug 229293: fixed compiler warning "unary minus operator applied
to unsigned type". r=relyea,jpierre.
2004-02-11 19:37:18 +00:00
jpierre%netscape.com 2703a27453 Fix for bug 233605 . Check CRL entry extensions after partial decoding. Also add some new CRL decoding errors. r=nelsonb 2004-02-11 06:05:18 +00:00
jpierre%netscape.com 560beb63f1 Fix for 233493 . Corrections based on Wan-Teh's feedback. 2004-02-11 05:27:32 +00:00