mozilla
/
gecko-dev
зеркало из https://github.com/mozilla/gecko-dev.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
119 077 коммитов 615 Ветки 98 Теги 5,7 GiB
Граф коммитов

4312 Коммитов

Автор SHA1 Сообщение Дата
wtc%netscape.com b485d030fd Bug 188856: it is not necessary to declare 'crv' in these blocks because it 
is already declared in the outer scope.
 2003-02-18 02:47:04 +00:00
wtc%netscape.com 629dd8c57a Bug 192617: export NSS_CMSRecipientInfo_Wrap/UnwrapBulkKey from the smime3 
shared library.
 2003-02-18 00:45:34 +00:00
wtc%netscape.com 46b5be5b53 Bug 134967: handle spaces and hyphens in $(USERNAME). Convert them to 
underscores.  r=seawood@netscape.com.
 2003-02-15 20:39:01 +00:00
wtc%netscape.com c766b3d808 Bug 193055: the "cat ${file} | while read ...do ... done" construct does 
not work under MKS Korn shell on Windows XP.  Replaced it by the equivalent
construct "while read ... do ... done < ${file}".
 2003-02-15 04:48:13 +00:00
relyea%netscape.com 4c4ce5586d Bug 167756. Address Nelson's review comments. remove socket specific latency 
in favor of a slot specific latency test (already done by pk11wrap code).
 2003-02-15 01:21:25 +00:00
relyea%netscape.com 7737f1bf2b bug193367: Don't blindly copy all the certs from a given S/MIME message into the db. 2003-02-15 00:23:04 +00:00
sonja.mirtitsch%sun.com 6f1f50b42a bug 193394, change to check returncode of modutil after switching to 
fips mode, r=wtc
 2003-02-14 21:30:45 +00:00
wtc%netscape.com 42ae3a8e2c There should be no token after #endif. 2003-02-14 05:32:35 +00:00
kirk.erickson%sun.com 1fa1add016 Changed License: MPL to MPL/GPL. 2003-02-13 18:24:07 +00:00
relyea%netscape.com f9dd52a261 Turn off debugging output now that we have the tinderboxen working correctly. 2003-02-13 17:41:45 +00:00
kirk.erickson%sun.com 2b7de9c634 Added softokn3 library, and the new integrity check files. 2003-02-13 03:30:19 +00:00
wtc%netscape.com 4c2bfee832 Bug 193057: add WINNT5.1_* symlinks in mozilla/dist for Windows XP QA. 2003-02-13 01:45:01 +00:00
relyea%netscape.com 65978ca4e4 Turn off the mangle test for now. 2003-02-12 22:21:59 +00:00
kirk.erickson%sun.com d44a9d0be8 Removed extraneous ` from PRODUCT_VERSION. 2003-02-12 16:12:14 +00:00
wtc%netscape.com ff2fd3be04 Bug 107976: allow CC to be overridden (with the full pathname of the C 
compiler) on the make command line.
Modified files: AIX.mk ruleset.mk
 2003-02-11 01:15:36 +00:00
relyea%netscape.com d104d1a923 Always free the key reference passed to us from the client 2003-02-10 22:36:45 +00:00
kirk.erickson%sun.com 390576ed9e Resolves bug 191221, by adding dynamic versioning for Solaris. 2003-02-10 18:18:52 +00:00
wtc%netscape.com ada7b251c4 Bug 131826: backed out the zlib 1.1.4 upgrade because the signtool tests 
failed.
Modified Files:
	README adler32.c compress.c crc32.c deflate.c deflate.h
	example.c gzio.c infblock.c infblock.h infcodes.c infcodes.h
	inffast.c inffast.h inflate.c inftrees.c inftrees.h infutil.c
	infutil.h minigzip.c trees.c uncompr.c zconf.h zlib.h zutil.c
	zutil.h
 2003-02-08 15:00:13 +00:00
wtc%netscape.com 22417a7df4 Bug 131826: checked in the README file of zlib 1.1.4. 2003-02-08 09:10:36 +00:00
wtc%netscape.com 305ac614c0 Bug 131826: upgraded to zlib 1.1.4. 
Modified Files:
	adler32.c compress.c crc32.c deflate.c deflate.h example.c
	gzio.c infblock.c infblock.h infcodes.c infcodes.h inffast.c
	inffast.h inflate.c inftrees.c inftrees.h infutil.c infutil.h
	minigzip.c trees.c uncompr.c zconf.h zlib.h zutil.c zutil.h
 2003-02-08 08:50:42 +00:00
wtc%netscape.com 80d543aa32 Bug 131826: added maketree.c from zlib 1.1.4. 2003-02-08 08:37:00 +00:00
wtc%netscape.com 9d38af738e Removed unused files stubs.c and zip_nodl.c. 2003-02-08 08:35:07 +00:00
wtc%netscape.com a301d47f42 Bug 131826: added new header files from zlib 1.1.4. 
Added Files: trees.h inffixed.h
 2003-02-08 08:30:11 +00:00
relyea%netscape.com ab77a6c23c Sigh, the QA scripts look for the word 'failed', but it's common that we 
can't open the shared library and isn't a real failure, so change the wording
 2003-02-08 01:52:37 +00:00
relyea%netscape.com 41a2236e7e Skip corruption test if someone has locked down the shared library on us. 2003-02-08 00:02:06 +00:00
wtc%netscape.com 5076009554 Exit with 1 rather than -1 on failure. Make sure the program exit with 1 
on all failures. Remove the symlink, if a file/symlink by that name already
exists, before creating it to avoid the EEXIST error.
 2003-02-07 23:41:15 +00:00
wtc%netscape.com d84be87533 Use <> around standard/system header files. This file does not need 
string.h, but it should include stdio.h because it uses fprintf and printf.
 2003-02-07 23:21:53 +00:00
nelsonb%netscape.com a39cc492bc Fix bug 190527. Properly extend buffer when data exceeds 512 bytes. 2003-02-07 23:09:35 +00:00
relyea%netscape.com 7903049797 Fix signed/unsigned display issue. 
Add more loggin information on errors (rev 1.3 added this but lost it's log).
 2003-02-07 23:05:07 +00:00
relyea%netscape.com d07389a152 *** empty log message *** 2003-02-07 23:02:43 +00:00
relyea%netscape.com 1c52cb2c3d Add test to see if the shlib was actually changed. 2003-02-07 21:13:10 +00:00
relyea%netscape.com e196a4143b Add Mangle logging... 2003-02-07 21:12:26 +00:00
relyea%netscape.com 267c0b8095 Add debugging information. Turn on tempararily to get debug info from tinderbox failures. 2003-02-07 19:22:42 +00:00
kirk.erickson%sun.com f0a7cc54bb Moved rules.mk include to the end. 2003-02-07 07:16:37 +00:00
wtc%netscape.com 8a3913ab4f Set the default compiler to cc. 2003-02-07 06:57:57 +00:00
nelsonb%netscape.com 140acf91e3 Move the implementation of the TLS Pseudo Random Function (PRF) from 
pkcs11c.c into a new file: tlsprf.c.
 2003-02-07 06:42:20 +00:00
nelsonb%netscape.com 1bea4fac99 Fix the dbtests test on Windows, when run in all.sh. 
The problem was that fips.sh created a file in . named dbtest, which was
actually some text output by a previous test.  This dbtest file prevented
the dbtest program from running.  The text file now has another name.
 2003-02-07 06:32:59 +00:00
kirk.erickson%sun.com a07280607f Resolves bug 189504 (Build Linux RPMS). 2003-02-07 05:56:15 +00:00
nelsonb%netscape.com 6a424428f3 MKS shell doesn't know about echor command. Does any shell? 2003-02-07 05:48:34 +00:00
nelsonb%netscape.com 63cbaffd59 Remove unreferenced local variables from functions. 2003-02-07 05:08:01 +00:00
wtc%netscape.com 3da1c11d28 Moved the definition of MD_LIB_RELEASE_FILES from manifest.mn to Makefile 
so that it is right next to the definition of CHECKLOC, which it uses.
 2003-02-06 22:37:37 +00:00
relyea%netscape.com f97a44db49 Clean up tests 
Suppress error messages which we were expecting because it causes the QA
scripts to report a QA failure.
 2003-02-06 19:06:39 +00:00
relyea%netscape.com 0022c47e93 Mangle will be changing the shared libraries, so it should link with them. 2003-02-06 18:18:42 +00:00
wtc%netscape.com d12037cd31 Bug 177387: Put the configuration/assignments before the rules in Makefile. 
Define MD_LIB_RELEASE_FILES in manifest.mn so that the *.chk files are
included in the mdbinary.jar files generated by the release target.
 2003-02-06 16:56:46 +00:00
relyea%netscape.com f61ba94871 Turn on FIPS test again. 2003-02-06 16:13:44 +00:00
relyea%netscape.com 4bb120679c Introduce shell variables for DLL_PREFIX and DLL_SUFFIX 2003-02-06 16:13:22 +00:00
wtc%netscape.com d7d81c7883 Support both ";" and ":" as PATH separators on Windows. MKS Korn shell 
uses ";" but Cygwin bash uses ":".
 2003-02-06 14:52:43 +00:00
wtc%netscape.com 5cc66223d8 Backed out the previous checkin because it doesn't work on Windows. 2003-02-06 05:33:33 +00:00
wtc%netscape.com eabc27a398 Bug 188441: compile with -D_USE_BIG_FDS on HP-UX. This ensures that fd_set 
is large enough for 60,000 file descriptors.
 2003-02-06 04:43:03 +00:00
wtc%netscape.com 025206b16f Bug 177387: include the *.chk files in the mdbinary.jar files generated by 
the release makefile target.
Modified Files: lib/freebl/manifest.mn lib/softoken/manifest.mn
 2003-02-06 03:52:37 +00:00
relyea%netscape.com 9dbd723151 Remove mangle test until we can get the correct library name inside fips.sh for all platforms 2003-02-06 01:07:39 +00:00
relyea%netscape.com 7be71c5a0f Add check to 1) make sure we are in FIPS mode. and 2) to verify that we 
detect corrupted shared libraries while in FIPS mode.
 2003-02-06 00:50:00 +00:00
relyea%netscape.com 90be81e5ad The NSPR get shared lib interface requires the library name only, 
not a partial path to the library. This affects AIX.
 2003-02-06 00:49:09 +00:00
relyea%netscape.com f419ac9454 Try to load the new module before we've unloaded the old one. This now 
works in NSS, and it allows us to back out if the new one didn't load (because
FIPS could not verify the shared module for instance).
 2003-02-05 00:35:53 +00:00
relyea%netscape.com 0c754d450b Update db test to verify cert8 not cert7 2003-02-05 00:33:52 +00:00
relyea%netscape.com 87a6506c3f Surface the Err codes if we fail to shift to FIPS mode. 
Add new option to verify that we have shifted to FIPS mode.
 2003-02-05 00:31:15 +00:00
relyea%netscape.com 9091d5b06d 1) turn on mangle builds. 
2) better fix for the missing MAXPATHLEN missing define.
3) make room for the '\0' in the pathname.
 2003-02-05 00:29:35 +00:00
relyea%netscape.com d4c0391ff4 Fix LINUX breakage (define MAXPATHLEN if it wasn't defined the the standard 
system headers).
 2003-02-04 23:39:15 +00:00
relyea%netscape.com a0499c74ef Add code to handle symlinks. 
Add verbose output to print out hashes and signatures.
 2003-02-04 23:18:08 +00:00
relyea%netscape.com efdcf189a1 Add program which will mangle exactly 1 bit in a file. 2003-02-04 23:16:56 +00:00
relyea%netscape.com 75390fc662 Fix windows build breakage. 2003-02-04 19:03:11 +00:00
kaie%netscape.com c4f37c6503 b=191301 Crash if I cancel "Choose token" dialog on Cert import 
r=javi sr=darin a=dbaron
 2003-02-04 01:37:23 +00:00
relyea%netscape.com 83e97a17cc Shell script to set up the path before running the signing tool 2003-02-03 21:06:57 +00:00
relyea%netscape.com 2d91037f77 Generate .chk file at build time when we build shlibsign 2003-02-03 21:06:18 +00:00
relyea%netscape.com 447f0c56f9 Check bug 188856 into the tip. 
1)return proper error code in more cases. 2) Fix bug in DH KeyPair Generation.

the essential part of this fix in pkcs11c.c where we add the CKA_NETSCAPE_DB
attribute on Diffie-Hellman key gen. I don't know why the code would have even
thought of working without this (unless we were testing with pregenerated
keys).

The rest of the fix is to surface more of the PKCS #11 error back up. There is
a separate bug to continue tracking the issue of lost PKCS #11 errors.
 2003-01-31 23:39:34 +00:00
kaie%netscape.com 0f380e799b b=189974 Profile Switching fails after JavaScript based cert import 
PSM portion of fix
r=javi sr=darin a=asa
 2003-01-31 22:33:49 +00:00
nelsonb%netscape.com 3f08900d2f Fix an uninitialized variable. Bug 191396. 2003-01-31 22:26:56 +00:00
nelsonb%netscape.com 340366e2ff Fix crash in CERT_CheckKeyUsage caused by dereferencing a returned pointer 
without checkin it for NULL.
 2003-01-31 02:49:13 +00:00
nelsonb%netscape.com 9b5a756ce6 Fix bug 191396. Don't generate SEC_ERROR_LIBRARY_FAILURE unnecessarily 
while doing dsa signatures.
 2003-01-31 02:39:36 +00:00
relyea%netscape.com e7212afe42 FIPS library verifier. 2003-01-30 23:38:07 +00:00
relyea%netscape.com 691d3e25e1 FIPS library verifier 2003-01-30 23:36:37 +00:00
wtc%netscape.com 604f0ed9a1 Bug 191214: fixed the object leaks in signtool that prevented NSS_Shutdown 
from succeeding and added the NSS_Shutdown call back.  r=jpierre.
Modified Files: certgen.c sign.c signtool.c
 2003-01-30 23:11:13 +00:00
wtc%netscape.com 060a90105f Bug 177387: temporarily added freebl_GetLibraryFilePathname to libfreebl.a. 
This function has the same semantics as the NSPR 4.3 function
PR_GetLibraryFilePathname. This patch should be backed out when NSPR 4.3 is
released.
Modified Files: config.mk manifest.mn
Added Files: libpath.c
 2003-01-30 07:00:32 +00:00
jpierre%netscape.com 7f77163102 Fix for 190424 - don't query CKA_NETSCAPE_EMAIL attribute. r=wtc 2003-01-30 05:12:10 +00:00
jpierre%netscape.com da30938629 Fix for 190424 - don't query CKA_NETSCAPE_EMAIL attribute . r=wtc 2003-01-30 03:02:55 +00:00
jpierre%netscape.com 455618e1a1 Patch for memory leak . Bug 189976 . r=wtc 2003-01-30 02:59:35 +00:00
wtc%netscape.com 78b89796f5 Bug 191214: backed out the previous checkin until this bug (object leaks) 
is fixed.
 2003-01-30 01:50:31 +00:00
wtc%netscape.com dd7b545622 Bug 171263: signtool should call NSS_Shutdown before it exits. 2003-01-30 00:39:37 +00:00
relyea%netscape.com 510d42958f Move LIBJAR definitions around so that NT builds. 2003-01-29 23:37:10 +00:00
kaie%netscape.com ba2b38282a b=165301 False mixed content (encrypted page with unencrypted information) Security Warning 
r=javi sr=darin a=asa
 2003-01-29 03:52:01 +00:00
relyea%netscape.com 3a46194bdd 1) add vfyserv to the standard build. 
2) add tool to build shared library signature files for FIP's.

Code to verify requires NSPR changes before we can check it in.
 2003-01-28 18:53:22 +00:00
relyea%netscape.com 99d710be9c New header file to dump defines for managing signed FIPs libraries. 2003-01-28 18:50:02 +00:00
relyea%netscape.com 943c3bc77e Compile modutil with shared libraries. 2003-01-28 16:44:33 +00:00
relyea%netscape.com 6be85505ba Export functions needed for modutil to be compiled dynamically. 2003-01-28 16:41:46 +00:00
relyea%netscape.com d58c1ec22c Remove dead code and symbols from lib jar so that modutil can compile when 
linked with it.
 2003-01-28 16:39:32 +00:00
relyea%netscape.com 368b83f17c Sign 3 sets of changes are here: 
1) Provide accessor functions for the PK11_DefaultArray so that modutil
does not have to link statically to access it.

2) Try setting the attribute on an object before we go to the work of copying
it (Function Only used in Java).

3) Optimize searching for the more common types of attributes.
 2003-01-28 16:38:04 +00:00
kaie%netscape.com c422b330bd b=190640 Remove the DHE ciphersuites until they work 
r=javi sr=bryner a=asa
 2003-01-28 15:06:29 +00:00
kaie%netscape.com 91db3e3aac b=190394 "website certified by an unknown authority" - nssckbi not found breaks PKI trust 
r=dougt sr=darin a=asa
 2003-01-27 23:53:02 +00:00
wtc%netscape.com a6be0bf311 Bug 90010: added support for parisc64. I received this patch from 
Christopher Blizzard <blizzard@mozilla.org>.
 2003-01-27 22:36:06 +00:00
wtc%netscape.com 228b3e52ed Bug 190396. 
Don't fail the search if the token returned an error that indicates that it
legitimately couldn't find a CRL
 2003-01-24 06:37:03 +00:00
relyea%netscape.com 998b101109 Bug 167756. Clean up previous patch: add lastState field, and set the SSL Error on failure. 2003-01-23 22:02:37 +00:00
relyea%netscape.com 17117c5e23 Write changes back to the database when we correct incorrect user bit settings. 2003-01-23 19:38:53 +00:00
relyea%netscape.com f83c287af6 Set the size value when extracting a key 19011. 2003-01-23 17:30:15 +00:00
relyea%netscape.com 7d03017158 Check for token removal before continuing SSL sessions which have client auth 
with certs associated with that token. bug 167756.
 2003-01-23 17:27:34 +00:00
relyea%netscape.com 61a6011027 Fix bug 180824 Version 3.4 string hard coded in default token name. 2003-01-23 17:16:50 +00:00
wtc%netscape.com e1a72ee085 Bug 90010: added support for Linux for s390 and s390x. The patch is 
contributed by Gerhard Tonn <GerhardTonn@swol.de>.
 2003-01-23 17:16:32 +00:00
ian.mcgreer%sun.com ae2e606e54 always use explicit serial numbers on generated certs, should fix QA failures on leia 2003-01-23 15:38:03 +00:00
jpierre%netscape.com f593a5bac0 Fix for bug #126930 - make SSL_ConfigServreSessionIDCache work on OS/2 by not using shared memory in single process mode. r=nelsonb 2003-01-23 00:15:08 +00:00
wtc%netscape.com 8518277691 Bug 190112: PK11_ReadAttribute needs to call PK11_ExitSlotMonitor before 
we return because of allocation failure.
 2003-01-22 17:44:36 +00:00
wtc%netscape.com 0a514a798c Bug 189546: updated the comments to reflect what the new code does. 2003-01-22 06:24:53 +00:00
timeless%mozdev.org 06b309aa38 Bug 179798 cookie confirm dialog no longer works in embedding (doesn't call nsIPrompt service) 
patch by mvl@exedo.nl r=dwitte sr=darin
 2003-01-22 05:52:33 +00:00
nelsonb%netscape.com 8a025005e9 Add OIDs for AES Key Wrap mechanism. 2003-01-22 04:35:54 +00:00
wtc%netscape.com b4f31cb711 Bug 189546: moved the switch statement for known key lengths to the 
beginning of PK11_GetKeyLength to work around a deadlock in nCipher
module if PK11_ExtractKeyValue is called.
 2003-01-22 03:55:21 +00:00
kaie%netscape.com 41218ef77c b=188363 Bad error messages when server uses an invalid cert (-8054) 
r=nelsonb sr=blizzard
 2003-01-22 03:41:35 +00:00
nelsonb%netscape.com 65a0422f22 Implement new AES Key Wrap mechanisms. Bug 167818. 2003-01-22 03:13:04 +00:00
wtc%netscape.com fdf8f4dc25 Bug 189345: we incorrectly assumed that a C_XxxFinal call to determine the 
length of the buffer would also terminate the active operation if the
buffer length is 0.  PKCS#11 says it doesn't, so we need to make the
additional C_XxxFinal call even if the buffer length is 0.  Allocate a
buffer from the heap if the stack buffer is too small and free the
heap-allocated buffer before we return from pk11_Finalize.  We can use the
stack buffer if count is equal to its size.
 2003-01-21 19:33:24 +00:00
seawood%netscape.com 5bc0f27843 I always forget to change both the declaration & the definition. 
Thanks to bird@anduin.net for the patch.
Fixing OS/2 bustage.
 2003-01-19 06:43:19 +00:00
seawood%netscape.com 0b3f900ae5 Callback functions must be defined as such. 
Fixing OS/2 bustage.
 2003-01-19 02:43:13 +00:00
kaie%netscape.com d007c347bc b=189205 Implement early shutdown of NSS resources 
r=javi sr=darin
 2003-01-18 14:03:00 +00:00
relyea%netscape.com 65a9359e6e Bug 198364. Tokens keys do not own their handles. Don't let the key 
get destroyed when freed.
 2003-01-18 01:49:33 +00:00
nelsonb%netscape.com b39068212e When wrapping secret keys with an unpadded block cipher, null padd the keys 
as necessary, per the PKCS 11 spec.  Also, implement padding and unpadding
for single-part only ciphers.
 2003-01-17 05:50:08 +00:00
wtc%netscape.com 3cfd1da0cc Bug 145029: fixed compiler warnings (mostly "xxx might be used 
uninitialized").
 2003-01-17 02:49:11 +00:00
nelsonb%netscape.com 66dbe61852 One more fix for HPUX and Solaris. 2003-01-16 01:44:43 +00:00
jpierre%netscape.com bd1c6e2d6f Fix incorrect usage of QuickDER . See bug 160805 comment 16 2003-01-16 00:56:10 +00:00
nelsonb%netscape.com 52c0e7f513 Fix compilation error. This file is only compiled on 2 platforms. 2003-01-16 00:55:53 +00:00
nelsonb%netscape.com 191e2830e1 Switch from the old vendor-defined mechanism numbers to the new official 
PKCS 11 mechanism numbers.  These numbers will appear in v2.20.
 2003-01-16 00:43:58 +00:00
nelsonb%netscape.com 48e7307212 Enforce that softoken's mechanisms are used only with the PKCS 11 
functions that they're defined to work with.
 2003-01-16 00:28:05 +00:00
nelsonb%netscape.com b4debe71ef Complete the addition of AES Key Wrap to blapi in freebl. 2003-01-16 00:15:21 +00:00
nelsonb%netscape.com f8ffa9b2df Remove the implementation of CKM_KEY_WRAP_LYNKS from softoken. 2003-01-16 00:14:07 +00:00
nelsonb%netscape.com c74e098433 aeskeywrap.c - implement AES Key Wrap algorithm from RFC 3394 2003-01-14 22:16:04 +00:00
glen.beasley%sun.com 63fb2576a6 solaris pkg version 2003-01-14 20:26:36 +00:00
bishakhabanerjee%netscape.com f96d105632 Bug 171263 - NSS test apps to check return value of NSS_Shutdown 2003-01-14 01:03:21 +00:00
bishakhabanerjee%netscape.com 3f8b500ca5 Bug 171263 - NSS test apps shd check return value of NSS_Shutdown 2003-01-13 22:36:39 +00:00
glen.beasley%sun.com a448ee37c6 solaris pkging support 2003-01-13 20:35:36 +00:00
glen.beasley%sun.com 0ba6c54296 solaris pkg support 2003-01-13 19:44:21 +00:00
glen.beasley%sun.com d362c01efd Solaris pkg support 2003-01-13 19:43:15 +00:00
relyea%netscape.com 6418dccb57 Check for Empty CRL list as well. 
Bug 164501.
 2003-01-10 19:09:46 +00:00
relyea%netscape.com 536df41f30 Declare PK11_TokenRefresh() 2003-01-10 17:53:01 +00:00
relyea%netscape.com 449530f503 Add the ability to generate certs with multiple DNS names. 2003-01-09 22:59:42 +00:00
glen.beasley%sun.com 173ecd55e4 Solaris pkg copyright 2003-01-09 22:53:13 +00:00
relyea%netscape.com 5c9c0d249b Remember to include the global: tag 2003-01-09 18:44:26 +00:00
relyea%netscape.com e99b341301 backport NSS 3.7 fixes to the tip. 2003-01-09 18:15:11 +00:00
wtc%netscape.com 22b938bb47 Bug 186201: should handle a null 'environ' pointer, which can happen on 
Solaris if NSS is loaded with dlopen() by an executable linked with the
RTLD_GROUP flag.
 2003-01-09 04:34:31 +00:00
wtc%netscape.com ec08fd394a Bug 187629: do not refresh a CERTCertificate if the same instance of a 
cached cert is added to the collection.
 2003-01-09 04:29:01 +00:00
dbaron%dbaron.org b9083989bb Bug 178643: Remove uses of NS_INIT_ISUPPORTS, since it is no longer needed. r=timeless sr=jag 2003-01-08 23:19:20 +00:00
dbaron%dbaron.org 84f33505f2 Bug 178643: Remove uses of NS_INIT_ISUPPORTS, since it is no longer needed. r=timeless sr=jag 2003-01-08 22:45:23 +00:00
wtc%netscape.com 39a4a9cc69 Bug 186586: If at NSS shutdown there are still certs in the cert caches, 
cause NSS shutdown and the next NSS initialization to fail but do not
destroy the cert caches (and the crypto context and trust domain containing
them) to avoid a crash if the NSS client destroys the certs later.  New
error codes needed to be added to indicate the failure of NSS shutdown and
NSS initialization due to this cause.
 2003-01-08 21:58:29 +00:00
wtc%netscape.com cd80470fa2 Bug 186586: If at NSS shutdown there are still certs in the cert caches, 
cause NSS shutdown and the next NSS initialization to fail but do not
destroy the cert caches (and the crypto context and trust domain containing
them) to avoid a crash if the NSS client destroys the certs later.  New
error codes needed to be added to indicate the failure of NSS shutdown and
NSS initialization due to this cause.
Modified Files:
	base/errorval.c nss/nssinit.c pki/pki3hack.c pki/pki3hack.h
	pki/pkistore.c pki/pkistore.h pki/tdcache.c pki/trustdomain.c
	util/secerr.h
 2003-01-08 21:48:47 +00:00
wtc%netscape.com 209f994fd3 Need to call SSL_ClearSessionCache before calling NSS_Shutdown. 2003-01-08 21:40:52 +00:00
bishakhabanerjee%netscape.com c50dfa28ad checking return value of NSS_Shutdown. Bug 171263 2003-01-07 22:53:13 +00:00
bishakhabanerjee%netscape.com 1b239a8ed0 checking return value of NSS_Shutdown. Bug 171263 2003-01-07 22:31:36 +00:00
bishakhabanerjee%netscape.com 985e092196 new revision: 1.19; previous revision: 1.18 2003-01-07 22:29:54 +00:00
bishakhabanerjee%netscape.com 2430651225 set and exported NSS_STRICT_SHUTDOWN. Bug 171263 2003-01-07 22:10:10 +00:00
kaie%netscape.com 8ac4991f54 b=184940 Enable additional SSL ciphers, add configuration UI 
r=javi sr=jaggernaut
 2003-01-07 00:58:24 +00:00
kaie%netscape.com b6f99631b7 b=177260 Fix known leaks in PSM, track blocking PSM UI, track open SSL sockets 
r=javi sr=darin
 2003-01-06 22:23:49 +00:00
kairo%kairo.at a6f4446e42 change all localeVersion strings, as well as brand.dtd/region.dtd to 1.3b; bug 185698, r=tao, sr=blizzard 2003-01-03 19:57:47 +00:00
dbaron%fas.harvard.edu a34c46af22 Change my email address from dbaron@fas.harvard.edu to dbaron@dbaron.org. Comment changes only. 2003-01-01 23:53:20 +00:00
nicolson%netscape.com 9460ab9be1 Upgrade version from 3.2 to 3.3. 
Uncomment MessageDigest implementations (doh!).
 2003-01-01 02:58:22 +00:00
nicolson%netscape.com 5e1bcfd6d2 Add DigestTest to all.pl. 
Make DigestTest and SigTest return nonzero error code on failure.
 2003-01-01 02:57:50 +00:00
seawood%netscape.com bbb7dec113 Add hack upon dependency hack to Avoid constant NSS rebuilds when pulling from CVS. 2002-12-28 05:50:17 +00:00
seawood%netscape.com d5efcdfb6d Start installing GRE libraries & components into a separate dist/gre directory as part of the default build. 
Bug #186241 r=dougt
 2002-12-28 01:15:07 +00:00
wtc%netscape.com 6eb33bd89e Bug 183612: added some comments. 2002-12-24 02:25:36 +00:00
wtc%netscape.com 158222292b Bug 183612: SECMOD_InitCallOnce() and SECMOD_CleanupCallOnce() should be 
declared and defined with an argument list of "(void)" instead of "()".
Modified Files: pk11cert.c secmodi.h
 2002-12-19 07:03:39 +00:00
nicolson%netscape.com 76ceb77be4 Fix 186097: ProofOfPossession.encode() has paranoid assertion. 2002-12-19 02:31:38 +00:00
wtc%netscape.com b5e025dea3 Bug 183612: renamed some new functions to be consistent with existing 
function names containing SubjectKey and PublicKey.  Moved internal
functions to private headers and use the lowercase cert_ prefix for the
internal functions for subject key ID mapping hash table. r=nelsonb.
 2002-12-19 00:26:34 +00:00
relyea%netscape.com 04963b62bb Bug 186058 2002-12-18 23:55:53 +00:00
nicolson%netscape.com a7f090b8a6 Partial fix for 184754: assertion violation in get_token_certs_for_cache. 
Don't assert if we fail to lookup the cert we just imported. It could
be a bug in the PKCS #11 driver. Instead, throw an exception.
 2002-12-18 23:14:48 +00:00
kaie%netscape.com 5245de3429 Temporary fix for bug 182803. 
While this masks the reported crashes, this is nothing more than a workaround patch.
As long as this patch is in place, any attempt to do profile switching at run time will fail.
We need real fixes for bug 181230 and 177260.
r=javi sr=darin
 2002-12-18 12:50:35 +00:00
wtc%netscape.com ee51cff828 Bug 183612: fixed the bug that 'extra' may be used uninitialized. r=javi. 2002-12-18 02:06:01 +00:00
wtc%netscape.com 8c5bcf00c1 Set NSS version to 3.8 Beta on the trunk. 2002-12-17 23:04:46 +00:00
wtc%netscape.com a67a4928f3 Export CERT_DestroyOCSPResponse in 3.7. Moved HASH_GetHashObjectByOidTag, 
HASH_GetHashTypeByOidTag, and SECITEM_ItemsAreEqual from 3.7 to 3.8.
 2002-12-17 23:02:53 +00:00
relyea%netscape.com 2602912c3d Make sure the session is protected over PKCS #11 calls. 2002-12-17 18:22:38 +00:00
wtc%netscape.com 1c4cebd09f Need to test for null pointers before destroying the lock and condition 
variable.  If NSS initialization fails, this lock and condition variable
may not get created.
 2002-12-17 02:47:46 +00:00
wtc%netscape.com 5a045514c6 I made a mistake in the previous checkin. certdb.h doesn't need to be 
included because the new function CERT_FindCertBySubjKeyID is declared in
cert.h.
 2002-12-17 02:08:51 +00:00
wtc%netscape.com 12860a5501 Bug 183612: added support for looking up a cert by subject key ID and 
creating a CMS recipient info from a subject key ID.  The patch was
contributed by Javi Delgadillo <javi@netscape.com>. r=relyea, wtc.
Modified Files:
	certdb/cert.h certdb/certdb.c certdb/certdb.h certdb/certv3.c
	certdb/stanpcertdb.c nss/nss.def nss/nssinit.c
	pk11wrap/pk11cert.c pk11wrap/pk11func.h pk11wrap/secmod.h
	pki/pki3hack.c smime/cms.h smime/cmslocal.h smime/cmspubkey.c
	smime/cmsrecinfo.c smime/cmssiginfo.c smime/cmst.h
	smime/smime.def
 2002-12-17 01:39:46 +00:00
dougt%netscape.com 8d74b970e3 Allow caller to obtain cert. r=mstoltz, javi. sr=dveditz, b=179016 2002-12-13 22:26:43 +00:00
kaie%netscape.com 3880b9cdab b=182258 Give separate signature validity and sender address mismatch feedback 
r=javi sr=bienvenu
 2002-12-13 20:47:32 +00:00
relyea%netscape.com 3e6d515d45 Increment the tmpbuf pointer to the correct index point 2002-12-13 19:02:13 +00:00
nicolson%netscape.com f5c66b92aa Fix 180827: Update version strings for JSS 3.3. 2002-12-13 06:12:30 +00:00
wtc%netscape.com d212358f78 Bug 185074: open the files we just did a "chmod -w" on once to work around 
a Mac OS X NFS bug. Subsequent opens will see the file is readonly with no
delay.
 2002-12-13 02:06:34 +00:00
nelsonb%netscape.com 49ca4445ae Clean up command line options parsing and Usage message. 2002-12-13 01:25:45 +00:00
relyea%netscape.com 88da4209b7 Use correct sense of the timeout value. 2002-12-13 00:25:21 +00:00
nelsonb%netscape.com a4ffefd8be Support SHA256, SHA384, and SHA512 hashes in NSS. 2002-12-12 06:05:45 +00:00
relyea%netscape.com 15ce24e7da Don't break solaris or linux (add the ';') 2002-12-11 17:56:49 +00:00
relyea%netscape.com 986ee61360 Export new command to pull for token change events. 2002-12-11 17:53:20 +00:00
relyea%netscape.com 79fda8d95f Program to test smartcard removal and insertion detection. 2002-12-11 17:44:53 +00:00
relyea%netscape.com b3956b6cb3 Add token removal blocking function. 2002-12-11 17:43:24 +00:00
thayes%netscape.com 8d4be901b5 Bug 184557: Allow usage specified on command line (-u) to be used to validate 
certificates used for signing (-S option).  Also add special handling for
nickname "NONE" in the -Y option.  This specifies that no certificate and
encryption key preference should be included in the signature object.
 2002-12-11 01:44:37 +00:00
wtc%netscape.com 79592c0eb3 Bug 180294: moved the OpenVMS build from the POSIX subsystem to native 
VMS (GNV).  The patch is contributed by Colin Blakes <colin@theblakes.com>.
Modified files: OpenVMS.mk config.mk rules.mk nsinstall/nsinstall.c
 2002-12-10 20:27:45 +00:00
relyea%netscape.com abf1a9ae02 Sigh, this is what was breaking the Linux builds... incorrect initializer. 2002-12-10 18:09:16 +00:00
relyea%netscape.com 5a83c35578 Make SubjectAltEncode a public function. Fixes build breakage in Linux 2002-12-10 17:41:16 +00:00
relyea%netscape.com 1e02f10049 Add test cases for multiple email addresses in a single certificate. 2002-12-10 17:19:00 +00:00
relyea%netscape.com 7ba80c7f5c Add code to create multiple email addresses in a single cert. 2002-12-10 17:18:06 +00:00
relyea%netscape.com fa12d2382e Export the AltSubjectEncode function so our test programs can build certs 
with multiple email addresses.
 2002-12-10 17:15:15 +00:00
relyea%netscape.com 962c8ddfb3 Create profiles for all the email addresses in a certificate. 2002-12-10 17:14:17 +00:00
relyea%netscape.com 603a1de75c Fix padding value. 2002-12-06 19:11:57 +00:00
nelsonb%netscape.com aad3764409 Expunge dead code. 2002-12-05 22:16:22 +00:00
nelsonb%netscape.com 62b8516bb9 Don't compile the .c files in lib/pki1 on the trunk. These files are used 
only in Stan.
 2002-12-05 22:15:36 +00:00
wtc%netscape.com 5fa50f792d Bug 39494: added a check to prevent buffer overflow. r=mcgreer,nelsonb. 2002-12-04 23:41:49 +00:00
wtc%netscape.com 89bb676522 Fixed the build breakage of const unsigned char[] and unsigned char * 
mismatch on the Mac (compiler warnings on other platforms) by adding
(unsigned char *) typecasts.  r=relyea.  (Bug 183350)
 2002-12-04 00:28:56 +00:00
kaie%netscape.com 2fda7d4793 b=182158 JavaScript error when pressing Ok in "Cert already exists" dialog - setWindowName is not defined 
r=kaie sr=alecf
 2002-12-03 15:27:27 +00:00
wtc%netscape.com f64d594319 Bug 181913: disable the makefile rule for .s for OS/2 so that .asm files 
are used when there are same-named .s files in the same directory.  The
patch is contributed by Javier Pedemonte <pedemont@us.ibm.com>.
 2002-12-02 22:57:21 +00:00
kaie%netscape.com da1410e6e1 b=115294 Support S/Mime signing only configuration / relax certificate configuration requirements 
r=javi sr=sspitzer
 2002-11-28 18:31:03 +00:00
wtc%netscape.com 0def6ffdbe Bug 181878: fixed two more bugs in the new code to support multiple email 
addresses per certificate.  r=nelsonb.
 2002-11-27 01:28:03 +00:00
wtc%netscape.com b78a21a145 Bug 182086: on Mac OS X, ranlib needs to be rerun after static libraries 
are moved.
 2002-11-26 23:05:56 +00:00
relyea%netscape.com c40360b6a9 More review changes, 
Fix incorrect return in pcertdb.c
 2002-11-26 22:14:56 +00:00
relyea%netscape.com 25a292272c Incorporate some of Nelson's review changes. 
Collapse all the profile data into an array for easier processing when printing out.
 2002-11-26 21:03:18 +00:00
relyea%netscape.com 7ee6bebcae Move mac build changes from 3.6 branch back to the trunk 2002-11-26 21:00:31 +00:00
wtc%netscape.com fd00621e5c Bug 180228: moved CERT_CRLCacheRefreshIssuer from the NSS_3.6.1 section to 
the NSS_3.7 section.
 2002-11-26 19:21:55 +00:00
relyea%netscape.com c296a3a69f Incorporate Terry's and Nelson's reviews. 2002-11-26 18:27:25 +00:00
nelsonb%netscape.com 4bdff07d6f Back out my last change. 2002-11-26 07:07:20 +00:00
nelsonb%netscape.com c4ae2fc1f4 Eliminate bug due to uninitialized variable index. Eliminate leak. 
Remove lots of warnings about signed/unsigned and assigning int to uchar.
 2002-11-26 05:58:51 +00:00
relyea%netscape.com 58543311f7 Bug 181878 allow multiple email addresses to point to a single subject record. 2002-11-26 00:13:54 +00:00
nelsonb%netscape.com b415060cf8 Put the nss 3.7 section after the nss 3.6.1 section. 2002-11-21 23:22:52 +00:00
ian.mcgreer%sun.com 72edde5172 bug 172247, don't allow import of duplicate issuer/serial certs 2002-11-21 20:43:15 +00:00
nelsonb%netscape.com e2809aa4e8 Add tests for sha256, sha384, and sha512. 2002-11-21 05:44:41 +00:00
nelsonb%netscape.com 6b8d4e688b Add test modes for sha256, sha384 and sha512. 
Fix the -c (restart) option for testing hashes.  It works with all hashes.
When the -d option is given along with the -i or -o filename option,
and the filename is not absolute, the filename is taken to be relative to
the the mode's test directory.
 2002-11-21 05:44:03 +00:00
nelsonb%netscape.com 924b265d37 Use the 32-bit code on Solaris x86 platforms, too. 2002-11-21 02:54:04 +00:00
nelsonb%netscape.com f8fead2f58 Add test cases from FIPS 180-2. 2002-11-21 02:26:50 +00:00
nelsonb%netscape.com c9be494de9 Back out revision 1.2, which was a workaround for a c preprocessor bug 
in a certain version of the c compiler for Dec/Compaq Alpha OSF1.
The file now requires one of these compilers on that platform:
Compaq C V6.3-132  or Compaq C V6.4-214 (dtk)
 2002-11-20 05:25:58 +00:00
nelsonb%netscape.com 6986b980f7 Optimization: change macros to do only 32-bit arithmetic on platforms 
with only 32-bit registers.
 2002-11-20 00:48:09 +00:00
jpierre%netscape.com e965a244ec Fix for bug 180894 - don't assert in ShutdownCRLCache() 2002-11-19 21:37:50 +00:00
nicolson%netscape.com 844a47f512 Fix 180396: javax.crypto.Cipher wrapping does not work with RSA algorithm. 
Support RSA as a wrapping/unwrapping algorithm.
 2002-11-19 00:41:09 +00:00
nicolson%netscape.com 80f7fdb602 Throw InvalidKeyException instead of InvalidAlgorithmParameterException, 
because the latter may get thrown away by our caller, but the former will
not be.
 2002-11-19 00:39:43 +00:00
nicolson%netscape.com 929e00e5b5 Change silly switch statement to an if statement. 2002-11-19 00:31:10 +00:00
nicolson%netscape.com 5f21037ae6 Make NotExtractableException take a String argument to its constructor. 2002-11-19 00:30:43 +00:00
kirk.erickson%sun.com b32a73f6fe Made 'solarispkg' copy pkg/solars to pkg/$(OBJDIR), and go there to 
build packages.  This addresses the problems Sonja reported which
resulted from building in the same tree nfs'd from multiple platforms
simultaneously.  Also removed -$(MACH) and ROOT-$OBJDIR changes that
failed to address this problem.
 2002-11-17 17:26:51 +00:00
timeless%mozdev.org 384066e98e Bug 58221 don't use strlen to check if a string is of length 0 
patch by aaronl@vitelus.com r=timeless sr=bz
 2002-11-17 05:16:49 +00:00
cbiesinger%web.de 74eba6fb3e patch by abecevello@sympatico.ca r=rangansen,me sr=roc+moz 
fix some spelling errors
 2002-11-16 20:44:32 +00:00
nelsonb%netscape.com 0391c3a0ab Change all functions that create contexts for encryption to treat their 
input buffers as const.  Warning reduction.
 2002-11-16 06:09:58 +00:00
jpierre%netscape.com 071bcc8ef0 Fix again? 2002-11-16 05:05:17 +00:00
jpierre%netscape.com 2854b0f273 Fix build again ! 2002-11-16 04:27:39 +00:00
nelsonb%netscape.com c69f246d7a Recognize new SHAxxx OIDs. 2002-11-16 03:34:53 +00:00
jpierre%netscape.com a46a21ce98 Fix build 2002-11-16 03:32:40 +00:00
nelsonb%netscape.com d2a0920045 Correct softoken routines to work with new larger SHAxxx hashes. 2002-11-16 03:32:39 +00:00
nelsonb%netscape.com 5556b4b77f Correct HMAC code to work with new larger SHAxxx hashes. 2002-11-16 03:30:37 +00:00
nelsonb%netscape.com dd4c5651b8 Add new SHAxxx hash algorithms to tables of SECHashObjects. 2002-11-16 03:29:32 +00:00
nelsonb%netscape.com 0575c4bc91 Declare new vendor-defined mechanisms for SHA256, SHA384 and SHA512. 2002-11-16 03:25:01 +00:00
nelsonb%netscape.com eeb4bc7c50 Now that we have hashes larger than SHA1, 
#define HASH_LENGTH_MAX         SHA512_LENGTH
 2002-11-16 03:21:53 +00:00
nelsonb%netscape.com 6b4fae5a4a Don't reject a cert request with an empty list of CA cert names. 
Don't crash with an empty CA name list.
 2002-11-16 03:19:48 +00:00
nelsonb%netscape.com 9ee53c1fde Add "const" modifier to all fixed arrays used for keys or known text. 2002-11-16 01:00:44 +00:00
nelsonb%netscape.com 2d2f10ff75 Fix crash when formatting a cert with optional version not given. 2002-11-15 06:32:51 +00:00
jpierre%netscape.com d654882327 Patch for 180228 - export CRL cache flush API . r=wtc 2002-11-15 05:04:05 +00:00
nelsonb%netscape.com 4f733e25ac Make selfserv build for Darwin. 2002-11-14 23:33:24 +00:00
ian.mcgreer%sun.com 476282ab25 bug 39494, handle non-standard AVAs properly 
r=nelsonb
 2002-11-14 17:04:43 +00:00
kaie%netscape.com a16a952116 b=168450 Cleanup some PSM code and add JavaDoc documentation to all freeze candidates 
r=javi sr=alecf
 2002-11-14 00:50:02 +00:00
relyea%netscape.com de6635b1b4 Adjust the time values so we have correct and consistant displays. 2002-11-11 22:01:57 +00:00
relyea%netscape.com c89a0a7444 Multi-access database race condition patches. These changes are already checked 
into NSS 3.6.1.
 2002-11-11 22:00:03 +00:00
kirk.erickson%sun.com 7b5d682d55 Made awk_pkginfo-$(MACH) machine dependent for Sonja's release build. 2002-11-11 20:44:55 +00:00
relyea%netscape.com 37feda0de1 Remove long dead code from util. triggered by bug 179038 2002-11-11 18:17:24 +00:00
jpierre%netscape.com cc471dc4ee Assert if the QuickDER decoder does not consume all the input 2002-11-09 01:56:01 +00:00
relyea%netscape.com df7578f751 Bug 176667: kaie authored the patch, ian/relyea reviewed it. 2002-11-08 19:10:54 +00:00
nicolson%netscape.com 62297d34ca default doesProduceOutput to true for compatibility. 2002-11-08 02:24:20 +00:00
nicolson%netscape.com ac141012ed Add isExtensionPresent and getExtension. 2002-11-08 00:40:26 +00:00
glen.beasley%sun.com d39fba9d10 removes sun provider and set passwords 2002-11-07 22:49:26 +00:00
glen.beasley%sun.com da13ded012 move removeSunProvider after JSS JCE provider is loaded 2002-11-07 03:33:04 +00:00
jpierre%netscape.com 3fe1f54335 Fix for 177798 . Improve handling of initialization / shutdown of the CRL cache using a static status variable 2002-11-07 00:02:31 +00:00
ian.mcgreer%sun.com 9ec0046baa bug 177366, clean up refcounting 
r=relyea
 2002-11-06 18:53:55 +00:00
nicolson%netscape.com c6fdcc6563 Add license header to new file. 2002-11-06 03:24:39 +00:00
nicolson%netscape.com ecfe6a3ccd Add TestSDR, to test the new SecretDecoderRing. 
In all.pl, always set the CLASSPATH to be the signed JSS JAR file, so
that we can use the JCE (javax.crypto.*) interface.
 2002-11-06 03:22:10 +00:00