mozilla
/
gecko-dev
зеркало из https://github.com/mozilla/gecko-dev.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
150 095 коммитов 615 Ветки 98 Теги 5,7 GiB
Граф коммитов

3583 Коммитов

Автор SHA1 Сообщение Дата
julien.pierre.bugs%sun.com 7ab19a77f5 Clean-up compiler warnings 2005-04-02 06:21:20 +00:00
julien.pierre.bugs%sun.com e38dfe9691 Fix for bug 288726. error in SECMOD_CancelWait 2005-04-02 06:02:53 +00:00
julien.pierre.bugs%sun.com 16a9e79d60 Silence compiler warnings 2005-04-02 05:33:41 +00:00
julien.pierre.bugs%sun.com bfae460ea7 Remove unused variable 2005-04-02 05:26:58 +00:00
julien.pierre.bugs%sun.com e413d4ae39 Remove unused variables 2005-04-02 05:25:26 +00:00
julien.pierre.bugs%sun.com a35532a9db Cleanup unused variables and dead code 2005-04-02 05:24:07 +00:00
julien.pierre.bugs%sun.com 85f13422bc Remove unused variable 2005-04-02 05:17:27 +00:00
alexei.volkov.bugs%sun.com aa8a4b4b1c fix for bug 265003: selfserv.c: allow selfserv to load crls. R=julien 2005-04-02 02:29:24 +00:00
nelsonb%netscape.com aed5390a2d Rename functions that are shared by pk11wrap and softoken from sftk_ to 
secmod_.  Bug 286685. r=relyea.
 2005-04-02 00:46:13 +00:00
wtchang%redhat.com 1ddbee0247 Bugzilla bug 288657: fixed the bug that pk11_AnyUnwrapKey returns a 
partially constructed symKey object if C_UnwrapKey fails with
CKR_DEVICE_ERROR.  r=relyea.
 2005-04-01 22:27:44 +00:00
julien.pierre.bugs%sun.com ae1e453088 Cleanup unused variables 2005-04-01 02:47:52 +00:00
julien.pierre.bugs%sun.com f48776e693 Indentation fix (related to 287498) 2005-04-01 00:14:34 +00:00
julien.pierre.bugs%sun.com 9e0be5be27 Fix for 259896 - make rsaperf use PKCS#11 . and many other improvements. r=nelson 2005-03-31 23:33:51 +00:00
wtchang%redhat.com dda0b57a91 Set NSS version to 3.10 Beta 3. 2005-03-30 00:22:36 +00:00
alexei.volkov.bugs%sun.com e93227eb79 fix for bug 287625: rsaperf should run multithreaded 2005-03-29 22:32:22 +00:00
nelsonb%netscape.com c03b9d33fe Rename all internal private softoken functions types and symbols from 
PK11 or pk11 prefixes to SFTK or sftk prefixes.  Bug 286685.
r=relyea,wtchang  Modified Files:
 cmd/bltest/blapitest.c lib/pk11wrap/pk11pars.c lib/softoken/dbinit.c
 lib/softoken/dbmshim.c lib/softoken/fipstest.c lib/softoken/fipstokn.c
 lib/softoken/pcertdb.c lib/softoken/pk11db.c lib/softoken/pk11pars.h
 lib/softoken/pkcs11.c lib/softoken/pkcs11c.c lib/softoken/pkcs11i.h
 lib/softoken/pkcs11u.c lib/softoken/softoken.h lib/softoken/tlsprf.c
 2005-03-29 18:21:18 +00:00
wtchang%redhat.com bbd584b694 Bugzilla Bug 286439: Removed PKCS11_USE_THREADS and PK11_USE_THREADS. 
r=relyea,nelsonb.
Modified Files:
	pk11wrap/pk11list.c pk11wrap/pk11pars.c pk11wrap/pk11skey.c
	pk11wrap/pk11slot.c pk11wrap/pk11util.c pk11wrap/secmod.h
	pk11wrap/secmodi.h pk11wrap/secmodt.h pk11wrap/secmodti.h
	softoken/pkcs11.c softoken/pkcs11i.h softoken/pkcs11u.c
 2005-03-28 20:45:37 +00:00
wtchang%redhat.com ef701de98b Removed an extraneous ^M character at the end of a line. 2005-03-28 19:37:28 +00:00
julien.pierre.bugs%sun.com 6ac5e73fd8 Fix for 287948 - fix overflow in calculation of ops/s 2005-03-25 02:59:07 +00:00
julien.pierre.bugs%sun.com 3b46c1cef2 Fix for bug 287498 - add option for rsaperf to run for a fixed duration, and display ops/s . 2005-03-24 23:07:40 +00:00
neil.williams%sun.com cf193dfda4 Bug 286505 Now reports an error on EOF in standard input. Leaving resolution 
unchanged until we find out why the failure is different on SPARC than on x86.
r=nelson
 2005-03-19 03:36:55 +00:00
wtchang%redhat.com cb2efbad98 Got rid of extraneous ^M characters at some line endings. 2005-03-17 21:28:40 +00:00
neil.williams%sun.com d5d19c56f7 Bug 285208 Fixes ext processing bug introduced by previous patch. 
r=nelson
 2005-03-17 01:43:47 +00:00
wtchang%redhat.com ddab8fa00e Bugzilla Bug 286302: made PK11_CreateSymKey static and renamed it 
pk11_CreateSymKey.  r=nelsonb.
Modified Files: pk11priv.h pk11skey.c
 2005-03-16 22:40:35 +00:00
wtchang%redhat.com 4dc846b1fe Bugzilla Bug 286313: code cleanup: use PORT_New and PORT_ZNew to allocate 
structures. r=nelsonb.
 2005-03-16 21:57:47 +00:00
wtchang%redhat.com e112b06ae2 Bugzilla Bug 286318: performance optimization: save the result of 
PK11_SESSION_LOCK in a local variable and reuse the result. r=nelsonb.
Modified Files: pkcs11.c pkcs11u.c
 2005-03-16 19:24:45 +00:00
wtchang%redhat.com 7c8a3f8874 Bugzilla Bug 286313: pk11_getKeyFromList can call PORT_Alloc instead of 
PORT_ZAlloc.  PK11_CreateSymKey should set the data.type member. r=jpierre
 2005-03-16 19:10:49 +00:00
wtchang%redhat.com 733584cdd9 Bugzilla Bug 286298: comment formatting changes only. 
Modified Files: pkcs11i.h pkcs11u.c
 2005-03-16 19:02:04 +00:00
wtchang%redhat.com 08af568746 Bugzilla Bug 286298: removed the PKCS11_STATIC_ATTRIBUTES and 
PKCS11_REF_COUNT_ATTRIBUTES macros, supporting only one of the three
attribute allocation strategies (static allocation). r=jpierre.
Modified Files: pkcs11i.h pkcs11u.c
 2005-03-16 18:48:34 +00:00
nelsonb%netscape.com 0b4c6bf4e9 Eliminate one cause of double-deletes of PKCS11 keys and sessions. 
Bug 283690. Patch contributed by Bob Relyea. r=nelson.
 2005-03-15 05:27:31 +00:00
wtchang%redhat.com 1980fc5f8a Bugzilla Bug 276183: added a comment for PK11_HashBuf. 2005-03-14 19:22:06 +00:00
neil.williams%sun.com 6c796abdc1 Bug 285208: certutil when given arguments for both -7 and -8 would create two 
subjAltName extensions. Now a list single extension with both name types in
created.
r=nelson
 2005-03-14 18:55:46 +00:00
wtchang%redhat.com 38c071cb45 Bugzilla Bug 284386: the OID for RFC 1327 ucl was incorrectly encoded. 2005-03-14 18:04:44 +00:00
wtchang%redhat.com 5a13096fee Bugzilla Bug 284386: fixed build error using gcc4. gcc4 disallows arrays 
of incomplete element type (which are invalid in C).  We moved the
declaration of nss_builtin_oids to pki1.h, after the definition of NSSOID.
r=caillon.
Modified Files: oiddata.h oidgen.perl pki1.h
 2005-03-14 18:02:00 +00:00
christophe.ravel.bugs%sun.com 0f7ac130b6 238319: Sun packages changes 
Uprev rpm release number.
 2005-03-11 23:06:42 +00:00
julien.pierre.bugs%sun.com 49a5cedc08 Fix for 176705 - fix rpath on AMD64 platform. r=saul, sr=wtchang 2005-03-09 23:04:49 +00:00
neil.williams%sun.com 5431bc6445 r=nelson Bug=263779 2005-03-09 23:02:48 +00:00
nelsonb%netscape.com d126b39b34 Do not crash if Server SID cache is uninitialized. Bug 237724 r=Julien 
Instead, if SSL_NO_CACHE is not set, return an error code.
 2005-03-09 05:20:44 +00:00
nelsonb%netscape.com b4a5eb6864 Add root CA certs for XRamp, Camerafina and NetLock. 
Bugs 274723. 275576, and 280744.  r=Jullien.Pierre
 2005-03-08 08:44:57 +00:00
julien.pierre.bugs%sun.com d501f3ab57 Fix for 285233 - need extra symbols to be exported to support CRL generation. Ch 
ecking in for alexei volkov . r=nelson
 2005-03-08 07:08:48 +00:00
julien.pierre.bugs%sun.com c62079e031 Fix for bug 270689 . minor issues remaining with list cleanup and on-the-fly lock creation 2005-03-08 05:52:33 +00:00
nelsonb%netscape.com f6cd864211 Correctly print cert request attributes in pp. Bug 284191. r=neil.williams 2005-03-08 01:20:04 +00:00
wtchang%redhat.com 11ee6948b1 Bugzilla Bug 284839: checked in Bob Relyea's patch to improve the 
responsiveness of SECMOD_WaitForAnyTokenEvent. r=wtc,nelsonb.
Modified Files: lib/dev/dev.h lib/dev/devslot.c lib/pk11wrap/pk11util.c
 2005-03-07 21:20:38 +00:00
wtchang%redhat.com c6b963e853 Bugzilla Bug 263779: update the comment to reflect the new code. 
Modified Files: secoid.c secoidt.h
 2005-03-07 18:34:48 +00:00
nelsonb%netscape.com f9e9a4b85f Export CERT_SequenceOfCertExtensionTemplate on Windows. 
Fix type of "attributes" member of struct CERTCertificateRequestStr.
Bug 284200.  r=nelson.williams & wtchang.
 2005-03-05 08:03:04 +00:00
wtchang%redhat.com 007248241e Bugzilla Bug 221425: enable all.sh to run with Cygwin. Also fixed an 
incorrect line continuation (of a tstclnt command line) in ssl.sh.
r=nelsonb,jpierre
Modified files: init.sh ssl.sh
 2005-03-05 02:00:30 +00:00
wtchang%redhat.com e14aed2199 Added a blank line after the triple license header to match the output 
of the new oidgen.perl.
 2005-03-04 18:30:12 +00:00
julien.pierre.bugs%sun.com afed9f1c17 Fix for 283765. Fix for UMR in NSSUsage. r=julien 2005-03-04 04:32:04 +00:00
julien.pierre.bugs%sun.com e31568eecd Fix crash in CRL sorting callbacks from qsort. 2005-03-03 04:07:26 +00:00
neil.williams%sun.com aa670cb0b1 Bug 263779 r=nelson@bolyard.com 
This patch adds a new OID which is needed for the certutil patch which will follow.
 2005-03-02 02:54:54 +00:00
christophe.ravel.bugs%sun.com 7cc6cea977 238319: Sun packages changes. 
Add addbuiltin, pk11priv.h, pk11pub.h
 2005-02-28 17:45:20 +00:00
nelsonb%netscape.com d614d9c9ff Report invalid key when key import fails. Do not go on and use invalid 
key handle.  Bug 283642.  r=relyea
 2005-02-27 15:25:46 +00:00
julien.pierre.bugs%sun.com 0923544a58 Fix for bug 283761 - use of memset in selfserv is inefficient. r=nelson 2005-02-26 04:57:32 +00:00
christophe.ravel.bugs%sun.com 8105f005e3 238319: Sun packages changes. 
Add Mozilla license.
 2005-02-26 02:20:42 +00:00
julien.pierre.bugs%sun.com cd9154c2e8 Fix for bug 272327 . AMD64 assembly optimization for bignum multiply. r=nelson 2005-02-25 04:30:11 +00:00
julien.pierre.bugs%sun.com f8a1159f11 Move static functions out of certi.h header file and into crl.c source file, to remove warnings with gcc 2005-02-25 00:54:29 +00:00
julien.pierre.bugs%sun.com 1861144044 Undo accidental deletion of PORT_ZFree 2005-02-24 06:02:16 +00:00
julien.pierre.bugs%sun.com a4621e0461 Fix for bug 270742 - incorporate AMD64 implementation of arcfour . Code donated by Marc Bevand, and integrated by Nelson . r=wtchang 2005-02-24 02:09:41 +00:00
julien.pierre.bugs%sun.com 09e544676a Fix for 269581 - cache the value of CKA_PRIVATE on private keys to avoid unnecessary C_GetAttributeValue . Also fix i 
ncorrect logic in attribute tests. r=rrelyea,wtchang
 2005-02-24 00:38:23 +00:00
julien.pierre.bugs%sun.com 0a4b279c0f Fix for 269581 - cache the value of CKA_PRIVATE on private keys to avoid unnecessary C_GetAttributeValue . Also fix incorrect logic in attribute tests. r=rrelyea,wtchang 2005-02-24 00:35:51 +00:00
julien.pierre.bugs%sun.com 8ac2cbecc8 Fix compiler warnings under Linux 2005-02-24 00:22:59 +00:00
julien.pierre.bugs%sun.com 2c3c71caa0 Add comment for bug 243585 2005-02-24 00:22:23 +00:00
wtchang%redhat.com e180302d71 Bugzilla Bug 282527: fixed a bug that prevented certutil from generating 
a cert with multiple DNS names in the subjectAltName extension.  The patch
is contributed by Neil Williams of Sun. r=wtc.
 2005-02-23 23:44:09 +00:00
wtchang%redhat.com 2887e52c23 Bugzilla Bug 282370: Added OID for PKIX_CA_ISSUERS. The patch is 
contributed by Martin v. L�wis <martin@v.loewis.de>. r=nelson,wtc.
Modified Files: secoid.c secoidt.h
 2005-02-23 19:43:02 +00:00
wtchang%redhat.com cf7f00183c Bug 236613: fixed the fallout from the change to MPL/LGPL/GPL tri-license. 
Our script for processing the *.def on the Mac cannot handle blank lines.
Modified Files: nssckbi.def nss.def smime.def softokn.def ssl.def
 2005-02-23 19:25:39 +00:00
wtchang%redhat.com 07d5483970 Bugzilla Bug 282367: Export CERT_DestroyUserNotice from the nss shared 
library.  Added a CERT_DestroyUserNotice call to cmd/lib/pppolicy.c to
fix a leak of CERTUserNotice. r=nelsonb.
Modified Files: lib/nss/nss.def cmd/lib/pppolicy.c
 2005-02-22 20:02:22 +00:00
julien.pierre.bugs%sun.com 66bc594587 Fix compilation on AIX 2005-02-15 19:26:28 +00:00
julien.pierre.bugs%sun.com 1b8fc2a9d7 Fix for 243585 - add the ability to use CRL objects from RAM . r=nelson, neil.williams 2005-02-15 06:26:43 +00:00
nelsonb%netscape.com 756dbad584 Export HASH_Clone HASH_HashBuf HASH_ResultLenContext 
Bug 273444, r=julien.pierre
 2005-02-12 06:39:23 +00:00
julien.pierre.bugs%sun.com 37fdc5fab9 Fix for 281761 - VFY_CreateContext passes wrong key object; and other cleanup. r=nelson 2005-02-10 08:05:54 +00:00
neil.williams%sun.com a7dcc795a8 Bug#:280602 Added list option to pk12uti, test for it. 
r=nelson@bolyard.com
 2005-02-08 01:04:50 +00:00
gerv%gerv.net f45b5900c8 Bug 236613: change to MPL/LGPL/GPL tri-license. 2005-02-02 22:28:27 +00:00
wtchang%redhat.com 4c5ddcd96b Wrap long lines. 2005-01-27 21:33:59 +00:00
wtchang%redhat.com 2aadb23379 Bugzilla Bug 279621: removed relnotes.txt, which contains HCL 1.7.5 release 
notes.
 2005-01-27 19:06:07 +00:00
wtchang%redhat.com 82b1183c84 Bugzilla Bug 267158: removed the $Name$ RCS keyword from our source files. 
This keyword adds noise to the output of "ident libnss3.so | grep NSS"
on our debug build, and appears to cause spurious CVS conflicts. r=nelsonb.
 2005-01-20 02:25:51 +00:00
wtchang%redhat.com d0724fcd94 Bugzilla Bug 278381: fixed double frees and mismatch of format specifers 
and arguments. The patch is contributed by Tim Ruehsen
<tim.ruehsen@gmx.de>. r=wtc,relyea.
 2005-01-14 18:59:20 +00:00
wtchang%redhat.com 467935176b Bugzilla Bug 276180: defend against invalid arguments to PK11_HashBuf 
and PK11_DigestOp. r=nelsonb.
 2005-01-04 22:00:01 +00:00
wtchang%redhat.com ddbea8b6fc Bugzilla bug 273624: fixed the regression (from NSS 3.3.x) that 
NSS_Initialize didn't report the SEC_ERROR_BAD_DATABASE error if
the NSS databases haven't been created.  r=nelsonb,relyea.
Modified Files: pk11wrap/pk11err.c pk11wrap/pk11load.c
                softoken/dbinit.c softoken/pkcs11n.h
 2005-01-04 18:20:00 +00:00
nelsonb%netscape.com 897bade8c1 Initialize 4 variables. Plug UMR reports. Bug 263691. r=wtchang 2004-12-24 07:13:35 +00:00
nelsonb%netscape.com c50e280c7b Add end of list marker to SECErrorCodes enum in secerr.h. 
Bug  273611, r=Saul.edwards
 2004-12-23 23:42:25 +00:00
julien.pierre.bugs%sun.com 99bef0be47 Fix for 273993 . SSL client cache grows with non-restartable sessions . r=saul,nelson 2004-12-17 02:01:35 +00:00
julien.pierre.bugs%sun.com 6c048409ed Fix for 266206 - avoid calling getdtablesize twice 2004-12-08 23:00:19 +00:00
julien.pierre.bugs%sun.com 5ab2c1cd4b Fix for bug 270689 - race condition in softoken list lock creation . r=nelson 2004-12-08 01:13:54 +00:00
julien.pierre.bugs%sun.com 7bcac0c35b Check for NULL PRFileDesc before closing them . r=saul,nelson 2004-12-07 06:25:34 +00:00
nelsonb%netscape.com 5bf350b4f7 Workaround the occasional SSL server cert that has the step-up OID but 
not the SSL server OID.  Patch by Aaron Spangler <aaron@spangler.ods.org>
Bug 231775. r=nelson
 2004-12-02 22:08:14 +00:00
nelsonb%netscape.com c33c315aee When attempting to find an SMIME profile for a given email address, 
firt ensure that the email address is not NULL and not empty.
Bugzilla bug 263596. r=wan-teh.
Modified Files: lib/certdb/stanpcertdb.c lib/pk11wrap/pk11nobj.c
 2004-12-02 21:34:15 +00:00
nelsonb%netscape.com 5b13f09e65 Fixes bugs 258416, 261374, 261375, 261379, 271551 and 271585 
Modified Files: certdata.c certdata.txt nssckbi.h
r=relyea.  Add root CA certs for
    QuoVadis Root CA                        C,C,C
    Security Communication Root CA          C,C,C
    Sonera Class 1 Root CA                  C,C,C
    Sonera Class 2 Root CA                  C,C,C
    Staat der Nederlanden Root CA           C,C,C
    TDC Internet Root CA                    C,C,C
    TDC OCES Root CA                        C,C,C
    UTN DATACorp SGC Root CA                C,p,p
    UTN USERFirst Email Root CA             p,C,p
    UTN USERFirst Hardware Root CA          C,p,p
    UTN USERFirst Object Root CA            p,p,C
 2004-12-02 19:47:45 +00:00
christophe.ravel.bugs%sun.com b9517a325d 238319: Sun packaging changes. 
Port from NSS_3_9_BRANCH.
 2004-11-29 16:31:50 +00:00
nelsonb%netscape.com 08836590b0 Do case-insensitive comparisons of hostnames to wildcarded names. 
Bug 266651.  Patch contributed by Ken Key <key+mozilla@ksquared.net>.
 2004-11-19 23:54:10 +00:00
wchang0222%aol.com 7c98ff6077 Bugzilla bug 268502: fixed some function declaration problems. r=jpierre, 
relyea.
 2004-11-18 23:51:37 +00:00
julien.pierre.bugs%sun.com 94b08bc344 Fix bugzilla 268521 - C_CloseSession getting called after C_CloseAllSessions . r=relyea, nelsonb 2004-11-09 23:19:24 +00:00
wchang0222%aol.com 3b305b181f Bugzilla bug 248435: declare the exported functions CERT_DecodeGeneralName 
and CERT_EncodeGeneralName in the public header cert.h.  r=jpierre.
Modified Files: cert.h genname.h xconst.c
 2004-11-09 06:13:32 +00:00
wchang0222%aol.com 896b606026 Removed a useless makefile rule. 2004-11-05 02:46:09 +00:00
wchang0222%aol.com 254aeee16c Bugzilla bug 261794: cvs removed obsolete .cvsignore files that contain 
only files that have since been checked into CVS.  r=gerv.
Removed Files: ckfw/.cvsignore pki1/.cvsignore
 2004-11-05 02:28:40 +00:00
wchang0222%aol.com 382316cb4d Define the macro 'verbose' as -1 to turn all all zlib trace messages in 
debug builds.  This is to be consistent with our modifications to the old
zlib (Bugzilla bug 131826).
 2004-11-04 16:23:19 +00:00
wchang0222%aol.com 37654a1a9c Removed the definition of 'errno' as a global variable for WinCE. Our 
WinCE port implements 'errno' as thread local storage.
 2004-11-04 06:14:23 +00:00
wchang0222%aol.com f4dfeee106 The test programs $(PROGRAMS) need to be added to TARGETS, otherwise 
they won't get built and the libs target will fail trying to install them.
 2004-11-04 06:09:24 +00:00
wchang0222%aol.com 1540a23e93 Added makefile rules to build the test programs (example and minigzip) and 
the test target to run the tests.
Modified Files: Makefile config.mk manifest.mn
 2004-11-03 02:17:04 +00:00
wchang0222%aol.com bf8833c4b9 Bugzilla bug 131826: upgraded to zlib 1.2.2. a=relyea,jpierre. 
Modified Files:
	README adler32.c compress.c config.mk crc32.c deflate.c
	deflate.h example.c gzio.c inffast.c inffast.h inffixed.h
	inflate.c inftrees.c inftrees.h manifest.mn minigzip.c trees.c
	uncompr.c zconf.h zlib.h zutil.c zutil.h
Added Files:
	crc32.h infback.c inflate.h
Removed Files:
	infblock.c infblock.h infcodes.c infcodes.h infutil.c
	infutil.h makefile.win maketree.c netscape_mods.doc zip16.def
 2004-11-02 23:40:10 +00:00
julien.pierre.bugs%sun.com 358d31e347 Fix for 266940 . increase MAX_THREADS in selfserv 2004-10-31 00:22:56 +00:00
julien.pierre.bugs%sun.com 504b389434 Fix for 266206 . close only up to 64k descriptors. 2004-10-29 06:14:22 +00:00
julien.pierre.bugs%sun.com 781aca838b Fix for bug 262192 . assert and check attribute ptr 2004-10-24 18:31:27 +00:00
julien.pierre.bugs%sun.com 464720d125 Fix for bug 265707 - SECMOD_FindSlot always returns NULL. r=relyea 2004-10-24 18:25:04 +00:00
julien.pierre.bugs%sun.com 0571dde1e9 Fix for 265708. - count should be CK_ULONG 2004-10-23 20:23:50 +00:00
julien.pierre.bugs%sun.com c2ba47a939 Fix for 265504 - cmsutil dumps core with invalid option set. r=wtc 2004-10-22 22:39:47 +00:00
wchang0222%aol.com 0e502115b8 Bugzilla bug 265686: the 'name' argument to PK11_FindSlotByName should be 
const char *.  The patch is contributed by timeless@bemail.org. r=wtc.
Modified files: pk11pub.h pk11slot.c
 2004-10-22 22:13:45 +00:00
relyea%netscape.com e93a53498f [Bug 262274] visibility of PK11_GetCertFromPrivateKey and CERT_DecodeDERCertificate 2004-10-14 22:34:47 +00:00
relyea%netscape.com e56b27e7a7 bug 262774 export PK11_GetCertFromPrivateKey publically. 2004-10-14 22:15:21 +00:00
relyea%netscape.com 5be4b0f4b4 Fix regression where PK11LogoutAll will crash when called when NSS is not initialized. 2004-10-11 22:37:41 +00:00
julien.pierre.bugs%sun.com e6651557ec Fix for 259003 - port NSS to Solaris AMD64 . r=wtc 2004-10-11 02:15:42 +00:00
julien.pierre.bugs%sun.com 69a7452f8e Include nssrwlk.h for NSSRWLock_ funtions 2004-10-07 04:36:03 +00:00
julien.pierre.bugs%sun.com ff3b02711f Remove unused variable 2004-10-07 04:14:18 +00:00
julien.pierre.bugs%sun.com e5604f6a11 Include secmodi.h for SECMOD_NewListLock 2004-10-07 04:08:16 +00:00
julien.pierre.bugs%sun.com 604d7f6c98 Remove unused variable 2004-10-07 04:04:25 +00:00
julien.pierre.bugs%sun.com 61e303f6e7 Remove unused variables 2004-10-07 04:03:35 +00:00
julien.pierre.bugs%sun.com fc043a3854 initialize variable 2004-10-07 03:57:19 +00:00
julien.pierre.bugs%sun.com ed405e7ea1 Remove unused variables 2004-10-07 03:56:37 +00:00
julien.pierre.bugs%sun.com acc95e4dd9 Remove unused variable 2004-10-07 03:55:25 +00:00
julien.pierre.bugs%sun.com 1fce2635d0 Avoid divide by zero iteration 2004-10-01 03:19:30 +00:00
wchang0222%aol.com 202405c65b Print the error message if NSS_NoDB_Init fails. 2004-09-30 00:49:36 +00:00
nelsonb%netscape.com 5178c6777b Fix bugzilla bug 261496. Absent OPTIONAL CHOICEs should not cause fatal 
errors.  Fix printing code to not crash on missing optional nextUpdate.
r=julien.pierre
 2004-09-27 22:41:41 +00:00
nelsonb%netscape.com ebadd0ad21 Fix bug 261333. Use the modulus length for the length of the output 
buffer, not the length of the input data.  r=julien.pierre
 2004-09-24 21:44:20 +00:00
nelsonb%netscape.com e4191760ba Patch by kinmoz@netscape.net. Fix bug 260882 by clearing the valid 
cache flag (named "searchedObjectType") even when the cache was empty.
 2004-09-22 01:45:26 +00:00
saul.edwards%sun.com 035652083f 258779: Add /usr/lib/mps to RPATH for Solaris 10. 2004-09-17 22:25:50 +00:00
saul.edwards%sun.com ca0a1ce2ad 245518: Add /usr/lib/mps to RPATH for tools. 2004-09-17 21:59:04 +00:00
nelsonb%netscape.com 5f3c5e717c Increase the maximum allowable size of the prime field for DH computations. 
bug 259229.
 2004-09-17 00:34:52 +00:00
saul.edwards%sun.com a72892ef68 Bug 245915: Add NSS_IsInitialized prototype to header. 2004-09-16 16:31:45 +00:00
nelsonb%netscape.com 85d9ad67fc Two new functions: PK11_PubEncryptPKCS1 and PK11_PrivDecryptPKCS1. 
Bugzilla bug 258366. Ported from NSS 3.9 branch.
 2004-09-08 02:52:15 +00:00
nelsonb%netscape.com 11b916c95a export CERT_ConvertAndDecodeCertificate and SEC_PKCS7EncodeItem from 
libSMIME.  Bugzilla bug 258362.  Fix ported from 3.9 branch.
 2004-09-08 01:20:46 +00:00
nelsonb%netscape.com 24904acb6f Add root CA certs for Certum, Comodo, and IPS. 
Bugzilla bugs 242040 244982 252132.
 2004-09-03 04:35:28 +00:00
wchang0222%aol.com bad8733fd8 Added a comment explaining how NSS_BUILTINS_LIBRARY_VERSION_MINOR should be 
incremented.
 2004-08-31 17:39:15 +00:00
wchang0222%aol.com 9bb982aa69 Bugzilla bug 252375: added version information to the nssckbi shared 
library. r=relyea.
Modified Files: config.mk manifest.mn nssckbi.h
Added Files: ckbiver.c nssckbi.rc
 2004-08-31 17:28:50 +00:00
jpierre%netscape.com d6e93928ed Fix for 254393 - r=nelsonb . PK11_FindKeyByAnyCert returned invalid key objects 2004-08-06 02:24:31 +00:00
jpierre%netscape.com 5b46cda86f Fix for 249488 - make Single-Threaded mode work 2004-08-03 23:24:37 +00:00
relyea%netscape.com c2b70291da 1) Add time command to time specific functions. 
2) improve the help system.
3) bug fixes for arrays.
 2004-07-30 00:25:21 +00:00
relyea%netscape.com b4b4a3f900 Error strings for new error codes. 2004-07-30 00:19:49 +00:00
relyea%netscape.com e715f98c50 Bugzilla Bug 252702 
NSS needs to handle better token insertion and removal.

Applied from patch to NSS 3.9
 2004-07-29 23:38:14 +00:00
jpierre%netscape.com 14456163f2 Fix for 249488 - root cert module requires locking functions in CK_C_INITIALIZE_ARGS . r=ian, sr=relyea 2004-07-29 22:51:00 +00:00
nelsonb%netscape.com 20e64eb7e5 Correct option parsing, and add missing error messages. 2004-07-28 21:10:07 +00:00
nelsonb%netscape.com c55043fc52 Support GeneralizeTime in the CRMF library. Bug 219080. r=julien. 
Patch by nelson and julien.
 2004-07-27 05:06:02 +00:00
relyea%netscape.com 7e82fd4194 Bug 250687 
NSS Crashes or leaks Cert references if bad certs are passed up by PKCS #11 modules.
r=nelson
sr=ian
 2004-07-21 18:18:05 +00:00
relyea%netscape.com 57260fe853 Backing out pk11cert.c changes (not ready for checkin yet). (revert to 1.133) 2004-07-20 23:04:31 +00:00
relyea%netscape.com 950ffdabc7 Fix optimized builds (make tinderbox go green). 2004-07-20 23:02:04 +00:00
relyea%netscape.com c5e993c9fd Missed function definition in previous checkin. 2004-07-19 22:37:48 +00:00
relyea%netscape.com d0af60d089 refactor pk11util, splitting large single files down to a managable size. 
bug 246130. The new factor is:

pk11akey.c - asymetric keys constructed from pk11cert.c and pk11skey.c
pk11auth.c - authentication/password management factored from pk11slot.c
pk11cert.c - cert code with private key, crls and trust factored out.
pk11ctx.c -- pkcs11 context code, factored out of pk11skey.c
new pk11func.h -- for backward compatibility.
pk11mech.c - mechanism mapping code, factored mostly from pk11slot.c
pk11nobj.c - netscape objects (crls and trust), factored mostly from pk11cert.c
pk11obj.c - generic object support, factored from pk11skey.c pk11slot.c and
pk11cert.c
pk11priv.h -- private functions factored from pk11func.h
pk11pub.h -- public functions factored from pk11func.h
pk11skey.c - now only symetric key ops; private, public key ops, generic ops
and crypto contexs have been factored out.
pk11slot.c - still slot operations. Authentication, generic object ops,
mechanism mapping has been factored out.

This patch should only have refactoring, no new functions or other changes.
 2004-07-19 22:12:38 +00:00
nelsonb%netscape.com 371f19c6b9 Use the "c beautifier" (cb) to give this code a common K&R style with 
an indentation of 4.  Also rewrap a few strangely wrapped lines.
Bug 249330.
 2004-07-16 00:04:47 +00:00
nelsonb%netscape.com 2ed86b689a Apply review feedback to signtool sources. Add test case to QA tests. 
Bug 248751.
 2004-07-15 22:21:57 +00:00
nelsonb%netscape.com 07c4feeb45 Add -X option to produce signed XPI files for mozilla. Bug 248751. 
Path contributed by jeff klawiter <jeff@j-maxx.net>. r=nelson
 2004-07-15 00:01:50 +00:00
nelsonb%netscape.com 98afc62590 Allow subtemplates to have the SEC_ASN1_DYNAMIC flag without asserting. 
Bug 245429. Patch 4 of 5.  r=relyea.
 2004-07-13 06:02:54 +00:00
nelsonb%netscape.com 55aa7ccc43 Fix some casts. Wrap some long lines. Remove a bogus assert. 
Factor a function call out of the arguments of another function call,
which is mostly to make that code more easily debugged.
This is patch 3 of 5 for bug 245429. r=wtc.
 2004-07-13 05:52:24 +00:00
nelsonb%netscape.com f7b4d4bbb7 Function sec_asn1e_write_contents was two functions combined into one, 
separated by one huge if-then-else.  They do different things and take
different arguments.  So, I split them into two separate functions:
sec_asn1e_write_contents and sec_asn1e_write_contents_from_buf
the latter of which takes a buf pointer and length argument.
The if statement that chooses between the two is now in the caller.
This is patch 2 of 5 for bug 245429.  r=wtc.
 2004-07-13 05:49:48 +00:00
nelsonb%netscape.com f961aed641 rename "explicit" to "isExplicit" because MSVC6 thinks explicit is a c 
keyword.  rename "ignore_stream" to "disallowStreaming" because it
doesn't merely ignore.  rename "ignoresubstream" to "disallowStreaming"
for the same reason.  Patch 1 of 5 for bug 245429. sr=wtc.
 2004-07-13 05:44:47 +00:00
nelsonb%netscape.com 55151bc829 Greatly improve the output of the PKCS12 encoder. Adds output buffering 
to the output callback function that is called by the ASN.1 encoders,
and which feeds into the next PKCS7 encoder in the outward direction.
Bug 210179.  sr=relyea
 2004-07-13 05:31:34 +00:00
nelsonb%netscape.com 33f87dfef9 Ensure that the CRMF library always uses a non-null pool pointer when it 
calls the ASN1 Decoder.  This prevents leaks.  Bug 178898. r=relyea.
 2004-07-13 05:12:31 +00:00
wchang0222%aol.com 409574ee15 Bugzilla bug 248981: PKCS #11 modules that are based on older lib/ckfw (for 
example, the nssckbi module) save a pointer to the CK_C_INITIALIZE_ARGS
passed to them. So if we pass a pointer to the stack variable moduleArgs,
the pointer will point to a structure that has gone out of scope. To
prevent crashes in these broken modules, we continue to pass a pointer to
the global secmodLockFunctions whenever we can. r=relyea.
 2004-07-08 23:23:50 +00:00
wchang0222%aol.com f3c6f7397f Bugzilla bug 249284: removed a duplicate declaration of 
CERT_DecodeDERCertificate. r=nelsonb. Thanks to Chris Newman
of Sun for the bug report.
 2004-07-07 00:48:53 +00:00
jpierre%netscape.com 4bfc6dca87 Fix for 248981 - make SECMOD_LoadPKCS11Module thread safe. r=relyea 2004-07-01 19:20:51 +00:00
nelsonb%netscape.com e054aef7bf Output properly encoded PQGParams. r=wtc. Bug 247738. 2004-07-01 02:07:02 +00:00
jpierre%netscape.com 309d389ab8 Fix for 249310 - add option to disable SSL2 in selfserv . r=nelson 2004-07-01 02:06:31 +00:00
nelsonb%netscape.com 23b32f634b Treat non-repudiation-only certs as valid signature certs. 
Bug 240456.  r=wtc, sr=relyea.
 2004-07-01 00:26:00 +00:00
nelsonb%netscape.com 3bc297e56b Correct NSS to use the most specific, not most general CN attribute in 
a cert subject name.  Bug 197964.  r=wtc.
 2004-07-01 00:21:42 +00:00
nelsonb%netscape.com 1d3641f999 Follow the SSL2 specification more closely in accepting and rejecting 
SSL messages.  Previously NSS would reject some it should accept
and vice versa.  Bugscape bug 57121. r=wtc,julien
 2004-06-24 02:02:39 +00:00
nelsonb%netscape.com 35ab44f5ac Fix certutil's ability to read PQG files. Make certutil able to read 
the files produced by the command "makepqg -a".  Plug some memory leaks.
r=relyea,vipul  Bug 247739
 2004-06-23 22:23:00 +00:00
relyea%netscape.com 501db85dbc Bug 244914, 244907 r=nelsonb 
Add support for unprotected private keys without requiring authentication.
Add support to access application specific PKCS #11 objects through NSS.
 2004-06-21 23:01:53 +00:00
nelsonb%netscape.com 3b8151e40a Initialize the "type" member in the SECItems returned by 
PK11_PQG_ParamGetSeedLen so encoded values will be correct.
Bug 247737. r=relyea.
 2004-06-21 19:22:02 +00:00
saul.edwards%sun.com 172f3b4cbc Bug 245518: add RPATH to BUILD_SUN_PKG, add $ORIGIN to rpath 2004-06-19 06:09:03 +00:00
jpierre%netscape.com a11c975bed Fix for 237934 - nss_InitLock not atomic. r=nelson 2004-06-19 03:21:39 +00:00
jpierre%netscape.com 65862c5e4f Wrap long lines 2004-06-18 02:03:30 +00:00
jpierre%netscape.com e8c134e6c5 Restore comment that got removed accidentally. And fix typo in it. 2004-06-18 01:34:11 +00:00
jpierre%netscape.com 6aa648b89e Fix for 247406 . r=wchang0222,glen.beasley 2004-06-18 01:28:41 +00:00
jpierre%netscape.com b03fe203f6 Fix for 178897 . QuickDER optimizations . r=nelsonb 2004-06-18 00:38:45 +00:00
jpierre%netscape.com 3f739f181e Backout part of the QuickDER changes from 178895 . r=relyea 2004-06-17 23:23:59 +00:00
nelsonb%netscape.com 44e789e395 Destroy cert references held inside the CMMFCertRepContent struct when 
that struct is being destroyed.  Plugs a cert reference leak.
Bug 245420.  r=wtc.
 2004-06-17 22:12:34 +00:00
wchang0222%aol.com 8cb927d373 Bugzilla bug 233320: pk11_OpenKeyDB should not return SECFailure (not a 
CK_RV value).  Removed two unnecessary assignment statements.  r=relyea.
 2004-06-11 22:25:13 +00:00
nelsonb%netscape.com 17e15e8590 Don't crash when CERT_DestroyCertificate is called with a cert with a 
null arena pointer.  Bug 245943. r=julien
 2004-06-09 07:47:51 +00:00
nelsonb%netscape.com c89fea6d2e Fold function definition so editor can find it. 2004-06-09 02:22:38 +00:00
jpierre%netscape.com 909489401d Fix for 178895 - QuickDER optimizations. r=relyea 2004-06-05 00:50:32 +00:00
nelsonb%netscape.com 6edf60ce5c Make crmftest compile and run with NSS 3.10 shared libraries. 
Enhance the command line parsing to permit portions of the tests
to be individually selected.  The code still doesn't all run
to completion without errors, but it gets MUCH farther than before.
Bug 244329.
 2004-06-03 03:56:48 +00:00
nelsonb%netscape.com 45fbe7addd Fix an erroneous assertion. Clean up some other code. Bug 244929. 
r= jpierre, wtc.
 2004-06-03 03:41:07 +00:00
nelsonb%netscape.com 4bc475a605 Export symbols needed for crmftest. r=relyea. bug 244329. 2004-06-02 22:19:33 +00:00
jpierre%netscape.com 8f86eb3572 Fix for 244915 . resolve issues from previous patch 2004-06-02 01:56:43 +00:00
jpierre%netscape.com 6986ea78e8 Fix for 244915 - r=wtc, misterssl . Correctly build freebl on Solaris 10 2004-06-02 00:40:53 +00:00
bishakhabanerjee%netscape.com 4cb1108d34 chenged log names to better align them in summary, added SMIME test output 
to emailed log summary
 2004-05-27 22:09:03 +00:00
nelsonb%netscape.com f2dedf230d a) adds the missing code to put stdin into binary mode. 
b) add the -i option to the usage message
c) builds addbuiltins with shared libs
   (includes "nssrenam.h" for some symbols)
d) build addbuiltins as part of the normal builds.
 2004-05-25 21:47:44 +00:00
jpierre%netscape.com 3c9a7eb176 Fix for 244095 - link NSS libraries with -R $ORIGIN on Solaris 2004-05-25 00:13:12 +00:00
nelsonb%netscape.com ed9a466108 Fix crash when array member is used as variable. Bug 243655. r=relyea. 2004-05-22 01:24:22 +00:00
nelsonb%netscape.com 6481991845 Use "slop time" in nextUpdate validity check for CRLs. Bug 242146. 
r=julien.pierre
 2004-05-22 01:03:26 +00:00
nelsonb%netscape.com 81bf125709 Add missing license block. Wrap long lines. Bug 243580. r=relyea. 2004-05-22 00:56:46 +00:00
bishakhabanerjee%netscape.com f7ffa7b7e8 script to run NISCC tests; cvs pull of NSS and does special build, runs SMIME 
and SSL tests, logs results to file, summarizes log results
 2004-05-20 00:56:40 +00:00
ian.mcgreer%sun.com 92584e19c6 certdata.c is checked in and shouldn't be ignored 2004-05-17 20:47:35 +00:00
ian.mcgreer%sun.com be72ca16c5 bug 180268, reimplement ssl step-up for builtins 2004-05-17 20:08:38 +00:00
wchang0222%aol.com 081ede0ac7 Bugscape bug 57081: If the make variable NISCC_TEST is defined at build 
time, add -DNISCC_TEST to the compile command line.  The NISCC_TEST macro
enables special code that's conditionally compiled for NISCC testing.
Modified Files:
	cmd/smimetools/Makefile cmd/smimetools/cmsutil.c
	lib/ssl/config.mk lib/ssl/manifest.mn
 2004-05-13 01:29:15 +00:00
relyea%netscape.com 5d4e32454a scripts for pk11util 2004-05-12 23:49:39 +00:00
ian.mcgreer%sun.com 1d3c78cf5a program for generating FIPS algorithm test results 2004-05-12 17:30:31 +00:00
jpierre%netscape.com 79af302c8e Fix for 242984 - crash with application having incomplete PRIOMethods. r=nelsonb,wtc 2004-05-11 03:48:25 +00:00
jpierre%netscape.com b97913e992 Fix for 240361 - crash in CERT_CheckValidTimes 2004-05-11 02:43:10 +00:00
jpierre%netscape.com 576e2a2776 Fix for 202979 . Resolve binary compatibility issue for CERT_ImportCerts . r=wtc, jpierre 2004-05-05 01:15:39 +00:00
relyea%netscape.com 1d997eb6cd Fix mechanism command. 2004-05-05 00:36:52 +00:00
wchang0222%aol.com 59319a778c Bugzilla bug 238914: declare namesRunningOffset as unsigned long to avoid 
overflow. Fixed a regression introduced by the previous checkin ('nss' is
allowed to be NULL).  Set slotStrings[i] to NULL after freeing to avoid
double-free. r=relyea,nelsonb.
 2004-04-30 23:41:44 +00:00
gerv%gerv.net 9bd361a285 Bug 236613: change to MPL/LGPL/GPL tri-license. Restore Id: lines. 2004-04-27 23:04:40 +00:00
gerv%gerv.net 3634d4d94b Bug 236613: change to MPL/LGPL/GPL tri-license. 2004-04-25 15:03:26 +00:00
wchang0222%aol.com 76e3cc1538 Bugzilla bug 90906: removed unused variable 'size'. The patch is from 
Serge GAUTHERIE <gautheri@noos.fr>. r=wtc.
 2004-04-21 18:57:51 +00:00
nelsonb%netscape.com 542f76a15a Change ssl test scripts to invoke tstclnt with the server's FQDN. 
Necessary because of fix to bug 234058.
 2004-04-08 03:01:02 +00:00
nelsonb%netscape.com abe92ad094 Remove code that attempted to compare simple host names in URLs with 
FQDNs in certificate host names.  This was insecure.  Bug 234058. r=wtc.
 2004-04-08 00:17:46 +00:00
relyea%netscape.com e4ab49876e Fix missing indexes when fetching lengths (get tinderbox working again). 2004-04-07 19:00:08 +00:00
relyea%netscape.com 66be1e00e1 Bug 239827: Fix race condition in unwrap private key (if target key is symetric). 2004-04-07 01:18:46 +00:00
relyea%netscape.com 77bd494c63 Bug 238914. r=wchang sr=misterSSL 
Agressive checks on database data before we actually reference it. This
should prevent crashes because of invalid databases.
 2004-04-07 00:58:58 +00:00
wchang0222%aol.com a032d5bd44 Bugzilla bug 238565: made the comment match the code. r=nelsonb. 2004-03-27 01:51:25 +00:00
wchang0222%aol.com ec68ee33b1 Bugzilla bug 237934: in nss_InitLock, nss_InitMonitor, and 
NSSRWLock_AtomicCreate, we need to doublecheck the lock/monitor's pointer
after we acquired the spin lock.  r=nelsonb,jpierre.
Modified Files: nsslocks.c nssrwlk.c
 2004-03-27 01:08:15 +00:00
nelsonb%netscape.com c0104f0a69 Correct the parsing of certain forms of GeneralName. Bug 233586. 
r=julien.pierre
 2004-03-26 01:15:33 +00:00
nelsonb%netscape.com dade383614 Fix a regression introduced by rev 1.19, after NSS 3.9 was released. 
r=julien.pierre.  bugscape 56484.
 2004-03-23 03:29:56 +00:00
wchang0222%aol.com 8ebba422fc Bugzilla bug 237870: link the MinGW build with wsock32.dll (Winsock 1) 
instead of ws2_32.dll (Winsock 2).  Thanks to neil@parkwaycc.co.uk for the
patch.  r=wtc.
 2004-03-23 01:59:40 +00:00
relyea%netscape.com d5abab03d4 Program to decrypt passwords inline from prefs files 2004-03-23 00:46:38 +00:00
relyea%netscape.com 70a5776e59 Fix arrays handling strings, and help 2004-03-13 02:44:26 +00:00
jpierre%netscape.com b391292c65 Remove unused file 2004-03-11 10:03:24 +00:00
jpierre%netscape.com 9383b61a6e Fix for bug 143456 - add -P option for dbprefix to selfserv . r=MisterSSL 2004-03-10 02:47:13 +00:00
nelsonb%netscape.com c4b2be519c Add conditionally compiled code for NISCC testing of NSS's SSL library. 
patch by Ian McGreer.  Bugscape bug 53322.
 2004-03-05 23:28:57 +00:00
bishakhabanerjee%netscape.com 195f404925 adding platform RH_Linux_7.3 2004-03-04 22:47:43 +00:00
bishakhabanerjee%netscape.com fa54334072 adjusting the platform strings as the header file specifies 2004-03-04 20:16:36 +00:00
bishakhabanerjee%netscape.com 5f21e877ae removed old,unused platforms; and added newer used ones 2004-03-04 00:35:09 +00:00
jpierre%netscape.com f1a9128ad1 Fix for 235874 - crash in PK11_DigestKey . r=wtc, nelsonb 2004-03-03 03:18:56 +00:00
nelsonb%netscape.com a74bbe4b09 Detect NULL arguments to CERT_DecodeTrustString instead of crashing. 
Bug 235617. r=wtc.
 2004-02-26 00:05:29 +00:00
bishakhabanerjee%netscape.com c93fcbd840 fix for Bugzilla bug 232481: removed a loop in smime.sh 2004-02-25 23:05:41 +00:00
bishakhabanerjee%netscape.com c0e6a51ba4 added negative cert import function, changed relevant Policies tests accordingly 2004-02-25 22:34:25 +00:00
nelsonb%netscape.com 7debba55ce Import base64 encoded certificate files with old MAC line endings. 
Bug 221272. sr=wtc.
 2004-02-16 23:52:46 +00:00
wchang0222%aol.com 46de977590 Removed unused function _OS_SELECT for AIX. Thanks to Philip K. Warren 
<pkw@us.ibm.com> for reporting this.
 2004-02-13 03:13:04 +00:00
wchang0222%aol.com d384e9659d Bugzilla bug 233048: 1. Support doing 64-bit Solaris SPARC builds using 
gcc.  2. Enable all.sh to work with gcc-compiled NSS tests which require
setting LD_LIBRARY_PATH to point to the directory where libgcc.so resides.
The patch is contributed by Vladim�r Marek <Vladimir.Marek@printsoft.cz>.
r=wtc,nelsonb.
Modified Files: coreconf/SunOS5.mk nss/tests/common/init.sh
 2004-02-13 02:47:53 +00:00
jpierre%netscape.com 42b100808b Fix strings in SECU_PrintError. bug 233493 2004-02-12 02:08:59 +00:00
wchang0222%aol.com 43586b3b97 Bugzilla bug 229297: fixed compiler warning "conversion from 'double' to 
'long', possible loss of data".  r=jpierre,relyea.
 2004-02-11 19:43:29 +00:00
wchang0222%aol.com 9d027a18fc Bugzilla bug 229293: fixed compiler warning "unary minus operator applied 
to unsigned type". r=relyea,jpierre.
 2004-02-11 19:37:18 +00:00
jpierre%netscape.com 2703a27453 Fix for bug 233605 . Check CRL entry extensions after partial decoding. Also add some new CRL decoding errors. r=nelsonb 2004-02-11 06:05:18 +00:00
jpierre%netscape.com 560beb63f1 Fix for 233493 . Corrections based on Wan-Teh's feedback. 2004-02-11 05:27:32 +00:00
jpierre%netscape.com 3f92bc7c25 Fix for 233118 . additional check for CRL signing usage. r=nelsonb 2004-02-11 05:25:01 +00:00
wchang0222%aol.com f8b0c1845d Bugzilla bug 233321: fixed the problem with building utf8.c as a standalone 
test program.  Fixed byte-order issue on little-endian architecture.
r=nelsonb.
Modified Files: Makefile utf8.c
 2004-02-11 02:17:24 +00:00
bishakhabanerjee%netscape.com 829b7f1122 checking in 5 sections of Certificate Policies. Need to set 
NSS_NO_PKITS_POLICIES to run these five sections
 2004-02-11 01:31:43 +00:00
jpierre%netscape.com 13dcfd3e4c Fix for 233493 - fix symkeyutil build on OS/2. r=relyea 2004-02-10 23:48:37 +00:00
bishakhabanerjee%netscape.com e9572b0dff removing dependency of a testcase on a previous testcase; i.e. each testcase 
now imports all the CRLs required for it, and then deletes them at the end
of the test
 2004-02-09 23:33:26 +00:00
wchang0222%aol.com bab3c2af5e Bugzilla bug 233319: prepend, rather than append, the NSS lib and bin 
directories to PATH. r=relyea.
 2004-02-09 22:39:11 +00:00
nelsonb%netscape.com c3a3521876 Enable a chain to validate when a perm cert has been issued by a 
temp cert.  Bug 233038. r=ian,relyea
 2004-02-07 07:17:31 +00:00
wchang0222%aol.com bf2c5e5f16 Bugzilla bug 225808: 1. Use a 32-bit integer type for cert->nsCertType so 
that it can be safely passed to PR_AtomicSet on all platforms.  Note that
we still use an unsigned type to avoid introducing signed/unsigned compiler
warnings.  2. Added a (PRInt32 *) cast to eliminate a pre-existing
signed/unsigned warning.  r=nelsonb.
Modified Files: certdb.c certt.h
 2004-02-07 01:41:15 +00:00
wchang0222%aol.com 5c995a5d18 Bugzilla bug 233239: do not include cmd/zlib and cmd/lib headers and 
libraries in NSS binary releases.
Modified Files:
	lib/Makefile lib/manifest.mn makepqg/manifest.mn zlib/Makefile
	zlib/manifest.mn
 2004-02-07 00:26:02 +00:00
wchang0222%aol.com 91ad07e7f5 Bugzilla bug 123693: improved the fix for this bug. Maintain the 
consistency between the slot hash table and slot list when the
creation of a slot fails. r=relyea,nelsonb.
 2004-02-06 02:04:48 +00:00
wchang0222%aol.com ce288b37c7 Bugzilla bug 233112: fixed a typo: "futuer" -> "future". Thanks to 
Heikki Toivonen <hjtoi-bugzilla@comcast.net> for the bug report.
 2004-02-05 05:56:54 +00:00
bishakhabanerjee%netscape.com 03643e5f7d added a few more missing $ for variable PKITSdb for more accurate log reporting 
also, minor optimization of crlImport and crlImportn script so that $crls does
not have to be specified on every line
 2004-02-04 20:04:14 +00:00
nelsonb%netscape.com a00bb096af Fix numerous bugs in CERT_FindCertByKeyID. Bug 233019. r=jpierre 2004-02-04 08:54:06 +00:00
nelsonb%netscape.com 4fbee089ca Add a feature to disable all use of CRLs with an environment variable. 
Don't run most vfychain commands after crlutil fails to import the CRL,
when that is the expected result.
Remove one error that caused the HTML output to be invalid.
 2004-02-04 04:07:32 +00:00
nelsonb%netscape.com c381ec2657 Put in missing $, so log output will show actual commands exeuted. 2004-02-04 02:23:40 +00:00
bishakhabanerjee%netscape.com 971bc18c70 correcting header of section 4.1, minor edits to make headers more definitive 2004-02-03 20:13:26 +00:00
nelsonb%netscape.com 3462419c4d Invoke crlImportn instead of crlImport in several places where a 
negative outcome is expected.  More work on this is needed.
crlImportN should return a value that tells us if it actually failed,
so that the script can decide whether or not to proceed with vfychain.
But this change makes the outcome more green, less red.
 2004-02-03 07:14:52 +00:00
nelsonb%netscape.com bcc309b891 Honor key usage extensions, whether they're critical or not. 
Bug 232738. r=jpiperre.
 2004-02-03 07:10:04 +00:00
nelsonb%netscape.com 3f581fae9e Max crlutil return 0 or 1 correctly, depending on the success of the 
operation.  Bug 232937.  r=jpierre.
 2004-02-03 06:59:35 +00:00
nelsonb%netscape.com 0789875d7d Change script so that html output and logfile will be broken up into 
clearly defined and easy-to-find sections.
 2004-02-03 04:15:08 +00:00
nelsonb%netscape.com abc134f1c0 Make output log file more readable by separating each test case. 2004-02-03 03:07:38 +00:00
bishakhabanerjee%netscape.com 3ed803969c fixed one typo 2004-02-03 01:27:47 +00:00
bishakhabanerjee%netscape.com d95cb37ea2 checking with all latest revew comments addressed 2004-02-03 00:59:53 +00:00
nelsonb%netscape.com 3dcf7f696e When an attempt to initialize a slot fails, free up the resources 
right away, rather than waiting until NSS_Shutdown.  Bug 123693.
Second try.  r=relyea.
 2004-01-30 04:15:47 +00:00
nelsonb%netscape.com df07bc6cf4 Back out rev 1.90. It breaks shlibsign. 2004-01-29 23:34:21 +00:00
nelsonb%netscape.com 371b9d618e Export SECOID_AddEntry. Bug 132942. r=wtc. 2004-01-29 22:51:55 +00:00
nelsonb%netscape.com 50f63ee713 Invoke SECU_RegisterDynamicOids() so that more OIDs will print out. 
Bug 132942.  a=wtc.
 2004-01-29 22:48:58 +00:00
nelsonb%netscape.com 792e8d1e9e Bug 132942. r=wtc 
Make the following enhancements to NSS's ASN.1 printing code:
- Print warning messages that are properly indendented.
- PrintAsHex notices when the buffer contains entirely printable characters, and is larger than an int, and prints it as text in that case.
- PrintRawString now indents the string, rather than always printing it on
a separate line.
- now prints decoded bit strings
- now prints BMP (UCS2) strings as strings (not as hex) when they contain only printable ASCII characters.
- now prints Universal (UCS4) Strings as strings (not hex) when they contain only printable ASCII characters.
- Decodes certain encoded data that was previously printed as hex.
- Generically decodes ASN.1 data, rather than merely printing an error, when the ASN.1 data doesn't fit a known template.
- properly handles all optional components of basic constraints extensions.
- Prints the names of the bits in the X509 Key Usage extension.
- Prints General Names.
- Print Auth Key ID extensions
- Print subject and issuer alt name extensions
- Print CRL distribution points extensions
- format and print name constraints extensions
- print Authority Information Access extensions
- Print optional X509v2 subject and issuer Unique ID bit strings
 2004-01-29 22:45:20 +00:00
nelsonb%netscape.com a691eadad9 Change some comments and one variable as suggested in review comments. 
r=relyea,wtc.  Bug 124923.
 2004-01-29 21:57:41 +00:00
nelsonb%netscape.com ea227986af Make SECOID_AddEntry be thread safe. Export it. Bug 124923. r=relyea. 2004-01-29 21:23:36 +00:00
nelsonb%netscape.com ee55e2e256 Plug leaks. Bug 123693. r=wtc,relyea 2004-01-29 21:18:24 +00:00
jpierre%netscape.com f5d7282963 Fix for 232377 - assertion in vfychain with DSA cert. r=wtc, nelsonb 2004-01-28 23:25:07 +00:00
nelsonb%netscape.com 6d506e4aea Export cert functions that decode extensions and traverse decoded 
extensions.  Bug 231881. r= relyea, wtc.
 2004-01-28 23:23:45 +00:00
nelsonb%netscape.com 978fc338e7 Change program return value to reflect test outcome. Bug 221737. r=wtc 2004-01-28 22:30:27 +00:00
wchang0222%aol.com cdec2796b4 Bugzilla bug 232380: deleted CERT_FindExpiredIssuer, which is dead code. 
In cert_VerifyCertChain, make sure that subjectCert and issuerCert never
point to the same cert to prevent from destroying that cert twice.
r=jpierre,nelsonb.
Modified Files: certdb/cert.h certhigh/certvfy.c
 2004-01-28 21:51:10 +00:00
jgmyers%speakeasy.net a8dcaab07f address review comments: bug 231659 2004-01-28 04:29:14 +00:00
jgmyers%speakeasy.net c9010119e9 rewrite utf8 parser for strictness: bug 231659 r=MisterSSL 2004-01-28 03:48:43 +00:00
jpierre%netscape.com a5aaee4048 Fix for 231051 - crlutil asserts after deleting CRL. r=wtc, nelsonb 2004-01-28 01:17:13 +00:00
relyea%netscape.com 78ce53de23 bug 231698: fix regression in reading SDR data in databases written on 64-bit platforms. 
r=MisterSSL
 2004-01-27 18:31:29 +00:00
jpierre%netscape.com 8c43abd07c Fix for 231051 - crlutil asserts after importing CRL. r=nelsonb, wtc 2004-01-27 00:02:16 +00:00
nelsonb%netscape.com 0df0cbe4cf Fix crashes that occur when optional policyQualifiers are not present. 
Bug 230951. r=kinmoz.
 2004-01-23 22:50:01 +00:00
wchang0222%aol.com d3011eaa97 Bumped version to 1.50 (for NSS 3.10). 2004-01-23 22:15:39 +00:00
nelsonb%netscape.com 77a00800e8 RFC 3280 says Name Constraints do not apply to self-issued CA certs, 
including self-issued intermediate CA certs (so-called "roll-over" certs).
This fixes an NISCC test failure.  Bug 231030. r=wtc.
 2004-01-23 06:06:06 +00:00
nelsonb%netscape.com 61d56ab306 When a name attribute's value exceeds the maximum allowed length, display 
a truncated version of it, followed by ellipsis.  Bug 220855. r=wtc
 2004-01-22 23:45:30 +00:00
nelsonb%netscape.com d45b087145 Add -a option for Base64 encoded ASCII input and output. 
The -i and -o options now understand "-" to mean stdin and stdout.
Usage is displayed when -? or no arguments are given.
Bug 231536. r=relyea.
 2004-01-22 22:08:59 +00:00
nelsonb%netscape.com 7709686c56 Correct NSS's key usage tests for certs with non-RSA public keys. 
Bug 221638. r=relyea.
 2004-01-22 22:04:54 +00:00
nelsonb%netscape.com b99a74cbae Detect duplicate issuer name and serial number between two temp certs. 
Bug 230996. r=ian, relyea.
 2004-01-22 02:36:53 +00:00
nelsonb%netscape.com 1db7eb8535 Fix name constraints code to pass NIST PKITS test 38. r=wtc. Bug 231223. 2004-01-22 02:33:41 +00:00
nelsonb%netscape.com ce75f8d873 Move an extern function declaration to the header file where it belongs. 
Bug 229212. r=relyea.
 2004-01-22 02:19:42 +00:00
nelsonb%netscape.com b45bc04f3b Fix some erronous code that set SEC_ERROR_NO_MEMORY when there had been 
no memory failure.  r=relyea.  Bug 231566
 2004-01-22 02:17:26 +00:00
nelsonb%netscape.com 1a1c7cb409 Fix bug in cert path length validation. Bug 221644. r=jpierre 2004-01-21 05:32:18 +00:00
jpierre%netscape.com f10a7a4ffd Support GeneralizedTime in NSS tools. bug 210530. r=wtc 2004-01-21 01:15:01 +00:00
nelsonb%netscape.com 14ff763caa Use the results from PK11_ProtectedAuthenticationPath(slot) in the 
password callback function.  Bug 229023. r=relyea.  verified by submittor.
 2004-01-21 00:18:59 +00:00
wchang0222%aol.com 5963bd156f Bugzilla bug 229299: fixed unused variable warning. r=nelsonb. 2004-01-20 22:57:40 +00:00
jgmyers%speakeasy.net ffbdacaeb8 fix review comment: bug 53133 2004-01-20 19:57:17 +00:00
nelsonb%netscape.com b35fce94e4 Make this code build on Windows as well as Unix. 2004-01-19 01:05:53 +00:00
nelsonb%netscape.com 0ec6f827c6 Fix two more incorrect cert names that caused erroneous test results. 
Bug 231221.
 2004-01-17 05:55:20 +00:00
nelsonb%netscape.com d9ccd2ab6f Correct this script to more accurately report errors. Bug 231221. 2004-01-17 05:04:42 +00:00
nelsonb%netscape.com d8dc4c1455 Detect absent isCA flags in basic constraints. Detect and reject negative 
or too large positive path length constraints in basic constraints.
Bug 221644. r=jpierre.
 2004-01-16 21:33:16 +00:00
nelsonb%netscape.com 5e140a71db Fix template for Cert policy extensions. Bug 230951, r=jpierre 2004-01-16 05:36:08 +00:00
nelsonb%netscape.com ad4476ab50 Fix NSS parsing of Issuer Unique ID and Subject Unique ID fields in 
certificate.  Bug 216116. r=jpierre
 2004-01-16 02:11:44 +00:00
nelsonb%netscape.com 5dea4e12cf Add vfychain to list of NSS cmds being built nightly. r=wtc. Bug 231025 2004-01-16 02:03:08 +00:00
jgmyers%speakeasy.net fb8076054e fix comment per review: bug 53133 2004-01-16 01:04:57 +00:00
wchang0222%aol.com dd0e83eb66 Minor change after review of previous checkin. Bug 53133. 2004-01-15 22:34:26 +00:00
relyea%netscape.com 30bb314da7 Fix build problems on some platforms. 2004-01-15 16:27:02 +00:00
wchang0222%aol.com 617cabf1fa Set NSS version to 3.10 Beta. 2004-01-15 15:08:58 +00:00
jgmyers%speakeasy.net a71fdf6c5c Convert T61String-labeled ISO-8859-1 to UTF-8: bug 53133 r=nelsonb a=wtc 2004-01-15 06:23:14 +00:00
nelsonb%netscape.com 65088fd320 Add 2 additional OIDs to the list of acceptable digestEncryptionAlgIDs, 
per RFC 3370. r=thayes.  Bug 230761.
 2004-01-14 22:20:44 +00:00