4b0281cf28
Bugzilla Bug 318968: more ECDSA test cleanup. Do not zeroize when freezing
...
ECParams' arenas. Use EC_CopyParams to copy ECParams to an EC public key
and allocate the public key's value from the same arena. r=glen.beasley.
2006-02-15 19:06:51 +00:00
4cc50bbc40
322871: JSS needs to handle ECC keys and certs`
...
Back out changes by rrelyea (2006-02-10) and glen.beasley (2006-02-14).
r+: wtc
2006-02-14 23:53:05 +00:00
569463eb3e
temp build fix
2006-02-14 20:16:45 +00:00
c0887f9e1d
Bugzilla Bug 326754: fixed two minor bugs related to the h parameter in
...
PQG parameter generation. r=nelsonb,glen.beasley.
2006-02-14 03:04:57 +00:00
b19b5965a5
Bugzilla Bug 326144: need to zeroize a SECItem that contains a copy of the
...
secret key. r=relyea,jpierre.
2006-02-14 02:55:09 +00:00
cfe8a9f253
Bugzilla bug 326751: CKR_SIGNATURE_INVALID is a much better default error
...
code for NSC_VerifyRecover than CKR_DEVICE_ERROR is. r=relyea.
2006-02-11 02:03:25 +00:00
7f3ba76b70
318970 RSA sigver test fix r=wan-teh
2006-02-10 23:27:38 +00:00
2b4f5e5d00
Add multi-hash ECC to jss (based on the 1.4 JCE).
2006-02-10 22:06:22 +00:00
1f4cae4de9
Bugzilla Bug 326482 NSS ECC performance problems.
...
Patch by Nelson, r=relyea.
Save the public key when we create the keypair so we can use it later.
2006-02-10 19:39:53 +00:00
57d9010865
Bugzilla Bug 326482 NSS ECC performance problems.
...
r=nelsonb
Fix bug where ECC keys were not being copied on server startup
2006-02-10 18:54:58 +00:00
fd25589676
Bug 325657, r=Nelson,Wan-Teh, Unset ECL_USE_FP INT Solaris SPARC freebl
2006-02-10 04:38:05 +00:00
2cf33676b0
Bug 320187 NSC_WrapKey called with null output returns short length
...
r=nelsonb
2006-02-09 19:54:22 +00:00
52822535eb
Fixing bug 326358. checking for null mStringBundle is not needed. r/a=kaie
2006-02-09 18:52:28 +00:00
8719a5f375
Bug #325682 , Adds -Wl,-rpath to link step for Linux distributions
...
r=Nelson, sr=Wan-Teh
2006-02-09 00:12:17 +00:00
2c3bfd1312
Bug 320583 Support for SHA256/384/512 with ECC signing
2006-02-08 06:14:31 +00:00
af4804d7ef
Fix for bug 326144 . softoken leaks in nsc_pbe_key_gen. r=nelson, rrelyea
2006-02-07 00:43:31 +00:00
eb3a64e821
Bugzilla Bug 318967: fixed compiler warnings, most of which were char *
...
and unsigned char * mismatches. r=glen.beasley.
2006-02-04 06:39:44 +00:00
58262b951b
Fix build bustage, change // comment to /* */
2006-02-03 20:22:52 +00:00
3aa755acfa
bug 152426, delegation of HTTP download for OCSP
...
r=julien.pierre, r=rrelyea
2006-02-03 18:14:49 +00:00
c2d981f764
bug 183156 remove *UCS2* functions, replacing them with *UTF16* ones
...
r+sr=darin
2006-02-03 14:18:39 +00:00
d55302f3a8
bug 245518 r=nelson, fix for p12 files encoded with null PWs
2006-02-02 20:26:03 +00:00
564cb27d28
Work around bug 292285: don't encode x400 addresses, don't print CRL contents
...
r=julien.pierre
2006-02-02 07:56:19 +00:00
b8088299c2
Allow CKM_ECDSA_SHA1 to be multipart. Bug 325494.
...
Patch contributed by Andreas Sterbenz <Andreas.Sterbenz@sun.com>
r=nelsonb,relyea,wtc.
2006-02-02 07:21:56 +00:00
ff1923a307
[Bug 325307] infinite loop in SECU_FindCrlIssuer. r=julien
2006-02-02 02:45:02 +00:00
fa47026f19
[Bug 324878] crlutil -L outputs false CRL names. r=julien
2006-02-02 02:35:07 +00:00
22c94ce3da
325305: minor memory leak in CERT_FindCertByNameString. r=wtc
2006-02-02 00:57:54 +00:00
943071919b
added Windows build instructions - fixed spec file - added patch file for broken coreconf location.mk
2006-02-01 23:39:01 +00:00
831a7ad015
Bugzilla bug: 324451. Changed JSS version to 4.2.3. sr=glen, r=alexei
2006-02-01 23:18:57 +00:00
db3d31ac92
Bugzilla Bug 318966: implemented the tests for the NIST RNG Validation
...
System. r=glen.beasley.
Modified file: fipstest.c
Added file: rng.sh
2006-02-01 21:28:25 +00:00
c20388e588
Bugzilla Bug 318966: added two RNG functions FIPS186Change_GenerateX and
...
FIPS186Change_ReduceModQForDSA to blapi.h for the NIST RNG Validation
System. r=relyea,nelsonb.
Modified files: blapi.h ldvector.c loader.c loader.h prng_fips1861.c
2006-02-01 21:18:44 +00:00
3ebd845ca9
Bug 319619 "large" ECC private keys cannot be exported through PKCS #11
...
1) Change the export encrypted private key function to ask the token the wrap
size rather than trying to figure it out ourselves.
2) Fix the soften to correctly return the size.
r=wtc, nelsonb
2006-02-01 16:43:47 +00:00
decb139ec2
318970 RSA FIPS tests r=wan-teh sr=bobRelyea
2006-01-31 00:49:40 +00:00
46b88044bc
318970 RSA FIPS tests r=wan-teh sr=bobRelyea
2006-01-31 00:49:02 +00:00
c5d0e51fc7
bug 323903, further improvements on displaying certificate extensions.
...
Patch contributed by Kaspar Brand, supplementing the recent checkin for bug 259031.
r=Martin v. Loewis / kengert
2006-01-30 23:21:00 +00:00
b4358c2729
318970 RSA FIPS Alg Tests r=wan-teh, sr=bRelyea
2006-01-30 19:58:52 +00:00
2071d2bc7b
Fix broken build, caused by c++ style comment in c code.
2006-01-28 02:38:07 +00:00
ddca75b829
Set SSL2 and SSL3 timeout times properly for SSL server session cache.
...
Bug 223242. r=jullien.pierre
2006-01-28 02:21:31 +00:00
9c3dcd9900
bug 324109, Re-Add ocsp info string in cert manager, that was accidentially removed by a checkin for bug 212459
...
r=mscott sr=rrelyea
2006-01-27 21:12:37 +00:00
bb11f0b846
328967 DSA FIPS tests r=Wan-Teh
2006-01-27 18:53:07 +00:00
b1f1c414d0
Removed a blank line that broke the ssl_stress function in ecssl.sh, which
...
cannot handle blank lines.
2006-01-27 18:44:13 +00:00
d2bce3f900
Bugzilla Bug 320589: temporary workaround for SEC_SignData ECDSA signature
...
generation bug introduced by the previous checkin.
2006-01-26 23:51:42 +00:00
55e2995224
Removed an extraneous semicolon after the last parameter in a function
...
declaration.
2006-01-26 23:21:39 +00:00
8460174f41
Bug 323010: nsSecretDecoderRing::SetWindow should be NS_IMETHODIMP, not nsresult, patch by Jeff Walden <jwalden@mit.edu>, r+sr=dveditz
2006-01-26 01:06:42 +00:00
e7333df0cd
Bugzilla bug: 316629. Increased SSLServerSocket timeout from 15 sec to
...
90 sec. Smaller timeout was causing the server to die before client connected.
sr=glen.beasley r=alexei.volkov
2006-01-24 00:42:48 +00:00
6f9d05f035
Remove unnecessary ISALIST test from sparc versions of freebl DSOs.
...
Bug 302658. r=jullien.pierre,wtchang
2006-01-22 08:43:57 +00:00
6a41641124
Make dbck Debug mode work with Softoken. Bug 323570. r=rrelyea.
2006-01-22 06:54:34 +00:00
944db2b329
Don't use variables as structure initializers. Bug 274512. Fix build
...
on HPUX. r=julien.pierre,wtchang
2006-01-22 06:42:14 +00:00
06c2abf1fa
Detect certdb reference leaks at shutdown with assertions. Bug 324103.
...
r=rrelyea.
2006-01-22 06:36:36 +00:00
d6b2459e61
Bugzilla Bug 323977: use the "mapfile" (ld version script) on FreeBSD.
...
Build the freebl shared libraries with the -Bsymbolic flag for GNU ld.
r=nelsonb. Thanks to Glenn Randers-Pehrson <glennrp@imagemagick.org> for
reporting this bug and verifying these changes.
Modified files: coreconf/FreeBSD.mk nss/lib/freebl/Makefile
2006-01-21 02:33:33 +00:00
9633334de2
Plug a cert DB reference leak in softoken, related to trust objects.
...
Bug 324103, r=rrelyea
2006-01-21 02:23:42 +00:00
f116200e1d
Bugzilla Bug 320589: miscellaneous code cleanup: distinguish between the
...
length of the field size and the length of the base point order. Report
better error codes. In ECDSA_VerifyDigest, removed unnecessary local
variables and be lenient in the signature lengths we accept.
r=relyea,nelsonb
2006-01-21 02:14:46 +00:00
1477ed4b30
Fix for bug 317856 . uninitialized variable correction. r=wtchang
2006-01-20 22:55:15 +00:00
93e4f37f97
Do not attempt to install .chk files when cross-compiling.
...
Bug #317620 r=wtc
2006-01-20 21:52:18 +00:00
6f9e66cf05
Detect NULL server key pair pointer. Bug 321161. r=wtchang.
2006-01-20 17:40:21 +00:00
91408cf272
Fix for bug 317856 . compiler warnings in strsclnt
2006-01-20 00:43:23 +00:00
26731456ca
Bugzilla Bug 95323. Conditionally compile nsscapi.
...
r=julien
2006-01-19 19:55:28 +00:00
58862edcbf
change QA test order to be bottom-up. Bug 309412. r=jullien.pierre
2006-01-19 11:59:56 +00:00
e521b0a741
Back out last change, which broke the build.
2006-01-19 02:34:12 +00:00
a3089c6a9d
Prevent crash when making new cert8.db from old cert5.db.
...
This is not the final solution, but it works.
Bug 320029. r=rrelyea,sr=julien.pierre. On TRUNK.
2006-01-19 02:16:30 +00:00
f32a4d3f27
Add new function nsslowcert_DecodeAnyDBEntry. Correct the union
...
certDBEntry by adding the missing members. Bug 323570. r=rrelyea.
2006-01-19 02:09:37 +00:00
446a084b09
Softoken will no longer generate excessive key material for some SSL3
...
cipher suites. Bug 274512. r=rrelyea.
2006-01-19 01:12:53 +00:00
d27a2d48d9
Bugzilla Bug 318217: use the new NSPR functions PR_EmulateAcceptRead and
...
PR_EmulateSendFile added in NSPR 4.1. r=nelsonb.
Modified files: manifest.mn sslimpl.h sslsock.c
Removed file: emulate.c
2006-01-18 23:06:57 +00:00
0e9451eaef
Fix for bug 319495 . Clean up Makefiles for command-line tools. r=nelson
2006-01-18 22:44:39 +00:00
c1b7e30c6f
Bugzilla Bug 317620: use "pwd -W" to convert $(DIST) to an absolute
...
pathname (ABS_DIST) under MSYS on Windows. We use the same method to
to define MOZ_BUILD_ROOT in configure.in. The patch is contributed by
Chris Seawood <cls@seawood.org>. r=wtc.
2006-01-18 21:32:27 +00:00
ce5e5d7682
Bugzilla Bug 323379: need to set ADDON_PATH for libsoftokn3.so to load
...
libfreebl3.so as an add-on on BeOS. Thanks to Doug Shelton
<doug@sheltonfamily.org>for reporting the bug and verifying the fix.
r=christophe.ravel.
2006-01-18 20:56:28 +00:00
f822c8f7d0
NSS ECDSA can only sign SHA-1 bug 320583
...
r=nelson patch ammended to change SHA-1 to HASH per wtc comment.
2006-01-17 00:38:59 +00:00
7cb9201cf8
Bugzilla Bug 317620: landed NSS 3.11 on the Mozilla trunk. The patch is
...
contributed by Kai Engert <kengert@redhat.com>. r=wtc,bsmedberg.
Bugzilla Bug 288647: (security/manager/Makefile.in only) enable building
NSS with system NSPR. The patch is contributed by Chris Seawood
<cls@seawood.org>. r=wtc,kengert.
Modified Files:
Makefile.in browser/installer/unix/config.it
browser/installer/unix/packages-static
browser/installer/windows/config.it
browser/installer/windows/packages-static
calendar/installer/windows/config.it
calendar/installer/windows/packages-static
camino/Camino.xcode/project.pbxproj
embedding/config/basebrowser-installer-win.pkg
embedding/config/basebrowser-mac-macho
embedding/config/basebrowser-qnx
embedding/config/basebrowser-unix
embedding/config/basebrowser-win embedding/config/minimo-qnx
embedding/config/minimo-unix mail/config/basemail-os2
mail/config/basemail-unix mail/installer/windows/config.it
mail/installer/windows/packages-static
minimo/config/linux_package.sh security/manager/Makefile.in
security/manager/psm.pkg toolkit/mozapps/installer/packager.mk
xpinstall/packager/packages-os2
xpinstall/packager/packages-static-unix
xpinstall/packager/packages-static-win
xpinstall/packager/packages-unix
xpinstall/packager/unix/deliver.pl
xpinstall/packager/win_mfcembed/config.it
xpinstall/packager/windows/browser.jst
xpinstall/packager/windows/config.it
xulrunner/installer/mac/Makefile.in
2006-01-13 18:09:32 +00:00
143f08953f
Bugzilla Bug 320497: indicate that we don't need an executable stack.
...
r=wolfgang.rosenauer,jpierre.
Modified files: arcfour-amd64-gas.s mpi/mpi_amd64_gas.s
2006-01-13 17:33:10 +00:00
386f28eb50
Bugzilla Bug 317858: gcc on Linux/ppc doesn't recognize the -z defs linker
...
flag, so we need to use -Wl to pass it to the linker. r=caillon.
2006-01-13 17:24:13 +00:00
909bcd2da3
HP and AIX cert extension tests failure fix.
2006-01-13 07:59:31 +00:00
cdf90d5eb6
Bugzilla Bug 323079: when libsoftoken and libssl load the freebl library,
...
first try without resolving symlinks. If we fail to load the library and
the pathname is a symbolic link, resolve the symbolic link and try again.
r=jpierre. sr=relyea.
2006-01-12 23:46:31 +00:00
8397d43a6a
Bug 106386 Correct misspellings in source code
...
patch by philippuryear@gmail.com r=timeless rs=brendan
2006-01-12 07:57:31 +00:00
d5a3092f79
cert extension test for 53229: certutil should not use gets(). julien:review+
2006-01-12 01:09:03 +00:00
7fcf5652b0
remove svrcore-config
2006-01-12 00:49:35 +00:00
96d896ee39
Use a new IID for changed interface nsIX509CertDB2, supplemental checkin for bug 316710
...
r=rrelyea
2006-01-12 00:26:19 +00:00
916b41ef3d
Bug 322429 nsICertPicker is misleading
...
r=kaie sr=bz
2006-01-11 08:29:49 +00:00
23733e48f0
bug 101996, temp file with guessable name used during p12 import.
...
r=rrelyea
2006-01-10 02:51:24 +00:00
76c2868c0e
bug 137506, Only internal token's keys can be exported
...
Patch by Bob Relyea, r=kengert
2006-01-10 02:29:25 +00:00
23de42117e
bug 149834, Enhance PSM speed by using new NSS API CERT_VerifyCertificateNow
...
Patch by John G. Myers, r=kengert
2006-01-10 02:14:04 +00:00
b3b97237fb
bug 316710, Land some generic crypto backend code, mostly cleanup, some small enhancements
...
Patch by Bob Relyea, r=kengert
2006-01-10 02:07:47 +00:00
827d15274c
added .spec file for building RPM - package is svrcore-devel - a script svrcore-config for getting cflag and ldflag information, and a .pc file for pkg-config
2006-01-06 18:02:35 +00:00
0d90a194f0
Bugzilla Bug 318968: fixed the build error with NSS_ENABLE_ECC unset.
...
Modified files: Makefile fipstest.c
2006-01-05 21:49:05 +00:00
319fbb6196
Bugzilla Bug 321865: added coreconf files for Solaris 11. The patch is
...
contributed by Alfred Peng <alfred.peng@sun.com>. r=wtc.
Added files: SunOS5.11.mk SunOS5.11_i86pc.mk
2006-01-03 23:02:11 +00:00
72ac26b6ce
Bug 321504 Remove unneeded uses of nsIDocumentLoader
...
r+sr=bz
2005-12-26 16:45:59 +00:00
50e1f3ea38
bug 259031, Add support for displaying certificate extensions
...
Patch contributed by Martin v. Loewis.
r=kengert/rrelyea/wtchang sr=shaver/rrelyea
2005-12-25 21:09:45 +00:00
fb899e04af
Fix the build busted by checkin for bug 318968
2005-12-23 03:14:36 +00:00
d8c1021594
Bugzilla Bug 318968: added FIPS ECDSA algorithm test. r=glen.beasley.
...
Modified file: fipstest.c
Added file: ecdsa.sh
2005-12-22 22:22:17 +00:00
e681f06b4a
Bugzilla Bug 318962: combined a PORT_Realloc and a memset call into an
...
equivalent PORT_ZAlloc call. r=glen.beasley.
2005-12-22 22:19:03 +00:00
cb01eaf34d
Bugzilla bug 318962: it is legal for PORT_Realloc(oldptr, 0) to return
...
NULL, so that shouldn't be treated as a memory allocation failure.
2005-12-22 01:39:17 +00:00
0d963476e9
Bugzilla bug: 320980. Updated common.c and upgraded the JSS version.
...
sr=glen.beasley
2005-12-21 18:39:24 +00:00
784abb2c93
318958 fixing c++/java comment to C
2005-12-21 00:29:44 +00:00
03bbc006b5
318958 fixing Monte Carlo test r=Wan-Teh
2005-12-21 00:13:52 +00:00
3ce12eeea4
318962 buffer fix for SHA Monte Carlo tests r=wan-teh
2005-12-20 18:20:50 +00:00
f7632288b8
trying to fix SUN bustage
2005-12-20 12:25:21 +00:00
55526430f9
b=255408 Need to be able to build mozilla --with-system-nss
...
r=wtc/bsmedberg
Note: patches for bugs 288647 and 317620 might be required before enabling this build feature works.
2005-12-20 09:47:11 +00:00
3b577f224d
Bugzilla Bug 317052: removed the obsolete file lib/base/whatnspr.c from
...
CVS. r=relyea.
Modified Files:
base.h error.c manifest.mn
Removed Files:
whatnspr.c
2005-12-19 17:53:28 +00:00
165d7b9185
Bugzilla Bug 272484: code cleanup. keythi.h: remove the unused type
...
definition of SEC_PKCS5KeyAndPassword. p12d.c: We only need to set
p12dcx->currentASafeP7Dcx to NULL if it isn't NULL. r=relyea.
Modified Files: cryptohi/keythi.h pkcs12/p12d.c
2005-12-19 17:46:30 +00:00
8888626b36
Fix build. Remove c++ style declaration of loop control variables.
2005-12-17 01:03:12 +00:00
f39056f8e1
318964 implement HMAC algorithm tests for FIPS 140-2 validation r=Wan-teh
2005-12-16 16:57:49 +00:00
4961f4ed28
Mac fixes to ckfw.
2005-12-16 01:57:41 +00:00
wtchang%redhat.com
christophe.ravel.bugs%sun.com
glen.beasley%sun.com
rrelyea%redhat.com
neil.williams%sun.com
dougt%meer.net
julien.pierre.bugs%sun.com
kaie%kuix.de
cbiesinger%web.de
nelson%bolyard.com
alexei.volkov.bugs%sun.com
richm%stanfordalumni.org
sandeep.konchady%sun.com
nelsonb%netscape.com
gavin%gavinsharp.com
cls%seawood.org
timeless%mozdev.org