Граф коммитов

518 Коммитов

Автор SHA1 Сообщение Дата
nelsonb%netscape.com 60e7af5b8b Some unix platform kshells don't understand export VAR=value
So instead use                                VAR=value; export VAR
2000-08-09 20:44:05 +00:00
nelsonb%netscape.com 6e65d05e51 Add new macros: MP_MIN, MP_MAX, MP_HOWMANY, MP_ROUNDUP. 2000-08-09 20:42:18 +00:00
javi%netscape.com e1a150e2ef Don't call the callback function if one is not stored. 2000-08-09 17:17:42 +00:00
javi%netscape.com 05485feff7 Implement the poll loop on UNIX for the PKCS7 Decoder when finishing up
just in case PSM is a little slow to shove data back at us.
2000-08-08 23:08:53 +00:00
nelsonb%netscape.com 6449cf0e9f Emulate an SSL3 client more closely after a server negotiates down to 3.0. 2000-08-08 22:54:02 +00:00
ddrinan%netscape.com 588ef0b7ac Disable to TLS because some servers do not implement version rollback correctly 2000-08-08 21:10:20 +00:00
mcgreer%netscape.com a4c0bd7e17 zero the correct amount of input bytes 2000-08-08 20:30:56 +00:00
nelsonb%netscape.com 1a81db9b8a Fix crash caused by zeroing a larger buffer than the caller passed in. 2000-08-08 05:56:56 +00:00
nelsonb%netscape.com 1818f084e5 Fix crash caused by uninitialized variable. 2000-08-08 05:56:10 +00:00
nelsonb%netscape.com 53ac6c5c98 - Change mpi private function s_mp_mul_d_add_offset into a macro.
- Declare and implement new function s_mp_mul_add, which is a candidate
  for replacement with assembler code.
- Convert mp_mul, mp_sqr, etc. to use s_mp_mul_add.
- New implementation of mp_invmod for odd moduli. Algorithm from paper
  "Fast Modular Reciprocals" by Richard Schroeppel (a.k.a. Captain Nemo).
- New function s_mp_invmod_32b in mpi.c, computes inverse mod 2**32, also
  from same paper. Used in mp_invmod and mp_exptmod.
2000-08-08 03:20:35 +00:00
javi%netscape.com 97d62f44f5 A fix for Windows where the client stops trying to read decrypted data back from the client before it's ready. 2000-08-08 01:26:44 +00:00
nelsonb%netscape.com 0bade04ba3 Platform independent performance enhancements to functions that multiply,
square, subtract, right shift, compare, mul_d_add_offset.  This lib's
Modular Exponentiation performance now compares favorably with most (not
all) other open source bignum libs on IRIX/R5000.  No assembler code is
presently being used.  Comparison on other platforms will now commence.
2000-08-05 03:37:46 +00:00
nelsonb%netscape.com e30a05c7bf Minor performance tweaks. 2000-08-04 19:58:20 +00:00
nelsonb%netscape.com f5478e8ae0 Add new signed mp_word type, mp_sword. Used to get arithmetic right
shifts when doing subtraction.
2000-08-04 19:57:24 +00:00
cotter%netscape.com fd5e3a7502 Corrected date at top. 2000-08-03 17:24:43 +00:00
cotter%netscape.com 1eb2b4b0c2 Updated platforms supported (deleted Solaris 2.5.1). 2000-08-03 17:23:45 +00:00
nelsonb%netscape.com a8b9681335 mpl_rsh now calls s_mp_div_2d instead of duplicating its logic.
mpl_lsh now calls s_mp_mul_2d instead of duplicating its logic.
2000-08-02 20:52:17 +00:00
nelsonb%netscape.com 26a0e342f4 - Implement s_mp_mul_2d, which complements s_mp_div_2d.
- Rewrite and speed up mp_sqr, most-frequently used in mp_exptmod().
- Speed up mp_sqrt by starting with a much better initial estimate.
2000-08-02 20:50:57 +00:00
nelsonb%netscape.com da54a36647 Accept input args in hex, not decimal. Line up output into columns. 2000-08-02 20:48:28 +00:00
nelsonb%netscape.com 9620ef0ca4 Declare s_mp_mul_2d(), which is complementary to s_mp_div_2d(). 2000-08-02 20:47:05 +00:00
relyea%netscape.com 4bd8d5f202 Put modutil back into the daily builds 2000-08-02 18:42:32 +00:00
relyea%netscape.com 0ae2a22271 Remove old communicator stuff from libjar so modutil will build now. 2000-08-02 18:41:31 +00:00
cotter%netscape.com 6af181aba5 Added latest PSM license. 2000-08-02 16:46:16 +00:00
nelsonb%netscape.com 886543402f Reduced the number of temporary variables allocated and freed during a
modular exponentiation by over 99%.  Modified mp_mul and mp_sqr to only
allocate temporary variables when absolutely needed.  Changed mp_copy
and mp_init_copy to allocate space according to the amount allocated
in the source, reducing the need to grow the variable later.
2000-08-02 01:03:14 +00:00
nelsonb%netscape.com 147b7451ec Investigating allocation of temporary variables. 2000-08-02 01:01:01 +00:00
ddrinan%netscape.com f3fa519172 Initialize pointer! 2000-08-02 00:20:24 +00:00
nelsonb%netscape.com e24f34f2c8 Declare mp_int function arguments "const" as appropriate. 2000-08-01 01:38:30 +00:00
nelsonb%netscape.com 9caea97bd1 Change default value for MP_ARGCHK to depend on whether or not DEBUG is
defined.  Raise the default "precision" to reduce reallocations.
2000-08-01 01:36:30 +00:00
nelsonb%netscape.com cb72925c4a Fix initalizers in logtab.h to be "float" values, not "double" values. 2000-07-31 20:36:41 +00:00
nelsonb%netscape.com 1ebd55b401 Fix build problem caused by the fact that including stdlib.h implicitly
includes stdio.h on some platforms, but not on others.
2000-07-31 20:08:46 +00:00
nelsonb%netscape.com 4e92230a97 Use Windowed computation of exponent in mp_exptmod(). 2000-07-30 06:37:14 +00:00
nelsonb%netscape.com 71be9cf03c Add function mpl_get_bits(). Returns value of contiguous subset of bits
of bignum.  Useful for windowed modular exponentiation.
2000-07-30 06:35:38 +00:00
nelsonb%netscape.com 78256a8fa7 MPI Arbitrary Precision Integer Arithmetic library.
The Initial Developer of the Original Code is
Michael J. Fromberger <sting@linguist.dartmouth.edu>
2000-07-30 02:05:19 +00:00
nelsonb%netscape.com 97ef19c3b8 MPI Arbitrary Precision Integer Arithmetic library.
The Initial Developer of the Original Code is
Michael J. Fromberger <sting@linguist.dartmouth.edu>
2000-07-30 01:56:35 +00:00
nelsonb%netscape.com 792ad45230 Build mpi library files in freebl. 2000-07-29 19:07:22 +00:00
nelsonb%netscape.com df9c21a9de Separate DH implementation for use with BSAFE and mpi-based implementation
into two files.
2000-07-29 19:06:54 +00:00
nelsonb%netscape.com 534ec52daa Build libmpi.a. Include mpmontg.o in libmpi.a. Build programs with
libmpi.a.  Fix dependencies so lib is rebuilt when headers change.
2000-07-28 23:11:12 +00:00
nelsonb%netscape.com 6b24794435 Modular exponentiation with Montgomery reduction for MPI.
The Initial Developer of the Original Code is
Netscape Communications Corporation.  Portions created by Netscape are
Copyright (C) 2000 Netscape Communications Corporation.
All Rights Reserved.
2000-07-28 23:09:02 +00:00
nelsonb%netscape.com 71fb2fa5e4 Disambiguoate error messages in mod-expt test. 2000-07-28 23:04:23 +00:00
nelsonb%netscape.com 385fd4fc86 - Renamed mp_exptmod to s_mp_exptmod. This function is now used only in
when the modulus is even. mp_exptmod is now in mpmontg.c.
- Declare and define new function s_mp_mul_d_add_offset(), which computes
the product of an mp_digit and an mp_int, shifts the product to the left
by a number of digits, and adds the shifted product to another mp_int.
Used in multiplication and Montgomery reduction.  Numerous platform
vendors have assembly language versions of this function.
- Removed some ANDs with DIGIT_MAX.  Casting to mp_digit is necessary
and sufficient.  The AND doesn't help.
2000-07-28 23:03:12 +00:00
nelsonb%netscape.com f554a212b4 Use unsigned int for mp_digit instead of unsigned long when both are
32-bits.  This reduced warnings.  Use mp_size instead of unsigned int
in function declarations. Fix MP_DIGIT_FMT for 32-bit digits.
2000-07-28 22:55:56 +00:00
nelsonb%netscape.com a38b5ec52f Use mp_size instead of unsigned int in function prototypes. 2000-07-28 22:49:42 +00:00
mcgreer%netscape.com ce6f724504 merge changes from 3.0 branch 2000-07-27 18:26:28 +00:00
nelsonb%netscape.com 99f3a8bf86 Add new function s_mp_add_offset().
Very handy in Montgomery reduction using Dusse' and Kalski's method.
2000-07-27 03:02:42 +00:00
nelsonb%netscape.com b05581f7ec Moved the declarations of many private defines and functions out of mpi.c
and into mpi-priv.h.  Previously, mplogic.c and mpprime.c had duplicate
copies of some of those declarations.  Now, they include mpi-priv.h
2000-07-27 02:38:54 +00:00
nelsonb%netscape.com bf4e60e7b3 Fix sprintf format, can't use DIGIT_FMT. 2000-07-27 00:23:17 +00:00
wtc%netscape.com cf5a75f8dc Bugzilla bug #46509: removed the use of -taso and the USE_64 makefile
option on OSF1.
2000-07-26 22:20:16 +00:00
nelsonb%netscape.com ba8b232867 Move enhanced prime finder function mpp_make_prime from primegen utility
program into mpprime.c.  declared in mpprime.h.
2000-07-26 05:41:59 +00:00
nelsonb%netscape.com 8bf87ce6bb Fix bug in mp_div_2d that set r = q % d when a and q are the same mp_int.
Minor performance enhancement to s_mp_div_2d when DIGIT_BIT divides d.
2000-07-26 05:39:53 +00:00
nelsonb%netscape.com 7bb8634a3c Fix a bug in recently added function mp_set_bit(). 2000-07-26 05:32:30 +00:00
cotter%netscape.com 777b97104b Fixed some broken links in release notes, added release notes banner. 2000-07-26 00:01:34 +00:00
nelsonb%netscape.com b9d1a404d2 Update nTires via a pointer argument to mpp_make_prime().
Change some printfs.
2000-07-25 00:16:57 +00:00
nelsonb%netscape.com aef9190b64 Add new function mpp_fermat_list, which performs the fermat test on a
list of "witness" numbers.  Simplify and accelerate mpp_pprime().
2000-07-25 00:15:06 +00:00
nelsonb%netscape.com cbc85c762b Fix assertion. Comparison sense was inverted. 2000-07-25 00:12:57 +00:00
nelsonb%netscape.com f16cc60f1a Add -fullwarn to some build flags. Change dependencies for primegen. 2000-07-22 07:22:37 +00:00
nelsonb%netscape.com 175cab0f15 Implement sieving to accelerate elimination of composites.
This sieve eliminates all but about 3500 numbers from each range of 64k.
2000-07-22 05:54:21 +00:00
nelsonb%netscape.com 1f040d3f9f Use large prime table for faster prime gen. Make prime table "const".
Change functions that use prime table to use const arguments.
2000-07-22 05:36:45 +00:00
nelsonb%netscape.com 41121574a7 Change s_mp_norm to always use a power of two as the normalizing factor.
This enhancement performance by turning the normalizing and denormalizing
operations into shifts.
2000-07-21 21:06:08 +00:00
nelsonb%netscape.com 4b4e6bccd9 Implement mpl_get_bit, mpl_set_bit, mpl_significant_bits. 2000-07-21 21:04:14 +00:00
nelsonb%netscape.com 3b292e3f60 Fix symbol prefixes in some comments. 2000-07-21 20:50:31 +00:00
ddrinan%netscape.com 13939a3e0b Added Netscape disclamer on the security advisor page 2000-07-21 01:15:55 +00:00
javi%netscape.com 3e2ca70194 Allow signatures to be created even if there is no encryption cert to
be associated with the signature.
2000-07-20 21:57:31 +00:00
javi%netscape.com d154ce33b3 Allow signatures to be created even if the user doesn't have an
encryption cert to go along with it.
2000-07-20 21:56:34 +00:00
roeber%netscape.com bed9fed1db Added tests of token object manipulation.
I actually did this two months ago, but forgot to
check it in before going on sabbatical.
2000-07-20 21:48:26 +00:00
mcgreer%netscape.com 36c22a2a15 some compilers don't like the void* arithmetic 2000-07-20 16:58:32 +00:00
nelsonb%netscape.com 350eea5535 Use unsigned ints for length parameters to "octets" functions. 2000-07-20 04:47:24 +00:00
nelsonb%netscape.com 7f70f07983 Eliminate lots of warnings found by -fullwarn.
Add sanity test to s_mp_div().
2000-07-20 04:21:37 +00:00
nelsonb%netscape.com 04007f8bb5 Eliminate warnings found with -fullwarn. 2000-07-20 04:20:21 +00:00
mcgreer%netscape.com dbede1a951 Change the startup/shutdown procedure. Now a minimum amount of seed bytes, MIN_SEED_COUNT, are required before output bytes can be extracted. Also, it is possible to do a full restart by calling RNG_RNGInit() and RNG_RNGShutdown() in succession. This is noted in the blapi.h comments for those functions. 2000-07-19 23:54:43 +00:00
nelsonb%netscape.com 5a1cb37329 Build all mpi .c files with -DMP_API_COMPATIBLE 2000-07-19 23:23:24 +00:00
nelsonb%netscape.com 94e36d6f32 Implement 5 new functions for dealing with variable length integers
represented as unsigned and signed octet strings.
mp_read_unsigned_octets(), mp_unsigned_octet_size(),
mp_to_unsigned_octets(), mp_to_signed_octets(), mp_to_fixlen_octets()
See mpi.h for more info.
2000-07-19 23:22:43 +00:00
nelsonb%netscape.com 9ab0d70f0e All #defines now have MP_ prefix. To get old #defines, compile with
-DMP_API_COMPATIBLE .  mpi.c is compiled that way.
2000-07-19 23:18:08 +00:00
ddrinan%netscape.com 42a6ceda94 Fix for getting ca name 2000-07-19 22:10:55 +00:00
ddrinan%netscape.com 022f0f8362 Fix for cert renewal bug 2000-07-19 21:21:46 +00:00
mcgreer%netscape.com adc97e5caf initial checkin of PRNG code 2000-07-19 17:01:31 +00:00
ddrinan%netscape.com b1a4541e5b Fix pickle and unpickle of the CA name 2000-07-19 00:21:39 +00:00
javi%netscape.com d518c4138c Modify JavaScript for prefs so that Mozilla correctly saves them. 2000-07-18 21:53:08 +00:00
javi%netscape.com 640da2a6a3 Fix the printf parameter. 2000-07-18 18:21:51 +00:00
javi%netscape.com f2b1d03499 zeroize the output before converting to utf8 so that we get the sting
length right in all cases.  This allows us to remove the hack where
we hard code the out length to be half the original length.  Which may
or may not be true depending on what we're converting.
2000-07-18 01:30:04 +00:00
mcgreer%netscape.com 0b57de2866 initial checkin of ARCFour. 2000-07-18 00:56:09 +00:00
javi%netscape.com 46a51b8158 Re-work some of the JavaScript for prefs so that Mozilla just "does the right thing." 2000-07-17 22:54:07 +00:00
nelsonb%netscape.com 49bfd5fc00 Fix "random" modulus so it is odd and has msb of most significant digit
set to 1, and "random" base to be less than modulus.
2000-07-17 22:37:55 +00:00
nelsonb%netscape.com 8133fdd980 Fix script to run on certain unix platforms. 2000-07-17 22:34:30 +00:00
nelsonb%netscape.com 7dc037f3a3 Shorten this test so it completes in less time. 2000-07-17 22:33:46 +00:00
nelsonb%netscape.com bdf621e594 Fix mpp_pprime() so it doesn't stop after first succesful iteration. 2000-07-17 22:32:46 +00:00
nelsonb%netscape.com 88292a3a0d Add support for 32-bit digits (64-bit words) on platforms that can
multiply two 32-bit values yielding a 64-bit product in hardware.
Fix bug in s_mp_div that computed a quotient digit q > DIGIT_MAX
when b > DIGIT_MAX/2 and b < a <= DIGIT_MAX.
2000-07-17 22:31:18 +00:00
nelsonb%netscape.com 29b5ea6ec4 Elimintate type mismatch warning. 2000-07-17 22:23:23 +00:00
nelsonb%netscape.com 9ae84ceff8 Turn on MP_CRYPTO flag by default. Increase default size to 32 digits. 2000-07-17 22:22:28 +00:00
nelsonb%netscape.com 3e30ad8b50 Get file to work with SysV make on IRIX.
Add .i target (preprocessor output).
2000-07-17 22:21:42 +00:00
javi%netscape.com 1463cddfc4 Fix P12 import on Solaris given the new NLS package. 2000-07-15 01:18:33 +00:00
javi%netscape.com d448e6b43c Make solaris join the realm of XPCOM 2000-07-14 23:13:45 +00:00
nelsonb%netscape.com 7ed5654089 MPI Arbitrary Precision Integer Arithmetic library.
The Initial Developer of the Original Code is
Michael J. Fromberger <sting@linguist.dartmouth.edu>
2000-07-14 00:45:02 +00:00
mcgreer%netscape.com 11bcfbe3d6 fingerprint had to handled in certutil for now since SECU_PrintCertificate receives a decoded DER. see #45303 2000-07-12 22:42:57 +00:00
mcgreer%netscape.com d42ada9be0 add fingerprints to info dumped with certificate 2000-07-12 20:48:47 +00:00
javi%netscape.com d87da4da0e Make viewing CA certs during import work again. 2000-07-12 00:22:23 +00:00
cotter%netscape.com c06b1af9b3 Added info about OCSP in cases of invalid email signature. 2000-07-11 21:32:19 +00:00
javi%netscape.com 887c81b96a Fix a type-o. 2000-07-11 18:45:40 +00:00
javi%netscape.com de26e9a4fc Make the button in the security advisor for CRL's look like the other
buttons.
2000-07-11 00:50:12 +00:00
ddrinan%netscape.com 0138d55175 Made changes to the password retry text to fix bugs 399954 and 44110 2000-07-10 22:53:58 +00:00
javi%netscape.com 09909de642 Correctly define CORE_DEPTH 2000-07-07 21:17:31 +00:00
chrisk%netscape.com 49779ca3c4 Added -d option
-p option now also works for decoding
2000-07-07 00:57:39 +00:00
javi%netscape.com d8af2764fb More entries that were multiply defined are now fixed. 2000-07-06 01:38:51 +00:00
javi%netscape.com 7087d3e436 Removed some properties that were multiply defined and correctly defined some
hdr property entires to avoid over-writing properties.
2000-07-06 01:31:30 +00:00
javi%netscape.com e9987aeb54 Get the CRL dialog window to properly close and refresh the Signers pane
when no more CRL's are left.
2000-07-01 01:26:42 +00:00
javi%netscape.com 628ab13451 First shot at having UI for deleting CRLs. 2000-07-01 01:19:22 +00:00
javi%netscape.com b5b2f5d3cd Remove an unused button from dialog. 2000-07-01 01:15:28 +00:00
javi%netscape.com 303eb4dbb0 Changes for having a dialog that does CRL deleting. 2000-07-01 01:14:22 +00:00
relyea%netscape.com 2c08b2ae6c Fix memory leak when using hardware acceleraters. 2000-06-29 21:26:17 +00:00
relyea%netscape.com 1d084af74a merge changes from NSS 3.0 branch to allow NT automated tests to work. 2000-06-29 21:25:41 +00:00
relyea%netscape.com 5fcb0862b3 merge 3.0_Branch changes to get NT to run back unto the tip. 2000-06-29 21:23:37 +00:00
mcgreer%netscape.com 0d70c5df17 add a > wordsize test for RC4 2000-06-29 18:38:30 +00:00
javi%netscape.com 366f6b877e Don't stop sending text to a log file just because one Write failed.
This way subsequent DEBUG messages may still get printed.
2000-06-29 18:19:03 +00:00
javi%netscape.com c9cce921c4 Change P12 file path request strings to be consistent with terms used in
Security Advisor.
2000-06-28 22:16:11 +00:00
javi%netscape.com fdb8d2e2a1 Add some text to the cases where S/MIME signatures fail when OCSP is enabled. 2000-06-28 21:37:09 +00:00
javi%netscape.com 36f80c0373 Fix to add some text to security advisor when S/MIME signatures faile
when OCSP is enabled.
2000-06-28 21:36:36 +00:00
ddrinan%netscape.com 2ec581c2b2 Fix for bug# 398838 2000-06-28 21:20:38 +00:00
ddrinan%netscape.com 6b25adba60 Added target to release the xpi file 2000-06-28 01:19:20 +00:00
javi%netscape.com 2607cae31c Make the Pretty print window smaller so that it doesn't run off the bottom of
the screen w/ Mozilla.
2000-06-28 00:11:17 +00:00
javi%netscape.com 53ce1bbd54 When FIPS is enabled, do verification of detached signatures on a separate thread
to prevent dead-locking the front end thread.
2000-06-27 21:55:59 +00:00
javi%netscape.com e5cc2ea430 When verifying a cert, pass in the control connection as the wincx so
that when FIPS is enabled, we don't crash.
2000-06-27 21:53:59 +00:00
javi%netscape.com 973eb09da7 Sigh. Preceed all <LINK ..> blocks with a <SCRIPT></SCRIPT> to work around
a bug in 4.x Communicator Solaris where the contents of the style sheet get
dumped to the screen.  Not sure why this solves that problem, but it does.
2000-06-27 01:32:39 +00:00
ddrinan%netscape.com 20181164f8 Build the PSM xpi files 2000-06-27 01:21:41 +00:00
javi%netscape.com ed5ca5fe40 Doh!! Forgot to add the psm executable to the xpi file. 2000-06-27 00:55:05 +00:00
javi%netscape.com 75969b229b Add an html file that can be used to install the xpi 2000-06-27 00:34:03 +00:00
javi%netscape.com 1b21a013ed Add a rule to automatically create XPi files. 2000-06-27 00:20:07 +00:00
javi%netscape.com a665534475 Checking in the file we use for xpi install on UNIX with mozilla. 2000-06-26 23:44:28 +00:00
cotter%netscape.com 7b28c90cc7 Updated installation and what's new sections re Security directory on Windows, which no longer needs to be renamed when installing Netscape 6 after PSM for Communicator (or vice versa). 2000-06-26 22:32:55 +00:00
thayes%netscape.com 192078b3d8 Add tests for Secret Decoder Ring (SDR) 2000-06-24 01:06:26 +00:00
thayes%netscape.com c960eeb856 Add SDR test command 2000-06-23 22:25:22 +00:00
javi%netscape.com 0a1c85c01a Move some localizable strings from psm_ui.properties.in to psm_text.properties.in 2000-06-23 21:54:32 +00:00
chrisk%netscape.com c2fdb05c18 Added and corrected some comments
Added $layercounter
Clarified $boundary generation (a boundary has leading AND trailing CRLFs!)
2000-06-23 18:37:33 +00:00
chrisk%netscape.com d705ca0332 Preliminary checkin at a state where smime can parse messages generated
by itself.
2000-06-23 16:40:31 +00:00
ddrinan%netscape.com 49eff830d4 Changed version to 1.2 2000-06-22 22:21:16 +00:00
javi%netscape.com 7df96cbea8 Update SSMVersionString value. 2000-06-22 21:05:42 +00:00
cotter%netscape.com 61a3ff184f Minor correction to View Certificate Details section. 2000-06-22 20:36:11 +00:00
javi%netscape.com f2f3d96767 We need ssm_swap_bytes defined regardless of whether we're building on a
little endian machine.
2000-06-22 17:36:34 +00:00
javi%netscape.com b124666af9 Fix unicode conversion for win32 so that p12 export/import works again. 2000-06-22 01:28:03 +00:00
ddrinan%netscape.com f7a091cd53 Add new attribute id to socket status resource. Bug #39680 2000-06-21 23:31:28 +00:00
ddrinan%netscape.com ef4de6f1d3 Checked in fix for bug# 39680 2000-06-21 23:26:53 +00:00
ddrinan%netscape.com c149929cd6 Some bug fixes 2000-06-21 20:52:33 +00:00
ddrinan%netscape.com 533acc79a7 Must convert unicode to/from NBO/HBO on little endian systems 2000-06-21 20:43:30 +00:00
chrisk%netscape.com 3902194f5b Added some comments and asserts 2000-06-21 18:12:02 +00:00
chrisk%netscape.com 92a3672caa Oops - fixed the fix. The prototype now correctly unpacks into a
DHPublicKey structure.
2000-06-21 00:04:38 +00:00
javi%netscape.com 017d57c44e Don't block forever waiting for socket status to get created. Mozilla
may call that function after the connection is gone in which case the
socket status will not exist.
2000-06-20 22:39:24 +00:00
chrisk%netscape.com a83d527722 Fix OID for DC AVAs - the root OID in RFC2247 is not different from
the root OID in RFC1274 - so the one we had was WRONG.
I don't know where it came from.
2000-06-20 16:31:31 +00:00
chrisk%netscape.com 390a6f1dec Add code for generation of SMIMEProfile and SMIMEKeyEncryptionPreference 2000-06-20 16:28:59 +00:00
chrisk%netscape.com 23cd2f3659 First feeble attempt at fixing the problem that our definition of
Diffie-Hellman key parameters does not encompass all the optional
fields defined in RFC2459, section 7.3.2 (namely j and validationParams).

I added comments reminding us of the fact that PQGParams need to be
extended to hold these, and fixed the ASN1 prototype from its previous
totally broken status to one that decodes prime, subPrime and base
correctly, and skips the rest.

This avoids failure in public key extraction (which is part of verification)
with DH certs.
2000-06-20 16:22:36 +00:00
chrisk%netscape.com 3550ea9e23 Fix problem where DH certs were always rejected when verifying them
for EMail encryption.
A Diffie-Hellman key needs to be tested for KU_KEY_AGREEMENT, not
KU_KEY_ENCIPHERMENT.
2000-06-20 16:15:32 +00:00
chrisk%netscape.com 568524e3be Fixed bug in sequence printing code: array counter was overshooting by one 2000-06-20 14:35:17 +00:00
chrisk%netscape.com c8e8241728 Fix bug in decoder:
When encoding indefinitely & encountering an optional field at the end of
a sequence, right after an IMPLICIT or POINTER template, the decoder
was not propagating the optionalness and the end-of-contents condition
correctly as it hits the end-of-contents octets instead of the optional
field. This is because IMPLICIT and POINTER push TWO states to look
for the next tag, not just one.
(The first state is "afterImplicit" or "afterPointer", the second one
starts with "beforeIdentifier" as usual).
This finally makes decoding envelopedData messages in cmsutil work.
2000-06-20 13:24:01 +00:00