mozilla
/
gecko-dev
зеркало из https://github.com/mozilla/gecko-dev.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
74 201 коммит 615 Ветки 98 Теги 6 GiB
Граф коммитов

910 Коммитов

Автор SHA1 Сообщение Дата
sonmi%netscape.com ba9ea80a07 no more temp files, all saved for later debugging purpose 
runs with /bin/sh now
 2000-11-14 02:24:44 +00:00
javi%netscape.com a37e024a8f Add text for the module name for root certificates. 2000-11-14 00:02:03 +00:00
javi%netscape.com 9f14760a08 Check in the shell for loading the root cert dll. 2000-11-13 22:57:19 +00:00
sonmi%netscape.com 7342714270 changed and improved selfserver / testclient and stressclient communication 
all through the script
 2000-11-13 18:49:14 +00:00
javi%netscape.com 24d2cef11e First Checked In. 2000-11-11 02:26:21 +00:00
sonmi%netscape.com fc538d50a5 changed the way the -i option (NULL ciphers) are being handeled once more 
also changed shell from ksh to sh, added more output to results.html
 2000-11-10 02:07:17 +00:00
nelsonb%netscape.com 686aa7a151 Release the SpecRead Lock before returning in an error path. 
This bug was found while reading code looking for a different bug.
 2000-11-10 01:36:26 +00:00
mcgreer%netscape.com b7ac7a934c fix the testing for null ciphers by relaunching the server 2000-11-10 00:25:50 +00:00
mcgreer%netscape.com 1f581f8bda pk12util arises from the dead! 2000-11-09 23:00:00 +00:00
mcgreer%netscape.com 4270a44970 make read/write work 2000-11-09 22:59:38 +00:00
javi%netscape.com ff044aad23 Remove a duplicate access path that was an absolute path and would only be good on one development machine. 2000-11-09 22:05:08 +00:00
mcgreer%netscape.com 2cf5418662 only launch the server once for coverage tests 2000-11-09 19:17:55 +00:00
mcgreer%netscape.com 993de1b485 add new ping command to usage 2000-11-09 19:17:04 +00:00
mcgreer%netscape.com ede896e5fc add "-q" option for creating a client which will "ping" the server until it 
is available, or for 1 minute, whichever comes first
 2000-11-09 18:29:52 +00:00
nelsonb%netscape.com 595cf5ac5d Build rsaperf benchmarking tool during nightly builds now. 2000-11-09 02:03:30 +00:00
javi%netscape.com db99c50dad Clean this project up and make it build with NSS on the tip for both optimized and debugged. No longer link in NSSCrupto libraries since the open NSS libraries now provide that functionality. Don't build mac_rand.c since it gets built as part of the NSS libraries we link in. 2000-11-09 01:08:06 +00:00
javi%netscape.com 063435601b Clean up the project some. Only build sysrand.c instead of sysrand.c and mac_rand.c which ultimately are the same thing. 2000-11-09 01:06:22 +00:00
mcgreer%netscape.com a52d9d99a7 initial mozilla checkin of the roots from the following companies: 
Verisign/Thawte
Valicert
BelSign/GlobalSign
TrustCenter
 2000-11-08 22:07:51 +00:00
nelsonb%netscape.com 45daa22eba Add new default public and private RSA keys. 2000-11-08 02:46:20 +00:00
nelsonb%netscape.com 7a6c3be3e4 Add values for test modulus and exponent for benchmarking purposes. 2000-11-08 02:44:17 +00:00
nelsonb%netscape.com c029359f7f Fix mpp_pprime (Miller-Rabin Pseudo Primality test) to report MP_NO, 
instead of MP_OKAY, for numbers == 3 mod 4 that are composite.
Also added two test cases to mpi-test.c.  Fixes bug 59438.
 2000-11-08 01:52:52 +00:00
javi%netscape.com e55b920ee5 Add the MP_API_COMPATIBLE for Mac builds so that MPI libraries build 
correctly.
 2000-11-08 01:16:04 +00:00
javi%netscape.com 8106534690 Modify the NSS project to use the new freebl code 2000-11-08 01:12:09 +00:00
javi%netscape.com ae93637c3d Make this file buildable on Mac 2000-11-08 01:11:23 +00:00
javi%netscape.com 9d91f9ba1b Make this file build on the Mac. 2000-11-08 01:06:47 +00:00
thayes%netscape.com ebb9375a31 Bug 59307: Provide a target value for the "new-email-default" result of PKCS12 
restore, and use it for building the certificate list refresh URL.
Fix the certificate list code to correctly check the type of object it
is given.
 2000-11-07 00:23:17 +00:00
mcgreer%netscape.com 93f388db16 set up RNG for self-test (DSA needs it), and set default RSA public exponent 
to 2**16 + 1
 2000-11-04 01:11:48 +00:00
mcgreer%netscape.com 47d9d1ddb3 option for printing content version 2000-11-03 22:28:26 +00:00
mcgreer%netscape.com 89ff5ab2e3 back out last change 2000-11-02 07:45:35 +00:00
mcgreer%netscape.com c574758854 option for dumping values in RSA key 2000-11-02 07:44:47 +00:00
mcgreer%netscape.com 0bc2e73f90 Changes to RSA keygen: 
* use mp_invmod instead of mp_xgcd.  nelsonb optimized mp_invmod for even moduli, and this will take advantage of it.
* Assure that p > q.
* Assure that n is actually keysizeInBits long by setting the two high-order bits of p and q during generation.  Previously, it was possible for n to be 1 bit short.
 2000-10-31 16:52:31 +00:00
nelsonb%netscape.com 575f23cc64 Performance benchmark for modular exponentiation. 
Test modulus and exponent to be added later.
 2000-10-26 23:30:50 +00:00
nelsonb%netscape.com d2df084113 Functions that provide default RSA public and private key for performance 
benchmarks.  Values for these keys to be supplied in next revision.
 2000-10-26 00:29:09 +00:00
nelsonb%netscape.com 2b82871510 RSA performance benchmark program, ported to blapi from NSS 2.8. 2000-10-25 23:17:54 +00:00
javi%netscape.com ba63941df9 Make boolean preferences work under Netscape6. It's the annoying JS bug 
where you can't call top.variable when in the top most frame.

So I moved the function that was doing this to the frame that wanted to
toggle the boolean value instead of calling the top most frame to do this.
 2000-10-25 18:57:06 +00:00
javi%netscape.com 7d0aaba8ae Check-in final reviewed version of sslconn.c 2000-10-25 17:23:46 +00:00
nelsonb%netscape.com 667d4a7e36 New implementation of mp_invmod for even moduli. 3x-500x faster than 
xgcd for even moduli.
 2000-10-24 21:32:53 +00:00
javi%netscape.com 149b331c1a Don't escape parameters until after we've broken down the parameters into 
arrays.  This makes it so that the character '&' is properly categorized
into the array if it's a member of the string for either parameter name
or value.
 2000-10-23 22:52:31 +00:00
javi%netscape.com ae8d89963d Don't assume a bitwise or will return the value 1. 2000-10-23 21:32:20 +00:00
javi%netscape.com 90171b9743 Check-in re-written SSL thread with fixes made so that the threads clean 
up after themselves properly.
 2000-10-23 18:34:48 +00:00
javi%netscape.com 65787215f6 Make this directory build in the new world. 
Add some debug output in regards as to which directory it's gonna use
for the cert db.
 2000-10-19 21:14:34 +00:00
javi%netscape.com ef7df11de3 Decompose the function for the SSL Service Thread to make it easier to read. 
When doing a poll, exit the service thread if there are no sockets waiting
for data to be processed.  Make the poll for data from the client and
server sockts time out after 10 minutes.  At that point there should be
nothing waiting or the connection has gone away without us knowing about it.
 2000-10-19 21:03:41 +00:00
ddrinan%netscape.com 7c936917e2 Build the component.reg file for Linux only 2000-10-18 19:02:22 +00:00
mcgreer%netscape.com e7bf810f5e fix for 64-bit platforms. 2000-10-18 15:41:23 +00:00
wtc%netscape.com 1998a4a631 Bugzilla bug #56442: checked in generated files as a result of a new 
ckapi.perl.
Modified files: nssck.api nssckepv.h nssckft.h nssckg.h
 2000-10-14 01:29:12 +00:00
wtc%netscape.com 54a25c375e Bugzilla bug #56442: the DLL name on Windows should be nssckbi.dll, not 
nssckbi32.dll.
 2000-10-13 22:42:53 +00:00
wtc%netscape.com cb99b22ff1 Bugzilla bug #56442: struct CK_FUNCTION_LIST must have the pack pragma 
on Windows.  C_GetFunctionList must be DLL exported on Windows.
 2000-10-13 22:41:36 +00:00
cotter%netscape.com 7bc8d15fe9 Corrected errors in release notes, added TLS info to help. 2000-10-13 20:49:56 +00:00
nelsonb%netscape.com 1b19b2d3b6 An enhancement to the new -N feature. When -N is selected, do NOT wait 
for the first https request to finish before launching all the others.
 2000-10-13 01:25:44 +00:00
cotter%netscape.com 10e45d8eac Updtaed for PSM 4.1. 2000-10-13 01:12:35 +00:00
nelsonb%netscape.com 78d958f2e2 Add -v option. v means "verbose progress messages". Formerly, this 
program was always very verbose.  Now, it only outputs progress messages
when -v is specified.  This is very useful for interactive use.
Cache statistics are written to stderr.
 2000-10-13 00:50:05 +00:00
nelsonb%netscape.com 1f1201dd3d Add new -N option. N means "No session reuse." -N disables the client 
session cache, forcing all SSL handshakes to be FULL RSA handshakes.
 2000-10-13 00:47:57 +00:00
nelsonb%netscape.com 6534f684da * The Original Code is SPARC hand-optimized Montgomery multiply functions. 
*
* The Initial Developer of the Original Code is Sun Microsystems Inc.
* Portions created by Sun Microsystems Inc. are
* Copyright (C) 1999-2000 Sun Microsystems Inc. All Rights Reserved.
 2000-10-13 00:30:36 +00:00
nelsonb%netscape.com 00b0412ddb * inline macros for SPARC Montgomery multiply functions. 
*
* The Initial Developer of the Original Code is Sun Microsystems Inc.
* Portions created by Sun Microsystems Inc. are
* Copyright (C) 1999-2000 Sun Microsystems Inc. All Rights Reserved.
 2000-10-13 00:28:48 +00:00
nelsonb%netscape.com 67dc4d8c49 * interface file for SPARC Montgomery multiply functions. 
*
* The Initial Developer of the Original Code is Sun Microsystems Inc.
* Portions created by Sun Microsystems Inc. are
* Copyright (C) 1999-2000 Sun Microsystems Inc. All Rights Reserved.
 2000-10-13 00:28:08 +00:00
nelsonb%netscape.com 5e81658537 * The Original Code is SPARC optimized Montgomery multiply functions. 
*
* The Initial Developer of the Original Code is Sun Microsystems Inc.
* Portions created by Sun Microsystems Inc. are
* Copyright (C) 1999-2000 Sun Microsystems Inc. All Rights Reserved.
 2000-10-13 00:27:04 +00:00
ddrinan%netscape.com c2a47d6ac5 Setting version to 1.4 2000-10-12 22:53:07 +00:00
ddrinan%netscape.com c49f11ceb6 Fix for bug 53198 2000-10-12 22:41:47 +00:00
wtc%netscape.com 277f8ea47d Fixed the comment. 2000-10-11 07:21:38 +00:00
mcgreer%netscape.com afd1c689cf also do binary on stdout DER 2000-10-11 07:12:45 +00:00
mcgreer%netscape.com 2d404f1980 binary output always, for now 2000-10-11 07:04:30 +00:00
mcgreer%netscape.com abf11ef663 fix output of DER's on windows 2000-10-11 06:52:06 +00:00
wtc%netscape.com 4ec77975fc Commented out 'rm -rf ${TEMPFILES}' because TEMPFILES is not defined. 2000-10-11 06:47:36 +00:00
wtc%netscape.com 4b2e654d35 Fixed the echo output to match the command. 2000-10-11 06:46:05 +00:00
mcgreer%netscape.com bf75619d8f add a new function, SECU_TextFileToItem, for reading text files. 2000-10-11 00:56:32 +00:00
mcgreer%netscape.com c66491f1f7 seperate text file reads from binary reads. Change all base64 encoded ciphertexts to end in LF instead of CRLF. This caused a bug on windows when checking out from CVS. 2000-10-11 00:55:45 +00:00
nelsonb%netscape.com c0cf47974f Change the working directory to the test directory before running 
certutil -S, which creates files in the current working directory.
 2000-10-10 03:12:31 +00:00
wtc%netscape.com f7cb9d9b93 Print NSPR and OS error codes if PR_Open fails. 2000-10-10 02:38:08 +00:00
nelsonb%netscape.com 34c1f51a9d All output messages from strsclnt now begin with the string "strsclnt: ". 
This makes it easier to separate mixed client and server output.
 2000-10-10 02:10:25 +00:00
nelsonb%netscape.com 05b9dba846 When an invalid option is encountered, print the usage message and exit. 
Previously, it would simply silently stop parsing options and the program
would continue to run, leading to false successes in coverage tests.
 2000-10-09 23:39:46 +00:00
nelsonb%netscape.com fdd0021538 With this change, SSL will not crash if the next lower layer's Recv 
function returns more data than we asked for.  SSL will turn that event
into a PR_BUFFER_OVERFLOW_ERROR error.  iWS team asked for this.
 2000-10-07 02:22:22 +00:00
nelsonb%netscape.com 96a4822448 Fix a crash caused by using a null PRFileDesc * after PR_Open fails. 2000-10-07 02:16:03 +00:00
wtc%netscape.com 8568a8e9d2 Changed //helium/dist to //iridium/components (another way to get 
access to /share/builds/components from NT at Netscape/iPlanet).
 2000-10-07 00:56:20 +00:00
nelsonb%netscape.com 5d154d8d5f In lib/smime, detect null pointers returned by various functions. 
Christian Kaiser fixed the test script to pass the right directory name
to the test program.  The test script echoes all the cmsutil test
commands so that the error messages are associated with the proper one.
And cmsutil now puts its name on the front of its error messages.
 2000-10-06 23:26:12 +00:00
nelsonb%netscape.com 90e2a74ac6 Call NSS_InitReadWrite instead of SECU_PKCS11Init, and check the result 
for success.  Fixes a crash.  If it turns out that cmsutil doesn't need
to modifiy the cert and/or key DBs, then it should call NSS_Init, instead.
 2000-10-06 21:45:01 +00:00
nelsonb%netscape.com 5afb009e51 Call NSS_NoDB_Init instead of that broken old SECU_PKCS11Init. 
Also, test to see that the init succeeded.
 2000-10-06 21:40:52 +00:00
nelsonb%netscape.com c813d8dd66 Fix a crash that occurs when NSS is initialized with NSS_NoDB_Init. 2000-10-06 21:38:57 +00:00
nelsonb%netscape.com 5042645350 Implement new function NSS_InitReadWrite, which is just like NSS_Init 
except that it opens the files read/write.  This is to replace the
broken SECU_ routines in nss/cmd/lib.
 2000-10-06 21:37:25 +00:00
nelsonb%netscape.com c37f533589 The SSL client cache timeout values for SSL2 and SSL3 were reversed. 
This caused all SSL3 sessions to timeout after 100 seconds. Bug 55231.
 2000-10-05 23:10:14 +00:00
wtc%netscape.com 8627427998 Bugzilla bug #55267: checked in a workaround for a tight spin in 
PK11_GetSlotList on 64-bit HP-UX.
 2000-10-05 04:24:04 +00:00
nelsonb%netscape.com 2dd71c3c55 Prefix all selfserv's output messages with "selfserv: " so we can tell 
client messages apart from server messages when the two are mixed.
When the verbose option is enabled, print out the session reuse stats
right after the first PR_Read completes, so we don't miss any.
 2000-10-05 04:14:44 +00:00
wtc%netscape.com 27506fb1b6 Bugzilla bug #54711: implemented the moz_import rule for OS/2. 2000-10-05 04:12:30 +00:00
nelsonb%netscape.com c916074eb3 3 Changes: 
- Test SSL2 (not SSL3) when only SSL2 ciphers have been chosen.
- Use a different metric for determining when multiple full handshakes
have been done with SSL2.  (Can't use SSL3's counters for that purpose.)
- When PR_Connect returns a "connection reset by peer" error, silently
retry the operation with a new socket.
 2000-10-05 04:11:31 +00:00
nelsonb%netscape.com a8bb31e2ef Change the client options so that we actually test SSL2 when we say 
we're testing SSL2, and test SSL3 when we say we're testing SSL3.
 2000-10-05 04:05:32 +00:00
nelsonb%netscape.com 9e5ed29057 Make the "nocerts" option for this script work properly. 
Also, add a new "verbose" option to this script.
 2000-10-05 04:04:37 +00:00
nelsonb%netscape.com 70da3de4e7 If $HOME or $DOMSUF is undefined, put out an error message and stop, 
instead of going on and producing complicated and meaningless results.
 2000-10-05 04:03:53 +00:00
mcgreer%netscape.com 8882eb9358 HPUX 64-bit also failed. 2000-10-05 02:47:43 +00:00
mcgreer%netscape.com c65d5e509e checked in wrong fix. 2000-10-05 02:41:09 +00:00
mcgreer%netscape.com 286b860d4f fix for bug #55190. Some 64-bit platforms will not return an alloc'ed pointer from an undeclared function. 2000-10-05 01:39:35 +00:00
mcgreer%netscape.com 4979496e5a workaround for bug #55234. optimized arcfour is not working on solaris 64-bit. 2000-10-05 01:33:54 +00:00
wtc%netscape.com dbc734c29c Backed out the previous checkin (which was not necessary). 2000-10-03 06:19:42 +00:00
wtc%netscape.com 8b7a47a6ec On Windows use cp -r to implement the moz_import rule. 2000-10-03 04:58:30 +00:00
wtc%netscape.com e4efb1f7c1 Added bltest. 2000-10-03 02:45:59 +00:00
ddrinan%netscape.com f9530e656a Allocate the padded result arena with the correct length 2000-10-03 00:58:39 +00:00
wtc%netscape.com c03119002d Bugzilla bug #54711: removed unused variables MOZ_DIST and MOZ_LIB 
from OS2.mk.  Handle the different names of plc4 and plds4 libraries
on OS/2.  Thanks to Huynh Trinh <hctrinh@us.ibm.com> for the patch.
Modified Files:
    coreconf/OS2.mk nss/lib/ckfw/builtins/Makefile
    nss/lib/fortcrypt/swfort/pkcs11/Makefile
 2000-10-03 00:58:18 +00:00
nelsonb%netscape.com 37f88721c8 Fix bug 54956, and cleanup some other things. Warning reduction. 2000-10-03 00:36:53 +00:00
wtc%netscape.com 6f3f7bb91a Bugzilla bug #49477: fixed memory leak in CERT_OpenCertDB. Have 
certDBFilenameCallback duplicate the filename string so that its
return value can be freed.
 2000-10-02 23:23:50 +00:00
wtc%netscape.com 1f2ad178df Bugzilla bug #54869: support gcc for 32-bit Solaris/SPARC build. 2000-10-02 22:52:43 +00:00
mcgreer%netscape.com 55b0cfddec fix problems encountered in shell script. it appears that "echo nss > passfile" creates a file with 6 bytes on NT using the dos shell. the added bytes were causing problems with password files, which this while loop attempted to fix. however, it broke DER-encoded input that has added whitespace at the end. this checkin returns SECU_FileToItem to it's original state, which blindly accepts whitespace characters at the end of the file. 
the second change is forced because SECITEM_AllocItem asserts dst->data == NULL, and many NSS utilities pass uninitialized SECItem's around.  In the future, those should be fixed, but for now zero the output buffer.
 2000-10-02 22:30:27 +00:00
mcgreer%netscape.com 544ec0f11a fix 3.1 bugs: change && to || for arg check, two new functions are static 2000-10-02 17:39:37 +00:00
wtc%netscape.com e295a48393 Added SunOS5.7_i86pc.mk. 2000-10-02 06:08:58 +00:00
wtc%netscape.com dcc518443a Bugzilla bug #39476: free the dbname in the success case. 2000-10-01 17:13:34 +00:00
wtc%netscape.com 8f9818ec7d Restored the printing of the runtime library search path. 2000-10-01 06:14:57 +00:00
wtc%netscape.com d73aad26aa Deleted an extra echo command. 2000-10-01 06:01:32 +00:00
wtc%netscape.com bc7b66ba1f Deleted an extra cp. 2000-10-01 05:09:17 +00:00
wtc%netscape.com 94c1f559e1 Bugzilla bug #54711: use full maci on OS/2. Thanks to hctrinh@us.ibm.com 
(Huynh Trinh) for the patch.
 2000-10-01 03:29:42 +00:00
wtc%netscape.com 906deebf85 Bugzilla bug #54711: fixed a typo. Thanks to hctrinh@us.ibm.com 
(Huynh Trinh) for the patch.
 2000-10-01 03:17:56 +00:00
wtc%netscape.com 2444aa8c5e Added missing closing comment delimiter "*/". 2000-09-30 04:30:08 +00:00
nelsonb%netscape.com e118ef4f63 Incorporate multiplication performance enhancements for UltraSparc CPUs 
with the VIS instructions.
 2000-09-30 01:46:30 +00:00
nelsonb%netscape.com c206d3e3c8 The Initial Developer of the Original Code is Netscape Communications 
Corporation.  Portions created by Netscape are
Copyright (C) 2000 Netscape Communications Corporation.
All Rights Reserved.
 2000-09-30 01:43:27 +00:00
wtc%netscape.com efcc4dca6c Bugzilla bug #52904: deleted all the PKLITE and COMPRESS_TARGET stuff, 
which is no longer needed.  This removes the requirement of 'which' on
Windows.
Modified files: ruleset.mk, rules.mk
 2000-09-30 00:56:57 +00:00
nelsonb%netscape.com 191a128491 The Initial Developer of the Original Code is Sun Microsystems Inc. 
Portions created by Sun Microsystems Inc. are
Copyright (C) 1999-2000 Sun Microsystems Inc.  All Rights Reserved.
 2000-09-29 23:39:30 +00:00
nelsonb%netscape.com 431bb85395 The Initial Developer of the Original Code is Sun Microsystems Inc. 
Portions created by Sun Microsystems Inc. are
Copyright (C) 1995-2000 Sun Microsystems Inc.  All Rights Reserved.
 2000-09-29 23:38:05 +00:00
mcgreer%netscape.com 84207edf1c add cipher and smime to the pantheon of nss tests. 2000-09-29 22:31:11 +00:00
mcgreer%netscape.com 81cb1fd3ce change for BSAFE. on windows, nsinstall will do copy instead of link. 
need to forcibly remove library before attempting to reinstall.
 2000-09-29 22:30:09 +00:00
mcgreer%netscape.com ccd7cc788f changes to use blapitest on NT. 2000-09-29 22:27:14 +00:00
nelsonb%netscape.com 9b1d01f3fd Don't use type "ulong". Use "unsigned long" instead. 2000-09-29 19:51:32 +00:00
wtc%netscape.com af0f02a163 Initial NetBSD port contributed by Shin'ichiro TAYA <taya@sm.sony.co.jp>. 
Modified Files:
    coreconf/config.mk nss/lib/util/unix_rand.c
Added Files:
    coreconf/NetBSD.mk
 2000-09-29 17:42:39 +00:00
mcgreer%netscape.com 3ac9e05c1a initial checkin of smime test script. does signed-data, enveloped-data, encrypted-data, and certs-only (basic cases). 2000-09-29 16:39:13 +00:00
mcgreer%netscape.com 25b1ead59c add a shortcut encoder routine. 2000-09-29 16:38:11 +00:00
mcgreer%netscape.com 6d3b3ca957 brutish changes to get encrypted data working, will clean up later. allows test script for 3.1 to work. 2000-09-29 16:37:29 +00:00
mcgreer%netscape.com 255eadd741 add seeding call (for 3.1, for 3.2 I think this function needs to go away). 2000-09-29 15:27:00 +00:00
mcgreer%netscape.com f912a0ccf0 add seeding call (req by RNG) 2000-09-29 15:25:42 +00:00
nelsonb%netscape.com 50098f2c22 Fix some bugs from the last checkin. 2000-09-29 04:03:34 +00:00
mcgreer%netscape.com 5a93a08faa changes to allow build with RSA BSAFE Crypto-C library 2000-09-29 02:15:42 +00:00
mcgreer%netscape.com 05a6d4f086 change to allow builds with RSA BSAFE Crypto-C library 2000-09-29 02:14:03 +00:00
mcgreer%netscape.com 181442bd0a fixes based on review by nelsonb: 
use mp_sub instead of mp_mod when possible.
increment generator candidate for DH instead of creating a new random one each time.
fix potential bugs when DH_Derive and KEA_Derive, where the secret is longer than the buffer the user requests.
check input key size to RSA_NewKey.
implement private key op with no CRT for PKCS12.
reduce base mod p and q before using mp_exptmod.
use mpl_lsh in pqg code (in place of exponent and multiply).
change PQG_Verify to return SECSuccess unless there is a library failure (not if verification fails).
 2000-09-29 02:10:24 +00:00
nelsonb%netscape.com 58b6dcc398 Add mp_set_long and mp_set_ulong to the public API. 2000-09-28 22:53:45 +00:00
thayes%netscape.com ef6267b6b6 Bugzilla 39476: Copy the argument string in the OpenDBFilename callback function. 2000-09-28 21:36:11 +00:00
thayes%netscape.com 17d0f302c9 Use T61 String for any ASCII characters that don't meet the PrintableString 
requirements in name attribute values.
 2000-09-28 21:29:14 +00:00
nelsonb%netscape.com a0326ec6ba Fix numerous bugs in CERT_GetNickName. Fix bug 45247. 2000-09-28 21:13:29 +00:00
nelsonb%netscape.com 3c037afd66 Fix bug 39482. Don't use varargs when first argument is null. 2000-09-28 19:01:14 +00:00
relyea%netscape.com 448fea8c67 Add function for determining if we have root cert modules. 
fix bug in internal root cert modules.
 2000-09-28 17:40:48 +00:00
wtc%netscape.com dd38a1aa02 Added config file for OSF1 V5.0. 2000-09-28 07:45:11 +00:00
nelsonb%netscape.com 0bd851314f Fix crash when PR_Connect times out. 2000-09-28 01:50:15 +00:00
mcgreer%netscape.com e7f1eaafcb shell script to run self-tests on ciphers supported by NSS. 2000-09-27 23:04:01 +00:00
mcgreer%netscape.com 7f7a3f4d0d changes for nss script. passed tests produce no output. fix dsa test case. 2000-09-27 23:03:21 +00:00
wtc%netscape.com 4ad20ee457 Use '$(INSTALL) -m 444' to install files in nss/lib/crypto. By default 
INSTALL is $(NSINSTALL) -R on Unix, which creates relative-path symlinks.
 2000-09-27 05:49:43 +00:00
sonmi%netscape.com 8e28c8d938 added SHLIB_PATH and LIBPATH for HPUX and AIX 2000-09-26 18:47:15 +00:00
wtc%netscape.com 44a8e76e16 Bugzilla bug #54131: link executable programs with the -z and +s linker 
options.
 2000-09-26 04:49:09 +00:00
thayes%netscape.com 09d2e90f77 Add UTF8String handling to Name attributes. 2000-09-25 21:13:24 +00:00
relyea%netscape.com 873b6962ae Fix problem where RSA op failures cause multiple retries of the RSA algorithm. 2000-09-23 00:05:27 +00:00
relyea%netscape.com 0923b0a330 Move the header files. 2000-09-23 00:04:34 +00:00
relyea%netscape.com d630dde968 Use the new NSS_NoDB_init. 2000-09-23 00:00:05 +00:00
wtc%netscape.com b44ba3bf53 Added perl-generated files nssckpev.h nssckft.h nssckg.h nssck.api. 2000-09-22 22:52:20 +00:00
ddrinan%netscape.com 290a07f768 Copy over ALL of the components directory 2000-09-22 22:32:35 +00:00
relyea%netscape.com 181cc5dcfe Add NSS_NoDB_Init() 2000-09-22 17:34:29 +00:00
relyea%netscape.com 57a810095c Check in changes to add NSS_NoDB_Init(). 2000-09-22 17:33:46 +00:00
ddrinan%netscape.com 8723940b88 Make the component directory writeable 2000-09-22 17:06:59 +00:00
mcgreer%netscape.com 96a66d4965 revert changes to DH param gen. MPI does compute q=2p+1 for strong primes, but returns q not p. #ifdef in rsa for testing mp_exptmod_d vs. mp_exptmod, mp_exptmod is considerably faster. 2000-09-22 16:24:16 +00:00
wtc%netscape.com 5e0b669489 Bugzilla bug #53114: fixed license. 2000-09-22 14:55:03 +00:00
wtc%netscape.com 41adcd9362 Added a white space. 2000-09-22 14:52:32 +00:00
wtc%netscape.com 1bd68f8f77 Bugzilla bug #53114: fixed license in nss/cmd/zlib/Makefile and 
manifest.mn.  Thanks to Brian Ryner <bryner@netscape.com> for the bug
report.
 2000-09-22 05:35:35 +00:00
bryner%uiuc.edu 43b47e9463 Moving files out of security/base at request of security team. The new home for these files is in netwerk. Bug 53648. r=scc. a=gagan,brendan. 2000-09-22 04:42:20 +00:00
ddrinan%netscape.com fc64668506 Copy ALL the contents of the components directory during build_xpi 2000-09-22 00:02:19 +00:00
mcgreer%netscape.com 2195f46fe1 Fix DH param gen, MPI returns Sophie-Germain prime q, then compute 2q + 1. Initial checkin of two KEA functions. 2000-09-21 23:45:24 +00:00
ddrinan%netscape.com 7db03911de This script will run regxpcom 2000-09-21 21:51:57 +00:00
ddrinan%netscape.com 833d5f4a9f More bug fixes for regxpcom 2000-09-21 21:50:23 +00:00
ddrinan%netscape.com fa733fa7b7 Fix the directory location of regxpcom 2000-09-21 20:09:13 +00:00
ddrinan%netscape.com 7e8a113cb9 Fixed a problem with generating the component.reg file 2000-09-21 18:08:25 +00:00
wtc%netscape.com c42dded4ee One only needs to link with either libcrypto or freebl. We need to copy 
freebl/sha_fast.{c,h} to libcrypto to make libcrypto complete.
Modified files: nss/cmd/platlibs.mk, nss/lib/Makefile,
nss/lib/fortcrypt/swfort/pkcs11/Makefile.
 2000-09-21 06:20:44 +00:00
ddrinan%netscape.com 294a7565aa Fixed typo 2000-09-21 01:13:38 +00:00
ddrinan%netscape.com eadf160bc3 Generate a component.reg as part of the xpi build for Unix. Bug# 49507 2000-09-20 23:15:23 +00:00
relyea%netscape.com 8daaa48e76 Changes to build OS/2 NSS. 2000-09-20 17:20:23 +00:00
relyea%netscape.com 9bd5c43fa0 OS/2 build changes. 2000-09-20 17:07:22 +00:00
mcgreer%netscape.com 30387a4f67 Check in self-test based on FIPS 186-1 appendix 5 2000-09-19 21:14:22 +00:00
chrisk%netscape.com f86691004e Fix bug # 53221: Call RNG_SystemInfoForRNG to provide RNG with enough 
entropy for proper operation.
 2000-09-19 19:34:46 +00:00
wtc%netscape.com facdc275d3 Bugzilla bug #53204: import NSPR 4.0.1 on Windows NT and 4.0 on all other 
platforms.
Modified files: manifest.mn, Makefile
 2000-09-19 17:49:54 +00:00
mcgreer%netscape.com 4cb280cca7 include support for adding S/MIME certs to the database. this will be needed for S/MIME test code. 2000-09-19 16:22:17 +00:00
mcgreer%netscape.com 7d42df7e4b don't set modulus octets until good primes are generated. 2000-09-19 06:18:04 +00:00
wtc%netscape.com 0ccd4053f0 Bugzilla bug #52404: FreeBSD doesn't have cuserid() either. Thanks to 
Thomas Stromberg <tstromberg@rtci.com> for the bug report.
 2000-09-19 06:05:28 +00:00
mcgreer%netscape.com d5a2efabb1 don't set prime data until good primes are generated. 2000-09-19 06:03:52 +00:00
wtc%netscape.com 38d9732ab3 Bugzilla bug #52399: handle FreeBSD. Thanks to Thomas Stromberg 
<tstromberg@rtci.com> for the bug report.
 2000-09-19 04:11:53 +00:00
wtc%netscape.com 99cf222eb8 Bugzilla bug #52398: define USE_PTHREADS=1 by default. Do not link with 
-lc or -lc_r.  Also merged other changes from NSPR's FreeBSD.mk.
Thanks to Thomas Stromberg <tstromberg@rtci.com> for the bug report.
 2000-09-19 03:53:08 +00:00
wtc%netscape.com 82b40af680 Bugzilla bug #53143: removed the definition of NSPR internal macros. 
Modified files: FreeBSD.mk, HP-UXB.10.10.mk, HP-UXB.10.20.mk, Linux.mk,
OSF1.mk, SunOS5.mk, cmd/SSLsample/Makefile.NSS, lib/freebl/Makefile.
 2000-09-19 02:24:31 +00:00
wtc%netscape.com ce6057a7fb Added FreeBSD.mk, which contains the common config stuff for all versions 
of FreeBSD.mk.  FreeBSD2.mk now merely includes FreeBSD.mk.
Modified file: FreeBSD2.mk
Added file: FreeBSD.mk
 2000-09-19 01:48:42 +00:00
cotter%netscape.com a001508e2a Updated info re installation directories, running Communicator 4.x. Moved sentence re problems running PSM on Unix if you havelogged in as a different user since installation to Known Bugs/Issues. 2000-09-19 00:23:38 +00:00
nelsonb%netscape.com 3255d3af0e Fix a UMR, one of many where the SECItem type field was uninitialized. 
bug 39483.  Also, eliminate a warning about calling an undeclared function
by including the header file.
 2000-09-18 23:53:18 +00:00
nelsonb%netscape.com 574fcbedd2 Fix bug 52396. Don't compile case ENOSR on platforms that don't have it. 2000-09-18 19:53:59 +00:00
mcgreer%netscape.com c620564ee8 just some general cleanup 2000-09-16 15:56:06 +00:00
wtc%netscape.com 3f3393bb01 Bugzilla bug #52900: added Linux2.4.mk to allow us to build NSS on Linux 
2.4.x kernels.  This bug was reported by Michael H. Warfield
<mhw@wittsend.com>.
 2000-09-16 06:11:32 +00:00
thayes%netscape.com b52822dfb4 Initialize random number generator from system information. The new 
RNG implementation fails if insufficient seed is not provided, which
would cause SDR key generation to fail.
 2000-09-16 00:53:08 +00:00
relyea%netscape.com ecca081d39 Fix stupid shell typo so that *ALL* the testcases will pass. 
bob
 2000-09-15 22:08:57 +00:00
relyea%netscape.com 800af76224 Fix merge problems from CVS. This version should now compile and work. 2000-09-15 21:01:53 +00:00
mcgreer%netscape.com eb48ab5115 signed data certs may not be set when this is called, so get certs from db. 2000-09-15 20:23:26 +00:00
mcgreer%netscape.com 38ba5d81e9 NT still buggy with password files, this seems to fix it 2000-09-15 18:45:20 +00:00
mcgreer%netscape.com 2fbeac9dd1 extra #endif broke build 2000-09-15 15:58:42 +00:00
relyea%netscape.com 902093ca00 Propogate the password arg to the sign function. 2000-09-15 15:37:37 +00:00
relyea%netscape.com b2e3a4121c Fix NT so it can read from a password file. (do the correct EOL conversions). 
Fix trust display for certs not in the database.
 2000-09-15 15:35:03 +00:00
mcgreer%netscape.com 8c240e3bc8 Added function NSS_CMSSignedData_VerifyCertsOnly to API 2000-09-15 06:38:33 +00:00
ddrinan%netscape.com 36e61368f9 Add XPCOM, NSPR and i18n back into xpi files 2000-09-15 01:28:23 +00:00
javi%netscape.com a87c85612d When doing forced backup, create a single p12 file which has all of 
the certs instead of a single p12 file for each cert.
 2000-09-15 01:27:06 +00:00
ddrinan%netscape.com 977f283741 Install PSM in its own directory 2000-09-15 01:26:52 +00:00
wtc%netscape.com 53ade5cc44 Increase the sleep interval from 10 to 20. 2000-09-15 00:43:36 +00:00
cotter%netscape.com 35e8f05bc7 Updated release notes re TLS; minor formatting changes to api doc. 2000-09-15 00:17:45 +00:00
ddrinan%netscape.com e4588d2f08 Enable TLS by default 2000-09-15 00:03:12 +00:00
relyea%netscape.com f0e4984d36 Fix authentication tests so they work for both unix and NT. 2000-09-14 21:59:04 +00:00
relyea%netscape.com d8d0892b85 Fix certutil to read Certs from PKCS #11 modules. Make the 'all' option for 
modules work for ListCerts and ListKeys. Allow password from file for these
options as well.
 2000-09-14 21:12:13 +00:00
nelsonb%netscape.com 4df4541965 Remove duplicate PORT_Free call. Fix bug 52633. 2000-09-14 20:25:26 +00:00
mcgreer%netscape.com 39a4425f6e fix bug where certlist was being freed after being set. 2000-09-14 17:14:44 +00:00