Граф коммитов

633 Коммитов

Автор SHA1 Сообщение Дата
nelsonb%netscape.com 3255d3af0e Fix a UMR, one of many where the SECItem type field was uninitialized.
bug 39483.  Also, eliminate a warning about calling an undeclared function
by including the header file.
2000-09-18 23:53:18 +00:00
nelsonb%netscape.com 574fcbedd2 Fix bug 52396. Don't compile case ENOSR on platforms that don't have it. 2000-09-18 19:53:59 +00:00
mcgreer%netscape.com c620564ee8 just some general cleanup 2000-09-16 15:56:06 +00:00
wtc%netscape.com 3f3393bb01 Bugzilla bug #52900: added Linux2.4.mk to allow us to build NSS on Linux
2.4.x kernels.  This bug was reported by Michael H. Warfield
<mhw@wittsend.com>.
2000-09-16 06:11:32 +00:00
thayes%netscape.com b52822dfb4 Initialize random number generator from system information. The new
RNG implementation fails if insufficient seed is not provided, which
would cause SDR key generation to fail.
2000-09-16 00:53:08 +00:00
relyea%netscape.com ecca081d39 Fix stupid shell typo so that *ALL* the testcases will pass.
bob
2000-09-15 22:08:57 +00:00
relyea%netscape.com 800af76224 Fix merge problems from CVS. This version should now compile and work. 2000-09-15 21:01:53 +00:00
mcgreer%netscape.com eb48ab5115 signed data certs may not be set when this is called, so get certs from db. 2000-09-15 20:23:26 +00:00
mcgreer%netscape.com 38ba5d81e9 NT still buggy with password files, this seems to fix it 2000-09-15 18:45:20 +00:00
mcgreer%netscape.com 2fbeac9dd1 extra #endif broke build 2000-09-15 15:58:42 +00:00
relyea%netscape.com 902093ca00 Propogate the password arg to the sign function. 2000-09-15 15:37:37 +00:00
relyea%netscape.com b2e3a4121c Fix NT so it can read from a password file. (do the correct EOL conversions).
Fix trust display for certs not in the database.
2000-09-15 15:35:03 +00:00
mcgreer%netscape.com 8c240e3bc8 Added function NSS_CMSSignedData_VerifyCertsOnly to API 2000-09-15 06:38:33 +00:00
ddrinan%netscape.com 36e61368f9 Add XPCOM, NSPR and i18n back into xpi files 2000-09-15 01:28:23 +00:00
javi%netscape.com a87c85612d When doing forced backup, create a single p12 file which has all of
the certs instead of a single p12 file for each cert.
2000-09-15 01:27:06 +00:00
ddrinan%netscape.com 977f283741 Install PSM in its own directory 2000-09-15 01:26:52 +00:00
wtc%netscape.com 53ade5cc44 Increase the sleep interval from 10 to 20. 2000-09-15 00:43:36 +00:00
cotter%netscape.com 35e8f05bc7 Updated release notes re TLS; minor formatting changes to api doc. 2000-09-15 00:17:45 +00:00
ddrinan%netscape.com e4588d2f08 Enable TLS by default 2000-09-15 00:03:12 +00:00
relyea%netscape.com f0e4984d36 Fix authentication tests so they work for both unix and NT. 2000-09-14 21:59:04 +00:00
relyea%netscape.com d8d0892b85 Fix certutil to read Certs from PKCS #11 modules. Make the 'all' option for
modules work for ListCerts and ListKeys. Allow password from file for these
options as well.
2000-09-14 21:12:13 +00:00
nelsonb%netscape.com 4df4541965 Remove duplicate PORT_Free call. Fix bug 52633. 2000-09-14 20:25:26 +00:00
mcgreer%netscape.com 39a4425f6e fix bug where certlist was being freed after being set. 2000-09-14 17:14:44 +00:00
mcgreer%netscape.com 5aae82f29f even better fix to zero signer info issue 2000-09-14 00:33:28 +00:00
nelsonb%netscape.com 082f53f177 Eliminate extraneous "oop!" output at end of script on some platforms. 2000-09-14 00:32:24 +00:00
nelsonb%netscape.com c4fe227bb9 Changes to make mpi use 64-bit digits on machines where unsigned longs
are 64-bits.  Renamed s_mp_invmod_32b to s_mp_invmod_radix since radix
can now exceed 32 bits.  Improved performance on all platforms except
MIPS and X86.
2000-09-14 00:31:01 +00:00
mcgreer%netscape.com 2364429bbd another instance of potentially null signerInfos being referenced 2000-09-13 22:44:28 +00:00
relyea%netscape.com 832fb5cd65 Get the pid from Selfserv itself rather than from the Shell. works around a nasty mks bug in NT. 2000-09-13 21:59:26 +00:00
relyea%netscape.com 2af7e43e7e Add option to get the server pid so we can kill the server later. 2000-09-13 21:25:13 +00:00
relyea%netscape.com ebe4aefce6 Fix IDG build breakage on AIX (remove cast). 2000-09-13 21:15:07 +00:00
wtc%netscape.com 59aeefaf0d Get OBJDIR_NAME and OS_ARCH from the makefile as opposed to the arch.sh
script.  arch.sh should be cvs removed when we are sure about this change.
Checkin on behalf of Sonja Mirtitsch <sonmi@netscape.com>.
Modified file: init.sh
Added file: Makefile
2000-09-13 19:19:05 +00:00
mcgreer%netscape.com bdcc2c1a39 fix incorrect buffer zero 2000-09-13 18:44:11 +00:00
mcgreer%netscape.com 4299bcbb86 fix change I made last night 2000-09-13 18:13:17 +00:00
mcgreer%netscape.com e130c0a252 fixes RFE from bug 49316 (will test on NT before verifying) 2000-09-13 06:43:52 +00:00
mcgreer%netscape.com 3e3eee6676 attempt to fix bug 51882 (sig data w/ no signer infos) 2000-09-13 06:15:13 +00:00
relyea%netscape.com 610034d01d Fix double equal error in if statement 2000-09-13 00:21:17 +00:00
jgmyers%netscape.com 3d68e7a779 failure to save cx->i and cx->j caused second arcfour encrypt/decrypt to return garbage: bug 52192 r=mcgreer 2000-09-12 23:02:24 +00:00
mcgreer%netscape.com 4d941adcb4 leading zero problems fixed; thanks to nelsonb for pointing out that I needed mp_to_fixlen_octets 2000-09-12 20:32:43 +00:00
relyea%netscape.com c48b4d878a pick up changes from NSS 2.8.3. Most of these changes include the changes
Nelson made in rev 1.9 and 1.10. It also include some changes that remove
inappropriate templace valuse (CKA_VALUE_LEN) in some cases. Our internal
token tolerates these values, but most tokens rightly reject requests with
these.
2000-09-12 20:29:23 +00:00
jgmyers%netscape.com 51e59fccb4 support IPv6 in ssl: bug 48657 r=nelsonb 2000-09-12 20:15:44 +00:00
nelsonb%netscape.com 71f913281c Set the CKA_VALUE attribute in pk11_ImportSymKeyWithTempl().
This is a better solution to bug 52306, because it fixes the behavior of
all the functions that unwrap and/or import sym keys.
2000-09-12 19:44:56 +00:00
wtc%netscape.com e9a23de302 Bugzilla bug #52232: remove the yacc rule and also cancel the implicit
yacc and lex rules in the primary Makefile.  Added comments to rules.mk
explaining that Berkeley yacc should be used.
Modified files: Makefile, rules.mk
2000-09-12 18:52:57 +00:00
wtc%netscape.com f7f49cb31e Bugzilla bug #52232: reverted to revision 1.1, which was generated
by Berkeley yacc 1.4 and hence was portable.  Revision 1.2 was
generated by the yacc in Solaris 2.6 and contained
#include <values.h>, which does not exist on NT.  Always use Berkeley
yacc (latest version is 1.9) to generate installparse.{c,h}.
Modified files: installparse.c, installparse.h
2000-09-12 14:51:06 +00:00
nelsonb%netscape.com cac7876f1e Fix two bugs in mp_invmod: a) returned wrong result if output var is also
one of the input vars, b) sometimes returned negative answer. Added a test
case to mpi-test.c with a value that previously produced a negative answer.
2000-09-12 00:41:09 +00:00
wtc%netscape.com d6335b8f1d Checked in Perl-generated file certdata.c. 2000-09-11 23:34:42 +00:00
relyea%netscape.com a4e1bb6ae3 nssTracker functions should only be defined in debug builds 2000-09-11 23:27:56 +00:00
nelsonb%netscape.com ed8cacc2c9 Stop using "reserved" fields of PRIOMethods by name. Fixes bug 52092. 2000-09-11 22:37:12 +00:00
wtc%netscape.com 7774189fb3 Bugzilla bug #52187: modified ckapi.perl to read its input from the
first command-line argument as opposed to stdin.  Checkin on behalf
of sonmi@netscape.com.
Modified files: Makefile, ckapi.perl
2000-09-11 22:37:01 +00:00
wtc%netscape.com f4eec2de72 Bugzilla bug #52173: restored the FORCE target for NT. 2000-09-11 21:54:10 +00:00
wtc%netscape.com 43ae02ba26 Bugzilla bug #52173: accept both ytab.{c,h} and y.tab.{c,h} as the output
files of yacc.
2000-09-11 21:40:42 +00:00
mcgreer%netscape.com fb864bbd31 fix building of ssl sample code 2000-09-11 19:06:50 +00:00
mcgreer%netscape.com 527ef9f038 initial checkin of Diffie-Hellman implementation 2000-09-11 17:11:50 +00:00
wtc%netscape.com b018953204 Backed out the previous checkin. I found another solution. 2000-09-11 15:01:04 +00:00
wtc%netscape.com 224864f47f Added the moz_import rule for the Windows build. 2000-09-11 15:00:22 +00:00
wtc%netscape.com 9b74802076 Added makefile.win as the interface to Mozilla Client's Win32 build
system.
2000-09-11 04:38:09 +00:00
cotter%netscape.com 0627738a7e Fixed two typos, deleted obsolete link. 2000-09-11 04:35:03 +00:00
wtc%netscape.com 9aeb25aa0d Changed the PR_GetError() call to PORT_GetError() because we use
PORT_SetError() to set error codes.
Modified files: dsa.c, rsa.c
2000-09-11 04:17:02 +00:00
wtc%netscape.com a7a367d907 Added mozilla/dist/include to INCLUDES because Mozilla's WIN32 build
has changed to export headers to that directory, so nss needs to get
the dbm headers (e.g., mcom_db.h) from there.  We should think about
what is the best long term solution to this problem (where to export
and get headers).
2000-09-11 03:39:55 +00:00
wtc%netscape.com d772e66ecb Added config file for WINNT 5.0 (Windows 2000). 2000-09-11 03:08:40 +00:00
nelsonb%netscape.com cf6c8ac766 Fix a bug in pk11_HandUnwrap that made it always fail because it was not
setting the CKA_VALUE attribute.  Also, fix two places that called
PK11_MapError(crv) unnecessarily and with improper crv values.
2000-09-11 01:37:36 +00:00
nelsonb%netscape.com d856a6e4f8 Create a new function, CERT_DupCertList(), and call it instead of calling
CERT_CertChainFromCert in ssl_DupSocket().  This is MUCH faster.  This is
the first approximation of the right fix.  The next step is to consider
doing ref counting instead of actual duplication.  Fixes bug 51425 .
2000-09-09 06:08:46 +00:00
nelsonb%netscape.com 1eac835d58 Change order of includes so this will build on NT. 2000-09-09 03:41:11 +00:00
nelsonb%netscape.com 32c1d386a9 Change order of includes, so this will build on NT. 2000-09-09 03:19:35 +00:00
wtc%netscape.com 8a2b495434 Bugzilla bug #48248: removed an extraneous declaration of putenv(). Thanks
to Steven T. Hatton <hattons@bellatlantic.net> for reporting the bug.
2000-09-09 02:25:18 +00:00
ddrinan%netscape.com 7426ee1bbf Fixed OBJDIR_NAME problem with nspr for Linux and Solaris 2000-09-09 00:53:00 +00:00
relyea%netscape.com fb7884944f Sigh... let's compile this puppy before I check it in.... 2000-09-08 23:08:49 +00:00
relyea%netscape.com 1b9a8440af Fix Startup crash found by CPD on linux. (use the correct slot function). 2000-09-08 23:00:04 +00:00
relyea%netscape.com 9bab38e513 Fix bug where cached keys were keeping around dead sessions. 2000-09-08 22:59:06 +00:00
mcgreer%netscape.com d236df63ea fix bugs where some nss code expects leading 0's (once used for signs). allows pkcs11 pairwise consistency check to operate correctly. 2000-09-08 22:41:51 +00:00
ddrinan%netscape.com daf090c0ae Build coreconf 2000-09-08 22:05:00 +00:00
javi%netscape.com f4c402f7e2 Whomp the MAC_SECURITY_BRANCH onto the tip. 2000-09-08 21:42:11 +00:00
ddrinan%netscape.com c5e4b28e7b Build NSPR as part of PSM build 2000-09-08 21:32:04 +00:00
ddrinan%netscape.com ebd1144a8b ui and doc directories are now under psmdata 2000-09-08 02:04:05 +00:00
ddrinan%netscape.com 2ec6c748ef Install PSM in the same directiry as mozilla 2000-09-08 02:03:11 +00:00
ddrinan%netscape.com 4c9a228454 Move ui and doc directories under psmdata and do not copy NSPR, XPCOM and components into the xpi file 2000-09-08 02:01:42 +00:00
wtc%netscape.com d57dc8ee4e gcc does not recognize the -xchip=ultra2 option on Solaris/Sparc. 2000-09-08 01:05:23 +00:00
wtc%netscape.com 80c2512cf4 Fixed the relative paths in the symlinks created by the moz_import target. 2000-09-08 00:52:35 +00:00
mcgreer%netscape.com 3e85ae179d make compare_key do something (even if it will go away soon) 2000-09-07 23:18:40 +00:00
nelsonb%netscape.com 6547254b53 If an application calls SSL_SetURL on an NSPR FD that has NOT had SSL
"imported" into it, SSL_SetURL will crash.  This change fixes that.
2000-09-07 19:01:48 +00:00
javi%netscape.com ce26831753 Update the packages up for nlslayer import on tortoise 2000-09-07 18:53:05 +00:00
mcgreer%netscape.com 4135f08e8f first draft of rsa CRT decryption 2000-09-07 16:29:23 +00:00
relyea%netscape.com 01507bd05b Add definitions for the nssCKFWMechanism functions.
Add definitions to stub out the NSPR functions.
2000-09-07 16:07:03 +00:00
mcgreer%netscape.com 2230de4f0a separate keygen from primegen, to facilitate testing (by using the self-test key from blapitest). using this verified the keygen process (against that self-test, anyway). leaving a testing function in temporarily. 2000-09-07 07:33:34 +00:00
mcgreer%netscape.com 8ddaa1f3d0 fix bad change made in keygen 2000-09-07 06:44:57 +00:00
nelsonb%netscape.com 2d0c9ab694 Attempt to prevent certain NSS internal error codes from being seen by
applications that use SSL sockets.  These include:
SEC_ERROR_EXTENSION_NOT_FOUND and SSL_ERROR_SESSION_NOT_FOUND
2000-09-07 03:35:31 +00:00
mcgreer%netscape.com 112bbb432e call extended euclidean algorithm directly instead of using mp_invmod 2000-09-07 03:14:16 +00:00
nelsonb%netscape.com 6e7fa5d7ee Remove PQG_DestroyParams(), PQG_DestroyVerify from pqg.c because they
duplicate the functions in lib/util/pqgutil.c.  Also, the functions in
pqgutil correctly handle the case where the Params or Verify was
constructed without an arena (a fact which is now more obvious when
reading the code there).
2000-09-07 01:24:52 +00:00
nelsonb%netscape.com 8bad955812 Effectively remove all the code that uses RC5 from the software token
by surrounding it with #if NSS_SOFTOKEN_DOES_RC5
2000-09-07 01:17:00 +00:00
mcgreer%netscape.com 6db674e674 first draft of rsa public key op (tested against blapi self-test) 2000-09-06 23:58:41 +00:00
nelsonb%netscape.com 631e3d9aee Uncouple the definition of MOZILLA_SECURITY_BUILD from the location of
the "dist" directory used in the NSS build.  MOZILLA_SECURITY_BUILD is
now only useful for iPlanet internal builds, and is not needed by anyone
else.
2000-09-06 23:33:27 +00:00
mcgreer%netscape.com 61e4b81333 first draft of rsa keygen
secmpi.h is defines used by nss code calling mpi
2000-09-06 23:27:34 +00:00
relyea%netscape.com c6710a81b3 Add the base and pkcs11 framework to the builds. 2000-09-06 22:24:48 +00:00
relyea%netscape.com 7b234beea7 Make the framework compile with the rest of NSS.
Include a 'live' certdata.txt with those certs we have permission to push to
open source (additional certs will be added as we get permission from the
owners).
2000-09-06 22:24:00 +00:00
relyea%netscape.com e4f381443a Changes to make base code compile in the current nss environment. This is so
the pkcs framework can use it.
2000-09-06 22:11:57 +00:00
relyea%netscape.com 2280fb6816 Set Root certs to be an externally loaded PKCS #11 module. 2000-09-06 22:10:07 +00:00
relyea%netscape.com eebbb60194 Add code to allow Trusted root certs to come from an externally loaded
pkcs #11 module.
2000-09-06 22:05:57 +00:00
mcgreer%netscape.com 5de79419b1 private header file to talk between mpi and nss 2000-09-06 21:46:43 +00:00
mcgreer%netscape.com 865fd868f2 *added pqg code based on fips 186-1
*added stubs to rsa functions
2000-09-06 17:43:42 +00:00
javi%netscape.com ef3316bc57 Use PR_MIN just in case some systems don't have a MIN macro defined. 2000-09-05 23:55:55 +00:00
nelsonb%netscape.com 561753ec9d Force installparse.y to be rebuilt on NT. 2000-09-05 20:42:26 +00:00