Граф коммитов

2827 Коммитов

Автор SHA1 Сообщение Дата
bishakhabanerjee%netscape.com ed88f342da modified header to print link of resultsdir to browser log 2003-06-17 21:21:33 +00:00
nelsonb%netscape.com 4bc3e0e70c const. Got it? Const! 2003-06-11 23:12:38 +00:00
nelsonb%netscape.com 786e999bda Harden SECITEM_CompareItem against NULL pointers. 2003-06-07 03:05:49 +00:00
nelsonb%netscape.com 546ef9889f Rewrite of cert_CompareNameWithConstraints and the static functions it
calls, to make it conform with RFC 3280.  Bug 208047.
2003-06-06 09:12:21 +00:00
nelsonb%netscape.com 3245c4d36c Rewrite SECITEM_ItemsAreEqual to be faster when item lengths are not
equal and to not crash if an item contains a NULL data pointer.
2003-06-06 04:51:26 +00:00
nelsonb%netscape.com 95ac53508c Add new OIDs for directory name attribute types. Bug 207711. 2003-06-06 04:48:45 +00:00
nelsonb%netscape.com 216592c31b Augment and centralize the list of known cert name attribute types.
Bug 207711.
2003-06-06 01:17:04 +00:00
nelsonb%netscape.com f4f2e9f053 Eliminate more NULL pointer dereferences. Bug 207740. 2003-06-05 04:59:38 +00:00
wtc%netscape.com 446bef339f Bug 208343: removed two Baltimore root certificates.
Modified Files: certdata.c certdata.txt
2003-06-05 00:53:27 +00:00
nelsonb%netscape.com 9eb66804cf PORT_Alloc and PORT_ZAlloc always allocate at least one byte, even if
the caller requests zero bytes.  This patch makes PORT_ArenaAlloc
and PORT_ArenaZAlloc do the same.
2003-06-03 23:24:31 +00:00
ian.mcgreer%sun.com 115ea01683 bug 156256, removed unused Stan files with long names 2003-06-03 20:59:15 +00:00
wtc%netscape.com 9ad0b80e3a Bug 207379: added instructions for removing a builtin root CA cert from
NSS.
2003-06-02 23:16:51 +00:00
nelsonb%netscape.com ba44a2b994 Back out rev 1.27, which turned verbose mode on by default for debugging
QA test script failures that only occurred on tinderbox machines.
bug 207313 is now fixed.
2003-06-02 20:39:48 +00:00
wtc%netscape.com a2aaa0dd1a Bug 204555: Eliminated other potential crashes in code related to
certificate names.  r=wtc.  (The patch is Nelson's.)
2003-06-02 18:10:43 +00:00
nelsonb%netscape.com d8286a7935 This patch does two things, one large and one small. Bug 207313.
1, It uses two new symbols SSOCK_FD and STDIN_FD instead of 0 and 1 to
reference members of the poll set array.  I just could never remember whether
pollset[0] was the socket or was stdin.  Now I don't have to remember.
This changes a lot of lines, but is very simple.
2. It implementa a new flag clientSpeaksFirst, set with the -f option.
The only effect of this flag is whether the value of
pollset[SSOCK_FD].in_flags is initially zero (if true) or PR_POLL_READ (if false).  Note that pollset[SSOCK_FD].in_flags is set to PR_POLL_READ after
each succesful write to the socket.
2003-06-01 03:01:39 +00:00
wtc%netscape.com 1a0ee426a9 Bug 206926: Added the makefile rule to export PRIVATE_EXPORTS headers. 2003-05-31 00:12:18 +00:00
wtc%netscape.com ce11300ca6 Bug 206926: 1. Undo the changes to secrng.h, pqgutil.h, swfutl.c,
unix_rand.c, and win_rand.c. 2. Make secrng.h and pqgutil.h private.
3. Public header pk11pqg.h can't include private header pqgutil.h.
4. Many files don't need to include secrng.h.  A few don't need to include
pqgutil.h.  5. Remove duplicate declarations of PQG_DestroyParams and
PQG_DestroyVerify from blapi.h.
2003-05-30 23:31:32 +00:00
nelsonb%netscape.com cc8d6b1b9f Eliminate TCP connection reset errors that occur when server requires
client auth and SSL3 client doesn't authenticate.  The fix is to coalesce
the SSL3 no_certificate alert record with the following records (e.g.
client_key_exchange handshake, change_cipher_spec and finished handshake).
Fix bugs 207313 and 118668.
2003-05-30 23:22:39 +00:00
kirk.erickson%sun.com 52f15c0d08 Resolves bug 206971 - selfserv should OptimizeSpeed (use NSS_Initialize).
Both selfserv and strsclnt no longer OptimizeSpace.  Moved SECMOD_DB
defines from nssinit.c to nss.h, make it availble for public use with
NSS_Initialize().
2003-05-30 17:25:13 +00:00
nelsonb%netscape.com 93542dbdb9 Back out rev 1.28 to test some hypotheses about bug 207313. 2003-05-30 10:06:29 +00:00
nelsonb%netscape.com 1c8bfb4eb2 Correct all the tests in which the server requires client auth, but the
client does not supply it, so that the client actually will NOT supply
it.  Previously, the client was supplying client auth in all these tests,
and the https requests were completing succesfully, when they should have
been failing.  Bug 207398.
2003-05-30 05:40:40 +00:00
nelsonb%netscape.com 85c44c32f5 Change the SSL3 stress test to disable TLS, so that it will actually
test SSL3.  Uses the new -T option recently added to strsclnt.
2003-05-30 05:38:12 +00:00
nelsonb%netscape.com a4d31ce381 Add -3 and -T options, with same meaning as in tstclnt and selfserv,
disabling SSL3 and TLS respectively.  With this change, the QA stress
tests that say they're testing SSL3 or TLS can finally test what they
claim they are testing.
2003-05-30 05:35:52 +00:00
wtc%netscape.com 18f2adb7f6 Bugzilla 207379: removed the certificate "ValiCert OCSP Responder".
Bumped version to 1.40 (for NSS 3.9).  r=relyea.
Modified Files: certdata.c certdata.txt nssckbi.h
2003-05-29 14:26:16 +00:00
nelsonb%netscape.com 7b750ca1fb Correctly copy RDNs with empty AVA lists. Partial fix for bug 204555. 2003-05-28 21:18:09 +00:00
bishakhabanerjee%netscape.com 0d3000e0ea Adding Darwin 6.5 platform 2003-05-28 17:28:36 +00:00
nelsonb%netscape.com 8b986ea952 Fix this file to be proper http request syntax. Note: file is now a
binary file to assure identical line endings on all platforms.
2003-05-28 02:18:27 +00:00
nelsonb%netscape.com d6507e92a9 All diagnostic output goes to stderr, not stdout. This change facilitates
investigation of bug 207313.
2003-05-28 02:11:17 +00:00
wtc%netscape.com b10e3c77d3 Bug 206926: certcgi.c should not include blapi.h. Use the PK11_PQG_
functions instead.
2003-05-28 00:47:47 +00:00
wtc%netscape.com f6dae5fad2 Bug 206934: use __declspec instead of _declspec. __declspec is the
documented form and the only form accepted by the MinGW compiler.  The
patch is contributed by Christopher Seawood <seawood@netscape.com>.  r=wtc.
2003-05-28 00:07:36 +00:00
wtc%netscape.com 332454d9b1 Checked in more temporary debugging code for the strange QA failure on
Windows.
2003-05-25 19:19:28 +00:00
wtc%netscape.com 0c43efe373 Enabled verbose mode temporarily for debugging a strange QA failure on
Windows.
2003-05-25 04:16:03 +00:00
wtc%netscape.com cc344de70c Bug 206926: now that secrng.h and pqgutil.h include blapit.h instead of
blapi.h, some files that include secrng.h or pqgutil.h need to include
blapi.h directly.
Modified Files: certcgi.c swfutl.c unix_rand.c win_rand.c
2003-05-25 01:21:27 +00:00
nelsonb%netscape.com b22ba4ae70 Fix bugs experienced with oddly constructed general names.
Partially fixes bug 204555. r=wtc a=sspitzer
2003-05-24 06:27:35 +00:00
nelsonb%netscape.com 3051c7eb48 Corrently build the array of pointers to parsed group members, even when
the group was empty.  Fixes bug 174885 and partially fixes 204555.
2003-05-24 05:57:21 +00:00
wtc%netscape.com fc20d83b46 Include nss.h for the declaration of NSS_Shutdown. Use "" around prmem.h
and prio.h.
2003-05-24 05:23:42 +00:00
wtc%netscape.com 6022e0f192 Bug 206926: make blapi.h private. Public headers that included blapi.h
now include blapit.h.  It is necessary to make blapit.h because some
public headers and PSM use the types defined in it.  r=relyea,nelsonb.
Modified Files: cryptohi.h lib/freebl/manifest.mn secrng.h pqgutil.h
2003-05-24 03:34:55 +00:00
wtc%netscape.com d19e740fe4 Fixed a typo in the comment. 2003-05-23 23:01:26 +00:00
nelsonb%netscape.com 2c6eaafff6 Report the right error code for unrecognized OIDs. 2003-05-22 05:20:02 +00:00
nelsonb%netscape.com bf4cc8f8d1 Make tstclnt interactive on Windows. Bug 206031. 2003-05-22 04:34:38 +00:00
nelsonb%netscape.com 2a90f64d20 Eliminate double-spacing of output on windows. Bug 206551. r=wtc. 2003-05-22 01:51:18 +00:00
nelsonb%netscape.com e38f5daae0 If the verbose option is given twice (e.g. -vv) and the server requests
client auhtentication, tstclnt will display the server's list of trusted
client CA names.
2003-05-17 05:38:01 +00:00
nelsonb%netscape.com 9c27c51080 Add comments explaining why UMRs are not a problem. 2003-05-17 01:26:41 +00:00
nelsonb%netscape.com af67e5022b Correct offset arithmetic for "choice" templates. Bug 161580.
Patch by wtc@netscape.com
2003-05-17 01:18:53 +00:00
nelsonb%netscape.com 5cdbf1a929 Remove MOZILLA_BSAFE_BUILD. Bug 193090. 2003-05-16 20:21:20 +00:00
nelsonb%netscape.com 28c79da0a3 Remove files that were part of MOZILLA_BSAFE_BUILD. Bug 193090. 2003-05-16 20:17:11 +00:00
nelsonb%netscape.com 08a19951bd Remove support for MOZILLA_BSAFE_BUILD. Bug 193090. 2003-05-16 20:14:59 +00:00
ian.mcgreer%sun.com cc0baa49b7 bug 204788, DirectoryString should default to UTF8String
r=nelsonb
2003-05-15 21:24:10 +00:00
jpierre%netscape.com 481bd9b8d6 Fix for bug 204015 - make strsclnt reuse token after it is unplugged . r=nelsonb 2003-05-15 17:09:19 +00:00
nelsonb%netscape.com 00eb799722 Update ssltap's list of TLS ciphersuites. Bug 201158. 2003-05-15 06:28:44 +00:00
relyea%netscape.com b09f41afd7 *** empty log message *** 2003-05-14 22:34:21 +00:00
ian.mcgreer%sun.com ddad39cba1 bug 202838, move operations outside of slot->objectLock
r=relyea
2003-05-14 22:09:03 +00:00
wtc%netscape.com 81a3451b2b Removed an error that was mistakenly introduced in rev. 1.56. 2003-05-14 00:30:21 +00:00
wtc%netscape.com 63123ca797 Bug 202593: Create slot->freeListLock and slot->sessionLock in the order
consistent with the cleanup code on error return.
2003-05-13 23:00:28 +00:00
wtc%netscape.com 837fa34b7e Bug 202593: the newly added 'lock' field in the NSSToken structure is not
being used.
2003-05-13 22:59:20 +00:00
ian.mcgreer%sun.com 8720e22f4e bug 203049, move some operations outside of slot->slotLock
r=relyea
2003-05-12 21:32:38 +00:00
nelsonb%netscape.com ff2431f5c0 Fix bug 202270. Eliminate a potential infinite loop. 2003-05-12 21:07:01 +00:00
wtc%netscape.com 34bce4985a Bug 205346: need to include <unistd.h> on BeOS for isatty(). Thanks to
timeless@bemail.org for the patch.
2003-05-12 19:52:44 +00:00
wtc%netscape.com 05536f8c3a Bug 205346: fixed a compiler warning about a zero-length format string for
sprintf.
2003-05-12 18:58:33 +00:00
wtc%netscape.com 4d2e0f3bbc Bug 202593 and bug 204980: fixed a recursive deadlock introduced by the
fix for bug 202593. The session returned by nssSlot_CreateSession doesn't
need its own lock.  It is either protected by a higher-level lock (the
slot or module lock) or used by only one thread throughout its lifetime.
Modified Files: dev/devslot.c pk11wrap/dev3hack.c
2003-05-10 14:21:40 +00:00
wtc%netscape.com 734e118950 Bug 204797: nssTokenObjectCache_Clear needs to lock the cache, otherwise
multiple threads could clear the cache at the same time after a token is
removed.
2003-05-10 14:19:04 +00:00
nelsonb%netscape.com ecf80ee33f Fix bug 143426 by not freeing names in loop that traverses them.
Patch contributed by liexter@hotmail.com (liqi)
2003-05-09 23:59:18 +00:00
ian.mcgreer%sun.com f11e523f03 fix bug in last patch 2003-05-09 18:12:11 +00:00
ian.mcgreer%sun.com 8ce0ef089a bug 191757, eliminate some memcpy calls from MD5
r=nelsonb
2003-05-08 17:51:55 +00:00
nelsonb%netscape.com 8c95859745 Display an error message instead of crashing if the user forgets the -n
option with the -O (Dump Chain) option.
2003-05-06 02:50:03 +00:00
nelsonb%netscape.com 7d5a46cf84 Don't display user's password in hex. Bug 200005. 2003-05-06 02:45:12 +00:00
nelsonb%netscape.com b5fbd35b21 Don't accept END_OF_CONTENTS octets where they're not allowed. bug 202384. 2003-05-03 06:54:48 +00:00
wtc%netscape.com f7e98250bc Bug 204011: fixed the bug that nssPKIObjectCollection_AddInstances frees an
instance twice if add_object_instance fails.  r=mcgreer.
2003-05-02 03:01:13 +00:00
bishakhabanerjee%netscape.com b939a52974 Removed gcc warning - bug 203449 2003-04-29 23:13:33 +00:00
wtc%netscape.com c7b24c7949 Declare the new function sec_asn1d_parent_is_indefinite as static. 2003-04-28 20:19:21 +00:00
relyea%netscape.com ec249ebf48 replace arena grow with code that grows memory nLog n, not n! 2003-04-28 17:56:46 +00:00
nelsonb%netscape.com d01e78b8c7 Fix two problems that together prevented NSS from reading encrypted
messages from Lotus notes.  bug 202384.
1. Choice no longer treats END_OF_CONTENTS as a missing choice.
2. The code now correctly determines whether we are in an indefinite-
length encoded constructed type.  Instead of merely looking at the
immediate parent and grandparent states, it walks the state stack
until it finds the next higher state that corresponds to a parsed
tag, ignoring inline, pointer, choice, and other non-tag states.
2003-04-26 03:41:24 +00:00
nelsonb%netscape.com 1b41efe99c Greatly enhance the debug printing done when conditionally compiled with
DEBUG_ASN1D_STATES defined.
2003-04-26 02:15:50 +00:00
nelsonb%netscape.com fa163f8a45 Change the more recently added "choice" functions to conform to the
coding style used throughout the rest of the file.
2003-04-26 01:40:49 +00:00
ian.mcgreer%sun.com d5aeef1f3f bug 201081, better spreading of session id hash
r=relyea
2003-04-24 18:30:12 +00:00
ian.mcgreer%sun.com 2d396349bc bug 202553, replace reference mutex with atomic calls in PK11SlotInfo
r=relyea,wtc
2003-04-22 14:11:53 +00:00
wtc%netscape.com 213a402f9d Bug 134113: make NSS build on Win32 using GCC (MinGW). The patch
(attachment 121068) is contributed by Chris Seawood (cls@seawood.org).
2003-04-20 04:23:37 +00:00
relyea%netscape.com c04f31a7e8 Bug 202593 NSS does not lock non-threadsafe modules correctly.
Consolidate one lock for non-thread safe modules (not one per slot).
2003-04-19 00:03:32 +00:00
relyea%netscape.com f52040e2d1 Bug 202593 NSS does not lock non-threadsafe modules correctly.
Consolidate one lock for non-thread safe modules (not one per slot).
2003-04-19 00:03:13 +00:00
ian.mcgreer%sun.com e04a964222 bug 198452, zero-byte memcpys
r=relyea
2003-04-17 17:05:09 +00:00
jpierre%netscape.com 3609f97d06 Fix for 202348 - check cert & key pointers returned by client auth application callback, to fix crash . r=nelsonb 2003-04-17 02:03:39 +00:00
jpierre%netscape.com f54ce239c6 Fix for 201134 - race condition when verifying certs. Don't reset the value of nsCertType in CERTCertificate in the middle of the computation. r=nelsonb 2003-04-17 00:32:54 +00:00
wtc%netscape.com 59a795178e Bug 201808:We don't need to use _declspec(dllexport) to export
C_GetFunctionList now.  nssckbi.def takes care of that.
Modified Files: ckapi.perl nssck.api
2003-04-17 00:07:06 +00:00
wtc%netscape.com 5ca106ce02 Bug 201808: added nssckbi.def, which exports C_GetFunctionList.
Modified Files: manifest.mn
Added Files: nssckbi.def
2003-04-16 22:22:22 +00:00
jpierre%netscape.com f81ee69b6b Fix for 202053 - signing of softokn3.dll may fail on OS/2. Force the use of OS/2 CMD.EXE default shell . r=pedemont 2003-04-15 22:42:09 +00:00
wtc%netscape.com a5b3f9441e Bug 201555: enable stripping of EXEs on OS/2 with gcc. The LIBPATHSTRICT
change in sign.cmd is so that you can run a VACPP build when gcc is
building (otherwise shlibsign loads the wrong DLLs).  The patch is
contributed by IBM.
Modified Files:
	coreconf/OS2.mk nss/cmd/shlibsign/sign.cmd
2003-04-15 04:08:09 +00:00
wtc%netscape.com 3248bf6d78 The .chk files should have the $(DLL_PREFIX), not $(LIB_PREFIX), because
they correspond to shared libraries/DLLs.
2003-04-12 20:44:45 +00:00
jpierre%netscape.com d07c7a50f5 Fix for 201259 . Make the default client auth callback NSS_GetClientAuthData work with dual-key certs. r=nelsonb, sr=wtc 2003-04-09 22:23:10 +00:00
nelsonb%netscape.com 92fc1f3b0f Fix bug 200225. Don't report invalid CA cert on trusted root CAs. 2003-04-08 04:49:39 +00:00
wtc%netscape.com 7ce0258abb Set NSS version to 3.9 Beta. 2003-04-08 00:29:54 +00:00
wtc%netscape.com afe68e3619 Bug 200974: NetBSD uses GNU ld and so also needs -rpath-link. 2003-04-07 23:52:17 +00:00
jpierre%netscape.com 277eb23aae Fix for bug 200394 - update softoken version to 3.8 . r=wtc 2003-04-03 02:14:59 +00:00
wtc%netscape.com bf0da69d28 Set NSS version to 3.8. 2003-04-02 23:27:01 +00:00
nelsonb%netscape.com e2e7547270 Fix bug 200224. Eliminate null ptr dereference. 2003-04-02 23:24:01 +00:00
wtc%netscape.com 6600d04115 Import NSPR 4.3 RTM. 2003-04-02 23:22:57 +00:00
wtc%netscape.com c684e24248 Bug 200179: prepend, rather than overwrite, the shared library search path.
We can't assume the shared library search path is not set.
2003-04-01 22:58:26 +00:00
wtc%netscape.com f18c2a96c5 Destroy the hash context, public key, private key, and slot so that NSS
shutdown will succeed.  r=relyea.
2003-04-01 22:47:46 +00:00
wtc%netscape.com 845b452495 Added a missing {. 2003-04-01 22:03:07 +00:00
bishakhabanerjee%netscape.com b9eafcbc3d checking return value of NSS_Shutdown() - bug 171263 2003-04-01 19:23:18 +00:00
bishakhabanerjee%netscape.com 6d93899099 checking return value of NSS_Shutdown - bug 171263 2003-04-01 19:13:50 +00:00