mozilla
/
gecko-dev
зеркало из https://github.com/mozilla/gecko-dev.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
121 333 коммитов 615 Ветки 98 Теги 6 GiB
Граф коммитов

2827 Коммитов

Автор SHA1 Сообщение Дата
bishakhabanerjee%netscape.com 65218ae3b9 checking return value of NSS_Shutdown() - bug 171263 2003-04-01 19:11:38 +00:00
bishakhabanerjee%netscape.com 8e0426802d Checking return value of NSS_Shutdown() - bug 171263 2003-04-01 19:05:56 +00:00
bishakhabanerjee%netscape.com 7bbe39697c checking return value of NSS_Shutdown() - bug 171263 2003-04-01 19:00:50 +00:00
jpierre%netscape.com ed4c7c9bc6 Fix for 199227 - keep enumerating certs in tokens even if one token fails. r=relyea 2003-04-01 00:07:05 +00:00
wtc%netscape.com 86445ec495 Bug 195127: Turn off debugging output now that we have the AIX tinderbox 
working correctly.
 2003-03-29 04:30:02 +00:00
wtc%netscape.com a68105106a Bug 199628: support shlibsign on OpenVMS. Pass $(OS_TARGET) instead of 
$(IS_WINDOWS) to sign.sh and sign.cmd (which ignores that argument).  In
sign.sh, use a case statement with three cases: Windows, OpenVMS, and
others.  The patch is contributed by Colin Blakes <colin@theblakes.com>.
Modified Files: Makefile sign.cmd sign.sh
 2003-03-29 00:42:43 +00:00
nelsonb%netscape.com 3f52ba47c1 Changes to enable ECC over characteristic 2^m fields. 
Contribution from Vipul Gupta <Vipul.Gupta@Sun.COM>
Modified Files:
 nss/cmd/strsclnt/strsclnt.c nss/lib/cryptohi/seckey.c
 nss/lib/freebl/blapit.h nss/lib/freebl/ec.c
 nss/lib/freebl/manifest.mn nss/lib/freebl/mpi/Makefile
 nss/lib/softoken/ecdecode.c nss/lib/softoken/pkcs11.c
 nss/lib/ssl/ssl3con.c nss/lib/util/secoid.c
 nss/lib/util/secoidt.h
 2003-03-29 00:18:30 +00:00
wtc%netscape.com 032e2a412b Bug 195797: support building NSS with GCC 3.x on OS/2. The patch is 
contributed by Javier Pedemonte <pedemont@us.ibm.com>.
Modified Files:
	security/coreconf/OS2.mk security/coreconf/rules.mk
	security/nss/cmd/shlibsign/sign.cmd
 2003-03-27 15:40:54 +00:00
nelsonb%netscape.com 29640f53f9 Add missing return statement. 2003-03-27 03:07:47 +00:00
wtc%netscape.com 3bcaeb4a87 Bug 199134: fixed build failures on FreeBSD. We need to specify -pthread 
when linking an executable (already doing that when linking a shared lib),
and we need to use the -rpath-link flag to help the linker find the
shared libraries that we indirectly link with.  r=cls.
Modified Files: coreconf/FreeBSD.mk nss/cmd/platlibs.mk
 2003-03-27 01:17:28 +00:00
wtc%netscape.com b3d9493f77 Bug 195127: set the LIBPATH environment variable (used by AIX) as absolute 
pathname.  It seems that AIX caches shared libraries. If another app loaded
the same shared library earlier, the cached copy of the shared library,
including the pathname with which it was loaded, will be used.  So we need
to ensure that all apps load libsoftokn3.so with an absolute pathname so
that the pathname is correct to all apps.
 2003-03-26 21:07:12 +00:00
wtc%netscape.com 6af49910b8 Removed extraneous trailing / after directory pathnames. 2003-03-26 18:30:33 +00:00
nelsonb%netscape.com 365a37032d Add support for Elliptic Curve Cryptography. Bug 195135. 
Contributor(s):
* Sheueling Chang Shantz <sheueling.chang@sun.com> and
* Douglas Stebila <douglas@stebila.ca>, Sun Microsystems Laboratories
Added Files:
    GF2m_ecl.c GF2m_ecl.h mpi/mp_gf2m.c mpi/mp_gf2m.h
    mpi/tests/mptest-b.c
 2003-03-26 05:03:11 +00:00
wtc%netscape.com a98f4c0628 Bug 199082: checked in Nelson's patch, which 
a) changes selfserv to test the return value from NSS_Shutdown.
b) changes SECMOD_Shutdown to set the error code SEC_ERROR_BUSY before
   returning SECFailure.
c) Adds a new function SSL_ShutdownServerSessionIDCache to ssl.h.
d) Changes selfserv to call SSL_ShutdownServerSessionIDCache before calling
NSS_Shutdown.
Modified Files:
	cmd/selfserv/selfserv.c lib/pk11wrap/pk11util.c
	lib/ssl/ssl.def lib/ssl/ssl.h lib/ssl/ssl3con.c
	lib/ssl/sslimpl.h lib/ssl/sslsnce.c
 2003-03-26 00:31:13 +00:00
nelsonb%netscape.com ba8e91e37c Fix bug 198099. Display DSA public keys in certs properly. 2003-03-25 03:45:04 +00:00
jpierre%netscape.com edf2084f38 Fix build 2003-03-25 02:13:33 +00:00
ian.mcgreer%sun.com 26d35ef643 bug 198622, redundant memset calls 2003-03-24 22:25:52 +00:00
relyea%netscape.com 126930373b Bug 142867: pk12util needs to be able to import intermediate CA's into hw 
tokens.
 2003-03-24 19:09:08 +00:00
wtc%netscape.com d525a490d6 Removed the experimental change. It did not cause the intermittent QA 
failures on the "aix64" tinderbox to go away.
 2003-03-23 00:16:43 +00:00
wtc%netscape.com d05787bdc0 Deleted an obsolete comment. 2003-03-22 08:01:44 +00:00
wtc%netscape.com c2f89c4e52 An experimental change for debugging bug 195127: on the 64-bit AIX 
tinderbox the dist/${OBJDIR}/lib/libsoftokn3.chk symlink sometimes does
not get created.
 2003-03-22 07:52:25 +00:00
wtc%netscape.com e56a2b8225 Added more debugging output for bug 195127. 2003-03-22 07:46:06 +00:00
wtc%netscape.com ff1e1c8393 Bug 198543: checked in the patch from Chris Seawood to fix BeOS bustage. 
Apparently it is necessary to have LIBRARY_PATH set in the environment.
 2003-03-22 02:59:26 +00:00
wtc%netscape.com 2242970351 BSD/OS seems to be using GNU ld, which needs -rpath-link to find the 
implicit dependency of an explicitly lined .so at link time.
 2003-03-22 01:26:58 +00:00
relyea%netscape.com 6f6bad23cb bug 168393 PK11SDR_Decrypt() does not call PK11_Authenticate() before search 
for the key.
 2003-03-22 00:22:26 +00:00
relyea%netscape.com 4492ee1630 bug 198470 "Cached certs not updated after token reset." r=ian.mgreer r=wtc 2003-03-22 00:18:45 +00:00
wtc%netscape.com d6719582d1 Bug 198543: BeOS uses LIBRARY_PATH to search for shared libraries. 2003-03-21 21:33:43 +00:00
wtc%netscape.com 9d7d9e9189 Rewrote without the dirname() and basename() calls because they are not 
available on some Unix platforms (e.g., BSD/OS 4.2).
 2003-03-21 20:57:07 +00:00
wtc%netscape.com e60662c072 Resurrected the workaround in revision 1.2. It may be difficult for some 
OSF1 users to upgrade their C compiler to the required versions.
 2003-03-21 15:10:11 +00:00
wtc%netscape.com 162937967f Bug 197890: backed out the previous checkin. For unknown reasons, the 
Mozilla trunk Tinderbox machine "beast" had trouble running the cygpath
command.  It failed with the error
"can't create title mutex, Win32 error 6".
 2003-03-21 06:10:31 +00:00
wtc%netscape.com a5c5715cab Bugzilla 198461: fixed build problem on OpenBSD. The patch is contributed 
by timeless@bemail.org.
 2003-03-21 05:24:29 +00:00
wtc%netscape.com c24221c822 On IRIX, dirname() and basename() are defined in -lgen. 2003-03-21 05:13:20 +00:00
wtc%netscape.com 5ecbb2e6d4 Bug 198482: OS/2 can't run sign.sh because we can't set DLL load path in 
a shell script.  This patch is contributed by Michael Kaply
<mkaply@us.ibm.com>.
Modified Files: Makefile
Added Files: sign.cmd
 2003-03-21 03:48:11 +00:00
wtc%netscape.com 47c8a2f084 Bugzilla 198481: fixed all build problems with gcc on Solaris. 
1. Removed the workarounds we put in before -- hardcoding LD to
/usr/ccs/bin/ld and passing the -B/usr/ccs/bin/ flag to gcc.
2. Use the compiler, $(CC), to build shared libraries.
3. If gcc is used, determine whether gcc uses GNU ld or Solaris
ld and set the new make variable GCC_USE_GNU_LD accordingly.
Modified Files:
	coreconf/SunOS5.mk nss/cmd/platlibs.mk nss/lib/freebl/Makefile
 2003-03-21 03:31:00 +00:00
relyea%netscape.com 9f0836d49e Add OID Definition for AOL screenname attribute. 2003-03-20 23:53:39 +00:00
wtc%netscape.com ba7bdf8f1c White space change simply to cause the Mozilla tinderboxes to rebuild. 2003-03-20 23:12:43 +00:00
wtc%netscape.com 0dbe724559 Bug 195127: added temporary debugging output. 2003-03-20 02:00:40 +00:00
wtc%netscape.com 88232d00e6 Bug 58221: don't use strlen to check if a string is of length 0. 2003-03-19 06:37:03 +00:00
wtc%netscape.com c078ee6cdc Bug 58221: don't use strlen to check if a string is of length 0. 2003-03-19 06:30:12 +00:00
wtc%netscape.com 20e6a3d1ec Bug 197890: use Cygwin's cygpath command to "escape" a pathname with a 
drive letter for Cygwin's bash.
 2003-03-18 14:48:09 +00:00
nelsonb%netscape.com de78b20e51 Fix type mismatches in return values that were breaking gcc builds. 
No bug number.
 2003-03-18 03:24:59 +00:00
wtc%netscape.com d26ae8d600 Bug 197890: Eliminated the artificial dependency of all NSS cmd tools on 
zlib.  Only some of them (modutil and signtool) need zlib and we now define
that dependency explicitly.  In shlibsign/sign.sh, escape the drive letter
if the pathname contains it and we are using Cygwin so that the pathname
does not contain any colon, which is the PATH separator in Cygwin. r=relyea
Modified Files: platlibs.mk modutil/manifest.mn shlibsign/sign.sh
	signtool/manifest.mn
 2003-03-17 21:48:18 +00:00
relyea%netscape.com abfd3a64f2 Make indention style consistant with SSL's usage, not softoken/pk11 usage. 2003-03-13 16:36:43 +00:00
wtc%netscape.com 79ff346dcb Bug 197147: removed an invalid/unnecessary comparison of two 
PRIntervalTimes in pk11_InDelayPeriod.
 2003-03-13 01:16:00 +00:00
relyea%netscape.com d9b9435a62 Allow for tokens that don't require login. bug 197082 2003-03-12 19:22:32 +00:00
kirk.erickson%sun.com 9e574da214 Made 'seconds' argument to '-L' optional. 
Updated Usage with '-L [seconds]' syntax, and default value (30).
 2003-03-12 02:40:43 +00:00
jpierre%netscape.com 52ed6170ab Fix for 192590 - add ability to encode NSSCMSRecipientInfo . r=javi, wtc 2003-03-11 03:38:54 +00:00
wtc%netscape.com 5fc33ad0f7 Bug 196776: the 'src' argument to the ASN.1 encoding functions should be 
declared 'const'.
Modified Files: secasn1.h secasn1e.c
 2003-03-11 02:31:16 +00:00
jpierre%netscape.com 322b4851d6 Fix for bug 175167 - don't use mark & release in QuickDER decoder . r=wtc 2003-03-07 01:13:22 +00:00
relyea%netscape.com 7b8dfc1a95 remove last references to TraverseCerts by removing depricated functions with call it. r=wtc 2003-03-05 21:46:20 +00:00
relyea%netscape.com 62acf06bc9 Remove external use of SEC_TraversePermCerts(). Bug 130968. 2003-03-05 01:04:33 +00:00
relyea%netscape.com 3db543d86d Bug 185245. including wtc's comments. 
Don't reference memory beyond the end the the data element when decoding a
SubjectEntry. Prevents crashes from corrupted Subject Entries.
 2003-03-05 01:02:03 +00:00
relyea%netscape.com c62f62ef69 Fix memory leaks. (roll fixes from 3.7 BRANCH). 2003-03-05 00:59:36 +00:00
relyea%netscape.com df524309b9 Incorporate wtc comment from bug 19061 (removal of commented code). 2003-03-04 23:11:09 +00:00
relyea%netscape.com b47c2269f6 bug 162976: make crl update atomic. Set up new Crl with a new Object ID which is different from the old one. 2003-03-04 22:36:27 +00:00
relyea%netscape.com a9f27f307f Bug 162976. Make CRL updates 'atomic' . Insert new CRL before deleting the 
old one.b
 2003-03-04 22:34:56 +00:00
relyea%netscape.com c339a0b104 Print all the certs for a given nickname, not just the first. 2003-03-04 22:32:24 +00:00
relyea%netscape.com 9024b2c79f Fix QA failures on tip (don't dereference through a NULL pointer). 2003-03-03 19:46:22 +00:00
wtc%netscape.com 8f947046b1 Bug 195127: 1. Enable DEBUG_SHVERIFY. 2. Added debug output to print the 
file name if PR_Open fails.
 2003-03-01 01:53:11 +00:00
relyea%netscape.com ed4ffe44f6 bug 19590 
RFE:Add ability to encode/decode NSSCMSRecipientInfo structures

r=javi,wtc
 2003-02-28 23:32:29 +00:00
ian.mcgreer%sun.com dd7d756307 bug 177556, signtool -l fails 
r=wtc
 2003-02-28 21:14:36 +00:00
ian.mcgreer%sun.com 4a82c09e70 bug 191757, InitOIDHash() not threadsafe 
r=relyea
 2003-02-28 21:13:20 +00:00
wtc%netscape.com 888f478faf Bug 195196: fixed a typo. 2003-02-27 14:49:30 +00:00
nelsonb%netscape.com f87129ad87 Add support for Elliptic Curve Cryptography. Bug 195135. 
Modified Files:
 	cmd/lib/SECerrs.h cmd/selfserv/selfserv.c
 	cmd/tstclnt/tstclnt.c lib/cryptohi/keyhi.h
 	lib/cryptohi/keythi.h lib/cryptohi/seckey.c
 	lib/cryptohi/secvfy.c lib/freebl/Makefile lib/freebl/blapi.h
 	lib/freebl/blapit.h lib/freebl/ldvector.c lib/freebl/loader.c
 	lib/freebl/loader.h lib/freebl/manifest.mn lib/nss/nss.def
 	lib/pk11wrap/pk11skey.c lib/pk11wrap/pk11slot.c
 	lib/softoken/lowkeyti.h lib/softoken/manifest.mn
 	lib/softoken/pkcs11.c lib/softoken/pkcs11c.c
 	lib/softoken/pkcs11t.h lib/ssl/ssl3con.c lib/ssl/ssl3prot.h
 	lib/ssl/sslcon.c lib/ssl/sslenum.c lib/ssl/sslimpl.h
 	lib/ssl/sslinfo.c lib/ssl/sslproto.h lib/ssl/sslsecur.c
 	lib/ssl/sslsock.c lib/ssl/sslt.h lib/util/secerr.h
 	lib/util/secoid.c lib/util/secoidt.h
Added Files:
 	lib/freebl/GFp_ecl.c lib/freebl/GFp_ecl.h lib/freebl/ec.c
 	lib/freebl/ec.h lib/softoken/ecdecode.c
 2003-02-27 01:31:38 +00:00
nelsonb%netscape.com 83101081ca Add missing dependency on error headers. 2003-02-26 23:52:40 +00:00
nelsonb%netscape.com 53f415bde5 Fix bug 194840. Get new random seed before each attempt to sign with DSA. 2003-02-25 23:45:23 +00:00
kirk.erickson%sun.com 58e6df6d02 Addresses bug 193378 modutil should print an error message, 
by printing error on SECMOD_DeleteInternalModule() failure.
 2003-02-25 02:09:11 +00:00
wtc%netscape.com 3d99d3f6a8 Bug 190537: build OS/2 DLLs using the map files to control symbol export. 
The patch is contributed by Javier Pedemonte <pedemont@us.ibm.com>.
Modified files: coreconf/OS2.mk coreconf/rules.mk nss/lib/ckfw/nssck.api
 2003-02-25 01:40:04 +00:00
wtc%netscape.com e82f9dbda9 Simplified the test for substrings. 2003-02-22 15:20:07 +00:00
nelsonb%netscape.com 15064057ce Fix bug 160207. Make TLS implementation resistant to timing attacks on 
CBC block mode cipher suites in TLS.  See bug for details.
 2003-02-21 23:00:16 +00:00
wtc%netscape.com 08b98e2fe3 Bug 194309: cvs removed libpath.c because the freebl_GetLibraryFilePathname 
function has been replaced by the new NSPR 4.3 function
PR_GetLibraryFilePathname.
 2003-02-21 02:40:52 +00:00
wtc%netscape.com c049211d54 Bug 194309: replaced freebl_GetLibraryFilePathname by the new NSPR 4.3 
function PR_GetLibraryFilePathname.
Modified files: config.mk manifest.mn shvfy.c
 2003-02-21 00:41:24 +00:00
wtc%netscape.com 0cf4cab50e Bug 194222: Removed SECMOD_CallOnce. It is replaced by the new NSPR 4.3 
function PR_CallOnceWithArg.
Modified files: nss/nssinit.c pk11wrap/pk11cert.c pk11wrap/secmodi.h
 2003-02-20 16:58:57 +00:00
sonja.mirtitsch%sun.com 8f8e7357ec writing actual return of modutil to output.log, bug 193394 r=wtc 2003-02-20 00:52:40 +00:00
sonja.mirtitsch%sun.com cbe33c407b echoing modutil commandline to output.log, bug 193394 r=wtc 2003-02-19 23:26:52 +00:00
sonja.mirtitsch%sun.com 61cc07a65d switching the NSPR version to v4.3-beta1 2003-02-19 23:21:23 +00:00
jpierre%netscape.com 507f9b47a8 Patch for 193961 - incorporate Wan-Teh's feedback 2003-02-19 21:50:49 +00:00
jpierre%netscape.com 580265aeb3 Fix for bug 193691 . Make QuickDER return an error rather than assert if extraneous data is present in the buffer 2003-02-19 02:29:48 +00:00
thayes%netscape.com a74f0fa8b2 Bug 192639: Use utility functions for managing token passwords so that 
cmsutil will prompt for the value if it is not given on the command line.
r=nelsonb
 2003-02-19 00:39:39 +00:00
wtc%netscape.com 3294d2a320 Bug 193367: do not call PR_Now() in a loop. r=nelsonb. 2003-02-18 23:26:39 +00:00
ian.mcgreer%sun.com fbd8eb30c2 bug 174200, don't attempt to decode cert when destroying it, handle failure 
to decode cert serial number
r=nelsonb
 2003-02-18 20:53:14 +00:00
wtc%netscape.com 03d1089088 Add DHE algorithms to the list. (Merged relyea's checkin (rev. 1.3.2.1) 
from the NSS_3_7_BRANCH to the trunk.)
 2003-02-18 02:53:54 +00:00
wtc%netscape.com b485d030fd Bug 188856: it is not necessary to declare 'crv' in these blocks because it 
is already declared in the outer scope.
 2003-02-18 02:47:04 +00:00
wtc%netscape.com 629dd8c57a Bug 192617: export NSS_CMSRecipientInfo_Wrap/UnwrapBulkKey from the smime3 
shared library.
 2003-02-18 00:45:34 +00:00
wtc%netscape.com c766b3d808 Bug 193055: the "cat ${file} | while read ...do ... done" construct does 
not work under MKS Korn shell on Windows XP.  Replaced it by the equivalent
construct "while read ... do ... done < ${file}".
 2003-02-15 04:48:13 +00:00
relyea%netscape.com 4c4ce5586d Bug 167756. Address Nelson's review comments. remove socket specific latency 
in favor of a slot specific latency test (already done by pk11wrap code).
 2003-02-15 01:21:25 +00:00
relyea%netscape.com 7737f1bf2b bug193367: Don't blindly copy all the certs from a given S/MIME message into the db. 2003-02-15 00:23:04 +00:00
sonja.mirtitsch%sun.com 6f1f50b42a bug 193394, change to check returncode of modutil after switching to 
fips mode, r=wtc
 2003-02-14 21:30:45 +00:00
wtc%netscape.com 42ae3a8e2c There should be no token after #endif. 2003-02-14 05:32:35 +00:00
kirk.erickson%sun.com 1fa1add016 Changed License: MPL to MPL/GPL. 2003-02-13 18:24:07 +00:00
relyea%netscape.com f9dd52a261 Turn off debugging output now that we have the tinderboxen working correctly. 2003-02-13 17:41:45 +00:00
kirk.erickson%sun.com 2b7de9c634 Added softokn3 library, and the new integrity check files. 2003-02-13 03:30:19 +00:00
wtc%netscape.com 4c2bfee832 Bug 193057: add WINNT5.1_* symlinks in mozilla/dist for Windows XP QA. 2003-02-13 01:45:01 +00:00
relyea%netscape.com 65978ca4e4 Turn off the mangle test for now. 2003-02-12 22:21:59 +00:00
kirk.erickson%sun.com d44a9d0be8 Removed extraneous ` from PRODUCT_VERSION. 2003-02-12 16:12:14 +00:00
relyea%netscape.com d104d1a923 Always free the key reference passed to us from the client 2003-02-10 22:36:45 +00:00
kirk.erickson%sun.com 390576ed9e Resolves bug 191221, by adding dynamic versioning for Solaris. 2003-02-10 18:18:52 +00:00
wtc%netscape.com ada7b251c4 Bug 131826: backed out the zlib 1.1.4 upgrade because the signtool tests 
failed.
Modified Files:
	README adler32.c compress.c crc32.c deflate.c deflate.h
	example.c gzio.c infblock.c infblock.h infcodes.c infcodes.h
	inffast.c inffast.h inflate.c inftrees.c inftrees.h infutil.c
	infutil.h minigzip.c trees.c uncompr.c zconf.h zlib.h zutil.c
	zutil.h
 2003-02-08 15:00:13 +00:00
wtc%netscape.com 22417a7df4 Bug 131826: checked in the README file of zlib 1.1.4. 2003-02-08 09:10:36 +00:00
wtc%netscape.com 305ac614c0 Bug 131826: upgraded to zlib 1.1.4. 
Modified Files:
	adler32.c compress.c crc32.c deflate.c deflate.h example.c
	gzio.c infblock.c infblock.h infcodes.c infcodes.h inffast.c
	inffast.h inflate.c inftrees.c inftrees.h infutil.c infutil.h
	minigzip.c trees.c uncompr.c zconf.h zlib.h zutil.c zutil.h
 2003-02-08 08:50:42 +00:00
wtc%netscape.com 80d543aa32 Bug 131826: added maketree.c from zlib 1.1.4. 2003-02-08 08:37:00 +00:00
wtc%netscape.com 9d38af738e Removed unused files stubs.c and zip_nodl.c. 2003-02-08 08:35:07 +00:00
wtc%netscape.com a301d47f42 Bug 131826: added new header files from zlib 1.1.4. 
Added Files: trees.h inffixed.h
 2003-02-08 08:30:11 +00:00
relyea%netscape.com ab77a6c23c Sigh, the QA scripts look for the word 'failed', but it's common that we 
can't open the shared library and isn't a real failure, so change the wording
 2003-02-08 01:52:37 +00:00
relyea%netscape.com 41a2236e7e Skip corruption test if someone has locked down the shared library on us. 2003-02-08 00:02:06 +00:00
wtc%netscape.com 5076009554 Exit with 1 rather than -1 on failure. Make sure the program exit with 1 
on all failures. Remove the symlink, if a file/symlink by that name already
exists, before creating it to avoid the EEXIST error.
 2003-02-07 23:41:15 +00:00
wtc%netscape.com d84be87533 Use <> around standard/system header files. This file does not need 
string.h, but it should include stdio.h because it uses fprintf and printf.
 2003-02-07 23:21:53 +00:00
nelsonb%netscape.com a39cc492bc Fix bug 190527. Properly extend buffer when data exceeds 512 bytes. 2003-02-07 23:09:35 +00:00
relyea%netscape.com 7903049797 Fix signed/unsigned display issue. 
Add more loggin information on errors (rev 1.3 added this but lost it's log).
 2003-02-07 23:05:07 +00:00
relyea%netscape.com d07389a152 *** empty log message *** 2003-02-07 23:02:43 +00:00
relyea%netscape.com 1c52cb2c3d Add test to see if the shlib was actually changed. 2003-02-07 21:13:10 +00:00
relyea%netscape.com e196a4143b Add Mangle logging... 2003-02-07 21:12:26 +00:00
relyea%netscape.com 267c0b8095 Add debugging information. Turn on tempararily to get debug info from tinderbox failures. 2003-02-07 19:22:42 +00:00
kirk.erickson%sun.com f0a7cc54bb Moved rules.mk include to the end. 2003-02-07 07:16:37 +00:00
nelsonb%netscape.com 140acf91e3 Move the implementation of the TLS Pseudo Random Function (PRF) from 
pkcs11c.c into a new file: tlsprf.c.
 2003-02-07 06:42:20 +00:00
nelsonb%netscape.com 1bea4fac99 Fix the dbtests test on Windows, when run in all.sh. 
The problem was that fips.sh created a file in . named dbtest, which was
actually some text output by a previous test.  This dbtest file prevented
the dbtest program from running.  The text file now has another name.
 2003-02-07 06:32:59 +00:00
kirk.erickson%sun.com a07280607f Resolves bug 189504 (Build Linux RPMS). 2003-02-07 05:56:15 +00:00
nelsonb%netscape.com 6a424428f3 MKS shell doesn't know about echor command. Does any shell? 2003-02-07 05:48:34 +00:00
nelsonb%netscape.com 63cbaffd59 Remove unreferenced local variables from functions. 2003-02-07 05:08:01 +00:00
wtc%netscape.com 3da1c11d28 Moved the definition of MD_LIB_RELEASE_FILES from manifest.mn to Makefile 
so that it is right next to the definition of CHECKLOC, which it uses.
 2003-02-06 22:37:37 +00:00
relyea%netscape.com f97a44db49 Clean up tests 
Suppress error messages which we were expecting because it causes the QA
scripts to report a QA failure.
 2003-02-06 19:06:39 +00:00
relyea%netscape.com 0022c47e93 Mangle will be changing the shared libraries, so it should link with them. 2003-02-06 18:18:42 +00:00
wtc%netscape.com d12037cd31 Bug 177387: Put the configuration/assignments before the rules in Makefile. 
Define MD_LIB_RELEASE_FILES in manifest.mn so that the *.chk files are
included in the mdbinary.jar files generated by the release target.
 2003-02-06 16:56:46 +00:00
relyea%netscape.com f61ba94871 Turn on FIPS test again. 2003-02-06 16:13:44 +00:00
relyea%netscape.com 4bb120679c Introduce shell variables for DLL_PREFIX and DLL_SUFFIX 2003-02-06 16:13:22 +00:00
wtc%netscape.com d7d81c7883 Support both ";" and ":" as PATH separators on Windows. MKS Korn shell 
uses ";" but Cygwin bash uses ":".
 2003-02-06 14:52:43 +00:00
wtc%netscape.com 5cc66223d8 Backed out the previous checkin because it doesn't work on Windows. 2003-02-06 05:33:33 +00:00
wtc%netscape.com 025206b16f Bug 177387: include the *.chk files in the mdbinary.jar files generated by 
the release makefile target.
Modified Files: lib/freebl/manifest.mn lib/softoken/manifest.mn
 2003-02-06 03:52:37 +00:00
relyea%netscape.com 9dbd723151 Remove mangle test until we can get the correct library name inside fips.sh for all platforms 2003-02-06 01:07:39 +00:00
relyea%netscape.com 7be71c5a0f Add check to 1) make sure we are in FIPS mode. and 2) to verify that we 
detect corrupted shared libraries while in FIPS mode.
 2003-02-06 00:50:00 +00:00
relyea%netscape.com 90be81e5ad The NSPR get shared lib interface requires the library name only, 
not a partial path to the library. This affects AIX.
 2003-02-06 00:49:09 +00:00
relyea%netscape.com f419ac9454 Try to load the new module before we've unloaded the old one. This now 
works in NSS, and it allows us to back out if the new one didn't load (because
FIPS could not verify the shared module for instance).
 2003-02-05 00:35:53 +00:00
relyea%netscape.com 0c754d450b Update db test to verify cert8 not cert7 2003-02-05 00:33:52 +00:00
relyea%netscape.com 87a6506c3f Surface the Err codes if we fail to shift to FIPS mode. 
Add new option to verify that we have shifted to FIPS mode.
 2003-02-05 00:31:15 +00:00
relyea%netscape.com 9091d5b06d 1) turn on mangle builds. 
2) better fix for the missing MAXPATHLEN missing define.
3) make room for the '\0' in the pathname.
 2003-02-05 00:29:35 +00:00
relyea%netscape.com d4c0391ff4 Fix LINUX breakage (define MAXPATHLEN if it wasn't defined the the standard 
system headers).
 2003-02-04 23:39:15 +00:00
relyea%netscape.com a0499c74ef Add code to handle symlinks. 
Add verbose output to print out hashes and signatures.
 2003-02-04 23:18:08 +00:00
relyea%netscape.com efdcf189a1 Add program which will mangle exactly 1 bit in a file. 2003-02-04 23:16:56 +00:00
relyea%netscape.com 75390fc662 Fix windows build breakage. 2003-02-04 19:03:11 +00:00
relyea%netscape.com 83e97a17cc Shell script to set up the path before running the signing tool 2003-02-03 21:06:57 +00:00
relyea%netscape.com 2d91037f77 Generate .chk file at build time when we build shlibsign 2003-02-03 21:06:18 +00:00
relyea%netscape.com 447f0c56f9 Check bug 188856 into the tip. 
1)return proper error code in more cases. 2) Fix bug in DH KeyPair Generation.

the essential part of this fix in pkcs11c.c where we add the CKA_NETSCAPE_DB
attribute on Diffie-Hellman key gen. I don't know why the code would have even
thought of working without this (unless we were testing with pregenerated
keys).

The rest of the fix is to surface more of the PKCS #11 error back up. There is
a separate bug to continue tracking the issue of lost PKCS #11 errors.
 2003-01-31 23:39:34 +00:00
nelsonb%netscape.com 3f08900d2f Fix an uninitialized variable. Bug 191396. 2003-01-31 22:26:56 +00:00
nelsonb%netscape.com 340366e2ff Fix crash in CERT_CheckKeyUsage caused by dereferencing a returned pointer 
without checkin it for NULL.
 2003-01-31 02:49:13 +00:00
nelsonb%netscape.com 9b5a756ce6 Fix bug 191396. Don't generate SEC_ERROR_LIBRARY_FAILURE unnecessarily 
while doing dsa signatures.
 2003-01-31 02:39:36 +00:00
relyea%netscape.com e7212afe42 FIPS library verifier. 2003-01-30 23:38:07 +00:00
relyea%netscape.com 691d3e25e1 FIPS library verifier 2003-01-30 23:36:37 +00:00
wtc%netscape.com 604f0ed9a1 Bug 191214: fixed the object leaks in signtool that prevented NSS_Shutdown 
from succeeding and added the NSS_Shutdown call back.  r=jpierre.
Modified Files: certgen.c sign.c signtool.c
 2003-01-30 23:11:13 +00:00
wtc%netscape.com 060a90105f Bug 177387: temporarily added freebl_GetLibraryFilePathname to libfreebl.a. 
This function has the same semantics as the NSPR 4.3 function
PR_GetLibraryFilePathname. This patch should be backed out when NSPR 4.3 is
released.
Modified Files: config.mk manifest.mn
Added Files: libpath.c
 2003-01-30 07:00:32 +00:00
jpierre%netscape.com 7f77163102 Fix for 190424 - don't query CKA_NETSCAPE_EMAIL attribute. r=wtc 2003-01-30 05:12:10 +00:00
jpierre%netscape.com da30938629 Fix for 190424 - don't query CKA_NETSCAPE_EMAIL attribute . r=wtc 2003-01-30 03:02:55 +00:00
jpierre%netscape.com 455618e1a1 Patch for memory leak . Bug 189976 . r=wtc 2003-01-30 02:59:35 +00:00
wtc%netscape.com 78b89796f5 Bug 191214: backed out the previous checkin until this bug (object leaks) 
is fixed.
 2003-01-30 01:50:31 +00:00
wtc%netscape.com dd7b545622 Bug 171263: signtool should call NSS_Shutdown before it exits. 2003-01-30 00:39:37 +00:00
relyea%netscape.com 510d42958f Move LIBJAR definitions around so that NT builds. 2003-01-29 23:37:10 +00:00
relyea%netscape.com 3a46194bdd 1) add vfyserv to the standard build. 
2) add tool to build shared library signature files for FIP's.

Code to verify requires NSPR changes before we can check it in.
 2003-01-28 18:53:22 +00:00
relyea%netscape.com 99d710be9c New header file to dump defines for managing signed FIPs libraries. 2003-01-28 18:50:02 +00:00
relyea%netscape.com 943c3bc77e Compile modutil with shared libraries. 2003-01-28 16:44:33 +00:00
relyea%netscape.com 6be85505ba Export functions needed for modutil to be compiled dynamically. 2003-01-28 16:41:46 +00:00
relyea%netscape.com d58c1ec22c Remove dead code and symbols from lib jar so that modutil can compile when 
linked with it.
 2003-01-28 16:39:32 +00:00
relyea%netscape.com 368b83f17c Sign 3 sets of changes are here: 
1) Provide accessor functions for the PK11_DefaultArray so that modutil
does not have to link statically to access it.

2) Try setting the attribute on an object before we go to the work of copying
it (Function Only used in Java).

3) Optimize searching for the more common types of attributes.
 2003-01-28 16:38:04 +00:00
wtc%netscape.com 228b3e52ed Bug 190396. 
Don't fail the search if the token returned an error that indicates that it
legitimately couldn't find a CRL
 2003-01-24 06:37:03 +00:00
relyea%netscape.com 998b101109 Bug 167756. Clean up previous patch: add lastState field, and set the SSL Error on failure. 2003-01-23 22:02:37 +00:00
relyea%netscape.com 17117c5e23 Write changes back to the database when we correct incorrect user bit settings. 2003-01-23 19:38:53 +00:00
relyea%netscape.com f83c287af6 Set the size value when extracting a key 19011. 2003-01-23 17:30:15 +00:00
relyea%netscape.com 7d03017158 Check for token removal before continuing SSL sessions which have client auth 
with certs associated with that token. bug 167756.
 2003-01-23 17:27:34 +00:00
relyea%netscape.com 61a6011027 Fix bug 180824 Version 3.4 string hard coded in default token name. 2003-01-23 17:16:50 +00:00
ian.mcgreer%sun.com ae2e606e54 always use explicit serial numbers on generated certs, should fix QA failures on leia 2003-01-23 15:38:03 +00:00
jpierre%netscape.com f593a5bac0 Fix for bug #126930 - make SSL_ConfigServreSessionIDCache work on OS/2 by not using shared memory in single process mode. r=nelsonb 2003-01-23 00:15:08 +00:00
wtc%netscape.com 8518277691 Bug 190112: PK11_ReadAttribute needs to call PK11_ExitSlotMonitor before 
we return because of allocation failure.
 2003-01-22 17:44:36 +00:00
wtc%netscape.com 0a514a798c Bug 189546: updated the comments to reflect what the new code does. 2003-01-22 06:24:53 +00:00
nelsonb%netscape.com 8a025005e9 Add OIDs for AES Key Wrap mechanism. 2003-01-22 04:35:54 +00:00
wtc%netscape.com b4f31cb711 Bug 189546: moved the switch statement for known key lengths to the 
beginning of PK11_GetKeyLength to work around a deadlock in nCipher
module if PK11_ExtractKeyValue is called.
 2003-01-22 03:55:21 +00:00
nelsonb%netscape.com 65a0422f22 Implement new AES Key Wrap mechanisms. Bug 167818. 2003-01-22 03:13:04 +00:00
wtc%netscape.com fdf8f4dc25 Bug 189345: we incorrectly assumed that a C_XxxFinal call to determine the 
length of the buffer would also terminate the active operation if the
buffer length is 0.  PKCS#11 says it doesn't, so we need to make the
additional C_XxxFinal call even if the buffer length is 0.  Allocate a
buffer from the heap if the stack buffer is too small and free the
heap-allocated buffer before we return from pk11_Finalize.  We can use the
stack buffer if count is equal to its size.
 2003-01-21 19:33:24 +00:00
relyea%netscape.com 65a9359e6e Bug 198364. Tokens keys do not own their handles. Don't let the key 
get destroyed when freed.
 2003-01-18 01:49:33 +00:00
nelsonb%netscape.com b39068212e When wrapping secret keys with an unpadded block cipher, null padd the keys 
as necessary, per the PKCS 11 spec.  Also, implement padding and unpadding
for single-part only ciphers.
 2003-01-17 05:50:08 +00:00
wtc%netscape.com 3cfd1da0cc Bug 145029: fixed compiler warnings (mostly "xxx might be used 
uninitialized").
 2003-01-17 02:49:11 +00:00
nelsonb%netscape.com 66dbe61852 One more fix for HPUX and Solaris. 2003-01-16 01:44:43 +00:00
jpierre%netscape.com bd1c6e2d6f Fix incorrect usage of QuickDER . See bug 160805 comment 16 2003-01-16 00:56:10 +00:00
nelsonb%netscape.com 52c0e7f513 Fix compilation error. This file is only compiled on 2 platforms. 2003-01-16 00:55:53 +00:00
nelsonb%netscape.com 191e2830e1 Switch from the old vendor-defined mechanism numbers to the new official 
PKCS 11 mechanism numbers.  These numbers will appear in v2.20.
 2003-01-16 00:43:58 +00:00
nelsonb%netscape.com 48e7307212 Enforce that softoken's mechanisms are used only with the PKCS 11 
functions that they're defined to work with.
 2003-01-16 00:28:05 +00:00
nelsonb%netscape.com b4debe71ef Complete the addition of AES Key Wrap to blapi in freebl. 2003-01-16 00:15:21 +00:00
nelsonb%netscape.com f8ffa9b2df Remove the implementation of CKM_KEY_WRAP_LYNKS from softoken. 2003-01-16 00:14:07 +00:00
nelsonb%netscape.com c74e098433 aeskeywrap.c - implement AES Key Wrap algorithm from RFC 3394 2003-01-14 22:16:04 +00:00
bishakhabanerjee%netscape.com f96d105632 Bug 171263 - NSS test apps to check return value of NSS_Shutdown 2003-01-14 01:03:21 +00:00
bishakhabanerjee%netscape.com 3f8b500ca5 Bug 171263 - NSS test apps shd check return value of NSS_Shutdown 2003-01-13 22:36:39 +00:00
relyea%netscape.com 6418dccb57 Check for Empty CRL list as well. 
Bug 164501.
 2003-01-10 19:09:46 +00:00
relyea%netscape.com 536df41f30 Declare PK11_TokenRefresh() 2003-01-10 17:53:01 +00:00
relyea%netscape.com 449530f503 Add the ability to generate certs with multiple DNS names. 2003-01-09 22:59:42 +00:00
relyea%netscape.com 5c9c0d249b Remember to include the global: tag 2003-01-09 18:44:26 +00:00
relyea%netscape.com e99b341301 backport NSS 3.7 fixes to the tip. 2003-01-09 18:15:11 +00:00
wtc%netscape.com 22b938bb47 Bug 186201: should handle a null 'environ' pointer, which can happen on 
Solaris if NSS is loaded with dlopen() by an executable linked with the
RTLD_GROUP flag.
 2003-01-09 04:34:31 +00:00
wtc%netscape.com ec08fd394a Bug 187629: do not refresh a CERTCertificate if the same instance of a 
cached cert is added to the collection.
 2003-01-09 04:29:01 +00:00
wtc%netscape.com 39a4a9cc69 Bug 186586: If at NSS shutdown there are still certs in the cert caches, 
cause NSS shutdown and the next NSS initialization to fail but do not
destroy the cert caches (and the crypto context and trust domain containing
them) to avoid a crash if the NSS client destroys the certs later.  New
error codes needed to be added to indicate the failure of NSS shutdown and
NSS initialization due to this cause.
 2003-01-08 21:58:29 +00:00
wtc%netscape.com cd80470fa2 Bug 186586: If at NSS shutdown there are still certs in the cert caches, 
cause NSS shutdown and the next NSS initialization to fail but do not
destroy the cert caches (and the crypto context and trust domain containing
them) to avoid a crash if the NSS client destroys the certs later.  New
error codes needed to be added to indicate the failure of NSS shutdown and
NSS initialization due to this cause.
Modified Files:
	base/errorval.c nss/nssinit.c pki/pki3hack.c pki/pki3hack.h
	pki/pkistore.c pki/pkistore.h pki/tdcache.c pki/trustdomain.c
	util/secerr.h
 2003-01-08 21:48:47 +00:00
wtc%netscape.com 209f994fd3 Need to call SSL_ClearSessionCache before calling NSS_Shutdown. 2003-01-08 21:40:52 +00:00
bishakhabanerjee%netscape.com c50dfa28ad checking return value of NSS_Shutdown. Bug 171263 2003-01-07 22:53:13 +00:00
bishakhabanerjee%netscape.com 1b239a8ed0 checking return value of NSS_Shutdown. Bug 171263 2003-01-07 22:31:36 +00:00