Граф коммитов

5049 Коммитов

Автор SHA1 Сообщение Дата
darin%meer.net 189ba5e5c4 eliminating uses of deprecated nsComponentManager:: methods (bug 267040), r=bsmedberg 2004-11-01 18:50:36 +00:00
julien.pierre.bugs%sun.com 358d31e347 Fix for 266940 . increase MAX_THREADS in selfserv 2004-10-31 00:22:56 +00:00
julien.pierre.bugs%sun.com 504b389434 Fix for 266206 . close only up to 64k descriptors. 2004-10-29 06:14:22 +00:00
julien.pierre.bugs%sun.com 781aca838b Fix for bug 262192 . assert and check attribute ptr 2004-10-24 18:31:27 +00:00
julien.pierre.bugs%sun.com 464720d125 Fix for bug 265707 - SECMOD_FindSlot always returns NULL. r=relyea 2004-10-24 18:25:04 +00:00
julien.pierre.bugs%sun.com 0571dde1e9 Fix for 265708. - count should be CK_ULONG 2004-10-23 20:23:50 +00:00
julien.pierre.bugs%sun.com c2ba47a939 Fix for 265504 - cmsutil dumps core with invalid option set. r=wtc 2004-10-22 22:39:47 +00:00
wchang0222%aol.com 0e502115b8 Bugzilla bug 265686: the 'name' argument to PK11_FindSlotByName should be
const char *.  The patch is contributed by timeless@bemail.org. r=wtc.
Modified files: pk11pub.h pk11slot.c
2004-10-22 22:13:45 +00:00
glen.beasley%sun.com 613c73fc0a 220223 TokenException caused by left over cert8.db 2004-10-22 00:00:51 +00:00
christophe.ravel.bugs%sun.com f7f7257c13 238319: Sun packages changes. 2004-10-20 19:45:57 +00:00
wchang0222%aol.com da662e60b3 Bugzilla bug 240784: checked in a temporary workaround for the fix for
bug 240784 that breaks OS/2 tinderbox.  The problem seems to be that OS/2
file system is case insensitive, so nsinstall won't change the file name
of an existing DLL in mozilla/dist/$(OBJDIR)/lib, but gmake is case
sensitive, and gmake can't find a rule to build softokn3.chk from because
the softokn3 DLL in mozilla/dist/$(OBJDIR)/lib doesn't have the right name.
2004-10-20 17:24:53 +00:00
ginn.chen%sun.com 8018de015e Bug 258244 View page info dialog size too small for https site
patch by leon.sha@sun.com r=neil sr=neil
2004-10-18 06:59:34 +00:00
relyea%netscape.com e93a53498f [Bug 262274] visibility of PK11_GetCertFromPrivateKey and CERT_DecodeDERCertificate 2004-10-14 22:34:47 +00:00
relyea%netscape.com e56b27e7a7 bug 262774 export PK11_GetCertFromPrivateKey publically. 2004-10-14 22:15:21 +00:00
wchang0222%aol.com 140228c846 Bugzilla bug 264257: added GetCert and LRA Pop witness controls to CMC.
The code is contributed by Christine Ho of AOL.  r=wtc.
Added Files: GetCert.java LraPopWitness.java
2004-10-13 23:35:39 +00:00
glen.beasley%sun.com 428ccbac52 181540 support SHA-256, SHA-384, SHA-512 2004-10-12 23:24:40 +00:00
christophe.ravel.bugs%sun.com ea68779909 238319: Sun packages changes. 2004-10-12 22:37:12 +00:00
christophe.ravel.bugs%sun.com 7dd5f656a6 238319: Sun packages changes. 2004-10-12 17:54:47 +00:00
relyea%netscape.com 5be4b0f4b4 Fix regression where PK11LogoutAll will crash when called when NSS is not initialized. 2004-10-11 22:37:41 +00:00
julien.pierre.bugs%sun.com e6651557ec Fix for 259003 - port NSS to Solaris AMD64 . r=wtc 2004-10-11 02:15:42 +00:00
neil%parkwaycc.co.uk 5601db241c Switch load handlers to setting document.title (as per bug 126903 setting the title attribute no longer works) b=261267 r=jst sr=shaver 2004-10-09 13:01:45 +00:00
christophe.ravel.bugs%sun.com 02a2ebdc30 238319: Sun packages changes. 2004-10-09 01:53:26 +00:00
jst%mozilla.jstenback.com 0c400c441c Fixing bug 262689. Don't get stuck in view-source mode when a view-source URI is visited. r=caillon@gmail.com, sr=dveditz@cruzio.com 2004-10-08 22:58:16 +00:00
christophe.ravel.bugs%sun.com 419a87f6ec 238319: Sun packages changes. 2004-10-08 04:16:06 +00:00
julien.pierre.bugs%sun.com 69a7452f8e Include nssrwlk.h for NSSRWLock_ funtions 2004-10-07 04:36:03 +00:00
julien.pierre.bugs%sun.com ff3b02711f Remove unused variable 2004-10-07 04:14:18 +00:00
julien.pierre.bugs%sun.com e5604f6a11 Include secmodi.h for SECMOD_NewListLock 2004-10-07 04:08:16 +00:00
julien.pierre.bugs%sun.com 604d7f6c98 Remove unused variable 2004-10-07 04:04:25 +00:00
julien.pierre.bugs%sun.com 61e303f6e7 Remove unused variables 2004-10-07 04:03:35 +00:00
julien.pierre.bugs%sun.com fc043a3854 initialize variable 2004-10-07 03:57:19 +00:00
julien.pierre.bugs%sun.com ed405e7ea1 Remove unused variables 2004-10-07 03:56:37 +00:00
julien.pierre.bugs%sun.com acc95e4dd9 Remove unused variable 2004-10-07 03:55:25 +00:00
christophe.ravel.bugs%sun.com 0c439940ef 238319: Sun packages changes. 2004-10-06 21:49:45 +00:00
saul.edwards%sun.com f00c3e60ba 208193: Add enableTLS, enableTLSDefault APIs. 2004-10-01 16:42:24 +00:00
julien.pierre.bugs%sun.com 1fce2635d0 Avoid divide by zero iteration 2004-10-01 03:19:30 +00:00
wchang0222%aol.com 202405c65b Print the error message if NSS_NoDB_Init fails. 2004-09-30 00:49:36 +00:00
nelsonb%netscape.com 5178c6777b Fix bugzilla bug 261496. Absent OPTIONAL CHOICEs should not cause fatal
errors.  Fix printing code to not crash on missing optional nextUpdate.
r=julien.pierre
2004-09-27 22:41:41 +00:00
nelsonb%netscape.com ebadd0ad21 Fix bug 261333. Use the modulus length for the length of the output
buffer, not the length of the input data.  r=julien.pierre
2004-09-24 21:44:20 +00:00
christophe.ravel.bugs%sun.com 32b4f5eaea NSS 3.9.3 / JSS 4.0 release candidate.
Change NSS Beta flag to false
Change JSS Beta flag to false

Code freeze.
2004-09-22 21:56:36 +00:00
nelsonb%netscape.com e4191760ba Patch by kinmoz@netscape.net. Fix bug 260882 by clearing the valid
cache flag (named "searchedObjectType") even when the cache was empty.
2004-09-22 01:45:26 +00:00
glen.beasley%sun.com 8b09c31544 258666 JDK 1.5 made enum a keyword 2004-09-21 18:16:14 +00:00
saul.edwards%sun.com d50f77aa5b 258699: Add finalize method to CipherContentProxy class. 2004-09-20 17:11:55 +00:00
saul.edwards%sun.com 035652083f 258779: Add /usr/lib/mps to RPATH for Solaris 10. 2004-09-17 22:25:50 +00:00
saul.edwards%sun.com ca0a1ce2ad 245518: Add /usr/lib/mps to RPATH for tools. 2004-09-17 21:59:04 +00:00
nelsonb%netscape.com 5f3c5e717c Increase the maximum allowable size of the prime field for DH computations.
bug 259229.
2004-09-17 00:34:52 +00:00
saul.edwards%sun.com a72892ef68 Bug 245915: Add NSS_IsInitialized prototype to header. 2004-09-16 16:31:45 +00:00
glen.beasley%sun.com ddff876c72 224566 JVM crashes due to socketAccept timeout 2004-09-09 22:53:31 +00:00
nelsonb%netscape.com 85d9ad67fc Two new functions: PK11_PubEncryptPKCS1 and PK11_PrivDecryptPKCS1.
Bugzilla bug 258366. Ported from NSS 3.9 branch.
2004-09-08 02:52:15 +00:00
nelsonb%netscape.com 11b916c95a export CERT_ConvertAndDecodeCertificate and SEC_PKCS7EncodeItem from
libSMIME.  Bugzilla bug 258362.  Fix ported from 3.9 branch.
2004-09-08 01:20:46 +00:00
kjh-5727%comcast.net d023625a0e Bug 232068: security should use newer nsIPrefService APIs instead of nsIPref. Patch by Mikael Parknert (mikael@parknert.se), r=bienvenu, sr=darin. 2004-09-07 18:54:02 +00:00
glen.beasley%sun.com 843eb0e40a 244865 MEM Leak in callbacks.c using SSL_RevealURL 2004-09-03 18:32:03 +00:00
glen.beasley%sun.com f4dcb125f4 244881 Mem leak in SSLSocket getStatus 2004-09-03 17:15:12 +00:00
nelsonb%netscape.com 24904acb6f Add root CA certs for Certum, Comodo, and IPS.
Bugzilla bugs 242040 244982 252132.
2004-09-03 04:35:28 +00:00
wchang0222%aol.com bad8733fd8 Added a comment explaining how NSS_BUILTINS_LIBRARY_VERSION_MINOR should be
incremented.
2004-08-31 17:39:15 +00:00
wchang0222%aol.com 9bb982aa69 Bugzilla bug 252375: added version information to the nssckbi shared
library. r=relyea.
Modified Files: config.mk manifest.mn nssckbi.h
Added Files: ckbiver.c nssckbi.rc
2004-08-31 17:28:50 +00:00
dbaron%dbaron.org ce98b93dff A user who wants to see the security confirmation (as opposed to alert) dialogs shouldn't need to check the checkbox every time (for Firefox values of default prefs). b=245655 r+sr=bryner 2004-08-27 22:10:26 +00:00
wchang0222%aol.com 7ff2579a00 Bugzilla bug 244231: white space changes to conform to NSS's coding style.
Modified Files:
	WIN954.0.mk WINCE3.0.mk WINNT3.51.mk WINNT4.0.mk WINNT5.0.mk
	WINNT5.1.mk
2004-08-27 00:33:40 +00:00
wchang0222%aol.com c8d6d27ebc Bugzilla bug 244231: added new make variable MOZ_DEBUG_SYMBOLS which
generates debug symbols for optimized builds in PDB files.  Also took the
opportunity to remove -DEBUGTYPE:CV, which is the default and will be
removed in MSVC .NET 2005.  The patch is contributed by Brian Ryner of IBM
<bryner@brianryner.com>. r=wtc.
Modified Files:
	WIN32.mk WIN954.0.mk WINCE3.0.mk WINNT3.51.mk WINNT4.0.mk
	WINNT5.0.mk WINNT5.1.mk
2004-08-26 23:47:10 +00:00
glen.beasley%sun.com 0e5da067d5 BugId 251635 jss4.jar needs to load libjss4 2004-08-25 18:05:04 +00:00
christophe.ravel.bugs%sun.com 1466e099f5 238319: Sun packages changes. 2004-08-23 21:09:13 +00:00
jpierre%netscape.com d6e93928ed Fix for 254393 - r=nelsonb . PK11_FindKeyByAnyCert returned invalid key objects 2004-08-06 02:24:31 +00:00
jpierre%netscape.com 5b46cda86f Fix for 249488 - make Single-Threaded mode work 2004-08-03 23:24:37 +00:00
relyea%netscape.com c2b70291da 1) Add time command to time specific functions.
2) improve the help system.
3) bug fixes for arrays.
2004-07-30 00:25:21 +00:00
relyea%netscape.com b4b4a3f900 Error strings for new error codes. 2004-07-30 00:19:49 +00:00
relyea%netscape.com e715f98c50 Bugzilla Bug 252702
NSS needs to handle better token insertion and removal.

Applied from patch to NSS 3.9
2004-07-29 23:38:14 +00:00
jpierre%netscape.com 14456163f2 Fix for 249488 - root cert module requires locking functions in CK_C_INITIALIZE_ARGS . r=ian, sr=relyea 2004-07-29 22:51:00 +00:00
christophe.ravel.bugs%sun.com bb366dc102 238319: Sun packages changes. 2004-07-29 18:43:00 +00:00
nelsonb%netscape.com 20e64eb7e5 Correct option parsing, and add missing error messages. 2004-07-28 21:10:07 +00:00
kaie%kuix.de 491abff18f b=249004 Do not import invalid/untrusted certs, prevent a DoS that disables SSL connections to trusted peers.
r=relyea sr=jst/brendan
2004-07-28 00:31:37 +00:00
jst%mozilla.jstenback.com 282f75a3f0 Fixing bug 253121. Make wyciwyg channels and documents carry the source channels security info. r=darin@meer.net, sr=bzbarsky@mit.edu 2004-07-28 00:26:58 +00:00
nelsonb%netscape.com c55043fc52 Support GeneralizeTime in the CRMF library. Bug 219080. r=julien.
Patch by nelson and julien.
2004-07-27 05:06:02 +00:00
christophe.ravel.bugs%sun.com 4380067b18 238319: Sun packages changes. 2004-07-22 17:52:04 +00:00
christophe.ravel.bugs%sun.com d96ede69ac 238319: Sun packages changes. 2004-07-21 23:23:41 +00:00
relyea%netscape.com 7e82fd4194 Bug 250687
NSS Crashes or leaks Cert references if bad certs are passed up by PKCS #11 modules.
r=nelson
sr=ian
2004-07-21 18:18:05 +00:00
relyea%netscape.com 57260fe853 Backing out pk11cert.c changes (not ready for checkin yet). (revert to 1.133) 2004-07-20 23:04:31 +00:00
relyea%netscape.com 950ffdabc7 Fix optimized builds (make tinderbox go green). 2004-07-20 23:02:04 +00:00
glen.beasley%sun.com b3719b51cb 251635 upgrading to JSS to 4.0 2004-07-20 20:39:25 +00:00
relyea%netscape.com c5e993c9fd Missed function definition in previous checkin. 2004-07-19 22:37:48 +00:00
relyea%netscape.com d0af60d089 refactor pk11util, splitting large single files down to a managable size.
bug 246130. The new factor is:

pk11akey.c - asymetric keys constructed from pk11cert.c and pk11skey.c
pk11auth.c - authentication/password management factored from pk11slot.c
pk11cert.c - cert code with private key, crls and trust factored out.
pk11ctx.c -- pkcs11 context code, factored out of pk11skey.c
new pk11func.h -- for backward compatibility.
pk11mech.c - mechanism mapping code, factored mostly from pk11slot.c
pk11nobj.c - netscape objects (crls and trust), factored mostly from pk11cert.c
pk11obj.c - generic object support, factored from pk11skey.c pk11slot.c and
pk11cert.c
pk11priv.h -- private functions factored from pk11func.h
pk11pub.h -- public functions factored from pk11func.h
pk11skey.c - now only symetric key ops; private, public key ops, generic ops
and crypto contexs have been factored out.
pk11slot.c - still slot operations. Authentication, generic object ops,
mechanism mapping has been factored out.

This patch should only have refactoring, no new functions or other changes.
2004-07-19 22:12:38 +00:00
nelsonb%netscape.com 371f19c6b9 Use the "c beautifier" (cb) to give this code a common K&R style with
an indentation of 4.  Also rewrap a few strangely wrapped lines.
Bug 249330.
2004-07-16 00:04:47 +00:00
nelsonb%netscape.com 2ed86b689a Apply review feedback to signtool sources. Add test case to QA tests.
Bug 248751.
2004-07-15 22:21:57 +00:00
nelsonb%netscape.com 07c4feeb45 Add -X option to produce signed XPI files for mozilla. Bug 248751.
Path contributed by jeff klawiter <jeff@j-maxx.net>. r=nelson
2004-07-15 00:01:50 +00:00
nelsonb%netscape.com 98afc62590 Allow subtemplates to have the SEC_ASN1_DYNAMIC flag without asserting.
Bug 245429. Patch 4 of 5.  r=relyea.
2004-07-13 06:02:54 +00:00
nelsonb%netscape.com 55aa7ccc43 Fix some casts. Wrap some long lines. Remove a bogus assert.
Factor a function call out of the arguments of another function call,
which is mostly to make that code more easily debugged.
This is patch 3 of 5 for bug 245429. r=wtc.
2004-07-13 05:52:24 +00:00
nelsonb%netscape.com f7b4d4bbb7 Function sec_asn1e_write_contents was two functions combined into one,
separated by one huge if-then-else.  They do different things and take
different arguments.  So, I split them into two separate functions:
sec_asn1e_write_contents and sec_asn1e_write_contents_from_buf
the latter of which takes a buf pointer and length argument.
The if statement that chooses between the two is now in the caller.
This is patch 2 of 5 for bug 245429.  r=wtc.
2004-07-13 05:49:48 +00:00
nelsonb%netscape.com f961aed641 rename "explicit" to "isExplicit" because MSVC6 thinks explicit is a c
keyword.  rename "ignore_stream" to "disallowStreaming" because it
doesn't merely ignore.  rename "ignoresubstream" to "disallowStreaming"
for the same reason.  Patch 1 of 5 for bug 245429. sr=wtc.
2004-07-13 05:44:47 +00:00
nelsonb%netscape.com 55151bc829 Greatly improve the output of the PKCS12 encoder. Adds output buffering
to the output callback function that is called by the ASN.1 encoders,
and which feeds into the next PKCS7 encoder in the outward direction.
Bug 210179.  sr=relyea
2004-07-13 05:31:34 +00:00
nelsonb%netscape.com 33f87dfef9 Ensure that the CRMF library always uses a non-null pool pointer when it
calls the ASN1 Decoder.  This prevents leaks.  Bug 178898. r=relyea.
2004-07-13 05:12:31 +00:00
wchang0222%aol.com 409574ee15 Bugzilla bug 248981: PKCS #11 modules that are based on older lib/ckfw (for
example, the nssckbi module) save a pointer to the CK_C_INITIALIZE_ARGS
passed to them. So if we pass a pointer to the stack variable moduleArgs,
the pointer will point to a structure that has gone out of scope. To
prevent crashes in these broken modules, we continue to pass a pointer to
the global secmodLockFunctions whenever we can. r=relyea.
2004-07-08 23:23:50 +00:00
wchang0222%aol.com f3c6f7397f Bugzilla bug 249284: removed a duplicate declaration of
CERT_DecodeDERCertificate. r=nelsonb. Thanks to Chris Newman
of Sun for the bug report.
2004-07-07 00:48:53 +00:00
jpierre%netscape.com 4bfc6dca87 Fix for 248981 - make SECMOD_LoadPKCS11Module thread safe. r=relyea 2004-07-01 19:20:51 +00:00
nelsonb%netscape.com e054aef7bf Output properly encoded PQGParams. r=wtc. Bug 247738. 2004-07-01 02:07:02 +00:00
jpierre%netscape.com 309d389ab8 Fix for 249310 - add option to disable SSL2 in selfserv . r=nelson 2004-07-01 02:06:31 +00:00
nelsonb%netscape.com 23b32f634b Treat non-repudiation-only certs as valid signature certs.
Bug 240456.  r=wtc, sr=relyea.
2004-07-01 00:26:00 +00:00
nelsonb%netscape.com 3bc297e56b Correct NSS to use the most specific, not most general CN attribute in
a cert subject name.  Bug 197964.  r=wtc.
2004-07-01 00:21:42 +00:00
nelsonb%netscape.com 1d3641f999 Follow the SSL2 specification more closely in accepting and rejecting
SSL messages.  Previously NSS would reject some it should accept
and vice versa.  Bugscape bug 57121. r=wtc,julien
2004-06-24 02:02:39 +00:00
christophe.ravel.bugs%sun.com 3e7b859eec 238319: Sun packages changes. 2004-06-24 01:18:12 +00:00
nelsonb%netscape.com 35ab44f5ac Fix certutil's ability to read PQG files. Make certutil able to read
the files produced by the command "makepqg -a".  Plug some memory leaks.
r=relyea,vipul  Bug 247739
2004-06-23 22:23:00 +00:00
relyea%netscape.com 501db85dbc Bug 244914, 244907 r=nelsonb
Add support for unprotected private keys without requiring authentication.
Add support to access application specific PKCS #11 objects through NSS.
2004-06-21 23:01:53 +00:00
nelsonb%netscape.com 3b8151e40a Initialize the "type" member in the SECItems returned by
PK11_PQG_ParamGetSeedLen so encoded values will be correct.
Bug 247737. r=relyea.
2004-06-21 19:22:02 +00:00