Граф коммитов

74 Коммитов

Автор SHA1 Сообщение Дата
nelsonb%netscape.com 7ae1c3135d Reduce warnings on Unix platforms that don't like bitfields in chars. 2001-06-09 19:45:22 +00:00
nelsonb%netscape.com f41192132c Fix two bugs found in nightly QA. On Solaris/x86, don't assert that the
sid cache entry is a multiple of 8 bytes long.  On OSF1, reduce the
maximum number of POSIX semaphores so it doesn't exceed the per-process
limit of 256.
2001-06-09 19:30:21 +00:00
nelsonb%netscape.com 26c1355d94 Change ssl_Time() to use time() instead of PR_Now on systems that have it. 2001-06-09 03:20:13 +00:00
nelsonb%netscape.com 9509618196 3 Changes:
1. New SSL server session cache implementation that uses finer grained
locking to reduce lock contention, and does 128-way associative caching.
2. rename symbol SSL_SESSIONID_BYTES to SSL2_SESSIONID_BYTES.
3. Work around compiler bug on Solaris i386.
Modified Files:
    manifest.mn sslcon.c sslimpl.h sslsecur.c sslsnce.c
2001-06-09 03:18:09 +00:00
nelsonb%netscape.com 6166732e49 Portable POSIX-like unnamed semaphores that work in process-shared memory. 2001-06-08 02:56:31 +00:00
nelsonb%netscape.com 6bfd47f3e1 Fix bug that caused version number to be wrong in SSL3 client hellos
when restarting an SSL3 (not TLS) session.  (no bug number)
2001-06-05 00:26:37 +00:00
wtc%netscape.com 70ba3f51b2 Bugzilla bug #77199: Make NSS build under OS/2. Thanks to Javier
Pedemonte <pedemont@us.ibm.com> for the patch.
Modified Files:
        coreconf/OS2.mk coreconf/rules.mk coreconf/ruleset.mk
        nss/lib/freebl/Makefile nss/lib/pkcs12/p12.h nss/lib/ssl/ssl.h
        nss/lib/util/secport.h
2001-05-21 21:25:32 +00:00
nelsonb%netscape.com 6b57d89463 Add a workaround for bug 80092. If the last write returned WOULDBLOCK
and data is now buffered for sending and the application calls PR_Poll
to poll on read, poll on write also.  This way, if the socket becomes
writable, the application's read attempt will send (more of) the buffered
write data.
2001-05-18 20:44:35 +00:00
nelsonb%netscape.com da41cda585 Only disable Nagle delays on those platforms that benefit from doing so. 2001-05-10 02:37:59 +00:00
nelsonb%netscape.com 975e24163f Disable TCP Nagle delays on SSL sockets for NSS 3.3. Bug 67898.
Modified Files:
	ssldef.c sslimpl.h sslsecur.c sslsock.c
2001-05-08 23:12:34 +00:00
nelsonb%netscape.com e49455a04c Eliminate cause of assertion failure that occurs when SSL is not the top
protocol on the socket's stack.
2001-04-26 21:53:11 +00:00
nelsonb%netscape.com 9bd14a2bc5 Merge in NSS 3.2.1 changes. (VersionCheck function) 2001-04-11 22:52:09 +00:00
nelsonb%netscape.com f8e2a2a948 Implementation of 5 DHE ciphersuites, client side only.
Contributed by Dr Stephen Henson <stephen.henson@gemplus.com>
2001-04-11 00:29:18 +00:00
nelsonb%netscape.com 661c26b99c Fix a couple of memory leaks that occur in rare error paths. 2001-03-31 02:49:59 +00:00
nelsonb%netscape.com 3ef58c1b72 Fix bug in SSL_ResetHandshake introduced in last checkin. 2001-03-20 00:39:02 +00:00
nelsonb%netscape.com 46c15355d3 Reinterpret the READ and WRITE poll flags depending on the state of the
socket and the SSL handshake.  Rename the badly named "connected" flag.
Bugzilla bugs 56924, 56926, 66706.
Modified Files:
    ssl3con.c sslauth.c sslcon.c ssldef.c sslgathr.c sslimpl.h
    sslsecur.c sslsock.c
2001-03-16 23:26:06 +00:00
relyea%netscape.com b22a7c1f09 bug 70992 patches to build 4.2 BSD 2001-03-13 19:02:05 +00:00
nelsonb%netscape.com ecb09e90e8 Modify ssl_FindSocket() to set error PR_BAD_DESCRIPTOR_ERROR when it
cannot find the SSL layer on the specified PRFileDesc. Ensure all
callers detect when ssl_FindSocket returns NULL and handle it properly.
Bug 68241. Reviewed by jgmyers and relyea.
Modified Files:
 	prelib.c sslauth.c sslsecur.c sslsock.c
2001-02-09 02:11:31 +00:00
nelsonb%netscape.com 7dcf6f9722 Make SSL API consistent in using SECStatus as return value for functions
that return only values in that enumeration.  Bug 68097. R&A = relyea.
Modified Files:
 	lib/ssl/ssl.h lib/ssl/sslauth.c lib/ssl/sslsecur.c
 	lib/ssl/sslsnce.c lib/ssl/sslsock.c cmd/selfserv/selfserv.c
 	cmd/strsclnt/strsclnt.c
2001-02-09 00:32:14 +00:00
wtc%netscape.com 782588654c Need to include "prthread.h" for the PRThread type. 2001-02-07 17:50:43 +00:00
nelsonb%netscape.com 720374d8c3 When half-duplex applications (e.g. one thread per socket, doing alternate
reading and writing) call PR_Send and PR_Recv with a non-infinite timeout
value, use that value for both underlying read and write operations.
Fixes bug 67402.  Reviewed by Wan-Teh.
2001-02-07 02:06:05 +00:00
nelsonb%netscape.com 4207bb1bdb Coalesce the final Finished message in the SSL handshake and the first
record of application data into a single write, when possible, to avoid
TCP's "Nagle" delays.  Fixes bug 67898.  r&a: wtc.  Modified Files:
	ssl3con.c sslimpl.h sslsecur.c sslsock.c
2001-02-07 00:34:56 +00:00
wtc%netscape.com a83eb31b00 Bugzilla bug #63768: removed references to the obsolete PURE_LIBRARY,
HAVE_PURIFY etc. make variables in NSS files.  Reviewed by nelson Bolyard.
Modified Files:
	cmd/platrules.mk cmd/crmf-cgi/config.mk cmd/crmftest/config.mk
	cmd/lib/config.mk cmd/zlib/config.mk lib/base/config.mk
	lib/certdb/config.mk lib/certhigh/config.mk lib/ckfw/config.mk
	lib/crmf/config.mk lib/cryptohi/config.mk
	lib/fortcrypt/swfort/config.mk lib/freebl/config.mk
	lib/jar/config.mk lib/nss/config.mk lib/pk11wrap/config.mk
	lib/pkcs12/config.mk lib/pkcs7/config.mk lib/smime/config.mk
	lib/softoken/config.mk lib/ssl/config.mk lib/util/config.mk
2001-02-02 01:49:57 +00:00
wtc%netscape.com 899e61b6cb Bugzilla bug #62855: added stubs for the SSL session cache functions so
that selfserv can link without unresolved symbols on OS/2.
2001-01-31 23:43:47 +00:00
wtc%netscape.com 104ac36a8d Bugzilla bug #66367: rename the internal NSS functions that we have to
export from the NSS shared library.  Reviewed by Bob Relyea.
Modified Files:
	nss/lib/certdb/certdb.c nss/lib/certdb/pcertdb.c
	nss/lib/nss/Makefile nss/lib/nss/manifest.mn
	nss/lib/nss/nss.def nss/lib/pk11wrap/pk11skey.c
	nss/lib/pkcs12/p12d.c nss/lib/pkcs12/p12e.c
	nss/lib/pkcs12/p12local.c nss/lib/pkcs7/certread.c
	nss/lib/pkcs7/p7decode.c nss/lib/pkcs7/p7encode.c
	nss/lib/smime/cmsutil.c nss/lib/softoken/secpkcs5.c
	nss/lib/ssl/ssl3con.c nss/lib/ssl/sslcon.c
	nss/lib/ssl/sslnonce.c nss/lib/ssl/sslsnce.c
	nss/lib/util/nsslocks.c
Added Files:
	nss/lib/nss/nssrenam.h
2001-01-30 21:02:28 +00:00
relyea%netscape.com 5f1c5255b8 Bug 65902 Add OSF/1 to the OS's that can restrict symbols in shared libraries 2001-01-19 07:50:58 +00:00
wtc%netscape.com c33e0a8553 Add library version info to the NSS, S/MIME, and SSL shared libraries.
Define the NSS version macros and add NSS_VersionCheck in nss.h.
Add linker option to record internal name of shared libraries.
Add Windows resource files.  Add rcs and sccs id strings that can be
retrieved with 'ident' and 'what'.
Modified Files:
	coreconf/HP-UX.mk coreconf/OSF1.mk coreconf/SunOS5.mk
        coreconf/WIN954.0.mk coreconf/WINNT4.0.mk coreconf/WINNT5.0.mk
	coreconf/rules.mk nss/lib/nss/config.mk
	nss/lib/nss/manifest.mn nss/lib/nss/nss.h
	nss/lib/nss/nssinit.c nss/lib/smime/config.mk
	nss/lib/smime/manifest.mn nss/lib/ssl/config.mk
	nss/lib/ssl/manifest.mn
Added Files:
	nss/lib/nss/nss.rc nss/lib/nss/nssver.c nss/lib/smime/smime.rc
	nss/lib/smime/smimever.c nss/lib/ssl/ssl.rc
	nss/lib/ssl/sslver.c
2001-01-18 20:29:10 +00:00
wtc%netscape.com 6f7422a77a Bugzilla bug #65416: assign values explicitly to enumeration constants.
The same values that the compiler would assign are assigned, with only
one exception (cmmfNoPKIStatus in cmmft.h).  This is patch id=22555,
reviewed by Nelson Bolyard.
2001-01-18 16:36:43 +00:00
nelsonb%netscape.com edc48f136d Send SSL 3.x alert records when a version mismatch occurs.
Use the other party's version number to decide which alert to send.
Bug 65142.  R&A: relyea.
2001-01-13 02:32:39 +00:00
nelsonb%netscape.com 14c87961d5 Add implementation of SSL_RSA_WITH_RC4_128_SHA SSL3 cipher suite,
which is not enabled by default.  Bug 59795.
2001-01-13 02:05:15 +00:00
nelsonb%netscape.com d5ae266115 Remove all vestiges of old pre-NSS socks client implementation from NSS.
Bug 51471.
2001-01-13 01:52:59 +00:00
relyea%netscape.com b81edc1838 Add HP to the platforms that handle restricted symbols 2001-01-07 00:25:29 +00:00
relyea%netscape.com a1caf9ee0d Conform to the new .def rules 2001-01-06 23:52:11 +00:00
nelsonb%netscape.com 800d49e219 Remove 8 deprecated functions from export list. 2001-01-06 23:10:30 +00:00
relyea%netscape.com 69531a060f Merge UNIX and Win Data types 2001-01-06 21:36:59 +00:00
nelsonb%netscape.com 1962fdcb4f Remove declarations of SOCKS support functions, which have never worked
in NSS 3.x and are not supported.  Ifdef out declarations of deprecated
functions, since they are not exported by ssl3.dll.
2001-01-06 20:56:40 +00:00
relyea%netscape.com c3228676cf 1) Add AIX to the exportted symbols controlled plaform.
2) reduce the exported symbol list down to one
2001-01-06 01:59:03 +00:00
nelsonb%netscape.com f4895bd017 Use _WIN32 instead of _WINDOWS in windows-dependent ifdefs. 2001-01-05 23:53:38 +00:00
nelsonb%netscape.com 1311ab52d4 Changes to deal with exporting data from Windows DLLs.
SECHashObjects[] is no longer exported.
New function HASH_GetHashObject returns pointer to selected const object.
SSL statistics are now in a structure whose address is obtained via a
call to SSL_GetStatistics().
On NT, the new symbol NSS_USE_STATIC_LIBS must be declared in programs
that use the static SSL library.
Also, propagate "const" declaration for SECHashObjects.
2001-01-05 01:38:26 +00:00
wtc%netscape.com 4c72980500 Bugzilla bug #64238: removed the unnecessary inclusion of mcom_db.h from
cryptohi.h, pk11func.h, secpkcs7.h, and cms.h.  Some files now need to
include <errno.h>.  They were including <errno.h> indirectly through
mcom_db.h.
Modified Files:
	cmd/atob/atob.c cmd/btoa/btoa.c cmd/derdump/derdump.c
	lib/cryptohi/cryptohi.h lib/pk11wrap/pk11func.h
	lib/pkcs7/secpkcs7.h lib/smime/cms.h lib/ssl/sslsnce.c
2001-01-04 00:44:30 +00:00
larryh%netscape.com 351f30a205 Bugzilla: 64132. NSS lock instrumentation 2001-01-03 19:51:22 +00:00
wtc%netscape.com 1e4d956b10 Added the LIBRARY statements to the .DEF files.
Modified files: nss.def, smime.def, and ssl.def.
2001-01-03 01:31:10 +00:00
wtc%netscape.com ed14a2aca7 Use mapfiles when building the nss, smime, and ssl shared libraries on
Solaris and Linux.
Modified files: nss/config.mk smime/config.mk ssl/config.mk
2000-12-29 07:13:20 +00:00
wtc%netscape.com 4f92128074 Added mapfiles for libnss3.so, libsmime.so, and libssl3.so. The linkers
on Solaris and Linux support mapfiles (also called version scripts).
Added Files:
    nss/mapfile smime/mapfile ssl/mapfile
2000-12-29 06:07:06 +00:00
wtc%netscape.com f77af3ca2a I found that the Windows linker 'link' pulls from an archive library only
the object files needed to resolve referenced symbols, so we will need to
link with the objects directly as we do on Unix.  As a result, nss3.dll
needs to export more (PKCS7) symbols, needed by the new PKCS12 objects
that are linked into smime3.dll.
Modified Files:
    coreconf/rules.mk nss/lib/nss/config.mk
    nss/lib/smime/config.mk nss/lib/ssl/config.mk
2000-12-29 02:47:16 +00:00
wtc%netscape.com 007933d882 Built nss3.dll, smime3.dll, and ssl3.dll on Windows. Note that we do
not want the "32" in the DLL names that coreconf adds by default.  We
use module-definition (.DEF) files to control the exported symbols.
Made pkcs7 part of nss3.dll to temporarily work around circular dependency
between nss3.dll and smime3.dll (certread.c depends on some PKCS7 symbols).
Modified files: lib/nss/config.mk, lib/smime/config.mk, lib/ssl/config.mk
2000-12-29 01:16:56 +00:00
wtc%netscape.com e424fb6173 Added Windows module-definition (.DEF) files for nss, smime, and ssl
shared libraries.
Added files: nss.def, smime.def, ssl.def
2000-12-29 00:57:17 +00:00
relyea%netscape.com 065da8f734 Shared library changes.
Three directories pull the NSS libraries together into a three shared libaries:
nss, ssl, and smime. Symbols need to be exported by the DLL from the imported
libraries are defined in XXX/XXXsym.c Library linkage is controlled by
XXX/config.mk
2000-12-22 17:16:24 +00:00
nelsonb%netscape.com 8c2b42042f In ssl3_GatherData, the value of gs->inbuf.len was incorrect during the
GS_HEADER state.  It should be correct in all states.
In ssl_DestroyGather, prior to freeing the buffers, the code zeroed out
the ciphertext buffer.  It now zeros out the plaintext buffer instead.
2000-12-02 00:54:01 +00:00
nelsonb%netscape.com 686aa7a151 Release the SpecRead Lock before returning in an error path.
This bug was found while reading code looking for a different bug.
2000-11-10 01:36:26 +00:00