Граф коммитов

3790 Коммитов

Автор SHA1 Сообщение Дата
wtchang%redhat.com 0a3bf353d3 Bugzilla Bug 333917: the non-x86 code in at least the DES_CBCEn and
DES_EDE3CBCEn functions violates ANSI C's aliasing rules.  So we compile
this file with strict aliasing rules turned off. r=nelsonb.
2006-04-18 17:33:56 +00:00
nelson%bolyard.com fa09229848 Don't add 3 to the user-supplied number of validity months. Bug 333679.
r=neil.williams
2006-04-15 01:00:11 +00:00
julien.pierre.bugs%sun.com 8eb43e8ec2 Fix for bug 262375 . Add clobber_dbm and clobber_nspr targets, as well as nss_clean_all . r=nelson 2006-04-14 22:48:31 +00:00
nelson%bolyard.com b39425fcfa big cleanup of error codes returned by pkcs12 library.
No longer returns SEC_ERROR_NO_MEMORY for every possible error code.
Bug 321584. r=neil.williams
2006-04-14 18:34:44 +00:00
nelson%bolyard.com efdb126901 Fix broken optimized builds, caused by last checkin. Bug 236245. 2006-04-14 00:43:19 +00:00
nelson%bolyard.com c4fb4fa280 Implement TLS Hello extensions for ECC. Bug 236245. r=rrelyea.
This patch has a known problem, choosing ephemeral ECDH curves
according to the wrong (suboptimal, non-FIPS) criteria.
Modified Files: ssl3con.c ssl3ecc.c sslimpl.h
2006-04-13 23:08:18 +00:00
nelson%bolyard.com 1cfdf61890 Add and use new -2 option for strsclnt to disable SSL2 compatible client
hellos, so we can stress test TLS hello extensions.  Bug 333559.
r=julien.pierre,rrelyea
2006-04-13 22:43:31 +00:00
wtchang%redhat.com b95ecf558f Bugzilla Bug 330114: corrected the checks for the PKCS #1 v1.5 padding
string and the length of the data (hash). r=nelsonb,relyea.
2006-04-13 22:12:17 +00:00
julien.pierre.bugs%sun.com 6493a984f5 Fix for 333657 . Increase maximum RSA key size to 8192 bits in freebl. r=nelson 2006-04-12 05:37:52 +00:00
alexei.volkov.bugs%sun.com 258c59ba66 [Bug 332272] add core detection functionality to all.sh; r=nelson 2006-04-12 01:14:27 +00:00
wtchang%redhat.com 90d708c409 Bugzilla Bug 331413: assert that the worker threads empty the jobQ before
they terminate.  Fix a socket leak when the SSL_ImportFD call in
handle_connection fails. r=nelson.bolyard.
2006-04-11 21:12:28 +00:00
nelson%bolyard.com c65c61b8c5 Implement new API for registering and deregistering shutdown callback functions.
Patch by Bob Relyea and Nelson Bolyard. r=rrelyea,nelson  Bug 326482.
2006-04-08 05:11:55 +00:00
nelson%bolyard.com 424fabe58a Bug 333090: CKM_DH_PKCS_KEY_PAIR_GEN always fails. r=nelson, sr=rrelyea
Patch contributed by Andreas.Sterbenz@sun.com
2006-04-08 05:05:01 +00:00
nelson%bolyard.com bbd7fa2247 WORKAROUND: disable all the ECDH_RSA cipher suites tests, since all those
tests require a cert with an EC public key and an RSA signature, and the
test scripts do not presently generate such a cert.
This workaround can be backed out when the real fix is available.
Bug 332222. r=neil.williams
2006-04-08 04:28:32 +00:00
kaie%kuix.de 1c0c7bbeb8 bug 331648, signed/unsigned bug submitting CRMF cert requests
r=rrelyea, sr=nelson
2006-04-07 11:41:18 +00:00
nelson%bolyard.com 1f32c2cf8f Implement generic support for TLS Hello Extensions. Bug 226271. r=vipul 2006-04-07 06:24:07 +00:00
julien.pierre.bugs%sun.com 7ceb91038f Fix for bug 311164 . Initialize stan cert store object early to fix a race condition. r=nelson 2006-04-07 05:49:04 +00:00
julien.pierre.bugs%sun.com b532759c4f Fix for bug 315793 . Make shlibsign run in the OBJDIR rather than the source directory . r=nelson 2006-04-06 06:22:02 +00:00
julien.pierre.bugs%sun.com 7c86f12851 Fix for bug 315798 . run bltest and rsaperf from source directories in the QA . r=nelson 2006-04-06 06:19:41 +00:00
nelson%bolyard.com acfe04a6dd Don't negotiate an ECDH_RSA cipher suite when the server's only ECDH cert
has an ECDSA signature.  bug 332350. r=vipul.gupta.
2006-04-06 04:40:49 +00:00
julien.pierre.bugs%sun.com 51b246188b Partial fix for bug 332348 . Add PR_POLL_EXCEPT to a PR_Poll . Allows tstclnt to wake up if server goes away. r=wtchang 2006-04-06 01:49:03 +00:00
nelson%bolyard.com 53b9b7ff2f Fix shell script error that caused undetected QA failures. Bug 311931.
r=nelson.bolyard,alexei.volkov
2006-04-05 19:35:47 +00:00
nelson%bolyard.com 779a0beabf Add new -i (ignore errors) command line option to strsclnt. Strsclnt now
stops soon after the first error unless the -i option is given.
Strsclnt and tstclnt now look for an environment variable named
NSS_DEBUG_TIMEOUT, and if present, its value is used as a timeout time
for all socket IO operations.  Bug 332348. r=julien.pierre.
2006-04-04 07:31:46 +00:00
nelson%bolyard.com edbca07369 Eliminate duplicated header files in cmd/SSLsample. Bug 332633.
r=julien.pierre
Modified Files: SSLsample/client.mn SSLsample/server.mn lib/manifest.mn
Removed Files:  SSLsample/NSPRerrs.h SSLsample/SECerrs.h SSLsample/SSLerrs.h
2006-04-04 01:56:27 +00:00
glen.beasley%sun.com 482dc1a71e David Baron fix for valgrind report of UMR r=wtchang sr=Nelson 2006-04-04 01:01:51 +00:00
nelson%bolyard.com fecbcf26d6 Define alerts and error codes for TLS Hello extensions. Bug 226271.
r=julien.pierre
2006-04-04 00:32:27 +00:00
rrelyea%redhat.com c152a5f5fa Bug 332381 pk12util fails to import key/cert onto LunaSA HSM
r=nelson
2006-03-31 21:35:37 +00:00
gerv%gerv.net 41fd37565a Bug 236613: change to MPL/LGPL/GPL tri-license. 2006-03-31 04:41:00 +00:00
rrelyea%redhat.com 2cef28020c bug 309701 Softtoken C_CreateObject() should not require
CKA_NETSCAPE_DB attribute to be present

r=alexei
2006-03-31 00:38:48 +00:00
rrelyea%redhat.com f6290f423b From Bug 331279.
Free ECDHE Ephemeral key. Fixes server-side leak.
r=julien r=alexei
2006-03-30 21:07:22 +00:00
julien.pierre.bugs%sun.com 39ee00370d Fix for 330068 . Be more verbose in strsclnt error cases 2006-03-29 22:35:44 +00:00
alexei.volkov.bugs%sun.com 209577ded2 331515: selfserv Bus error on 3DES ciphersuites; r=julien, sr=nelson 2006-03-29 07:23:40 +00:00
julien.pierre.bugs%sun.com b6762d713e Remove comment in ssl.sh that messes execution. Part of fix for bug 331413. 2006-03-29 06:54:56 +00:00
julien.pierre.bugs%sun.com 01fe9ff1bf Fix for bug 330068 . Increment counter variable atomically. Be more verbose. r=nelson 2006-03-29 05:05:09 +00:00
julien.pierre.bugs%sun.com bd3cb7e1ef Partial fix for bug 331413 . Allow selfserv to be tested for reference leaks. r=nelson 2006-03-29 05:03:10 +00:00
glen.beasley%sun.com 0224b3a860 318970 wtc fix for RSA fipstest using RSA_HashSign r=neilW sr= brelyea 2006-03-25 23:45:23 +00:00
rrelyea%redhat.com c8e770c69d Bug 321350 Implement optimized code for NIST Suite B elliptic curves
r=douglas r=vipul
2006-03-24 22:55:51 +00:00
nelson%bolyard.com a9beb655f0 Backout changes for bug 321350
Implement optimized code for NIST Suite B elliptic curves
Those changes broke the build on Solaris.  r=Sheriff Nelson
2006-03-24 09:08:24 +00:00
rrelyea%redhat.com e72ce470d4 321350 Implement optimized code for NIST Suite B elliptic curves
r=douglas.
2006-03-23 19:55:37 +00:00
rrelyea%redhat.com e13e6cc7f7 Bug 238051 Enable SSL session reuse for ECC cipher suites
r=nelson r=thomas.

patch in bug + white space changes suggested by nelson.
2006-03-22 19:18:30 +00:00
rrelyea%redhat.com 2bfdfe5969 Updated previous patch with douglas's input. (still bug 323817
Truncation of hashes for ECDSA should be done at bit level, not octet level).
r= vipul r=douglas
2006-03-22 19:02:06 +00:00
rrelyea%redhat.com 01ef3de28a Bug 273637 3 locks in softoken have unsafe initialization
r=alexi r=julien
2006-03-21 19:36:53 +00:00
rrelyea%redhat.com dd7e2a2cf6 Correct bug entry:
25683 EC param parsing error not propagated correctly
r=andreas.
2006-03-21 19:33:52 +00:00
rrelyea%redhat.com 6a7da6374e Backing out previous changes that invalid or incorrect log entries for this
patch.
2006-03-21 19:30:10 +00:00
rrelyea%redhat.com e182cdf8e2 *** empty log message *** 2006-03-21 19:23:30 +00:00
rrelyea%redhat.com c385e5088d Bug 273637 3 locks in softoken have unsafe initialization
r=alexi r=julien
2006-03-21 02:28:48 +00:00
nelson%bolyard.com 6c95b75b6a Avoid stack overflow while generating primes. Bug 310145. r=wtchang 2006-03-19 05:09:30 +00:00
rrelyea%redhat.com 5f90fef71c Bug 238051 Enable SSL session reuse for ECC cipher suites
r=nelson
2006-03-17 21:15:09 +00:00
rrelyea%redhat.com 14c38aa668 Bug 329072 client sometimes fails to authenticate despite having cert
r= nelson
2006-03-17 20:44:23 +00:00
rrelyea%redhat.com 9e18a1acf3 Bug 323817 Truncation of hashes for ECDSA should be done at bit level, not octet level
r=vipul.gupta@sun.com
2006-03-17 16:58:06 +00:00