gecko-dev/security/svrcore
richm%stanfordalumni.org 943071919b added Windows build instructions - fixed spec file - added patch file for broken coreconf location.mk 2006-02-01 23:39:01 +00:00
..
INSTALL added Windows build instructions - fixed spec file - added patch file for broken coreconf location.mk 2006-02-01 23:39:01 +00:00
Makefile added .spec file for building RPM - package is svrcore-devel - a script svrcore-config for getting cflag and ldflag information, and a .pc file for pkg-config 2006-01-06 18:02:35 +00:00
README added Windows build instructions - fixed spec file - added patch file for broken coreconf location.mk 2006-02-01 23:39:01 +00:00
alt.c Comment formatting changes. 2005-03-08 18:52:50 +00:00
cache.c Comment formatting changes. 2005-03-08 18:52:50 +00:00
coreconf-location.patch added Windows build instructions - fixed spec file - added patch file for broken coreconf location.mk 2006-02-01 23:39:01 +00:00
errors.c Comment formatting changes. 2005-03-08 18:52:50 +00:00
file.c Comment formatting changes. 2005-03-08 18:52:50 +00:00
key.ico Bugzilla Bug 282610: added the files used in conjunction with ntgetpin.c. 2005-03-02 02:56:41 +00:00
logo.ico Bugzilla Bug 282610: added the files used in conjunction with ntgetpin.c. 2005-03-02 02:56:41 +00:00
manifest.mn Upgraded to NSPR 4.6 and NSS 3.10.2. 2005-11-16 01:46:01 +00:00
ntgetpin.c Comment formatting changes. 2005-03-08 18:52:50 +00:00
ntgetpin.rc Bugzilla Bug 282610: added the files used in conjunction with ntgetpin.c. 2005-03-02 02:56:41 +00:00
ntresource.h Bugzilla Bug 282610: added the files used in conjunction with ntgetpin.c. 2005-03-02 02:56:41 +00:00
pin.c Comment formatting changes. 2005-03-08 18:52:50 +00:00
pk11.c Comment formatting changes. 2005-03-08 18:52:50 +00:00
std.c Comment formatting changes. 2005-03-08 18:52:50 +00:00
svrcore.h Comment formatting changes. 2005-03-08 18:52:50 +00:00
svrcore.pc.in added .spec file for building RPM - package is svrcore-devel - a script svrcore-config for getting cflag and ldflag information, and a .pc file for pkg-config 2006-01-06 18:02:35 +00:00
svrcore.spec added Windows build instructions - fixed spec file - added patch file for broken coreconf location.mk 2006-02-01 23:39:01 +00:00
user.c Comment formatting changes. 2005-03-08 18:52:50 +00:00

README

The Netscape svrcore library

Terry Hayes wrote the Netscape svrcore library in 1998.
Valerie Chu wrote the ntgetpin.c and related files.

svrcore used to contain two major parts.

The first part is what we released on mozilla.  It is a kind of
object-oriented package for handling PIN requests from NSS. The
idea was to provide a standard way for servers to allow PIN input
from a file or from the terminal.  There is also a PIN handler
that caches the PIN in memory after encrypting it with a key on
a device (such as a Fortezza card). This allowed a server to
restart without having to reenter the PIN. However since the PIN
is encrypted, a core dump would not expose it.  In addition,
removing the device would also make the PIN inaccessible.

The files are:

svrcore.h - API definition
alt.c - allows two possible PIN request methods to be used (say
        file and then terminal)
cache.c - caches the result from another PIN request method
errors.c - error text
file.c - reads the PIN from a specified file
ntgetpin.c - Windows version of a user prompt for PIN
ntgetpin.rc - Windows resource script for ntgetpin.c
ntresource.h - a generated include file used by ntgetpin.rc
key.ico - an icon used by ntgetpin.rc
logo.ico - an icon used by ntgetpin.rc
pin.c - functions to register a PIN request object with NSS
pk11.c - implementation of the encrypted in-memory caching
std.c - a "standard" PIN object that satisfies requests from a
        file or the terminal and allows caching if desired.
user.c - prompts the user for the PIN

Note: the pk11.c file (secure PIN store) is a pretty good example
of how to encrypt/decrypt with NSS.

There was a second component of svrcore that handled export policy
configuration.  It allowed patching of a single executable (single
program build) to create the export and domestic versions of a
server.  This code was discontinued after the export policy changes.

The LDAP C SDK tools use svrcore.  They also implemented their
own PIN object to allow command line PIN entry.  The directory
server also implemented its own PIN object to allow a watchdog
process to cache the PIN and restart the server.

See INSTALL for build instructions