Граф коммитов

3277 Коммитов

Автор SHA1 Сообщение Дата
relyea%netscape.com a32d471f52 [Bug 262274] visibility of PK11_GetCertFromPrivateKey and CERT_DecodeDERCertificate 2004-10-14 22:34:47 +00:00
relyea%netscape.com ed5bd23290 bug 262774 export PK11_GetCertFromPrivateKey publically. 2004-10-14 22:15:21 +00:00
relyea%netscape.com d983d4e3c6 Fix regression where PK11LogoutAll will crash when called when NSS is not initialized. 2004-10-11 22:37:41 +00:00
julien.pierre.bugs%sun.com 5896c71a2f Fix for 259003 - port NSS to Solaris AMD64 . r=wtc 2004-10-11 02:15:42 +00:00
julien.pierre.bugs%sun.com 36ff8fda96 Include nssrwlk.h for NSSRWLock_ funtions 2004-10-07 04:36:03 +00:00
julien.pierre.bugs%sun.com 8c20acb833 Remove unused variable 2004-10-07 04:14:18 +00:00
julien.pierre.bugs%sun.com 3ddff636ae Include secmodi.h for SECMOD_NewListLock 2004-10-07 04:08:16 +00:00
julien.pierre.bugs%sun.com c0aa37e404 Remove unused variable 2004-10-07 04:04:25 +00:00
julien.pierre.bugs%sun.com ef4d32c617 Remove unused variables 2004-10-07 04:03:35 +00:00
julien.pierre.bugs%sun.com 74da174aa1 initialize variable 2004-10-07 03:57:19 +00:00
julien.pierre.bugs%sun.com 5307ea40d4 Remove unused variables 2004-10-07 03:56:37 +00:00
julien.pierre.bugs%sun.com 67fe2aac3d Remove unused variable 2004-10-07 03:55:25 +00:00
julien.pierre.bugs%sun.com 0af43dc3b9 Avoid divide by zero iteration 2004-10-01 03:19:30 +00:00
wchang0222%aol.com bbb1157936 Print the error message if NSS_NoDB_Init fails. 2004-09-30 00:49:36 +00:00
nelsonb%netscape.com a099a58062 Fix bugzilla bug 261496. Absent OPTIONAL CHOICEs should not cause fatal
errors.  Fix printing code to not crash on missing optional nextUpdate.
r=julien.pierre
2004-09-27 22:41:41 +00:00
nelsonb%netscape.com 195c8e1b7b Fix bug 261333. Use the modulus length for the length of the output
buffer, not the length of the input data.  r=julien.pierre
2004-09-24 21:44:20 +00:00
nelsonb%netscape.com 84ec5c7de4 Patch by kinmoz@netscape.net. Fix bug 260882 by clearing the valid
cache flag (named "searchedObjectType") even when the cache was empty.
2004-09-22 01:45:26 +00:00
saul.edwards%sun.com db56a2e608 258779: Add /usr/lib/mps to RPATH for Solaris 10. 2004-09-17 22:25:50 +00:00
saul.edwards%sun.com 634e43cd1e 245518: Add /usr/lib/mps to RPATH for tools. 2004-09-17 21:59:04 +00:00
nelsonb%netscape.com c704c4fcaa Increase the maximum allowable size of the prime field for DH computations.
bug 259229.
2004-09-17 00:34:52 +00:00
saul.edwards%sun.com 15728c6425 Bug 245915: Add NSS_IsInitialized prototype to header. 2004-09-16 16:31:45 +00:00
nelsonb%netscape.com 021426e1be Two new functions: PK11_PubEncryptPKCS1 and PK11_PrivDecryptPKCS1.
Bugzilla bug 258366. Ported from NSS 3.9 branch.
2004-09-08 02:52:15 +00:00
nelsonb%netscape.com 33f837fce0 export CERT_ConvertAndDecodeCertificate and SEC_PKCS7EncodeItem from
libSMIME.  Bugzilla bug 258362.  Fix ported from 3.9 branch.
2004-09-08 01:20:46 +00:00
nelsonb%netscape.com 543ad3460e Add root CA certs for Certum, Comodo, and IPS.
Bugzilla bugs 242040 244982 252132.
2004-09-03 04:35:28 +00:00
wchang0222%aol.com 30a16b5c36 Added a comment explaining how NSS_BUILTINS_LIBRARY_VERSION_MINOR should be
incremented.
2004-08-31 17:39:15 +00:00
wchang0222%aol.com 5d7dc7dab2 Bugzilla bug 252375: added version information to the nssckbi shared
library. r=relyea.
Modified Files: config.mk manifest.mn nssckbi.h
Added Files: ckbiver.c nssckbi.rc
2004-08-31 17:28:50 +00:00
jpierre%netscape.com 3999bc5713 Fix for 254393 - r=nelsonb . PK11_FindKeyByAnyCert returned invalid key objects 2004-08-06 02:24:31 +00:00
jpierre%netscape.com 4f0ae17800 Fix for 249488 - make Single-Threaded mode work 2004-08-03 23:24:37 +00:00
relyea%netscape.com e3b2fc3a46 1) Add time command to time specific functions.
2) improve the help system.
3) bug fixes for arrays.
2004-07-30 00:25:21 +00:00
relyea%netscape.com f54cd1c23e Error strings for new error codes. 2004-07-30 00:19:49 +00:00
relyea%netscape.com a5a2371249 Bugzilla Bug 252702
NSS needs to handle better token insertion and removal.

Applied from patch to NSS 3.9
2004-07-29 23:38:14 +00:00
jpierre%netscape.com f7bdd8a2b3 Fix for 249488 - root cert module requires locking functions in CK_C_INITIALIZE_ARGS . r=ian, sr=relyea 2004-07-29 22:51:00 +00:00
nelsonb%netscape.com f1060d0bfb Correct option parsing, and add missing error messages. 2004-07-28 21:10:07 +00:00
nelsonb%netscape.com 7e38c3777a Support GeneralizeTime in the CRMF library. Bug 219080. r=julien.
Patch by nelson and julien.
2004-07-27 05:06:02 +00:00
relyea%netscape.com 1288ee3b83 Bug 250687
NSS Crashes or leaks Cert references if bad certs are passed up by PKCS #11 modules.
r=nelson
sr=ian
2004-07-21 18:18:05 +00:00
relyea%netscape.com 1e25701255 Backing out pk11cert.c changes (not ready for checkin yet). (revert to 1.133) 2004-07-20 23:04:31 +00:00
relyea%netscape.com 2ceccf402a Fix optimized builds (make tinderbox go green). 2004-07-20 23:02:04 +00:00
relyea%netscape.com 0c874c941c Missed function definition in previous checkin. 2004-07-19 22:37:48 +00:00
relyea%netscape.com 73f15b0963 refactor pk11util, splitting large single files down to a managable size.
bug 246130. The new factor is:

pk11akey.c - asymetric keys constructed from pk11cert.c and pk11skey.c
pk11auth.c - authentication/password management factored from pk11slot.c
pk11cert.c - cert code with private key, crls and trust factored out.
pk11ctx.c -- pkcs11 context code, factored out of pk11skey.c
new pk11func.h -- for backward compatibility.
pk11mech.c - mechanism mapping code, factored mostly from pk11slot.c
pk11nobj.c - netscape objects (crls and trust), factored mostly from pk11cert.c
pk11obj.c - generic object support, factored from pk11skey.c pk11slot.c and
pk11cert.c
pk11priv.h -- private functions factored from pk11func.h
pk11pub.h -- public functions factored from pk11func.h
pk11skey.c - now only symetric key ops; private, public key ops, generic ops
and crypto contexs have been factored out.
pk11slot.c - still slot operations. Authentication, generic object ops,
mechanism mapping has been factored out.

This patch should only have refactoring, no new functions or other changes.
2004-07-19 22:12:38 +00:00
nelsonb%netscape.com 2a84b08103 Use the "c beautifier" (cb) to give this code a common K&R style with
an indentation of 4.  Also rewrap a few strangely wrapped lines.
Bug 249330.
2004-07-16 00:04:47 +00:00
nelsonb%netscape.com c073805446 Apply review feedback to signtool sources. Add test case to QA tests.
Bug 248751.
2004-07-15 22:21:57 +00:00
nelsonb%netscape.com 4ef1db07ed Add -X option to produce signed XPI files for mozilla. Bug 248751.
Path contributed by jeff klawiter <jeff@j-maxx.net>. r=nelson
2004-07-15 00:01:50 +00:00
nelsonb%netscape.com 7a430910a6 Allow subtemplates to have the SEC_ASN1_DYNAMIC flag without asserting.
Bug 245429. Patch 4 of 5.  r=relyea.
2004-07-13 06:02:54 +00:00
nelsonb%netscape.com 5f668e3062 Fix some casts. Wrap some long lines. Remove a bogus assert.
Factor a function call out of the arguments of another function call,
which is mostly to make that code more easily debugged.
This is patch 3 of 5 for bug 245429. r=wtc.
2004-07-13 05:52:24 +00:00
nelsonb%netscape.com d21cac18a0 Function sec_asn1e_write_contents was two functions combined into one,
separated by one huge if-then-else.  They do different things and take
different arguments.  So, I split them into two separate functions:
sec_asn1e_write_contents and sec_asn1e_write_contents_from_buf
the latter of which takes a buf pointer and length argument.
The if statement that chooses between the two is now in the caller.
This is patch 2 of 5 for bug 245429.  r=wtc.
2004-07-13 05:49:48 +00:00
nelsonb%netscape.com 2969f3c7d2 rename "explicit" to "isExplicit" because MSVC6 thinks explicit is a c
keyword.  rename "ignore_stream" to "disallowStreaming" because it
doesn't merely ignore.  rename "ignoresubstream" to "disallowStreaming"
for the same reason.  Patch 1 of 5 for bug 245429. sr=wtc.
2004-07-13 05:44:47 +00:00
nelsonb%netscape.com 9ddfbb482f Greatly improve the output of the PKCS12 encoder. Adds output buffering
to the output callback function that is called by the ASN.1 encoders,
and which feeds into the next PKCS7 encoder in the outward direction.
Bug 210179.  sr=relyea
2004-07-13 05:31:34 +00:00
nelsonb%netscape.com 22bf8a6efd Ensure that the CRMF library always uses a non-null pool pointer when it
calls the ASN1 Decoder.  This prevents leaks.  Bug 178898. r=relyea.
2004-07-13 05:12:31 +00:00
wchang0222%aol.com 1ff5e8c5f0 Bugzilla bug 248981: PKCS #11 modules that are based on older lib/ckfw (for
example, the nssckbi module) save a pointer to the CK_C_INITIALIZE_ARGS
passed to them. So if we pass a pointer to the stack variable moduleArgs,
the pointer will point to a structure that has gone out of scope. To
prevent crashes in these broken modules, we continue to pass a pointer to
the global secmodLockFunctions whenever we can. r=relyea.
2004-07-08 23:23:50 +00:00
wchang0222%aol.com a0ac1ae9b8 Bugzilla bug 249284: removed a duplicate declaration of
CERT_DecodeDERCertificate. r=nelsonb. Thanks to Chris Newman
of Sun for the bug report.
2004-07-07 00:48:53 +00:00
jpierre%netscape.com cb1458d0c2 Fix for 248981 - make SECMOD_LoadPKCS11Module thread safe. r=relyea 2004-07-01 19:20:51 +00:00
nelsonb%netscape.com d7befbead9 Output properly encoded PQGParams. r=wtc. Bug 247738. 2004-07-01 02:07:02 +00:00
jpierre%netscape.com 0919d3c3c1 Fix for 249310 - add option to disable SSL2 in selfserv . r=nelson 2004-07-01 02:06:31 +00:00
nelsonb%netscape.com 91795a0dc5 Treat non-repudiation-only certs as valid signature certs.
Bug 240456.  r=wtc, sr=relyea.
2004-07-01 00:26:00 +00:00
nelsonb%netscape.com c0162bda09 Correct NSS to use the most specific, not most general CN attribute in
a cert subject name.  Bug 197964.  r=wtc.
2004-07-01 00:21:42 +00:00
nelsonb%netscape.com 2f2d7ae1b1 Follow the SSL2 specification more closely in accepting and rejecting
SSL messages.  Previously NSS would reject some it should accept
and vice versa.  Bugscape bug 57121. r=wtc,julien
2004-06-24 02:02:39 +00:00
nelsonb%netscape.com 20fa84590f Fix certutil's ability to read PQG files. Make certutil able to read
the files produced by the command "makepqg -a".  Plug some memory leaks.
r=relyea,vipul  Bug 247739
2004-06-23 22:23:00 +00:00
relyea%netscape.com 2eae511c9e Bug 244914, 244907 r=nelsonb
Add support for unprotected private keys without requiring authentication.
Add support to access application specific PKCS #11 objects through NSS.
2004-06-21 23:01:53 +00:00
nelsonb%netscape.com dbfecf905b Initialize the "type" member in the SECItems returned by
PK11_PQG_ParamGetSeedLen so encoded values will be correct.
Bug 247737. r=relyea.
2004-06-21 19:22:02 +00:00
saul.edwards%sun.com 9c06c058b6 Bug 245518: add RPATH to BUILD_SUN_PKG, add $ORIGIN to rpath 2004-06-19 06:09:03 +00:00
jpierre%netscape.com f0278bb97f Fix for 237934 - nss_InitLock not atomic. r=nelson 2004-06-19 03:21:39 +00:00
jpierre%netscape.com 31d3110d89 Wrap long lines 2004-06-18 02:03:30 +00:00
jpierre%netscape.com 49941ab2ac Restore comment that got removed accidentally. And fix typo in it. 2004-06-18 01:34:11 +00:00
jpierre%netscape.com 65415ee7b0 Fix for 247406 . r=wchang0222,glen.beasley 2004-06-18 01:28:41 +00:00
jpierre%netscape.com 6f9213b48e Fix for 178897 . QuickDER optimizations . r=nelsonb 2004-06-18 00:38:45 +00:00
jpierre%netscape.com 1a0d6033ef Backout part of the QuickDER changes from 178895 . r=relyea 2004-06-17 23:23:59 +00:00
nelsonb%netscape.com 2dd5727f0e Destroy cert references held inside the CMMFCertRepContent struct when
that struct is being destroyed.  Plugs a cert reference leak.
Bug 245420.  r=wtc.
2004-06-17 22:12:34 +00:00
wchang0222%aol.com 97c0ac2a5c Bugzilla bug 233320: pk11_OpenKeyDB should not return SECFailure (not a
CK_RV value).  Removed two unnecessary assignment statements.  r=relyea.
2004-06-11 22:25:13 +00:00
nelsonb%netscape.com 6a6d9eb606 Don't crash when CERT_DestroyCertificate is called with a cert with a
null arena pointer.  Bug 245943. r=julien
2004-06-09 07:47:51 +00:00
nelsonb%netscape.com 364a3b1c62 Fold function definition so editor can find it. 2004-06-09 02:22:38 +00:00
jpierre%netscape.com 15c733be33 Fix for 178895 - QuickDER optimizations. r=relyea 2004-06-05 00:50:32 +00:00
nelsonb%netscape.com bd994e5526 Make crmftest compile and run with NSS 3.10 shared libraries.
Enhance the command line parsing to permit portions of the tests
to be individually selected.  The code still doesn't all run
to completion without errors, but it gets MUCH farther than before.
Bug 244329.
2004-06-03 03:56:48 +00:00
nelsonb%netscape.com ada6a9721e Fix an erroneous assertion. Clean up some other code. Bug 244929.
r= jpierre, wtc.
2004-06-03 03:41:07 +00:00
nelsonb%netscape.com 25a4f88904 Export symbols needed for crmftest. r=relyea. bug 244329. 2004-06-02 22:19:33 +00:00
jpierre%netscape.com 11b39ca2a0 Fix for 244915 . resolve issues from previous patch 2004-06-02 01:56:43 +00:00
jpierre%netscape.com 20952b7c12 Fix for 244915 - r=wtc, misterssl . Correctly build freebl on Solaris 10 2004-06-02 00:40:53 +00:00
bishakhabanerjee%netscape.com 6f4a70ff97 chenged log names to better align them in summary, added SMIME test output
to emailed log summary
2004-05-27 22:09:03 +00:00
nelsonb%netscape.com 46526575bd a) adds the missing code to put stdin into binary mode.
b) add the -i option to the usage message
c) builds addbuiltins with shared libs
   (includes "nssrenam.h" for some symbols)
d) build addbuiltins as part of the normal builds.
2004-05-25 21:47:44 +00:00
jpierre%netscape.com 8b0d042c0c Fix for 244095 - link NSS libraries with -R $ORIGIN on Solaris 2004-05-25 00:13:12 +00:00
nelsonb%netscape.com 599a63402d Fix crash when array member is used as variable. Bug 243655. r=relyea. 2004-05-22 01:24:22 +00:00
nelsonb%netscape.com 9dc64ba0b2 Use "slop time" in nextUpdate validity check for CRLs. Bug 242146.
r=julien.pierre
2004-05-22 01:03:26 +00:00
nelsonb%netscape.com df07cea047 Add missing license block. Wrap long lines. Bug 243580. r=relyea. 2004-05-22 00:56:46 +00:00
bishakhabanerjee%netscape.com 66d76ca008 script to run NISCC tests; cvs pull of NSS and does special build, runs SMIME
and SSL tests, logs results to file, summarizes log results
2004-05-20 00:56:40 +00:00
ian.mcgreer%sun.com 4ef3c0837a certdata.c is checked in and shouldn't be ignored 2004-05-17 20:47:35 +00:00
ian.mcgreer%sun.com 02f1778eca bug 180268, reimplement ssl step-up for builtins 2004-05-17 20:08:38 +00:00
wchang0222%aol.com 922ba661c4 Bugscape bug 57081: If the make variable NISCC_TEST is defined at build
time, add -DNISCC_TEST to the compile command line.  The NISCC_TEST macro
enables special code that's conditionally compiled for NISCC testing.
Modified Files:
	cmd/smimetools/Makefile cmd/smimetools/cmsutil.c
	lib/ssl/config.mk lib/ssl/manifest.mn
2004-05-13 01:29:15 +00:00
relyea%netscape.com 19097be494 scripts for pk11util 2004-05-12 23:49:39 +00:00
ian.mcgreer%sun.com 416fa5ef5e program for generating FIPS algorithm test results 2004-05-12 17:30:31 +00:00
jpierre%netscape.com 3fde3ce243 Fix for 242984 - crash with application having incomplete PRIOMethods. r=nelsonb,wtc 2004-05-11 03:48:25 +00:00
jpierre%netscape.com 9941ae1908 Fix for 240361 - crash in CERT_CheckValidTimes 2004-05-11 02:43:10 +00:00
jpierre%netscape.com 8440778d84 Fix for 202979 . Resolve binary compatibility issue for CERT_ImportCerts . r=wtc, jpierre 2004-05-05 01:15:39 +00:00
relyea%netscape.com c06f7bf9d6 Fix mechanism command. 2004-05-05 00:36:52 +00:00
wchang0222%aol.com 8826e9b9f2 Bugzilla bug 238914: declare namesRunningOffset as unsigned long to avoid
overflow. Fixed a regression introduced by the previous checkin ('nss' is
allowed to be NULL).  Set slotStrings[i] to NULL after freeing to avoid
double-free. r=relyea,nelsonb.
2004-04-30 23:41:44 +00:00
gerv%gerv.net 9d50f0f223 Bug 236613: change to MPL/LGPL/GPL tri-license. Restore Id: lines. 2004-04-27 23:04:40 +00:00
gerv%gerv.net 2cdff0bb4f Bug 236613: change to MPL/LGPL/GPL tri-license. 2004-04-25 15:03:26 +00:00
wchang0222%aol.com b25daac5dc Bugzilla bug 90906: removed unused variable 'size'. The patch is from
Serge GAUTHERIE <gautheri@noos.fr>. r=wtc.
2004-04-21 18:57:51 +00:00
nelsonb%netscape.com d08920202a Change ssl test scripts to invoke tstclnt with the server's FQDN.
Necessary because of fix to bug 234058.
2004-04-08 03:01:02 +00:00
nelsonb%netscape.com 79bd1784c9 Remove code that attempted to compare simple host names in URLs with
FQDNs in certificate host names.  This was insecure.  Bug 234058. r=wtc.
2004-04-08 00:17:46 +00:00
relyea%netscape.com a5a249a333 Fix missing indexes when fetching lengths (get tinderbox working again). 2004-04-07 19:00:08 +00:00
relyea%netscape.com e77b48d527 Bug 239827: Fix race condition in unwrap private key (if target key is symetric). 2004-04-07 01:18:46 +00:00