relyea%netscape.com
a32d471f52
[Bug 262274] visibility of PK11_GetCertFromPrivateKey and CERT_DecodeDERCertificate
2004-10-14 22:34:47 +00:00
relyea%netscape.com
ed5bd23290
bug 262774 export PK11_GetCertFromPrivateKey publically.
2004-10-14 22:15:21 +00:00
relyea%netscape.com
d983d4e3c6
Fix regression where PK11LogoutAll will crash when called when NSS is not initialized.
2004-10-11 22:37:41 +00:00
julien.pierre.bugs%sun.com
5896c71a2f
Fix for 259003 - port NSS to Solaris AMD64 . r=wtc
2004-10-11 02:15:42 +00:00
julien.pierre.bugs%sun.com
36ff8fda96
Include nssrwlk.h for NSSRWLock_ funtions
2004-10-07 04:36:03 +00:00
julien.pierre.bugs%sun.com
8c20acb833
Remove unused variable
2004-10-07 04:14:18 +00:00
julien.pierre.bugs%sun.com
3ddff636ae
Include secmodi.h for SECMOD_NewListLock
2004-10-07 04:08:16 +00:00
julien.pierre.bugs%sun.com
c0aa37e404
Remove unused variable
2004-10-07 04:04:25 +00:00
julien.pierre.bugs%sun.com
ef4d32c617
Remove unused variables
2004-10-07 04:03:35 +00:00
julien.pierre.bugs%sun.com
74da174aa1
initialize variable
2004-10-07 03:57:19 +00:00
julien.pierre.bugs%sun.com
5307ea40d4
Remove unused variables
2004-10-07 03:56:37 +00:00
julien.pierre.bugs%sun.com
67fe2aac3d
Remove unused variable
2004-10-07 03:55:25 +00:00
julien.pierre.bugs%sun.com
0af43dc3b9
Avoid divide by zero iteration
2004-10-01 03:19:30 +00:00
wchang0222%aol.com
bbb1157936
Print the error message if NSS_NoDB_Init fails.
2004-09-30 00:49:36 +00:00
nelsonb%netscape.com
a099a58062
Fix bugzilla bug 261496. Absent OPTIONAL CHOICEs should not cause fatal
...
errors. Fix printing code to not crash on missing optional nextUpdate.
r=julien.pierre
2004-09-27 22:41:41 +00:00
nelsonb%netscape.com
195c8e1b7b
Fix bug 261333. Use the modulus length for the length of the output
...
buffer, not the length of the input data. r=julien.pierre
2004-09-24 21:44:20 +00:00
nelsonb%netscape.com
84ec5c7de4
Patch by kinmoz@netscape.net. Fix bug 260882 by clearing the valid
...
cache flag (named "searchedObjectType") even when the cache was empty.
2004-09-22 01:45:26 +00:00
saul.edwards%sun.com
db56a2e608
258779: Add /usr/lib/mps to RPATH for Solaris 10.
2004-09-17 22:25:50 +00:00
saul.edwards%sun.com
634e43cd1e
245518: Add /usr/lib/mps to RPATH for tools.
2004-09-17 21:59:04 +00:00
nelsonb%netscape.com
c704c4fcaa
Increase the maximum allowable size of the prime field for DH computations.
...
bug 259229.
2004-09-17 00:34:52 +00:00
saul.edwards%sun.com
15728c6425
Bug 245915: Add NSS_IsInitialized prototype to header.
2004-09-16 16:31:45 +00:00
nelsonb%netscape.com
021426e1be
Two new functions: PK11_PubEncryptPKCS1 and PK11_PrivDecryptPKCS1.
...
Bugzilla bug 258366. Ported from NSS 3.9 branch.
2004-09-08 02:52:15 +00:00
nelsonb%netscape.com
33f837fce0
export CERT_ConvertAndDecodeCertificate and SEC_PKCS7EncodeItem from
...
libSMIME. Bugzilla bug 258362. Fix ported from 3.9 branch.
2004-09-08 01:20:46 +00:00
nelsonb%netscape.com
543ad3460e
Add root CA certs for Certum, Comodo, and IPS.
...
Bugzilla bugs 242040 244982 252132.
2004-09-03 04:35:28 +00:00
wchang0222%aol.com
30a16b5c36
Added a comment explaining how NSS_BUILTINS_LIBRARY_VERSION_MINOR should be
...
incremented.
2004-08-31 17:39:15 +00:00
wchang0222%aol.com
5d7dc7dab2
Bugzilla bug 252375: added version information to the nssckbi shared
...
library. r=relyea.
Modified Files: config.mk manifest.mn nssckbi.h
Added Files: ckbiver.c nssckbi.rc
2004-08-31 17:28:50 +00:00
jpierre%netscape.com
3999bc5713
Fix for 254393 - r=nelsonb . PK11_FindKeyByAnyCert returned invalid key objects
2004-08-06 02:24:31 +00:00
jpierre%netscape.com
4f0ae17800
Fix for 249488 - make Single-Threaded mode work
2004-08-03 23:24:37 +00:00
relyea%netscape.com
e3b2fc3a46
1) Add time command to time specific functions.
...
2) improve the help system.
3) bug fixes for arrays.
2004-07-30 00:25:21 +00:00
relyea%netscape.com
f54cd1c23e
Error strings for new error codes.
2004-07-30 00:19:49 +00:00
relyea%netscape.com
a5a2371249
Bugzilla Bug 252702
...
NSS needs to handle better token insertion and removal.
Applied from patch to NSS 3.9
2004-07-29 23:38:14 +00:00
jpierre%netscape.com
f7bdd8a2b3
Fix for 249488 - root cert module requires locking functions in CK_C_INITIALIZE_ARGS . r=ian, sr=relyea
2004-07-29 22:51:00 +00:00
nelsonb%netscape.com
f1060d0bfb
Correct option parsing, and add missing error messages.
2004-07-28 21:10:07 +00:00
nelsonb%netscape.com
7e38c3777a
Support GeneralizeTime in the CRMF library. Bug 219080. r=julien.
...
Patch by nelson and julien.
2004-07-27 05:06:02 +00:00
relyea%netscape.com
1288ee3b83
Bug 250687
...
NSS Crashes or leaks Cert references if bad certs are passed up by PKCS #11 modules.
r=nelson
sr=ian
2004-07-21 18:18:05 +00:00
relyea%netscape.com
1e25701255
Backing out pk11cert.c changes (not ready for checkin yet). (revert to 1.133)
2004-07-20 23:04:31 +00:00
relyea%netscape.com
2ceccf402a
Fix optimized builds (make tinderbox go green).
2004-07-20 23:02:04 +00:00
relyea%netscape.com
0c874c941c
Missed function definition in previous checkin.
2004-07-19 22:37:48 +00:00
relyea%netscape.com
73f15b0963
refactor pk11util, splitting large single files down to a managable size.
...
bug 246130. The new factor is:
pk11akey.c - asymetric keys constructed from pk11cert.c and pk11skey.c
pk11auth.c - authentication/password management factored from pk11slot.c
pk11cert.c - cert code with private key, crls and trust factored out.
pk11ctx.c -- pkcs11 context code, factored out of pk11skey.c
new pk11func.h -- for backward compatibility.
pk11mech.c - mechanism mapping code, factored mostly from pk11slot.c
pk11nobj.c - netscape objects (crls and trust), factored mostly from pk11cert.c
pk11obj.c - generic object support, factored from pk11skey.c pk11slot.c and
pk11cert.c
pk11priv.h -- private functions factored from pk11func.h
pk11pub.h -- public functions factored from pk11func.h
pk11skey.c - now only symetric key ops; private, public key ops, generic ops
and crypto contexs have been factored out.
pk11slot.c - still slot operations. Authentication, generic object ops,
mechanism mapping has been factored out.
This patch should only have refactoring, no new functions or other changes.
2004-07-19 22:12:38 +00:00
nelsonb%netscape.com
2a84b08103
Use the "c beautifier" (cb) to give this code a common K&R style with
...
an indentation of 4. Also rewrap a few strangely wrapped lines.
Bug 249330.
2004-07-16 00:04:47 +00:00
nelsonb%netscape.com
c073805446
Apply review feedback to signtool sources. Add test case to QA tests.
...
Bug 248751.
2004-07-15 22:21:57 +00:00
nelsonb%netscape.com
4ef1db07ed
Add -X option to produce signed XPI files for mozilla. Bug 248751.
...
Path contributed by jeff klawiter <jeff@j-maxx.net>. r=nelson
2004-07-15 00:01:50 +00:00
nelsonb%netscape.com
7a430910a6
Allow subtemplates to have the SEC_ASN1_DYNAMIC flag without asserting.
...
Bug 245429. Patch 4 of 5. r=relyea.
2004-07-13 06:02:54 +00:00
nelsonb%netscape.com
5f668e3062
Fix some casts. Wrap some long lines. Remove a bogus assert.
...
Factor a function call out of the arguments of another function call,
which is mostly to make that code more easily debugged.
This is patch 3 of 5 for bug 245429. r=wtc.
2004-07-13 05:52:24 +00:00
nelsonb%netscape.com
d21cac18a0
Function sec_asn1e_write_contents was two functions combined into one,
...
separated by one huge if-then-else. They do different things and take
different arguments. So, I split them into two separate functions:
sec_asn1e_write_contents and sec_asn1e_write_contents_from_buf
the latter of which takes a buf pointer and length argument.
The if statement that chooses between the two is now in the caller.
This is patch 2 of 5 for bug 245429. r=wtc.
2004-07-13 05:49:48 +00:00
nelsonb%netscape.com
2969f3c7d2
rename "explicit" to "isExplicit" because MSVC6 thinks explicit is a c
...
keyword. rename "ignore_stream" to "disallowStreaming" because it
doesn't merely ignore. rename "ignoresubstream" to "disallowStreaming"
for the same reason. Patch 1 of 5 for bug 245429. sr=wtc.
2004-07-13 05:44:47 +00:00
nelsonb%netscape.com
9ddfbb482f
Greatly improve the output of the PKCS12 encoder. Adds output buffering
...
to the output callback function that is called by the ASN.1 encoders,
and which feeds into the next PKCS7 encoder in the outward direction.
Bug 210179. sr=relyea
2004-07-13 05:31:34 +00:00
nelsonb%netscape.com
22bf8a6efd
Ensure that the CRMF library always uses a non-null pool pointer when it
...
calls the ASN1 Decoder. This prevents leaks. Bug 178898. r=relyea.
2004-07-13 05:12:31 +00:00
wchang0222%aol.com
1ff5e8c5f0
Bugzilla bug 248981: PKCS #11 modules that are based on older lib/ckfw (for
...
example, the nssckbi module) save a pointer to the CK_C_INITIALIZE_ARGS
passed to them. So if we pass a pointer to the stack variable moduleArgs,
the pointer will point to a structure that has gone out of scope. To
prevent crashes in these broken modules, we continue to pass a pointer to
the global secmodLockFunctions whenever we can. r=relyea.
2004-07-08 23:23:50 +00:00
wchang0222%aol.com
a0ac1ae9b8
Bugzilla bug 249284: removed a duplicate declaration of
...
CERT_DecodeDERCertificate. r=nelsonb. Thanks to Chris Newman
of Sun for the bug report.
2004-07-07 00:48:53 +00:00
jpierre%netscape.com
cb1458d0c2
Fix for 248981 - make SECMOD_LoadPKCS11Module thread safe. r=relyea
2004-07-01 19:20:51 +00:00
nelsonb%netscape.com
d7befbead9
Output properly encoded PQGParams. r=wtc. Bug 247738.
2004-07-01 02:07:02 +00:00
jpierre%netscape.com
0919d3c3c1
Fix for 249310 - add option to disable SSL2 in selfserv . r=nelson
2004-07-01 02:06:31 +00:00
nelsonb%netscape.com
91795a0dc5
Treat non-repudiation-only certs as valid signature certs.
...
Bug 240456. r=wtc, sr=relyea.
2004-07-01 00:26:00 +00:00
nelsonb%netscape.com
c0162bda09
Correct NSS to use the most specific, not most general CN attribute in
...
a cert subject name. Bug 197964. r=wtc.
2004-07-01 00:21:42 +00:00
nelsonb%netscape.com
2f2d7ae1b1
Follow the SSL2 specification more closely in accepting and rejecting
...
SSL messages. Previously NSS would reject some it should accept
and vice versa. Bugscape bug 57121. r=wtc,julien
2004-06-24 02:02:39 +00:00
nelsonb%netscape.com
20fa84590f
Fix certutil's ability to read PQG files. Make certutil able to read
...
the files produced by the command "makepqg -a". Plug some memory leaks.
r=relyea,vipul Bug 247739
2004-06-23 22:23:00 +00:00
relyea%netscape.com
2eae511c9e
Bug 244914, 244907 r=nelsonb
...
Add support for unprotected private keys without requiring authentication.
Add support to access application specific PKCS #11 objects through NSS.
2004-06-21 23:01:53 +00:00
nelsonb%netscape.com
dbfecf905b
Initialize the "type" member in the SECItems returned by
...
PK11_PQG_ParamGetSeedLen so encoded values will be correct.
Bug 247737. r=relyea.
2004-06-21 19:22:02 +00:00
saul.edwards%sun.com
9c06c058b6
Bug 245518: add RPATH to BUILD_SUN_PKG, add $ORIGIN to rpath
2004-06-19 06:09:03 +00:00
jpierre%netscape.com
f0278bb97f
Fix for 237934 - nss_InitLock not atomic. r=nelson
2004-06-19 03:21:39 +00:00
jpierre%netscape.com
31d3110d89
Wrap long lines
2004-06-18 02:03:30 +00:00
jpierre%netscape.com
49941ab2ac
Restore comment that got removed accidentally. And fix typo in it.
2004-06-18 01:34:11 +00:00
jpierre%netscape.com
65415ee7b0
Fix for 247406 . r=wchang0222,glen.beasley
2004-06-18 01:28:41 +00:00
jpierre%netscape.com
6f9213b48e
Fix for 178897 . QuickDER optimizations . r=nelsonb
2004-06-18 00:38:45 +00:00
jpierre%netscape.com
1a0d6033ef
Backout part of the QuickDER changes from 178895 . r=relyea
2004-06-17 23:23:59 +00:00
nelsonb%netscape.com
2dd5727f0e
Destroy cert references held inside the CMMFCertRepContent struct when
...
that struct is being destroyed. Plugs a cert reference leak.
Bug 245420. r=wtc.
2004-06-17 22:12:34 +00:00
wchang0222%aol.com
97c0ac2a5c
Bugzilla bug 233320: pk11_OpenKeyDB should not return SECFailure (not a
...
CK_RV value). Removed two unnecessary assignment statements. r=relyea.
2004-06-11 22:25:13 +00:00
nelsonb%netscape.com
6a6d9eb606
Don't crash when CERT_DestroyCertificate is called with a cert with a
...
null arena pointer. Bug 245943. r=julien
2004-06-09 07:47:51 +00:00
nelsonb%netscape.com
364a3b1c62
Fold function definition so editor can find it.
2004-06-09 02:22:38 +00:00
jpierre%netscape.com
15c733be33
Fix for 178895 - QuickDER optimizations. r=relyea
2004-06-05 00:50:32 +00:00
nelsonb%netscape.com
bd994e5526
Make crmftest compile and run with NSS 3.10 shared libraries.
...
Enhance the command line parsing to permit portions of the tests
to be individually selected. The code still doesn't all run
to completion without errors, but it gets MUCH farther than before.
Bug 244329.
2004-06-03 03:56:48 +00:00
nelsonb%netscape.com
ada6a9721e
Fix an erroneous assertion. Clean up some other code. Bug 244929.
...
r= jpierre, wtc.
2004-06-03 03:41:07 +00:00
nelsonb%netscape.com
25a4f88904
Export symbols needed for crmftest. r=relyea. bug 244329.
2004-06-02 22:19:33 +00:00
jpierre%netscape.com
11b39ca2a0
Fix for 244915 . resolve issues from previous patch
2004-06-02 01:56:43 +00:00
jpierre%netscape.com
20952b7c12
Fix for 244915 - r=wtc, misterssl . Correctly build freebl on Solaris 10
2004-06-02 00:40:53 +00:00
bishakhabanerjee%netscape.com
6f4a70ff97
chenged log names to better align them in summary, added SMIME test output
...
to emailed log summary
2004-05-27 22:09:03 +00:00
nelsonb%netscape.com
46526575bd
a) adds the missing code to put stdin into binary mode.
...
b) add the -i option to the usage message
c) builds addbuiltins with shared libs
(includes "nssrenam.h" for some symbols)
d) build addbuiltins as part of the normal builds.
2004-05-25 21:47:44 +00:00
jpierre%netscape.com
8b0d042c0c
Fix for 244095 - link NSS libraries with -R $ORIGIN on Solaris
2004-05-25 00:13:12 +00:00
nelsonb%netscape.com
599a63402d
Fix crash when array member is used as variable. Bug 243655. r=relyea.
2004-05-22 01:24:22 +00:00
nelsonb%netscape.com
9dc64ba0b2
Use "slop time" in nextUpdate validity check for CRLs. Bug 242146.
...
r=julien.pierre
2004-05-22 01:03:26 +00:00
nelsonb%netscape.com
df07cea047
Add missing license block. Wrap long lines. Bug 243580. r=relyea.
2004-05-22 00:56:46 +00:00
bishakhabanerjee%netscape.com
66d76ca008
script to run NISCC tests; cvs pull of NSS and does special build, runs SMIME
...
and SSL tests, logs results to file, summarizes log results
2004-05-20 00:56:40 +00:00
ian.mcgreer%sun.com
4ef3c0837a
certdata.c is checked in and shouldn't be ignored
2004-05-17 20:47:35 +00:00
ian.mcgreer%sun.com
02f1778eca
bug 180268, reimplement ssl step-up for builtins
2004-05-17 20:08:38 +00:00
wchang0222%aol.com
922ba661c4
Bugscape bug 57081: If the make variable NISCC_TEST is defined at build
...
time, add -DNISCC_TEST to the compile command line. The NISCC_TEST macro
enables special code that's conditionally compiled for NISCC testing.
Modified Files:
cmd/smimetools/Makefile cmd/smimetools/cmsutil.c
lib/ssl/config.mk lib/ssl/manifest.mn
2004-05-13 01:29:15 +00:00
relyea%netscape.com
19097be494
scripts for pk11util
2004-05-12 23:49:39 +00:00
ian.mcgreer%sun.com
416fa5ef5e
program for generating FIPS algorithm test results
2004-05-12 17:30:31 +00:00
jpierre%netscape.com
3fde3ce243
Fix for 242984 - crash with application having incomplete PRIOMethods. r=nelsonb,wtc
2004-05-11 03:48:25 +00:00
jpierre%netscape.com
9941ae1908
Fix for 240361 - crash in CERT_CheckValidTimes
2004-05-11 02:43:10 +00:00
jpierre%netscape.com
8440778d84
Fix for 202979 . Resolve binary compatibility issue for CERT_ImportCerts . r=wtc, jpierre
2004-05-05 01:15:39 +00:00
relyea%netscape.com
c06f7bf9d6
Fix mechanism command.
2004-05-05 00:36:52 +00:00
wchang0222%aol.com
8826e9b9f2
Bugzilla bug 238914: declare namesRunningOffset as unsigned long to avoid
...
overflow. Fixed a regression introduced by the previous checkin ('nss' is
allowed to be NULL). Set slotStrings[i] to NULL after freeing to avoid
double-free. r=relyea,nelsonb.
2004-04-30 23:41:44 +00:00
gerv%gerv.net
9d50f0f223
Bug 236613: change to MPL/LGPL/GPL tri-license. Restore Id: lines.
2004-04-27 23:04:40 +00:00
gerv%gerv.net
2cdff0bb4f
Bug 236613: change to MPL/LGPL/GPL tri-license.
2004-04-25 15:03:26 +00:00
wchang0222%aol.com
b25daac5dc
Bugzilla bug 90906: removed unused variable 'size'. The patch is from
...
Serge GAUTHERIE <gautheri@noos.fr>. r=wtc.
2004-04-21 18:57:51 +00:00
nelsonb%netscape.com
d08920202a
Change ssl test scripts to invoke tstclnt with the server's FQDN.
...
Necessary because of fix to bug 234058.
2004-04-08 03:01:02 +00:00
nelsonb%netscape.com
79bd1784c9
Remove code that attempted to compare simple host names in URLs with
...
FQDNs in certificate host names. This was insecure. Bug 234058. r=wtc.
2004-04-08 00:17:46 +00:00
relyea%netscape.com
a5a249a333
Fix missing indexes when fetching lengths (get tinderbox working again).
2004-04-07 19:00:08 +00:00
relyea%netscape.com
e77b48d527
Bug 239827: Fix race condition in unwrap private key (if target key is symetric).
2004-04-07 01:18:46 +00:00