Граф коммитов

3277 Коммитов

Автор SHA1 Сообщение Дата
jpierre%netscape.com cb1458d0c2 Fix for 248981 - make SECMOD_LoadPKCS11Module thread safe. r=relyea 2004-07-01 19:20:51 +00:00
nelsonb%netscape.com d7befbead9 Output properly encoded PQGParams. r=wtc. Bug 247738. 2004-07-01 02:07:02 +00:00
jpierre%netscape.com 0919d3c3c1 Fix for 249310 - add option to disable SSL2 in selfserv . r=nelson 2004-07-01 02:06:31 +00:00
nelsonb%netscape.com 91795a0dc5 Treat non-repudiation-only certs as valid signature certs.
Bug 240456.  r=wtc, sr=relyea.
2004-07-01 00:26:00 +00:00
nelsonb%netscape.com c0162bda09 Correct NSS to use the most specific, not most general CN attribute in
a cert subject name.  Bug 197964.  r=wtc.
2004-07-01 00:21:42 +00:00
nelsonb%netscape.com 2f2d7ae1b1 Follow the SSL2 specification more closely in accepting and rejecting
SSL messages.  Previously NSS would reject some it should accept
and vice versa.  Bugscape bug 57121. r=wtc,julien
2004-06-24 02:02:39 +00:00
nelsonb%netscape.com 20fa84590f Fix certutil's ability to read PQG files. Make certutil able to read
the files produced by the command "makepqg -a".  Plug some memory leaks.
r=relyea,vipul  Bug 247739
2004-06-23 22:23:00 +00:00
relyea%netscape.com 2eae511c9e Bug 244914, 244907 r=nelsonb
Add support for unprotected private keys without requiring authentication.
Add support to access application specific PKCS #11 objects through NSS.
2004-06-21 23:01:53 +00:00
nelsonb%netscape.com dbfecf905b Initialize the "type" member in the SECItems returned by
PK11_PQG_ParamGetSeedLen so encoded values will be correct.
Bug 247737. r=relyea.
2004-06-21 19:22:02 +00:00
saul.edwards%sun.com 9c06c058b6 Bug 245518: add RPATH to BUILD_SUN_PKG, add $ORIGIN to rpath 2004-06-19 06:09:03 +00:00
jpierre%netscape.com f0278bb97f Fix for 237934 - nss_InitLock not atomic. r=nelson 2004-06-19 03:21:39 +00:00
jpierre%netscape.com 31d3110d89 Wrap long lines 2004-06-18 02:03:30 +00:00
jpierre%netscape.com 49941ab2ac Restore comment that got removed accidentally. And fix typo in it. 2004-06-18 01:34:11 +00:00
jpierre%netscape.com 65415ee7b0 Fix for 247406 . r=wchang0222,glen.beasley 2004-06-18 01:28:41 +00:00
jpierre%netscape.com 6f9213b48e Fix for 178897 . QuickDER optimizations . r=nelsonb 2004-06-18 00:38:45 +00:00
jpierre%netscape.com 1a0d6033ef Backout part of the QuickDER changes from 178895 . r=relyea 2004-06-17 23:23:59 +00:00
nelsonb%netscape.com 2dd5727f0e Destroy cert references held inside the CMMFCertRepContent struct when
that struct is being destroyed.  Plugs a cert reference leak.
Bug 245420.  r=wtc.
2004-06-17 22:12:34 +00:00
wchang0222%aol.com 97c0ac2a5c Bugzilla bug 233320: pk11_OpenKeyDB should not return SECFailure (not a
CK_RV value).  Removed two unnecessary assignment statements.  r=relyea.
2004-06-11 22:25:13 +00:00
nelsonb%netscape.com 6a6d9eb606 Don't crash when CERT_DestroyCertificate is called with a cert with a
null arena pointer.  Bug 245943. r=julien
2004-06-09 07:47:51 +00:00
nelsonb%netscape.com 364a3b1c62 Fold function definition so editor can find it. 2004-06-09 02:22:38 +00:00
jpierre%netscape.com 15c733be33 Fix for 178895 - QuickDER optimizations. r=relyea 2004-06-05 00:50:32 +00:00
nelsonb%netscape.com bd994e5526 Make crmftest compile and run with NSS 3.10 shared libraries.
Enhance the command line parsing to permit portions of the tests
to be individually selected.  The code still doesn't all run
to completion without errors, but it gets MUCH farther than before.
Bug 244329.
2004-06-03 03:56:48 +00:00
nelsonb%netscape.com ada6a9721e Fix an erroneous assertion. Clean up some other code. Bug 244929.
r= jpierre, wtc.
2004-06-03 03:41:07 +00:00
nelsonb%netscape.com 25a4f88904 Export symbols needed for crmftest. r=relyea. bug 244329. 2004-06-02 22:19:33 +00:00
jpierre%netscape.com 11b39ca2a0 Fix for 244915 . resolve issues from previous patch 2004-06-02 01:56:43 +00:00
jpierre%netscape.com 20952b7c12 Fix for 244915 - r=wtc, misterssl . Correctly build freebl on Solaris 10 2004-06-02 00:40:53 +00:00
bishakhabanerjee%netscape.com 6f4a70ff97 chenged log names to better align them in summary, added SMIME test output
to emailed log summary
2004-05-27 22:09:03 +00:00
nelsonb%netscape.com 46526575bd a) adds the missing code to put stdin into binary mode.
b) add the -i option to the usage message
c) builds addbuiltins with shared libs
   (includes "nssrenam.h" for some symbols)
d) build addbuiltins as part of the normal builds.
2004-05-25 21:47:44 +00:00
jpierre%netscape.com 8b0d042c0c Fix for 244095 - link NSS libraries with -R $ORIGIN on Solaris 2004-05-25 00:13:12 +00:00
nelsonb%netscape.com 599a63402d Fix crash when array member is used as variable. Bug 243655. r=relyea. 2004-05-22 01:24:22 +00:00
nelsonb%netscape.com 9dc64ba0b2 Use "slop time" in nextUpdate validity check for CRLs. Bug 242146.
r=julien.pierre
2004-05-22 01:03:26 +00:00
nelsonb%netscape.com df07cea047 Add missing license block. Wrap long lines. Bug 243580. r=relyea. 2004-05-22 00:56:46 +00:00
bishakhabanerjee%netscape.com 66d76ca008 script to run NISCC tests; cvs pull of NSS and does special build, runs SMIME
and SSL tests, logs results to file, summarizes log results
2004-05-20 00:56:40 +00:00
ian.mcgreer%sun.com 4ef3c0837a certdata.c is checked in and shouldn't be ignored 2004-05-17 20:47:35 +00:00
ian.mcgreer%sun.com 02f1778eca bug 180268, reimplement ssl step-up for builtins 2004-05-17 20:08:38 +00:00
wchang0222%aol.com 922ba661c4 Bugscape bug 57081: If the make variable NISCC_TEST is defined at build
time, add -DNISCC_TEST to the compile command line.  The NISCC_TEST macro
enables special code that's conditionally compiled for NISCC testing.
Modified Files:
	cmd/smimetools/Makefile cmd/smimetools/cmsutil.c
	lib/ssl/config.mk lib/ssl/manifest.mn
2004-05-13 01:29:15 +00:00
relyea%netscape.com 19097be494 scripts for pk11util 2004-05-12 23:49:39 +00:00
ian.mcgreer%sun.com 416fa5ef5e program for generating FIPS algorithm test results 2004-05-12 17:30:31 +00:00
jpierre%netscape.com 3fde3ce243 Fix for 242984 - crash with application having incomplete PRIOMethods. r=nelsonb,wtc 2004-05-11 03:48:25 +00:00
jpierre%netscape.com 9941ae1908 Fix for 240361 - crash in CERT_CheckValidTimes 2004-05-11 02:43:10 +00:00
jpierre%netscape.com 8440778d84 Fix for 202979 . Resolve binary compatibility issue for CERT_ImportCerts . r=wtc, jpierre 2004-05-05 01:15:39 +00:00
relyea%netscape.com c06f7bf9d6 Fix mechanism command. 2004-05-05 00:36:52 +00:00
wchang0222%aol.com 8826e9b9f2 Bugzilla bug 238914: declare namesRunningOffset as unsigned long to avoid
overflow. Fixed a regression introduced by the previous checkin ('nss' is
allowed to be NULL).  Set slotStrings[i] to NULL after freeing to avoid
double-free. r=relyea,nelsonb.
2004-04-30 23:41:44 +00:00
gerv%gerv.net 9d50f0f223 Bug 236613: change to MPL/LGPL/GPL tri-license. Restore Id: lines. 2004-04-27 23:04:40 +00:00
gerv%gerv.net 2cdff0bb4f Bug 236613: change to MPL/LGPL/GPL tri-license. 2004-04-25 15:03:26 +00:00
wchang0222%aol.com b25daac5dc Bugzilla bug 90906: removed unused variable 'size'. The patch is from
Serge GAUTHERIE <gautheri@noos.fr>. r=wtc.
2004-04-21 18:57:51 +00:00
nelsonb%netscape.com d08920202a Change ssl test scripts to invoke tstclnt with the server's FQDN.
Necessary because of fix to bug 234058.
2004-04-08 03:01:02 +00:00
nelsonb%netscape.com 79bd1784c9 Remove code that attempted to compare simple host names in URLs with
FQDNs in certificate host names.  This was insecure.  Bug 234058. r=wtc.
2004-04-08 00:17:46 +00:00
relyea%netscape.com a5a249a333 Fix missing indexes when fetching lengths (get tinderbox working again). 2004-04-07 19:00:08 +00:00
relyea%netscape.com e77b48d527 Bug 239827: Fix race condition in unwrap private key (if target key is symetric). 2004-04-07 01:18:46 +00:00
relyea%netscape.com 2a5881fc37 Bug 238914. r=wchang sr=misterSSL
Agressive checks on database data before we actually reference it. This
should prevent crashes because of invalid databases.
2004-04-07 00:58:58 +00:00
wchang0222%aol.com ad467d8912 Bugzilla bug 238565: made the comment match the code. r=nelsonb. 2004-03-27 01:51:25 +00:00
wchang0222%aol.com 9b34b9f10f Bugzilla bug 237934: in nss_InitLock, nss_InitMonitor, and
NSSRWLock_AtomicCreate, we need to doublecheck the lock/monitor's pointer
after we acquired the spin lock.  r=nelsonb,jpierre.
Modified Files: nsslocks.c nssrwlk.c
2004-03-27 01:08:15 +00:00
nelsonb%netscape.com 6fdacdabac Correct the parsing of certain forms of GeneralName. Bug 233586.
r=julien.pierre
2004-03-26 01:15:33 +00:00
nelsonb%netscape.com 99d83c2326 Fix a regression introduced by rev 1.19, after NSS 3.9 was released.
r=julien.pierre.  bugscape 56484.
2004-03-23 03:29:56 +00:00
wchang0222%aol.com 16737ead2a Bugzilla bug 237870: link the MinGW build with wsock32.dll (Winsock 1)
instead of ws2_32.dll (Winsock 2).  Thanks to neil@parkwaycc.co.uk for the
patch.  r=wtc.
2004-03-23 01:59:40 +00:00
relyea%netscape.com b54f0b152a Program to decrypt passwords inline from prefs files 2004-03-23 00:46:38 +00:00
relyea%netscape.com aed0986998 Fix arrays handling strings, and help 2004-03-13 02:44:26 +00:00
jpierre%netscape.com 232efc45f9 Remove unused file 2004-03-11 10:03:24 +00:00
jpierre%netscape.com 2e6fe47845 Fix for bug 143456 - add -P option for dbprefix to selfserv . r=MisterSSL 2004-03-10 02:47:13 +00:00
nelsonb%netscape.com 877a8f3fc7 Add conditionally compiled code for NISCC testing of NSS's SSL library.
patch by Ian McGreer.  Bugscape bug 53322.
2004-03-05 23:28:57 +00:00
bishakhabanerjee%netscape.com 757070dec7 adding platform RH_Linux_7.3 2004-03-04 22:47:43 +00:00
bishakhabanerjee%netscape.com f0eb03e36f adjusting the platform strings as the header file specifies 2004-03-04 20:16:36 +00:00
bishakhabanerjee%netscape.com 34abf16656 removed old,unused platforms; and added newer used ones 2004-03-04 00:35:09 +00:00
jpierre%netscape.com 60d624b3ca Fix for 235874 - crash in PK11_DigestKey . r=wtc, nelsonb 2004-03-03 03:18:56 +00:00
nelsonb%netscape.com cf4a702ba2 Detect NULL arguments to CERT_DecodeTrustString instead of crashing.
Bug 235617. r=wtc.
2004-02-26 00:05:29 +00:00
bishakhabanerjee%netscape.com 65870a5d38 fix for Bugzilla bug 232481: removed a loop in smime.sh 2004-02-25 23:05:41 +00:00
bishakhabanerjee%netscape.com 2bbf510808 added negative cert import function, changed relevant Policies tests accordingly 2004-02-25 22:34:25 +00:00
nelsonb%netscape.com 1e6e264133 Import base64 encoded certificate files with old MAC line endings.
Bug 221272. sr=wtc.
2004-02-16 23:52:46 +00:00
wchang0222%aol.com 5f45d77d55 Removed unused function _OS_SELECT for AIX. Thanks to Philip K. Warren
<pkw@us.ibm.com> for reporting this.
2004-02-13 03:13:04 +00:00
wchang0222%aol.com 14ab9446d3 Bugzilla bug 233048: 1. Support doing 64-bit Solaris SPARC builds using
gcc.  2. Enable all.sh to work with gcc-compiled NSS tests which require
setting LD_LIBRARY_PATH to point to the directory where libgcc.so resides.
The patch is contributed by Vladim�r Marek <Vladimir.Marek@printsoft.cz>.
r=wtc,nelsonb.
Modified Files: coreconf/SunOS5.mk nss/tests/common/init.sh
2004-02-13 02:47:53 +00:00
jpierre%netscape.com 3d988159e3 Fix strings in SECU_PrintError. bug 233493 2004-02-12 02:08:59 +00:00
wchang0222%aol.com 72b4f0a82f Bugzilla bug 229297: fixed compiler warning "conversion from 'double' to
'long', possible loss of data".  r=jpierre,relyea.
2004-02-11 19:43:29 +00:00
wchang0222%aol.com 92d497302e Bugzilla bug 229293: fixed compiler warning "unary minus operator applied
to unsigned type". r=relyea,jpierre.
2004-02-11 19:37:18 +00:00
jpierre%netscape.com 6cca3beefc Fix for bug 233605 . Check CRL entry extensions after partial decoding. Also add some new CRL decoding errors. r=nelsonb 2004-02-11 06:05:18 +00:00
jpierre%netscape.com 21dcb34f6a Fix for 233493 . Corrections based on Wan-Teh's feedback. 2004-02-11 05:27:32 +00:00
jpierre%netscape.com f0399f13b2 Fix for 233118 . additional check for CRL signing usage. r=nelsonb 2004-02-11 05:25:01 +00:00
wchang0222%aol.com 0015b0322e Bugzilla bug 233321: fixed the problem with building utf8.c as a standalone
test program.  Fixed byte-order issue on little-endian architecture.
r=nelsonb.
Modified Files: Makefile utf8.c
2004-02-11 02:17:24 +00:00
bishakhabanerjee%netscape.com 3cb3b9cc92 checking in 5 sections of Certificate Policies. Need to set
NSS_NO_PKITS_POLICIES to run these five sections
2004-02-11 01:31:43 +00:00
jpierre%netscape.com 3877f51a30 Fix for 233493 - fix symkeyutil build on OS/2. r=relyea 2004-02-10 23:48:37 +00:00
bishakhabanerjee%netscape.com 9d94b7d3ae removing dependency of a testcase on a previous testcase; i.e. each testcase
now imports all the CRLs required for it, and then deletes them at the end
of the test
2004-02-09 23:33:26 +00:00
wchang0222%aol.com 48abfb9563 Bugzilla bug 233319: prepend, rather than append, the NSS lib and bin
directories to PATH. r=relyea.
2004-02-09 22:39:11 +00:00
nelsonb%netscape.com 9bcf6bba06 Enable a chain to validate when a perm cert has been issued by a
temp cert.  Bug 233038. r=ian,relyea
2004-02-07 07:17:31 +00:00
wchang0222%aol.com 1eceb408a4 Bugzilla bug 225808: 1. Use a 32-bit integer type for cert->nsCertType so
that it can be safely passed to PR_AtomicSet on all platforms.  Note that
we still use an unsigned type to avoid introducing signed/unsigned compiler
warnings.  2. Added a (PRInt32 *) cast to eliminate a pre-existing
signed/unsigned warning.  r=nelsonb.
Modified Files: certdb.c certt.h
2004-02-07 01:41:15 +00:00
wchang0222%aol.com 8174f82b2a Bugzilla bug 233239: do not include cmd/zlib and cmd/lib headers and
libraries in NSS binary releases.
Modified Files:
	lib/Makefile lib/manifest.mn makepqg/manifest.mn zlib/Makefile
	zlib/manifest.mn
2004-02-07 00:26:02 +00:00
wchang0222%aol.com 31cb0b2ebb Bugzilla bug 123693: improved the fix for this bug. Maintain the
consistency between the slot hash table and slot list when the
creation of a slot fails. r=relyea,nelsonb.
2004-02-06 02:04:48 +00:00
wchang0222%aol.com b8350510e0 Bugzilla bug 233112: fixed a typo: "futuer" -> "future". Thanks to
Heikki Toivonen <hjtoi-bugzilla@comcast.net> for the bug report.
2004-02-05 05:56:54 +00:00
bishakhabanerjee%netscape.com ae563c8b57 added a few more missing $ for variable PKITSdb for more accurate log reporting
also, minor optimization of crlImport and crlImportn script so that $crls does
not have to be specified on every line
2004-02-04 20:04:14 +00:00
nelsonb%netscape.com 15ab853103 Fix numerous bugs in CERT_FindCertByKeyID. Bug 233019. r=jpierre 2004-02-04 08:54:06 +00:00
nelsonb%netscape.com b2c290e682 Add a feature to disable all use of CRLs with an environment variable.
Don't run most vfychain commands after crlutil fails to import the CRL,
when that is the expected result.
Remove one error that caused the HTML output to be invalid.
2004-02-04 04:07:32 +00:00
nelsonb%netscape.com 6c156a7f01 Put in missing $, so log output will show actual commands exeuted. 2004-02-04 02:23:40 +00:00
bishakhabanerjee%netscape.com 76865b1ed6 correcting header of section 4.1, minor edits to make headers more definitive 2004-02-03 20:13:26 +00:00
nelsonb%netscape.com ddc08ff79d Invoke crlImportn instead of crlImport in several places where a
negative outcome is expected.  More work on this is needed.
crlImportN should return a value that tells us if it actually failed,
so that the script can decide whether or not to proceed with vfychain.
But this change makes the outcome more green, less red.
2004-02-03 07:14:52 +00:00
nelsonb%netscape.com 68ca6ac4ad Honor key usage extensions, whether they're critical or not.
Bug 232738. r=jpiperre.
2004-02-03 07:10:04 +00:00
nelsonb%netscape.com eba26f5336 Max crlutil return 0 or 1 correctly, depending on the success of the
operation.  Bug 232937.  r=jpierre.
2004-02-03 06:59:35 +00:00
nelsonb%netscape.com df5c3e2347 Change script so that html output and logfile will be broken up into
clearly defined and easy-to-find sections.
2004-02-03 04:15:08 +00:00
nelsonb%netscape.com 5842f65a6f Make output log file more readable by separating each test case. 2004-02-03 03:07:38 +00:00
bishakhabanerjee%netscape.com 8d35c478d7 fixed one typo 2004-02-03 01:27:47 +00:00
bishakhabanerjee%netscape.com 31eae812f3 checking with all latest revew comments addressed 2004-02-03 00:59:53 +00:00
nelsonb%netscape.com 3362ec5c98 When an attempt to initialize a slot fails, free up the resources
right away, rather than waiting until NSS_Shutdown.  Bug 123693.
Second try.  r=relyea.
2004-01-30 04:15:47 +00:00
nelsonb%netscape.com 66a5f14215 Back out rev 1.90. It breaks shlibsign. 2004-01-29 23:34:21 +00:00
nelsonb%netscape.com 3746806bae Export SECOID_AddEntry. Bug 132942. r=wtc. 2004-01-29 22:51:55 +00:00
nelsonb%netscape.com 87037886de Invoke SECU_RegisterDynamicOids() so that more OIDs will print out.
Bug 132942.  a=wtc.
2004-01-29 22:48:58 +00:00
nelsonb%netscape.com 1178524031 Bug 132942. r=wtc
Make the following enhancements to NSS's ASN.1 printing code:
- Print warning messages that are properly indendented.
- PrintAsHex notices when the buffer contains entirely printable characters, and is larger than an int, and prints it as text in that case.
- PrintRawString now indents the string, rather than always printing it on
a separate line.
- now prints decoded bit strings
- now prints BMP (UCS2) strings as strings (not as hex) when they contain only printable ASCII characters.
- now prints Universal (UCS4) Strings as strings (not hex) when they contain only printable ASCII characters.
- Decodes certain encoded data that was previously printed as hex.
- Generically decodes ASN.1 data, rather than merely printing an error, when the ASN.1 data doesn't fit a known template.
- properly handles all optional components of basic constraints extensions.
- Prints the names of the bits in the X509 Key Usage extension.
- Prints General Names.
- Print Auth Key ID extensions
- Print subject and issuer alt name extensions
- Print CRL distribution points extensions
- format and print name constraints extensions
- print Authority Information Access extensions
- Print optional X509v2 subject and issuer Unique ID bit strings
2004-01-29 22:45:20 +00:00
nelsonb%netscape.com ffac3ff18d Change some comments and one variable as suggested in review comments.
r=relyea,wtc.  Bug 124923.
2004-01-29 21:57:41 +00:00
nelsonb%netscape.com ae49b07260 Make SECOID_AddEntry be thread safe. Export it. Bug 124923. r=relyea. 2004-01-29 21:23:36 +00:00
nelsonb%netscape.com aa1cc56ff2 Plug leaks. Bug 123693. r=wtc,relyea 2004-01-29 21:18:24 +00:00
jpierre%netscape.com 0b2945333d Fix for 232377 - assertion in vfychain with DSA cert. r=wtc, nelsonb 2004-01-28 23:25:07 +00:00
nelsonb%netscape.com 770792a092 Export cert functions that decode extensions and traverse decoded
extensions.  Bug 231881. r= relyea, wtc.
2004-01-28 23:23:45 +00:00
nelsonb%netscape.com 2cd0aefb3a Change program return value to reflect test outcome. Bug 221737. r=wtc 2004-01-28 22:30:27 +00:00
wchang0222%aol.com 218facb68e Bugzilla bug 232380: deleted CERT_FindExpiredIssuer, which is dead code.
In cert_VerifyCertChain, make sure that subjectCert and issuerCert never
point to the same cert to prevent from destroying that cert twice.
r=jpierre,nelsonb.
Modified Files: certdb/cert.h certhigh/certvfy.c
2004-01-28 21:51:10 +00:00
jgmyers%speakeasy.net d001ae79d0 address review comments: bug 231659 2004-01-28 04:29:14 +00:00
jgmyers%speakeasy.net 21362b48fa rewrite utf8 parser for strictness: bug 231659 r=MisterSSL 2004-01-28 03:48:43 +00:00
jpierre%netscape.com 9eb7b71e75 Fix for 231051 - crlutil asserts after deleting CRL. r=wtc, nelsonb 2004-01-28 01:17:13 +00:00
relyea%netscape.com d1378d4081 bug 231698: fix regression in reading SDR data in databases written on 64-bit platforms.
r=MisterSSL
2004-01-27 18:31:29 +00:00
jpierre%netscape.com ed30b5426d Fix for 231051 - crlutil asserts after importing CRL. r=nelsonb, wtc 2004-01-27 00:02:16 +00:00
nelsonb%netscape.com 367ac2cf5c Fix crashes that occur when optional policyQualifiers are not present.
Bug 230951. r=kinmoz.
2004-01-23 22:50:01 +00:00
wchang0222%aol.com 77ef0ec709 Bumped version to 1.50 (for NSS 3.10). 2004-01-23 22:15:39 +00:00
nelsonb%netscape.com e1776d7a4b RFC 3280 says Name Constraints do not apply to self-issued CA certs,
including self-issued intermediate CA certs (so-called "roll-over" certs).
This fixes an NISCC test failure.  Bug 231030. r=wtc.
2004-01-23 06:06:06 +00:00
nelsonb%netscape.com d39242dda7 When a name attribute's value exceeds the maximum allowed length, display
a truncated version of it, followed by ellipsis.  Bug 220855. r=wtc
2004-01-22 23:45:30 +00:00
nelsonb%netscape.com c3e741505b Add -a option for Base64 encoded ASCII input and output.
The -i and -o options now understand "-" to mean stdin and stdout.
Usage is displayed when -? or no arguments are given.
Bug 231536. r=relyea.
2004-01-22 22:08:59 +00:00
nelsonb%netscape.com ab62ea0dcd Correct NSS's key usage tests for certs with non-RSA public keys.
Bug 221638. r=relyea.
2004-01-22 22:04:54 +00:00
nelsonb%netscape.com abe30316c3 Detect duplicate issuer name and serial number between two temp certs.
Bug 230996. r=ian, relyea.
2004-01-22 02:36:53 +00:00
nelsonb%netscape.com 6b4f2582f5 Fix name constraints code to pass NIST PKITS test 38. r=wtc. Bug 231223. 2004-01-22 02:33:41 +00:00
nelsonb%netscape.com 6eb4db4380 Move an extern function declaration to the header file where it belongs.
Bug 229212. r=relyea.
2004-01-22 02:19:42 +00:00
nelsonb%netscape.com 1cf2dd38f1 Fix some erronous code that set SEC_ERROR_NO_MEMORY when there had been
no memory failure.  r=relyea.  Bug 231566
2004-01-22 02:17:26 +00:00
nelsonb%netscape.com 6a8f1df53b Fix bug in cert path length validation. Bug 221644. r=jpierre 2004-01-21 05:32:18 +00:00
jpierre%netscape.com 3e7249335c Support GeneralizedTime in NSS tools. bug 210530. r=wtc 2004-01-21 01:15:01 +00:00
nelsonb%netscape.com 14c61e40e0 Use the results from PK11_ProtectedAuthenticationPath(slot) in the
password callback function.  Bug 229023. r=relyea.  verified by submittor.
2004-01-21 00:18:59 +00:00
wchang0222%aol.com 600d5d5236 Bugzilla bug 229299: fixed unused variable warning. r=nelsonb. 2004-01-20 22:57:40 +00:00
jgmyers%speakeasy.net ae8711f043 fix review comment: bug 53133 2004-01-20 19:57:17 +00:00
nelsonb%netscape.com c7a655b980 Make this code build on Windows as well as Unix. 2004-01-19 01:05:53 +00:00
nelsonb%netscape.com ea240a20f0 Fix two more incorrect cert names that caused erroneous test results.
Bug 231221.
2004-01-17 05:55:20 +00:00
nelsonb%netscape.com ded78bdcc6 Correct this script to more accurately report errors. Bug 231221. 2004-01-17 05:04:42 +00:00
nelsonb%netscape.com dde3b2789c Detect absent isCA flags in basic constraints. Detect and reject negative
or too large positive path length constraints in basic constraints.
Bug 221644. r=jpierre.
2004-01-16 21:33:16 +00:00
nelsonb%netscape.com 187f146641 Fix template for Cert policy extensions. Bug 230951, r=jpierre 2004-01-16 05:36:08 +00:00
nelsonb%netscape.com f0ce21ebbf Fix NSS parsing of Issuer Unique ID and Subject Unique ID fields in
certificate.  Bug 216116. r=jpierre
2004-01-16 02:11:44 +00:00
nelsonb%netscape.com baa193b610 Add vfychain to list of NSS cmds being built nightly. r=wtc. Bug 231025 2004-01-16 02:03:08 +00:00
jgmyers%speakeasy.net 3180f3e51c fix comment per review: bug 53133 2004-01-16 01:04:57 +00:00
wchang0222%aol.com e99fda1edc Minor change after review of previous checkin. Bug 53133. 2004-01-15 22:34:26 +00:00
relyea%netscape.com 0d7b150a77 Fix build problems on some platforms. 2004-01-15 16:27:02 +00:00
wchang0222%aol.com 3104e67dcf Set NSS version to 3.10 Beta. 2004-01-15 15:08:58 +00:00
jgmyers%speakeasy.net b08688fb89 Convert T61String-labeled ISO-8859-1 to UTF-8: bug 53133 r=nelsonb a=wtc 2004-01-15 06:23:14 +00:00
nelsonb%netscape.com 84fa42598b Add 2 additional OIDs to the list of acceptable digestEncryptionAlgIDs,
per RFC 3370. r=thayes.  Bug 230761.
2004-01-14 22:20:44 +00:00
relyea%netscape.com 760edf0053 Tool to manage pkcs 11 module tests. 2004-01-14 21:34:20 +00:00
nelsonb%netscape.com b3ec77edc5 Fix double free introduced in rev 1.54. r=wtc. bug 230774.
Bug occurs only in NSS utilities that import base64 encoded files, e.g.
with the -a option.
2004-01-14 01:19:26 +00:00
wchang0222%aol.com 7f0e9e3c69 Bugzilla bug 229289: fixed an unused variable warning. r=relyea. 2004-01-13 01:59:41 +00:00
nelsonb%netscape.com 11aea91a5a Overload the error code SSL_ERROR_RX_RECORD_TOO_LONG to report SSL2
records that are too short.  Bugscape bug 54814
2004-01-08 06:52:00 +00:00
jpierre%netscape.com ff24f13dc1 Rename PK11_PubDeriveExtended to PK11_PubDeriveWithKDF 2004-01-08 01:37:46 +00:00
wchang0222%aol.com c477412c15 Set NSS version to 3.9. 2004-01-08 01:04:56 +00:00