Граф коммитов

190 Коммитов

Автор SHA1 Сообщение Дата
relyea%netscape.com 72f513f7ef Bug 162976. Make CRL updates 'atomic' . Insert new CRL before deleting the
old one.b
2003-03-04 22:34:56 +00:00
ian.mcgreer%sun.com d84324a740 bug 174200, don't attempt to decode cert when destroying it, handle failure
to decode cert serial number
r=nelsonb
2003-02-18 20:53:14 +00:00
nelsonb%netscape.com 91b818b389 Fix crash in CERT_CheckKeyUsage caused by dereferencing a returned pointer
without checkin it for NULL.
2003-01-31 02:49:13 +00:00
wtc%netscape.com b75e4a55f8 Bug 183612: added some comments. 2002-12-24 02:25:36 +00:00
wtc%netscape.com 587dca7fd1 Bug 183612: renamed some new functions to be consistent with existing
function names containing SubjectKey and PublicKey.  Moved internal
functions to private headers and use the lowercase cert_ prefix for the
internal functions for subject key ID mapping hash table. r=nelsonb.
2002-12-19 00:26:34 +00:00
wtc%netscape.com 0d2d65efb2 Bug 183612: added support for looking up a cert by subject key ID and
creating a CMS recipient info from a subject key ID.  The patch was
contributed by Javi Delgadillo <javi@netscape.com>. r=relyea, wtc.
Modified Files:
	certdb/cert.h certdb/certdb.c certdb/certdb.h certdb/certv3.c
	certdb/stanpcertdb.c nss/nss.def nss/nssinit.c
	pk11wrap/pk11cert.c pk11wrap/pk11func.h pk11wrap/secmod.h
	pki/pki3hack.c smime/cms.h smime/cmslocal.h smime/cmspubkey.c
	smime/cmsrecinfo.c smime/cmssiginfo.c smime/cmst.h
	smime/smime.def
2002-12-17 01:39:46 +00:00
nelsonb%netscape.com d442ab6107 Support SHA256, SHA384, and SHA512 hashes in NSS. 2002-12-12 06:05:45 +00:00
relyea%netscape.com 52f2bf446b Make SubjectAltEncode a public function. Fixes build breakage in Linux 2002-12-10 17:41:16 +00:00
relyea%netscape.com 35158986f8 Create profiles for all the email addresses in a certificate. 2002-12-10 17:14:17 +00:00
wtc%netscape.com 88fc40da69 Bug 39494: added a check to prevent buffer overflow. r=mcgreer,nelsonb. 2002-12-04 23:41:49 +00:00
ian.mcgreer%sun.com dc9b4b2415 bug 172247, don't allow import of duplicate issuer/serial certs 2002-11-21 20:43:15 +00:00
jpierre%netscape.com b30a666577 Fix for bug 180894 - don't assert in ShutdownCRLCache() 2002-11-19 21:37:50 +00:00
jpierre%netscape.com 0203577bab Patch for 180228 - export CRL cache flush API . r=wtc 2002-11-15 05:04:05 +00:00
ian.mcgreer%sun.com 3e3b24225a bug 39494, handle non-standard AVAs properly
r=nelsonb
2002-11-14 17:04:43 +00:00
jpierre%netscape.com f9e36ad6fc Fix for 177798 . Improve handling of initialization / shutdown of the CRL cache using a static status variable 2002-11-07 00:02:31 +00:00
ian.mcgreer%sun.com b158d2ec1c bug 177366, clean up refcounting
r=relyea
2002-11-06 18:53:55 +00:00
jpierre%netscape.com e18a2330bd Fix for bug 177798 - NULL pointers in ShutdownCRLCache to allow shutdown/restart
of NSS.
2002-11-02 00:07:48 +00:00
jpierre%netscape.com 7a45a11c75 Fix for bug 175115 . Remove incorrect check for CA cert expiration. Also fix CRL signature verification and clean up internal functions . r=mcgreer,relyea,nelsonb,wtc 2002-10-30 23:31:38 +00:00
nelsonb%netscape.com 071477a1c8 Add new function CERT_VerifySignedDataWithPublicKey containing common code
factored from existing functions CERT_VerifySignedDataWithPubKeyInfo and
CERT_VerifySignedData.  Bug 174193.
2002-10-25 03:21:24 +00:00
nelsonb%netscape.com 8bacf2ad20 Include certi.h to resolve invocation of undeclared function. 2002-10-23 22:00:48 +00:00
nelsonb%netscape.com b7a054c16f Add 2 new functions to NSS, so an application can get a list of all
email addresses in a cert.  Bug 152986.
Modified Files: lib/nss/nss.def lib/certdb/alg1485.c lib/certdb/cert.h
                lib/certdb/certdb.c lib/certdb/certi.h
2002-10-23 20:50:51 +00:00
nelsonb%netscape.com 5935c31c0a Verify the self-signed signature on PKCS 10 cert requests before honoring
them.  Bug 174193.
2002-10-18 21:58:24 +00:00
relyea%netscape.com e106f58801 Bug 164501. Return a proper error code from PK11_FindCrlByName() so the CRL
code can decide if there is a hw or system failure preventing the reading of a
CRL or if the CRL is just not there.
2002-10-10 20:30:19 +00:00
jpierre%netscape.com 24efd562a5 Fix for 172678 - move internal functions InitCRLCache and ShutdownCRLCache to private header certi.h 2002-10-05 02:24:25 +00:00
wtc%netscape.com 7eaa62ed07 Bug 164744: fixed the comment block style. 2002-10-03 04:01:34 +00:00
wtc%netscape.com 78f7e21d69 Bug 149832: renamed highestUsage as certificateUsageHighest.
Modified files: certdb/certt.h certhigh/certvfy.c
2002-10-03 03:48:55 +00:00
jpierre%netscape.com e3b94ef26c Fix for 164744 - implement new functions for pk12util . r=wtc 2002-10-03 03:35:32 +00:00
ian.mcgreer%sun.com 644827d506 bug 171224, changes to path construction
r=nelsonb
2002-10-01 14:32:15 +00:00
ian.mcgreer%sun.com 4989de34e2 bug 171198, leak moving temp cert to perm; add force parameter
r=wtc,relyea
2002-09-27 21:23:00 +00:00
wtc%netscape.com cd1c6e78de Bug 169790: renamed CERT_DecodeDERCrlEx to CERT_DecodeDERCrlWithFlags.
Modified files: certdb/cert.h certdb/crl.c nss/nss.def pk11wrap/pk11cert.c
2002-09-23 21:31:47 +00:00
jpierre%netscape.com c3f00fe7c2 Fix for bug 156042 - crash when CA not issued by a valid CA 2002-09-20 01:53:33 +00:00
jpierre%netscape.com 2084e808d7 Fix memory leak in CRL cache 2002-09-18 00:34:32 +00:00
wtc%netscape.com 2be4ae3de3 Bug 168368: fixed an uninitialized memory read in CERT_CreateRDN. It
should not call va_arg if 'ava0' is NULL (which means 'ava0' is the last
argument).
2002-09-13 00:28:55 +00:00
jpierre%netscape.com cc9cc24c32 Fix for 167856 - memory leaks in CRL cache 2002-09-11 01:08:06 +00:00
jpierre%netscape.com 5ba34e6a81 Fix for 167849 - copy DER subject before adding an issuer to the hash table in CRL cache 2002-09-11 00:28:22 +00:00
jpierre%netscape.com dc3cf4a2c0 Fix for 167649 - invalidate CRL cache when new CRL object is imported into a token 2002-09-10 04:49:09 +00:00
wtc%netscape.com 49af08e9e9 Bug 160805: fixed a leak and a double free of the arena introduced in the
previous checkin.
2002-09-08 03:25:30 +00:00
jpierre%netscape.com 7387d1c618 Fix compiler warnings 2002-09-07 01:24:27 +00:00
wtc%netscape.com 2baa3ecbf8 Bug 166933: fixed build breakage on the Mac.
Modified files: certdb/crl.c certhigh/certhigh.c softoken/dbmshim.c
2002-09-06 20:17:42 +00:00
nicolson%netscape.com 76c9ac877e Fix 164126: makefile build error.
Change the NSS module name from "security" to "nss".
2002-09-06 16:38:56 +00:00
jpierre%netscape.com c3cf689d16 Fix for 162983 - consider all certs revoked if there is a bad CRL in the cache 2002-09-06 06:53:03 +00:00
wtc%netscape.com b7abf3a369 Bugs 166734 and 166785: fixed compiler warnings reported by gcc on Linux.
The patch for this checkin is attached to bug 166785.
2002-09-06 00:27:52 +00:00
wtc%netscape.com 96ee590acc Fixed unresolved symbol DPCache_Refresh, which I believe is a misspelling
of DP_RefreshCache.
2002-09-05 16:34:27 +00:00
jpierre%netscape.com bdab63a983 Fix for 166714 - make SEC_FindCrlByName use the CRL cache 2002-09-05 06:12:33 +00:00
nelsonb%netscape.com 7a8812d976 Treat empty SubjectAltName extensions as if they were non-existant.
Bugs 162979 166454.
2002-09-04 00:42:01 +00:00
jpierre%netscape.com 6b5779c201 Fix for 160805 . Make a copy of items into the arena before calling SEC_QuickDERDecodeItem where needed 2002-08-31 00:37:52 +00:00
jpierre%netscape.com 301f4ad3ae Implement the CRL cache . Bug 149854 2002-08-30 22:57:03 +00:00
jpierre%netscape.com 1b0f78ea2f Convert slow SEC_ASN1DecodeItem calls to SEC_QuickDERDecodeItem where possible. Performance improvement. Bug #160805 . r=relyea 2002-08-24 00:52:47 +00:00
wtc%netscape.com de3cc2f10e Bug 164035: checked in a small code optimization suggested by
J�rg Brunsmann <joerg_brunsmann@yahoo.de>. Use the local variable that
has the same value.
2002-08-22 18:05:32 +00:00
wtc%netscape.com 1b3066fd5c Bug 163863: removed duplicate PORT_Memset calls in CERT_KeyFromDERCert.
Thanks to J�rg Brunsmann <joerg_brunsmann@yahoo.de> for the fix.
2002-08-21 18:05:20 +00:00