6c4e221cc7
Bug 197147: removed an invalid/unnecessary comparison of two
...
PRIntervalTimes in pk11_InDelayPeriod.
2003-03-13 01:16:00 +00:00
42fae25f24
Add support for Elliptic Curve Cryptography. Bug 195135.
...
Modified Files:
cmd/lib/SECerrs.h cmd/selfserv/selfserv.c
cmd/tstclnt/tstclnt.c lib/cryptohi/keyhi.h
lib/cryptohi/keythi.h lib/cryptohi/seckey.c
lib/cryptohi/secvfy.c lib/freebl/Makefile lib/freebl/blapi.h
lib/freebl/blapit.h lib/freebl/ldvector.c lib/freebl/loader.c
lib/freebl/loader.h lib/freebl/manifest.mn lib/nss/nss.def
lib/pk11wrap/pk11skey.c lib/pk11wrap/pk11slot.c
lib/softoken/lowkeyti.h lib/softoken/manifest.mn
lib/softoken/pkcs11.c lib/softoken/pkcs11c.c
lib/softoken/pkcs11t.h lib/ssl/ssl3con.c lib/ssl/ssl3prot.h
lib/ssl/sslcon.c lib/ssl/sslenum.c lib/ssl/sslimpl.h
lib/ssl/sslinfo.c lib/ssl/sslproto.h lib/ssl/sslsecur.c
lib/ssl/sslsock.c lib/ssl/sslt.h lib/util/secerr.h
lib/util/secoid.c lib/util/secoidt.h
Added Files:
lib/freebl/GFp_ecl.c lib/freebl/GFp_ecl.h lib/freebl/ec.c
lib/freebl/ec.h lib/softoken/ecdecode.c
2003-02-27 01:31:38 +00:00
1d3e993c7a
Bug 194222: Removed SECMOD_CallOnce. It is replaced by the new NSPR 4.3
...
function PR_CallOnceWithArg.
Modified files: nss/nssinit.c pk11wrap/pk11cert.c pk11wrap/secmodi.h
2003-02-20 16:58:57 +00:00
c613b5df3c
Try to load the new module before we've unloaded the old one. This now
...
works in NSS, and it allows us to back out if the new one didn't load (because
FIPS could not verify the shared module for instance).
2003-02-05 00:35:53 +00:00
88f5c92825
Sign 3 sets of changes are here:
...
1) Provide accessor functions for the PK11_DefaultArray so that modutil
does not have to link statically to access it.
2) Try setting the attribute on an object before we go to the work of copying
it (Function Only used in Java).
3) Optimize searching for the more common types of attributes.
2003-01-28 16:38:04 +00:00
48191e6dde
Set the size value when extracting a key 19011.
2003-01-23 17:30:15 +00:00
dcfc314ddc
Bug 190112: PK11_ReadAttribute needs to call PK11_ExitSlotMonitor before
...
we return because of allocation failure.
2003-01-22 17:44:36 +00:00
ba247cd419
Bug 189546: updated the comments to reflect what the new code does.
2003-01-22 06:24:53 +00:00
ddc27a6bbf
Bug 189546: moved the switch statement for known key lengths to the
...
beginning of PK11_GetKeyLength to work around a deadlock in nCipher
module if PK11_ExtractKeyValue is called.
2003-01-22 03:55:21 +00:00
f20a97ef6a
Bug 189345: we incorrectly assumed that a C_XxxFinal call to determine the
...
length of the buffer would also terminate the active operation if the
buffer length is 0. PKCS#11 says it doesn't, so we need to make the
additional C_XxxFinal call even if the buffer length is 0. Allocate a
buffer from the heap if the stack buffer is too small and free the
heap-allocated buffer before we return from pk11_Finalize. We can use the
stack buffer if count is equal to its size.
2003-01-21 19:33:24 +00:00
402a4a6710
Bug 198364. Tokens keys do not own their handles. Don't let the key
...
get destroyed when freed.
2003-01-18 01:49:33 +00:00
12a72288a3
Bug 145029: fixed compiler warnings (mostly "xxx might be used
...
uninitialized").
2003-01-17 02:49:11 +00:00
3f15ddacc5
Check for Empty CRL list as well.
...
Bug 164501.
2003-01-10 19:09:46 +00:00
0c506b280f
Declare PK11_TokenRefresh()
2003-01-10 17:53:01 +00:00
b2f0cd3e28
backport NSS 3.7 fixes to the tip.
2003-01-09 18:15:11 +00:00
71527c989a
Bug 183612: SECMOD_InitCallOnce() and SECMOD_CleanupCallOnce() should be
...
declared and defined with an argument list of "(void)" instead of "()".
Modified Files: pk11cert.c secmodi.h
2002-12-19 07:03:39 +00:00
587dca7fd1
Bug 183612: renamed some new functions to be consistent with existing
...
function names containing SubjectKey and PublicKey. Moved internal
functions to private headers and use the lowercase cert_ prefix for the
internal functions for subject key ID mapping hash table. r=nelsonb.
2002-12-19 00:26:34 +00:00
8ab634d5b8
Make sure the session is protected over PKCS #11 calls.
2002-12-17 18:22:38 +00:00
59393fce3e
Need to test for null pointers before destroying the lock and condition
...
variable. If NSS initialization fails, this lock and condition variable
may not get created.
2002-12-17 02:47:46 +00:00
0d2d65efb2
Bug 183612: added support for looking up a cert by subject key ID and
...
creating a CMS recipient info from a subject key ID. The patch was
contributed by Javi Delgadillo <javi@netscape.com>. r=relyea, wtc.
Modified Files:
certdb/cert.h certdb/certdb.c certdb/certdb.h certdb/certv3.c
certdb/stanpcertdb.c nss/nss.def nss/nssinit.c
pk11wrap/pk11cert.c pk11wrap/pk11func.h pk11wrap/secmod.h
pki/pki3hack.c smime/cms.h smime/cmslocal.h smime/cmspubkey.c
smime/cmsrecinfo.c smime/cmssiginfo.c smime/cmst.h
smime/smime.def
2002-12-17 01:39:46 +00:00
f37146e332
Use correct sense of the timeout value.
2002-12-13 00:25:21 +00:00
d442ab6107
Support SHA256, SHA384, and SHA512 hashes in NSS.
2002-12-12 06:05:45 +00:00
2c6c4ceeae
Add token removal blocking function.
2002-12-11 17:43:24 +00:00
510f05d5ec
Incorporate some of Nelson's review changes.
...
Collapse all the profile data into an array for easier processing when printing out.
2002-11-26 21:03:18 +00:00
dc9b4b2415
bug 172247, don't allow import of duplicate issuer/serial certs
2002-11-21 20:43:15 +00:00
1945b7684e
Adjust the time values so we have correct and consistant displays.
2002-11-11 22:01:57 +00:00
b158d2ec1c
bug 177366, clean up refcounting
...
r=relyea
2002-11-06 18:53:55 +00:00
9e75e1c8d8
Make sure the array is big enough to handle all the cases.
2002-10-23 22:51:10 +00:00
e106f58801
Bug 164501. Return a proper error code from PK11_FindCrlByName() so the CRL
...
code can decide if there is a hw or system failure preventing the reading of a
CRL or if the CRL is just not there.
2002-10-10 20:30:19 +00:00
0a5aba4706
Fix SDR race condition with a coarse lock. Does not address multiaccess DB
...
races. Bug 169296.
2002-10-01 00:23:46 +00:00
d0e7f92b39
Fix 128172: function to convert a session key to a token key.
2002-09-28 00:48:32 +00:00
ef0775ebf1
Fix for 167615 - fix for crash with bad CRLs from token. Also fix error handling
2002-09-28 00:05:34 +00:00
4989de34e2
bug 171198, leak moving temp cert to perm; add force parameter
...
r=wtc,relyea
2002-09-27 21:23:00 +00:00
cf7aab6a76
Bug 167861: PK11_GetModInfo needs to set the error code.
2002-09-27 17:50:59 +00:00
63f15fa210
Fix for 167615 - don't crash if a token returns a NULL CRL object
2002-09-26 01:38:45 +00:00
6b9de18419
Bug 169944: declare PK11_TokenKeyGen in pk11func.h and export it from the
...
nss3 shared library.
Modified Files: nss/nss.def pk11wrap/pk11func.h
2002-09-24 18:40:29 +00:00
cd1c6e78de
Bug 169790: renamed CERT_DecodeDERCrlEx to CERT_DecodeDERCrlWithFlags.
...
Modified files: certdb/cert.h certdb/crl.c nss/nss.def pk11wrap/pk11cert.c
2002-09-23 21:31:47 +00:00
0ce979714d
Fix 169578: PK11_ImportAndReturnPrivateKey sets wrong key type.
2002-09-20 21:48:32 +00:00
356b9783b7
Fix corrupt listing of nicknames on keys.
...
Bug 166995.
2002-09-20 20:36:44 +00:00
14511fe5c0
Fix memory leak mozbug 165655, r=wtc
2002-09-20 20:36:10 +00:00
e85d087b1d
Bug 157827: declare the exported PBE_ functions. Fixed the include-once
...
ifdef.
2002-09-18 22:12:16 +00:00
a80912fec1
Fix indentation
2002-09-17 21:31:28 +00:00
7a47c3326d
Fix UMC in Purify
2002-09-16 23:25:04 +00:00
15afa035da
Add assertion to help debugging CRL crash
2002-09-14 05:41:42 +00:00
0ebdc96c4c
Bug 127886: added the new function PK11_ImportDERCert.
...
Modified files: nss/nss.def pk11wrap/pk11cert.c pk11wrap/pk11func.h
2002-09-07 04:48:57 +00:00
e856e7ef2f
Initialize len before we use it.
2002-09-06 23:15:35 +00:00
4b63b53d6a
Bug 166893: copy the DER cert when importing the certificate
2002-09-06 18:48:37 +00:00
76c9ac877e
Fix 164126: makefile build error.
...
Change the NSS module name from "security" to "nss".
2002-09-06 16:38:56 +00:00
b7abf3a369
Bugs 166734 and 166785: fixed compiler warnings reported by gcc on Linux.
...
The patch for this checkin is attached to bug 166785.
2002-09-06 00:27:52 +00:00
b03a452115
Check the cert validity only if we actually found a cert.
2002-08-30 20:37:58 +00:00
wtc%netscape.com
nelsonb%netscape.com
relyea%netscape.com
ian.mcgreer%sun.com
nicolson%netscape.com
jpierre%netscape.com