Граф коммитов

14 Коммитов

Автор SHA1 Сообщение Дата
jpierre%netscape.com cd77147500 Stop referencing deleted quickder.h header 2002-08-08 01:55:34 +00:00
jpierre%netscape.com 38fe6c93a3 Implement partial CRL decoding. Fix for 149816. r=wtc . Uses new quick DER decoder 2002-08-07 03:44:12 +00:00
jpierre%netscape.com 6a2b391359 158005 - add new CRL decode and import functions . Benefits are :
- ability to import to any slot
- ability to specify decode options, such as "don't copy DER"
- ability to specify import options, such as "don't do CRL checks"
This patch also maps the existing functions SEC_NewCrl and CERT_ImportCRL
to this new function, eliminating the code duplication that existed
2002-07-19 00:59:34 +00:00
jpierre%netscape.com b059277104 Fix for 156802 - remove improper check in CRL decoding 2002-07-19 00:12:13 +00:00
relyea%netscape.com 78d49962a7 Don't crash if url is specified, but the crl is broken 2002-05-21 21:26:52 +00:00
wtc%netscape.com c3e27be65d Bugzilla bug 130983: SEC_FindCrlByName needs to set the 'pkcs11ID' field
of the CERTSignedCrl structure it returns.  The patch is contributed by
Rangan Sen <rangansen@netscape.com>.  r=relyea.
2002-03-15 20:17:15 +00:00
relyea%netscape.com 7ccb67b360 CRL issues: 1) return url when finding and importing CRL's.
2) fix CERT_ImportCRL so it actually works.

NOTE: Calls of SEC_NewCrl() should verify the signature on the CRL before
importing!.
2002-02-26 02:02:53 +00:00
relyea%netscape.com 79e23ff590 restore checks for critical extenstions and fail if we have any we don't
recognize. Just remove the bogus check that v2 crls must have critical extensions
2002-01-31 00:42:43 +00:00
relyea%netscape.com 63ca3827f8 Keep a copy of the DER Crl. 2002-01-11 17:31:09 +00:00
relyea%netscape.com 7bfd9c97ec Clean up compilier warnings on Solaris and Linux, most particularly:
1) Implicit declaration of function.
2) Possibly unitialized variables.

These warnings have indicated some real problems in the code, so many changes
are not just to silence the warnings, but to fix the problems. Others were
inocuous, but the warnings were silenced to reduce the noise.
2001-12-07 01:36:25 +00:00
relyea%netscape.com e03f762c52 Land BOB_WORK_BRANCH unto the tip.
remove lots of depricated files.
move some files to appropriate directories (pcertdb *_rand
associated headers to soft token, for instance)
rename several stan files which had the same name as other nss files.
remove depricated functions.
2001-11-08 00:15:51 +00:00
relyea%netscape.com 325f46f29c remove bogus check for CRLs 2001-05-07 21:07:23 +00:00
nelsonb%netscape.com b09325c321 MSVC won't let you initialize a pointer in a data structure with the
address of an external variable that comes from another DLL.
This is a fundamental difference between WIN32 DLLs and Unix DSOs.
So, for every SEC_ASN1Template inside of libnss3 that is referenced by
other templates outside of libnss3, a new "chooser" function was created
that returns the address of that template.  For WIN32, the templates
outside of libnss3 access libnss3's templates by the chooser function
rather than by direct reference.  Some simple macros allow Unix to
continue to use direct references, avoiding the extra function calls.
With these changes, all.sh (qa script) passes all tests on NT with DLLs.
Modified Files:
	cmd/checkcert/checkcert.c cmd/lib/secutil.c lib/asn1/asn1t.h
	lib/certdb/certdb.c lib/certdb/certt.h lib/certdb/crl.c
	lib/certhigh/certreq.c lib/crmf/asn1cmn.c lib/crmf/crmfcont.c
	lib/crmf/crmftmpl.c lib/cryptohi/secsign.c lib/nss/nss.def
	lib/pkcs12/p12local.c lib/pkcs12/p12tmpl.c
	lib/pkcs7/certread.c lib/pkcs7/p7decode.c lib/pkcs7/p7local.c
	lib/smime/cmsasn1.c lib/smime/cmsattr.c lib/smime/cmspubkey.c
	lib/smime/cmssigdata.c lib/smime/smimeutil.c
	lib/softoken/keydb.c lib/softoken/keydbt.h lib/util/secalgid.c
	lib/util/secasn1.h lib/util/secasn1d.c lib/util/secasn1t.h
	lib/util/secasn1u.c lib/util/secdig.c lib/util/secdig.h
	lib/util/secoid.h
2001-01-07 08:13:13 +00:00
relyea%netscape.com 5dea64f5a5 Initial NSS Open Source checkin 2000-03-31 20:13:40 +00:00