e5e7ae2540
Fix for 202348 - check cert & key pointers returned by client auth application callback, to fix crash . r=nelsonb
2003-04-17 02:03:39 +00:00
587a893855
Fix for 202058 - Compile source files wit absolute pathnames to ease debugging on Win32 & OS/2
2003-04-17 01:59:34 +00:00
c4b4a8dbb9
Fix for 201134 - race condition when verifying certs. Don't reset the value of nsCertType in CERTCertificate in the middle of the computation. r=nelsonb
2003-04-17 00:32:54 +00:00
b1fa33d277
Bug 201808:We don't need to use _declspec(dllexport) to export
...
C_GetFunctionList now. nssckbi.def takes care of that.
Modified Files: ckapi.perl nssck.api
2003-04-17 00:07:06 +00:00
d476b191aa
Bug 201808: added nssckbi.def, which exports C_GetFunctionList.
...
Modified Files: manifest.mn
Added Files: nssckbi.def
2003-04-16 22:22:22 +00:00
cae35890e9
Take out bogus dependency on ASN1Util.
2003-04-15 23:21:04 +00:00
8e9032b6de
Fix for 202053 - signing of softokn3.dll may fail on OS/2. Force the use of OS/2 CMD.EXE default shell . r=pedemont
2003-04-15 22:42:09 +00:00
ba0cf6a4d7
Fix 202182: Base64InputStream throws EOFException on valid input.
2003-04-15 22:39:36 +00:00
48e3bcebb1
Catch NULL pointers before passing them to C and risking a crash.
...
Improve javadoc.
2003-04-15 21:55:53 +00:00
56054249da
Bug 201555: enable stripping of EXEs on OS/2 with gcc. The LIBPATHSTRICT
...
change in sign.cmd is so that you can run a VACPP build when gcc is
building (otherwise shlibsign loads the wrong DLLs). The patch is
contributed by IBM.
Modified Files:
coreconf/OS2.mk nss/cmd/shlibsign/sign.cmd
2003-04-15 04:08:09 +00:00
47768abcf7
The .chk files should have the $(DLL_PREFIX), not $(LIB_PREFIX), because
...
they correspond to shared libraries/DLLs.
2003-04-12 20:44:45 +00:00
4d3b825ffa
Make --disable-xul work (bug 69995). We build enough XUL to support
...
scrollbars unconditionally, but can now leave out heavyweight widgets like
grid, listbox, and tree. r=bzbarsky, sr=alecf.
2003-04-11 00:56:27 +00:00
1d976ea382
b=200236 Change Master password dialog OK button disabled with matching passwords
...
r=javi sr=alecf
2003-04-10 18:16:22 +00:00
04f618e4d1
Fix for 201259 . Make the default client auth callback NSS_GetClientAuthData work with dual-key certs. r=nelsonb, sr=wtc
2003-04-09 22:23:10 +00:00
ac35f550f4
Remove misleading comment.
2003-04-09 21:30:19 +00:00
f65819ed32
Fix bug 200225. Don't report invalid CA cert on trusted root CAs.
2003-04-08 04:49:39 +00:00
2524841c6d
Set NSS version to 3.9 Beta.
2003-04-08 00:29:54 +00:00
6eef066c5b
Bug 200974: NetBSD uses GNU ld and so also needs -rpath-link.
2003-04-07 23:52:17 +00:00
7f319292df
b=50823 S/Mime: Support certificates with multiple listed email addresses
...
r=javi sr=alecf
2003-04-04 12:57:51 +00:00
4627ba7a34
Backed out the previous checkin, which broke our NT nightly build. It seems
...
that USE_CYGWIN is set (to some strange value) under MKS shell.
2003-04-03 14:48:00 +00:00
717f28d62b
*** empty log message ***
2003-04-03 07:59:40 +00:00
a953022637
Fix for bug 200394 - update softoken version to 3.8 . r=wtc
2003-04-03 02:14:59 +00:00
e6a808e01e
Set NSS version to 3.8.
2003-04-02 23:27:01 +00:00
84db79731c
Fix bug 200224. Eliminate null ptr dereference.
2003-04-02 23:24:01 +00:00
cd7a968a67
Import NSPR 4.3 RTM.
2003-04-02 23:22:57 +00:00
8a6801f0fe
Fix bug 95138. Make debug .EXE files with debug symbols.
2003-04-02 04:27:23 +00:00
d92f79a4d6
Bug 200179: prepend, rather than overwrite, the shared library search path.
...
We can't assume the shared library search path is not set.
2003-04-01 22:58:26 +00:00
08505503e5
Destroy the hash context, public key, private key, and slot so that NSS
...
shutdown will succeed. r=relyea.
2003-04-01 22:47:46 +00:00
8e7b2d5896
Added a missing {.
2003-04-01 22:03:07 +00:00
bd0947dad5
checking return value of NSS_Shutdown() - bug 171263
2003-04-01 19:23:18 +00:00
680857dd96
checking return value of NSS_Shutdown - bug 171263
2003-04-01 19:13:50 +00:00
0eb8144a44
checking return value of NSS_Shutdown() - bug 171263
2003-04-01 19:11:38 +00:00
648c40a01e
Checking return value of NSS_Shutdown() - bug 171263
2003-04-01 19:05:56 +00:00
d863d8633f
checking return value of NSS_Shutdown() - bug 171263
2003-04-01 19:00:50 +00:00
39243d2acf
Bug 180294: on OpenVMS we need to pass the C flags set in the environment
...
to NSS's coreconf. The easiest way to do this is to pass Mozilla's
OS_CFLAGS (which includes those flags) to NSS as XCFLAGS. r=wtc. sr=cls.
a=asa.
2003-04-01 15:07:41 +00:00
a772bc1075
Fix for 199227 - keep enumerating certs in tokens even if one token fails. r=relyea
2003-04-01 00:07:05 +00:00
f430edde06
Bug 195127: Turn off debugging output now that we have the AIX tinderbox
...
working correctly.
2003-03-29 04:30:02 +00:00
f101c77399
Bug 199628: support shlibsign on OpenVMS. Pass $(OS_TARGET) instead of
...
$(IS_WINDOWS) to sign.sh and sign.cmd (which ignores that argument). In
sign.sh, use a case statement with three cases: Windows, OpenVMS, and
others. The patch is contributed by Colin Blakes <colin@theblakes.com>.
Modified Files: Makefile sign.cmd sign.sh
2003-03-29 00:42:43 +00:00
0f451fa946
Changes to enable ECC over characteristic 2^m fields.
...
Contribution from Vipul Gupta <Vipul.Gupta@Sun.COM>
Modified Files:
nss/cmd/strsclnt/strsclnt.c nss/lib/cryptohi/seckey.c
nss/lib/freebl/blapit.h nss/lib/freebl/ec.c
nss/lib/freebl/manifest.mn nss/lib/freebl/mpi/Makefile
nss/lib/softoken/ecdecode.c nss/lib/softoken/pkcs11.c
nss/lib/ssl/ssl3con.c nss/lib/util/secoid.c
nss/lib/util/secoidt.h
2003-03-29 00:18:30 +00:00
37e98be036
Backout change that broke Sun's build - requires gmake 3.79
2003-03-28 20:07:30 +00:00
492b2f677f
Fix for bug 105271 - compile source files with full pathnames on Windows & OS/2 to help debugging. r=wtc
2003-03-28 02:35:39 +00:00
66d2e3f995
landing final patch for NTLM authentication based on WIN32 SSPI API, b=159015 r=kaie sr=dbaron a=asa
2003-03-27 19:31:53 +00:00
863a8d106e
Bug 195797: support building NSS with GCC 3.x on OS/2. The patch is
...
contributed by Javier Pedemonte <pedemont@us.ibm.com>.
Modified Files:
security/coreconf/OS2.mk security/coreconf/rules.mk
security/nss/cmd/shlibsign/sign.cmd
2003-03-27 15:40:54 +00:00
6215d0ea7f
Add missing return statement.
2003-03-27 03:07:47 +00:00
7452fc6021
Bug 199134: fixed build failures on FreeBSD. We need to specify -pthread
...
when linking an executable (already doing that when linking a shared lib),
and we need to use the -rpath-link flag to help the linker find the
shared libraries that we indirectly link with. r=cls.
Modified Files: coreconf/FreeBSD.mk nss/cmd/platlibs.mk
2003-03-27 01:17:28 +00:00
8abc036ff5
Bug 195127: set the LIBPATH environment variable (used by AIX) as absolute
...
pathname. It seems that AIX caches shared libraries. If another app loaded
the same shared library earlier, the cached copy of the shared library,
including the pathname with which it was loaded, will be used. So we need
to ensure that all apps load libsoftokn3.so with an absolute pathname so
that the pathname is correct to all apps.
2003-03-26 21:07:12 +00:00
ffa45bb3d5
Removed extraneous trailing / after directory pathnames.
2003-03-26 18:30:33 +00:00
6d0b871174
Add support for Elliptic Curve Cryptography. Bug 195135.
...
Contributor(s):
* Sheueling Chang Shantz <sheueling.chang@sun.com> and
* Douglas Stebila <douglas@stebila.ca>, Sun Microsystems Laboratories
Added Files:
GF2m_ecl.c GF2m_ecl.h mpi/mp_gf2m.c mpi/mp_gf2m.h
mpi/tests/mptest-b.c
2003-03-26 05:03:11 +00:00
5fa3007c43
Bug 199082: checked in Nelson's patch, which
...
a) changes selfserv to test the return value from NSS_Shutdown.
b) changes SECMOD_Shutdown to set the error code SEC_ERROR_BUSY before
returning SECFailure.
c) Adds a new function SSL_ShutdownServerSessionIDCache to ssl.h.
d) Changes selfserv to call SSL_ShutdownServerSessionIDCache before calling
NSS_Shutdown.
Modified Files:
cmd/selfserv/selfserv.c lib/pk11wrap/pk11util.c
lib/ssl/ssl.def lib/ssl/ssl.h lib/ssl/ssl3con.c
lib/ssl/sslimpl.h lib/ssl/sslsnce.c
2003-03-26 00:31:13 +00:00
666bc35aa8
Bug 194083: use qcc instead of gcc. The patch is contributed by
...
amardare@qnx.com .
2003-03-25 19:32:36 +00:00
6fa1295b3a
Fix bug 198099. Display DSA public keys in certs properly.
2003-03-25 03:45:04 +00:00
a9cd0398f3
Bug 198483 Uninitalized m_dcx causes shutdown crash [@ NSS_CMSDecoder_Cancel]
...
r=kaie sr=darin
2003-03-25 02:30:56 +00:00
663581cf1d
Bug 196352 JS_GetContextPrivate isn't used correctly
...
r=javi sr=heikki
2003-03-25 02:30:22 +00:00
ee32c19ea0
final patch for bug 198270 "Trunk crash resulting from minimo branch landing" patch=dougt r=kaie sr=darin
2003-03-25 02:17:05 +00:00
1dda713ef1
Fix build
2003-03-25 02:13:33 +00:00
853f67123e
bug 198622, redundant memset calls
2003-03-24 22:25:52 +00:00
24df80f866
Bug 142867: pk12util needs to be able to import intermediate CA's into hw
...
tokens.
2003-03-24 19:09:08 +00:00
f906970555
Removed the experimental change. It did not cause the intermittent QA
...
failures on the "aix64" tinderbox to go away.
2003-03-23 00:16:43 +00:00
7d5a549784
Deleted an obsolete comment.
2003-03-22 08:01:44 +00:00
af16248797
An experimental change for debugging bug 195127: on the 64-bit AIX
...
tinderbox the dist/${OBJDIR}/lib/libsoftokn3.chk symlink sometimes does
not get created.
2003-03-22 07:52:25 +00:00
2bf9cb3f60
Added more debugging output for bug 195127.
2003-03-22 07:46:06 +00:00
48629bc614
Bug 198543: checked in the patch from Chris Seawood to fix BeOS bustage.
...
Apparently it is necessary to have LIBRARY_PATH set in the environment.
2003-03-22 02:59:26 +00:00
893b5e6ec4
BSD/OS seems to be using GNU ld, which needs -rpath-link to find the
...
implicit dependency of an explicitly lined .so at link time.
2003-03-22 01:26:58 +00:00
5fddce79bd
bug 168393 PK11SDR_Decrypt() does not call PK11_Authenticate() before search
...
for the key.
2003-03-22 00:22:26 +00:00
3a231a715d
bug 198470 "Cached certs not updated after token reset." r=ian.mgreer r=wtc
2003-03-22 00:18:45 +00:00
0dc1ca96c0
Bug 198543: BeOS uses LIBRARY_PATH to search for shared libraries.
2003-03-21 21:33:43 +00:00
2924b7de7e
Rewrote without the dirname() and basename() calls because they are not
...
available on some Unix platforms (e.g., BSD/OS 4.2).
2003-03-21 20:57:07 +00:00
5c817e6aa2
Resurrected the workaround in revision 1.2. It may be difficult for some
...
OSF1 users to upgrade their C compiler to the required versions.
2003-03-21 15:10:11 +00:00
741b6aa630
Bug 197890: backed out the previous checkin. For unknown reasons, the
...
Mozilla trunk Tinderbox machine "beast" had trouble running the cygpath
command. It failed with the error
"can't create title mutex, Win32 error 6".
2003-03-21 06:10:31 +00:00
419689f00c
Bugzilla 198461: fixed build problem on OpenBSD. The patch is contributed
...
by timeless@bemail.org .
2003-03-21 05:24:29 +00:00
817ccffe16
On IRIX, dirname() and basename() are defined in -lgen.
2003-03-21 05:13:20 +00:00
dd2958fda2
Bugzilla 198481: when using cc to build a 64-bit SPARC shared library, we
...
need to specify -xarch=v9.
2003-03-21 04:45:37 +00:00
a93c36bf22
Bug 198482: OS/2 can't run sign.sh because we can't set DLL load path in
...
a shell script. This patch is contributed by Michael Kaply
<mkaply@us.ibm.com>.
Modified Files: Makefile
Added Files: sign.cmd
2003-03-21 03:48:11 +00:00
97578420c2
Bugzilla 198481: fixed all build problems with gcc on Solaris.
...
1. Removed the workarounds we put in before -- hardcoding LD to
/usr/ccs/bin/ld and passing the -B/usr/ccs/bin/ flag to gcc.
2. Use the compiler, $(CC), to build shared libraries.
3. If gcc is used, determine whether gcc uses GNU ld or Solaris
ld and set the new make variable GCC_USE_GNU_LD accordingly.
Modified Files:
coreconf/SunOS5.mk nss/cmd/platlibs.mk nss/lib/freebl/Makefile
2003-03-21 03:31:00 +00:00
65b322e3e9
Add OID Definition for AOL screenname attribute.
2003-03-20 23:53:39 +00:00
548bf161dc
White space change simply to cause the Mozilla tinderboxes to rebuild.
2003-03-20 23:12:43 +00:00
b6459fddea
Backed out the .nss_cleaned hack checked in in rev. 1.43. It didn't work
...
as expected. r=cls.
2003-03-20 23:03:06 +00:00
4237fb8119
Bug 197877: PSM makefile changes for NSS 3.8 -- 1. need to build the new
...
NSS tool shlibsign and generate the .chk files with it. 2. need to install
the .chk files in the appropriate directories. r=kaie. sr=bryner.
2003-03-20 18:03:22 +00:00
0dd45a89f1
Bug 195127: added temporary debugging output.
2003-03-20 02:00:40 +00:00
615653a02f
Bug 58221: don't use strlen to check if a string is of length 0.
2003-03-19 06:37:03 +00:00
78ac357c09
Bug 58221: don't use strlen to check if a string is of length 0.
2003-03-19 06:30:12 +00:00
1fe952b490
Fix 198125: PK11Signature.engineUpdateNative ignores offset and length.
2003-03-19 00:57:29 +00:00
b2bd059285
Bug 197890: use Cygwin's cygpath command to "escape" a pathname with a
...
drive letter for Cygwin's bash.
2003-03-18 14:48:09 +00:00
1040fa5786
Fix type mismatches in return values that were breaking gcc builds.
...
No bug number.
2003-03-18 03:24:59 +00:00
b5648cc904
Bug 197890: Eliminated the artificial dependency of all NSS cmd tools on
...
zlib. Only some of them (modutil and signtool) need zlib and we now define
that dependency explicitly. In shlibsign/sign.sh, escape the drive letter
if the pathname contains it and we are using Cygwin so that the pathname
does not contain any colon, which is the PATH separator in Cygwin. r=relyea
Modified Files: platlibs.mk modutil/manifest.mn shlibsign/sign.sh
signtool/manifest.mn
2003-03-17 21:48:18 +00:00
be629223b6
Create a new xpcom obsolete library (and component library).
...
Moved nsFileSpec and related classes into this obsolete library.
Moved nsRegistry and related libreg functionality into the obsolete library.
Updated many callers using the obsolete nsFile spec to use nsIFile and Necko to do file IO.
Combined the following DLLs (source -> dest)
uriloader -> docshell
shistory -> docshell
jsurl -> jsdom
gkview -> gklayout
Moved nsAdapterEnumerator out of xpcom/ds and into mailnews, since they're the only consumer
Modifed the xpt_link tool so that you can specify a �only include� cid list that can mask CID�s that you are not interested in.
Added build options:
Prevent the building of xpinstall (--disable-xpinstall)
Prevent the building js component loader (--disable-jsloader)
A build option to only build a single profile (--enable-single-profile)
A build flag to only built the required xpfe components (--disable-xpfe-components).
Removal or hiding of unused functions and classes including nsEscape*, nsDequeIterator, nsRecyclingAllocatorImpl, nsDiscriminatedUnion, nsOpaqueKey, nsCRT::strlen, NS_NewCommandLineService
Bug 194240, r/sr = darin, alec.
2003-03-15 01:04:32 +00:00
d57e9ab5b7
Make indention style consistant with SSL's usage, not softoken/pk11 usage.
2003-03-13 16:36:43 +00:00
6c4e221cc7
Bug 197147: removed an invalid/unnecessary comparison of two
...
PRIntervalTimes in pk11_InDelayPeriod.
2003-03-13 01:16:00 +00:00
bc3ae9a59d
Allow for tokens that don't require login. bug 197082
2003-03-12 19:22:32 +00:00
3a1698b77b
Made 'seconds' argument to '-L' optional.
...
Updated Usage with '-L [seconds]' syntax, and default value (30).
2003-03-12 02:40:43 +00:00
a0deb9ee05
Fix for 192590 - add ability to encode NSSCMSRecipientInfo . r=javi, wtc
2003-03-11 03:38:54 +00:00
f7e1ad24fe
Bug 196776: the 'src' argument to the ASN.1 encoding functions should be
...
declared 'const'.
Modified Files: secasn1.h secasn1e.c
2003-03-11 02:31:16 +00:00
8ebb681aaf
Shifted optimization level on Solaris to -xO3 (bug 122974).
2003-03-11 01:18:31 +00:00
379e743c92
Fix for bug 175167 - don't use mark & release in QuickDER decoder . r=wtc
2003-03-07 01:13:22 +00:00
756e8dcab5
Bug 118832: with the removal of the crmfi.h inclusion, CRMFEncryptedKey
...
becomes an incomplete type, and aCC on HP-UX does not allow using
static_cast to cast a pointer to an incomplete type to void *. Use
implicit conversion of a data pointer to void * instead. r=kaie. sr=dbaron.
2003-03-06 15:04:46 +00:00
7718d6cb68
remove last references to TraverseCerts by removing depricated functions with call it. r=wtc
2003-03-05 21:46:20 +00:00
61a584ed08
Remove external use of SEC_TraversePermCerts(). Bug 130968.
2003-03-05 01:04:33 +00:00
7c7ae26998
Bug 185245. including wtc's comments.
...
Don't reference memory beyond the end the the data element when decoding a
SubjectEntry. Prevents crashes from corrupted Subject Entries.
2003-03-05 01:02:03 +00:00
c635402806
Fix memory leaks. (roll fixes from 3.7 BRANCH).
2003-03-05 00:59:36 +00:00
1730c69cc7
Incorporate wtc comment from bug 19061 (removal of commented code).
2003-03-04 23:11:09 +00:00
46ee0eea31
bug 162976: make crl update atomic. Set up new Crl with a new Object ID which is different from the old one.
2003-03-04 22:36:27 +00:00
72f513f7ef
Bug 162976. Make CRL updates 'atomic' . Insert new CRL before deleting the
...
old one.b
2003-03-04 22:34:56 +00:00
df2b3f1e6e
Print all the certs for a given nickname, not just the first.
2003-03-04 22:32:24 +00:00
be7d152cb3
Fix QA failures on tip (don't dereference through a NULL pointer).
2003-03-03 19:46:22 +00:00
ac86d72617
Bug 195127: 1. Enable DEBUG_SHVERIFY. 2. Added debug output to print the
...
file name if PR_Open fails.
2003-03-01 01:53:11 +00:00
26e539e088
bug 19590
...
RFE:Add ability to encode/decode NSSCMSRecipientInfo structures
r=javi,wtc
2003-02-28 23:32:29 +00:00
64a832e0e7
bug 177556, signtool -l fails
...
r=wtc
2003-02-28 21:14:36 +00:00
cccb7a3f68
bug 191757, InitOIDHash() not threadsafe
...
r=relyea
2003-02-28 21:13:20 +00:00
67a96671aa
Bug 194821, Page Info: add access keys for _H_elp button, and _V_iew in Security tab
...
r=db48x, sr=jaggernaut, patch by jessie.li@sun.com .
2003-02-28 11:20:20 +00:00
d31cd6e89d
Bug 195196: fixed a typo.
2003-02-27 14:49:30 +00:00
42fae25f24
Add support for Elliptic Curve Cryptography. Bug 195135.
...
Modified Files:
cmd/lib/SECerrs.h cmd/selfserv/selfserv.c
cmd/tstclnt/tstclnt.c lib/cryptohi/keyhi.h
lib/cryptohi/keythi.h lib/cryptohi/seckey.c
lib/cryptohi/secvfy.c lib/freebl/Makefile lib/freebl/blapi.h
lib/freebl/blapit.h lib/freebl/ldvector.c lib/freebl/loader.c
lib/freebl/loader.h lib/freebl/manifest.mn lib/nss/nss.def
lib/pk11wrap/pk11skey.c lib/pk11wrap/pk11slot.c
lib/softoken/lowkeyti.h lib/softoken/manifest.mn
lib/softoken/pkcs11.c lib/softoken/pkcs11c.c
lib/softoken/pkcs11t.h lib/ssl/ssl3con.c lib/ssl/ssl3prot.h
lib/ssl/sslcon.c lib/ssl/sslenum.c lib/ssl/sslimpl.h
lib/ssl/sslinfo.c lib/ssl/sslproto.h lib/ssl/sslsecur.c
lib/ssl/sslsock.c lib/ssl/sslt.h lib/util/secerr.h
lib/util/secoid.c lib/util/secoidt.h
Added Files:
lib/freebl/GFp_ecl.c lib/freebl/GFp_ecl.h lib/freebl/ec.c
lib/freebl/ec.h lib/softoken/ecdecode.c
2003-02-27 01:31:38 +00:00
11348f5311
bug 194924 - localeVersion update for 1.4a, r=rchen, sr=blizzard
2003-02-27 00:05:44 +00:00
66f7b8cddb
Add missing dependency on error headers.
2003-02-26 23:52:40 +00:00
e7a02a41a4
Fix bug 194840. Get new random seed before each attempt to sign with DSA.
2003-02-25 23:45:23 +00:00
1fb9fd4cdd
Addresses bug 193378 modutil should print an error message,
...
by printing error on SECMOD_DeleteInternalModule() failure.
2003-02-25 02:09:11 +00:00
6d5833f249
Bug 190537: build OS/2 DLLs using the map files to control symbol export.
...
The patch is contributed by Javier Pedemonte <pedemont@us.ibm.com>.
Modified files: coreconf/OS2.mk coreconf/rules.mk nss/lib/ckfw/nssck.api
2003-02-25 01:40:04 +00:00
29f051b1d6
bug=193068
...
Missing accesskeys in preference dialogs
r=timeless sr=jaggernaut@netscape.com
2003-02-24 07:59:17 +00:00
0203ef6893
fixed bug 149841 It should NOT be possible to open cert manager twice at the same time. r=kaie sr=alecf
2003-02-24 07:07:13 +00:00
0bff47a153
Simplified the test for substrings.
2003-02-22 15:20:07 +00:00
0d0ab083d9
Fix for bug 192365. Remove extraneous seltype="multiple" attributes of <tree>s in xul.
...
r=varga, sr=jag, patch by Daniel Crisman <bugzilla@w.d6.org>
2003-02-22 11:48:19 +00:00
105486968a
ACK this wasn't meant for the trunk. File wasn't tagged properly. Sorry. backing out.
2003-02-22 02:35:31 +00:00
47ae6e0aab
hide ftp channel when building minotaur
2003-02-22 02:22:51 +00:00
95525c28a1
Fix bug 160207. Make TLS implementation resistant to timing attacks on
...
CBC block mode cipher suites in TLS. See bug for details.
2003-02-21 23:00:16 +00:00
d97151bee3
Bug 194309: cvs removed libpath.c because the freebl_GetLibraryFilePathname
...
function has been replaced by the new NSPR 4.3 function
PR_GetLibraryFilePathname.
2003-02-21 02:40:52 +00:00
c6ada6f97b
Bug 194309: replaced freebl_GetLibraryFilePathname by the new NSPR 4.3
...
function PR_GetLibraryFilePathname.
Modified files: config.mk manifest.mn shvfy.c
2003-02-21 00:41:24 +00:00
176876e10c
OS/2 bustage - PR_CALLBACK
2003-02-20 19:09:43 +00:00
1d3e993c7a
Bug 194222: Removed SECMOD_CallOnce. It is replaced by the new NSPR 4.3
...
function PR_CallOnceWithArg.
Modified files: nss/nssinit.c pk11wrap/pk11cert.c pk11wrap/secmodi.h
2003-02-20 16:58:57 +00:00
b7882c433d
Bug 118832: do not include NSS private header files. "genname.h" is simply
...
not needed. "crmfi.h" can be avoided by using the public function
CRMF_EncodeCertReqMessages. r=kaie. sr=bryner. a=asa for mozilla 1.3.
Modified Files: Makefile.in nsCrypto.cpp nsNSSIOLayer.cpp
2003-02-20 14:56:10 +00:00
57ec96bba5
writing actual return of modutil to output.log, bug 193394 r=wtc
2003-02-20 00:52:40 +00:00
1f21ec5ceb
b=173369 Migrating NSS databases from the "CFM" build to the "mach-o" build
...
r=javi sr=peterv a=asa
2003-02-20 00:19:45 +00:00
a79dc7f765
echoing modutil commandline to output.log, bug 193394 r=wtc
2003-02-19 23:26:52 +00:00
1945c33989
switching the NSPR version to v4.3-beta1
2003-02-19 23:21:23 +00:00
4c5cf50f52
Patch for 193961 - incorporate Wan-Teh's feedback
2003-02-19 21:50:49 +00:00
c210ab5523
Bug 190960: added the DHE ciphersuites back because the underlying NSS bug
...
(bug 188856) that broke them has been fixed. r=kaie. sr=bryner. a=asa for
mozilla1.3.
Modified Files:
netwerk/base/public/security-prefs.js
security/manager/pki/resources/content/ssl3tlsciphers2.xul
security/manager/pki/resources/locale/en-US/pref-ssl.dtd
security/manager/ssl/src/nsNSSComponent.cpp
2003-02-19 15:08:50 +00:00
cc0db2005f
Fix for bug 193691 . Make QuickDER return an error rather than assert if extraneous data is present in the buffer
2003-02-19 02:29:48 +00:00
1f3f0e69ef
Bug 192639: Use utility functions for managing token passwords so that
...
cmsutil will prompt for the value if it is not given on the command line.
r=nelsonb
2003-02-19 00:39:39 +00:00
3d0a1f67b4
Bug 193367: do not call PR_Now() in a loop. r=nelsonb.
2003-02-18 23:26:39 +00:00
d84324a740
bug 174200, don't attempt to decode cert when destroying it, handle failure
...
to decode cert serial number
r=nelsonb
2003-02-18 20:53:14 +00:00
a44277fff4
Add DHE algorithms to the list. (Merged relyea's checkin (rev. 1.3.2.1)
...
from the NSS_3_7_BRANCH to the trunk.)
2003-02-18 02:53:54 +00:00
442aeeb97a
Bug 188856: it is not necessary to declare 'crv' in these blocks because it
...
is already declared in the outer scope.
2003-02-18 02:47:04 +00:00
60391f57be
Bug 192617: export NSS_CMSRecipientInfo_Wrap/UnwrapBulkKey from the smime3
...
shared library.
2003-02-18 00:45:34 +00:00
91857ca5bd
Bug 134967: handle spaces and hyphens in $(USERNAME). Convert them to
...
underscores. r=seawood@netscape.com .
2003-02-15 20:39:01 +00:00
43ac537225
Bug 193055: the "cat ${file} | while read ...do ... done" construct does
...
not work under MKS Korn shell on Windows XP. Replaced it by the equivalent
construct "while read ... do ... done < ${file}".
2003-02-15 04:48:13 +00:00
b13bd23954
Bug 167756. Address Nelson's review comments. remove socket specific latency
...
in favor of a slot specific latency test (already done by pk11wrap code).
2003-02-15 01:21:25 +00:00
ff5dbf2eed
bug193367: Don't blindly copy all the certs from a given S/MIME message into the db.
2003-02-15 00:23:04 +00:00
bf0426a4ab
bug 193394, change to check returncode of modutil after switching to
...
fips mode, r=wtc
2003-02-14 21:30:45 +00:00
74b8cae5f0
There should be no token after #endif.
2003-02-14 05:32:35 +00:00
5c579360c2
Changed License: MPL to MPL/GPL.
2003-02-13 18:24:07 +00:00
69ce67aba4
Turn off debugging output now that we have the tinderboxen working correctly.
2003-02-13 17:41:45 +00:00
2908f09255
Added softokn3 library, and the new integrity check files.
2003-02-13 03:30:19 +00:00
973801b199
Bug 193057: add WINNT5.1_* symlinks in mozilla/dist for Windows XP QA.
2003-02-13 01:45:01 +00:00
6270df5573
Turn off the mangle test for now.
2003-02-12 22:21:59 +00:00
f1af545d36
Removed extraneous ` from PRODUCT_VERSION.
2003-02-12 16:12:14 +00:00
684c1663ec
Bug 107976: allow CC to be overridden (with the full pathname of the C
...
compiler) on the make command line.
Modified files: AIX.mk ruleset.mk
2003-02-11 01:15:36 +00:00
2d128d88e2
Always free the key reference passed to us from the client
2003-02-10 22:36:45 +00:00
9d79e728d1
Resolves bug 191221, by adding dynamic versioning for Solaris.
2003-02-10 18:18:52 +00:00
165f568bae
Bug 131826: backed out the zlib 1.1.4 upgrade because the signtool tests
...
failed.
Modified Files:
README adler32.c compress.c crc32.c deflate.c deflate.h
example.c gzio.c infblock.c infblock.h infcodes.c infcodes.h
inffast.c inffast.h inflate.c inftrees.c inftrees.h infutil.c
infutil.h minigzip.c trees.c uncompr.c zconf.h zlib.h zutil.c
zutil.h
2003-02-08 15:00:13 +00:00
6edc864d6e
Bug 131826: checked in the README file of zlib 1.1.4.
2003-02-08 09:10:36 +00:00
7d4ad3fc60
Bug 131826: upgraded to zlib 1.1.4.
...
Modified Files:
adler32.c compress.c crc32.c deflate.c deflate.h example.c
gzio.c infblock.c infblock.h infcodes.c infcodes.h inffast.c
inffast.h inflate.c inftrees.c inftrees.h infutil.c infutil.h
minigzip.c trees.c uncompr.c zconf.h zlib.h zutil.c zutil.h
2003-02-08 08:50:42 +00:00
899b4b00c5
Bug 131826: added maketree.c from zlib 1.1.4.
2003-02-08 08:37:00 +00:00
51a2c07941
Removed unused files stubs.c and zip_nodl.c.
2003-02-08 08:35:07 +00:00
23f47b2e4d
Bug 131826: added new header files from zlib 1.1.4.
...
Added Files: trees.h inffixed.h
2003-02-08 08:30:11 +00:00
dae21534d8
Sigh, the QA scripts look for the word 'failed', but it's common that we
...
can't open the shared library and isn't a real failure, so change the wording
2003-02-08 01:52:37 +00:00
c40beead4c
Skip corruption test if someone has locked down the shared library on us.
2003-02-08 00:02:06 +00:00
34372e7cee
Exit with 1 rather than -1 on failure. Make sure the program exit with 1
...
on all failures. Remove the symlink, if a file/symlink by that name already
exists, before creating it to avoid the EEXIST error.
2003-02-07 23:41:15 +00:00
8d38bb626b
Use <> around standard/system header files. This file does not need
...
string.h, but it should include stdio.h because it uses fprintf and printf.
2003-02-07 23:21:53 +00:00
923827d462
Fix bug 190527. Properly extend buffer when data exceeds 512 bytes.
2003-02-07 23:09:35 +00:00
d3fd98806e
Fix signed/unsigned display issue.
...
Add more loggin information on errors (rev 1.3 added this but lost it's log).
2003-02-07 23:05:07 +00:00
bcafc7572b
*** empty log message ***
2003-02-07 23:02:43 +00:00
4dd6b2da64
Add test to see if the shlib was actually changed.
2003-02-07 21:13:10 +00:00
aa9dafae78
Add Mangle logging...
2003-02-07 21:12:26 +00:00
70e3aa6345
Add debugging information. Turn on tempararily to get debug info from tinderbox failures.
2003-02-07 19:22:42 +00:00
03a251009f
Moved rules.mk include to the end.
2003-02-07 07:16:37 +00:00
e1fe9f07a3
Set the default compiler to cc.
2003-02-07 06:57:57 +00:00
645cb762cb
Move the implementation of the TLS Pseudo Random Function (PRF) from
...
pkcs11c.c into a new file: tlsprf.c.
2003-02-07 06:42:20 +00:00
f9133aa19e
Fix the dbtests test on Windows, when run in all.sh.
...
The problem was that fips.sh created a file in . named dbtest, which was
actually some text output by a previous test. This dbtest file prevented
the dbtest program from running. The text file now has another name.
2003-02-07 06:32:59 +00:00
edc53c0499
Resolves bug 189504 (Build Linux RPMS).
2003-02-07 05:56:15 +00:00
d6bf23b21d
MKS shell doesn't know about echor command. Does any shell?
2003-02-07 05:48:34 +00:00
e7ff335e8c
Remove unreferenced local variables from functions.
2003-02-07 05:08:01 +00:00
5376fc6d82
Moved the definition of MD_LIB_RELEASE_FILES from manifest.mn to Makefile
...
so that it is right next to the definition of CHECKLOC, which it uses.
2003-02-06 22:37:37 +00:00
929ac59217
Clean up tests
...
Suppress error messages which we were expecting because it causes the QA
scripts to report a QA failure.
2003-02-06 19:06:39 +00:00
6b8ac1fb4b
Mangle will be changing the shared libraries, so it should link with them.
2003-02-06 18:18:42 +00:00
7870b01f6d
Bug 177387: Put the configuration/assignments before the rules in Makefile.
...
Define MD_LIB_RELEASE_FILES in manifest.mn so that the *.chk files are
included in the mdbinary.jar files generated by the release target.
2003-02-06 16:56:46 +00:00
6d2419f541
Turn on FIPS test again.
2003-02-06 16:13:44 +00:00
d32d519e9e
Introduce shell variables for DLL_PREFIX and DLL_SUFFIX
2003-02-06 16:13:22 +00:00
edb8b5fe44
Support both ";" and ":" as PATH separators on Windows. MKS Korn shell
...
uses ";" but Cygwin bash uses ":".
2003-02-06 14:52:43 +00:00
82345876f3
Backed out the previous checkin because it doesn't work on Windows.
2003-02-06 05:33:33 +00:00
2574db9f16
Bug 188441: compile with -D_USE_BIG_FDS on HP-UX. This ensures that fd_set
...
is large enough for 60,000 file descriptors.
2003-02-06 04:43:03 +00:00
92c86ec530
Bug 177387: include the *.chk files in the mdbinary.jar files generated by
...
the release makefile target.
Modified Files: lib/freebl/manifest.mn lib/softoken/manifest.mn
2003-02-06 03:52:37 +00:00
c611d55441
Remove mangle test until we can get the correct library name inside fips.sh for all platforms
2003-02-06 01:07:39 +00:00
8bc877fcf9
Add check to 1) make sure we are in FIPS mode. and 2) to verify that we
...
detect corrupted shared libraries while in FIPS mode.
2003-02-06 00:50:00 +00:00
d25559ff9f
The NSPR get shared lib interface requires the library name only,
...
not a partial path to the library. This affects AIX.
2003-02-06 00:49:09 +00:00
c613b5df3c
Try to load the new module before we've unloaded the old one. This now
...
works in NSS, and it allows us to back out if the new one didn't load (because
FIPS could not verify the shared module for instance).
2003-02-05 00:35:53 +00:00
9eb1dbcff9
Update db test to verify cert8 not cert7
2003-02-05 00:33:52 +00:00
bc5d891538
Surface the Err codes if we fail to shift to FIPS mode.
...
Add new option to verify that we have shifted to FIPS mode.
2003-02-05 00:31:15 +00:00
b8ee14395c
1) turn on mangle builds.
...
2) better fix for the missing MAXPATHLEN missing define.
3) make room for the '\0' in the pathname.
2003-02-05 00:29:35 +00:00
1ed41d69c9
Fix LINUX breakage (define MAXPATHLEN if it wasn't defined the the standard
...
system headers).
2003-02-04 23:39:15 +00:00
c5679652a6
Add code to handle symlinks.
...
Add verbose output to print out hashes and signatures.
2003-02-04 23:18:08 +00:00
b66f562dec
Add program which will mangle exactly 1 bit in a file.
2003-02-04 23:16:56 +00:00
883af5be6e
Fix windows build breakage.
2003-02-04 19:03:11 +00:00
a7bcf48918
b=191301 Crash if I cancel "Choose token" dialog on Cert import
...
r=javi sr=darin a=dbaron
2003-02-04 01:37:23 +00:00
2cf013ba38
Shell script to set up the path before running the signing tool
2003-02-03 21:06:57 +00:00
cb166d81a7
Generate .chk file at build time when we build shlibsign
2003-02-03 21:06:18 +00:00
ab6d0dea43
Check bug 188856 into the tip.
...
1)return proper error code in more cases. 2) Fix bug in DH KeyPair Generation.
the essential part of this fix in pkcs11c.c where we add the CKA_NETSCAPE_DB
attribute on Diffie-Hellman key gen. I don't know why the code would have even
thought of working without this (unless we were testing with pregenerated
keys).
The rest of the fix is to surface more of the PKCS #11 error back up. There is
a separate bug to continue tracking the issue of lost PKCS #11 errors.
2003-01-31 23:39:34 +00:00
8fdd6beaad
b=189974 Profile Switching fails after JavaScript based cert import
...
PSM portion of fix
r=javi sr=darin a=asa
2003-01-31 22:33:49 +00:00
7874d8d788
Fix an uninitialized variable. Bug 191396.
2003-01-31 22:26:56 +00:00
91b818b389
Fix crash in CERT_CheckKeyUsage caused by dereferencing a returned pointer
...
without checkin it for NULL.
2003-01-31 02:49:13 +00:00
04c74fc4ac
Fix bug 191396. Don't generate SEC_ERROR_LIBRARY_FAILURE unnecessarily
...
while doing dsa signatures.
2003-01-31 02:39:36 +00:00
2d71279799
FIPS library verifier.
2003-01-30 23:38:07 +00:00
bd68779b0c
FIPS library verifier
2003-01-30 23:36:37 +00:00
751c48b5e5
Bug 191214: fixed the object leaks in signtool that prevented NSS_Shutdown
...
from succeeding and added the NSS_Shutdown call back. r=jpierre.
Modified Files: certgen.c sign.c signtool.c
2003-01-30 23:11:13 +00:00
5f51d20223
Bug 177387: temporarily added freebl_GetLibraryFilePathname to libfreebl.a.
...
This function has the same semantics as the NSPR 4.3 function
PR_GetLibraryFilePathname. This patch should be backed out when NSPR 4.3 is
released.
Modified Files: config.mk manifest.mn
Added Files: libpath.c
2003-01-30 07:00:32 +00:00
4efd6d4409
Fix for 190424 - don't query CKA_NETSCAPE_EMAIL attribute. r=wtc
2003-01-30 05:12:10 +00:00
e3c369562b
Fix for 190424 - don't query CKA_NETSCAPE_EMAIL attribute . r=wtc
2003-01-30 03:02:55 +00:00
468dc9f9ab
Patch for memory leak . Bug 189976 . r=wtc
2003-01-30 02:59:35 +00:00
fedddcffe2
Bug 191214: backed out the previous checkin until this bug (object leaks)
...
is fixed.
2003-01-30 01:50:31 +00:00
4dbc437731
Bug 171263: signtool should call NSS_Shutdown before it exits.
2003-01-30 00:39:37 +00:00
3788b0eeec
Move LIBJAR definitions around so that NT builds.
2003-01-29 23:37:10 +00:00
69c368b1a9
b=165301 False mixed content (encrypted page with unencrypted information) Security Warning
...
r=javi sr=darin a=asa
2003-01-29 03:52:01 +00:00
807a5de681
1) add vfyserv to the standard build.
...
2) add tool to build shared library signature files for FIP's.
Code to verify requires NSPR changes before we can check it in.
2003-01-28 18:53:22 +00:00
fa9c0d1f91
New header file to dump defines for managing signed FIPs libraries.
2003-01-28 18:50:02 +00:00
97ee121321
Compile modutil with shared libraries.
2003-01-28 16:44:33 +00:00
ca368d8e94
Export functions needed for modutil to be compiled dynamically.
2003-01-28 16:41:46 +00:00
2a6c459c18
Remove dead code and symbols from lib jar so that modutil can compile when
...
linked with it.
2003-01-28 16:39:32 +00:00
88f5c92825
Sign 3 sets of changes are here:
...
1) Provide accessor functions for the PK11_DefaultArray so that modutil
does not have to link statically to access it.
2) Try setting the attribute on an object before we go to the work of copying
it (Function Only used in Java).
3) Optimize searching for the more common types of attributes.
2003-01-28 16:38:04 +00:00
6b9785edcd
b=190640 Remove the DHE ciphersuites until they work
...
r=javi sr=bryner a=asa
2003-01-28 15:06:29 +00:00
64cd67a3d0
b=190394 "website certified by an unknown authority" - nssckbi not found breaks PKI trust
...
r=dougt sr=darin a=asa
2003-01-27 23:53:02 +00:00
6d046ab3c2
Bug 90010: added support for parisc64. I received this patch from
...
Christopher Blizzard <blizzard@mozilla.org>.
2003-01-27 22:36:06 +00:00
d4ac75f3a6
Bug 190396.
...
Don't fail the search if the token returned an error that indicates that it
legitimately couldn't find a CRL
2003-01-24 06:37:03 +00:00
04df2266d3
Bug 167756. Clean up previous patch: add lastState field, and set the SSL Error on failure.
2003-01-23 22:02:37 +00:00
797a5bc51c
Write changes back to the database when we correct incorrect user bit settings.
2003-01-23 19:38:53 +00:00
48191e6dde
Set the size value when extracting a key 19011.
2003-01-23 17:30:15 +00:00
c5e06bef79
Check for token removal before continuing SSL sessions which have client auth
...
with certs associated with that token. bug 167756.
2003-01-23 17:27:34 +00:00
a54ce85446
Fix bug 180824 Version 3.4 string hard coded in default token name.
2003-01-23 17:16:50 +00:00
722dc7dcf5
Bug 90010: added support for Linux for s390 and s390x. The patch is
...
contributed by Gerhard Tonn <GerhardTonn@swol.de>.
2003-01-23 17:16:32 +00:00
c05c7c3f1e
always use explicit serial numbers on generated certs, should fix QA failures on leia
2003-01-23 15:38:03 +00:00
d68a388386
Fix for bug #126930 - make SSL_ConfigServreSessionIDCache work on OS/2 by not using shared memory in single process mode. r=nelsonb
2003-01-23 00:15:08 +00:00
dcfc314ddc
Bug 190112: PK11_ReadAttribute needs to call PK11_ExitSlotMonitor before
...
we return because of allocation failure.
2003-01-22 17:44:36 +00:00
ba247cd419
Bug 189546: updated the comments to reflect what the new code does.
2003-01-22 06:24:53 +00:00
e87b036988
Bug 179798 cookie confirm dialog no longer works in embedding (doesn't call nsIPrompt service)
...
patch by mvl@exedo.nl r=dwitte sr=darin
2003-01-22 05:52:33 +00:00
e5ea957b6e
Add OIDs for AES Key Wrap mechanism.
2003-01-22 04:35:54 +00:00
ddc27a6bbf
Bug 189546: moved the switch statement for known key lengths to the
...
beginning of PK11_GetKeyLength to work around a deadlock in nCipher
module if PK11_ExtractKeyValue is called.
2003-01-22 03:55:21 +00:00
153d01add8
b=188363 Bad error messages when server uses an invalid cert (-8054)
...
r=nelsonb sr=blizzard
2003-01-22 03:41:35 +00:00
2770ec645e
Implement new AES Key Wrap mechanisms. Bug 167818.
2003-01-22 03:13:04 +00:00
f20a97ef6a
Bug 189345: we incorrectly assumed that a C_XxxFinal call to determine the
...
length of the buffer would also terminate the active operation if the
buffer length is 0. PKCS#11 says it doesn't, so we need to make the
additional C_XxxFinal call even if the buffer length is 0. Allocate a
buffer from the heap if the stack buffer is too small and free the
heap-allocated buffer before we return from pk11_Finalize. We can use the
stack buffer if count is equal to its size.
2003-01-21 19:33:24 +00:00
a4b8644bc9
I always forget to change both the declaration & the definition.
...
Thanks to bird@anduin.net for the patch.
Fixing OS/2 bustage.
2003-01-19 06:43:19 +00:00
6e4b727afc
Callback functions must be defined as such.
...
Fixing OS/2 bustage.
2003-01-19 02:43:13 +00:00
499c2e67f7
b=189205 Implement early shutdown of NSS resources
...
r=javi sr=darin
2003-01-18 14:03:00 +00:00
402a4a6710
Bug 198364. Tokens keys do not own their handles. Don't let the key
...
get destroyed when freed.
2003-01-18 01:49:33 +00:00
48e8c13dcd
When wrapping secret keys with an unpadded block cipher, null padd the keys
...
as necessary, per the PKCS 11 spec. Also, implement padding and unpadding
for single-part only ciphers.
2003-01-17 05:50:08 +00:00
jpierre%netscape.com
wtc%netscape.com
nicolson%netscape.com
bryner%netscape.com
kaie%netscape.com
nelsonb%netscape.com
bishakhabanerjee%netscape.com
darin%netscape.com
timeless%mozdev.org
ian.mcgreer%sun.com
relyea%netscape.com
dougt%netscape.com
kirk.erickson%sun.com
bolian.yin%sun.com
kairo%kairo.at
pete.zha%sun.com
robin.lu%sun.com
varga%netscape.com
mscott%netscape.com
mkaply%us.ibm.com
sonja.mirtitsch%sun.com
thayes%netscape.com
seawood%netscape.com