Граф коммитов

4581 Коммитов

Автор SHA1 Сообщение Дата
nicolson%netscape.com 58b44ccb0c Try * instead of . to get zip to grab all the contents of a directory. 2003-10-16 03:28:19 +00:00
jpierre%netscape.com 8968621f4c Fix for bug 222180 . remove redundant code 2003-10-15 01:40:10 +00:00
jpierre%netscape.com 1d1e003b2c Fix for bug 222180 . Change to quick decoder . r=wtc 2003-10-15 01:34:22 +00:00
nelsonb%netscape.com bb642e9de3 Eliminate redundant function declarations. Bug 208854. r=wchang0222 2003-10-14 17:44:33 +00:00
relyea%netscape.com b80fd62f5d Fix tinderbox breakage 2003-10-12 22:55:09 +00:00
nicolson%netscape.com 09c79e0878 Try to get zip working properly on the Windows build machines. 2003-10-12 20:21:04 +00:00
nelsonb%netscape.com 55ecb1638f Correctly handle a NULL moduleSpecList. Bug 220217. 2003-10-11 01:49:24 +00:00
nelsonb%netscape.com c7195e7f01 This file has been dead code since NSS 3.4 released, if not sooner. 2003-10-11 01:10:51 +00:00
jpierre%netscape.com 4b274eadf6 Fix for bug 221743 - incorrect certificate usage macro 2003-10-10 23:22:31 +00:00
relyea%netscape.com 6feb3bc391 Bug 191467
Multipart signing and verifying broken for several mechanisms in softoken
Reporter:   	Andreas.Sterbenz@sun.com (Andreas Sterbenz)
sr=nelsonb
2003-10-10 15:32:26 +00:00
relyea%netscape.com da0e767ef3 Bug 203866
Make unloaded modules visible for administrative purposes.
sr=wtc r=nelson
2003-10-10 15:29:43 +00:00
relyea%netscape.com d9ea331302 Bug 203866. Make unloaded modules visible for administrative purposes.
sr=wtc r=nelson
2003-10-10 15:26:23 +00:00
nicolson%netscape.com 40a30d219e Change ';' to '&&' so the command fails if any of the subcommands fails.
Print out the return value of the command.
This is to debug a problem where the zip file is not being created on windows.
2003-10-09 22:39:54 +00:00
relyea%netscape.com 6c37cf315f fix bug 203450
jarevil.c:345: warning: implicit declaration of function \
  `__CERT_AddTempCertToPerm'

Obviously missing a declaration somewhere.

r=jpierr, wtc
2003-10-09 22:17:04 +00:00
jpierre%netscape.com 8e693bd25b Fix for bug 55898 - print name of certificate causing failure in certutil . r=wtc 2003-10-08 01:00:37 +00:00
nelsonb%netscape.com 297c871d38 Eliminate one of several redundant OID table lookups. Bug 207033. 2003-10-07 17:19:55 +00:00
nelsonb%netscape.com da831f0be3 Eliminate unnecessary copying of CA names in HandleCertRequest.
Bug 204686.
2003-10-07 02:24:01 +00:00
nelsonb%netscape.com b4001cf1b8 The "valid CA" trust flag now overrides other CA cert checks.
Works for SSL client as well as other usages.  Bug 200225
2003-10-07 02:17:56 +00:00
nelsonb%netscape.com 0af05aaf1a Export new function PK11_ExportEncryptedPrivKeyInfo. Bug 207033. 2003-10-07 01:29:32 +00:00
nelsonb%netscape.com 7c3772d3d7 Create new function SECKEYEncryptedPrivateKeyInfo which is just like
SECKEYEncryptedPrivateKeyInfo except that it identifies the private
key by a private key pointer, rather than by a certificate. Bug 207033.
2003-10-07 01:26:38 +00:00
nelsonb%netscape.com adf3bd4810 Make tstclnt work with IPv6 addresses. Bug 161610. 2003-10-06 23:50:11 +00:00
nelsonb%netscape.com 4bb3ccc8bd Check for presence of secmod.db file prior to acting on it, for all
cases except "multiaccess:".  Bug 220217. r=relyea
2003-10-06 23:33:03 +00:00
nelsonb%netscape.com 96a4f8926a Detect Zero length certs and zero length CA names. Bug 204686.
Also, eliminate unnecessary copying of incoming certs.
2003-10-03 02:01:18 +00:00
wtc%netscape.com 470c7c30c0 Bug 220963: need to handle the possibility that symKey may be NULL before
dereferencing it.
2003-10-01 23:01:46 +00:00
jpierre%netscape.com 64c44a50f4 Fix for bug 141882 - convert email query keys to lowercase when searching . r=wtc 2003-09-30 02:33:40 +00:00
jpierre%netscape.com 58d2922f0d Fix for bug 94413 - OCSP needs more fine tuned error messages. r=wtc 2003-09-30 01:18:55 +00:00
bryner%brianryner.com cd60efa8ac Updating my email address 2003-09-29 06:04:02 +00:00
nelsonb%netscape.com fd6bfd34f5 Move a brace so vi will find the beginning of the function. 2003-09-27 01:45:35 +00:00
jpierre%netscape.com 7a8c91801a Fix for bug 219539 - support GeneralizedTime in NSS tools 2003-09-27 00:01:45 +00:00
jpierre%netscape.com b220af50ec Fix for bug 219539 - support GeneralizedTime in NSS tools 2003-09-26 06:18:40 +00:00
nelsonb%netscape.com 2fb81c5b8c Don't use windowed exponentiation for small public exponents.
Speeds up public key operations.  Path contributed by
    Sheueling Chang Shantz <sheueling.chang@sun.com>,
    Stephen Fung <stephen.fung@sun.com>, and
    Douglas Stebila <douglas@stebila.ca> of Sun Laboratories.
2003-09-26 02:15:12 +00:00
nelsonb%netscape.com 9aa0859dc2 Correct an inaccurate log message. 2003-09-25 21:40:02 +00:00
jpierre%netscape.com 53b39d4951 Fix typo 2003-09-25 00:25:06 +00:00
wtc%netscape.com 5277304f0b Bugzilla bug 216117: added a TokenProxy member to the PK11Cert class to
store the slot pointer for the certificate *instance*.  This slot pointer
is not necessarily cert->slot.  Try to get the correct slot pointer for a
cert instance where possible.  This patch helps us handle multiple
instances of the same cert better.
Modified Files:
	PK11Finder.c pkcs11/PK11Cert.c pkcs11/PK11Cert.java
	pkcs11/PK11InternalCert.java pkcs11/PK11InternalTokenCert.java
	pkcs11/PK11Store.c pkcs11/PK11Token.c
	pkcs11/PK11TokenCert.java pkcs11/pk11util.h
	provider/java/security/JSSKeyStoreSpi.c ssl/SSLServerSocket.c
	ssl/callbacks.c ssl/common.c ssl/jssl.h util/java_ids.h
2003-09-24 22:20:15 +00:00
nelsonb%netscape.com f633274323 Fix usage message to list all commands. Also, fix a few lines of
code that did not follow the file's convention for indentation.
Bug 203870.
2003-09-24 21:49:49 +00:00
wtc%netscape.com 9907123463 Bugzilla bug 220209: fixed a cert reference leak in
JSSL_CallCertSelectionCallback if the PK11_FindKeyByAnyCert call fails.
2003-09-24 21:07:17 +00:00
wtc%netscape.com f64cfc45de Deleted unused code. 2003-09-23 22:56:46 +00:00
wtc%netscape.com 4e2ed74884 Set JSS version to 3.4.2 Beta 1.
Modified Files: CryptoManager.java util/jssver.h
2003-09-23 20:57:15 +00:00
nelsonb%netscape.com 84a7421314 Fix bug 204549. Properly handle memory allocation failures. 2003-09-23 20:47:43 +00:00
wtc%netscape.com ea9c7b9cf1 Bugzilla bug 204549: find_objects_by_template was not setting *statusOpt
before one return statement.  r=nelsonb.
2003-09-23 20:34:15 +00:00
nelsonb%netscape.com 3ecdf5b682 Correctly compute certificate fingerprints. Bug 220016. 2003-09-23 02:05:47 +00:00
jpierre%netscape.com cacf90504b Fix for 215182 - certutil prints incorrect nickname. r=wtc 2003-09-23 00:10:54 +00:00
wtc%netscape.com 54ba648af3 Bugzilla bug 219756: fixed a CERTCertificate reference leak. 2003-09-20 00:27:30 +00:00
wtc%netscape.com ff0ab0d5e6 Bugzilla bug 219713: fixed build bustage on all Unix platforms. We need
to export CERT_TimeChoiceTemplate as data for Unix.
2003-09-19 18:00:48 +00:00
jpierre%netscape.com c1f8a20c18 Fix for 219082 - support GeneralizedTime in PKCS#7 signatures. r=nelsonb, sr=wtc 2003-09-19 04:16:19 +00:00
jpierre%netscape.com 41dfa35b34 Fix for 219524 - support GeneralizedTime in S/MIME v3 signatures. r=wtc, sr=nelsonb 2003-09-19 04:14:50 +00:00
jpierre%netscape.com c54ab44432 Fix for bug 143334 : add support for GeneralizedTime in certificates and CRLs. r=wtc,nelsonb 2003-09-19 04:08:51 +00:00
jpierre%netscape.com 06f53aa46d Fix for 215214 - make certutil show all instances of certs . r=wtc 2003-09-18 02:00:32 +00:00
wtc%netscape.com fca2dd1924 The isOnList function is now unused. 2003-09-18 01:28:52 +00:00
jpierre%netscape.com 81af9c614e Fix for bug 215186 - add missing options to PK11_ListCerts . r=wtc 2003-09-18 00:22:18 +00:00
wtc%netscape.com 2317ba9006 Bugzilla bug 124958: added support for pthreads on OpenBSD. The patch is
contributed by Mats Palmgren <mats.palmgren@bredband.net>. r=wtc.
2003-09-16 20:50:50 +00:00
wtc%netscape.com b92b8f3328 When calling windres, use a temp file to work around resource issues.
Bugzilla bug #213281. The patch is contributed by cls@seawood.org. r=wtc
2003-09-15 20:34:55 +00:00
jpierre%netscape.com 2d02a55087 Add comment in the header for PK11_FindSlotsByAliases 2003-09-12 22:11:31 +00:00
wtc%netscape.com 78933c07aa Bugzilla bug 215152: removed redundant pointer tests. Use
SEC_ERROR_LIBRARY_FAILURE for NSS internal errors.
2003-09-12 20:01:56 +00:00
wtc%netscape.com 00bfcc6ae5 Bugzilla bug 217247: improved the memory leak fix for the appData nicknames
returned by PK11_ListCerts.  Instead of allocating them from the heap first
and copying to the arena, allocate them from the arena directly.  r=jpierre
Modified Files: certhigh.c pk11cert.c pki3hack.h pki3hack.c
2003-09-12 19:38:04 +00:00
wtc%netscape.com 3e12ba21f2 Bugzilla bug 214535: fixed a recursive dead lock on cache->lock. We must
not call nssSlot_IsTokenPresent while cache->lock is locked because
that function may call nssToken_Remove, which locks cache->lock.  r=mcgreer
2003-09-12 19:17:15 +00:00
darin%meer.net 8989a2213a landing patch for bug 205726 "DNS rewrite" r=dougt sr=bryner 2003-09-11 20:32:33 +00:00
wtc%netscape.com a89f8f7ab1 Bugzilla bug 215581: build with GCC 3.2.2 for OS/2. The patch is
contributed by Javier Pedemonte <pedemont@us.ibm.com>.  r=jpierre.
2003-09-11 20:29:51 +00:00
wtc%netscape.com 1096a8c745 Bugzilla bug 214824: use -no-cpp-precomp instead of -traditional-cpp, which
has changed to mean a different thing (the standard GCC meaning, rather
than Apple's earlier hacks).  The patch is contributed by Brian Ryner
<bryner@brianryner.com>.
2003-09-11 18:41:22 +00:00
timeless%mozdev.org 33dafeb6d1 Bug 211291 void nsCertTree::InitCompareHash doesn't check the return value of PL_DHashTableInit
r=kaie sr=bz
2003-09-11 01:59:21 +00:00
wtc%netscape.com c629bfb394 Bugzilla bug 208971: remove obsolete Mac CFM build files from NSS. 2003-09-11 00:04:38 +00:00
wtc%netscape.com 160d767599 Bugzilla bug 208971: removed obsolete Mac CFM build files from NSS. 2003-09-11 00:01:07 +00:00
jpierre%netscape.com c71f55bb2a Fix for 215152 - better error handling 2003-09-10 01:33:25 +00:00
jpierre%netscape.com 24dbc103c8 Fix for bug 215152 . Improve error handling in PK11_FindSlotsByAliases 2003-09-10 01:31:54 +00:00
nelsonb%netscape.com cc713fc8d3 Further enhance the verbose debugging command line option in tstclnt
for the case where client auth is requested by the server.  It will
now report the name of the cert sent to the server, or "send no cert".
2003-09-09 20:22:54 +00:00
jpierre%netscape.com 683c3f9505 Prevent crash if certlist is NULL 2003-09-09 00:54:20 +00:00
jpierre%netscape.com 20a95ddfde Fix bug 214307 - add certutil batch mode . r=wtc 2003-09-08 23:30:29 +00:00
jpierre%netscape.com 51bd14780b Add PORT_Strpbrk macro 2003-09-08 23:29:14 +00:00
bryner%brianryner.com 20386efec4 Fix build on gcc 3.4 by removing extra semicolons (bug 218551). r/sr=dbaron, a=brendan. 2003-09-08 00:18:24 +00:00
jpierre%netscape.com 842a5d79c8 Fix for bug 72291 . resolve memory leak on nicknames . r=relyea 2003-09-05 00:15:52 +00:00
jpierre%netscape.com 891e05f8b0 Remove erroneous assertions 2003-09-03 23:52:01 +00:00
jpierre%netscape.com b4b593cf0a Fix for bug 215152 . Export PK11_FindSlotsByAliases. r=relyea 2003-09-03 22:55:10 +00:00
jpierre%netscape.com 610ac28a42 Add PK11_FindSlotsByAliases function . r=relyea 2003-09-03 22:48:20 +00:00
jpierre%netscape.com 609557163f Fix for 216701 - verify CRLs with cert verification date rather than CRL lastupdate date 2003-08-30 01:07:21 +00:00
wtc%netscape.com 90064ce7fc Bugzilla bug 214674: made the Linux implementation of sslMutex really work.
They were no-ops in multiprocess mode before.  The patch is Nelson
Bolyard's.  r=wtc.
2003-08-28 22:23:59 +00:00
wtc%netscape.com a5934c7cc6 Bugzilla bug 217504: 1. Do not use -lsvld on recent AIX releases.
2. Specify the standard AIX libpath, otherwise the directories we pass to
the -L linker flags get added to the libpath.  3. Support building on AIX
5.2.  The patch is contributed by Philip K. Warren <pkw@us.ibm.com>. r=wtc.
Modified Files: AIX.mk AIX4.2.mk AIX4.3.mk AIX5.1.mk
Added Files: AIX5.2.mk
2003-08-28 00:15:43 +00:00
jpierre%netscape.com 2990fa08b0 Fix for 214201. remove unused variable 2003-08-27 01:47:57 +00:00
wtc%netscape.com 97baeaa545 Bugzilla bug 216693: use "." instead of "org" to specify the list for zip. 2003-08-27 01:13:06 +00:00
wtc%netscape.com 36e8c13857 Import NSS_3_7_8_RTM. 2003-08-27 01:01:59 +00:00
nicolson%netscape.com 3e239ffcd7 Update JSS to version 3.4.1. 2003-08-27 00:08:43 +00:00
wtc%netscape.com a9cb356856 Bugzilla bug 72291: have PK11_ListCerts return all the cert instances on
tokens.  The patch is Julien Pierre's, with changes by Wan-Teh Chang.
Modified Files: pk11wrap/pk11cert.c pki/pki3hack.c pki/pki3hack.h
2003-08-25 19:18:02 +00:00
wtc%netscape.com b3edbc2128 Bugzilla bug 209827: disable optimization to work around what appears to
be a VACPP optimizer bug.
2003-08-22 22:34:07 +00:00
jpierre%netscape.com 59256190ce Fix for bug 216944 - CERT_VerifyCertificate optimizations issues . r= wtc 2003-08-22 18:47:07 +00:00
caillon%returnzero.com c11c6acb17 Backing out the patch to bug 83536.
I will reland this when 1.6a re-opens.
r+sr=jst@netscape.com
a=chofmann
2003-08-22 03:06:53 +00:00
wtc%netscape.com 6dc37259b8 Bugzilla bug 216693: running make in mozilla/security/jss should build the
class jar file.
Modified Files: rules.mk build_java.pl
2003-08-19 20:08:33 +00:00
cls%seawood.org c08e99a287 Set MODULE in makefiles at the top of a heirarchy so that module-deps lists are more precise and builds will have the proper order if some subdirs contain other modules. 2003-08-16 00:42:35 +00:00
wtc%netscape.com 86e30540a2 Bugscape bug 50033: make the KeyType class public and force it to load
during CryptoManager.initialize(), before we add JSS as a provider.  The
KeyType class was failing to load properly, because its static initializers
force the class load of KeyWrapAlgorithm, whose signature needed to be
verified, which invoked JSS's signature provider, which accessed KeyType.
Basically, installing JSS as the default signature provider before its
classes have loaded creates a possibility of circular dependencies in class
initialization.  The patch is due to Jamie Nicolson.  r=wtc.
Modified Files: CryptoManager.java pkcs11/KeyType.java
2003-08-15 01:00:35 +00:00
wtc%netscape.com be4ed5debc Fix from Ian to address Bugzilla bug 202179.
The fix restores some old code that was removed as part of our
performance work (Bugzilla bug 145322).  Thus, there may be a
slight performance hit, but obviously, we need to have correct
code first.

This is a part of the code I really don't like.  To summarize,
there was a hack put in a long time ago to make sure that the
PKCS#11 session in which the SSL keys are generated was never
closed until the last key was deleted.  This only worked by chance,
and if any part of the code was changed (as was the case here), this
unstable equilibrium would be lost.  As with all hacks, it wasn't
really documented, so the problem escaped our notice.  As a result of
putting the hack back in, we're going back to the horribly wasteful
operation of opening 4 sessions and immediately closing them.  I intend
to have a proper solution in a later release.
2003-08-12 18:21:55 +00:00
neil%parkwaycc.co.uk 1bb0160b47 Bug 211695 Fix bugs in nsCertTree.cpp r=varga sr=alecf moa=kaie a=asa 2003-08-12 11:20:50 +00:00
kairo%kairo.at b6208f06a9 bug 214207 - update localeVersion for 1.5b - rs=blizzard, a=asa 2003-08-11 11:31:24 +00:00
wtc%netscape.com 655056191f Deleted useless local variable 'arena' in cert_ImportCAChain. 2003-08-08 23:15:50 +00:00
wtc%netscape.com a32141f5d2 Bugscape bug 49314: code cleanup. Throw InvalidKeyException directly
instead of NoSuchAlgorithmException.
2003-08-07 21:45:35 +00:00
glen.beasley%sun.com 7523a62658 215190 delete CA created certs 2003-08-07 00:34:32 +00:00
brendan%mozilla.org f6be8fe74f Add shared DHashTableOps for [const] char *key use-cases, clean up dhash API abusages (214839, r=dougt, sr=dbaron). 2003-08-05 20:09:21 +00:00
nicolson%netscape.com 1ded6df12e Convert public key to JSS public key. 2003-08-05 18:54:49 +00:00
wtc%netscape.com 13f5b9e4ff Bugzilla bug 214695: fixed incorrect use of PR_AtomicDecrement on reference
counts.  The reference count should not be read "naked".  Instead, we
should simply use the return value of PR_AtomicDecrement for the result of
the decrement.
Modified Files: dev/devmod.c dev/devslot.c dev/devtoken.c pki/certificate.c
pki/pkibase.c
2003-08-01 02:02:47 +00:00
nelsonb%netscape.com 5da7e31f4d Fix bug 213084. Detect when cert in signature cannot be imported.
Detect NULL pointer, don't crash.
2003-07-31 00:16:27 +00:00
bishakhabanerjee%netscape.com 9b590c4f17 Bug 213903: removing unused variables 'delold', 'save', 'entry' 2003-07-28 22:55:16 +00:00
bishakhabanerjee%netscape.com 52a39ca16f Bug 213902 : removing unused variable "next" in "cert_DecodeNameConstraintSubTree" 2003-07-28 21:53:16 +00:00
bzbarsky%mit.edu 95256ce645 DeCOMify GetParent/GetBindingParent/GetDocument on nsIContent. Bug 213823,
r+sr=jst
2003-07-28 21:35:53 +00:00