ian.mcgreer%sun.com
9a71398ea2
place where iterator was not freed
2002-02-05 22:32:38 +00:00
jpierre%netscape.com
b393a837fa
Fix for 122907 - patch to disable arena free lists with environment variable
2002-02-05 22:20:43 +00:00
ian.mcgreer%sun.com
e62a65dd6c
some of the output in bug 123081 shows potential leaks around iterators, since the iterator is explicitly freed allocate it in its own block to avoid this
2002-02-05 22:08:12 +00:00
ian.mcgreer%sun.com
18d1d08e68
cleanup suggested by review by Nelson
2002-02-05 03:53:50 +00:00
relyea%netscape.com
d47cd2d11a
Fix error path, only free arena is one was allocated.
2002-02-05 01:47:01 +00:00
nelsonb%netscape.com
3ade452eb9
Plug one of the leaks reported in bugzilla bug 123081
2002-02-04 23:15:11 +00:00
ian.mcgreer%sun.com
21e8624189
plug leak found doing client auth, move freeing of cert's slot down a level in case the cert was not made external
2002-02-04 23:04:11 +00:00
ian.mcgreer%sun.com
6caebdc0ff
fix leak reported in bug 123081 by avoiding allocation for time variable
2002-02-04 22:34:22 +00:00
ian.mcgreer%sun.com
8faaba0e2f
last part of bug 121628, permanent slots should respond immediately to IsPresent() call
2002-02-04 21:57:07 +00:00
relyea%netscape.com
72ba690a4c
Function to read PQG params from the key.
2002-02-04 18:00:14 +00:00
wtc%netscape.com
45cce1a40d
Temporary hack to make 'depend' do a 'clean' in NSS.
2002-02-04 15:57:38 +00:00
relyea%netscape.com
0ae90e9fb1
Bug 117978: accessor functions to all JCE keystore API to be implemented.
2002-02-03 03:37:26 +00:00
ian.mcgreer%sun.com
e4a9a4769d
Fix cert leaks when building a chain. There are several client auth bugs filed, this may not be for any one in particular, but was found with tstclnt.
2002-02-02 20:01:22 +00:00
ian.mcgreer%sun.com
43e609386f
bug 90518, selfserv dumps cache state before shutdown with -y option
2002-02-02 19:39:48 +00:00
wtc%netscape.com
1512dc6f0e
Bugzilla bug 122961: export CERT_CreateSubjectCertList for PSM.
2002-02-02 04:41:06 +00:00
relyea%netscape.com
26815e4981
Add new PK11_ImportSymKeyWithFlags function for JSS
2002-02-02 01:46:05 +00:00
javi%netscape.com
17bbdeab99
Fix Mac bustage.
2002-02-02 01:20:54 +00:00
wtc%netscape.com
1fd06e9576
Bugzilla bug 122712: moved the two newly exported symbols to the right
...
place.
2002-02-01 21:16:43 +00:00
ian.mcgreer%sun.com
50efa45321
fix cert leak found by client auth
2002-02-01 18:18:13 +00:00
relyea%netscape.com
74d272df70
Fix memory leak.
2002-02-01 17:57:05 +00:00
ian.mcgreer%sun.com
9d0bbe4ab6
bug 121628, persistent cache of hardware token certs
2002-02-01 17:25:15 +00:00
wtc%netscape.com
c2c17dc8ed
Bugzilla bug 119340: install a SIGTERM handler on Linux for debugging.
2002-02-01 05:57:49 +00:00
relyea%netscape.com
c7c406a007
certutil -L now opens the DB ReadOnly. Add the '-X' option to the test is still
...
testing the R/W case.
2002-02-01 02:28:32 +00:00
relyea%netscape.com
fbb3cd1af1
Make the following functions open the databases Readonly:
...
ListCerts PrintHelp ListKeys ListModules CheckCertValidity Version
Add an option (-X) to restore the old behaviour of openning the Databases R/W
2002-02-01 02:26:40 +00:00
ian.mcgreer%sun.com
4eac0e224a
have certutil shutdown cleanly so purify is easier to deal with
2002-01-31 19:27:07 +00:00
relyea%netscape.com
9694fb3322
Fix thread local storage leak.
2002-01-31 19:18:55 +00:00
javi%netscape.com
eb955bd006
Make the projects depend on a .exp file that doesn't start with '_' so that we know the .exp file wasn't generated by CodeWarrior.
2002-01-31 19:10:46 +00:00
javi%netscape.com
c3c6171f0b
Use LoadableRoots.mcp.exp instead of _*.exp so that we know
...
the .exp wasn't generated by CodeWarrior.
2002-01-31 19:05:27 +00:00
ian.mcgreer%sun.com
73ada3b8ed
couple of fixes
2002-01-31 17:28:49 +00:00
ian.mcgreer%sun.com
17924181a5
bug 90518, implement methods for dumping the state of the cache and temp cert store in NSS 3.4
2002-01-31 17:08:32 +00:00
ddrinan%netscape.com
a38e12497e
Checkin for relyea. Call CERT_DestoryCertificateList instead of CERT_DestroyCertList
2002-01-31 04:00:12 +00:00
relyea%netscape.com
14606c9f4f
Fix certlist memory leak.
2002-01-31 02:19:43 +00:00
wtc%netscape.com
1ba4f766ad
Bugzilla bug 119340: backed out the fix. We are still seeing the
...
"selfserv process not detectable" errors on Linux and I don't have
time to get to the bottom of it.
Modified files:
cmd/selfserv/selfserv.c tests/common/init.sh tests/ssl/ssl.sh
2002-01-31 02:03:57 +00:00
wtc%netscape.com
33eec413e9
Bugzilla bug 122712: temporarily export two additional symbols for Mozilla
...
static build.
2002-01-31 01:03:21 +00:00
sonja.mirtitsch%sun.com
56fd0efd0d
put the sleep 30 back into the linux ssl test to give the selfserv time
...
to free the socket...
2002-01-31 01:01:47 +00:00
relyea%netscape.com
79e23ff590
restore checks for critical extenstions and fail if we have any we don't
...
recognize. Just remove the bogus check that v2 crls must have critical extensions
2002-01-31 00:42:43 +00:00
sonja.mirtitsch%sun.com
2f09854c0e
next thry for bug 115200
2002-01-31 00:34:04 +00:00
relyea%netscape.com
4a065a35a8
Set token flag when saving the CRLs so they actually get put into the database!
2002-01-31 00:18:09 +00:00
relyea%netscape.com
c55125bdd6
Fix searching code so it can find CRL's
2002-01-31 00:16:29 +00:00
sonja.mirtitsch%sun.com
41f16942a4
another try for QA / RE / tinderbox problem bug #115200
2002-01-30 04:37:35 +00:00
relyea%netscape.com
5324ba124a
Unsigned values are always greater than '0'!
2002-01-30 00:48:24 +00:00
relyea%netscape.com
b17e47bc7b
Indexes are zero based. Do our realloc when index == size (not after).
2002-01-30 00:25:34 +00:00
relyea%netscape.com
3dfd980fd3
1) put some defensive programming so we don't crash on invalid der.
...
2) set the start offset correctly for multi-byte lengths when decoding sets
and sequences
2002-01-30 00:24:12 +00:00
relyea%netscape.com
3d5799a0e4
Restore idempontency to nss_init*
2002-01-29 22:27:15 +00:00
relyea%netscape.com
6087924968
Built-ins set the ulValueLen to -1 to indicate an unknown attribute type.
2002-01-29 21:12:13 +00:00
relyea%netscape.com
761c8f9882
Token and slot names are already converted to NULL terminated strings in the slot structure
2002-01-29 21:10:50 +00:00
relyea%netscape.com
7e91df2901
Don't leak memory in the arena pool
2002-01-29 19:00:47 +00:00
relyea%netscape.com
2ffdebcb02
More 'pretty print' improvements. Decode context specific data a little more.
2002-01-29 17:50:27 +00:00
ian.mcgreer%sun.com
2e7dccd29d
changes related to bug 115660
...
* fipstoken will only force authentication for object-related functions when the object is a private or secret key
* certutil does not authenticate to token when in FIPS and only doing cert-related operations
* QA does not provide password to certutil when doing cert-related operations in FIPS tests
2002-01-29 17:30:22 +00:00
relyea%netscape.com
f58a765819
(sigh) not only do we need to find the objects, we need to be able to read
...
them as well.
2002-01-28 23:28:29 +00:00
sonja.mirtitsch%sun.com
3503c53808
fixed typo
2002-01-28 20:59:23 +00:00
jpierre%netscape.com
3b1ba6dc44
Fix for 69556 - remove expired CA "Verisign Class 4 Primary CA"
2002-01-28 20:43:37 +00:00
sonja.mirtitsch%sun.com
68984c4764
attempted fix for bug 115200, tinderbox reports false failures on machines
...
that run 32 and 63 bit tinderboxes
2002-01-28 19:35:53 +00:00
relyea%netscape.com
88fccf56cf
Fix crashing problem when trying two switch from fips to non-fips and back.
...
bug 119214.
2002-01-28 19:18:41 +00:00
wtc%netscape.com
1da3195968
Bugzilla bug 100447: on BSD/OS 4.2 and 4.3, we have problem calling
...
safe_popen in a threaded program. So we don't call safe_popen when
we obtained some entropy from /dev/urandom. Thanks to lidl@pix.net
for the bug report and the fix.
2002-01-27 00:14:59 +00:00
wtc%netscape.com
d6b8ef5d90
Bugzilla bug 111206: make the Solaris version test flexible so that we
...
don't need to add a new test for each new Solaris release.
2002-01-26 16:19:51 +00:00
relyea%netscape.com
237f52188c
Fix PBE_Context failure by making sure CKM_PBA is it's own keygen type.
2002-01-26 01:20:50 +00:00
relyea%netscape.com
e5d11d5431
Fix 2 memory leaks and a UMR.
...
(keyhand needs to be initialized before we start xor hashing)
Free item and time elements which are transparently allocated for us.
2002-01-26 00:16:03 +00:00
relyea%netscape.com
1b36216be7
Change Sha1_hash to a simple XOR hash for building key handles for token
...
objects.
2002-01-25 19:09:34 +00:00
relyea%netscape.com
2cd0e7823b
Fix key leak in S/Mime.
2002-01-25 19:08:19 +00:00
relyea%netscape.com
66838540ff
Fix bug 115660. Note that fixing the bugs necessitates fixing the test
...
cases as well. The test case was depending on the failure to read certs to
detect the failure to read keys. Now certutil returns a failure if no keys
are found. This also means that the FIPS test after the key and cert
has been deleted should expect a failure to list any keys.
2002-01-25 19:03:17 +00:00
relyea%netscape.com
0b8fb8f0d7
Too agressive on fixing leaks;). This one isn't a leak.
...
bob
2002-01-24 21:33:51 +00:00
ian.mcgreer%sun.com
3afd5c3d8d
fix aix issues
2002-01-24 15:45:55 +00:00
relyea%netscape.com
7f26c10bd8
Fix NT crash on startup. (load builtins after trust domain gets initialized).
2002-01-24 02:46:07 +00:00
nicolson%netscape.com
56bb80f8db
Fix 118679: PK11SDR_Encrypt fails if not logged into token.
2002-01-24 01:06:22 +00:00
ian.mcgreer%sun.com
ab89e69ce2
implement istemp and isperm in case clients depend on it, make sure certs own a reference to their slot and then free it
2002-01-24 00:58:02 +00:00
ian.mcgreer%sun.com
b2cc5d03dc
fix leakage in traversal functions that convert certs to CERTCertificates
2002-01-24 00:34:03 +00:00
relyea%netscape.com
65b7f7d46b
Fix memory leaks.
2002-01-24 00:26:29 +00:00
ian.mcgreer%sun.com
422c06a4ed
make sure path string has terminator
2002-01-24 00:25:32 +00:00
ian.mcgreer%sun.com
3a1d638a39
restore function CERT_SaveImportedCert, used to set the trust bits of a cert on import. Fixes bug 121487
2002-01-23 21:43:30 +00:00
ian.mcgreer%sun.com
115a64c8c2
traverse functions need to cache as they run in order to catch multiple instances of certs correctly
2002-01-23 20:35:18 +00:00
ian.mcgreer%sun.com
ced7fd120a
traversed certs also need to be cached
2002-01-23 18:24:29 +00:00
ian.mcgreer%sun.com
3b7ccbb61c
fix core when token list is emptied (caused by switch to fips mode)
2002-01-23 17:39:29 +00:00
ian.mcgreer%sun.com
bc65724129
* keep stan in sync with both addition and removal of modules
...
* clean up compatibilty issues with PKCS#11 serial numbers. Need to search both encoded and decoded values, while making sure stan code only deals with DER value
2002-01-23 17:00:39 +00:00
ian.mcgreer%sun.com
952afebdb5
make the load function for the root token work
2002-01-23 15:36:54 +00:00
ian.mcgreer%sun.com
17b74fe184
fix breakage caused by yesterday's checkins; since softoken no longer returns terminating NULL for strings must add it above PKCS#11
...
also fixes bug 121384
2002-01-23 14:37:48 +00:00
relyea%netscape.com
79f61f853a
Restore code automatic Built-in loading code.
2002-01-23 04:42:21 +00:00
relyea%netscape.com
c8fcdeb68d
Function to return if any builtins have been loaded yet.
2002-01-23 04:41:25 +00:00
ian.mcgreer%sun.com
f4b110b8ac
fix PSM crash described in bug 120647
2002-01-23 03:53:16 +00:00
wtc%netscape.com
1eff2860ba
Bugzilla bug 119340: an inelegant but more reliable way to kill the
...
multithreaded 'selfserv' process on Linux.
Modified files:
cmd/selfserv/selfserv.c tests/common/init.sh tests/ssl/ssl.sh
2002-01-23 03:18:57 +00:00
relyea%netscape.com
3ad5024f8a
Fix wrong polarity on if statement (should check for success, not failure).
2002-01-23 02:10:31 +00:00
sonja.mirtitsch%sun.com
27cfb4c716
added the TCP connection aborted to the lines that are OK in the log
2002-01-23 02:07:08 +00:00
relyea%netscape.com
c3ca8a1a48
Fix memory like in readSMimeEntry
2002-01-23 01:44:22 +00:00
relyea%netscape.com
1947921305
Fix label stuff.
2002-01-23 01:20:32 +00:00
relyea%netscape.com
f235b85944
Labels don't have NULL's by default.
2002-01-23 00:53:53 +00:00
ian.mcgreer%sun.com
0a7c8a4e7c
PSM bug 119359, NSS 3.4 also needs to recognize valid CA trust in order for cert download to work correctly
2002-01-23 00:49:23 +00:00
sonja.mirtitsch%sun.com
2cc7908640
added comments
2002-01-23 00:27:10 +00:00
sonja.mirtitsch%sun.com
d19d19b941
removing tmpfiles on tinderboxes
2002-01-23 00:21:01 +00:00
sonja.mirtitsch%sun.com
020d8a3b2d
changes so nssqa will run on netscape's daily builds as well
2002-01-23 00:19:32 +00:00
ian.mcgreer%sun.com
7462cbdfd4
last change to INTEGER encoding, strip extraneous leading zeros from integer values passed to encoder
2002-01-22 22:48:26 +00:00
ian.mcgreer%sun.com
5b01d3a7d1
fix for bug 120824; functions which collect certs based on subject need to examine *both* the temp and perm stores
2002-01-22 21:56:19 +00:00
relyea%netscape.com
1e98db5857
remove bogus verify step (the cert passed in is almost certainly a signing cert).
2002-01-18 03:38:29 +00:00
relyea%netscape.com
fdc3985b20
Fix the case where the subjectID is an issuer/SN. don't build a dbkey in
...
this case, return the actual subject cert id after looking up the cert
directly
2002-01-18 03:36:44 +00:00
relyea%netscape.com
05d176b9c4
Increment length on LABEL, not on CLASS to catch the added NULL case.
2002-01-18 03:35:18 +00:00
ian.mcgreer%sun.com
e45f8c2b70
more backwards compatibility fixes
...
* always send DER of serial number to PKCS#11 queries
* in softoken, construct key for certificate using decoded serial number with (possibly) a leading zero, for compatibility with version 7 db
* in softoken, decode serial number *without* removing leading zero for searches
2002-01-17 00:20:53 +00:00
ian.mcgreer%sun.com
0b564fa522
fix build bustage
2002-01-16 21:36:33 +00:00
ian.mcgreer%sun.com
8c0b98c71b
fix a crash seen in PSM by making sure a zero-length attribute zeroes the item inheriting it
2002-01-16 21:23:30 +00:00
ian.mcgreer%sun.com
5c022683fc
fix for bug 115360, failure in pkcs12 backwards compatibility tests
2002-01-16 21:22:30 +00:00
ian.mcgreer%sun.com
0c10963511
unfortunately, the SDR key keeps the value of CK_KEY_TYPE in the coefficient field of an RSA key. This means some format is lost through the ASN.1 encoder/decoer. Trying again to account for that without affecting normal key type attributes.
2002-01-16 16:02:51 +00:00
wtc%netscape.com
00b5f915b1
Bugzilla bug 119340: added a debug printf statement.
2002-01-16 03:29:06 +00:00