Граф коммитов

1737 Коммитов

Автор SHA1 Сообщение Дата
ian.mcgreer%sun.com 9a71398ea2 place where iterator was not freed 2002-02-05 22:32:38 +00:00
jpierre%netscape.com b393a837fa Fix for 122907 - patch to disable arena free lists with environment variable 2002-02-05 22:20:43 +00:00
ian.mcgreer%sun.com e62a65dd6c some of the output in bug 123081 shows potential leaks around iterators, since the iterator is explicitly freed allocate it in its own block to avoid this 2002-02-05 22:08:12 +00:00
ian.mcgreer%sun.com 18d1d08e68 cleanup suggested by review by Nelson 2002-02-05 03:53:50 +00:00
relyea%netscape.com d47cd2d11a Fix error path, only free arena is one was allocated. 2002-02-05 01:47:01 +00:00
nelsonb%netscape.com 3ade452eb9 Plug one of the leaks reported in bugzilla bug 123081 2002-02-04 23:15:11 +00:00
ian.mcgreer%sun.com 21e8624189 plug leak found doing client auth, move freeing of cert's slot down a level in case the cert was not made external 2002-02-04 23:04:11 +00:00
ian.mcgreer%sun.com 6caebdc0ff fix leak reported in bug 123081 by avoiding allocation for time variable 2002-02-04 22:34:22 +00:00
ian.mcgreer%sun.com 8faaba0e2f last part of bug 121628, permanent slots should respond immediately to IsPresent() call 2002-02-04 21:57:07 +00:00
relyea%netscape.com 72ba690a4c Function to read PQG params from the key. 2002-02-04 18:00:14 +00:00
wtc%netscape.com 45cce1a40d Temporary hack to make 'depend' do a 'clean' in NSS. 2002-02-04 15:57:38 +00:00
relyea%netscape.com 0ae90e9fb1 Bug 117978: accessor functions to all JCE keystore API to be implemented. 2002-02-03 03:37:26 +00:00
ian.mcgreer%sun.com e4a9a4769d Fix cert leaks when building a chain. There are several client auth bugs filed, this may not be for any one in particular, but was found with tstclnt. 2002-02-02 20:01:22 +00:00
ian.mcgreer%sun.com 43e609386f bug 90518, selfserv dumps cache state before shutdown with -y option 2002-02-02 19:39:48 +00:00
wtc%netscape.com 1512dc6f0e Bugzilla bug 122961: export CERT_CreateSubjectCertList for PSM. 2002-02-02 04:41:06 +00:00
relyea%netscape.com 26815e4981 Add new PK11_ImportSymKeyWithFlags function for JSS 2002-02-02 01:46:05 +00:00
javi%netscape.com 17bbdeab99 Fix Mac bustage. 2002-02-02 01:20:54 +00:00
wtc%netscape.com 1fd06e9576 Bugzilla bug 122712: moved the two newly exported symbols to the right
place.
2002-02-01 21:16:43 +00:00
ian.mcgreer%sun.com 50efa45321 fix cert leak found by client auth 2002-02-01 18:18:13 +00:00
relyea%netscape.com 74d272df70 Fix memory leak. 2002-02-01 17:57:05 +00:00
ian.mcgreer%sun.com 9d0bbe4ab6 bug 121628, persistent cache of hardware token certs 2002-02-01 17:25:15 +00:00
wtc%netscape.com c2c17dc8ed Bugzilla bug 119340: install a SIGTERM handler on Linux for debugging. 2002-02-01 05:57:49 +00:00
relyea%netscape.com c7c406a007 certutil -L now opens the DB ReadOnly. Add the '-X' option to the test is still
testing the R/W case.
2002-02-01 02:28:32 +00:00
relyea%netscape.com fbb3cd1af1 Make the following functions open the databases Readonly:
ListCerts PrintHelp ListKeys ListModules CheckCertValidity Version

Add an option (-X) to restore the old behaviour of openning the Databases R/W
2002-02-01 02:26:40 +00:00
ian.mcgreer%sun.com 4eac0e224a have certutil shutdown cleanly so purify is easier to deal with 2002-01-31 19:27:07 +00:00
relyea%netscape.com 9694fb3322 Fix thread local storage leak. 2002-01-31 19:18:55 +00:00
javi%netscape.com eb955bd006 Make the projects depend on a .exp file that doesn't start with '_' so that we know the .exp file wasn't generated by CodeWarrior. 2002-01-31 19:10:46 +00:00
javi%netscape.com c3c6171f0b Use LoadableRoots.mcp.exp instead of _*.exp so that we know
the .exp wasn't generated by CodeWarrior.
2002-01-31 19:05:27 +00:00
ian.mcgreer%sun.com 73ada3b8ed couple of fixes 2002-01-31 17:28:49 +00:00
ian.mcgreer%sun.com 17924181a5 bug 90518, implement methods for dumping the state of the cache and temp cert store in NSS 3.4 2002-01-31 17:08:32 +00:00
ddrinan%netscape.com a38e12497e Checkin for relyea. Call CERT_DestoryCertificateList instead of CERT_DestroyCertList 2002-01-31 04:00:12 +00:00
relyea%netscape.com 14606c9f4f Fix certlist memory leak. 2002-01-31 02:19:43 +00:00
wtc%netscape.com 1ba4f766ad Bugzilla bug 119340: backed out the fix. We are still seeing the
"selfserv process not detectable" errors on Linux and I don't have
time to get to the bottom of it.
Modified files:
	cmd/selfserv/selfserv.c tests/common/init.sh tests/ssl/ssl.sh
2002-01-31 02:03:57 +00:00
wtc%netscape.com 33eec413e9 Bugzilla bug 122712: temporarily export two additional symbols for Mozilla
static build.
2002-01-31 01:03:21 +00:00
sonja.mirtitsch%sun.com 56fd0efd0d put the sleep 30 back into the linux ssl test to give the selfserv time
to free the socket...
2002-01-31 01:01:47 +00:00
relyea%netscape.com 79e23ff590 restore checks for critical extenstions and fail if we have any we don't
recognize. Just remove the bogus check that v2 crls must have critical extensions
2002-01-31 00:42:43 +00:00
sonja.mirtitsch%sun.com 2f09854c0e next thry for bug 115200 2002-01-31 00:34:04 +00:00
relyea%netscape.com 4a065a35a8 Set token flag when saving the CRLs so they actually get put into the database! 2002-01-31 00:18:09 +00:00
relyea%netscape.com c55125bdd6 Fix searching code so it can find CRL's 2002-01-31 00:16:29 +00:00
sonja.mirtitsch%sun.com 41f16942a4 another try for QA / RE / tinderbox problem bug #115200 2002-01-30 04:37:35 +00:00
relyea%netscape.com 5324ba124a Unsigned values are always greater than '0'! 2002-01-30 00:48:24 +00:00
relyea%netscape.com b17e47bc7b Indexes are zero based. Do our realloc when index == size (not after). 2002-01-30 00:25:34 +00:00
relyea%netscape.com 3dfd980fd3 1) put some defensive programming so we don't crash on invalid der.
2) set the start offset correctly for multi-byte lengths when decoding sets
and sequences
2002-01-30 00:24:12 +00:00
relyea%netscape.com 3d5799a0e4 Restore idempontency to nss_init* 2002-01-29 22:27:15 +00:00
relyea%netscape.com 6087924968 Built-ins set the ulValueLen to -1 to indicate an unknown attribute type. 2002-01-29 21:12:13 +00:00
relyea%netscape.com 761c8f9882 Token and slot names are already converted to NULL terminated strings in the slot structure 2002-01-29 21:10:50 +00:00
relyea%netscape.com 7e91df2901 Don't leak memory in the arena pool 2002-01-29 19:00:47 +00:00
relyea%netscape.com 2ffdebcb02 More 'pretty print' improvements. Decode context specific data a little more. 2002-01-29 17:50:27 +00:00
ian.mcgreer%sun.com 2e7dccd29d changes related to bug 115660
* fipstoken will only force authentication for object-related functions when the object is a private or secret key
* certutil does not authenticate to token when in FIPS and only doing cert-related operations
* QA does not provide password to certutil when doing cert-related operations in FIPS tests
2002-01-29 17:30:22 +00:00
relyea%netscape.com f58a765819 (sigh) not only do we need to find the objects, we need to be able to read
them as well.
2002-01-28 23:28:29 +00:00
sonja.mirtitsch%sun.com 3503c53808 fixed typo 2002-01-28 20:59:23 +00:00
jpierre%netscape.com 3b1ba6dc44 Fix for 69556 - remove expired CA "Verisign Class 4 Primary CA" 2002-01-28 20:43:37 +00:00
sonja.mirtitsch%sun.com 68984c4764 attempted fix for bug 115200, tinderbox reports false failures on machines
that run 32 and 63 bit tinderboxes
2002-01-28 19:35:53 +00:00
relyea%netscape.com 88fccf56cf Fix crashing problem when trying two switch from fips to non-fips and back.
bug 119214.
2002-01-28 19:18:41 +00:00
wtc%netscape.com 1da3195968 Bugzilla bug 100447: on BSD/OS 4.2 and 4.3, we have problem calling
safe_popen in a threaded program.  So we don't call safe_popen when
we obtained some entropy from /dev/urandom.  Thanks to lidl@pix.net
for the bug report and the fix.
2002-01-27 00:14:59 +00:00
wtc%netscape.com d6b8ef5d90 Bugzilla bug 111206: make the Solaris version test flexible so that we
don't need to add a new test for each new Solaris release.
2002-01-26 16:19:51 +00:00
relyea%netscape.com 237f52188c Fix PBE_Context failure by making sure CKM_PBA is it's own keygen type. 2002-01-26 01:20:50 +00:00
relyea%netscape.com e5d11d5431 Fix 2 memory leaks and a UMR.
(keyhand needs to be initialized before we start xor hashing)
Free item and time elements which are transparently allocated for us.
2002-01-26 00:16:03 +00:00
relyea%netscape.com 1b36216be7 Change Sha1_hash to a simple XOR hash for building key handles for token
objects.
2002-01-25 19:09:34 +00:00
relyea%netscape.com 2cd0e7823b Fix key leak in S/Mime. 2002-01-25 19:08:19 +00:00
relyea%netscape.com 66838540ff Fix bug 115660. Note that fixing the bugs necessitates fixing the test
cases as well. The test case was depending on the failure to read certs to
detect the failure to read keys. Now certutil returns a failure if no keys
are found. This also means that the FIPS test after the key and cert
has been deleted should expect a failure to list any keys.
2002-01-25 19:03:17 +00:00
relyea%netscape.com 0b8fb8f0d7 Too agressive on fixing leaks;). This one isn't a leak.
bob
2002-01-24 21:33:51 +00:00
ian.mcgreer%sun.com 3afd5c3d8d fix aix issues 2002-01-24 15:45:55 +00:00
relyea%netscape.com 7f26c10bd8 Fix NT crash on startup. (load builtins after trust domain gets initialized). 2002-01-24 02:46:07 +00:00
nicolson%netscape.com 56bb80f8db Fix 118679: PK11SDR_Encrypt fails if not logged into token. 2002-01-24 01:06:22 +00:00
ian.mcgreer%sun.com ab89e69ce2 implement istemp and isperm in case clients depend on it, make sure certs own a reference to their slot and then free it 2002-01-24 00:58:02 +00:00
ian.mcgreer%sun.com b2cc5d03dc fix leakage in traversal functions that convert certs to CERTCertificates 2002-01-24 00:34:03 +00:00
relyea%netscape.com 65b7f7d46b Fix memory leaks. 2002-01-24 00:26:29 +00:00
ian.mcgreer%sun.com 422c06a4ed make sure path string has terminator 2002-01-24 00:25:32 +00:00
ian.mcgreer%sun.com 3a1d638a39 restore function CERT_SaveImportedCert, used to set the trust bits of a cert on import. Fixes bug 121487 2002-01-23 21:43:30 +00:00
ian.mcgreer%sun.com 115a64c8c2 traverse functions need to cache as they run in order to catch multiple instances of certs correctly 2002-01-23 20:35:18 +00:00
ian.mcgreer%sun.com ced7fd120a traversed certs also need to be cached 2002-01-23 18:24:29 +00:00
ian.mcgreer%sun.com 3b7ccbb61c fix core when token list is emptied (caused by switch to fips mode) 2002-01-23 17:39:29 +00:00
ian.mcgreer%sun.com bc65724129 * keep stan in sync with both addition and removal of modules
* clean up compatibilty issues with PKCS#11 serial numbers.  Need to search both encoded and decoded values, while making sure stan code only deals with DER value
2002-01-23 17:00:39 +00:00
ian.mcgreer%sun.com 952afebdb5 make the load function for the root token work 2002-01-23 15:36:54 +00:00
ian.mcgreer%sun.com 17b74fe184 fix breakage caused by yesterday's checkins; since softoken no longer returns terminating NULL for strings must add it above PKCS#11
also fixes bug 121384
2002-01-23 14:37:48 +00:00
relyea%netscape.com 79f61f853a Restore code automatic Built-in loading code. 2002-01-23 04:42:21 +00:00
relyea%netscape.com c8fcdeb68d Function to return if any builtins have been loaded yet. 2002-01-23 04:41:25 +00:00
ian.mcgreer%sun.com f4b110b8ac fix PSM crash described in bug 120647 2002-01-23 03:53:16 +00:00
wtc%netscape.com 1eff2860ba Bugzilla bug 119340: an inelegant but more reliable way to kill the
multithreaded 'selfserv' process on Linux.
Modified files:
    cmd/selfserv/selfserv.c tests/common/init.sh tests/ssl/ssl.sh
2002-01-23 03:18:57 +00:00
relyea%netscape.com 3ad5024f8a Fix wrong polarity on if statement (should check for success, not failure). 2002-01-23 02:10:31 +00:00
sonja.mirtitsch%sun.com 27cfb4c716 added the TCP connection aborted to the lines that are OK in the log 2002-01-23 02:07:08 +00:00
relyea%netscape.com c3ca8a1a48 Fix memory like in readSMimeEntry 2002-01-23 01:44:22 +00:00
relyea%netscape.com 1947921305 Fix label stuff. 2002-01-23 01:20:32 +00:00
relyea%netscape.com f235b85944 Labels don't have NULL's by default. 2002-01-23 00:53:53 +00:00
ian.mcgreer%sun.com 0a7c8a4e7c PSM bug 119359, NSS 3.4 also needs to recognize valid CA trust in order for cert download to work correctly 2002-01-23 00:49:23 +00:00
sonja.mirtitsch%sun.com 2cc7908640 added comments 2002-01-23 00:27:10 +00:00
sonja.mirtitsch%sun.com d19d19b941 removing tmpfiles on tinderboxes 2002-01-23 00:21:01 +00:00
sonja.mirtitsch%sun.com 020d8a3b2d changes so nssqa will run on netscape's daily builds as well 2002-01-23 00:19:32 +00:00
ian.mcgreer%sun.com 7462cbdfd4 last change to INTEGER encoding, strip extraneous leading zeros from integer values passed to encoder 2002-01-22 22:48:26 +00:00
ian.mcgreer%sun.com 5b01d3a7d1 fix for bug 120824; functions which collect certs based on subject need to examine *both* the temp and perm stores 2002-01-22 21:56:19 +00:00
relyea%netscape.com 1e98db5857 remove bogus verify step (the cert passed in is almost certainly a signing cert). 2002-01-18 03:38:29 +00:00
relyea%netscape.com fdc3985b20 Fix the case where the subjectID is an issuer/SN. don't build a dbkey in
this case, return the actual subject cert id after looking up the cert
directly
2002-01-18 03:36:44 +00:00
relyea%netscape.com 05d176b9c4 Increment length on LABEL, not on CLASS to catch the added NULL case. 2002-01-18 03:35:18 +00:00
ian.mcgreer%sun.com e45f8c2b70 more backwards compatibility fixes
* always send DER of serial number to PKCS#11 queries
* in softoken, construct key for certificate using decoded serial number with (possibly) a leading zero, for compatibility with version 7 db
* in softoken, decode serial number *without* removing leading zero for searches
2002-01-17 00:20:53 +00:00
ian.mcgreer%sun.com 0b564fa522 fix build bustage 2002-01-16 21:36:33 +00:00
ian.mcgreer%sun.com 8c0b98c71b fix a crash seen in PSM by making sure a zero-length attribute zeroes the item inheriting it 2002-01-16 21:23:30 +00:00
ian.mcgreer%sun.com 5c022683fc fix for bug 115360, failure in pkcs12 backwards compatibility tests 2002-01-16 21:22:30 +00:00
ian.mcgreer%sun.com 0c10963511 unfortunately, the SDR key keeps the value of CK_KEY_TYPE in the coefficient field of an RSA key. This means some format is lost through the ASN.1 encoder/decoer. Trying again to account for that without affecting normal key type attributes. 2002-01-16 16:02:51 +00:00
wtc%netscape.com 00b5f915b1 Bugzilla bug 119340: added a debug printf statement. 2002-01-16 03:29:06 +00:00