Граф коммитов

3384 Коммитов

Автор SHA1 Сообщение Дата
nicolson%netscape.com 28a16a764c Fix 146515: PK11PrivKey.fromPrivateKeyInfo enables no operations for RSA keys 2002-05-23 20:32:10 +00:00
nicolson%netscape.com 96232e756b move new entry to end of file 2002-05-23 18:45:23 +00:00
nicolson%netscape.com d503b902ae cleanup tabs and spaces. 2002-05-23 18:45:00 +00:00
nicolson%netscape.com d1bbd143bc Various minor tweaks for code cleanliness. 2002-05-23 18:29:07 +00:00
glen.beasley%sun.com e56800b6f2 bug 144913 isCertValid addition 2002-05-23 17:52:23 +00:00
relyea%netscape.com 72625ff391 Refresh token cache after login on tokens that need to log in before they
could read their certs.
2002-05-22 23:13:05 +00:00
relyea%netscape.com 12e3d87c3a Close our peer database handles because some platforms (Mac) do bad things
if you hold two berkelydb handles open to the same database in the same process.
(actually a lot of platforms could cause problems, the Mac version of dbm (1.85)
just does the bad things right away).
2002-05-22 21:47:23 +00:00
nicolson%netscape.com 121ad6444e Fix http://bugzilla.mozilla.org/show_bug.cgi?id=144934: generating DSA public key from spec is broken. 2002-05-22 02:13:31 +00:00
relyea%netscape.com bdb4739c86 Back out the change on Module destruction. 2002-05-22 00:25:48 +00:00
relyea%netscape.com 78d49962a7 Don't crash if url is specified, but the crl is broken 2002-05-21 21:26:52 +00:00
relyea%netscape.com 77c8edd9e2 Missing component when deleting should not be fatal 2002-05-21 21:26:14 +00:00
relyea%netscape.com 7992b938dc Fix spelling error.
Clear out certs from the cache before the token goes away.
2002-05-21 21:24:35 +00:00
relyea%netscape.com ae037a0020 Fix spelling error. 2002-05-21 21:23:33 +00:00
relyea%netscape.com 16d6f24791 Clear out certs associated with tokens that have just been taken off the trust domain. 2002-05-21 21:22:55 +00:00
jpierre%netscape.com f6482b1e32 Fix for bug 137645 - cached certificate does not get its nickname updated after P12 import of matching user certificate 2002-05-20 23:21:39 +00:00
ian.mcgreer%sun.com 15cbb51ea4 bug 144309, return value of STAN_GetCERTCertificate not checked
r=wtc
2002-05-20 18:05:11 +00:00
ian.mcgreer%sun.com bd35791189 fix bustage caused by generated file discrepancies 2002-05-20 16:01:21 +00:00
ian.mcgreer%sun.com 0a481f5a1d need to match ckapi.perl with generated target nssck.api, which was modified 2002-05-20 14:38:48 +00:00
wtc%netscape.com f50b1aceb0 Bugzilla bug 145178: added OpenBSD build support. The patch is contributed
by Christopher Seawood <seawood@netscape.com>.
Modified Files: coreconf/config.mk sslmutex.c sslmutex.h
Added Files: coreconf/OpenBSD.mk
2002-05-18 03:24:17 +00:00
wtc%netscape.com c01c8333dc Bugzilla bug 131171: added HP-UX IPF (ia64) support. Portions of the patch
(attachment 84127) were contributed by Jim Dunn <jdunn@netscape.com>.
2002-05-18 00:52:11 +00:00
wtc%netscape.com 4629198fde Bugzilla bug 145128: fixed a typo error in sec_pkcs5_rc4(). Also simplfied
two other similar constructs.  r=relyea.
2002-05-17 21:29:27 +00:00
kaie%netscape.com 80c24f7a91 b=143532 Only allow toggling FIPS when it is safe to
r=javi sr=alecf
2002-05-17 19:56:11 +00:00
ian.mcgreer%sun.com 92d2581332 bug 144448, incorrect use of ## operator in creating CKFW entry points 2002-05-17 18:57:34 +00:00
kaie%netscape.com 8892f15a70 b=144823 Localized certificate name is garbled, unable to send out signed/encrypted mail on a localized build
r=javi sr=mscott
2002-05-17 01:21:31 +00:00
relyea%netscape.com dfd4f9ba1c Fix Linux and Solaris builds 2002-05-17 00:39:26 +00:00
relyea%netscape.com 5781a451fd The tip is now NSS 3.6, make sure new builds properly indicate this 2002-05-16 22:12:37 +00:00
relyea%netscape.com 2c1512022e Add PK11_GetPBEIV to exported symbol list. 2002-05-16 22:12:10 +00:00
relyea%netscape.com 318e0b19d3 Add function to get the PBEIV. 2002-05-16 22:06:19 +00:00
relyea%netscape.com 96fcbeedc8 Add support to turn on or off optimizations based on parameters to NSS_Init functions 2002-05-16 22:05:17 +00:00
relyea%netscape.com db4d3c197d Make a single softoken which works for both servers and clients depending on configuration.
Add the _PAD functions to the internal database token.
2002-05-16 22:04:12 +00:00
rpotts%netscape.com 4d4116d281 bug #46856 (r=valeski, sr=darin). API Changes to nsIWebProgress/nsIWebProgressListener) 2002-05-16 20:57:37 +00:00
relyea%netscape.com d41f575216 Argh. I thought I had compiled this! fixe compile errors. 2002-05-16 20:48:27 +00:00
relyea%netscape.com 7252fee64d Add Transactions (still need to add transactions on database upgrade).
Make trust objects their own objects to reduce a couple of unnecessary cert decodes.
2002-05-16 20:39:04 +00:00
wtc%netscape.com 4d369b4b08 Bug 131171: added HP-UX 11.20 support. 2002-05-16 17:35:41 +00:00
wtc%netscape.com a2dc0c286f Bugzilla bug 138532: use pipes instead of semaphores for NetBSD, which does
not have semaphore.h.  Thanks to Chris Seawood <seawood@netscape.com> for
the patch.  Modified files: sslmutex.h sslmutex.c
2002-05-16 13:36:02 +00:00
wtc%netscape.com 48efa10fb5 Bugzilla bug 133753: added support for AIX 5.1 to security/coreconf. 2002-05-16 13:12:33 +00:00
wtc%netscape.com f0ab843625 Fixed build breakage on BeOS -- made the ifdef match the one in sslsnce.c. 2002-05-16 05:32:30 +00:00
kaie%netscape.com d829db174a b=129067 Deleted certs still appear in Cert Manager.
r=javi sr=alecf
2002-05-16 04:03:19 +00:00
kaie%netscape.com b29048e4fe b=129067 Backing out unreliable patch.
See bugzilla for details.
Better patch will be checked in a minute.
2002-05-16 03:59:36 +00:00
kaie%netscape.com 6803ea2ace b=136948 Give better feedback when no valid certs for S/Mime are available
r=javi sr=mscott
2002-05-16 03:51:37 +00:00
kaie%netscape.com 9a400e7c1c b=144056 security state not reset after loading about:blank pages
r=javi sr=rpotts
2002-05-16 03:39:59 +00:00
jpierre%netscape.com 3415905c45 Fix for 141256 - correct HTTP parsing for OCSP in NSS 2002-05-15 23:59:40 +00:00
dougt%netscape.com e96df2ad1b Fixes mozilla/strings requiring unfrozen nsCRT class. patch by scc, r=dougt, sr=jag, b=136756 2002-05-15 18:55:21 +00:00
relyea%netscape.com d987bdfd4b bug 133397. Move AddPermModule() inside the previously empty if statement where it belongs. 2002-05-14 23:16:16 +00:00
kaie%netscape.com 58c2e7a36c b=137874 Unable to import CA cert before SSL keep alive connection is terminated
r=javi sr=alecf
2002-05-14 20:46:03 +00:00
kaie%netscape.com 1942971d28 Backing out code from bug 102633 and the unsuccessful fix attempt from bug 137530, because the UI does not work as expected.
r=javi / sr=alecf for backing out
2002-05-14 20:42:54 +00:00
nicolson%netscape.com f039df6a9e Support DSAPrivateKey. 2002-05-14 02:21:25 +00:00
wtc%netscape.com ab66e37271 Bugzilla bug 135069: SEC_PKCS12DestroyExportContext should free the slot
reference allocated in SEC_PKCS12CreateExportContext. r=relyea,mcgreer.
2002-05-13 17:22:46 +00:00
wtc%netscape.com 012d3d240d Bugzilla bug 135824: fixed slot reference leaks in signtool and removed
a faulty attempt to set user trust.  r=relyea,mcgreer.
Modified files: certgen.c util.c
2002-05-13 17:08:20 +00:00
wtc%netscape.com f6bfa70691 Bugzilla bug 135052: more cleanup in SEC_PKCS12DecoderStart. r=relyea. 2002-05-10 23:10:06 +00:00
jpierre%netscape.com 9403262b78 Fix for bug 142868 - CA certificates are imported with NULL nicknames . 2002-05-10 20:21:38 +00:00
relyea%netscape.com a02dfd314a Add function to determine if it's safe to delete the internal module. 2002-05-10 18:36:18 +00:00
relyea%netscape.com 8a86a90862 Detect when we have a previously deleted internal module which has not yet been freed, and don't try to switch to it. 2002-05-10 18:13:44 +00:00
relyea%netscape.com b4c8847fee Add new error code for trying to all previously deleted modules which have not yet been freed. 2002-05-10 18:12:39 +00:00
relyea%netscape.com 53561d397f Allow both FIPS and non-FIPS tokens to be initialized and active at the same time. 2002-05-10 18:11:37 +00:00
relyea%netscape.com fb8c9f6813 When we force, we should preserve the NULL nickname semantics. 2002-05-10 18:10:26 +00:00
nicolson%netscape.com 7999d93103 comment out JDK 1.4 test so we can build with earlier versions 2002-05-10 00:13:19 +00:00
nicolson%netscape.com 331e8205e9 Don't run javac if there are no source files to compille 2002-05-10 00:12:44 +00:00
wtc%netscape.com c535d97c40 Bugzilla bug 135821: fixed the internal slot reference leak in
PK11_WrapPrivKey.  r=relyea.
2002-05-09 23:34:24 +00:00
wtc%netscape.com aa3a2a0110 Bugzilla bug 135809: fixed the slot reference leaks in PBE_CreateContext
and SEC_PKCS5GetIV.  r=relyea.
2002-05-09 23:21:16 +00:00
wtc%netscape.com 92ca89f0c7 Bugzilla bug 135818: fixed internal slot reference leaks in
PK11_VerifySlotMechanisms and PK11_InitToken.  r=relyea.
2002-05-09 23:18:15 +00:00
wtc%netscape.com 93b9d9fe97 Bugzilla bug 135826: fixed the slot reference leaks. 2002-05-09 23:01:21 +00:00
ian.mcgreer%sun.com 9f99132e86 bug 135808, STAN_GetDefaultCryptoToken appears to leak a slot reference, but there are no callers of it. Removing function.
r=wtc
2002-05-09 22:42:23 +00:00
wtc%netscape.com 09578490e1 Bugzilla bug 135334: free the internal key slot reference when we are done. 2002-05-09 21:14:36 +00:00
wtc%netscape.com effd5d308f Bugzilla bug 135058: free nickCopy on error returns in
PK11_FindCertsFromNickname.  r=mcgreer.
2002-05-09 20:01:18 +00:00
nicolson%netscape.com 12f3461e9e add SocketBase.getLocalAddressNative. 2002-05-09 17:11:18 +00:00
nicolson%netscape.com ab7641b564 Fix 143256: SSLServerSocket.getInetAddress returns the wrong address.
Implement toString() for both socket types.
2002-05-09 17:10:06 +00:00
nicolson%netscape.com 2dfdffa408 add more PBE keygen algorithms. 2002-05-09 14:32:54 +00:00
nicolson%netscape.com 437d6f5877 update to work better with PBE. 2002-05-09 14:32:33 +00:00
nicolson%netscape.com a9385c1fcf get rid of PBEKeySpec, just use PBEKeyGenParams. 2002-05-09 14:29:07 +00:00
glen.beasley%sun.com dc0c0fe061 115778 return local port 2002-05-09 02:26:25 +00:00
kaie%netscape.com 638d00f1cf b=137530 Fix checkboxes in Edit Cipher dialog.
r=javi sr=hewitt idea-for-fix=varga
2002-05-08 19:06:11 +00:00
darin%netscape.com 1a993a2f38 fixing mac bustage (next time i'll remember to build PSM on my mac) 2002-05-08 00:07:23 +00:00
wtc%netscape.com 8ff49240a7 Bugzilla bug 136279: Return oldpath only if it is different from path.
Avoid an unnecessary call to SECMOD_HasRootCerts in nss_FindExternalRoot.
2002-05-07 23:35:22 +00:00
darin%netscape.com f43dfb75ba fixes bug 142870 "nsIFile should use UCS-2 instead of UTF-8"
r=dougt sr=alecf
2002-05-07 23:07:19 +00:00
nicolson%netscape.com e748daaffb change assert to _assert. 2002-05-07 20:45:09 +00:00
nicolson%netscape.com 2d7b8c3eb6 add some checks to prevent misunderstandings 2002-05-07 20:44:48 +00:00
relyea%netscape.com b815a638c1 Automatically create a NULL email profile for certs with email addresses which
are imported into the internal token.
2002-05-07 20:38:59 +00:00
nicolson%netscape.com c27c856e10 update version numbers. 2002-05-07 20:34:54 +00:00
nicolson%netscape.com 64a0c099f1 make it public so that it can be instantiated from CryptoManager. 2002-05-07 20:34:05 +00:00
nicolson%netscape.com 37a7505a46 implement some methods in support of java.security.Key. 2002-05-07 20:33:23 +00:00
nicolson%netscape.com 05f9c20222 fix broken error message. 2002-05-07 20:32:29 +00:00
ian.mcgreer%sun.com 687519e7b2 bug 141936, crash when NULL nickname entry is stored in temp store
r=jpierre
2002-05-07 20:31:59 +00:00
nicolson%netscape.com be3896ad3a Now SymmetricKey knows what KeyGenAlgorithm its associated with. 2002-05-07 20:31:52 +00:00
nicolson%netscape.com dac41b14e0 force load of SHA1 provider before installing it as a provider. 2002-05-07 20:31:14 +00:00
nicolson%netscape.com 91a46ed3ce add JCE providers. 2002-05-07 20:30:38 +00:00
nicolson%netscape.com d7d08bbf7d update version strings. 2002-05-07 20:24:03 +00:00
ian.mcgreer%sun.com 3bd2314a52 bug 142175, PK11_ListCerts regressions -- handle PKCS#11 incompatibilites with serial numbers, and fix trust collection. 2002-05-07 14:58:12 +00:00
kaie%netscape.com 33cd0c8f64 b=141871 Releasing callback in nsNSSSocketInfo must be proxied.
r=javi sr=alecf
2002-05-07 09:35:00 +00:00
kaie%netscape.com 308edeca0f b=112384 Unable to download some CRLs.
r=javi sr=darin
2002-05-07 09:29:23 +00:00
kaie%netscape.com ac67264a36 b=139329 Crashes trying to send signed mail.
r=javi sr=alecf
2002-05-07 09:25:19 +00:00
jpierre%netscape.com a4d73c1434 Fix for 142658 - fix certutil crash with NULL nickname 2002-05-06 23:10:40 +00:00
nicolson%netscape.com 1f951f8584 Renamed to JSS*. 2002-05-06 21:54:38 +00:00
nicolson%netscape.com 8e32f7cd47 Sun's PBE Key Spec is incomplete. 2002-05-06 18:58:39 +00:00
nicolson%netscape.com d6c440b810 add DESede. 2002-05-06 18:49:52 +00:00
wtc%netscape.com 2ff0c62fa7 Bugzilla bug 136279: fixed bugs where 'path' and 'oldpath' were passed
to string functions before they were null-terminated.  Added a comment
to explain what 'oldpath' is for.
2002-05-03 20:59:50 +00:00
nicolson%netscape.com b8b8caf60f move alg-specific provider classes into generic parent classes. 2002-05-03 00:27:03 +00:00
nicolson%netscape.com 6e304edf30 upgrade to NSS 3.4.1 RTM and NSPR 4.2. 2002-05-02 23:02:49 +00:00
nicolson%netscape.com c99cea2025 New provider files for JSS 3.2. 2002-05-02 20:25:15 +00:00
ian.mcgreer%sun.com 74f7a8a572 bug 141355, CERT_DecodeDERCertificate is not a safe function for some uses, must be replaced with CERT_NewTempCertificate. 2002-05-02 19:00:13 +00:00
relyea%netscape.com d74b0c5ba7 Fix the RSA key check to correctly accept keys with p < q. 2002-05-02 17:39:13 +00:00
glen.beasley%sun.com 9981c35466 bug 131308 build 64 bit JSS with JDK 1.4 2002-05-02 04:37:16 +00:00
glen.beasley%sun.com d161d0be5e bug 129394 change assert to _assert 2002-05-02 04:04:23 +00:00
kaie%netscape.com 64bea80e40 b=139948 SSL Tooltip not updated when going from one ssl site to another
r=javi sr=jag
2002-05-01 14:15:27 +00:00
jpierre%netscape.com 38daf04b71 Fix for 136279 - initialize NSS in a way compatible with < 3.4 versions of NSS 2002-05-01 01:04:41 +00:00
wtc%netscape.com 9a0c0ef79c Bugzilla bug 127062: use PR_MSG_PEEK instead of MSG_PEEK. 2002-05-01 00:21:50 +00:00
wtc%netscape.com ac26f4995d Bugzilla bug 131057: define PORT_Strdup as a function that calls PORT_Alloc.
Modified files:
	lib/ckfw/nsprstub.c lib/fortcrypt/swfort/pkcs11/stub.c
	lib/nss/nss.def lib/util/secport.c lib/util/secport.h
2002-05-01 00:06:39 +00:00
wtc%netscape.com 31efe5f323 Whitespace change. 2002-04-30 00:11:19 +00:00
relyea%netscape.com 458d4a99e2 Use NewTempCert and AddTempCert when importing because the cert may already exist
in the cache.
2002-04-29 23:54:07 +00:00
darin%netscape.com 1b1677bbe9 fixes bug 129279 "nsIFile unicode/utf8/ascii task"
r=dougt sr=alecf
2002-04-27 05:33:09 +00:00
wtc%netscape.com 18917e3c78 Added pkibase.c to the project. 2002-04-26 23:29:19 +00:00
wtc%netscape.com ce697caabc Needed a (char *) cast for slotInfo.manufacturerID because it is an array
of "unsigned" chars.  Mac's compiler complains about that.
2002-04-26 23:05:40 +00:00
jgmyers%netscape.com aa210f4255 Remove ssl-forcehandshake workaround r=kaie/rpotts/bienvenu sr=darin 2002-04-26 23:02:11 +00:00
wtc%netscape.com e1cdae04b3 Removed devobject.c from the project. That file was removed. 2002-04-26 22:52:07 +00:00
wtc%netscape.com 15576425ef Need to define SHLIB_SUFFIX for lib/softoken/dbinit.c. 2002-04-26 22:42:15 +00:00
relyea%netscape.com 2d8c1b98ba return error when incomplete shutdown has been detected. 2002-04-26 22:36:07 +00:00
ian.mcgreer%sun.com 7e66c201ad When doing cert traversals, create the certs in full as they are found. This avoids thrashing the softoken's object cache when the database has a large number of certs. 2002-04-26 14:34:05 +00:00
ian.mcgreer%sun.com 86371e2f7b fix broken HPUX builds 2002-04-26 12:59:06 +00:00
relyea%netscape.com 7577a5a2f4 Add code to update nickname and 'CKA_ID' from set attribute calls. This allows
us to add a nickname to a cert after we import it from pkcs #12.
2002-04-26 01:44:33 +00:00
relyea%netscape.com 18b58745a8 Write the nickname entry as well when adding a nickname to a bug. 2002-04-26 01:09:21 +00:00
relyea%netscape.com 063c8f3636 Detect Active Card presents and disable PROTECTED_PIN_PATH login when found. 2002-04-25 21:24:47 +00:00
wtc%netscape.com 470f233add Deleted code that was made obsolete by the previous revision. 2002-04-25 21:10:09 +00:00
relyea%netscape.com 0d8f8e8981 Don't let activeCards set the Protect_Auth bit because they weren't intending to
to begin with.
2002-04-25 20:57:06 +00:00
ian.mcgreer%sun.com f228b875f1 if a cert already exists, use C_SetAttributeValue to change its mutable attributes during import (instead of trying to recreate it) 2002-04-25 20:49:49 +00:00
ian.mcgreer%sun.com 980175a1c0 bug 138626, remove deleted cert from cache even if references still exist 2002-04-25 19:37:30 +00:00
ian.mcgreer%sun.com 05809d9acf reorganize token cache so that cache entries for imported objects are created from the token, not from the user-supplied template 2002-04-25 19:33:47 +00:00
relyea%netscape.com 36917f3b4c NSS 3.4 has branch, that makes the tip at least NSS 3.5 2002-04-25 18:51:45 +00:00
relyea%netscape.com 664c5ae965 Don't set the Token value before fetching CRL attributes. This code is fetching
attributes from a known CRL, not looking up new attributes (I'm pretty sure that
CVS apropos would show I checked in the previously wrong code).

bob
2002-04-25 18:33:45 +00:00
seawood%netscape.com ce9e9903a5 Add 'make install' target to build. It's "MRE-friendly". (See http://www.mozilla.org/projects/embedding/MRE.html for details.)
Changes:
* Added EXTRA_COMPONENTS variable to build.  Use it to automagically install files into the components dir.
* Added SYSINSTALL variable.  Use it install files onto the system.
* Move mozilla-config generation from configure to makefiles
* mozilla-config will now generate paths based upon the MRE-based directory layout.
* Generate mozilla script from template

The installation heirarchy currently looks like:
$prefix -> /bin/mozilla
           /bin/mozilla-config
           /include/mozilla-ver/*
           /lib/mozilla-ver  (mozappdir)
                            /components
                            /res
                            /defaults
                            /chrome

There is preliminary build support for MRE dirs as well though the component manager hasn't had MRE support added yet.

$prefix -> /lib/mre/mre-ver  (mredir)
                            /components
2002-04-25 02:52:44 +00:00
sonja.mirtitsch%sun.com 323d14311b trying a version that can test tip as default for tinderbox and 341
as default for nightly QA
2002-04-25 01:04:10 +00:00
relyea%netscape.com 56733313ca Don't crash if our cache entry is not found. 2002-04-25 00:45:42 +00:00
relyea%netscape.com 28cdf792e4 Turn off caching for non-hardware tokens for now until we fix some of our
tokens which can be updated out-of-band to use the proper 'removable token'
semantics.
2002-04-25 00:25:58 +00:00
relyea%netscape.com 5c82cde910 Don't crash if we don't find the profile (and thus don't have a slot to free). 2002-04-24 22:23:37 +00:00
ian.mcgreer%sun.com f8317d7af9 This is a real corner case. If a search is done by issuer/serial, and the returned cert was in the cache, need to see if the cert's slot was removed. If so, destroy the cert and retry the search on the present tokens. 2002-04-24 19:39:41 +00:00
relyea%netscape.com cd38faba86 Don't crash when getting a single user cert, but old certs are in the database
with the same subject, but no keys.
2002-04-24 18:29:04 +00:00
relyea%netscape.com 9b432ab983 Look up both DER encoded serial numbers (PKCS #11 spec), and decode serial
numbers (Old NSS) when looking up certs by issuer and SN.
2002-04-24 18:27:17 +00:00
relyea%netscape.com bb017f0ffd Authenticate to tokens before looking up user certs. 2002-04-24 18:25:48 +00:00
kaie%netscape.com 0aa2271015 b=129067 Deleted certs still appear in Cert Manager, uses slow workaround, which should get removed once bug 138626 is fixed.
r=javi sr=alecf
2002-04-24 00:51:33 +00:00
kaie%netscape.com e7a9499b78 b=134992 Fix crash when displaying some S/Mime messages.
r=javi sr=alecf
2002-04-24 00:40:49 +00:00
kaie%netscape.com e8c4b88efb b=139349 Need to use dont_AddRef with GetCertAtIndex
r=bryner sr=alecf
2002-04-24 00:35:05 +00:00
kaie%netscape.com d033f1dbcb b=139325 Leaking CERTCertificate references from nsNSSCertificate::GetChain
r=bryner/javi sr=alecf
2002-04-24 00:15:12 +00:00
thayes%netscape.com 9855f801d2 Reserved Netscape extension (NETSCAPE 1 18) 2002-04-23 23:48:20 +00:00
ian.mcgreer%sun.com 9d9366f6db fix shutdown leaks 2002-04-23 17:22:13 +00:00
kaie%netscape.com 658962867b b=125607 Temporary workaround for better displaying signed S/Mime messages w/ attachments from IMAP servers.
r=ducarroz sr=bienvenu
2002-04-22 23:02:29 +00:00
ian.mcgreer%sun.com 7fe4b2d767 avoid use of iterator 2002-04-22 20:44:07 +00:00
ian.mcgreer%sun.com ff149d2fc9 NewTemp has to be matched with AddTempCertToPerm 2002-04-22 20:27:52 +00:00
relyea%netscape.com 9c0eda08dc Token and cert processing fixes:
1) use NewTempCert rather than DERDecode cert in all import cert cases.
When DERDecode cert is used, we may wind up with a cert that gets cleared
when we try to import it because it already in the cache. NewTempCert will
return the version that is in the cache.
   2) If we are returning the CAList, only return certs that are CA's
(not usercerts).
   3) Authenticate to all the tokens if necessary before we try to list
certs. (Stan code should eventually get automatic authentication calls in
the code itself).
   4) When looking up user certs, don't return those certs with the same
subject, but do not have any key material associated with them (that is
don't crash if we have old certs in our database without nicknames, but
match user certs on our smart cards).
   5) Save the nickname associated with our subject list in the temp
cache so we can correctly remove the entry even if the cert's nickname
changes (because of smart card insertions and removals, or because of
creation and deletions of our user cert).
2002-04-22 19:09:01 +00:00
ian.mcgreer%sun.com 6f242bce0e file is no longer part of build (functionality in devtoken.c) 2002-04-22 18:28:30 +00:00
ian.mcgreer%sun.com 8f09896195 overwrite old entry during import, so that changing trust works correctly 2002-04-22 15:21:06 +00:00
ian.mcgreer%sun.com a5c756c373 fix bugs in cert import with smart card cache 2002-04-22 14:14:44 +00:00