Граф коммитов

3457 Коммитов

Автор SHA1 Сообщение Дата
relyea%netscape.com 318e0b19d3 Add function to get the PBEIV. 2002-05-16 22:06:19 +00:00
relyea%netscape.com 96fcbeedc8 Add support to turn on or off optimizations based on parameters to NSS_Init functions 2002-05-16 22:05:17 +00:00
relyea%netscape.com db4d3c197d Make a single softoken which works for both servers and clients depending on configuration.
Add the _PAD functions to the internal database token.
2002-05-16 22:04:12 +00:00
rpotts%netscape.com 4d4116d281 bug #46856 (r=valeski, sr=darin). API Changes to nsIWebProgress/nsIWebProgressListener) 2002-05-16 20:57:37 +00:00
relyea%netscape.com d41f575216 Argh. I thought I had compiled this! fixe compile errors. 2002-05-16 20:48:27 +00:00
relyea%netscape.com 7252fee64d Add Transactions (still need to add transactions on database upgrade).
Make trust objects their own objects to reduce a couple of unnecessary cert decodes.
2002-05-16 20:39:04 +00:00
wtc%netscape.com 4d369b4b08 Bug 131171: added HP-UX 11.20 support. 2002-05-16 17:35:41 +00:00
wtc%netscape.com a2dc0c286f Bugzilla bug 138532: use pipes instead of semaphores for NetBSD, which does
not have semaphore.h.  Thanks to Chris Seawood <seawood@netscape.com> for
the patch.  Modified files: sslmutex.h sslmutex.c
2002-05-16 13:36:02 +00:00
wtc%netscape.com 48efa10fb5 Bugzilla bug 133753: added support for AIX 5.1 to security/coreconf. 2002-05-16 13:12:33 +00:00
wtc%netscape.com f0ab843625 Fixed build breakage on BeOS -- made the ifdef match the one in sslsnce.c. 2002-05-16 05:32:30 +00:00
kaie%netscape.com d829db174a b=129067 Deleted certs still appear in Cert Manager.
r=javi sr=alecf
2002-05-16 04:03:19 +00:00
kaie%netscape.com b29048e4fe b=129067 Backing out unreliable patch.
See bugzilla for details.
Better patch will be checked in a minute.
2002-05-16 03:59:36 +00:00
kaie%netscape.com 6803ea2ace b=136948 Give better feedback when no valid certs for S/Mime are available
r=javi sr=mscott
2002-05-16 03:51:37 +00:00
kaie%netscape.com 9a400e7c1c b=144056 security state not reset after loading about:blank pages
r=javi sr=rpotts
2002-05-16 03:39:59 +00:00
jpierre%netscape.com 3415905c45 Fix for 141256 - correct HTTP parsing for OCSP in NSS 2002-05-15 23:59:40 +00:00
dougt%netscape.com e96df2ad1b Fixes mozilla/strings requiring unfrozen nsCRT class. patch by scc, r=dougt, sr=jag, b=136756 2002-05-15 18:55:21 +00:00
relyea%netscape.com d987bdfd4b bug 133397. Move AddPermModule() inside the previously empty if statement where it belongs. 2002-05-14 23:16:16 +00:00
kaie%netscape.com 58c2e7a36c b=137874 Unable to import CA cert before SSL keep alive connection is terminated
r=javi sr=alecf
2002-05-14 20:46:03 +00:00
kaie%netscape.com 1942971d28 Backing out code from bug 102633 and the unsuccessful fix attempt from bug 137530, because the UI does not work as expected.
r=javi / sr=alecf for backing out
2002-05-14 20:42:54 +00:00
nicolson%netscape.com f039df6a9e Support DSAPrivateKey. 2002-05-14 02:21:25 +00:00
wtc%netscape.com ab66e37271 Bugzilla bug 135069: SEC_PKCS12DestroyExportContext should free the slot
reference allocated in SEC_PKCS12CreateExportContext. r=relyea,mcgreer.
2002-05-13 17:22:46 +00:00
wtc%netscape.com 012d3d240d Bugzilla bug 135824: fixed slot reference leaks in signtool and removed
a faulty attempt to set user trust.  r=relyea,mcgreer.
Modified files: certgen.c util.c
2002-05-13 17:08:20 +00:00
wtc%netscape.com f6bfa70691 Bugzilla bug 135052: more cleanup in SEC_PKCS12DecoderStart. r=relyea. 2002-05-10 23:10:06 +00:00
jpierre%netscape.com 9403262b78 Fix for bug 142868 - CA certificates are imported with NULL nicknames . 2002-05-10 20:21:38 +00:00
relyea%netscape.com a02dfd314a Add function to determine if it's safe to delete the internal module. 2002-05-10 18:36:18 +00:00
relyea%netscape.com 8a86a90862 Detect when we have a previously deleted internal module which has not yet been freed, and don't try to switch to it. 2002-05-10 18:13:44 +00:00
relyea%netscape.com b4c8847fee Add new error code for trying to all previously deleted modules which have not yet been freed. 2002-05-10 18:12:39 +00:00
relyea%netscape.com 53561d397f Allow both FIPS and non-FIPS tokens to be initialized and active at the same time. 2002-05-10 18:11:37 +00:00
relyea%netscape.com fb8c9f6813 When we force, we should preserve the NULL nickname semantics. 2002-05-10 18:10:26 +00:00
nicolson%netscape.com 7999d93103 comment out JDK 1.4 test so we can build with earlier versions 2002-05-10 00:13:19 +00:00
nicolson%netscape.com 331e8205e9 Don't run javac if there are no source files to compille 2002-05-10 00:12:44 +00:00
wtc%netscape.com c535d97c40 Bugzilla bug 135821: fixed the internal slot reference leak in
PK11_WrapPrivKey.  r=relyea.
2002-05-09 23:34:24 +00:00
wtc%netscape.com aa3a2a0110 Bugzilla bug 135809: fixed the slot reference leaks in PBE_CreateContext
and SEC_PKCS5GetIV.  r=relyea.
2002-05-09 23:21:16 +00:00
wtc%netscape.com 92ca89f0c7 Bugzilla bug 135818: fixed internal slot reference leaks in
PK11_VerifySlotMechanisms and PK11_InitToken.  r=relyea.
2002-05-09 23:18:15 +00:00
wtc%netscape.com 93b9d9fe97 Bugzilla bug 135826: fixed the slot reference leaks. 2002-05-09 23:01:21 +00:00
ian.mcgreer%sun.com 9f99132e86 bug 135808, STAN_GetDefaultCryptoToken appears to leak a slot reference, but there are no callers of it. Removing function.
r=wtc
2002-05-09 22:42:23 +00:00
wtc%netscape.com 09578490e1 Bugzilla bug 135334: free the internal key slot reference when we are done. 2002-05-09 21:14:36 +00:00
wtc%netscape.com effd5d308f Bugzilla bug 135058: free nickCopy on error returns in
PK11_FindCertsFromNickname.  r=mcgreer.
2002-05-09 20:01:18 +00:00
nicolson%netscape.com 12f3461e9e add SocketBase.getLocalAddressNative. 2002-05-09 17:11:18 +00:00
nicolson%netscape.com ab7641b564 Fix 143256: SSLServerSocket.getInetAddress returns the wrong address.
Implement toString() for both socket types.
2002-05-09 17:10:06 +00:00
nicolson%netscape.com 2dfdffa408 add more PBE keygen algorithms. 2002-05-09 14:32:54 +00:00
nicolson%netscape.com 437d6f5877 update to work better with PBE. 2002-05-09 14:32:33 +00:00
nicolson%netscape.com a9385c1fcf get rid of PBEKeySpec, just use PBEKeyGenParams. 2002-05-09 14:29:07 +00:00
glen.beasley%sun.com dc0c0fe061 115778 return local port 2002-05-09 02:26:25 +00:00
kaie%netscape.com 638d00f1cf b=137530 Fix checkboxes in Edit Cipher dialog.
r=javi sr=hewitt idea-for-fix=varga
2002-05-08 19:06:11 +00:00
darin%netscape.com 1a993a2f38 fixing mac bustage (next time i'll remember to build PSM on my mac) 2002-05-08 00:07:23 +00:00
wtc%netscape.com 8ff49240a7 Bugzilla bug 136279: Return oldpath only if it is different from path.
Avoid an unnecessary call to SECMOD_HasRootCerts in nss_FindExternalRoot.
2002-05-07 23:35:22 +00:00
darin%netscape.com f43dfb75ba fixes bug 142870 "nsIFile should use UCS-2 instead of UTF-8"
r=dougt sr=alecf
2002-05-07 23:07:19 +00:00
nicolson%netscape.com e748daaffb change assert to _assert. 2002-05-07 20:45:09 +00:00
nicolson%netscape.com 2d7b8c3eb6 add some checks to prevent misunderstandings 2002-05-07 20:44:48 +00:00
relyea%netscape.com b815a638c1 Automatically create a NULL email profile for certs with email addresses which
are imported into the internal token.
2002-05-07 20:38:59 +00:00
nicolson%netscape.com c27c856e10 update version numbers. 2002-05-07 20:34:54 +00:00
nicolson%netscape.com 64a0c099f1 make it public so that it can be instantiated from CryptoManager. 2002-05-07 20:34:05 +00:00
nicolson%netscape.com 37a7505a46 implement some methods in support of java.security.Key. 2002-05-07 20:33:23 +00:00
nicolson%netscape.com 05f9c20222 fix broken error message. 2002-05-07 20:32:29 +00:00
ian.mcgreer%sun.com 687519e7b2 bug 141936, crash when NULL nickname entry is stored in temp store
r=jpierre
2002-05-07 20:31:59 +00:00
nicolson%netscape.com be3896ad3a Now SymmetricKey knows what KeyGenAlgorithm its associated with. 2002-05-07 20:31:52 +00:00
nicolson%netscape.com dac41b14e0 force load of SHA1 provider before installing it as a provider. 2002-05-07 20:31:14 +00:00
nicolson%netscape.com 91a46ed3ce add JCE providers. 2002-05-07 20:30:38 +00:00
nicolson%netscape.com d7d08bbf7d update version strings. 2002-05-07 20:24:03 +00:00
ian.mcgreer%sun.com 3bd2314a52 bug 142175, PK11_ListCerts regressions -- handle PKCS#11 incompatibilites with serial numbers, and fix trust collection. 2002-05-07 14:58:12 +00:00
kaie%netscape.com 33cd0c8f64 b=141871 Releasing callback in nsNSSSocketInfo must be proxied.
r=javi sr=alecf
2002-05-07 09:35:00 +00:00
kaie%netscape.com 308edeca0f b=112384 Unable to download some CRLs.
r=javi sr=darin
2002-05-07 09:29:23 +00:00
kaie%netscape.com ac67264a36 b=139329 Crashes trying to send signed mail.
r=javi sr=alecf
2002-05-07 09:25:19 +00:00
jpierre%netscape.com a4d73c1434 Fix for 142658 - fix certutil crash with NULL nickname 2002-05-06 23:10:40 +00:00
nicolson%netscape.com 1f951f8584 Renamed to JSS*. 2002-05-06 21:54:38 +00:00
nicolson%netscape.com 8e32f7cd47 Sun's PBE Key Spec is incomplete. 2002-05-06 18:58:39 +00:00
nicolson%netscape.com d6c440b810 add DESede. 2002-05-06 18:49:52 +00:00
wtc%netscape.com 2ff0c62fa7 Bugzilla bug 136279: fixed bugs where 'path' and 'oldpath' were passed
to string functions before they were null-terminated.  Added a comment
to explain what 'oldpath' is for.
2002-05-03 20:59:50 +00:00
nicolson%netscape.com b8b8caf60f move alg-specific provider classes into generic parent classes. 2002-05-03 00:27:03 +00:00
nicolson%netscape.com 6e304edf30 upgrade to NSS 3.4.1 RTM and NSPR 4.2. 2002-05-02 23:02:49 +00:00
nicolson%netscape.com c99cea2025 New provider files for JSS 3.2. 2002-05-02 20:25:15 +00:00
ian.mcgreer%sun.com 74f7a8a572 bug 141355, CERT_DecodeDERCertificate is not a safe function for some uses, must be replaced with CERT_NewTempCertificate. 2002-05-02 19:00:13 +00:00
relyea%netscape.com d74b0c5ba7 Fix the RSA key check to correctly accept keys with p < q. 2002-05-02 17:39:13 +00:00
glen.beasley%sun.com 9981c35466 bug 131308 build 64 bit JSS with JDK 1.4 2002-05-02 04:37:16 +00:00
glen.beasley%sun.com d161d0be5e bug 129394 change assert to _assert 2002-05-02 04:04:23 +00:00
kaie%netscape.com 64bea80e40 b=139948 SSL Tooltip not updated when going from one ssl site to another
r=javi sr=jag
2002-05-01 14:15:27 +00:00
jpierre%netscape.com 38daf04b71 Fix for 136279 - initialize NSS in a way compatible with < 3.4 versions of NSS 2002-05-01 01:04:41 +00:00
wtc%netscape.com 9a0c0ef79c Bugzilla bug 127062: use PR_MSG_PEEK instead of MSG_PEEK. 2002-05-01 00:21:50 +00:00
wtc%netscape.com ac26f4995d Bugzilla bug 131057: define PORT_Strdup as a function that calls PORT_Alloc.
Modified files:
	lib/ckfw/nsprstub.c lib/fortcrypt/swfort/pkcs11/stub.c
	lib/nss/nss.def lib/util/secport.c lib/util/secport.h
2002-05-01 00:06:39 +00:00
wtc%netscape.com 31efe5f323 Whitespace change. 2002-04-30 00:11:19 +00:00
relyea%netscape.com 458d4a99e2 Use NewTempCert and AddTempCert when importing because the cert may already exist
in the cache.
2002-04-29 23:54:07 +00:00
darin%netscape.com 1b1677bbe9 fixes bug 129279 "nsIFile unicode/utf8/ascii task"
r=dougt sr=alecf
2002-04-27 05:33:09 +00:00
wtc%netscape.com 18917e3c78 Added pkibase.c to the project. 2002-04-26 23:29:19 +00:00
wtc%netscape.com ce697caabc Needed a (char *) cast for slotInfo.manufacturerID because it is an array
of "unsigned" chars.  Mac's compiler complains about that.
2002-04-26 23:05:40 +00:00
jgmyers%netscape.com aa210f4255 Remove ssl-forcehandshake workaround r=kaie/rpotts/bienvenu sr=darin 2002-04-26 23:02:11 +00:00
wtc%netscape.com e1cdae04b3 Removed devobject.c from the project. That file was removed. 2002-04-26 22:52:07 +00:00
wtc%netscape.com 15576425ef Need to define SHLIB_SUFFIX for lib/softoken/dbinit.c. 2002-04-26 22:42:15 +00:00
relyea%netscape.com 2d8c1b98ba return error when incomplete shutdown has been detected. 2002-04-26 22:36:07 +00:00
ian.mcgreer%sun.com 7e66c201ad When doing cert traversals, create the certs in full as they are found. This avoids thrashing the softoken's object cache when the database has a large number of certs. 2002-04-26 14:34:05 +00:00
ian.mcgreer%sun.com 86371e2f7b fix broken HPUX builds 2002-04-26 12:59:06 +00:00
relyea%netscape.com 7577a5a2f4 Add code to update nickname and 'CKA_ID' from set attribute calls. This allows
us to add a nickname to a cert after we import it from pkcs #12.
2002-04-26 01:44:33 +00:00
relyea%netscape.com 18b58745a8 Write the nickname entry as well when adding a nickname to a bug. 2002-04-26 01:09:21 +00:00
relyea%netscape.com 063c8f3636 Detect Active Card presents and disable PROTECTED_PIN_PATH login when found. 2002-04-25 21:24:47 +00:00
wtc%netscape.com 470f233add Deleted code that was made obsolete by the previous revision. 2002-04-25 21:10:09 +00:00
relyea%netscape.com 0d8f8e8981 Don't let activeCards set the Protect_Auth bit because they weren't intending to
to begin with.
2002-04-25 20:57:06 +00:00
ian.mcgreer%sun.com f228b875f1 if a cert already exists, use C_SetAttributeValue to change its mutable attributes during import (instead of trying to recreate it) 2002-04-25 20:49:49 +00:00
ian.mcgreer%sun.com 980175a1c0 bug 138626, remove deleted cert from cache even if references still exist 2002-04-25 19:37:30 +00:00
ian.mcgreer%sun.com 05809d9acf reorganize token cache so that cache entries for imported objects are created from the token, not from the user-supplied template 2002-04-25 19:33:47 +00:00
relyea%netscape.com 36917f3b4c NSS 3.4 has branch, that makes the tip at least NSS 3.5 2002-04-25 18:51:45 +00:00
relyea%netscape.com 664c5ae965 Don't set the Token value before fetching CRL attributes. This code is fetching
attributes from a known CRL, not looking up new attributes (I'm pretty sure that
CVS apropos would show I checked in the previously wrong code).

bob
2002-04-25 18:33:45 +00:00
seawood%netscape.com ce9e9903a5 Add 'make install' target to build. It's "MRE-friendly". (See http://www.mozilla.org/projects/embedding/MRE.html for details.)
Changes:
* Added EXTRA_COMPONENTS variable to build.  Use it to automagically install files into the components dir.
* Added SYSINSTALL variable.  Use it install files onto the system.
* Move mozilla-config generation from configure to makefiles
* mozilla-config will now generate paths based upon the MRE-based directory layout.
* Generate mozilla script from template

The installation heirarchy currently looks like:
$prefix -> /bin/mozilla
           /bin/mozilla-config
           /include/mozilla-ver/*
           /lib/mozilla-ver  (mozappdir)
                            /components
                            /res
                            /defaults
                            /chrome

There is preliminary build support for MRE dirs as well though the component manager hasn't had MRE support added yet.

$prefix -> /lib/mre/mre-ver  (mredir)
                            /components
2002-04-25 02:52:44 +00:00
sonja.mirtitsch%sun.com 323d14311b trying a version that can test tip as default for tinderbox and 341
as default for nightly QA
2002-04-25 01:04:10 +00:00
relyea%netscape.com 56733313ca Don't crash if our cache entry is not found. 2002-04-25 00:45:42 +00:00
relyea%netscape.com 28cdf792e4 Turn off caching for non-hardware tokens for now until we fix some of our
tokens which can be updated out-of-band to use the proper 'removable token'
semantics.
2002-04-25 00:25:58 +00:00
relyea%netscape.com 5c82cde910 Don't crash if we don't find the profile (and thus don't have a slot to free). 2002-04-24 22:23:37 +00:00
ian.mcgreer%sun.com f8317d7af9 This is a real corner case. If a search is done by issuer/serial, and the returned cert was in the cache, need to see if the cert's slot was removed. If so, destroy the cert and retry the search on the present tokens. 2002-04-24 19:39:41 +00:00
relyea%netscape.com cd38faba86 Don't crash when getting a single user cert, but old certs are in the database
with the same subject, but no keys.
2002-04-24 18:29:04 +00:00
relyea%netscape.com 9b432ab983 Look up both DER encoded serial numbers (PKCS #11 spec), and decode serial
numbers (Old NSS) when looking up certs by issuer and SN.
2002-04-24 18:27:17 +00:00
relyea%netscape.com bb017f0ffd Authenticate to tokens before looking up user certs. 2002-04-24 18:25:48 +00:00
kaie%netscape.com 0aa2271015 b=129067 Deleted certs still appear in Cert Manager, uses slow workaround, which should get removed once bug 138626 is fixed.
r=javi sr=alecf
2002-04-24 00:51:33 +00:00
kaie%netscape.com e7a9499b78 b=134992 Fix crash when displaying some S/Mime messages.
r=javi sr=alecf
2002-04-24 00:40:49 +00:00
kaie%netscape.com e8c4b88efb b=139349 Need to use dont_AddRef with GetCertAtIndex
r=bryner sr=alecf
2002-04-24 00:35:05 +00:00
kaie%netscape.com d033f1dbcb b=139325 Leaking CERTCertificate references from nsNSSCertificate::GetChain
r=bryner/javi sr=alecf
2002-04-24 00:15:12 +00:00
thayes%netscape.com 9855f801d2 Reserved Netscape extension (NETSCAPE 1 18) 2002-04-23 23:48:20 +00:00
ian.mcgreer%sun.com 9d9366f6db fix shutdown leaks 2002-04-23 17:22:13 +00:00
kaie%netscape.com 658962867b b=125607 Temporary workaround for better displaying signed S/Mime messages w/ attachments from IMAP servers.
r=ducarroz sr=bienvenu
2002-04-22 23:02:29 +00:00
ian.mcgreer%sun.com 7fe4b2d767 avoid use of iterator 2002-04-22 20:44:07 +00:00
ian.mcgreer%sun.com ff149d2fc9 NewTemp has to be matched with AddTempCertToPerm 2002-04-22 20:27:52 +00:00
relyea%netscape.com 9c0eda08dc Token and cert processing fixes:
1) use NewTempCert rather than DERDecode cert in all import cert cases.
When DERDecode cert is used, we may wind up with a cert that gets cleared
when we try to import it because it already in the cache. NewTempCert will
return the version that is in the cache.
   2) If we are returning the CAList, only return certs that are CA's
(not usercerts).
   3) Authenticate to all the tokens if necessary before we try to list
certs. (Stan code should eventually get automatic authentication calls in
the code itself).
   4) When looking up user certs, don't return those certs with the same
subject, but do not have any key material associated with them (that is
don't crash if we have old certs in our database without nicknames, but
match user certs on our smart cards).
   5) Save the nickname associated with our subject list in the temp
cache so we can correctly remove the entry even if the cert's nickname
changes (because of smart card insertions and removals, or because of
creation and deletions of our user cert).
2002-04-22 19:09:01 +00:00
ian.mcgreer%sun.com 6f242bce0e file is no longer part of build (functionality in devtoken.c) 2002-04-22 18:28:30 +00:00
ian.mcgreer%sun.com 8f09896195 overwrite old entry during import, so that changing trust works correctly 2002-04-22 15:21:06 +00:00
ian.mcgreer%sun.com a5c756c373 fix bugs in cert import with smart card cache 2002-04-22 14:14:44 +00:00
ian.mcgreer%sun.com 5f29c565cc re-sync the trust domain cache with token insertion/removal 2002-04-19 23:06:44 +00:00
nicolson%netscape.com 201d8a50bc JSS 3.2 features check-in. 2002-04-19 22:42:05 +00:00
ian.mcgreer%sun.com 20d3a4206d * make sure the token cache returns failure in overflow case
* change internal module trust order again, builtins uses 100, and internal module must come first
2002-04-19 19:30:12 +00:00
ian.mcgreer%sun.com 66a82a7cc5 try again, the default is 50 so the internal module must be higher 2002-04-19 19:19:33 +00:00
ian.mcgreer%sun.com df1f30dd48 make sure the internal module defaults to trust order > 50 2002-04-19 19:01:45 +00:00
ian.mcgreer%sun.com cdbdd213d0 improve synchronization between the token state and token cache operations 2002-04-19 17:32:22 +00:00
ian.mcgreer%sun.com 7f2b70a208 Only fall back to email search if the "nickname" has an @ character. This is because email searches will not go through the cache, so should be avoided if possible. 2002-04-19 16:22:31 +00:00
ian.mcgreer%sun.com a8c12b8551 Fixes for smart card cache. Don't do cache searches by email address, since GetAttributeValue does not set that field. Handle removal correctly for item at tail of list. Don't search token after a successful cache search that returned zero hits. 2002-04-19 16:14:13 +00:00
kaie%netscape.com 2e2135248f b=137154 PSM needs to call SSL_ClearSessionCache before switching profiles
r=javi sr=alecf
2002-04-18 22:25:26 +00:00
jpierre%netscape.com dd440a052a Fix for 138084 - free slot list if NSC_Initialize fails 2002-04-18 20:54:22 +00:00
ian.mcgreer%sun.com 72fe6cfda5 catch non-present tokens before searching them 2002-04-18 19:37:12 +00:00
ian.mcgreer%sun.com a314e4673a two fixes for certs with multiple instances 2002-04-18 19:26:17 +00:00
relyea%netscape.com f773069cdb Don't crash if we try to get the name of a non-existant token. 2002-04-18 17:54:30 +00:00
relyea%netscape.com 9a298cf94a Remember the nickname in the cache entry so that we can always free it when the cert goes away, even if the nickname has changes.
Also, initialize subjectList to NULL at the beginning, so we don't try to add nickname when we aren't supposed to.
2002-04-18 17:52:55 +00:00
relyea%netscape.com 1a084027eb We need to make sure we always return a trust object, even if that object says
there is no trust.
2002-04-18 17:50:40 +00:00
ian.mcgreer%sun.com 26d08192dd landing new smart card cache, bug 135429 2002-04-18 17:30:05 +00:00
nicolson%netscape.com ed07493981 update NSS version. 2002-04-18 14:33:16 +00:00
wtc%netscape.com 6330398618 Bugzilla bug 126087: removed symKey->refLock because we are using atomic
routines on symKey->refCount now.  Declare symKey->refCount as PRInt32 to
match the prototype of PR_AtomicIncrement/Decrement.
Modified files: pk11skey.c secmodti.h
2002-04-17 01:03:23 +00:00
jgmyers%netscape.com 6fd36b42d4 Remove unneeded ForceHandshake code which broke IMAP/SSL over SOCKS: bug 133434 r=kaie@netscape.com sr=brendan@mozilla.org a=asa 2002-04-16 22:49:33 +00:00
wtc%netscape.com babb8b31e8 Bugzilla bug 133584: PK11_SaveSMimeProfile also needs to free free_slot if
it returns on error.
2002-04-16 22:40:07 +00:00
dbragg%netscape.com 060ac1f254 Regular milestone update of localeVersion values to 1.0.0. Bug 126785. r=tao, sr=alecf, a=asa 2002-04-16 22:19:10 +00:00
sonja.mirtitsch%sun.com f00e0d4e46 changes for jdk 1.4; and mccrel move 2002-04-16 20:57:42 +00:00
relyea%netscape.com 39dca2aade Don't free the temp secmod.db name until we are through using it. 2002-04-16 00:24:34 +00:00
ian.mcgreer%sun.com acc4169fa7 bug 63815, AIX compiler fails to build ckhelper.c in debug mode 2002-04-15 21:04:00 +00:00
ian.mcgreer%sun.com 8cf801e779 fix bbroken solaris x86 build 2002-04-15 16:20:39 +00:00
ian.mcgreer%sun.com 46d73e79e3 bug 135521, change cert lookups on tokens to be actual finds instead of traversals 2002-04-15 15:22:11 +00:00
ian.mcgreer%sun.com fc73a7647f fix a cert reference leak in strsclnt 2002-04-15 14:24:15 +00:00
kaie%netscape.com d5d6150e42 b=136908 Make CRL manager UI work again.
r=kaie sr=ben
2002-04-15 12:18:13 +00:00
kirk.erickson%sun.com c7ef46e0ff Resolves 126087. Backed out of slot->keyCount atomic instructions. 2002-04-14 14:07:12 +00:00
ian.mcgreer%sun.com ef8839f6d7 fix error statement 2002-04-12 19:17:48 +00:00
relyea%netscape.com 14e7ed26f6 Bug 133584: Fix reference leaks which prevent shutdown in NSS and in the tests.
Debug builds can verify correct operation by setting NSS_STRICT_SHUTDOWN, which
will cause an assert if shutdown is called but not all the modules are freed (which
means a slot, key, or cert reference has been leaked).
2002-04-12 19:05:21 +00:00
ian.mcgreer%sun.com d75db55520 bug 136806, don't authenticate to friendly slots when adding certs 2002-04-12 18:07:49 +00:00
ian.mcgreer%sun.com 5c2561ce2a testing theory that unmatched atomic increment/decrement is causing occasional tinderbox failures. See bug 126087. 2002-04-12 15:51:11 +00:00
kaie%netscape.com 5e578afaa3 b=102633 Changed cipher prefs dialog.
Allow the user to enable additional ciphers.
Disable two cipher suites that are no longer in use (said the NSS team).
r=javi/nelsonb/cotter sr=alecf
2002-04-12 04:44:29 +00:00
kaie%netscape.com be88a33114 b=119418 Fix handling of opaque signed S/Mime messages.
Also fixes some other S/Mime issues, as described in the bug.
r=ddrinan/ducarroz/darin sr=alecf
2002-04-12 04:26:40 +00:00
relyea%netscape.com 20ddb4063a Update the version field in the handle when doing the automatic update. 2002-04-12 03:43:34 +00:00
ian.mcgreer%sun.com 0ce9d71907 additional fix for the patch from bug 126087. Must not set symKey->slot to NULL after leaving the freelist lock, or somebody else might pick up the symKey from the freelist, have their slot NULL'ed, and whamo.. 2002-04-11 23:05:38 +00:00
ian.mcgreer%sun.com 043bcf2b16 key should be freed when refcount == 0 after decrement. See bug 126087. 2002-04-11 19:15:31 +00:00
kaie%netscape.com da25d7f19e b=102633 Allow the user to enable additional ciphers, dynamically obtaining a list of ciphers from NSS.
Disable support for two ciphers that are no longer in use.
r=javi/nelsonb/cotter sr=alecf
2002-04-11 05:07:09 +00:00
kaie%netscape.com 5e0f8e85dd b=119481 Fix various unitialized variables.
r=kaie/javi sr=kin
2002-04-11 05:01:29 +00:00
kaie%netscape.com 015c39971d b=118319 Fix memory leak.
r=javi/wtc sr=blizzard
2002-04-11 04:35:08 +00:00
kaie%netscape.com 78f313dd86 b=119481 Fix various unitialized variables.
r=kaie/javi sr=kin
2002-04-11 04:31:53 +00:00
kaie%netscape.com 5e25fd0a47 b=129740 Fix client auth with profiles migrated from Communicator.
r=javi sr=alecf
2002-04-11 04:24:20 +00:00
kaie%netscape.com b0c3ab7f38 b=132543 Fix crash when downloading CRL
r=javi sr=alecf
2002-04-11 04:21:18 +00:00
relyea%netscape.com 189c5f5319 bug 128586 (and other) importing non-NSS pkcs#12 files.
We need to decode the privatekeyinfo attributes if they exist.
2002-04-11 00:59:43 +00:00
nelsonb%netscape.com 8f5d6f3546 Add enum names for use in forward declarations. 2002-04-10 23:27:50 +00:00
wtc%netscape.com 5c3dd6fa35 Bugzilla bug 136625: prevent pk11_cert_collect from storing NULL in the
certData.certs array so that pk11_searchCertsAndTrust won't deference a
NULL pointer.  r=relyea.
2002-04-10 17:56:52 +00:00
wtc%netscape.com 91903c9373 Bugzilla bug 119418: export NSS_CMSMessage_IsEncrypted. 2002-04-10 17:54:02 +00:00
ian.mcgreer%sun.com 9af2d39dfa bug 135871, CERT_ImportCerts not storing temp certs
r=relyea
2002-04-09 23:46:57 +00:00
nicolson%netscape.com d1444c5dd2 login to token before importing private key. 2002-04-09 19:23:49 +00:00
relyea%netscape.com d36c02f183 Handle yet another PKCS #11 device which has non-standard behavior, but is well established in the market place. 2002-04-09 17:58:00 +00:00
relyea%netscape.com e7891dd01b Add the ability to test the multi-access database feature with existing test cases. 2002-04-08 23:39:44 +00:00
relyea%netscape.com a7e963e5f6 Add database update capabilities to NSS softoken for multi-access database. 2002-04-08 23:37:49 +00:00
nicolson%netscape.com fa4720c8f3 merge JDK 1.4 changes to the trunk. 2002-04-08 21:46:56 +00:00
wtc%netscape.com f40e1173cd Restored the 'static' qualifier that was accidentally deleted in the
previous revision.
2002-04-05 19:38:03 +00:00
wtc%netscape.com bfc09d5778 Bug 135728: include pki3hack.h for the declaration of
STAN_AddModuleToDefaultTrustDomain, etc. r=mcgreer.
2002-04-05 19:30:38 +00:00
wtc%netscape.com cfbef65b96 Bug 135728: should return SECFailure because the function's return type
is SECStatus.  r=mcgreer.
2002-04-05 19:25:48 +00:00
ian.mcgreer%sun.com cc03c22316 remove unused Stan build files 2002-04-05 19:08:32 +00:00
ian.mcgreer%sun.com 5ffd5b4aa2 fix broken 64-bit platforms 2002-04-05 15:19:37 +00:00
jpierre%netscape.com 54221f5768 Fix world record warning message 2002-04-05 10:23:58 +00:00
relyea%netscape.com 154669fa43 Tempararily back out random change so that we don't actually read *every* file in system32. 2002-04-05 09:18:57 +00:00
relyea%netscape.com 904e0c4fd1 Multi-access database changes. 2002-04-05 09:17:51 +00:00
nelsonb%netscape.com a3de078352 WinCE mods (2nd try). Use NSPR for file system I/O on WinCE.
Change algorithm for selecting files to read for seeding the PRNG.
Old algorithm sometimes read very few files if opens failed.
2002-04-05 03:49:35 +00:00
nelsonb%netscape.com 362f2ab1b1 Don't build nss/cmd or nss/lib/fortcrypt on WinCE. 2002-04-05 03:34:57 +00:00
nelsonb%netscape.com 1bbe17eef6 On WinCE, DBM's dbopen uses NSPR file open flags rather than libc's
file open flags (which are not defined on WinCE).
2002-04-05 03:33:42 +00:00
nelsonb%netscape.com 9df2603c4f Stop linking in wsock32.lib and winmm.lib on Windows. We haven't needed
these since we started linking with NSPR's DLLs, and they don't exist
on WinCE.
2002-04-05 03:30:37 +00:00
relyea%netscape.com 7c5e858ba4 Fix linux build errors 2002-04-05 03:29:50 +00:00
relyea%netscape.com b155312245 return the correct error codes to make all.sh happy. 2002-04-05 03:16:41 +00:00
sonja.mirtitsch%sun.com efee77e868 fixed a bug that had resulted in tinderbox results not always being uploaded 2002-04-05 01:41:34 +00:00
relyea%netscape.com 2178e16562 Add ';' so Solaris and Linux will build 2002-04-05 01:09:39 +00:00
nelsonb%netscape.com 3d1d77ffa5 New platform files for WinCE. 2002-04-05 00:52:32 +00:00
relyea%netscape.com 1a3e031141 Link certutil dynamically. 2002-04-05 00:12:21 +00:00
relyea%netscape.com 9cde2ab4fd Add symbols so the certutil can be linked dynmically 2002-04-05 00:11:25 +00:00
relyea%netscape.com 6e6defc79f Don't try verifying the db's in a multi-access database case 2002-04-05 00:10:39 +00:00
kaie%netscape.com 444ce3a72e b=125041 CA not imported when getting personal cert
r=ssaux sr=alecf a=asa
2002-04-04 22:30:40 +00:00
ian.mcgreer%sun.com 734d5fa661 New file for common PKI stuff. Not yet part of build. 2002-04-04 21:15:27 +00:00
ian.mcgreer%sun.com 5dc26469cd Land Stan changes to tip. Mostly header file / structure / API cleanup. Note
that these changes *do not* affect the current build, except for some minor edits.
2002-04-04 20:00:28 +00:00
kirk.erickson%sun.com d62094b5b6 Addresses bug 126087 (hot locks identified by Ning at Sun).
Using atomic instructions to reduce contention on slot->freeListLock
and symKey->refLock.
2002-04-04 18:30:51 +00:00
relyea%netscape.com 6e9cb5194b Make sure we aren't confusing secret keys with private and public keys 2002-04-04 18:08:30 +00:00
relyea%netscape.com dc8555d48c Don't include the public key on a list if it doesn't exist. 2002-04-04 18:07:19 +00:00
ian.mcgreer%sun.com f15a36dade define nss_ZREALLOCARRAY, fix bugs in nss_ZRealloc 2002-04-04 16:14:26 +00:00
nelsonb%netscape.com fa971ba21c Back out win_rand changes. The changes used NSPR for file I/O instead
of using libc.  But some of our DLLs don't link against NSPR :-(.
2002-04-04 02:09:01 +00:00
nelsonb%netscape.com 8f49663549 Fix build error on NT. 2002-04-04 01:41:19 +00:00
nelsonb%netscape.com 959b60df95 Add missing #include to fix errors on AIX. 2002-04-04 01:35:13 +00:00
nelsonb%netscape.com 031d4f07ec Remove duplicative include. arch.mk is included by config.mk. 2002-04-04 00:22:47 +00:00
nelsonb%netscape.com 5f0e4c6d86 Get freebl and mpi to build for WinCE. Use NSPR for I/O in sysrand. 2002-04-04 00:19:43 +00:00
nelsonb%netscape.com bbe8155675 Fix (er, improve) Makefile dependencies for sysrand.{o,obj} 2002-04-04 00:17:17 +00:00
nelsonb%netscape.com 6151df3eff Make libSSL build for WinCE. 2002-04-04 00:14:12 +00:00
nelsonb%netscape.com b4933f383f Make libutil build for WinCE. 2002-04-04 00:11:48 +00:00
nelsonb%netscape.com 0dafd862e9 Warning reduction. substitute (uchar) cast for ANDing with 0xff. 2002-04-04 00:10:34 +00:00
nelsonb%netscape.com 0731adc453 Since WinCE has no command line shell, don't build cmd for it. 2002-04-04 00:03:03 +00:00
nelsonb%netscape.com 8cff0b44bc Add cross-platform (WinCE) support. 2002-04-04 00:00:27 +00:00
nelsonb%netscape.com a23eebd97c Add WinCE suport. 2002-04-03 23:27:16 +00:00
ian.mcgreer%sun.com f70720d0e2 merge branch fix for bug 115954 to tip 2002-04-03 19:22:15 +00:00
javi%netscape.com f92dbfbefa Don't include the static library util.o in all of the NSS shared libraries to prevent each shared library from getting its own copy of some of the NSS global symbols. 2002-04-03 18:29:40 +00:00
wtc%netscape.com b0bd4b2383 Bugzilla bug 134095: removed error-handling code that's not quite correct. 2002-03-29 18:53:15 +00:00
jpierre%netscape.com eebcbb8f9d Fix for 134095 - allow PKCS#11 framework to free attributes for non-const token objects 2002-03-29 07:34:22 +00:00
hewitt%netscape.com fa0edb8cc4 110156 - renaming outliner to tree - weird cvs events causing us to lose the log for this file, sadly. if you want the old log, see Attic/nsICertOutliner.idl 2002-03-29 03:36:00 +00:00
hewitt%netscape.com 07d96867f1 bugs 110156, 110155
Removing support for <outliner> tags
Removing <tree> layout code and moving <tree> tags to outliner layout
Convert all usage of <outliner> to tree tags
Convert all usage of <tree> tags to new <tree> syntax or <listbox>
r=cmanske,varga sr=hyatt,sspitzer a=asa

Also includes fixes by Jan Varga (varga@utcruk.sk) for bugs 132020, 133451, 131393, 115894, and 129327
2002-03-29 02:46:01 +00:00
sonja.mirtitsch%sun.com 08b9d0451b moving security products from mccrel to mccrel3 2002-03-28 00:42:36 +00:00
kaie%netscape.com 7394a0617f b=130949 Fix lock icon issues
r=ddrinan sr=rpotts a=valeski
2002-03-27 07:56:02 +00:00
kaie%netscape.com 53d54a1fd2 b=129100 OOPS fixing wrong case in my prior checkin 2002-03-27 07:54:47 +00:00
wtc%netscape.com c9af370f5f Bugzilla bug 133668: use PR_MIN instead of MIN, which is no longer defined
by the Mozilla header file that we include.
2002-03-27 07:29:57 +00:00
jpierre%netscape.com fa9769e4df Call NSS_Shudown in modutil 2002-03-27 05:02:58 +00:00
kaie%netscape.com 313246fba8 b=107817 Make sure sent encrypted messages will be decryptable by sender.
r=ddrinan
sr=alecf
a=roc+moz
2002-03-27 03:27:43 +00:00
kaie%netscape.com 57ee5c6632 b=129774 Increment PSM version to 2.3
r=ssaux
sr=alecf
a=valeski
2002-03-27 02:43:43 +00:00
kaie%netscape.com e7b29e3a35 b=122967 Disable "edit email trust button" in certificate manager, until functionality gets implemented correctly.
r=javi
sr=alecf
a=roc+moz
2002-03-27 02:41:58 +00:00
kaie%netscape.com 91e9529dc3 b=129100 Finalize S/Mime UI implementation
r=ducarroz/javi
sr=mscott
a=asa
2002-03-27 02:29:34 +00:00
ian.mcgreer%sun.com b46659fdf7 bug 123296, infinite loop in signtool when incorrect password given at command line 2002-03-26 22:23:28 +00:00
wtc%netscape.com fbe712bc1d Bugzilla bug 133545: fixed spelling errors "signning" in certutil memu
options.  Thanks to Eric Murphy <ericmurphy@jabber.org> for the bug report.
2002-03-26 22:22:07 +00:00
nicolson%netscape.com 95157c5425 Fix 130522: ASN.1 decoder asserts with corrupt input.
r=wtc
2002-03-26 01:13:23 +00:00
wtc%netscape.com 29ce9176f6 Bugzilla bug 132461: changes suggested by Bob Relyea after his code review:
1. Add SECMOD_LoadModule back to nss.def.
2. Back out the SECMOD_AddModule/AddModuleEx changes.
I also updated the comments and made some changes to emulate the
indentation and comment styles of the original code.
Modifies files: nss/nss.def pk11wrap/pk11pars.c pk11wrap/pk11util.c
2002-03-26 00:43:04 +00:00
dbaron%fas.harvard.edu 2a4007a526 Convert users of nsAReadable[C]String and nsAWritable[C]String typedefs to [const] nsA[C]String. b=131899 r=scc sr=jag a=asa 2002-03-23 21:03:32 +00:00
wtc%netscape.com 80e0fd30ff Bugzilla bug 132483: fixed the bug that ckfw destroys an object before its
handle.  r=relyea.
2002-03-23 16:10:07 +00:00
wtc%netscape.com 0cef07355e Bugzilla bug 131427: added softkver.c to softoken Mac build. Set
MWFTP_Post_password to null value to reduce the noise in diffs.
2002-03-23 15:43:34 +00:00
wtc%netscape.com 8d764c0342 Bugzilla bug 128955: support Netscape's uname, MKS's uname, and Cygwin's
uname.  Since CPU_ARCH is already defined in arch.mk, removed the redundant
definition in WIN*.mk.  Removed the unnecessary internal variable
PROCESSOR.  r=cls.
Modified Files: WIN954.0.mk WINNT3.51.mk WINNT4.0.mk WINNT5.0.mk
                WINNT5.1.mk arch.mk
2002-03-23 15:06:02 +00:00
nelsonb%netscape.com 9984f9519a If an error occurs when attempting to write previously buffered data on
a socket, do not override the error code with PR_WOULD_BLOCK_ERROR.
bug 132899.
2002-03-23 01:06:08 +00:00
ian.mcgreer%sun.com a335422e9d bug 132889, sense of boolean 'blocking' is reversed within the HANDLE_ERR macro of ssl_WriteV 2002-03-22 22:48:02 +00:00
nelsonb%netscape.com 7756b45dc7 Add new bits to struct returned by SSL_GetCipherSuiteInfo. Bug 132438. 2002-03-22 21:43:43 +00:00
jpierre%netscape.com af2f840d08 Fix error in SECMOD_UnloadUserModule reportd by Ian for bug 132461 - use Stan remove call rather than add 2002-03-21 18:44:23 +00:00
wtc%netscape.com b84896bc9b Bug 132461: restored the declaration of SECMOD_LoadModule. 2002-03-21 14:48:58 +00:00
jpierre%netscape.com 0b1cba67e5 Fix for 132461 - add better functions to load and remove modules dynamically r=relyea 2002-03-21 03:35:28 +00:00
jpierre%netscape.com 007aa8a7a1 Fix for 132461 - add better functions to load and remove modules dynamically 2002-03-21 03:34:47 +00:00
wtc%netscape.com 007cc6d579 Bugzilla bug 131350: export SEC_PKCS12DecoderGetCerts from smime.def.
r=relyea.
2002-03-21 03:05:49 +00:00
wtc%netscape.com 96d1840618 Bugzilla bug 131427: add "for Clients" to the version id strings in the
softoken shared library if MOZ_CLIENT is defined.  r=relyea.
2002-03-20 21:17:30 +00:00
jaggernaut%netscape.com d8cf5474f8 Bug 101723: security icon only works for the first tab
Bug 117203: Insecure POST warning only comes up for first tab
Bug 120043: Page Info shows information about a page in the first tab
r=sgehani, r=kaie/ddrinan (for security stuff), sr=sspitzer (for mail/news stuff), sr=hyatt, a=asa. Work based on patch by Smaug <smaug@jippii.fi>.
2002-03-20 09:57:35 +00:00
wtc%netscape.com 190e732f58 Bugzilla bug 131430: changed "softoken" to "softokn" to match the file
name.  r=relyea.
2002-03-20 04:43:41 +00:00