relyea%netscape.com
318e0b19d3
Add function to get the PBEIV.
2002-05-16 22:06:19 +00:00
relyea%netscape.com
96fcbeedc8
Add support to turn on or off optimizations based on parameters to NSS_Init functions
2002-05-16 22:05:17 +00:00
relyea%netscape.com
db4d3c197d
Make a single softoken which works for both servers and clients depending on configuration.
...
Add the _PAD functions to the internal database token.
2002-05-16 22:04:12 +00:00
rpotts%netscape.com
4d4116d281
bug #46856 (r=valeski, sr=darin). API Changes to nsIWebProgress/nsIWebProgressListener)
2002-05-16 20:57:37 +00:00
relyea%netscape.com
d41f575216
Argh. I thought I had compiled this! fixe compile errors.
2002-05-16 20:48:27 +00:00
relyea%netscape.com
7252fee64d
Add Transactions (still need to add transactions on database upgrade).
...
Make trust objects their own objects to reduce a couple of unnecessary cert decodes.
2002-05-16 20:39:04 +00:00
wtc%netscape.com
4d369b4b08
Bug 131171: added HP-UX 11.20 support.
2002-05-16 17:35:41 +00:00
wtc%netscape.com
a2dc0c286f
Bugzilla bug 138532: use pipes instead of semaphores for NetBSD, which does
...
not have semaphore.h. Thanks to Chris Seawood <seawood@netscape.com> for
the patch. Modified files: sslmutex.h sslmutex.c
2002-05-16 13:36:02 +00:00
wtc%netscape.com
48efa10fb5
Bugzilla bug 133753: added support for AIX 5.1 to security/coreconf.
2002-05-16 13:12:33 +00:00
wtc%netscape.com
f0ab843625
Fixed build breakage on BeOS -- made the ifdef match the one in sslsnce.c.
2002-05-16 05:32:30 +00:00
kaie%netscape.com
d829db174a
b=129067 Deleted certs still appear in Cert Manager.
...
r=javi sr=alecf
2002-05-16 04:03:19 +00:00
kaie%netscape.com
b29048e4fe
b=129067 Backing out unreliable patch.
...
See bugzilla for details.
Better patch will be checked in a minute.
2002-05-16 03:59:36 +00:00
kaie%netscape.com
6803ea2ace
b=136948 Give better feedback when no valid certs for S/Mime are available
...
r=javi sr=mscott
2002-05-16 03:51:37 +00:00
kaie%netscape.com
9a400e7c1c
b=144056 security state not reset after loading about:blank pages
...
r=javi sr=rpotts
2002-05-16 03:39:59 +00:00
jpierre%netscape.com
3415905c45
Fix for 141256 - correct HTTP parsing for OCSP in NSS
2002-05-15 23:59:40 +00:00
dougt%netscape.com
e96df2ad1b
Fixes mozilla/strings requiring unfrozen nsCRT class. patch by scc, r=dougt, sr=jag, b=136756
2002-05-15 18:55:21 +00:00
relyea%netscape.com
d987bdfd4b
bug 133397. Move AddPermModule() inside the previously empty if statement where it belongs.
2002-05-14 23:16:16 +00:00
kaie%netscape.com
58c2e7a36c
b=137874 Unable to import CA cert before SSL keep alive connection is terminated
...
r=javi sr=alecf
2002-05-14 20:46:03 +00:00
kaie%netscape.com
1942971d28
Backing out code from bug 102633 and the unsuccessful fix attempt from bug 137530, because the UI does not work as expected.
...
r=javi / sr=alecf for backing out
2002-05-14 20:42:54 +00:00
nicolson%netscape.com
f039df6a9e
Support DSAPrivateKey.
2002-05-14 02:21:25 +00:00
wtc%netscape.com
ab66e37271
Bugzilla bug 135069: SEC_PKCS12DestroyExportContext should free the slot
...
reference allocated in SEC_PKCS12CreateExportContext. r=relyea,mcgreer.
2002-05-13 17:22:46 +00:00
wtc%netscape.com
012d3d240d
Bugzilla bug 135824: fixed slot reference leaks in signtool and removed
...
a faulty attempt to set user trust. r=relyea,mcgreer.
Modified files: certgen.c util.c
2002-05-13 17:08:20 +00:00
wtc%netscape.com
f6bfa70691
Bugzilla bug 135052: more cleanup in SEC_PKCS12DecoderStart. r=relyea.
2002-05-10 23:10:06 +00:00
jpierre%netscape.com
9403262b78
Fix for bug 142868 - CA certificates are imported with NULL nicknames .
2002-05-10 20:21:38 +00:00
relyea%netscape.com
a02dfd314a
Add function to determine if it's safe to delete the internal module.
2002-05-10 18:36:18 +00:00
relyea%netscape.com
8a86a90862
Detect when we have a previously deleted internal module which has not yet been freed, and don't try to switch to it.
2002-05-10 18:13:44 +00:00
relyea%netscape.com
b4c8847fee
Add new error code for trying to all previously deleted modules which have not yet been freed.
2002-05-10 18:12:39 +00:00
relyea%netscape.com
53561d397f
Allow both FIPS and non-FIPS tokens to be initialized and active at the same time.
2002-05-10 18:11:37 +00:00
relyea%netscape.com
fb8c9f6813
When we force, we should preserve the NULL nickname semantics.
2002-05-10 18:10:26 +00:00
nicolson%netscape.com
7999d93103
comment out JDK 1.4 test so we can build with earlier versions
2002-05-10 00:13:19 +00:00
nicolson%netscape.com
331e8205e9
Don't run javac if there are no source files to compille
2002-05-10 00:12:44 +00:00
wtc%netscape.com
c535d97c40
Bugzilla bug 135821: fixed the internal slot reference leak in
...
PK11_WrapPrivKey. r=relyea.
2002-05-09 23:34:24 +00:00
wtc%netscape.com
aa3a2a0110
Bugzilla bug 135809: fixed the slot reference leaks in PBE_CreateContext
...
and SEC_PKCS5GetIV. r=relyea.
2002-05-09 23:21:16 +00:00
wtc%netscape.com
92ca89f0c7
Bugzilla bug 135818: fixed internal slot reference leaks in
...
PK11_VerifySlotMechanisms and PK11_InitToken. r=relyea.
2002-05-09 23:18:15 +00:00
wtc%netscape.com
93b9d9fe97
Bugzilla bug 135826: fixed the slot reference leaks.
2002-05-09 23:01:21 +00:00
ian.mcgreer%sun.com
9f99132e86
bug 135808, STAN_GetDefaultCryptoToken appears to leak a slot reference, but there are no callers of it. Removing function.
...
r=wtc
2002-05-09 22:42:23 +00:00
wtc%netscape.com
09578490e1
Bugzilla bug 135334: free the internal key slot reference when we are done.
2002-05-09 21:14:36 +00:00
wtc%netscape.com
effd5d308f
Bugzilla bug 135058: free nickCopy on error returns in
...
PK11_FindCertsFromNickname. r=mcgreer.
2002-05-09 20:01:18 +00:00
nicolson%netscape.com
12f3461e9e
add SocketBase.getLocalAddressNative.
2002-05-09 17:11:18 +00:00
nicolson%netscape.com
ab7641b564
Fix 143256: SSLServerSocket.getInetAddress returns the wrong address.
...
Implement toString() for both socket types.
2002-05-09 17:10:06 +00:00
nicolson%netscape.com
2dfdffa408
add more PBE keygen algorithms.
2002-05-09 14:32:54 +00:00
nicolson%netscape.com
437d6f5877
update to work better with PBE.
2002-05-09 14:32:33 +00:00
nicolson%netscape.com
a9385c1fcf
get rid of PBEKeySpec, just use PBEKeyGenParams.
2002-05-09 14:29:07 +00:00
glen.beasley%sun.com
dc0c0fe061
115778 return local port
2002-05-09 02:26:25 +00:00
kaie%netscape.com
638d00f1cf
b=137530 Fix checkboxes in Edit Cipher dialog.
...
r=javi sr=hewitt idea-for-fix=varga
2002-05-08 19:06:11 +00:00
darin%netscape.com
1a993a2f38
fixing mac bustage (next time i'll remember to build PSM on my mac)
2002-05-08 00:07:23 +00:00
wtc%netscape.com
8ff49240a7
Bugzilla bug 136279: Return oldpath only if it is different from path.
...
Avoid an unnecessary call to SECMOD_HasRootCerts in nss_FindExternalRoot.
2002-05-07 23:35:22 +00:00
darin%netscape.com
f43dfb75ba
fixes bug 142870 "nsIFile should use UCS-2 instead of UTF-8"
...
r=dougt sr=alecf
2002-05-07 23:07:19 +00:00
nicolson%netscape.com
e748daaffb
change assert to _assert.
2002-05-07 20:45:09 +00:00
nicolson%netscape.com
2d7b8c3eb6
add some checks to prevent misunderstandings
2002-05-07 20:44:48 +00:00
relyea%netscape.com
b815a638c1
Automatically create a NULL email profile for certs with email addresses which
...
are imported into the internal token.
2002-05-07 20:38:59 +00:00
nicolson%netscape.com
c27c856e10
update version numbers.
2002-05-07 20:34:54 +00:00
nicolson%netscape.com
64a0c099f1
make it public so that it can be instantiated from CryptoManager.
2002-05-07 20:34:05 +00:00
nicolson%netscape.com
37a7505a46
implement some methods in support of java.security.Key.
2002-05-07 20:33:23 +00:00
nicolson%netscape.com
05f9c20222
fix broken error message.
2002-05-07 20:32:29 +00:00
ian.mcgreer%sun.com
687519e7b2
bug 141936, crash when NULL nickname entry is stored in temp store
...
r=jpierre
2002-05-07 20:31:59 +00:00
nicolson%netscape.com
be3896ad3a
Now SymmetricKey knows what KeyGenAlgorithm its associated with.
2002-05-07 20:31:52 +00:00
nicolson%netscape.com
dac41b14e0
force load of SHA1 provider before installing it as a provider.
2002-05-07 20:31:14 +00:00
nicolson%netscape.com
91a46ed3ce
add JCE providers.
2002-05-07 20:30:38 +00:00
nicolson%netscape.com
d7d08bbf7d
update version strings.
2002-05-07 20:24:03 +00:00
ian.mcgreer%sun.com
3bd2314a52
bug 142175, PK11_ListCerts regressions -- handle PKCS#11 incompatibilites with serial numbers, and fix trust collection.
2002-05-07 14:58:12 +00:00
kaie%netscape.com
33cd0c8f64
b=141871 Releasing callback in nsNSSSocketInfo must be proxied.
...
r=javi sr=alecf
2002-05-07 09:35:00 +00:00
kaie%netscape.com
308edeca0f
b=112384 Unable to download some CRLs.
...
r=javi sr=darin
2002-05-07 09:29:23 +00:00
kaie%netscape.com
ac67264a36
b=139329 Crashes trying to send signed mail.
...
r=javi sr=alecf
2002-05-07 09:25:19 +00:00
jpierre%netscape.com
a4d73c1434
Fix for 142658 - fix certutil crash with NULL nickname
2002-05-06 23:10:40 +00:00
nicolson%netscape.com
1f951f8584
Renamed to JSS*.
2002-05-06 21:54:38 +00:00
nicolson%netscape.com
8e32f7cd47
Sun's PBE Key Spec is incomplete.
2002-05-06 18:58:39 +00:00
nicolson%netscape.com
d6c440b810
add DESede.
2002-05-06 18:49:52 +00:00
wtc%netscape.com
2ff0c62fa7
Bugzilla bug 136279: fixed bugs where 'path' and 'oldpath' were passed
...
to string functions before they were null-terminated. Added a comment
to explain what 'oldpath' is for.
2002-05-03 20:59:50 +00:00
nicolson%netscape.com
b8b8caf60f
move alg-specific provider classes into generic parent classes.
2002-05-03 00:27:03 +00:00
nicolson%netscape.com
6e304edf30
upgrade to NSS 3.4.1 RTM and NSPR 4.2.
2002-05-02 23:02:49 +00:00
nicolson%netscape.com
c99cea2025
New provider files for JSS 3.2.
2002-05-02 20:25:15 +00:00
ian.mcgreer%sun.com
74f7a8a572
bug 141355, CERT_DecodeDERCertificate is not a safe function for some uses, must be replaced with CERT_NewTempCertificate.
2002-05-02 19:00:13 +00:00
relyea%netscape.com
d74b0c5ba7
Fix the RSA key check to correctly accept keys with p < q.
2002-05-02 17:39:13 +00:00
glen.beasley%sun.com
9981c35466
bug 131308 build 64 bit JSS with JDK 1.4
2002-05-02 04:37:16 +00:00
glen.beasley%sun.com
d161d0be5e
bug 129394 change assert to _assert
2002-05-02 04:04:23 +00:00
kaie%netscape.com
64bea80e40
b=139948 SSL Tooltip not updated when going from one ssl site to another
...
r=javi sr=jag
2002-05-01 14:15:27 +00:00
jpierre%netscape.com
38daf04b71
Fix for 136279 - initialize NSS in a way compatible with < 3.4 versions of NSS
2002-05-01 01:04:41 +00:00
wtc%netscape.com
9a0c0ef79c
Bugzilla bug 127062: use PR_MSG_PEEK instead of MSG_PEEK.
2002-05-01 00:21:50 +00:00
wtc%netscape.com
ac26f4995d
Bugzilla bug 131057: define PORT_Strdup as a function that calls PORT_Alloc.
...
Modified files:
lib/ckfw/nsprstub.c lib/fortcrypt/swfort/pkcs11/stub.c
lib/nss/nss.def lib/util/secport.c lib/util/secport.h
2002-05-01 00:06:39 +00:00
wtc%netscape.com
31efe5f323
Whitespace change.
2002-04-30 00:11:19 +00:00
relyea%netscape.com
458d4a99e2
Use NewTempCert and AddTempCert when importing because the cert may already exist
...
in the cache.
2002-04-29 23:54:07 +00:00
darin%netscape.com
1b1677bbe9
fixes bug 129279 "nsIFile unicode/utf8/ascii task"
...
r=dougt sr=alecf
2002-04-27 05:33:09 +00:00
wtc%netscape.com
18917e3c78
Added pkibase.c to the project.
2002-04-26 23:29:19 +00:00
wtc%netscape.com
ce697caabc
Needed a (char *) cast for slotInfo.manufacturerID because it is an array
...
of "unsigned" chars. Mac's compiler complains about that.
2002-04-26 23:05:40 +00:00
jgmyers%netscape.com
aa210f4255
Remove ssl-forcehandshake workaround r=kaie/rpotts/bienvenu sr=darin
2002-04-26 23:02:11 +00:00
wtc%netscape.com
e1cdae04b3
Removed devobject.c from the project. That file was removed.
2002-04-26 22:52:07 +00:00
wtc%netscape.com
15576425ef
Need to define SHLIB_SUFFIX for lib/softoken/dbinit.c.
2002-04-26 22:42:15 +00:00
relyea%netscape.com
2d8c1b98ba
return error when incomplete shutdown has been detected.
2002-04-26 22:36:07 +00:00
ian.mcgreer%sun.com
7e66c201ad
When doing cert traversals, create the certs in full as they are found. This avoids thrashing the softoken's object cache when the database has a large number of certs.
2002-04-26 14:34:05 +00:00
ian.mcgreer%sun.com
86371e2f7b
fix broken HPUX builds
2002-04-26 12:59:06 +00:00
relyea%netscape.com
7577a5a2f4
Add code to update nickname and 'CKA_ID' from set attribute calls. This allows
...
us to add a nickname to a cert after we import it from pkcs #12 .
2002-04-26 01:44:33 +00:00
relyea%netscape.com
18b58745a8
Write the nickname entry as well when adding a nickname to a bug.
2002-04-26 01:09:21 +00:00
relyea%netscape.com
063c8f3636
Detect Active Card presents and disable PROTECTED_PIN_PATH login when found.
2002-04-25 21:24:47 +00:00
wtc%netscape.com
470f233add
Deleted code that was made obsolete by the previous revision.
2002-04-25 21:10:09 +00:00
relyea%netscape.com
0d8f8e8981
Don't let activeCards set the Protect_Auth bit because they weren't intending to
...
to begin with.
2002-04-25 20:57:06 +00:00
ian.mcgreer%sun.com
f228b875f1
if a cert already exists, use C_SetAttributeValue to change its mutable attributes during import (instead of trying to recreate it)
2002-04-25 20:49:49 +00:00
ian.mcgreer%sun.com
980175a1c0
bug 138626, remove deleted cert from cache even if references still exist
2002-04-25 19:37:30 +00:00
ian.mcgreer%sun.com
05809d9acf
reorganize token cache so that cache entries for imported objects are created from the token, not from the user-supplied template
2002-04-25 19:33:47 +00:00
relyea%netscape.com
36917f3b4c
NSS 3.4 has branch, that makes the tip at least NSS 3.5
2002-04-25 18:51:45 +00:00
relyea%netscape.com
664c5ae965
Don't set the Token value before fetching CRL attributes. This code is fetching
...
attributes from a known CRL, not looking up new attributes (I'm pretty sure that
CVS apropos would show I checked in the previously wrong code).
bob
2002-04-25 18:33:45 +00:00
seawood%netscape.com
ce9e9903a5
Add 'make install' target to build. It's "MRE-friendly". (See http://www.mozilla.org/projects/embedding/MRE.html for details.)
...
Changes:
* Added EXTRA_COMPONENTS variable to build. Use it to automagically install files into the components dir.
* Added SYSINSTALL variable. Use it install files onto the system.
* Move mozilla-config generation from configure to makefiles
* mozilla-config will now generate paths based upon the MRE-based directory layout.
* Generate mozilla script from template
The installation heirarchy currently looks like:
$prefix -> /bin/mozilla
/bin/mozilla-config
/include/mozilla-ver/*
/lib/mozilla-ver (mozappdir)
/components
/res
/defaults
/chrome
There is preliminary build support for MRE dirs as well though the component manager hasn't had MRE support added yet.
$prefix -> /lib/mre/mre-ver (mredir)
/components
2002-04-25 02:52:44 +00:00
sonja.mirtitsch%sun.com
323d14311b
trying a version that can test tip as default for tinderbox and 341
...
as default for nightly QA
2002-04-25 01:04:10 +00:00
relyea%netscape.com
56733313ca
Don't crash if our cache entry is not found.
2002-04-25 00:45:42 +00:00
relyea%netscape.com
28cdf792e4
Turn off caching for non-hardware tokens for now until we fix some of our
...
tokens which can be updated out-of-band to use the proper 'removable token'
semantics.
2002-04-25 00:25:58 +00:00
relyea%netscape.com
5c82cde910
Don't crash if we don't find the profile (and thus don't have a slot to free).
2002-04-24 22:23:37 +00:00
ian.mcgreer%sun.com
f8317d7af9
This is a real corner case. If a search is done by issuer/serial, and the returned cert was in the cache, need to see if the cert's slot was removed. If so, destroy the cert and retry the search on the present tokens.
2002-04-24 19:39:41 +00:00
relyea%netscape.com
cd38faba86
Don't crash when getting a single user cert, but old certs are in the database
...
with the same subject, but no keys.
2002-04-24 18:29:04 +00:00
relyea%netscape.com
9b432ab983
Look up both DER encoded serial numbers (PKCS #11 spec), and decode serial
...
numbers (Old NSS) when looking up certs by issuer and SN.
2002-04-24 18:27:17 +00:00
relyea%netscape.com
bb017f0ffd
Authenticate to tokens before looking up user certs.
2002-04-24 18:25:48 +00:00
kaie%netscape.com
0aa2271015
b=129067 Deleted certs still appear in Cert Manager, uses slow workaround, which should get removed once bug 138626 is fixed.
...
r=javi sr=alecf
2002-04-24 00:51:33 +00:00
kaie%netscape.com
e7a9499b78
b=134992 Fix crash when displaying some S/Mime messages.
...
r=javi sr=alecf
2002-04-24 00:40:49 +00:00
kaie%netscape.com
e8c4b88efb
b=139349 Need to use dont_AddRef with GetCertAtIndex
...
r=bryner sr=alecf
2002-04-24 00:35:05 +00:00
kaie%netscape.com
d033f1dbcb
b=139325 Leaking CERTCertificate references from nsNSSCertificate::GetChain
...
r=bryner/javi sr=alecf
2002-04-24 00:15:12 +00:00
thayes%netscape.com
9855f801d2
Reserved Netscape extension (NETSCAPE 1 18)
2002-04-23 23:48:20 +00:00
ian.mcgreer%sun.com
9d9366f6db
fix shutdown leaks
2002-04-23 17:22:13 +00:00
kaie%netscape.com
658962867b
b=125607 Temporary workaround for better displaying signed S/Mime messages w/ attachments from IMAP servers.
...
r=ducarroz sr=bienvenu
2002-04-22 23:02:29 +00:00
ian.mcgreer%sun.com
7fe4b2d767
avoid use of iterator
2002-04-22 20:44:07 +00:00
ian.mcgreer%sun.com
ff149d2fc9
NewTemp has to be matched with AddTempCertToPerm
2002-04-22 20:27:52 +00:00
relyea%netscape.com
9c0eda08dc
Token and cert processing fixes:
...
1) use NewTempCert rather than DERDecode cert in all import cert cases.
When DERDecode cert is used, we may wind up with a cert that gets cleared
when we try to import it because it already in the cache. NewTempCert will
return the version that is in the cache.
2) If we are returning the CAList, only return certs that are CA's
(not usercerts).
3) Authenticate to all the tokens if necessary before we try to list
certs. (Stan code should eventually get automatic authentication calls in
the code itself).
4) When looking up user certs, don't return those certs with the same
subject, but do not have any key material associated with them (that is
don't crash if we have old certs in our database without nicknames, but
match user certs on our smart cards).
5) Save the nickname associated with our subject list in the temp
cache so we can correctly remove the entry even if the cert's nickname
changes (because of smart card insertions and removals, or because of
creation and deletions of our user cert).
2002-04-22 19:09:01 +00:00
ian.mcgreer%sun.com
6f242bce0e
file is no longer part of build (functionality in devtoken.c)
2002-04-22 18:28:30 +00:00
ian.mcgreer%sun.com
8f09896195
overwrite old entry during import, so that changing trust works correctly
2002-04-22 15:21:06 +00:00
ian.mcgreer%sun.com
a5c756c373
fix bugs in cert import with smart card cache
2002-04-22 14:14:44 +00:00
ian.mcgreer%sun.com
5f29c565cc
re-sync the trust domain cache with token insertion/removal
2002-04-19 23:06:44 +00:00
nicolson%netscape.com
201d8a50bc
JSS 3.2 features check-in.
2002-04-19 22:42:05 +00:00
ian.mcgreer%sun.com
20d3a4206d
* make sure the token cache returns failure in overflow case
...
* change internal module trust order again, builtins uses 100, and internal module must come first
2002-04-19 19:30:12 +00:00
ian.mcgreer%sun.com
66a82a7cc5
try again, the default is 50 so the internal module must be higher
2002-04-19 19:19:33 +00:00
ian.mcgreer%sun.com
df1f30dd48
make sure the internal module defaults to trust order > 50
2002-04-19 19:01:45 +00:00
ian.mcgreer%sun.com
cdbdd213d0
improve synchronization between the token state and token cache operations
2002-04-19 17:32:22 +00:00
ian.mcgreer%sun.com
7f2b70a208
Only fall back to email search if the "nickname" has an @ character. This is because email searches will not go through the cache, so should be avoided if possible.
2002-04-19 16:22:31 +00:00
ian.mcgreer%sun.com
a8c12b8551
Fixes for smart card cache. Don't do cache searches by email address, since GetAttributeValue does not set that field. Handle removal correctly for item at tail of list. Don't search token after a successful cache search that returned zero hits.
2002-04-19 16:14:13 +00:00
kaie%netscape.com
2e2135248f
b=137154 PSM needs to call SSL_ClearSessionCache before switching profiles
...
r=javi sr=alecf
2002-04-18 22:25:26 +00:00
jpierre%netscape.com
dd440a052a
Fix for 138084 - free slot list if NSC_Initialize fails
2002-04-18 20:54:22 +00:00
ian.mcgreer%sun.com
72fe6cfda5
catch non-present tokens before searching them
2002-04-18 19:37:12 +00:00
ian.mcgreer%sun.com
a314e4673a
two fixes for certs with multiple instances
2002-04-18 19:26:17 +00:00
relyea%netscape.com
f773069cdb
Don't crash if we try to get the name of a non-existant token.
2002-04-18 17:54:30 +00:00
relyea%netscape.com
9a298cf94a
Remember the nickname in the cache entry so that we can always free it when the cert goes away, even if the nickname has changes.
...
Also, initialize subjectList to NULL at the beginning, so we don't try to add nickname when we aren't supposed to.
2002-04-18 17:52:55 +00:00
relyea%netscape.com
1a084027eb
We need to make sure we always return a trust object, even if that object says
...
there is no trust.
2002-04-18 17:50:40 +00:00
ian.mcgreer%sun.com
26d08192dd
landing new smart card cache, bug 135429
2002-04-18 17:30:05 +00:00
nicolson%netscape.com
ed07493981
update NSS version.
2002-04-18 14:33:16 +00:00
wtc%netscape.com
6330398618
Bugzilla bug 126087: removed symKey->refLock because we are using atomic
...
routines on symKey->refCount now. Declare symKey->refCount as PRInt32 to
match the prototype of PR_AtomicIncrement/Decrement.
Modified files: pk11skey.c secmodti.h
2002-04-17 01:03:23 +00:00
jgmyers%netscape.com
6fd36b42d4
Remove unneeded ForceHandshake code which broke IMAP/SSL over SOCKS: bug 133434 r=kaie@netscape.com sr=brendan@mozilla.org a=asa
2002-04-16 22:49:33 +00:00
wtc%netscape.com
babb8b31e8
Bugzilla bug 133584: PK11_SaveSMimeProfile also needs to free free_slot if
...
it returns on error.
2002-04-16 22:40:07 +00:00
dbragg%netscape.com
060ac1f254
Regular milestone update of localeVersion values to 1.0.0. Bug 126785. r=tao, sr=alecf, a=asa
2002-04-16 22:19:10 +00:00
sonja.mirtitsch%sun.com
f00e0d4e46
changes for jdk 1.4; and mccrel move
2002-04-16 20:57:42 +00:00
relyea%netscape.com
39dca2aade
Don't free the temp secmod.db name until we are through using it.
2002-04-16 00:24:34 +00:00
ian.mcgreer%sun.com
acc4169fa7
bug 63815, AIX compiler fails to build ckhelper.c in debug mode
2002-04-15 21:04:00 +00:00
ian.mcgreer%sun.com
8cf801e779
fix bbroken solaris x86 build
2002-04-15 16:20:39 +00:00
ian.mcgreer%sun.com
46d73e79e3
bug 135521, change cert lookups on tokens to be actual finds instead of traversals
2002-04-15 15:22:11 +00:00
ian.mcgreer%sun.com
fc73a7647f
fix a cert reference leak in strsclnt
2002-04-15 14:24:15 +00:00
kaie%netscape.com
d5d6150e42
b=136908 Make CRL manager UI work again.
...
r=kaie sr=ben
2002-04-15 12:18:13 +00:00
kirk.erickson%sun.com
c7ef46e0ff
Resolves 126087. Backed out of slot->keyCount atomic instructions.
2002-04-14 14:07:12 +00:00
ian.mcgreer%sun.com
ef8839f6d7
fix error statement
2002-04-12 19:17:48 +00:00
relyea%netscape.com
14e7ed26f6
Bug 133584: Fix reference leaks which prevent shutdown in NSS and in the tests.
...
Debug builds can verify correct operation by setting NSS_STRICT_SHUTDOWN, which
will cause an assert if shutdown is called but not all the modules are freed (which
means a slot, key, or cert reference has been leaked).
2002-04-12 19:05:21 +00:00
ian.mcgreer%sun.com
d75db55520
bug 136806, don't authenticate to friendly slots when adding certs
2002-04-12 18:07:49 +00:00
ian.mcgreer%sun.com
5c2561ce2a
testing theory that unmatched atomic increment/decrement is causing occasional tinderbox failures. See bug 126087.
2002-04-12 15:51:11 +00:00
kaie%netscape.com
5e578afaa3
b=102633 Changed cipher prefs dialog.
...
Allow the user to enable additional ciphers.
Disable two cipher suites that are no longer in use (said the NSS team).
r=javi/nelsonb/cotter sr=alecf
2002-04-12 04:44:29 +00:00
kaie%netscape.com
be88a33114
b=119418 Fix handling of opaque signed S/Mime messages.
...
Also fixes some other S/Mime issues, as described in the bug.
r=ddrinan/ducarroz/darin sr=alecf
2002-04-12 04:26:40 +00:00
relyea%netscape.com
20ddb4063a
Update the version field in the handle when doing the automatic update.
2002-04-12 03:43:34 +00:00
ian.mcgreer%sun.com
0ce9d71907
additional fix for the patch from bug 126087. Must not set symKey->slot to NULL after leaving the freelist lock, or somebody else might pick up the symKey from the freelist, have their slot NULL'ed, and whamo..
2002-04-11 23:05:38 +00:00
ian.mcgreer%sun.com
043bcf2b16
key should be freed when refcount == 0 after decrement. See bug 126087.
2002-04-11 19:15:31 +00:00
kaie%netscape.com
da25d7f19e
b=102633 Allow the user to enable additional ciphers, dynamically obtaining a list of ciphers from NSS.
...
Disable support for two ciphers that are no longer in use.
r=javi/nelsonb/cotter sr=alecf
2002-04-11 05:07:09 +00:00
kaie%netscape.com
5e0f8e85dd
b=119481 Fix various unitialized variables.
...
r=kaie/javi sr=kin
2002-04-11 05:01:29 +00:00
kaie%netscape.com
015c39971d
b=118319 Fix memory leak.
...
r=javi/wtc sr=blizzard
2002-04-11 04:35:08 +00:00
kaie%netscape.com
78f313dd86
b=119481 Fix various unitialized variables.
...
r=kaie/javi sr=kin
2002-04-11 04:31:53 +00:00
kaie%netscape.com
5e25fd0a47
b=129740 Fix client auth with profiles migrated from Communicator.
...
r=javi sr=alecf
2002-04-11 04:24:20 +00:00
kaie%netscape.com
b0c3ab7f38
b=132543 Fix crash when downloading CRL
...
r=javi sr=alecf
2002-04-11 04:21:18 +00:00
relyea%netscape.com
189c5f5319
bug 128586 (and other) importing non-NSS pkcs#12 files.
...
We need to decode the privatekeyinfo attributes if they exist.
2002-04-11 00:59:43 +00:00
nelsonb%netscape.com
8f5d6f3546
Add enum names for use in forward declarations.
2002-04-10 23:27:50 +00:00
wtc%netscape.com
5c3dd6fa35
Bugzilla bug 136625: prevent pk11_cert_collect from storing NULL in the
...
certData.certs array so that pk11_searchCertsAndTrust won't deference a
NULL pointer. r=relyea.
2002-04-10 17:56:52 +00:00
wtc%netscape.com
91903c9373
Bugzilla bug 119418: export NSS_CMSMessage_IsEncrypted.
2002-04-10 17:54:02 +00:00
ian.mcgreer%sun.com
9af2d39dfa
bug 135871, CERT_ImportCerts not storing temp certs
...
r=relyea
2002-04-09 23:46:57 +00:00
nicolson%netscape.com
d1444c5dd2
login to token before importing private key.
2002-04-09 19:23:49 +00:00
relyea%netscape.com
d36c02f183
Handle yet another PKCS #11 device which has non-standard behavior, but is well established in the market place.
2002-04-09 17:58:00 +00:00
relyea%netscape.com
e7891dd01b
Add the ability to test the multi-access database feature with existing test cases.
2002-04-08 23:39:44 +00:00
relyea%netscape.com
a7e963e5f6
Add database update capabilities to NSS softoken for multi-access database.
2002-04-08 23:37:49 +00:00
nicolson%netscape.com
fa4720c8f3
merge JDK 1.4 changes to the trunk.
2002-04-08 21:46:56 +00:00
wtc%netscape.com
f40e1173cd
Restored the 'static' qualifier that was accidentally deleted in the
...
previous revision.
2002-04-05 19:38:03 +00:00
wtc%netscape.com
bfc09d5778
Bug 135728: include pki3hack.h for the declaration of
...
STAN_AddModuleToDefaultTrustDomain, etc. r=mcgreer.
2002-04-05 19:30:38 +00:00
wtc%netscape.com
cfbef65b96
Bug 135728: should return SECFailure because the function's return type
...
is SECStatus. r=mcgreer.
2002-04-05 19:25:48 +00:00
ian.mcgreer%sun.com
cc03c22316
remove unused Stan build files
2002-04-05 19:08:32 +00:00
ian.mcgreer%sun.com
5ffd5b4aa2
fix broken 64-bit platforms
2002-04-05 15:19:37 +00:00
jpierre%netscape.com
54221f5768
Fix world record warning message
2002-04-05 10:23:58 +00:00
relyea%netscape.com
154669fa43
Tempararily back out random change so that we don't actually read *every* file in system32.
2002-04-05 09:18:57 +00:00
relyea%netscape.com
904e0c4fd1
Multi-access database changes.
2002-04-05 09:17:51 +00:00
nelsonb%netscape.com
a3de078352
WinCE mods (2nd try). Use NSPR for file system I/O on WinCE.
...
Change algorithm for selecting files to read for seeding the PRNG.
Old algorithm sometimes read very few files if opens failed.
2002-04-05 03:49:35 +00:00
nelsonb%netscape.com
362f2ab1b1
Don't build nss/cmd or nss/lib/fortcrypt on WinCE.
2002-04-05 03:34:57 +00:00
nelsonb%netscape.com
1bbe17eef6
On WinCE, DBM's dbopen uses NSPR file open flags rather than libc's
...
file open flags (which are not defined on WinCE).
2002-04-05 03:33:42 +00:00
nelsonb%netscape.com
9df2603c4f
Stop linking in wsock32.lib and winmm.lib on Windows. We haven't needed
...
these since we started linking with NSPR's DLLs, and they don't exist
on WinCE.
2002-04-05 03:30:37 +00:00
relyea%netscape.com
7c5e858ba4
Fix linux build errors
2002-04-05 03:29:50 +00:00
relyea%netscape.com
b155312245
return the correct error codes to make all.sh happy.
2002-04-05 03:16:41 +00:00
sonja.mirtitsch%sun.com
efee77e868
fixed a bug that had resulted in tinderbox results not always being uploaded
2002-04-05 01:41:34 +00:00
relyea%netscape.com
2178e16562
Add ';' so Solaris and Linux will build
2002-04-05 01:09:39 +00:00
nelsonb%netscape.com
3d1d77ffa5
New platform files for WinCE.
2002-04-05 00:52:32 +00:00
relyea%netscape.com
1a3e031141
Link certutil dynamically.
2002-04-05 00:12:21 +00:00
relyea%netscape.com
9cde2ab4fd
Add symbols so the certutil can be linked dynmically
2002-04-05 00:11:25 +00:00
relyea%netscape.com
6e6defc79f
Don't try verifying the db's in a multi-access database case
2002-04-05 00:10:39 +00:00
kaie%netscape.com
444ce3a72e
b=125041 CA not imported when getting personal cert
...
r=ssaux sr=alecf a=asa
2002-04-04 22:30:40 +00:00
ian.mcgreer%sun.com
734d5fa661
New file for common PKI stuff. Not yet part of build.
2002-04-04 21:15:27 +00:00
ian.mcgreer%sun.com
5dc26469cd
Land Stan changes to tip. Mostly header file / structure / API cleanup. Note
...
that these changes *do not* affect the current build, except for some minor edits.
2002-04-04 20:00:28 +00:00
kirk.erickson%sun.com
d62094b5b6
Addresses bug 126087 (hot locks identified by Ning at Sun).
...
Using atomic instructions to reduce contention on slot->freeListLock
and symKey->refLock.
2002-04-04 18:30:51 +00:00
relyea%netscape.com
6e9cb5194b
Make sure we aren't confusing secret keys with private and public keys
2002-04-04 18:08:30 +00:00
relyea%netscape.com
dc8555d48c
Don't include the public key on a list if it doesn't exist.
2002-04-04 18:07:19 +00:00
ian.mcgreer%sun.com
f15a36dade
define nss_ZREALLOCARRAY, fix bugs in nss_ZRealloc
2002-04-04 16:14:26 +00:00
nelsonb%netscape.com
fa971ba21c
Back out win_rand changes. The changes used NSPR for file I/O instead
...
of using libc. But some of our DLLs don't link against NSPR :-(.
2002-04-04 02:09:01 +00:00
nelsonb%netscape.com
8f49663549
Fix build error on NT.
2002-04-04 01:41:19 +00:00
nelsonb%netscape.com
959b60df95
Add missing #include to fix errors on AIX.
2002-04-04 01:35:13 +00:00
nelsonb%netscape.com
031d4f07ec
Remove duplicative include. arch.mk is included by config.mk.
2002-04-04 00:22:47 +00:00
nelsonb%netscape.com
5f0e4c6d86
Get freebl and mpi to build for WinCE. Use NSPR for I/O in sysrand.
2002-04-04 00:19:43 +00:00
nelsonb%netscape.com
bbe8155675
Fix (er, improve) Makefile dependencies for sysrand.{o,obj}
2002-04-04 00:17:17 +00:00
nelsonb%netscape.com
6151df3eff
Make libSSL build for WinCE.
2002-04-04 00:14:12 +00:00
nelsonb%netscape.com
b4933f383f
Make libutil build for WinCE.
2002-04-04 00:11:48 +00:00
nelsonb%netscape.com
0dafd862e9
Warning reduction. substitute (uchar) cast for ANDing with 0xff.
2002-04-04 00:10:34 +00:00
nelsonb%netscape.com
0731adc453
Since WinCE has no command line shell, don't build cmd for it.
2002-04-04 00:03:03 +00:00
nelsonb%netscape.com
8cff0b44bc
Add cross-platform (WinCE) support.
2002-04-04 00:00:27 +00:00
nelsonb%netscape.com
a23eebd97c
Add WinCE suport.
2002-04-03 23:27:16 +00:00
ian.mcgreer%sun.com
f70720d0e2
merge branch fix for bug 115954 to tip
2002-04-03 19:22:15 +00:00
javi%netscape.com
f92dbfbefa
Don't include the static library util.o in all of the NSS shared libraries to prevent each shared library from getting its own copy of some of the NSS global symbols.
2002-04-03 18:29:40 +00:00
wtc%netscape.com
b0bd4b2383
Bugzilla bug 134095: removed error-handling code that's not quite correct.
2002-03-29 18:53:15 +00:00
jpierre%netscape.com
eebcbb8f9d
Fix for 134095 - allow PKCS#11 framework to free attributes for non-const token objects
2002-03-29 07:34:22 +00:00
hewitt%netscape.com
fa0edb8cc4
110156 - renaming outliner to tree - weird cvs events causing us to lose the log for this file, sadly. if you want the old log, see Attic/nsICertOutliner.idl
2002-03-29 03:36:00 +00:00
hewitt%netscape.com
07d96867f1
bugs 110156, 110155
...
Removing support for <outliner> tags
Removing <tree> layout code and moving <tree> tags to outliner layout
Convert all usage of <outliner> to tree tags
Convert all usage of <tree> tags to new <tree> syntax or <listbox>
r=cmanske,varga sr=hyatt,sspitzer a=asa
Also includes fixes by Jan Varga (varga@utcruk.sk ) for bugs 132020, 133451, 131393, 115894, and 129327
2002-03-29 02:46:01 +00:00
sonja.mirtitsch%sun.com
08b9d0451b
moving security products from mccrel to mccrel3
2002-03-28 00:42:36 +00:00
kaie%netscape.com
7394a0617f
b=130949 Fix lock icon issues
...
r=ddrinan sr=rpotts a=valeski
2002-03-27 07:56:02 +00:00
kaie%netscape.com
53d54a1fd2
b=129100 OOPS fixing wrong case in my prior checkin
2002-03-27 07:54:47 +00:00
wtc%netscape.com
c9af370f5f
Bugzilla bug 133668: use PR_MIN instead of MIN, which is no longer defined
...
by the Mozilla header file that we include.
2002-03-27 07:29:57 +00:00
jpierre%netscape.com
fa9769e4df
Call NSS_Shudown in modutil
2002-03-27 05:02:58 +00:00
kaie%netscape.com
313246fba8
b=107817 Make sure sent encrypted messages will be decryptable by sender.
...
r=ddrinan
sr=alecf
a=roc+moz
2002-03-27 03:27:43 +00:00
kaie%netscape.com
57ee5c6632
b=129774 Increment PSM version to 2.3
...
r=ssaux
sr=alecf
a=valeski
2002-03-27 02:43:43 +00:00
kaie%netscape.com
e7b29e3a35
b=122967 Disable "edit email trust button" in certificate manager, until functionality gets implemented correctly.
...
r=javi
sr=alecf
a=roc+moz
2002-03-27 02:41:58 +00:00
kaie%netscape.com
91e9529dc3
b=129100 Finalize S/Mime UI implementation
...
r=ducarroz/javi
sr=mscott
a=asa
2002-03-27 02:29:34 +00:00
ian.mcgreer%sun.com
b46659fdf7
bug 123296, infinite loop in signtool when incorrect password given at command line
2002-03-26 22:23:28 +00:00
wtc%netscape.com
fbe712bc1d
Bugzilla bug 133545: fixed spelling errors "signning" in certutil memu
...
options. Thanks to Eric Murphy <ericmurphy@jabber.org> for the bug report.
2002-03-26 22:22:07 +00:00
nicolson%netscape.com
95157c5425
Fix 130522: ASN.1 decoder asserts with corrupt input.
...
r=wtc
2002-03-26 01:13:23 +00:00
wtc%netscape.com
29ce9176f6
Bugzilla bug 132461: changes suggested by Bob Relyea after his code review:
...
1. Add SECMOD_LoadModule back to nss.def.
2. Back out the SECMOD_AddModule/AddModuleEx changes.
I also updated the comments and made some changes to emulate the
indentation and comment styles of the original code.
Modifies files: nss/nss.def pk11wrap/pk11pars.c pk11wrap/pk11util.c
2002-03-26 00:43:04 +00:00
dbaron%fas.harvard.edu
2a4007a526
Convert users of nsAReadable[C]String and nsAWritable[C]String typedefs to [const] nsA[C]String. b=131899 r=scc sr=jag a=asa
2002-03-23 21:03:32 +00:00
wtc%netscape.com
80e0fd30ff
Bugzilla bug 132483: fixed the bug that ckfw destroys an object before its
...
handle. r=relyea.
2002-03-23 16:10:07 +00:00
wtc%netscape.com
0cef07355e
Bugzilla bug 131427: added softkver.c to softoken Mac build. Set
...
MWFTP_Post_password to null value to reduce the noise in diffs.
2002-03-23 15:43:34 +00:00
wtc%netscape.com
8d764c0342
Bugzilla bug 128955: support Netscape's uname, MKS's uname, and Cygwin's
...
uname. Since CPU_ARCH is already defined in arch.mk, removed the redundant
definition in WIN*.mk. Removed the unnecessary internal variable
PROCESSOR. r=cls.
Modified Files: WIN954.0.mk WINNT3.51.mk WINNT4.0.mk WINNT5.0.mk
WINNT5.1.mk arch.mk
2002-03-23 15:06:02 +00:00
nelsonb%netscape.com
9984f9519a
If an error occurs when attempting to write previously buffered data on
...
a socket, do not override the error code with PR_WOULD_BLOCK_ERROR.
bug 132899.
2002-03-23 01:06:08 +00:00
ian.mcgreer%sun.com
a335422e9d
bug 132889, sense of boolean 'blocking' is reversed within the HANDLE_ERR macro of ssl_WriteV
2002-03-22 22:48:02 +00:00
nelsonb%netscape.com
7756b45dc7
Add new bits to struct returned by SSL_GetCipherSuiteInfo. Bug 132438.
2002-03-22 21:43:43 +00:00
jpierre%netscape.com
af2f840d08
Fix error in SECMOD_UnloadUserModule reportd by Ian for bug 132461 - use Stan remove call rather than add
2002-03-21 18:44:23 +00:00
wtc%netscape.com
b84896bc9b
Bug 132461: restored the declaration of SECMOD_LoadModule.
2002-03-21 14:48:58 +00:00
jpierre%netscape.com
0b1cba67e5
Fix for 132461 - add better functions to load and remove modules dynamically r=relyea
2002-03-21 03:35:28 +00:00
jpierre%netscape.com
007aa8a7a1
Fix for 132461 - add better functions to load and remove modules dynamically
2002-03-21 03:34:47 +00:00
wtc%netscape.com
007cc6d579
Bugzilla bug 131350: export SEC_PKCS12DecoderGetCerts from smime.def.
...
r=relyea.
2002-03-21 03:05:49 +00:00
wtc%netscape.com
96d1840618
Bugzilla bug 131427: add "for Clients" to the version id strings in the
...
softoken shared library if MOZ_CLIENT is defined. r=relyea.
2002-03-20 21:17:30 +00:00
jaggernaut%netscape.com
d8cf5474f8
Bug 101723: security icon only works for the first tab
...
Bug 117203: Insecure POST warning only comes up for first tab
Bug 120043: Page Info shows information about a page in the first tab
r=sgehani, r=kaie/ddrinan (for security stuff), sr=sspitzer (for mail/news stuff), sr=hyatt, a=asa. Work based on patch by Smaug <smaug@jippii.fi>.
2002-03-20 09:57:35 +00:00
wtc%netscape.com
190e732f58
Bugzilla bug 131430: changed "softoken" to "softokn" to match the file
...
name. r=relyea.
2002-03-20 04:43:41 +00:00