Граф коммитов

6428 Коммитов

Автор SHA1 Сообщение Дата
alexei.volkov.bugs%sun.com d15c593319 Bug 363480 ocspclnt needs option to take cert from specified file. r=nelson 2007-01-04 20:07:33 +00:00
glen.beasley%sun.com 78a5342482 update error codes to NSS r=wtc 2007-01-04 19:08:47 +00:00
neil.williams%sun.com 6815b0a706 Bug 339906, r=nelson, sec_pkcs12_install_bags passes uninitialized variables 2007-01-03 23:02:12 +00:00
nelson%bolyard.com 53f8f14efb Bug 256046. Don't prefix with $(JAVA_DESTPATH)/ if it's undefined.
r=Glen.beasley,neil.williams
2007-01-03 13:07:47 +00:00
nelson%bolyard.com 48d0f25c72 Bug 353904. Fix potential NULL ptr deref. Klocwork. r=alexei.volkov 2007-01-03 12:57:41 +00:00
nelson%bolyard.com e0f78d4e72 Bug 354423. Get the right string length. R=alexei.volkov,rrelyea 2007-01-03 12:54:10 +00:00
nelson%bolyard.com ee3d61528a Improve checking of received SSL2 records.
Bug 364319, bug 364323. r=rrelyea, wtchang
2007-01-03 05:30:33 +00:00
richm%stanfordalumni.org 145b082757 Resolves: bug 299995
Description: Use PK11_TokenKeyGenWithFlags instead of PK11_KeyGen
Fix Description: Use the new function and pass in CKF_ENCRYPT|CKF_DECRYPT
as the keygen flags.
2006-12-14 17:09:17 +00:00
richm%stanfordalumni.org 99b8e5f3ef Resolves: bug 363168
Description: Add autotool support to svrcore; have svrcore build shared libs
Fix Description: This is a pretty basic autotool-ization using libtool
to build the shared library.  The vast majority of the work was done
by Toshio-san.  However, there are a couple of extras worth noting:
1) Windows builds are different now.  In order to build on Windows using
the MSVC compiler, you still have to use coreconf.  I just could not get
configure/libtool to work correctly with the MSVC compiler.  The old
makefile has been moved to src/Makefile.win, so you just have to
 cd src ; make -f Makefile.win
I also updated the README and INSTALL.win to add this information.
2) I added some m4 files to find and figure out which nspr and nss to use
based on the environment and pkg-config.
2006-12-14 17:07:32 +00:00
wtchang%redhat.com 8e38a40e7b Bug 236613: added newline at end of file. 2006-12-12 23:26:40 +00:00
kaie%kuix.de 5470bf8ef7 Bug 355409, unable to search LDAP server (over SSL) with tbird 2.0 build, but 1.5.0.7 works
r=wtchang
2006-12-11 13:51:25 +00:00
gerv%gerv.net fd0b7c527e Bug 236613: change to MPL/LGPL/GPL tri-license. 2006-12-11 09:45:41 +00:00
wtchang%redhat.com 360c3622cc Bugzilla Bug 358785: merged the mozilla/security/nss/lib/libpkix from the
NSS_LIBPKIX_BRANCH onto the NSS trunk.  Approved by rrelyea and nelsonb.
2006-12-09 00:27:38 +00:00
wtchang%redhat.com a606211cab Bugzilla Bug 363073: verify that the peer's ephemeral public key is the
type we expect before using it.  r=nelsonb
Modified Files: ssl3con.c ssl3ecc.c
2006-12-08 22:37:29 +00:00
wtchang%redhat.com 3d22030244 Bugzilla Bug 357197: a small but subtle change to reject a hash algorithm
identifier with bogus 'parameters', and a large but straightforward change
of renaming function arguments and improving comments to clarify the
asymmetry between the two certID arguments. r=nelsonb
2006-12-08 22:10:52 +00:00
wtchang%redhat.com c2805bff1d Bugzilla Bug 361077: removed commented-out code. r=christophe.ravel 2006-12-07 18:31:49 +00:00
wtchang%redhat.com 7f10b9b9eb Bugzilla Bug 361077: fixed the bug that HP-UXB.11.*.mk test USE_PTHREADS
before it is set.  Since we always use pthreads now, we can unconditionally
add -D_POSIX_C_SOURCE=199506L to OS_CFLAGS in HP-UXB.11.mk.
r=christophe.ravel
Modified Files:
	HP-UXB.11.00.mk HP-UXB.11.11.mk HP-UXB.11.20.mk
	HP-UXB.11.22.mk HP-UXB.11.23.mk HP-UXB.11.mk
2006-12-07 18:28:40 +00:00
kaie%kuix.de 948b913ab9 Bug 362980, Unable to verify the identity of [www.something.com] as a trusted site
Fixes a regression from yesterday's checkin for bug 176501.
r=rrelyea, r=wtchang
2006-12-07 13:02:28 +00:00
wtchang%redhat.com b033b4ec3c Bugzilla Bug 345482: changed abspath to core_abspath to avoid conflict with
the built-in abspath function of GNU make 3.81.  The patch is contributed
by Benjamin Smedberg <benjamin@smedbergs.us>. r=wtc,christophe.ravel
Modified Files:
	coreconf/rules.mk nss/cmd/shlibsign/Makefile
	nss/lib/freebl/Makefile nss/lib/pk11wrap/Makefile
2006-12-07 01:57:18 +00:00
wtchang%redhat.com 3aa89fdd96 Bug 332350: fixed a typo in the comment. 2006-12-06 23:00:17 +00:00
wtchang%redhat.com e8241c0d68 Bugzilla Bug 342795: the call-once functions need to store the error code
on failure so that the error code can be retrieved later. r=nelsonb and
alexei.volkov.
2006-12-06 21:50:40 +00:00
christophe.ravel.bugs%sun.com b06b7287a3 Bugzilla 362857 Simplify the NSS version string definition.
r+ wtchang
2006-12-06 21:14:54 +00:00
wtchang%redhat.com ca593f0c5b Bugzilla Bug 362857: simplified the NSS and softoken version string
definition.  r=christophe.ravel,nelsonb.
Modified files: nss/nss.h softoken/softkver.h
2006-12-06 19:51:30 +00:00
kaie%kuix.de 88bf39f00d Bug 362967, export SECMOD_DeleteModuleEx
r=rrelyea, r=wtchang
2006-12-06 17:56:04 +00:00
kaie%kuix.de 7a7f8f7843 follow up checkin, make sure entries in nss.def are sorted 2006-12-06 17:32:47 +00:00
kaie%kuix.de 8735833c30 Bug 345277, When "Certificate Viewer" is shut, the object leaks
r=rrelyea
2006-12-06 17:25:14 +00:00
kaie%kuix.de 2be9a969f4 Export two NSS functions, required for:
Bug 307319, Certificate details show incorrect public key information
r=rrelyea
2006-12-06 17:12:41 +00:00
kaie%kuix.de de39adef38 Bug 360526, Cert not imported - Feedback prompt sometimes does not work
r=rrelyea
2006-12-06 16:31:32 +00:00
kaie%kuix.de f9ba195413 Bug 360528, Can no longer import trusted email cert
r=rrelyea
2006-12-06 16:20:08 +00:00
kaie%kuix.de 26e94086b6 Bug 164707, Provide a way to view/delete orphan certs
r=rrelyea
2006-12-06 16:16:52 +00:00
kaie%kuix.de a8a6ad8889 Bug 176501, mozilla apps must manage NSS configuration for PKCS#11 shared libs, including nssckbi.dll
r=rrelyea
2006-12-06 15:42:39 +00:00
wtchang%redhat.com 2fcba5348b Bugzilla Bug 357197: when we compare hash algorithm identifiers, allow the
'parameters' to be either NULL or missing.  r=nelsonb,relyea
2006-12-06 02:25:52 +00:00
wtchang%redhat.com fd5d3de9c8 Bugzilla Bug 358248: SSL_ShutdownServerSessionIDCache should stop the
LockPoller thread.  r=nelsonb,relyea
2006-12-06 01:36:08 +00:00
wtchang%redhat.com 607c235abf Bugzilla Bug 362173: The NSS cryptographic module (the softoken and freebl
shared libraries) should have its own version numbers. r=nelsonb and
neil.williams.
Modified Files:
	lib/freebl/freebl.rc lib/freebl/freeblver.c
	lib/softoken/manifest.mn lib/softoken/pkcs11.c
	lib/softoken/softkver.c lib/softoken/softokn.rc
Added Files:
	lib/softoken/softkver.h
2006-12-04 23:31:35 +00:00
alexei.volkov.bugs%sun.com 828546f8d0 343231: certutil issues certs for invalid requests. r=nelson 2006-12-01 01:10:03 +00:00
wtchang%redhat.com bb9ff86997 Bugzilla Bug 358785: fixed incorrect x509PolicyConstraints OID and typos in
a comment. r=relyea
2006-11-30 00:27:28 +00:00
wtchang%redhat.com 68c97cc69b Bugzilla Bug 361089: fixed memory leaks in mp_bdivmod. r=douglas.stebila 2006-11-30 00:21:04 +00:00
mozilla.mano%sent.com 59993a0f5c Bug 359718 - Page info: Security tab never shown. r=gavin, mpa=darin. 2006-11-23 09:41:03 +00:00
mozilla.mano%sent.com a7b930ec60 Backing out bug 359718, tree is closed 2006-11-22 21:24:56 +00:00
mozilla.mano%sent.com b1b34b0989 Bug 359718 - Page info: Security tab never shown. r=gavin, mpa=darin. 2006-11-22 21:23:35 +00:00
wtchang%redhat.com 0bf075b1e2 Bugzilla Bug 361076: removed code that handled multiple NSPR threading
implementations.  We only use the pthreads-based implementation now.
r=christophe.ravel.
2006-11-17 21:57:14 +00:00
christophe.ravel.bugs%sun.com 885c8b5c76 335454: Unable to find library 'libsoftokn3.sl' on HP-UX 64 bit
r=nelson, sr=wan-teh
2006-11-17 01:30:16 +00:00
neil.williams%sun.com 4308bda7ed bug 360818, set RPATH for signtool, signver
r=wan-teh, nelson
2006-11-17 01:16:53 +00:00
nelson%bolyard.com 291632bb3b Export two new functions that were added in NSS 3.11:
SSL_ForceHandshakeWithTimeout and SSL_ReHandshakeWithTimeout
Bug 127960. r=alexei.volkov,wtchang
2006-11-15 00:14:42 +00:00
wtchang%redhat.com 45f748a400 Bugzilla Bug 359484: made the fix for bug 341707 work for the SSL2 client
hello case. r=nelsonb,alexei.volkov
2006-11-14 01:09:54 +00:00
wtchang%redhat.com 6797b7066a Bugzilla Bug 357197: fixed the fallthrough case in ocsp_CertIDsMatch. The
patch is contributed by Steve Parkinson <sparkins@redhat.com>. r=nelson,wtc
2006-11-13 18:16:58 +00:00
kaie%kuix.de 8e7a1fd635 Bug 356309, CertVerifyLog in CERT_VerifyCertificate terminates early on expired certs
r=rrelyea
2006-11-08 18:41:53 +00:00
kaie%kuix.de bf8a40b04f Bug 356109, Improve KU_NON_REPUDIATION indication in client auth prompt
r=rrelyea
2006-11-08 18:14:21 +00:00
kaie%kuix.de 64cea829cd Bug 355447, Certificate Viewer shows no details for certs in chain
Patch v2 - make extension display in cert viewer more robust
Contributed by Kaspar Brand
r=kengert
2006-11-02 22:48:32 +00:00
kaie%kuix.de d266176f49 Bug 359280, fix typo in mozilla/security/nss/cmd/lib/SSLerrs.h
r=nelson
2006-11-02 22:07:57 +00:00
kaie%kuix.de 6feb102157 Bug 355447, Certificate Viewer shows no details for certs in chain
Fix template patch
r=kengert
2006-11-02 21:49:22 +00:00
kaie%kuix.de 26372250b4 bug 346766, tons of valgrind warnings if nsEntropyCollector collects entropy before NSS initialization
r=kengert, r=rrelyea
2006-11-02 19:22:56 +00:00
kaie%kuix.de 1a4838613a Bug 328346, Certificates with keyusage nonRepudiation should not be used as SSL client certificates
Checking in incremental patch to fix an obvious mistake.
r=kengert
2006-11-02 18:51:27 +00:00
alexei.volkov.bugs%sun.com 5118b604d5 353763: klocwork Null ptr dereferences in pk11cert.c. r=nelson 2006-10-31 00:31:53 +00:00
alexei.volkov.bugs%sun.com e63123e5d3 353865: klocwork Null ptr deref in softoken/pk11db.c. r=nelson 2006-10-31 00:29:43 +00:00
alexei.volkov.bugs%sun.com 3c74ff1d7c 353902: klocwork bugs in stanpcertdb.c. r=nelson 2006-10-31 00:24:38 +00:00
alexei.volkov.bugs%sun.com ed7d448e10 additional fix for 353909: klocwork ptr dereference before NULL check in devutil.c. r=nelson 2006-10-31 00:21:24 +00:00
alexei.volkov.bugs%sun.com bf04349f0a 353909: klocwork ptr dereference before NULL check in devutil.c. r=nelson 2006-10-31 00:05:04 +00:00
julien.pierre.bugs%sun.com 6a5bdb9f3f Fix for bug 350948 . freebl macro change gives 1% improvement in RSA on Solaris AMD64 2006-10-26 22:22:57 +00:00
nelson%bolyard.com 978d371056 Fix leaks in softoken's argument string parsin. r=rrelyea,alexei.
Bug 339173. Modified Files: pk11db.c pk11pars.h
2006-10-25 18:47:02 +00:00
bzbarsky%mit.edu b0b0fcc6e4 Make nsIStreamLoader and nsIUnicharStreamLoader be stream listeners. Bug
281153, patch by Son Le <son.le0@gmail.com>, r=biesi, sr=darin
2006-10-24 21:47:40 +00:00
wtchang%redhat.com e1b969f04b Bugzilla Bug 351140: handle the case that params->field is an invalid
value.  The patch is by Ryan Jones <sciguyryan+bugzilla@gmail.com>.
r=nelsonb,wtc.
2006-10-24 00:05:43 +00:00
alexei.volkov.bugs%sun.com 7b8ef8bc9b 265784: SSL interoperability regression testing. r=nelson
To turn on the feature, set and export env variable
IOPR_HOSTADDR_LIST to space separated interoperability server fqdn list
2006-10-23 23:46:47 +00:00
wtchang%redhat.com 9526c81448 Bugzilla Bug 341122: it's not necessary to test slot->slotLock because
slot->slotLock cannot be NULL at that point.  The patch is contributed by
Ryan Jones <sciguyryan+bugzilla@gmail.com>. r=nelsonb,wtc.
2006-10-23 22:56:31 +00:00
wtchang%redhat.com 88ccf804eb Bugzilla Bug 339907: fixed the leak of sha1cx. The patch is contributed by
Ryan Jones <sciguyryan+bugzilla@gmail.com>. r=nelsonb,wtc.
2006-10-23 21:24:38 +00:00
wtchang%redhat.com c8f66e9991 Bugzilla Bug 351897: Say a != b instead of (! (a == b)). r=jpierre. 2006-10-23 20:46:50 +00:00
wtchang%redhat.com 28f3486cb3 Bugzilla Bug 357015: it turns out the code is correct. it's the comment
that's wrong.
2006-10-18 23:45:32 +00:00
wtchang%redhat.com 3023db83df Bugzilla Bug 357015: added a comment to describe the actual number of files
ReadSystemFiles reads.
2006-10-18 23:05:59 +00:00
slavomir.katuscak%sun.com e614cf17f5 Fix for previous patch. 2006-10-18 17:59:40 +00:00
wtchang%redhat.com 974cda3d23 Bugzilla Bug 356595: noted in the comment that GetCurrentProcess returns
a constant pseudo handle. Added a GetCurrentThreadId call. r=glen.beasley,
neil.williams.
2006-10-17 17:58:06 +00:00
slavomir.katuscak%sun.com f2ecee13ae 1. Adding timestamps + total time measure for testing subscripts
2. Enables using TESTS variable from system environment (for example TESTS=cert
./all.sh will test only cert tests)
2006-10-17 09:48:17 +00:00
wtchang%redhat.com a789d16a95 Bugzilla Bug 355297: changed the way we reseed the RNG so that we modify
all the 256 bits of XKEY. Define struct SHA256ContextStr in the new header
sha256.h so that prng_fips1861.c can use it. r=nelsonb,jpierre.
Modified files: manifest.mn prng_fips1861.c sha512.c
Added file: sha256.h
2006-10-13 16:54:04 +00:00
gavin%gavinsharp.com fd5053fbe9 Bug 338022: remove dead code in buildASN1ObjectFromDER, patch by Ryan Jones <sciguyryan+bugzilla@gmail.com>, r=darin+kaie 2006-10-13 15:35:59 +00:00
glen.beasley%sun.com 66f5675c48 355297 rng update checking in wan-tehs patch 2006-10-12 22:48:19 +00:00
glen.beasley%sun.com f2eba53b60 356073 C_GetTokenInfo should return CKR_CRYPTOKI_NOT_INITIALIZED if not initialized r=nelson,sr=neil 2006-10-12 22:27:16 +00:00
wtchang%redhat.com ae4de81197 Bugzilla Bug 355297: added new function RNG_SystemRNG, which gets random
bits from the system RNG, and use it for the very first RNG_RandomUpdate
call in rng_init so that we initialize the RNG's XKEY with high quality
entropy. r=jpierre,relyea.
Modified Files:
	os2_rand.c prng_fips1861.c secrng.h unix_rand.c win_rand.c
2006-10-12 02:23:49 +00:00
wtchang%redhat.com b7f8a319df Bugzilla Bug 354900: code cleanup -- consolidates some duplicate code,
checks for NULL pointers, and renames the SFTK_IS_SECURE_KEY_OBJECT macro.
r=glen.beasley,relyea.
Modified files: fipsaudt.c fipstokn.c
2006-10-10 22:28:48 +00:00
kaie%kuix.de f7587b8664 Bug 328346, Certificates with keyusage nonRepudiation should not be used as SSL client certificates
r=rrelyea
2006-10-10 02:04:40 +00:00
alexei.volkov.bugs%sun.com 5422547e07 353908: klocwork OOM crash in tdcache.c. r=nelson 2006-10-09 22:29:12 +00:00
alexei.volkov.bugs%sun.com 87c82cd606 353903: klocwork oom crash in softoken/keydb.c. r=nelson 2006-10-09 22:28:07 +00:00
alexei.volkov.bugs%sun.com 99550a4548 353888: klockwork IDs for ssl3con.c. r=nelson 2006-10-09 22:26:44 +00:00
alexei.volkov.bugs%sun.com d024ebf9ed 353777: Klocwork Null ptr dereferences in pk11obj.c. r=nelson 2006-10-09 22:25:36 +00:00
alexei.volkov.bugs%sun.com 9ace0cd822 353773: klocwork Null ptr dereferences in pk11nobj.c. r=nelson 2006-10-09 22:24:18 +00:00
alexei.volkov.bugs%sun.com d85a6becaf 353760: klocwork null pointer dereference in p7decode.c. r=nelson 2006-10-09 22:22:33 +00:00
alexei.volkov.bugs%sun.com f0d8f08f3a 353742: klocwork null ptr dereferences in pki3hack.c. r=nelson 2006-10-09 22:21:41 +00:00
alexei.volkov.bugs%sun.com c75aba0e9b 353742: klocwork null ptr dereference in ocsp_DecodeResponseBytes. r=nelson 2006-10-09 22:19:58 +00:00
alexei.volkov.bugs%sun.com 7f46b3353c 353741: klocwork cascading memory leak in mpp_make_prime. r=nelson 2006-10-09 22:18:38 +00:00
alexei.volkov.bugs%sun.com c2024aa508 353739: Klocwork Null ptr dereferences in instance.c. r=nelson 2006-10-09 22:16:59 +00:00
alexei.volkov.bugs%sun.com 075f20e631 353423: Klocwork bugs in nss/lib/pk11wrap/dev3hack.c. r=nelson 2006-10-09 22:14:04 +00:00
alexei.volkov.bugs%sun.com a865209076 353416: Klocwork 76593 null ptr deref in nssCryptokiPrivateKey_SetCertificate. r=nelson 2006-10-09 22:11:44 +00:00
alexei.volkov.bugs%sun.com 0bb915b883 353375: Klocwork 76513 - Null ptr deref in nssCertificateList_DoCallback. r=nelson 2006-10-09 18:51:55 +00:00
alexei.volkov.bugs%sun.com 3ccdf5fbaf 353371: Klocwork 91117 - Null Pointer Dereference in CERT_CertChainFromCert. r=nelson 2006-10-09 18:45:02 +00:00
alexei.volkov.bugs%sun.com 0d8f9d41b4 338226: Core files may be reported in the wrong tests for SSL, or missed. r=neil 2006-10-09 17:42:58 +00:00
wtchang%redhat.com 4ceeae7952 Bugzilla Bug 354565: improved an error message as suggested by Neil
Williams.
2006-10-06 23:50:48 +00:00
wtchang%redhat.com d639e804bd Bugzilla Bug 115951: libfreebl3.dylib should be built as a loadable bundle
just like libnssckbi.dylib because it is only dynamically loaded.  We don't
have the import library freebl3.lib on Windows either. r=julien.pierre
2006-10-06 23:45:39 +00:00
wtchang%redhat.com 93b242e88f Bugzilla Bug 354900: audit the modifications, accesses, deletions, and
additions of cryptographic keys.  r=glen.beasley,relyea.
Modified files: fipstokn.c manifest.mn pkcs11c.c softoken.h
Added file: fipsaudt.c
2006-10-02 22:48:31 +00:00
wtchang%redhat.com fe0e8d1ecd Bugzilla Bug 351482: fail if some of the needed functions don't exist.
r=glen.beasley,relyea.
2006-10-02 22:04:33 +00:00
julien.pierre.bugs%sun.com 844ee1cb2f Fix for bug 115951 . Separate BL_Cleanup and BL_Unload . r=wtchang,nelson 2006-10-02 21:15:46 +00:00
kaie%kuix.de 37d139f34d Bug 344817, PSM: fix UI display problems for X.509 certs with empty DNs
Patch for GetWindowTitle, contributed by Kaspar Brand
r=kengert
2006-10-02 20:16:23 +00:00
kaie%kuix.de 6e3768170d Bug 352867, Cert Manager shows incorrect cert names if any twisty is closed
r=rrelyea
2006-10-02 20:11:49 +00:00
kaie%kuix.de c44354253e Bug 352401, Cert Manager: If issuer org is empty, fall back to display common name
r=rrelyea
2006-10-02 20:06:27 +00:00
nelson%bolyard.com 0ee53bb38c Bug 353475. When building NSS with MSVC 2005, use the "mt" command to
embed the manifest files into the executables and DLLs.
Patch contributed by Allan Beaufour <allan@beaufour.dk>, r=nelson,wtchang
2006-10-01 06:48:25 +00:00
nelson%bolyard.com 9c37ccdeba Bug 354384. Fix some (not all) of the reference leaks in vfyserv.
Also, improve usage message.  r=alexei,julien
2006-10-01 05:47:18 +00:00
nelson%bolyard.com 7b37380577 Bug 354313. Fix leak in STAN_GetCERTCertificateName. r=julien,rrelyea 2006-10-01 05:37:24 +00:00
alexei.volkov.bugs%sun.com 6b26c70fb6 353413: Klocwork 76541 free uninitialized pointer in CERT_FindCertURLExtension. r=nelson 2006-09-29 20:20:21 +00:00
alexei.volkov.bugs%sun.com 7c2578e513 353374: Klocwork 76494 - Null ptr derefs in CERT_FormatName. r=nelson 2006-09-29 20:18:55 +00:00
alexei.volkov.bugs%sun.com 07295987fd 341114: Coverity 517 SECU_ParseCommandLine leaks optstate. r=nelson 2006-09-29 20:15:47 +00:00
alexei.volkov.bugs%sun.com 075cd7e56c 354403:: nssList_CreateIterator returns pointer to a freed memory if the function fails to allocate a lock. r=nelson 2006-09-29 20:13:30 +00:00
alexei.volkov.bugs%sun.com 8aced43912 354008: klocwork bugs in freebl. r=nelson 2006-09-29 20:12:21 +00:00
alexei.volkov.bugs%sun.com cf92865f64 321600: SECMOD_LoadPKCS11Module calls to PR_GetLibraryName must use PR_FreeLibraryName. r=wtchang. Patch provided by timeless. 2006-09-29 19:53:07 +00:00
alexei.volkov.bugs%sun.com 1b42c8b73d 314178: NSS PK11 Module: certificates with unknown AlgorythmIdentifiers make ThunderBird crashed. r=nelson, sr=julien 2006-09-29 19:38:42 +00:00
kaie%kuix.de 881f80f012 Bug 326159, enhance cert request generation using KEYGEN tag and JS function crypto.generateCRMFRequest
r=rrelyea
Portions of this patch originally appeared in bug 235773 and were contributed by Sheueling Chang / Vipul Gupta / Douglas Stebila
2006-09-29 00:50:46 +00:00
kaie%kuix.de 46cbf9e4fa Bug 307319, Certificate details show incorrect public key information
r=rrelyea
Patch contributed by Martin v. Loewis
2006-09-28 23:31:34 +00:00
kaie%kuix.de d6ee5b8dbb Bug 350200, Implement DHMAC based POP (ProofOfPossession)
r=rrelyea, r=nelson
2006-09-28 22:25:55 +00:00
wtchang%redhat.com 87a523fee1 Bugzilla Bug 354565: detect SHA tests that are incorrectly configured for
BIT oriented implementations. r=glen.beasley
2006-09-28 16:37:25 +00:00
julien.pierre.bugs%sun.com 1f77032405 Fix for bug 115951 . Unload freebl dynamic library . Also fix tiny one-time leak of library name . r=nelson,wtchang 2006-09-28 00:40:55 +00:00
kaie%kuix.de 2d97a3c730 Bug 337087, Coverity 406, dead code in mozilla/security/manager/ssl/src/nsSDR.cpp
r=kengert
Patch provided by Jon Smirl
2006-09-27 03:19:46 +00:00
julien.pierre.bugs%sun.com ef3aac34c7 Fix for bug 353910 . Memory leak in RNG_RNGInit . r=nelson, wtchang 2006-09-26 22:20:18 +00:00
julien.pierre.bugs%sun.com 3d47173317 Fix for bug 351897 . OCSP check should only be skipped for certificateStausResponder usage alone . 2006-09-26 20:18:57 +00:00
kaie%kuix.de 0cdda9c03b Bug 353422, Klocwork bugs in nss/lib/crmf
r=nelson, r=rrelyea
Patch inspired by Nelson
2006-09-26 18:57:28 +00:00
kaie%kuix.de 92702ef895 Bug 344812, string ID typo in CertViewer: fix display of KU_CRL_SIGN key usage bit
r=kengert
Patch provided by Kaspar Brand
2006-09-26 18:47:05 +00:00
kaie%kuix.de 12ee05eb21 Bug 353597, Process events while waiting for OCSP result on main thread
r=darin
Thanks a lot to Christian Biesinger for making me aware of this solution.
Thanks a lot to Darin Fisher for rewriting thread manager that provides the new API.
2006-09-26 17:52:56 +00:00
nelson%bolyard.com 804068f80a Fix build bustage caused by previous checkin. 2006-09-25 21:46:06 +00:00
julien.pierre.bugs%sun.com 139d6b15d1 Fix for bug 353896 . Assert at compile time if NSS_ECC_MORE_THAN_SUITE_B is set. For NSS_3_11_BRANCH and tip. r=nelson, alexei 2006-09-25 20:51:11 +00:00
nelson%bolyard.com c0457e5b4a Unifdef USE_MOZ_THREAD (bug 351510) and remove dead code (bug 351443).
Patch contributed by ehsan.akhgari@gmail.com. r=nelson, alexei.volkov
Modified Files: jarint.h jarsign.c jarver.c manifest.mn
Removed Files: jarevil.c jarevil.h
2006-09-25 19:45:40 +00:00
nelson%bolyard.com bbe4d0acaa Fix leaks in jarfile.c (bug 338453), jarjart.c (bug 351408), and
jarver.c (bug 337361). Patch contributed by ehsan.akhgari@gmail.com
2006-09-25 19:20:37 +00:00
wtchang%redhat.com 4b203c498c Bugzilla Bug 334914: removed a useless null check. Contributed by
Ryan Jones <sciguyryan+bugzilla@gmail.com>.  r=wtc
2006-09-22 19:02:07 +00:00
wtchang%redhat.com a18e1186a9 Bugzilla Bug 353749: for DSA KAT increased the size of P to 1024 bits
used nistK283 binary field curve KAT. Contributed by Glen Beasley of Sun.
r=wtc.
2006-09-22 18:33:25 +00:00
julien.pierre.bugs%sun.com 5898f7b707 Fix for bug 353572. Leak in sftk_OpenCertDB . r=alexei,nelson 2006-09-22 00:19:49 +00:00
julien.pierre.bugs%sun.com a9deebbb28 Fix for bug 353608 . NSS_RegisterShutdown may fail, and appData argument is always NULL . r=wtchang,nelson 2006-09-21 20:08:15 +00:00
alexei.volkov.bugs%sun.com ce43b6fd56 201139: SSLTap should display plain text for NULL cipher suites. r=nelson 2006-09-20 22:37:35 +00:00
timeless%mozdev.org 57e65dc77b Bug 20232 Replace T::GetIID() (etc.) with NS_GET_IID(T)
r=bsmedberg sr=biesi
2006-09-17 00:25:25 +00:00
timeless%mozdev.org 204a110dff Bug 20232 Replace T::GetIID() (etc.) with NS_GET_IID(T)
r=bsmedberg sr=biesi
2006-09-17 00:04:39 +00:00
timeless%mozdev.org 3c6729f401 Bug 336094 [@ nsNSSSocketInfo::GetSSLStatus]
patch by kaie r=timeless sr=rrelyea
2006-09-16 23:44:02 +00:00
julien.pierre.bugs%sun.com f3b8f758ea Fix for bug 352439 - reference leaks in modutil . r=alexei.volkov 2006-09-15 23:10:13 +00:00
cbiesinger%web.de c7c2f947bb Bug 351876 Move nsICryptoHash into necko
r=darin
2006-09-15 22:06:31 +00:00
wtchang%redhat.com 5b8a6ee293 Added "Basic ECC" and "Extended ECC" to the NSS version string. 2006-09-15 01:04:40 +00:00
wtchang%redhat.com 1f7bc5d067 Import NSPR 4.6.3. 2006-09-15 01:01:21 +00:00
kaie%kuix.de 95055862af Bug 351756, Add 7 new root CA certs to NSS
r=wtchang
2006-09-12 23:38:40 +00:00
wtchang%redhat.com ff09cb7f79 Change DecryptSigBlock to return the parsed DigestInfo's length, so
the caller can check it.  Fixed a memory leak on error. r=nelson,rrelyea
bug 351848.
2006-09-12 17:13:20 +00:00
julien.pierre.bugs%sun.com f92a2e42f9 Fix for bug 352041 . oom in CERT_DecodeDERCrlWithFlags . r=alexei,nelson 2006-09-11 23:12:30 +00:00
wtchang%redhat.com 0b7defce1b Removed PRODUCT_NAME, which is no longer used. r=christophe.ravel 2006-09-09 02:24:25 +00:00
glen.beasley%sun.com c55da3c0e5 351872 mem leak fix for ecdsa powerupselftest r=julien, sr=wan-teh 2006-09-09 00:24:01 +00:00
wtchang%redhat.com cb235032b3 Use NSS 3.11.3 and NSPR 4.6.3. r=christophe.ravel 2006-09-09 00:04:44 +00:00
wtchang%redhat.com 1b22c1e476 Import NSS 3.11.3 and NSPR 4.6.3. r=christophe.ravel 2006-09-09 00:01:05 +00:00
julien.pierre.bugs%sun.com 82d3af1276 Fix typo in comment. 2006-09-08 21:24:25 +00:00
julien.pierre.bugs%sun.com 7b3d89c5d5 Fix for bug 332222 . Add support for mixed ECDH RSA SSL cipher suites. Patch contributed by Slavomir Katuscak . r=julien 2006-09-08 21:15:41 +00:00
sayrer%gmail.com c249dc7837 bug 348669. Remove inappropriate nsCRT::free usage. r=timeless, sr=dbaron 2006-09-08 04:35:17 +00:00
wtchang%redhat.com 79c7fd404c Bugzilla Bug 342582: Use the PKCS #11 headers in NSS on Windows, too. 2006-09-08 00:55:03 +00:00
wtchang%redhat.com d9c5a5037e Bugzilla Bug 342582: removed a space after "PROGRAM = pk11mode", which
broke the Windows build (because the executable name became pk11mode .exe).
Also removed unnecessary variable definitions.
2006-09-08 00:50:09 +00:00
wtchang%redhat.com 305dcfc068 Bugzilla Bug 351482: Use audit_log_user_message, if available. Otherwise,
fall back on audit_send_user_message, which exists in older versions of
libaudit.so.0. r=glen.beasley,relyea.
2006-09-08 00:16:53 +00:00
julien.pierre.bugs%sun.com f6331ac0a6 Bug 348198 : trace startup and shutdown time for selfserv. Patch contributed by Slavomir Katuscak. r=julien,alexei 2006-09-07 23:54:07 +00:00
wtchang%redhat.com 0586e27984 Bugzilla Bug 342582: include <stdarg.h> instead of "prprf.h" for va_list,
va_start, etc.
2006-09-07 21:09:24 +00:00
wtchang%redhat.com b74538b35f Bugzilla Bug 342582: improved PKM_CK_RVtoStr: map our vendor-defined error
codes, and return "unknown error" instead of NULL for unknown error codes.
2006-09-07 20:33:43 +00:00
glen.beasley%sun.com 042d75a5e2 342582 changed RSA modulus and public exponent 2006-09-07 18:35:48 +00:00
glen.beasley%sun.com 019cbdd682 342582 AIX runtime error and some cleanup 2006-09-07 18:16:52 +00:00
glen.beasley%sun.com f0bcaf10b6 342582 removed AIX warnings 2006-09-07 06:09:26 +00:00
glen.beasley%sun.com 3793c574ef 342582 all test passed msg 2006-09-06 21:50:59 +00:00
glen.beasley%sun.com f075bf4fd8 342582 hpux update 2006-09-06 21:19:54 +00:00
julien.pierre.bugs%sun.com 33ce6d8676 Fix for bug 351270 . Assertion in unix_rand.c . 2006-09-06 21:07:32 +00:00
nelson%bolyard.com 2eaa3b158e Improve the validity tests on the AlgorithmID when verifying a PKCS#1 v1.5
RSA signature.  Bug 351079. r=rrelyea,wtchang.
2006-09-05 09:45:46 +00:00
nelson%bolyard.com b685bc12af Also trace the DH(E) PMS. bug 349966. r=julien.pierre, wtchang 2006-09-02 18:53:54 +00:00
wtchang%redhat.com 0ea2d2bc96 Bugzilla bug 342582: this program may use NSPR but it should not link with
any NSS libraries.
2006-09-01 22:23:34 +00:00
wtchang%redhat.com aa27fc5243 Bugzilla bug 342582: need to set slotID. Other minor fixes. 2006-09-01 22:15:37 +00:00
wtchang%redhat.com a76bd764e7 Bugzilla bug 342582: MODULE should be nss so we can include NSS headers. 2006-09-01 22:13:20 +00:00
julien.pierre.bugs%sun.com 4327243f2a Fix for bug 182758 . Use only /dev/urandom on Solaris when available . If not, use libkstat . r=nelson, wtchang 2006-09-01 22:08:52 +00:00
kaie%kuix.de a6ffe70027 Bug 348259, "Flag" strings, not shown in UI, stored in properties file
r=rrelyea
2006-09-01 19:12:01 +00:00
kaie%kuix.de db47c33e43 bug 350512, Frequent error message: OCSP server error
r=rrelyea
2006-09-01 18:11:50 +00:00
wtchang%redhat.com 02820390ec Bugzilla Bug 349609: sftk_MACUpdate only works with multi-part operations.
r=glen.beasley,relyea.
2006-09-01 17:07:59 +00:00
kaie%kuix.de bd184fd467 Backing out patch for bug 326159, as it causes breakage on mac tinderbox 2006-08-31 23:02:55 +00:00
glen.beasley%sun.com 5dfc114efb fix warnins on redhat4 2006-08-31 22:26:58 +00:00
kaie%kuix.de 3b856d07c0 Bug 326159, enhance cert request generation using KEYGEN tag and JS function crypto.generateCRMFRequest
r=rrelyea
Portions of this patch originally appeared in bug 235773 and were contributed by Sheueling Chang / Vipul Gupta / Douglas Stebila
2006-08-31 21:56:25 +00:00
glen.beasley%sun.com f8d4cb1b8a initial checkin of pk11mode.c FIPS test program work in progress 2006-08-31 17:55:18 +00:00
nelson%bolyard.com fc224dfa92 When verifying a signed digest, ensure that the digest is DER encoded and
that there is no extra stuff after the DER encoded digest.  Bug 350640.
r=julien.pierre,rrelyea
2006-08-31 03:54:48 +00:00
alexei.volkov.bugs%sun.com 10a2c46ebe 337013: OOM crash [@ nssArena_Destroy - nssTrustDomain_TraverseCertificatesBySubject][@ nssArena_Destroy - nssTrustDomain_TraverseCertificatesByNickname] Dereferencing possibly NULL "tmpArena". r=nelson, sr=julien 2006-08-30 17:57:20 +00:00
glen.beasley%sun.com fe2de1a78d 349965 added ECDSA key gen to power up self test r=wtc 2006-08-29 16:57:18 +00:00
nelson%bolyard.com 71b708b526 Correctly zero-fill columns in weaved array. r=julien,wtchang. Bug 348359. 2006-08-29 02:41:38 +00:00
wtchang%redhat.com eb4154a348 Bugzilla Bug 349632: made C_Verify work for multi-part mechanisms.
r=glen.beasley,relyea.
2006-08-26 01:49:48 +00:00
alexei.volkov.bugs%sun.com 637830ea5e 330056: seckey_put_private_key leaks memory. r=nelson, sr=wtc 2006-08-25 23:04:15 +00:00
alexei.volkov.bugs%sun.com ec83177451 304361: smime: possible memory corruption when encoding/decoding smime_encryptionkeypref_template. r=nelson, sr=wtc 2006-08-25 22:26:18 +00:00
wtchang%redhat.com 79cb863db6 Bugzilla bug 336813: do not set the nonstandard flag CKF_THREAD_SAFE. Set
CKF_DUAL_CRYPTO_OPERATIONS and the new v2.10 flag CKF_TOKEN_INITIALIZED.
r=relyea.
2006-08-24 22:52:21 +00:00
nelson%bolyard.com 832c411014 re-enable SSLTRACE for keys and (pre)master secrets. Bug 349966. r=rrelyea 2006-08-24 22:10:03 +00:00
julien.pierre.bugs%sun.com 4cbb857527 Back out Slavo's patch for bug 332222 in ssl.sh because tinderbox fails. 2006-08-24 19:48:08 +00:00
kaie%kuix.de ddb06912d5 Bug 340359, SSL Server stalls on v3 hello using TLS hello extensions
r=darin
2006-08-24 18:14:40 +00:00
kaie%kuix.de 9711981378 Bug 86988, Sorting in certificate manager should be case insensitive
r=rrelyea
2006-08-24 18:06:43 +00:00
julien.pierre.bugs%sun.com 7a290fbdc0 Allow ssl.sh to support mixed ECC/RSA certs. Patch created by Slavomir Katuscak. r=nelson, rrelyea 2006-08-24 17:48:52 +00:00
julien.pierre.bugs%sun.com 06d244cd3c Fix for bug 332222 . Allow ssl.sh to support mixed ECC/RSA certs. Patch created by Slavomir Katuscak. r=nelson, rrelyea 2006-08-23 23:32:01 +00:00
julien.pierre.bugs%sun.com a47e066437 Fix for bug 349920 . Don't optimize freebl libraries in debug build on Sparc . r=nelson, neil.williams 2006-08-23 22:56:20 +00:00
glen.beasley%sun.com ecfc48c292 349632 C_VerifyUpdate HMAC fix r=wtc,sr=bobR 2006-08-23 21:46:23 +00:00
julien.pierre.bugs%sun.com b52c0767f1 Fix for bug 225525 . Resolve race assigning NSSCertificate fields which leaked memory and slot reference. r=nelson 2006-08-22 22:54:11 +00:00
nelson%bolyard.com 0b9d9ecfae Fix race in CERT_NewTempCertificate. Bug 341323. r=julien,rrelyea 2006-08-22 03:30:14 +00:00
wtchang%redhat.com 8a51f22b9b Bugzilla Bug 342476: backed out the previous checkin. Not sure if it's a
good idea.
2006-08-18 23:28:10 +00:00
wtchang%redhat.com 4da0d414de Backed out the unnecessary change in the previous checkin. 2006-08-18 22:56:18 +00:00
wtchang%redhat.com 6e113942ae Bugzilla Bug 342476: NSS should set and check the pReserved field in the
(extended) CK_C_INITIALIZE_ARGS structure.  r=nelsonb,relyea.
Modified files: pk11wrap/pk11load.c softoken/pkcs11.c
2006-08-18 22:48:41 +00:00
wtchang%redhat.com cdef9462bc Bugzilla Bug 349011: marked local functions as static. The patch is
contributed by timeless <timeless@bemail.org>. r=wtc.
Modified files: crmfcont.c crmfpop.c crmfreq.c
2006-08-18 22:21:34 +00:00
mrbkap%gmail.com 4d3737fcd3 Propagate the exception out. bug 349241, r=kaie sr=jst 2006-08-18 22:07:14 +00:00
wtchang%redhat.com 1a05b8527a Bugzilla Bug 53427: Added PORT_ArenaZRelease and change secasn1d.c to zero
our_pool before releasing or freeing it. r=nelsonb,jpierre.
Modified files: secasn1d.c secport.c secport.h
2006-08-15 23:56:01 +00:00
wtchang%redhat.com db1cf9f37e Bugzilla Bug 325148: worked around the change of backslash-newline behavior
inside single-quoted strings in GNU make 3.81.  The patch is contributed by
Pawel Chmielowski <prefiks@aviary.pl>. r=benjamin.smedberg,wtc.
2006-08-15 21:35:25 +00:00
wtchang%redhat.com 97b9b2993d Bugzilla Bug 53427: passed the correct 'zero' argument to PORT_FreeArena.
Removed dead code. r=nelsonb,relyea.
Modified Files:
	softoken/keydb.c softoken/lowpbe.c softoken/pkcs11c.c
	util/secdig.c
2006-08-15 01:34:38 +00:00
wtchang%redhat.com f39b05a9ca Bugzilla Bug 336813: Improved NSC_GetTokenInfo and FC_GetTokenInfo. Always
set CKF_RNG. Set the utcTime member to 16 zeros "0000000000000000".
Factored out the common flag CKF_RNG and CKF_THREAD_SAFE. r=nelsonb,relyea.
Modified files: fipstokn.c pkcs11.c
2006-08-14 17:52:31 +00:00