mozilla
/
pjs
зеркало из https://github.com/mozilla/pjs.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
159 287 коммитов 40 Ветки 136 Теги 1,1 GiB
Граф коммитов

5933 Коммитов

Автор SHA1 Сообщение Дата
julien.pierre.bugs%sun.com 7111e6ebf7 Fix for bug 326144 . softoken leaks in nsc_pbe_key_gen. r=nelson, rrelyea 2006-02-07 00:43:31 +00:00
wtchang%redhat.com dbb143b269 Bugzilla Bug 318967: fixed compiler warnings, most of which were char * 
and unsigned char * mismatches. r=glen.beasley.
 2006-02-04 06:39:44 +00:00
kaie%kuix.de 6e44613a74 Fix build bustage, change // comment to /* */ 2006-02-03 20:22:52 +00:00
kaie%kuix.de 93dc217dd8 bug 152426, delegation of HTTP download for OCSP 
r=julien.pierre, r=rrelyea
 2006-02-03 18:14:49 +00:00
cbiesinger%web.de a898e666b8 bug 183156 remove *UCS2* functions, replacing them with *UTF16* ones 
r+sr=darin
 2006-02-03 14:18:39 +00:00
neil.williams%sun.com b36cd3eaef bug 245518 r=nelson, fix for p12 files encoded with null PWs 2006-02-02 20:26:03 +00:00
nelson%bolyard.com d4b05e6bb3 Work around bug 292285: don't encode x400 addresses, don't print CRL contents 
r=julien.pierre
 2006-02-02 07:56:19 +00:00
wtchang%redhat.com 3dc55f1174 Allow CKM_ECDSA_SHA1 to be multipart. Bug 325494. 
Patch contributed by Andreas Sterbenz <Andreas.Sterbenz@sun.com>
r=nelsonb,relyea,wtc.
 2006-02-02 07:21:56 +00:00
alexei.volkov.bugs%sun.com a2cde1a2cd [Bug 325307] infinite loop in SECU_FindCrlIssuer. r=julien 2006-02-02 02:45:02 +00:00
alexei.volkov.bugs%sun.com 81fbb31a8a [Bug 324878] crlutil -L outputs false CRL names. r=julien 2006-02-02 02:35:07 +00:00
alexei.volkov.bugs%sun.com bc7dfc231d 325305: minor memory leak in CERT_FindCertByNameString. r=wtc 2006-02-02 00:57:54 +00:00
richm%stanfordalumni.org 9d4c7f77b0 added Windows build instructions - fixed spec file - added patch file for broken coreconf location.mk 2006-02-01 23:39:01 +00:00
sandeep.konchady%sun.com 3c41a24d51 Bugzilla bug: 324451. Changed JSS version to 4.2.3. sr=glen, r=alexei 2006-02-01 23:18:57 +00:00
wtchang%redhat.com ca31a3a1e8 Bugzilla Bug 318966: implemented the tests for the NIST RNG Validation 
System.  r=glen.beasley.
Modified file: fipstest.c
Added file: rng.sh
 2006-02-01 21:28:25 +00:00
wtchang%redhat.com 2deab42637 Bugzilla Bug 318966: added two RNG functions FIPS186Change_GenerateX and 
FIPS186Change_ReduceModQForDSA to blapi.h for the NIST RNG Validation
System. r=relyea,nelsonb.
Modified files: blapi.h ldvector.c loader.c loader.h prng_fips1861.c
 2006-02-01 21:18:44 +00:00
rrelyea%redhat.com fd80d52937 Bug 319619 "large" ECC private keys cannot be exported through PKCS #11 
1) Change the export encrypted private key function to ask the token the wrap
size rather than trying to figure it out ourselves.

2) Fix the soften to correctly return the size.


r=wtc, nelsonb
 2006-02-01 16:43:47 +00:00
glen.beasley%sun.com 24f377f7dd 318970 RSA FIPS tests r=wan-teh sr=bobRelyea 2006-01-31 00:49:40 +00:00
glen.beasley%sun.com e3acf26812 318970 RSA FIPS tests r=wan-teh sr=bobRelyea 2006-01-31 00:49:02 +00:00
kaie%kuix.de 6ea97d820f bug 323903, further improvements on displaying certificate extensions. 
Patch contributed by Kaspar Brand, supplementing the recent checkin for bug 259031.
r=Martin v. Loewis / kengert
 2006-01-30 23:21:00 +00:00
glen.beasley%sun.com e5919f82cb 318970 RSA FIPS Alg Tests r=wan-teh, sr=bRelyea 2006-01-30 19:58:52 +00:00
nelsonb%netscape.com e4ed0ba860 Fix broken build, caused by c++ style comment in c code. 2006-01-28 02:38:07 +00:00
nelsonb%netscape.com 3360534c6e Set SSL2 and SSL3 timeout times properly for SSL server session cache. 
Bug 223242. r=jullien.pierre
 2006-01-28 02:21:31 +00:00
kaie%kuix.de 53ba8beb5d bug 324109, Re-Add ocsp info string in cert manager, that was accidentially removed by a checkin for bug 212459 
r=mscott sr=rrelyea
 2006-01-27 21:12:37 +00:00
glen.beasley%sun.com decef2ce52 328967 DSA FIPS tests r=Wan-Teh 2006-01-27 18:53:07 +00:00
wtchang%redhat.com 47f924a72a Removed a blank line that broke the ssl_stress function in ecssl.sh, which 
cannot handle blank lines.
 2006-01-27 18:44:13 +00:00
wtchang%redhat.com ca32c95cb1 Bugzilla Bug 320589: temporary workaround for SEC_SignData ECDSA signature 
generation bug introduced by the previous checkin.
 2006-01-26 23:51:42 +00:00
wtchang%redhat.com dc090904ca Removed an extraneous semicolon after the last parameter in a function 
declaration.
 2006-01-26 23:21:39 +00:00
gavin%gavinsharp.com 0cef564f9f Bug 323010: nsSecretDecoderRing::SetWindow should be NS_IMETHODIMP, not nsresult, patch by Jeff Walden <jwalden@mit.edu>, r+sr=dveditz 2006-01-26 01:06:42 +00:00
sandeep.konchady%sun.com 1d340a02f8 Bugzilla bug: 316629. Increased SSLServerSocket timeout from 15 sec to 
90 sec. Smaller timeout was causing the server to die before client connected.
sr=glen.beasley r=alexei.volkov
 2006-01-24 00:42:48 +00:00
nelsonb%netscape.com 91dc066263 Remove unnecessary ISALIST test from sparc versions of freebl DSOs. 
Bug 302658. r=jullien.pierre,wtchang
 2006-01-22 08:43:57 +00:00
nelsonb%netscape.com c600655628 Make dbck Debug mode work with Softoken. Bug 323570. r=rrelyea. 2006-01-22 06:54:34 +00:00
nelsonb%netscape.com 84f7a58b5e Don't use variables as structure initializers. Bug 274512. Fix build 
on HPUX.  r=julien.pierre,wtchang
 2006-01-22 06:42:14 +00:00
nelsonb%netscape.com 3ab06bd1bf Detect certdb reference leaks at shutdown with assertions. Bug 324103. 
r=rrelyea.
 2006-01-22 06:36:36 +00:00
wtchang%redhat.com de87a39bcf Bugzilla Bug 323977: use the "mapfile" (ld version script) on FreeBSD. 
Build the freebl shared libraries with the -Bsymbolic flag for GNU ld.
r=nelsonb.  Thanks to Glenn Randers-Pehrson <glennrp@imagemagick.org> for
reporting this bug and verifying these changes.
Modified files: coreconf/FreeBSD.mk nss/lib/freebl/Makefile
 2006-01-21 02:33:33 +00:00
nelsonb%netscape.com 0379858bcd Plug a cert DB reference leak in softoken, related to trust objects. 
Bug 324103, r=rrelyea
 2006-01-21 02:23:42 +00:00
wtchang%redhat.com 035d4d364f Bugzilla Bug 320589: miscellaneous code cleanup: distinguish between the 
length of the field size and the length of the base point order.  Report
better error codes.  In ECDSA_VerifyDigest, removed unnecessary local
variables and be lenient in the signature lengths we accept.
r=relyea,nelsonb
 2006-01-21 02:14:46 +00:00
julien.pierre.bugs%sun.com bce474d96e Fix for bug 317856 . uninitialized variable correction. r=wtchang 2006-01-20 22:55:15 +00:00
cls%seawood.org 63f98b3b60 Do not attempt to install .chk files when cross-compiling. 
Bug #317620 r=wtc
 2006-01-20 21:52:18 +00:00
nelsonb%netscape.com 0521005f8e Detect NULL server key pair pointer. Bug 321161. r=wtchang. 2006-01-20 17:40:21 +00:00
julien.pierre.bugs%sun.com b9bbd71bdd Fix for bug 317856 . compiler warnings in strsclnt 2006-01-20 00:43:23 +00:00
rrelyea%redhat.com e88416641f Bugzilla Bug 95323. Conditionally compile nsscapi. 
r=julien
 2006-01-19 19:55:28 +00:00
nelsonb%netscape.com c10ca51cd5 change QA test order to be bottom-up. Bug 309412. r=jullien.pierre 2006-01-19 11:59:56 +00:00
nelsonb%netscape.com 81262a171f Back out last change, which broke the build. 2006-01-19 02:34:12 +00:00
nelsonb%netscape.com 0c53a2cee8 Prevent crash when making new cert8.db from old cert5.db. 
This is not the final solution, but it works.
Bug 320029. r=rrelyea,sr=julien.pierre.  On TRUNK.
 2006-01-19 02:16:30 +00:00
nelsonb%netscape.com 9e6bb5e04e Add new function nsslowcert_DecodeAnyDBEntry. Correct the union 
certDBEntry by adding the missing members. Bug 323570. r=rrelyea.
 2006-01-19 02:09:37 +00:00
nelsonb%netscape.com e601c1afd7 Softoken will no longer generate excessive key material for some SSL3 
cipher suites.  Bug 274512. r=rrelyea.
 2006-01-19 01:12:53 +00:00
wtchang%redhat.com feef0984c4 Bugzilla Bug 318217: use the new NSPR functions PR_EmulateAcceptRead and 
PR_EmulateSendFile added in NSPR 4.1.  r=nelsonb.
Modified files: manifest.mn sslimpl.h sslsock.c
Removed file: emulate.c
 2006-01-18 23:06:57 +00:00
julien.pierre.bugs%sun.com cf6fab0ce0 Fix for bug 319495 . Clean up Makefiles for command-line tools. r=nelson 2006-01-18 22:44:39 +00:00
wtchang%redhat.com 9cb00badbb Bugzilla Bug 317620: use "pwd -W" to convert $(DIST) to an absolute 
pathname (ABS_DIST) under MSYS on Windows.  We use the same method to
to define MOZ_BUILD_ROOT in configure.in.  The patch is contributed by
Chris Seawood <cls@seawood.org>.  r=wtc.
 2006-01-18 21:32:27 +00:00
wtchang%redhat.com bfb0b53c24 Bugzilla Bug 323379: need to set ADDON_PATH for libsoftokn3.so to load 
libfreebl3.so as an add-on on BeOS.  Thanks to Doug Shelton
<doug@sheltonfamily.org>for reporting the bug and verifying the fix.
r=christophe.ravel.
 2006-01-18 20:56:28 +00:00
rrelyea%redhat.com 129a80aa06 NSS ECDSA can only sign SHA-1 bug 320583 
r=nelson patch ammended to change SHA-1 to HASH per wtc comment.
 2006-01-17 00:38:59 +00:00
wtchang%redhat.com dbbc444239 Bugzilla Bug 317620: landed NSS 3.11 on the Mozilla trunk. The patch is 
contributed by Kai Engert <kengert@redhat.com>. r=wtc,bsmedberg.
Bugzilla Bug 288647: (security/manager/Makefile.in only) enable building
NSS with system NSPR.  The patch is contributed by Chris Seawood
<cls@seawood.org>.  r=wtc,kengert.
Modified Files:
	Makefile.in browser/installer/unix/config.it
	browser/installer/unix/packages-static
	browser/installer/windows/config.it
	browser/installer/windows/packages-static
	calendar/installer/windows/config.it
	calendar/installer/windows/packages-static
	camino/Camino.xcode/project.pbxproj
	embedding/config/basebrowser-installer-win.pkg
	embedding/config/basebrowser-mac-macho
	embedding/config/basebrowser-qnx
	embedding/config/basebrowser-unix
	embedding/config/basebrowser-win embedding/config/minimo-qnx
	embedding/config/minimo-unix mail/config/basemail-os2
	mail/config/basemail-unix mail/installer/windows/config.it
	mail/installer/windows/packages-static
	minimo/config/linux_package.sh security/manager/Makefile.in
	security/manager/psm.pkg toolkit/mozapps/installer/packager.mk
	xpinstall/packager/packages-os2
	xpinstall/packager/packages-static-unix
	xpinstall/packager/packages-static-win
	xpinstall/packager/packages-unix
	xpinstall/packager/unix/deliver.pl
	xpinstall/packager/win_mfcembed/config.it
	xpinstall/packager/windows/browser.jst
	xpinstall/packager/windows/config.it
	xulrunner/installer/mac/Makefile.in
 2006-01-13 18:09:32 +00:00
wtchang%redhat.com 0c4d029490 Bugzilla Bug 320497: indicate that we don't need an executable stack. 
r=wolfgang.rosenauer,jpierre.
Modified files: arcfour-amd64-gas.s mpi/mpi_amd64_gas.s
 2006-01-13 17:33:10 +00:00
wtchang%redhat.com 24734ea6fb Bugzilla Bug 317858: gcc on Linux/ppc doesn't recognize the -z defs linker 
flag, so we need to use -Wl to pass it to the linker. r=caillon.
 2006-01-13 17:24:13 +00:00
alexei.volkov.bugs%sun.com af798d22c0 HP and AIX cert extension tests failure fix. 2006-01-13 07:59:31 +00:00
wtchang%redhat.com 21d4070e16 Bugzilla Bug 323079: when libsoftoken and libssl load the freebl library, 
first try without resolving symlinks.  If we fail to load the library and
the pathname is a symbolic link, resolve the symbolic link and try again.
r=jpierre. sr=relyea.
 2006-01-12 23:46:31 +00:00
timeless%mozdev.org 0fb55318b1 Bug 106386 Correct misspellings in source code 
patch by philippuryear@gmail.com r=timeless rs=brendan
 2006-01-12 07:57:31 +00:00
alexei.volkov.bugs%sun.com c9cb870d39 cert extension test for 53229: certutil should not use gets(). julien:review+ 2006-01-12 01:09:03 +00:00
richm%stanfordalumni.org f84918ca40 remove svrcore-config 2006-01-12 00:49:35 +00:00
kaie%kuix.de b3f82a4693 Use a new IID for changed interface nsIX509CertDB2, supplemental checkin for bug 316710 
r=rrelyea
 2006-01-12 00:26:19 +00:00
timeless%mozdev.org 594e267b04 Bug 322429 nsICertPicker is misleading 
r=kaie sr=bz
 2006-01-11 08:29:49 +00:00
kaie%kuix.de adbdcdd41b bug 101996, temp file with guessable name used during p12 import. 
r=rrelyea
 2006-01-10 02:51:24 +00:00
kaie%kuix.de 8abb1782d1 bug 137506, Only internal token's keys can be exported 
Patch by Bob Relyea, r=kengert
 2006-01-10 02:29:25 +00:00
kaie%kuix.de b42c991d2e bug 149834, Enhance PSM speed by using new NSS API CERT_VerifyCertificateNow 
Patch by John G. Myers, r=kengert
 2006-01-10 02:14:04 +00:00
kaie%kuix.de ce2b34992a bug 316710, Land some generic crypto backend code, mostly cleanup, some small enhancements 
Patch by Bob Relyea, r=kengert
 2006-01-10 02:07:47 +00:00
richm%stanfordalumni.org d22a816ef4 added .spec file for building RPM - package is svrcore-devel - a script svrcore-config for getting cflag and ldflag information, and a .pc file for pkg-config 2006-01-06 18:02:35 +00:00
wtchang%redhat.com e43ae180d6 Bugzilla Bug 318968: fixed the build error with NSS_ENABLE_ECC unset. 
Modified files: Makefile fipstest.c
 2006-01-05 21:49:05 +00:00
wtchang%redhat.com 24416549b6 Bugzilla Bug 321865: added coreconf files for Solaris 11. The patch is 
contributed by Alfred Peng <alfred.peng@sun.com>. r=wtc.
Added files: SunOS5.11.mk SunOS5.11_i86pc.mk
 2006-01-03 23:02:11 +00:00
cbiesinger%web.de 8d81b8a6b6 Bug 321504 Remove unneeded uses of nsIDocumentLoader 
r+sr=bz
 2005-12-26 16:45:59 +00:00
kaie%kuix.de 66118848a4 bug 259031, Add support for displaying certificate extensions 
Patch contributed by Martin v. Loewis.
r=kengert/rrelyea/wtchang sr=shaver/rrelyea
 2005-12-25 21:09:45 +00:00
julien.pierre.bugs%sun.com 2b8116135c Fix the build busted by checkin for bug 318968 2005-12-23 03:14:36 +00:00
wtchang%redhat.com a9a0f1c1b2 Bugzilla Bug 318968: added FIPS ECDSA algorithm test. r=glen.beasley. 
Modified file: fipstest.c
Added file: ecdsa.sh
 2005-12-22 22:22:17 +00:00
wtchang%redhat.com 4102e295a8 Bugzilla Bug 318962: combined a PORT_Realloc and a memset call into an 
equivalent PORT_ZAlloc call.  r=glen.beasley.
 2005-12-22 22:19:03 +00:00
wtchang%redhat.com 7af58c4ead Bugzilla bug 318962: it is legal for PORT_Realloc(oldptr, 0) to return 
NULL, so that shouldn't be treated as a memory allocation failure.
 2005-12-22 01:39:17 +00:00
sandeep.konchady%sun.com f4d5ee03d0 Bugzilla bug: 320980. Updated common.c and upgraded the JSS version. 
sr=glen.beasley
 2005-12-21 18:39:24 +00:00
glen.beasley%sun.com 6392f0b284 318958 fixing c++/java comment to C 2005-12-21 00:29:44 +00:00
glen.beasley%sun.com 827078f238 318958 fixing Monte Carlo test r=Wan-Teh 2005-12-21 00:13:52 +00:00
glen.beasley%sun.com 0820769573 318962 buffer fix for SHA Monte Carlo tests r=wan-teh 2005-12-20 18:20:50 +00:00
kaie%kuix.de 722f8d77d8 trying to fix SUN bustage 2005-12-20 12:25:21 +00:00
kaie%kuix.de a66df9148e b=255408 Need to be able to build mozilla --with-system-nss 
r=wtc/bsmedberg
Note: patches for bugs 288647 and 317620 might be required before enabling this build feature works.
 2005-12-20 09:47:11 +00:00
wtchang%redhat.com 45db1b5756 Bugzilla Bug 317052: removed the obsolete file lib/base/whatnspr.c from 
CVS.  r=relyea.
Modified Files:
	base.h error.c manifest.mn
Removed Files:
	whatnspr.c
 2005-12-19 17:53:28 +00:00
wtchang%redhat.com 06b4fdda1a Bugzilla Bug 272484: code cleanup. keythi.h: remove the unused type 
definition of SEC_PKCS5KeyAndPassword.  p12d.c: We only need to set
p12dcx->currentASafeP7Dcx to NULL if it isn't NULL.  r=relyea.
Modified Files: cryptohi/keythi.h pkcs12/p12d.c
 2005-12-19 17:46:30 +00:00
nelsonb%netscape.com 19047568b5 Fix build. Remove c++ style declaration of loop control variables. 2005-12-17 01:03:12 +00:00
glen.beasley%sun.com 4e0681121a 318964 implement HMAC algorithm tests for FIPS 140-2 validation r=Wan-teh 2005-12-16 16:57:49 +00:00
rrelyea%redhat.com bb35ec1ad1 Mac fixes to ckfw. 2005-12-16 01:57:41 +00:00
rrelyea%redhat.com 901eacef3b Add support for the cryptoki crypto functions. This support is necessary for 
capi and mackey. r=kaie
 2005-12-16 00:48:02 +00:00
glen.beasley%sun.com 7020114b03 318962 Added FIPS 140-2 SHA tests and removed FIPS 140-1 SHA tests r=wan-teh 2005-12-15 18:50:52 +00:00
glen.beasley%sun.com f4a0a3492e 318962 Added FIPS 140-2 SHA tests and removed FIPS 140-1 SHA tests r=wan-teh 2005-12-15 18:47:20 +00:00
christophe.ravel.bugs%sun.com 196108d1d0 Current version is JSS 4.2.1 Beta. 2005-12-14 19:53:48 +00:00
wtchang%redhat.com 38037a473a Bugzilla Bug 320047: mp_to_unsigned/signed/fixlen_octets copies nothing to 
the buffer if the mp_int is zero. r=nelsonb.
 2005-12-14 02:18:35 +00:00
wtchang%redhat.com f8302eae78 Bugzilla Bug 236245: Updated NSS to "ECC Cipher Suites for TLS" draft 12 
plus upcoming revisions.  The patch is contributed by Douglas Stebila
of Sun Labs <douglas@stebila.ca>. r=wtc.
Modified Files:
	cmd/selfserv/selfserv.c cmd/strsclnt/strsclnt.c
	cmd/tstclnt/tstclnt.c cmd/vfyserv/vfyserv.c lib/ssl/ssl3con.c
	lib/ssl/ssl3ecc.c lib/ssl/ssl3prot.h lib/ssl/sslenum.c
	lib/ssl/sslimpl.h lib/ssl/sslinfo.c lib/ssl/sslproto.h
	lib/ssl/sslsock.c tests/ssl/ecssl.sh tests/ssl/ecsslauth.txt
	tests/ssl/ecsslcov.txt tests/ssl/ecsslstress.txt
	tests/ssl/ssl.sh
 2005-12-14 01:49:40 +00:00
glen.beasley%sun.com 2f95017a80 318958 removal of DES and Triple DES 140-1 code r=wan-teh 2005-12-14 01:19:11 +00:00
wtchang%redhat.com a74affdee9 Bugzilla Bug 320038: ecl/ecl-curve.h: removed unnecessary leading zero byte 
in the base point orders of curves K-233 and K-409.  ec.c: pad the private
key with leading zeros to the length of the base point order.
r=douglas.steblia.
 2005-12-13 22:31:34 +00:00
glen.beasley%sun.com d15a3a9c9f 318958 TDEA algorithm tests for FIPS 140-2 2005-12-09 16:55:53 +00:00
relyea%netscape.com 3bb8ee4f59 Initialize mpi data using mpi macros, not static data bug 319252 
r=douglas
 2005-12-08 23:22:26 +00:00
alexei.volkov.bugs%sun.com 3b330a9206 305028: make pretty print utility print hex data in case when data type was not recognized; rw+nelson 2005-12-05 23:09:38 +00:00
kaie%kuix.de 9de601126c Backing out patch for bug 259031, 
because of build failures on Windows.
 2005-12-02 23:45:53 +00:00
kaie%kuix.de 4dd943539a Trying to fix bustage from checkin for bug 259031. 2005-12-02 23:38:08 +00:00
kaie%kuix.de 25b467c367 Bug 220815, Non localisable strings in nsCertPicker.cpp and nsNSSIOLayer.cpp 
r=jgmyers, sr=shaver
 2005-12-02 23:08:44 +00:00
kaie%kuix.de 46d41e228b Bug 259031, Add support for displaying certificate extensions 
Patch provided by Martin v. Loewis
r=rrelyea r=kengert sr=shaver
 2005-12-02 22:29:14 +00:00
timeless%mozdev.org 158e9e119c Bug 299099 remove useless references to nsVoidArray 
r=kaie sr=bz
 2005-12-01 04:23:37 +00:00
gavin%gavinsharp.com df2160688a Bug 316302: remove extra whitespace from locales, and other minor fixes, patch by Hendrik Maryns <hendrik.maryns@uni-tuebingen.de>, r=bsmedberg for /mail, r=kaie for /security, r=mconnor for /toolkit 2005-11-30 03:52:11 +00:00
sandeep.konchady%sun.com d22f249725 Bugzilla bug: 318133 
Added synchronized block and isClosed for getInetAddress(),
getLocalAddress(), and getLocalPort(). sr=glen.beasley
 2005-11-29 22:40:28 +00:00
jst%mozilla.jstenback.com 7a5af690c6 Fixing bug 316794. Moving HandleDOMEvent() and Get/SetDocShell from nsIScriptGlobalObject to nsPIDOMWindow. r=mrbkap@gmail.com, sr=peterv@propagandism.org 2005-11-28 23:56:44 +00:00
relyea%netscape.com 5389c82af5 Bug 316925 
Key export does not work on tokens with non-sensitive keys that can't wrap.
r=kaie
 2005-11-24 00:40:14 +00:00
relyea%netscape.com d83eb37a5a Bug 129303 
NSS needs to expose interfaces to deal with multiple token sources of certs.

r=kaie
 2005-11-23 23:56:38 +00:00
relyea%netscape.com d6c2066d8b Bug 129303 NSS needs to expose interfaces to deal with multiple token sources of certs 
r=kaie
 2005-11-23 23:54:15 +00:00
sandeep.konchady%sun.com 5951cf6fc9 Bugzilla bug:310491 
Missed some System.exit(0) and reverted SigTest.java to original format.
sr=glen.beasley
 2005-11-23 23:40:26 +00:00
relyea%netscape.com 505a100fea PKCS #11 module to supply Access to the Mac OS X Keychain. 2005-11-23 23:04:08 +00:00
nelsonb%netscape.com 209e64fb65 Fix bug in MP_ALIGN macro that always truncated pointers to 32-bits, 
even on 64-bin platforms.  Bug 298630. r=rrelyea.
 2005-11-23 01:12:34 +00:00
relyea%netscape.com 2c47437c90 Weave patch: bug 298630 r=nelson 2005-11-22 07:16:43 +00:00
nelsonb%netscape.com a10b284613 Begin building mpcpucache.c. On Sun Studio platforms, build from two 
new .s files.  Bug 298630. r=rrelyea.
 2005-11-22 07:13:32 +00:00
christophe.ravel.bugs%sun.com 637ff91341 Turn NSS_BETA off for NSS 3.11 RC2. 
r+ Julien Pierre.
 2005-11-22 01:58:35 +00:00
christophe.ravel.bugs%sun.com 7ec492e5b4 Back to BETA flag on the trunk. 
r+ Julien Pierre
 2005-11-21 18:46:12 +00:00
christophe.ravel.bugs%sun.com de04f252bb Turn NSS_BETA to FALSE for NSS 3.11 RC. 
r+: Julien Pierre.
 2005-11-21 04:08:44 +00:00
alexei.volkov.bugs%sun.com cea5f015e0 53229: certutil should not use gets(); 
julien rv+; wan-teh sr+
 2005-11-20 01:46:59 +00:00
glen.beasley%sun.com f982ea1547 313798 AES and RC2 Mozilla-JSS fixes r=sandeep, sr=wan-teh 2005-11-19 00:20:53 +00:00
sandeep.konchady%sun.com 53bdf76ed3 Bugzilla id:314098 Modified JSS_VERSION to reflect 4.0200 for 4.2 and 
4.1001 for 4.10.1 when used in the constructor. Human readable values
will still be 4.2 or 4.10.1 sr=wtc
 2005-11-18 22:09:39 +00:00
christophe.ravel.bugs%sun.com d1149b4b8f 238319: Sun packages changes. 
RPM_RELEASE can be set from the command line.
 2005-11-18 21:52:41 +00:00
nelsonb%netscape.com 79b50a06c6 Initialize slot pointer in ssl3_HandleServerHello. Bug 311590. r=wtchang 2005-11-18 01:25:20 +00:00
nelsonb%netscape.com d5b6167e41 Restore binary compatilibity for old Fortezza cipher suites. 
Bug 316640. r-glen.beasley
 2005-11-18 01:21:22 +00:00
glen.beasley%sun.com bf4797dda1 311934 socket port values are hard coded in the tests sr=sandeepK 2005-11-17 18:34:31 +00:00
wtchang%redhat.com 869b60c32a Bugzilla Bug 292427: on Windows, search in $(DIST)/lib before $(DIST)/bin 
because in a Mozilla build $(DIST)/bin may contain old copies of the NSS
DLLs. r=relyea,jpierre.
 2005-11-16 02:17:36 +00:00
wtchang%redhat.com 77efc15b5a Upgraded to NSPR 4.6 and NSS 3.10.2. 2005-11-16 01:46:01 +00:00
relyea%netscape.com 31f296f5fc Handle nicknames on certificates. 
Fix bug where we weren't allocating enough space for wchar (wide, utf16, etc).
strings in ckcapi_UTF8ToWide().
 2005-11-16 01:17:25 +00:00
neil.williams%sun.com 9a4cfadbcd Bug 315135, pk12util -w <non-existent pwfile> causes seg fault. 
r=nelson
 2005-11-16 00:59:18 +00:00
wtchang%redhat.com 50bccfe11b Bugzilla bug 316594: print the value of the BUILD_OPT environment 
variable. r=sandeep.konchady. sr=glen.beasley.
 2005-11-16 00:01:32 +00:00
nelsonb%netscape.com 74b43d3995 Eliminate leak and heap buffer overrun. Bug 315994. r=julien, sr=rrelyea 2005-11-15 23:40:18 +00:00
julien.pierre.bugs%sun.com 2cc80666f0 fix for bug 316446 . -z defs option was included twice in linker line . r=nelson 2005-11-15 19:01:18 +00:00
wtchang%redhat.com 36c9d7bd15 Bugzilla Bug 312202: use the _32 tag in 32-bit HP-UX IPF builds. Use the 
$ORIGIN linker keyword when building shared libraries and executable
programs on HP-UX IPF. r=nelsonb.
Modified Files: coreconf/HP-UX.mk nss/cmd/platlibs.mk
 2005-11-15 18:19:18 +00:00
relyea%netscape.com dae1c89238 New pk11util scripts. 2005-11-15 01:53:44 +00:00
relyea%netscape.com fb32732d2d Add loops, conditionals and simple math. 2005-11-15 01:49:01 +00:00
julien.pierre.bugs%sun.com 4a998c5a80 Fix for bug 232604. don't open DBs in user's directory in shlibsign. r=nelson 2005-11-15 00:34:39 +00:00
gavin%gavinsharp.com 6a1d057ea0 Bug 251123, change "Signed by" in security tooltip to "Authenticated by", to be consistent and more correct, patch by kengert@redhat.com, r=beltzner, sr=dveditz 2005-11-15 00:17:16 +00:00
relyea%netscape.com b23c1197b0 Add r/w support. The Capi token can now: 
Import certs and keys.
  Delete certs and keys.
 2005-11-15 00:13:58 +00:00
gavin%gavinsharp.com 841566eabb Bug 251123: HTTPS lock icon does not explain mixed secure/non-encrypted icon when hovering, r=kaie+beltzner, sr=dveditz 2005-11-15 00:13:36 +00:00
sandeep.konchady%sun.com a74e685ab5 Bugzilla bug: 310491 
Added System.exit(0) and System.exit(1) where appropriate.  Also removed
references to deprecated code and deprecated the test SigTest.java. This
is now replaced by JCASigTest.java. sr=Glen.Beasley
 2005-11-14 23:23:13 +00:00
wtchang%redhat.com 0d2dca9ab7 Bugzilla Bug 315496: expose the ability to create sensitive or insensitve 
symmetric keys and public/private key pairs.  The patch is contributed by
Thomas Kwan of Red Hat. r=wtc. sr=glen.beasley.
Modified Files:
	org/mozilla/jss/crypto/KeyGenerator.java
	org/mozilla/jss/crypto/KeyPairGenerator.java
	org/mozilla/jss/crypto/KeyPairGeneratorSpi.java
	org/mozilla/jss/pkcs11/PK11KeyGenerator.c
	org/mozilla/jss/pkcs11/PK11KeyGenerator.java
	org/mozilla/jss/pkcs11/PK11KeyPairGenerator.c
	org/mozilla/jss/pkcs11/PK11KeyPairGenerator.java
 2005-11-14 22:15:06 +00:00
sandeep.konchady%sun.com fc06e58741 Bugzilla bug: 314098 
Rounding of double(4) + double(1)/10 to two decimal places gives 4.21.
Fixed this issue.  sr=glen.beasley
 2005-11-14 21:37:32 +00:00
dbaron%dbaron.org 8e1263ab28 Make PL_InitEvent callers stop doing potentially dangerous casting of function pointers. b=305278 r=dougt sr=darin 2005-11-14 20:09:51 +00:00
julien.pierre.bugs%sun.com 23746dd145 Fix for bug 316250. crmftest doesn't build on OS/2. Add LIB_PREFIX . 2005-11-14 00:17:21 +00:00
julien.pierre.bugs%sun.com 0f242e9190 Fix for bug 316219. Don't build an import library on OS/2. r=wtchang 2005-11-14 00:13:41 +00:00
julien.pierre.bugs%sun.com 3166b5b213 Fix for bug 286685. rename SFTK symbols to SECMOD. r=rrelyea, nelson 2005-11-12 00:14:25 +00:00
julien.pierre.bugs%sun.com 77bd7f02b5 Fix for bug 286685. rename SFTK symbols to SECMOD. r=rrelyea, nelson 2005-11-11 23:36:33 +00:00
bsmedberg%covad.net dff1dea638 Bug 313309 part 2 - change the NS_DEFINE_STATIC_IID_ACCESSOR macro to NS_DECLARE, and make a NS_DEFINE_ macro that's outside the class declaration, r=shaver 2005-11-11 14:36:26 +00:00
kaie%kuix.de a9161eb2ac bug 265991, Can't import a pfx file encrypted with an empty password 
r=wtchang, sr=dveditz
 2005-11-11 13:28:56 +00:00
julien.pierre.bugs%sun.com fc7b9a9d6d Fix for bug 315033 . Remove dead command-line tool sources. r=nelson 2005-11-11 04:02:16 +00:00
julien.pierre.bugs%sun.com b43fd37a3d Fix for 292156. Prevent crash in SSL session cache init if invalid arguments are passed. r=nelson 2005-11-11 02:45:59 +00:00
julien.pierre.bugs%sun.com 4c5dd38fa9 Fix for bug 292156. Add -C SSLCacheEntries option to selfserv. r=nelson 2005-11-11 02:44:56 +00:00
julien.pierre.bugs%sun.com 034706090e Fix for 166727 . certutil should not call CERT_GetDBContentVersion. r=nelson 2005-11-10 21:18:26 +00:00
julien.pierre.bugs%sun.com 27ffe0dd6a Remove dead config.mk files for modutil and ssltap. Fix for 294720. r=nelson 2005-11-10 03:00:05 +00:00
julien.pierre.bugs%sun.com 8c4c16a46f Resolve symlinks when loader freebl shared libs, and limit iterations to 20. r=wtchang 2005-11-10 02:18:22 +00:00
kaie%kuix.de b5eca84a79 bug 126601, "Web" should be "web" in Master Password pref panel 
patch by Henrik Lynggaard Hansen, working change only, r=brendan, r=kengert
 2005-11-09 15:32:24 +00:00
wtchang%redhat.com 67dd7124b0 Bugzilla Bug 311432: renamed USE_FP_CODE as ECL_USE_FP. Do not set 
ECL_USE_FP to 1 on Linux x86 to work around the bug.  Moved a dependency
rule to the appropriate section of the makefile. r=nelsonb.
 2005-11-08 22:03:17 +00:00
wtchang%redhat.com c6ec74b2bd Improved a comment. Suggested by Nelson Bolyard of Sun. r=wtc. 2005-11-08 22:00:46 +00:00
kaie%kuix.de 97cff058db bug 200119, crash when I shutdown (StopCRLUpdateTimer) [@ nsHashtable::Reset ] 
r=darin, sr=bienvenu
 2005-11-08 17:49:52 +00:00
alexei.volkov.bugs%sun.com 40e89ae3ab fix for 313680: add missing TLS cipher types to SSLTAP. r=nelson 2005-11-07 23:54:33 +00:00
christophe.ravel.bugs%sun.com 3a519f40a2 238319: Sun packages changes 
Set rpm release to 2 for NSS 3.11
 2005-11-07 20:20:10 +00:00
christophe.ravel.bugs%sun.com 8cbb2973a9 238319: Sun packages changes 
Reset rpm release to 1 for JSS 4.2
 2005-11-07 20:19:05 +00:00
wtchang%redhat.com 16471390c4 Bugzilla Bug 298522: added power-up self tests for HMAC SHA-384 and HMAC 
SHA-512.  The patch was written by Glen Beasley of Sun. r=wtc.
 2005-11-07 19:05:45 +00:00
wtchang%redhat.com 402c5fce34 Bugzilla bug 313196: include the minimal headers. 2005-11-07 19:00:58 +00:00
wtchang%redhat.com 62c2120244 Bugzilla Bug 313196: checked in a header inclusion change that I missed in 
the previous checkin.
 2005-11-07 18:48:39 +00:00
wtchang%redhat.com bccb80f1c9 Bugzilla Bug 313196: HMAC code should not use a fixed hash input block size 
of 64 bytes, which is wrong for SHA-384 and SHA-512.  This requires adding
the hash input block size to the SECHashObject structure. r=relyea,nelsonb
Modified Files:
	cryptohi/hasht.h cryptohi/sechash.c freebl/alghmac.c
	freebl/blapit.h freebl/rawhash.c
 2005-11-07 18:44:21 +00:00
wtchang%redhat.com f8d339ea35 Replaced the magic constant 20 by SHA1_LENGTH. Use sizeof(buffer) to 
be more robust. r=nelsonb
 2005-11-05 01:00:14 +00:00
relyea%netscape.com a94c630a38 replace missing header files. 2005-11-04 23:44:19 +00:00
glen.beasley%sun.com 641ae26c85 313176 jss version 4.2 because JSS needs NSS 3.11 and up for bypass sr=sandeep 2005-11-04 23:16:43 +00:00
wtchang%redhat.com 3ef095214d Bugzilla Bug 311958: Update the nssckbi versions for NSS 3.11. r=relyea. 2005-11-04 22:51:55 +00:00
julien.pierre.bugs%sun.com f322685ad8 Move ret_cr16.s from util to freebl. r=nelsonb 2005-11-04 04:11:04 +00:00
relyea%netscape.com 624b78a677 Initial CAPI PKCS #11 Module. 
Needs the updated ckfw.
 2005-11-04 02:05:04 +00:00
wtchang%redhat.com bf1f22d59c Bugzilla Bug 298512: Ensure the seed and seed key input for RNG do not have 
same value for FIPS 140-2. r=nelsonb.
 2005-11-04 01:07:30 +00:00
julien.pierre.bugs%sun.com 97b61a9ea6 Remove dead files. r=wtchang 2005-11-04 01:02:50 +00:00
julien.pierre.bugs%sun.com 58312a336d Remove nmake Makefiles and references to them. r=nelson 2005-11-04 01:01:37 +00:00
julien.pierre.bugs%sun.com 82076672d5 Remove dead files. r=wtchang 2005-11-04 00:48:41 +00:00
glen.beasley%sun.com d815f7cf12 311934 added PORT_JSSE_SERVER and PORT_JSSE_SERVER plus testing bypass r=sandeep 2005-11-03 23:30:38 +00:00
glen.beasley%sun.com 0f4039e012 313176 allow JSS to enable more NSS SSLOptions r=wtc, sr=nelson 2005-11-03 23:09:26 +00:00
kaie%kuix.de 689c90bc99 fix bug 252436, non-ascii characters not recognized by master password dialog 
r=dbaron, sr=shaver
 2005-11-03 11:25:53 +00:00
sandeep.konchady%sun.com bf76f2aab1 Bugzilla id: 314583, removed linking of JVM to JSS library and replaced 
reference to classes.zip with rt.jar.
 2005-11-03 00:11:59 +00:00
bsmedberg%covad.net b4be330175 Bug 314821 - stop building dist/gre because nobody uses it and all plans to use it have evaporated, r=cls+dougt 2005-11-02 21:50:36 +00:00
wtchang%redhat.com 8ad396e8b9 Import NSPR 4.6 and NSS 3.10.2 temporarily. We will import NSPR 4.6.1 
and NSS 3.11 when they are released.
 2005-11-01 19:00:12 +00:00
wtchang%redhat.com e58a8fe88b Bugzilla Bug 308242: expose the opFlags and the temporary/permanent 
attributes of PK11_TokenKeyGenWithFlags. r=glen.beasley.
Modified Files:
	crypto/KeyGenerator.java crypto/SymmetricKey.java
	pkcs11/PK11KeyGenerator.c pkcs11/PK11KeyGenerator.java
 2005-11-01 18:38:47 +00:00
julien.pierre.bugs%sun.com e9b3d77725 Fix for 314115 . Comments about QuickDER and classic ASN.1 decoders relating to SECItem.type field 2005-10-31 18:52:20 +00:00
julien.pierre.bugs%sun.com b7643ddac3 Fix for 314115 - QuickDER modifies SECItem.type while decoding. r=wtchang 2005-10-31 18:34:42 +00:00
neil%parkwaycc.co.uk bd65f6edd5 Bug 289444 Adding access keys p=giacomo.magnini@portalis.it r=kaie sr=me 2005-10-30 11:21:44 +00:00
sandeep.konchady%sun.com 54fc46b257 Bugzila bug : 314098 Changed Double to Double.doubleValue() in constructing java.Security.Provider(). sr=wtc 2005-10-28 22:22:44 +00:00
cvshook%sicking.cc 9c1b72f7f8 Bug 311827: Make GetAttr return a bool rather then an nsresult. 
r/sr=bz
 2005-10-28 11:25:24 +00:00
sandeep.konchady%sun.com 0d11c9e874 Bugzilla bug : 314098. Modified JSS provider version to 4.1.1 in 
JSSProvider.java. Reflected this information in all places that needs
to be changed when there is a change in JSS version. r=wtc
 2005-10-28 04:21:16 +00:00
wtchang%redhat.com e955d37c8b Bugzilla bug 314089: On HP-UX, use rt.jar instead of classes.zip; for JDK 
1.4 or later use the "server" JVM.  Fixed an error in the pathname of
rt.jar for Linux. r=sandeep.konchady.
 2005-10-28 00:20:38 +00:00
wtchang%redhat.com 151cfa866e Bugzilla Bug 302212: set DARWIN_SDK_DSOFLAGS and pass -F arguments to ld 
when GCC <= 3.  Contributed by Mark Mentovai <mark@moxienet.com>. r=wtc.
 2005-10-28 00:06:56 +00:00
wtchang%redhat.com 9f00787971 Bugzilla bug 239960: cvs removed cmd/swfort. r=relyea. 2005-10-27 22:49:22 +00:00
wtchang%redhat.com ec848a59a1 Bugzilla Bug 308242: added the extractablePairs method to KeyPairGenerator 
to make the new PK11_ATTR_EXTRACTABLE/PK11_ATTR_UNEXTRACTABLE flags of the
new PK11_GenerateKeyPairWithFlags function available to JSS.  r=nkwan.
sr=glen.beasley.
Modified Files:
        crypto/KeyPairGenerator.java crypto/KeyPairGeneratorSpi.java
        pkcs11/PK11KeyPairGenerator.c pkcs11/PK11KeyPairGenerator.java
 2005-10-27 20:47:26 +00:00
wtchang%redhat.com 6bb2f4c9a4 Bugzilla Bug 302212: allow Mac OS X x86 builds to target SDKs. The patch 
was written by Mark Mentovai <mark@moxienet.com>. r=joshmoz. sr=bryner.
Modified Files:
	configure.in config/autoconf.mk.in config/config.mk
	extensions/java/xpcom/tools/xpidl/Makefile.in
	security/manager/Makefile.in xpcom/typelib/xpidl/Makefile.in
 2005-10-26 19:01:18 +00:00
wtchang%redhat.com d0fa45f6e1 Bugzilla Bug 302212: allow Mac OS X x86 builds to target SDKs. The patch 
is contributed by Mark Mentovai <mark@moxienet.com>. r=wtc,joshmoz.
 2005-10-26 17:00:07 +00:00
darin%meer.net 9b02f81647 fixes bug 271194 "When going from a secure to a non-secure page without clicking a button in the security dialog, the non-secure page appears as secure" patch by kai, r=dveditz, sr=darin 2005-10-21 18:33:26 +00:00
wtchang%redhat.com 2982dcd8d0 Bugzilla bug 298522: added power-up self tests for HMAC SHA-1 and HMAC 
SHA-256.  The patch is contributed by Glen Beasley of Sun. r=wtc.
 2005-10-20 21:46:51 +00:00
wtchang%redhat.com 63680b1e17 Bugzilla bug 312774: support building and running the test with IBM JDK. 
Removed the class name and provider name of the SUN provider.  Instead,
we compare our message digest result with the result of all providers that
support the message digest algorithm.  The patch is contributed by Rich
Megginson of Red Hat and improved by Glen Beasley of Sun. r=wtc.
 2005-10-19 01:17:44 +00:00
wtchang%redhat.com f1989d462e Build fipstest. 2005-10-19 01:14:20 +00:00
julien.pierre.bugs%sun.com 1074e8d40b Add dependency on freebl so ssl will rebuild if freebl has changed. 2005-10-19 01:04:16 +00:00
julien.pierre.bugs%sun.com 4b3046e544 Add dependency on freebl so softoken will rebuild if freebl has changed. 2005-10-19 01:03:31 +00:00
wtchang%redhat.com c550139189 Added a shell script for running the NIST AES Algorithm Validation Suite. 2005-10-19 00:55:20 +00:00
wtchang%redhat.com 26fa27cb5e Bugzilla bug 312774: support building with IBM JDK on Linux. Added -L 
linker flags for IBM JDK's pathnames.  The patch is contributed by Rich
Megginson of Red Hat. r=wtc,glen.beasley.
 2005-10-18 22:36:19 +00:00
darin%meer.net 4af416f017 fixes bug 304286 "Certificate failures during automatic check for updates should not give user choice to connect anyway" r=biesi sr=dveditz 2005-10-15 02:46:06 +00:00
wtchang%redhat.com 3cc2568dbc Bugzilla Bug 312395: Added FIPS AES Known Answer Test, Multi-block Message 
Test, and Monte Carlo Test in ECB and CBC modes.  Also changed the types
of some variables from int to unsigned int to fix compiler warnings about
signed/unsigned comparisons.
 2005-10-14 20:04:39 +00:00
wtchang%redhat.com f1ab1aa413 Bugzilla bug 311440: ssl3_ConsumeHandshakeVariable now longer returns a 
SECItem pointing to memory allocated with PORT_Alloc, so we don't need to
use PORT_Free to free the SECItem's buffer.  r=nelsonb.
 2005-10-14 16:48:58 +00:00
wtchang%redhat.com e43c3ce2ce Bugzilla Bug 312202: checked in HP-UX IPF (Itanium) porting changes 
contributed by Grace Lu of HP.  Use the .so suffix for shared libraries
on HP-UX IPF.  Support building on HP-UX B.11.23. r=wtc.
Modified Files:
	coreconf/HP-UX.mk nss/lib/nss/nssinit.c
Added Files:
	coreconf/HP-UXB.11.23.mk
 2005-10-12 19:04:13 +00:00
wtchang%redhat.com e853dbd1aa Bugzilla Bug 302998: disallow x=0,1 and k=0. r=nelsonb. 2005-10-12 00:48:25 +00:00
neil.williams%sun.com e900e4197d CBug 290263, patch CERT_CreateCertificateRequest for doing extensions 
r=bob
`VS: ----------------------------------------------------------------------
 2005-10-12 00:10:17 +00:00
wtchang%redhat.com f71abec372 Bugzilla Bug 311074: cvs removed the unused nfspwd.pl script (which only 
worked on the old Netscape intranet). r=relyea.
Modified Files: OS2.mk command.mk rules.mk
Removed Files: nsinstall/nfspwd nsinstall/nfspwd.pl
 2005-10-10 23:46:13 +00:00
relyea%netscape.com 0999eacfac Attempt to fix HPUX test failures. 
Bug 311279 crmftest core dumps on HP-UX
(verbal) r=wtc
 2005-10-08 00:57:31 +00:00
wtchang%redhat.com f0ecbc1907 Bugzilla Bug 304360: generate ECC key with private key value less than the 
group order using a combination of ANSI X9.62 A.4.1 and FIPS 186-2 Change
Notice 1.  Also changed structure of EC key generation functions to match
the scheme used in dsa.c.  The patch is contributed by Douglas Stebila
<douglas@stebila.ca> of Sun Labs. r=wtc.
 2005-10-06 23:16:20 +00:00
wtchang%redhat.com 137ae27c40 Bugzilla Bug 257693: set the correct error code in EC_ValidatePublicKey. 
Documented the return values of ECPoint_validate.  Have the tests compare
the return value of ECPoint_validate with MP_NO for negative test cases.
r=doublas.stebila.
Modified Files:
	ec.c ecl/ecl.h ecl/tests/ec2_test.c ecl/tests/ecp_test.c
 2005-10-06 21:42:55 +00:00
wtchang%redhat.com 106649493f Bugzilla Bug 311074: removed the unused nfspwd Perl script from TARGETS, 
which caused "gmake clean" to break on a read-only source tree.  The patch
is contributed by Benjamin Smedberg <benjamin@smedbergs.us>. r=wtc.
 2005-10-05 22:25:37 +00:00
wtchang%redhat.com f1c1c9ff83 Bugzilla bug 259135: fixed build breakage. In C, declarations must precede 
code.
 2005-10-05 22:03:14 +00:00
wtchang%redhat.com a2a6f7d5d0 Bugzilla bug 259135: minor comment fix. 2005-10-05 17:58:01 +00:00
glen.beasley%sun.com ec898fad19 171027 removed deprecated code from tests ran by all.pl sr=sandeep 2005-10-05 17:09:03 +00:00
glen.beasley%sun.com ce927b8172 259135 added SHA 256,384,512 and AES powerupself tests sr=Wan-Teh 2005-10-05 16:31:01 +00:00
relyea%netscape.com 3f0a5a238f Back out non-reviewed strictly white space change in pk11sdr.c 2005-10-04 01:11:01 +00:00
wtchang%redhat.com cf9da5e041 Made the test compile and link without errors. 2005-10-04 00:46:50 +00:00
wtchang%redhat.com c37177be01 Fixed test file line endings. This file must be considered part of the 
NSS module because it needs the private NSS header blapi.h.
 2005-10-04 00:35:51 +00:00
wtchang%redhat.com 36b838d2de Fixed test file line endings. 2005-10-04 00:28:55 +00:00
wtchang%redhat.com 42340d8d1f Bugzilla bug 310518: map CKR_PIN_INVALID and CKR_PIN_LEN_RANGE to 
SEC_ERROR_INVALID_PASSWORD instead of SEC_ERROR_BAD_PASSWORD. r=relyea.
 2005-10-03 22:41:45 +00:00
relyea%netscape.com 017d2e48a7 remove depricated mechanisms so pk11table continues to build. 2005-10-03 22:19:43 +00:00
relyea%netscape.com c498db1b4e Bug 272484 Certificate manager crashes [@ _PR_MD_ATOMIC_DECREMENT - PK11_FreeSymKey] 
r=wtc [part 3 of 3]
 2005-10-03 22:01:57 +00:00
relyea%netscape.com 383e05c9b6 Bug 272484 Certificate manager crashes [@ _PR_MD_ATOMIC_DECREMENT - PK11_FreeSymKey] 
r=wtc [part 2 of 3]
 2005-10-03 22:00:22 +00:00
relyea%netscape.com 1dbbf4afca This change was not part of bug 272484 and has not been reviewed. 
Back it out.
 2005-10-03 21:58:24 +00:00
relyea%netscape.com aacba3b4b3 Bug 272484 Certificate manager crashes [@ _PR_MD_ATOMIC_DECREMENT - PK11_FreeSymKey] 
The problem only happens if we try to import a key into a token which then fails
to import. The basic issue was a hack in the pkcs 7 code to support PKCS 12, A
special structure was used to replace the SymKey structure, and the code 'knew'
the special structure existed before it dealt with the symkey. The fix addes a
new capability to symkeys, where applications can attach application specific
data to the key structure. PKCS 12 uses this to attache the PBE information
for CMS. (part 1 of 3)

This patch also improves the key's reuse of sessions, so sessions are not thrashed
when SSL is used with them.

r=wtc
 2005-10-03 21:55:29 +00:00
bugzilla%arlen.demon.co.uk 7e9cc2edcf Bug 309542 Fix a11y problems and crop="right" is deprecated in page info dialog 
p=me r=db48x sr=neil.parkwaycc.co.uk
 2005-10-02 00:09:37 +00:00
wtchang%redhat.com 7cdc2237f9 Bugzilla Bug 294106: removed an assertion that's no longer necessary. 
Added buffer length error checking to back up an assertion. r=nelsonb.
 2005-09-30 22:01:46 +00:00
relyea%netscape.com ca331d0f84 Bugzilla Bug 244922 ASN.1 encoder outputs trash for optional may-stream subtemplate 
r=nelson (original patch by nelson, modifications by me).
 2005-09-30 19:22:48 +00:00
christophe.ravel.bugs%sun.com ab4bcd2e06 238319: Sun packages changes. 
Add an extra line to the copyright file to have the same as NSS and NSPR.
 2005-09-30 01:56:59 +00:00
relyea%netscape.com b8ff00fa4d Bug 119500 PKCS#11 CKF_PROTECTED_AUTHENTICATION_PATH token flag not supported 
wtc's review r=wtc
 2005-09-29 23:44:39 +00:00
wtchang%redhat.com b5dad5e71d Bugzilla Bug 294106: dsa.c: use const in the function prototype of 
DSA_GenerateGlobalRandomBytes.  prng_fips1861.c: implemented Algorithm 1
of FIPS 186-2 Change Notice 1 and increased the size (b) of the RNG's
seed-key from 160 bits to 256 bits. r=relyea,nelsonb.
 2005-09-29 23:22:53 +00:00
relyea%netscape.com f07d043fa0 Tests won't pass if we don't build crmftest 2005-09-29 22:01:52 +00:00
relyea%netscape.com f7650e2dfd Bug 308887 CRMF request generation problem when using latest firefox 
Add crmf tests to the test suite.
 2005-09-29 21:36:42 +00:00
relyea%netscape.com bb4e6de04d Bugzilla Bug 119500 PKCS#11 CKF_PROTECTED_AUTHENTICATION_PATH token flag not supported 
r=nelson

This is only the NSS portion of this patch. The PSM portion will be checked in once the
NSS portion is mainlined to mozilla.
 2005-09-29 21:00:58 +00:00
sandeep.konchady%sun.com 7b66c63352 Bugzilla Bug 164692 SSL ops that timeout should throw 
java.net.SocketTimeoutException. sr=Glen.Beasley
 2005-09-29 18:48:34 +00:00
wtchang%redhat.com 5ca23c5ac1 Bug 271317, remove the old fortezza code 2005-09-29 18:09:11 +00:00
relyea%netscape.com 0c257cc408 Bugzilla Bug 298630 freebl needs a memory cache invariant RSA implementation. 
r=nelson
 2005-09-29 17:17:09 +00:00
relyea%netscape.com 9f3f33c4d8 Add better tests for detached signatures. Actually test the other sha 
variants rather than just say we do. done in the context of bug 30887
r=nelson
 2005-09-29 17:14:19 +00:00
smontagu%smontagu.org 3d845c1f73 Make the dates shown in the Expired Certificate alert have consistent (short) format. Bug 246905, patch by Constantine A. Murenin <cnst+bmo@bugmail.mojo.ru>, r=jgmyers, sr=brendan 2005-09-29 08:41:22 +00:00
relyea%netscape.com ab65fadf87 Bug 271317, remove the old fortezza code 2005-09-29 00:36:53 +00:00
relyea%netscape.com 6bae625be5 Internal NSS defines shared between softoken and the rest of NSS, but not 
exported.

added as part of bug 305697.
 2005-09-28 23:52:59 +00:00
wtchang%redhat.com c641f2799f Bugzilla Bug 310336: support building on Windows Server 2003. 
r=Sandeep.Konchady.
 2005-09-28 23:14:44 +00:00
relyea%netscape.com d8e2256322 Bug 305697 Softoken needs to give on the fly access to additional databases. Part 2, User interface 
r=julien
 2005-09-28 17:17:49 +00:00
relyea%netscape.com 73c2c7913b bug 305697: open additional database on the fly in softoken. part1: softoken changes. 
r=julien
 2005-09-28 17:12:17 +00:00
nelsonb%netscape.com 9d1b27d77f Avoid NULL ptr deref. Bug 310260. patch by Glen.Beasley. r=nelson. 2005-09-28 07:55:37 +00:00
wtchang%redhat.com c12e2be57c Bugzilla bug 298045: when importing a package of CA certs, display and ask 
the user to trust the root most CA (instead of the leaf most CA) in the
package.  Also make sure that the cert is indeed a CA cert.  r=kaie,relyea.
sr=sfraser.
 2005-09-26 22:43:22 +00:00
neil.williams%sun.com f21769892b Bug 303508, committing attachment 196965. r=nelson,saul 2005-09-23 02:15:03 +00:00
nelsonb%netscape.com 1be2e6565e Eliminate environment variable SSLNOLOCKS, add environment variable 
SSLFORCELOCKS. Make SSL_FDX option mutually exclusive with SSL_NOLOCKS
option.  Bug 305147. r=rrelyea.
 2005-09-23 01:04:32 +00:00
nelsonb%netscape.com 392492409b Don't crash when printing an ASN.1 NULL primitive with a NULL prefix 
string.  Bug 309651. r=wtchang.
 2005-09-22 22:45:32 +00:00
wtchang%redhat.com cc926643d7 Bugzilla bug 309640: replaced the French accented a (�) with ASCII a 
because IBM JDK can't handle that 8-bit character in UTF8 locales.  The
patch is contributed by Rich Megginson of Red Hat. r=wtc,glen.beasley.
 2005-09-22 17:58:35 +00:00
christophe.ravel.bugs%sun.com c06cbabaf1 Unset Beta flag to sync up JSS 4.1.1 RTM with NSS 3.10.2 RTM build date. 2005-09-21 21:06:54 +00:00
nelsonb%netscape.com 984c14b592 Add version info to freebl shared libs for Windows and Unix. bub 303508. 
Modified Files:  config.mk ldvector.c manifest.mn
Added Files:     freebl.rc freeblver.c                 r=wtc.
 2005-09-21 03:01:49 +00:00
nelsonb%netscape.com 8e90b38bb0 Replace "fast" and "slow" with fpu and int in loader.c. Also add a 
comment explaining ISA lists.  r=wtc. bug 303508.
 2005-09-21 02:53:25 +00:00
wtchang%redhat.com 5a7a4f41b6 Bug 299197: added the comment for PK11_TokenKeyGen back. r=relyea. 2005-09-21 01:32:11 +00:00
wtchang%redhat.com e6c2b3be72 Bug 299197: fixed comments. r=relyea. 2005-09-21 01:31:37 +00:00
db48x%yahoo.com 8fd73066f5 fix bug 217611: Page Info can be opened multiple times 
patch by Jason Barnabe (np) <jason_barnabe@fastmail.fm>, r=mconnor
 2005-09-21 01:12:29 +00:00
relyea%netscape.com 6745cd57ef Only call C_WaitForSlotEvent if the module is PKCS #11 v2.01 or later. 
bug 196811 r=wtc sr=julien
 2005-09-20 20:56:07 +00:00
julien.pierre.bugs%sun.com bc02bfe07d Fix for 293686. Check status from SECU_ParseCommandLine. r=nelson 2005-09-20 05:13:01 +00:00
julien.pierre.bugs%sun.com 2bd2306d6c Fix for 292390. NSS tools with missing command-line operands cause crash. r=nelson 2005-09-19 20:59:46 +00:00
julien.pierre.bugs%sun.com 83ceb87c51 Fix for 293686 . signver has command-line options with optional arguments. r=nelsonb 2005-09-19 20:52:11 +00:00
christophe.ravel.bugs%sun.com 3241563dc1 238319: Sun packages changes. 
Change libfreebl name on Solaris x86 (following changes from Bugzilla 303508).
 2005-09-19 19:12:24 +00:00
bzbarsky%mit.edu a567b0b7d9 Only do expensive GetName() calls if we're actually logging. Bug 304847, 
r=kaie, sr=dmose
 2005-09-19 03:23:21 +00:00
cst%andrew.cmu.edu e7338f0a91 Bug 284636 Fix typo in Website Certified by an Unknown Authority alert 
Patch by stephend and Kurt <supernova_00@yahoo.com> r=kaie sr=bzbarsky
 2005-09-19 00:05:02 +00:00
wtchang%redhat.com ad39a7ded6 Bugzilla bug 303508: a more elegant way to decide when we need to prefix 
LIBRARY_VERSION with '_'. r=nelsonb.
 2005-09-16 23:18:01 +00:00
julien.pierre.bugs%sun.com c9cc74edbc Fix hoarked build from previous checkin. Doh. 2005-09-16 21:28:20 +00:00
wtchang%redhat.com 976c2df41a Bugzilla Bug 298517: when in FIPS mode, impose minimum password length and 
quality to ensure a password guessing probability of less than 1 in
10,000,000, and impose a one second delay after failed login attempt to
allow at most 60 login attempts per minute.  r=relyea,nelsonb.
Modified files: fipstokn.c pkcs11.c pkcs11i.h
 2005-09-16 20:37:58 +00:00
julien.pierre.bugs%sun.com 34f69db6a3 Fix for bug 127960 . Add SSL force handshake APIs which take a timeout . r=nelson 2005-09-16 20:33:09 +00:00
smfr%smfr.org 3d76d4e597 Fix bug 307293: make sure we initialize the mType and mTag members of nsNSSASN1Object. r=wtchang, sr=rrelyea. 2005-09-16 18:57:55 +00:00
wtchang%redhat.com 3e13aeb576 Bugzilla Bug 288728: handle invalid values of recipient identifier type. 
r=jpierre,relyea.
 2005-09-16 17:54:31 +00:00
wtchang%redhat.com fce7dd3516 Bugzilla Bug 288728: use a whitelist instead of a blacklist when checking 
for invalid values of "type". r=jpierre,relyea.
 2005-09-16 17:52:37 +00:00
wtchang%redhat.com c1d23a672f Bugzilla Bug 303508: removed the underscore from the name of the "single" 
freebl shared library (freebl_3.dll -> freebl3.dll).  Do the recursive
child builds without changing directories.  This fixed the BUILD_TREE build
problem. r=nelsonb,saul.edwards.
Modified files: Makefile freebl.def manifest.mn
 2005-09-16 17:17:45 +00:00
wtchang%redhat.com ef4eb9a0e4 Bugzilla Bug 303508: enhanced the makefile rule for $(MAPFILE). Added 
the new variable MAPFILE_SOURCE instead of the hardcoded
$(LIBRARY_NAME).def to represent the "source" mapfile, and use $< to
refer to the "source" mapfile (prerequisite of the target) in
PROCESS_MAP_FILE. r=nelsonb.
Modified Files:
	AIX.mk BSD_OS.mk Darwin.mk FreeBSD.mk HP-UX.mk IRIX.mk
	Linux.mk Linux2.1.mk Linux2.2.mk Linux2.4.mk Linux2.5.mk
	Linux2.6.mk NCR3.0.mk NEC4.2.mk NetBSD.mk OS2.mk OSF1.mk
	OpenUNIX.mk OpenVMS.mk ReliantUNIX.mk SCO_SV3.2.mk SunOS5.mk
	UNIXWARE2.1.mk WIN16.mk WIN32.mk WINCE.mk rules.mk ruleset.mk
 2005-09-16 17:09:23 +00:00
wtchang%redhat.com b11dc01e94 Removed an unnecessary -L linker flag. r=nelsonb,saul.edwards. 2005-09-16 17:02:49 +00:00
wtchang%redhat.com 267dd6e80f Bugzilla Bug 303508: code cleanup. r=nelsonb,jpierre. 2005-09-16 16:59:22 +00:00
sandeep.konchady%sun.com 4bb21db05f Modified import.pl, jdk.mk and release.pl under coreconf and all.pl under 
jss test directory for bug #302550.  Attached below is the diff of the
changes done to these files.

Index: coreconf/import.pl
===================================================================
RCS file: /cvsroot/mozilla/security/coreconf/import.pl,v
retrieving revision 1.2
diff -u -r1.2 import.pl
--- coreconf/import.pl  25 Apr 2004 15:02:17 -0000      1.2
+++ coreconf/import.pl  15 Sep 2005 18:37:51 -0000
@@ -46,7 +46,6 @@

 #######-- read in variables on command line into %var

-$var{ZIP} = "zip";
 $var{UNZIP} = "unzip -o";

 &parse_argv;
Index: coreconf/jdk.mk
===================================================================
RCS file: /cvsroot/mozilla/security/coreconf/jdk.mk,v
retrieving revision 1.14
diff -u -r1.14 jdk.mk
--- coreconf/jdk.mk     25 Apr 2004 15:02:17 -0000      1.14
+++ coreconf/jdk.mk     15 Sep 2005 18:37:52 -0000
@@ -123,14 +123,14 @@

 # set [Sun Solaris] platforms
 ifeq ($(OS_ARCH), SunOS)
-       JAVA_CLASSES = $(JAVA_HOME)/lib/classes.zip
+       JAVA_CLASSES = $(JAVA_HOME)/jre/lib/rt.jar

        ifeq ($(JRE_HOME),)
                JRE_HOME = $(JAVA_HOME)
                JRE_CLASSES = $(JAVA_CLASSES)
        else
                ifeq ($(JRE_CLASSES),)
-                       JRE_CLASSES = $(JRE_HOME)/lib/classes.zip
+                       JRE_CLASSES = $(JRE_HOME)/lib/rt.jar
                endif
        endif

@@ -144,9 +144,13 @@

        # (3) specify "linker" information
 ifeq ($(USE_64), 1)
-       JAVA_CPU = $(shell uname -p)v9
+       ifeq ($(CPU_ARCH), x86_64)
+               JAVA_CPU = amd64
+       else
+               JAVA_CPU := $(shell uname -p)v9
+       endif
 else
-       JAVA_CPU = $(shell uname -p)
+       JAVA_CPU := $(shell uname -p)
 endif

 ifeq ($(JDK_VERSION), 1.1)
@@ -163,8 +167,6 @@
 ifneq ($(JDK_VERSION), 1.1)
 ifeq ($(USE_64), 1)
        JAVA_LIBS += -L$(JAVA_HOME)/$(JAVA_LIBDIR)/server
-else
-       JAVA_LIBS += -L$(JAVA_HOME)/$(JAVA_LIBDIR)/classic
 endif
        JAVA_LIBS += -L$(JAVA_HOME)/$(JAVA_LIBDIR)
        JAVA_LIBS += -ljvm -ljava
@@ -220,14 +222,14 @@

 # set [Redhat Linux] platforms
 ifeq ($(OS_ARCH), Linux)
-       JAVA_CLASSES = $(JAVA_HOME)/lib/classes.zip
+       JAVA_CLASSES = $(JAVA_HOME)/jre/lib/rt.jar

        ifeq ($(JRE_HOME),)
                JRE_HOME = $(JAVA_HOME)
                JRE_CLASSES = $(JAVA_CLASSES)
        else
                ifeq ($(JRE_CLASSES),)
-                       JRE_CLASSES = $(JRE_HOME)/lib/classes.zip
+                       JRE_CLASSES = $(JRE_HOME)/jre/lib/rt.jar
                endif
        endif

@@ -241,16 +243,21 @@

        # (3) specify "linker" information
        JAVA_CPU = i386
-
+       ifeq ($(CPU_ARCH),x86_64)
+               ifeq ($(USE_64), 1)
+                       JAVA_CPU = amd64
+               else
+                       JAVA_CPU = i386
+               endif
+       endif
        JAVA_LIBDIR = jre/lib/$(JAVA_CPU)

        JAVA_CLIBS =

         ifeq ($(JDK_VERSION), 1.4)
-           JAVA_LIBS += -L$(JAVA_HOME)/$(JAVA_LIBDIR)/server -ljvm
-        else
-           JAVA_LIBS += -L$(JAVA_HOME)/$(JAVA_LIBDIR)/classic -ljvm
+               JAVA_LIBS += -L$(JAVA_HOME)/$(JAVA_LIBDIR)/server -ljvm
        endif
+
        JAVA_LIBS += -L$(JAVA_HOME)/$(JAVA_LIBDIR) -ljava
        JAVA_LIBS += $(JAVA_CLIBS)

Index: coreconf/release.pl
===================================================================
RCS file: /cvsroot/mozilla/security/coreconf/release.pl,v
retrieving revision 1.3
diff -u -r1.3 release.pl
--- coreconf/release.pl 25 Apr 2004 15:02:17 -0000      1.3
+++ coreconf/release.pl 15 Sep 2005 18:37:52 -0000
@@ -41,7 +41,14 @@

 #######-- read in variables on command line into %var

-$var{ZIP} = "zip";
+$use_jar = 1;
+$ZIP     = "$ENV{JAVA_HOME}/bin/jar";
+
+if ( $ENV{JAVA_HOME} eq "" ) {
+    $ZIP      = "zip";
+    $use_jar  = 0;
+}
+

 &parse_argv;

@@ -56,11 +63,15 @@

     ($jardir,$jaropts) = split(/\|/,$jarinfo);

-    $zipoptions = "-T";
-    if ($jaropts =~ /a/) {
-       if ($var{OS_ARCH} eq 'WINNT') {
-           $zipoptions .= ' -ll';
-       }
+    if ( $use_jar ) {
+        $zipoptions = "-cvf";
+    } else {
+        $zipoptions = "-T -r";
+        if ($jaropts =~ /a/) {
+            if ($var{OS_ARCH} eq 'WINNT') {
+                $zipoptions .= ' -ll';
+            }
+        }
     }

 # just in case the directory ends in a /, remove it
@@ -117,8 +128,8 @@
        }
        closedir(DIR);

-       print STDERR "zip $zipoptions -r $jarfile $filelist\n";
-       system("zip $zipoptions -r $jarfile $filelist");
+       print STDERR "$ZIP $zipoptions $jarfile $filelist\n";
+       system("$ZIP $zipoptions $jarfile $filelist");
        rmdir("META-INF");
            for $i (1 .. $dirdepth) {
            chdir("..");
Index: jss/org/mozilla/jss/tests/all.pl
===================================================================
RCS file: /cvsroot/mozilla/security/jss/org/mozilla/jss/tests/all.pl,v
retrieving revision 1.22
diff -u -r1.22 all.pl
--- jss/org/mozilla/jss/tests/all.pl    6 Sep 2005 17:57:40 -0000       1.22
+++ jss/org/mozilla/jss/tests/all.pl    15 Sep 2005 18:37:54 -0000
@@ -136,12 +136,26 @@
         exit(1);
     }

+    #
+    # Use 64-bit Java on AMD64.
+    #
+
     $java = "$ENV{JAVA_HOME}/jre/bin/java$exe_suffix";
+    my $java_64bit = 0;
+    if ($osname eq "SunOS") {
+       if ($ENV{USE_64}) {
+           my $cpu = `/usr/bin/isainfo -n`;
+           if ($cpu == "amd64") {
+               $java = "$ENV{JAVA_HOME}/jre/bin/amd64/java$exe_suffix";
+               $java_64bit = 1;
+           }
+       }
+    }
     (-f $java) or die "'$java' does not exist\n";
     $java = $java . $ENV{NATIVE_FLAG};

-    if ($ENV{USE_64}) {
-        $java = $java . " -d64";
+    if ($ENV{USE_64} && !$java_64bit) {
+       $java = $java . " -d64";
     }

     $pwfile = "passwords";
 2005-09-16 00:33:23 +00:00
nelsonb%netscape.com 05c807a27d Plug leaks in SSL bypass code. Add freeit argument to HMAC_Destroy function. 
Change existing callers to pass this argument.  Call HMAC_Destroy from SSL.
Bug 305147. r=Julien.Pierre
Modified Files:  freebl/alghmac.c freebl/alghmac.h freebl/loader.c
  freebl/loader.h freebl/tlsprfalg.c softoken/lowpbe.c softoken/pkcs11c.c
  ssl/ssl3con.c
 2005-09-14 04:12:50 +00:00
wtchang%redhat.com bb2b9eb520 Bugzilla Bug 301554: Clear the 'present' flag if slot fails to refresh. 
relyea wrote the patch. r=wtc,nelsonb.
 2005-09-14 01:35:02 +00:00
cbiesinger%web.de 9d5fbfdeae bug 292368 remove obsolete file; replaced by nsICryptoHash 2005-09-12 17:51:57 +00:00
nelsonb%netscape.com 945c39235d Fix regression introduced in last checkin. If the caller disables the 
use of locks while locks are in use, don't forget to unlock the locks
already locked on the stack.  bug 305147. r=julien.pierre
 2005-09-10 01:18:40 +00:00
saul.edwards%sun.com d9d3cf6f93 Bug 305147: add -B (bypass SSL) and -s (disable SSL locking) to server and client commands; add bypass testing to SSL test suite. 2005-09-09 04:50:07 +00:00
nelsonb%netscape.com ef28ad5885 Implement two new SSL socket options: SSL_BYPASS_PKCS11 and SSL_NO_LOCKS. 
Reorganize the SSL Socket structure contents to obviate ssl3 pointer.
Move much of the ECC code from ssl3con to new file ssl3ecc.c.  derive.c
implements derivation of the SSL/TLS master secret and the encryption and
MAC keys and IVs without using PKCS11. Bug 305147. r=rrelyea.
Modified Files: ssl/config.mk ssl/manifest.mn ssl/ssl.h ssl/ssl3con.c
    ssl/ssl3gthr.c ssl/sslauth.c ssl/sslcon.c ssl/ssldef.c ssl/sslgathr.c
    ssl/sslimpl.h ssl/sslinfo.c ssl/sslnonce.c ssl/sslsecur.c ssl/sslsnce.c
    ssl/sslsock.c
Added Files: ssl/derive.c ssl/ssl3ecc.c
 2005-09-09 03:02:16 +00:00
nelsonb%netscape.com 5a95eff411 Export function PK11_MapSignKeyType for use by libSSL. Bug 305147. 
r=relyea.
Modified Files: nss/nss.def pk11wrap/pk11mech.c pk11wrap/pk11obj.c
	pk11wrap/pk11pub.h pk11wrap/secmodi.h
 2005-09-09 02:03:57 +00:00
christophe.ravel.bugs%sun.com 982861b69c 238319: Sun packages changes. 
Install 64 bit libraries in lib64 on Linux.
 2005-09-08 22:23:54 +00:00
saul.edwards%sun.com bfb9fa2c94 Packaging for bug 303508: new freebl library names for Solaris packages. 
Note that Linux does not require these changes because the Makefile picks up
all .so and .chk files for Linux packages.
 2005-09-08 02:25:49 +00:00
wtchang%redhat.com a7841eb094 Bugzilla Bug 299197: define two bitflags for every PKCS #11 object 
attribute with no exceptions. renamed PK11_ATTR_READONLY as
PK11_ATTR_UNMODIFIABLE.  In pk11_OpFlagsToAttributes, backed out a change
I made before.  Made pk11_AttrFlagsToAttributes table-driven. In
pk11_loadPrivKeyWithFlags, fixed the bug (always loading the public key as
a token object).  Other code cleanups. r=relyea,nelsonb.
Modified files: pk11akey.c pk11obj.c pk11pub.h pk11skey.c secmodt.h
 2005-09-07 18:23:35 +00:00
saul.edwards%sun.com 046c62d43f Bug 303508: Add freebl shared libs that do 64-bit integer math. Bug 274984: softoken fails to load freebl in setuid programs. freebl becomes a shared library on all platforms. r=nelson 
Modified Files:
	coreconf/HP-UXB.11.mk coreconf/SunOS5.mk
	nss/cmd/shlibsign/Makefile nss/cmd/shlibsign/manifest.mn
	nss/lib/freebl/Makefile nss/lib/freebl/arcfour.c
	nss/lib/freebl/blapi.h nss/lib/freebl/config.mk
	nss/lib/freebl/ldvector.c nss/lib/freebl/loader.c
	nss/lib/freebl/loader.h nss/lib/freebl/manifest.mn
Added Files:
	nss/lib/freebl/freebl.def
 2005-09-07 02:47:16 +00:00
glen.beasley%sun.com 903845deae 306114 enable/disable FIPS modes files: CryptoManager.c, tests/all.pl, tests/FipsTest.java r=sandeep,sr=wtc 2005-09-06 17:57:40 +00:00
glen.beasley%sun.com 8e83cd4a27 305984 update FIPS values for cipher suites file=sslinfo.c r=bob,sr=wtc 2005-09-06 17:15:32 +00:00
smfr%smfr.org 555d7f8815 Fix bug 306795: nsNSSCertificateDB::IsCertTrusted() fails to check the return value from CERT_GetCertTrust(), so can return random trust bits. r=dougt, sr=rrelyea 2005-09-04 19:05:01 +00:00
sandeep.konchady%sun.com 5c5544016c Added Password.clear() and PBEKeyGenParams.clear() so that the objects are 
released when GC tries to collect them.
 2005-09-02 22:48:46 +00:00
sandeep.konchady%sun.com 57109efa29 Adding JSS SelfServ test client and server. 2005-09-02 20:58:08 +00:00
julien.pierre.bugs%sun.com 5b4d5638cf Fix 306785 . Memory leaks in PQG_ParamGenSeedLen . r=nelson 2005-09-02 20:05:35 +00:00
wtchang%redhat.com a7eca3e9fd Bugzilla Bug 299197: added PK11AttrFlags and PK11_GenerateKeyPairWithFlags. 
Modified PK11_TokenKeyGenWithFlags to take a PK11AttrFlags parameter.
PK11AttrFlags controls the values of commonly used PKCS #11 object
attributes that have Boolean values. r=relyea,nelsonb.
Modified Files:
	nss/nss.def pk11wrap/pk11akey.c pk11wrap/pk11obj.c
	pk11wrap/pk11pub.h pk11wrap/pk11skey.c pk11wrap/secmodi.h
	pk11wrap/secmodt.h
 2005-09-02 18:25:04 +00:00
wtchang%redhat.com cba3b38bf8 Bugzilla Bug 305835: removed NSS_ENABLE_ECC ifdefs under nss/lib except 
nss/lib/{freebl,softoken,ssl}. r=nelsonb.
Modified Files:
	cryptohi/keyhi.h cryptohi/manifest.mn cryptohi/seckey.c
	cryptohi/secsign.c freebl/ec.c pk11wrap/manifest.mn
	pk11wrap/pk11akey.c pk11wrap/pk11cert.c pk11wrap/pk11mech.c
	pk11wrap/pk11obj.c pk11wrap/pk11skey.c pkcs12/manifest.mn
	pkcs12/p12d.c pkcs7/config.mk pkcs7/p7decode.c
	pkcs7/p7encode.c smime/cmssiginfo.c smime/cmsutil.c
	smime/config.mk
 2005-09-02 01:24:57 +00:00
wtchang%redhat.com 51ef3c3c86 Bugzilla Bug 303507: changed GCC's default OPTIMIZER back to -O2. 
r=saul.edwards.
 2005-09-02 00:59:00 +00:00
bsmedberg%covad.net cd99a16d73 Bug 306615 - Fold PSM into libxul r=darin 2005-09-01 12:43:58 +00:00
wtchang%redhat.com 31be7b72ae Bugzilla Bug 257693: code cleanup. 1. Change "X9.63" to "X9.62". 2. In 
EC_ValidatePublicKey, set error codes and handle a NULL return from
ECGroup_fromName.  3. In the ECGroupStr structure, move the validate_point
field up.  4. In the test cases, if the tests that should fail, passed,
say so in the error messages.  r=douglas@stebila.ca.
Modified Files:
	blapi.h ec.c ecl/ecl-priv.h ecl/ecl.c ecl/ecl.h
	ecl/tests/ec2_test.c ecl/tests/ecp_test.c
 2005-08-27 01:09:22 +00:00
gavin%gavinsharp.com 70a6278752 Bug 263182: Page Info (Security tab) doesn't explain mixed secure/insecure, r=kaie.bugs, sr=neil.parkwaycc.co.uk 2005-08-26 20:34:31 +00:00
dougt%meer.net 32258b61c3 Bug 302284. add xpi hash support to InstallTrigger.install(). r=dveditz, sr=shaver, a=asa 2005-08-26 06:46:21 +00:00
julien.pierre.bugs%sun.com 2ffa7acc60 Fix for 297802 . r=wtchang . Add $(OS_LIBS) to MKSHLIB rules. 
Add -z defs linker option for Solaris and Linux .
Also add -z ignore on Solaris .
 2005-08-26 02:17:05 +00:00