Commit Graph

3757 Commits

Author SHA1 Message Date
wtchang%redhat.com
c449f54be3 Bugzilla Bug 327529: unnamed arguments (third and after) for CERT_CreateRDN
must have the correct CERTAVA * type because compilers can't do automatic
type conversions. r=nelsonb,jpierre.
Modified files: alg1485.c secname.c
2006-02-20 23:06:55 +00:00
wtchang%redhat.com
97a5c30a94 Renamed DSA_TEST_SEED_BYTES to PQG_TEST_SEED_BYTES. 2006-02-18 02:39:12 +00:00
wtchang%redhat.com
0c104c2ece Bugzilla Bug 327384: fixed an off-by-one error in the size of the 'genenc'
array.  The patch is contributed by Andreas Sterbenz
<Andreas.Sterbenz@sun.com>. r=wtc,nelsonb
2006-02-16 22:33:13 +00:00
glen.beasley%sun.com
1dd17278e7 fix by wan-teh for RSA siggen tests r=glen 2006-02-16 01:50:55 +00:00
wtchang%redhat.com
6e65720ba6 Bugzilla Bug 318967: use 160-bit SEED when generating DSA domain parameters
(PQG).  Removed unused keySizeIndex variables. Handle the return value and
result output parameter of PQG_VerifyParams separately. Pad H with leading
0's when printing. r=glen.beasley.
2006-02-16 01:28:35 +00:00
julien.pierre.bugs%sun.com
a4db2be2c9 Fix for bug 321765. Allow NSS to decode certs with unsupported critical extensions. r=wtchang,nelson,rrelyea. 2006-02-16 00:06:24 +00:00
alexei.volkov.bugs%sun.com
e393d91fcb [Bug 326963] Interoperability test with apache/mod_ssl: tstclnt
produces: assertion failure: secmod_PrivateModuleCount == 0; r=nelson, sr=julie
n
2006-02-15 22:22:32 +00:00
wtchang%redhat.com
ac55eec5a2 Bugzilla Bug 318962: fixed signed/unsigned comparison warnings by MSVC.
r=glen.beasley.
2006-02-15 19:14:09 +00:00
wtchang%redhat.com
4b0281cf28 Bugzilla Bug 318968: more ECDSA test cleanup. Do not zeroize when freezing
ECParams' arenas.  Use EC_CopyParams to copy ECParams to an EC public key
and allocate the public key's value from the same arena. r=glen.beasley.
2006-02-15 19:06:51 +00:00
wtchang%redhat.com
c0887f9e1d Bugzilla Bug 326754: fixed two minor bugs related to the h parameter in
PQG parameter generation. r=nelsonb,glen.beasley.
2006-02-14 03:04:57 +00:00
wtchang%redhat.com
b19b5965a5 Bugzilla Bug 326144: need to zeroize a SECItem that contains a copy of the
secret key. r=relyea,jpierre.
2006-02-14 02:55:09 +00:00
wtchang%redhat.com
cfe8a9f253 Bugzilla bug 326751: CKR_SIGNATURE_INVALID is a much better default error
code for NSC_VerifyRecover than CKR_DEVICE_ERROR is. r=relyea.
2006-02-11 02:03:25 +00:00
glen.beasley%sun.com
7f3ba76b70 318970 RSA sigver test fix r=wan-teh 2006-02-10 23:27:38 +00:00
rrelyea%redhat.com
1f4cae4de9 Bugzilla Bug 326482 NSS ECC performance problems.
Patch by Nelson, r=relyea.

Save the public key when we create the keypair so we can use it later.
2006-02-10 19:39:53 +00:00
rrelyea%redhat.com
57d9010865 Bugzilla Bug 326482 NSS ECC performance problems.
r=nelsonb
Fix bug where ECC keys were not being copied on server startup
2006-02-10 18:54:58 +00:00
neil.williams%sun.com
fd25589676 Bug 325657, r=Nelson,Wan-Teh, Unset ECL_USE_FP INT Solaris SPARC freebl 2006-02-10 04:38:05 +00:00
rrelyea%redhat.com
2cf33676b0 Bug 320187 NSC_WrapKey called with null output returns short length
r=nelsonb
2006-02-09 19:54:22 +00:00
neil.williams%sun.com
8719a5f375 Bug #325682, Adds -Wl,-rpath to link step for Linux distributions
r=Nelson, sr=Wan-Teh
2006-02-09 00:12:17 +00:00
rrelyea%redhat.com
2c3bfd1312 Bug 320583 Support for SHA256/384/512 with ECC signing 2006-02-08 06:14:31 +00:00
julien.pierre.bugs%sun.com
af4804d7ef Fix for bug 326144 . softoken leaks in nsc_pbe_key_gen. r=nelson, rrelyea 2006-02-07 00:43:31 +00:00
wtchang%redhat.com
eb3a64e821 Bugzilla Bug 318967: fixed compiler warnings, most of which were char *
and unsigned char * mismatches. r=glen.beasley.
2006-02-04 06:39:44 +00:00
kaie%kuix.de
58262b951b Fix build bustage, change // comment to /* */ 2006-02-03 20:22:52 +00:00
kaie%kuix.de
3aa755acfa bug 152426, delegation of HTTP download for OCSP
r=julien.pierre, r=rrelyea
2006-02-03 18:14:49 +00:00
neil.williams%sun.com
d55302f3a8 bug 245518 r=nelson, fix for p12 files encoded with null PWs 2006-02-02 20:26:03 +00:00
nelson%bolyard.com
564cb27d28 Work around bug 292285: don't encode x400 addresses, don't print CRL contents
r=julien.pierre
2006-02-02 07:56:19 +00:00
wtchang%redhat.com
b8088299c2 Allow CKM_ECDSA_SHA1 to be multipart. Bug 325494.
Patch contributed by Andreas Sterbenz <Andreas.Sterbenz@sun.com>
r=nelsonb,relyea,wtc.
2006-02-02 07:21:56 +00:00
alexei.volkov.bugs%sun.com
ff1923a307 [Bug 325307] infinite loop in SECU_FindCrlIssuer. r=julien 2006-02-02 02:45:02 +00:00
alexei.volkov.bugs%sun.com
fa47026f19 [Bug 324878] crlutil -L outputs false CRL names. r=julien 2006-02-02 02:35:07 +00:00
alexei.volkov.bugs%sun.com
22c94ce3da 325305: minor memory leak in CERT_FindCertByNameString. r=wtc 2006-02-02 00:57:54 +00:00
wtchang%redhat.com
db3d31ac92 Bugzilla Bug 318966: implemented the tests for the NIST RNG Validation
System.  r=glen.beasley.
Modified file: fipstest.c
Added file: rng.sh
2006-02-01 21:28:25 +00:00
wtchang%redhat.com
c20388e588 Bugzilla Bug 318966: added two RNG functions FIPS186Change_GenerateX and
FIPS186Change_ReduceModQForDSA to blapi.h for the NIST RNG Validation
System. r=relyea,nelsonb.
Modified files: blapi.h ldvector.c loader.c loader.h prng_fips1861.c
2006-02-01 21:18:44 +00:00
rrelyea%redhat.com
3ebd845ca9 Bug 319619 "large" ECC private keys cannot be exported through PKCS #11
1) Change the export encrypted private key function to ask the token the wrap
size rather than trying to figure it out ourselves.

2) Fix the soften to correctly return the size.


r=wtc, nelsonb
2006-02-01 16:43:47 +00:00
glen.beasley%sun.com
decb139ec2 318970 RSA FIPS tests r=wan-teh sr=bobRelyea 2006-01-31 00:49:40 +00:00
glen.beasley%sun.com
46b88044bc 318970 RSA FIPS tests r=wan-teh sr=bobRelyea 2006-01-31 00:49:02 +00:00
glen.beasley%sun.com
b4358c2729 318970 RSA FIPS Alg Tests r=wan-teh, sr=bRelyea 2006-01-30 19:58:52 +00:00
nelsonb%netscape.com
2071d2bc7b Fix broken build, caused by c++ style comment in c code. 2006-01-28 02:38:07 +00:00
nelsonb%netscape.com
ddca75b829 Set SSL2 and SSL3 timeout times properly for SSL server session cache.
Bug 223242. r=jullien.pierre
2006-01-28 02:21:31 +00:00
glen.beasley%sun.com
bb11f0b846 328967 DSA FIPS tests r=Wan-Teh 2006-01-27 18:53:07 +00:00
wtchang%redhat.com
b1f1c414d0 Removed a blank line that broke the ssl_stress function in ecssl.sh, which
cannot handle blank lines.
2006-01-27 18:44:13 +00:00
wtchang%redhat.com
d2bce3f900 Bugzilla Bug 320589: temporary workaround for SEC_SignData ECDSA signature
generation bug introduced by the previous checkin.
2006-01-26 23:51:42 +00:00
wtchang%redhat.com
55e2995224 Removed an extraneous semicolon after the last parameter in a function
declaration.
2006-01-26 23:21:39 +00:00
nelsonb%netscape.com
6f9d05f035 Remove unnecessary ISALIST test from sparc versions of freebl DSOs.
Bug 302658. r=jullien.pierre,wtchang
2006-01-22 08:43:57 +00:00
nelsonb%netscape.com
6a41641124 Make dbck Debug mode work with Softoken. Bug 323570. r=rrelyea. 2006-01-22 06:54:34 +00:00
nelsonb%netscape.com
944db2b329 Don't use variables as structure initializers. Bug 274512. Fix build
on HPUX.  r=julien.pierre,wtchang
2006-01-22 06:42:14 +00:00
nelsonb%netscape.com
06c2abf1fa Detect certdb reference leaks at shutdown with assertions. Bug 324103.
r=rrelyea.
2006-01-22 06:36:36 +00:00
wtchang%redhat.com
d6b2459e61 Bugzilla Bug 323977: use the "mapfile" (ld version script) on FreeBSD.
Build the freebl shared libraries with the -Bsymbolic flag for GNU ld.
r=nelsonb.  Thanks to Glenn Randers-Pehrson <glennrp@imagemagick.org> for
reporting this bug and verifying these changes.
Modified files: coreconf/FreeBSD.mk nss/lib/freebl/Makefile
2006-01-21 02:33:33 +00:00
nelsonb%netscape.com
9633334de2 Plug a cert DB reference leak in softoken, related to trust objects.
Bug 324103, r=rrelyea
2006-01-21 02:23:42 +00:00
wtchang%redhat.com
f116200e1d Bugzilla Bug 320589: miscellaneous code cleanup: distinguish between the
length of the field size and the length of the base point order.  Report
better error codes.  In ECDSA_VerifyDigest, removed unnecessary local
variables and be lenient in the signature lengths we accept.
r=relyea,nelsonb
2006-01-21 02:14:46 +00:00
julien.pierre.bugs%sun.com
1477ed4b30 Fix for bug 317856 . uninitialized variable correction. r=wtchang 2006-01-20 22:55:15 +00:00
nelsonb%netscape.com
6f9e66cf05 Detect NULL server key pair pointer. Bug 321161. r=wtchang. 2006-01-20 17:40:21 +00:00
julien.pierre.bugs%sun.com
91408cf272 Fix for bug 317856 . compiler warnings in strsclnt 2006-01-20 00:43:23 +00:00
rrelyea%redhat.com
26731456ca Bugzilla Bug 95323. Conditionally compile nsscapi.
r=julien
2006-01-19 19:55:28 +00:00
nelsonb%netscape.com
58862edcbf change QA test order to be bottom-up. Bug 309412. r=jullien.pierre 2006-01-19 11:59:56 +00:00
nelsonb%netscape.com
e521b0a741 Back out last change, which broke the build. 2006-01-19 02:34:12 +00:00
nelsonb%netscape.com
a3089c6a9d Prevent crash when making new cert8.db from old cert5.db.
This is not the final solution, but it works.
Bug 320029. r=rrelyea,sr=julien.pierre.  On TRUNK.
2006-01-19 02:16:30 +00:00
nelsonb%netscape.com
f32a4d3f27 Add new function nsslowcert_DecodeAnyDBEntry. Correct the union
certDBEntry by adding the missing members. Bug 323570. r=rrelyea.
2006-01-19 02:09:37 +00:00
nelsonb%netscape.com
446a084b09 Softoken will no longer generate excessive key material for some SSL3
cipher suites.  Bug 274512. r=rrelyea.
2006-01-19 01:12:53 +00:00
wtchang%redhat.com
d27a2d48d9 Bugzilla Bug 318217: use the new NSPR functions PR_EmulateAcceptRead and
PR_EmulateSendFile added in NSPR 4.1.  r=nelsonb.
Modified files: manifest.mn sslimpl.h sslsock.c
Removed file: emulate.c
2006-01-18 23:06:57 +00:00
julien.pierre.bugs%sun.com
0e9451eaef Fix for bug 319495 . Clean up Makefiles for command-line tools. r=nelson 2006-01-18 22:44:39 +00:00
wtchang%redhat.com
ce5e5d7682 Bugzilla Bug 323379: need to set ADDON_PATH for libsoftokn3.so to load
libfreebl3.so as an add-on on BeOS.  Thanks to Doug Shelton
<doug@sheltonfamily.org>for reporting the bug and verifying the fix.
r=christophe.ravel.
2006-01-18 20:56:28 +00:00
rrelyea%redhat.com
f822c8f7d0 NSS ECDSA can only sign SHA-1 bug 320583
r=nelson patch ammended to change SHA-1 to HASH per wtc comment.
2006-01-17 00:38:59 +00:00
wtchang%redhat.com
143f08953f Bugzilla Bug 320497: indicate that we don't need an executable stack.
r=wolfgang.rosenauer,jpierre.
Modified files: arcfour-amd64-gas.s mpi/mpi_amd64_gas.s
2006-01-13 17:33:10 +00:00
alexei.volkov.bugs%sun.com
909bcd2da3 HP and AIX cert extension tests failure fix. 2006-01-13 07:59:31 +00:00
wtchang%redhat.com
cdf90d5eb6 Bugzilla Bug 323079: when libsoftoken and libssl load the freebl library,
first try without resolving symlinks.  If we fail to load the library and
the pathname is a symbolic link, resolve the symbolic link and try again.
r=jpierre. sr=relyea.
2006-01-12 23:46:31 +00:00
alexei.volkov.bugs%sun.com
d5a3092f79 cert extension test for 53229: certutil should not use gets(). julien:review+ 2006-01-12 01:09:03 +00:00
wtchang%redhat.com
0d90a194f0 Bugzilla Bug 318968: fixed the build error with NSS_ENABLE_ECC unset.
Modified files: Makefile fipstest.c
2006-01-05 21:49:05 +00:00
julien.pierre.bugs%sun.com
fb899e04af Fix the build busted by checkin for bug 318968 2005-12-23 03:14:36 +00:00
wtchang%redhat.com
d8c1021594 Bugzilla Bug 318968: added FIPS ECDSA algorithm test. r=glen.beasley.
Modified file: fipstest.c
Added file: ecdsa.sh
2005-12-22 22:22:17 +00:00
wtchang%redhat.com
e681f06b4a Bugzilla Bug 318962: combined a PORT_Realloc and a memset call into an
equivalent PORT_ZAlloc call.  r=glen.beasley.
2005-12-22 22:19:03 +00:00
wtchang%redhat.com
cb01eaf34d Bugzilla bug 318962: it is legal for PORT_Realloc(oldptr, 0) to return
NULL, so that shouldn't be treated as a memory allocation failure.
2005-12-22 01:39:17 +00:00
glen.beasley%sun.com
784abb2c93 318958 fixing c++/java comment to C 2005-12-21 00:29:44 +00:00
glen.beasley%sun.com
03bbc006b5 318958 fixing Monte Carlo test r=Wan-Teh 2005-12-21 00:13:52 +00:00
glen.beasley%sun.com
3ce12eeea4 318962 buffer fix for SHA Monte Carlo tests r=wan-teh 2005-12-20 18:20:50 +00:00
wtchang%redhat.com
3b577f224d Bugzilla Bug 317052: removed the obsolete file lib/base/whatnspr.c from
CVS.  r=relyea.
Modified Files:
	base.h error.c manifest.mn
Removed Files:
	whatnspr.c
2005-12-19 17:53:28 +00:00
wtchang%redhat.com
165d7b9185 Bugzilla Bug 272484: code cleanup. keythi.h: remove the unused type
definition of SEC_PKCS5KeyAndPassword.  p12d.c: We only need to set
p12dcx->currentASafeP7Dcx to NULL if it isn't NULL.  r=relyea.
Modified Files: cryptohi/keythi.h pkcs12/p12d.c
2005-12-19 17:46:30 +00:00
nelsonb%netscape.com
8888626b36 Fix build. Remove c++ style declaration of loop control variables. 2005-12-17 01:03:12 +00:00
glen.beasley%sun.com
f39056f8e1 318964 implement HMAC algorithm tests for FIPS 140-2 validation r=Wan-teh 2005-12-16 16:57:49 +00:00
rrelyea%redhat.com
4961f4ed28 Mac fixes to ckfw. 2005-12-16 01:57:41 +00:00
rrelyea%redhat.com
ec7b991d91 Add support for the cryptoki crypto functions. This support is necessary for
capi and mackey. r=kaie
2005-12-16 00:48:02 +00:00
glen.beasley%sun.com
db00345d74 318962 Added FIPS 140-2 SHA tests and removed FIPS 140-1 SHA tests r=wan-teh 2005-12-15 18:50:52 +00:00
glen.beasley%sun.com
e14803c6ab 318962 Added FIPS 140-2 SHA tests and removed FIPS 140-1 SHA tests r=wan-teh 2005-12-15 18:47:20 +00:00
wtchang%redhat.com
cfdbc102fe Bugzilla Bug 320047: mp_to_unsigned/signed/fixlen_octets copies nothing to
the buffer if the mp_int is zero. r=nelsonb.
2005-12-14 02:18:35 +00:00
wtchang%redhat.com
fff23fc797 Bugzilla Bug 236245: Updated NSS to "ECC Cipher Suites for TLS" draft 12
plus upcoming revisions.  The patch is contributed by Douglas Stebila
of Sun Labs <douglas@stebila.ca>. r=wtc.
Modified Files:
	cmd/selfserv/selfserv.c cmd/strsclnt/strsclnt.c
	cmd/tstclnt/tstclnt.c cmd/vfyserv/vfyserv.c lib/ssl/ssl3con.c
	lib/ssl/ssl3ecc.c lib/ssl/ssl3prot.h lib/ssl/sslenum.c
	lib/ssl/sslimpl.h lib/ssl/sslinfo.c lib/ssl/sslproto.h
	lib/ssl/sslsock.c tests/ssl/ecssl.sh tests/ssl/ecsslauth.txt
	tests/ssl/ecsslcov.txt tests/ssl/ecsslstress.txt
	tests/ssl/ssl.sh
2005-12-14 01:49:40 +00:00
glen.beasley%sun.com
ae4c8fde88 318958 removal of DES and Triple DES 140-1 code r=wan-teh 2005-12-14 01:19:11 +00:00
wtchang%redhat.com
d1a203a963 Bugzilla Bug 320038: ecl/ecl-curve.h: removed unnecessary leading zero byte
in the base point orders of curves K-233 and K-409.  ec.c: pad the private
key with leading zeros to the length of the base point order.
r=douglas.steblia.
2005-12-13 22:31:34 +00:00
glen.beasley%sun.com
b6c6d7d561 318958 TDEA algorithm tests for FIPS 140-2 2005-12-09 16:55:53 +00:00
relyea%netscape.com
4092a7d72e Initialize mpi data using mpi macros, not static data bug 319252
r=douglas
2005-12-08 23:22:26 +00:00
alexei.volkov.bugs%sun.com
8939047c97 305028: make pretty print utility print hex data in case when data type was not recognized; rw+nelson 2005-12-05 23:09:38 +00:00
relyea%netscape.com
77cb1d9d48 Bug 316925
Key export does not work on tokens with non-sensitive keys that can't wrap.
r=kaie
2005-11-24 00:40:14 +00:00
relyea%netscape.com
38154c250e Bug 129303
NSS needs to expose interfaces to deal with multiple token sources of certs.

r=kaie
2005-11-23 23:56:38 +00:00
relyea%netscape.com
4b7f9f6804 Bug 129303 NSS needs to expose interfaces to deal with multiple token sources of certs
r=kaie
2005-11-23 23:54:15 +00:00
relyea%netscape.com
cdcebb8e7e PKCS #11 module to supply Access to the Mac OS X Keychain. 2005-11-23 23:04:08 +00:00
nelsonb%netscape.com
b64584ad16 Fix bug in MP_ALIGN macro that always truncated pointers to 32-bits,
even on 64-bin platforms.  Bug 298630. r=rrelyea.
2005-11-23 01:12:34 +00:00
relyea%netscape.com
2537abf9f5 Weave patch: bug 298630 r=nelson 2005-11-22 07:16:43 +00:00
nelsonb%netscape.com
ac287b2f5a Begin building mpcpucache.c. On Sun Studio platforms, build from two
new .s files.  Bug 298630. r=rrelyea.
2005-11-22 07:13:32 +00:00
christophe.ravel.bugs%sun.com
0750e1e7ef Turn NSS_BETA off for NSS 3.11 RC2.
r+ Julien Pierre.
2005-11-22 01:58:35 +00:00
christophe.ravel.bugs%sun.com
dc5fae9e7c Back to BETA flag on the trunk.
r+ Julien Pierre
2005-11-21 18:46:12 +00:00
christophe.ravel.bugs%sun.com
46f08a0c89 Turn NSS_BETA to FALSE for NSS 3.11 RC.
r+: Julien Pierre.
2005-11-21 04:08:44 +00:00
alexei.volkov.bugs%sun.com
1f95dbe302 53229: certutil should not use gets();
julien rv+; wan-teh sr+
2005-11-20 01:46:59 +00:00
christophe.ravel.bugs%sun.com
9e6573e0d5 238319: Sun packages changes.
RPM_RELEASE can be set from the command line.
2005-11-18 21:52:41 +00:00