wtc%netscape.com
93a5154bf5
Added the README file, which explains how to add a root CA certificate to
...
the nssckbi loadable root certs module.
2002-07-09 17:00:30 +00:00
relyea%netscape.com
73bc75ae28
treat lastTime of 0 as never having checked (not within the interval).
2002-07-09 04:40:35 +00:00
relyea%netscape.com
006e3925e9
1) fix return type warning in pk11ListCertsCallback.
...
2) treat lastTime==0 as always outside the delay time. (removes spurious
prompts in FIPS mode on some platforms.)
2002-07-09 04:39:35 +00:00
dmose%netscape.com
46733612f7
Backing out the patch for bug 87902; a one-line change that caused an SSL/SMTP regression (bug 155431)
2002-07-08 23:24:30 +00:00
jpierre%netscape.com
967d483ebe
Add new CERT_VerifyCertificate function - fix for 149832
2002-07-04 03:09:49 +00:00
glen.beasley%sun.com
3a0bcb0fb2
verify certificate in memory method
2002-07-04 00:36:52 +00:00
nicolson%netscape.com
5deb4aec40
Fix 120785: SSLSocket does not throw java.net.BindException.
2002-07-04 00:29:24 +00:00
nicolson%netscape.com
0e19cf236a
need to include nspr.h.
2002-07-04 00:25:46 +00:00
glen.beasley%sun.com
d23ce70c2f
verify cert in memory
2002-07-04 00:10:48 +00:00
nicolson%netscape.com
ae2a06d43f
Fix 121710: throw better SSL exceptions.
2002-07-04 00:03:47 +00:00
nicolson%netscape.com
9db79236dd
Print subject name instead of issuer name.
2002-07-03 23:58:58 +00:00
nicolson%netscape.com
8d5e4dc7c6
Update documentation for these functions.
2002-07-03 23:57:12 +00:00
nicolson%netscape.com
4bda169e18
deprecate old classes in favor of the JCA.
2002-07-03 23:51:20 +00:00
nicolson%netscape.com
3c7759665e
moved JSSSecureRandomSpi into provider/java/security directory.
2002-07-03 23:49:32 +00:00
nicolson%netscape.com
0254942b89
Provider classes have been moved into the java/security and javax/crypto
...
subdirectories.
2002-07-03 23:48:53 +00:00
nicolson%netscape.com
1daf49c785
Fix 106846: Version strings in CryptoManager need updating.
2002-07-03 23:46:02 +00:00
javi%netscape.com
6f5c3918c6
Go back to the lower case mechanism for the ocspResponse_* flags.
2002-07-03 20:22:27 +00:00
javi%netscape.com
218a44e67b
Final patch for Bug 155626 which enables 3rd party apps to use the NSS
...
libraries to encode/decode OCSP responses/requests on their own.
2002-07-03 20:18:10 +00:00
javi%netscape.com
7c36eac5d2
Use the newly exported symbol names.
2002-07-03 00:13:25 +00:00
javi%netscape.com
1f078c5776
Break up OCSP so that 3rd party apps can send off an OCSP request and parse
...
it.
2002-07-03 00:02:39 +00:00
relyea%netscape.com
4f9e4c1700
Handle the case where we don't get the Token object from NewToken (It gets converted from a session object in handleobjects).
2002-07-02 19:58:49 +00:00
relyea%netscape.com
6880c87a8d
More performance improvements in listing certs:
...
1) reduce more short term memory allocate/frees.
2) remove sha1 hash calculations from critical paths.
3) when listing user certs, skip decoding of non-user certs.
2002-07-02 15:11:29 +00:00
nicolson%netscape.com
e6e1da9b32
typo in error message
2002-06-28 20:14:47 +00:00
ssaux%netscape.com
1c1d0d132e
b=154624 Cannot change master password r=javi sr=mscott
2002-06-28 18:08:19 +00:00
relyea%netscape.com
af924e2843
Initialize type fields to supress purify uninitialized reference warnings.
2002-06-28 03:00:10 +00:00
jpierre%netscape.com
6f31863e61
Add VISA root cert - bug 139874
2002-06-28 01:07:37 +00:00
nicolson%netscape.com
bb9ae88653
remove spurious println.
2002-06-27 21:16:42 +00:00
wtc%netscape.com
c81143956b
Bugzilla bug 154656: changed "softoken" to "softokn" to match the file
...
name.
2002-06-27 18:34:17 +00:00
jpierre%netscape.com
7ecdf837d4
Fix for 154212 - make CERT_SaveSMimeProfile copy the cert to the database if it comes from an external source
2002-06-27 00:18:35 +00:00
kaie%netscape.com
740ef8dd8d
b=154240 security fix
...
r=javi sr=alecf
2002-06-26 14:15:11 +00:00
kaie%netscape.com
ffbb124fef
b=154084 entering/leaving secure site alert pops up incessantly
...
r=javi sr=alecf
2002-06-25 23:32:42 +00:00
bzbarsky%mit.edu
e42364fdd5
Fix stretched icon. Bug 110456, patch by Chris Brien
...
<christopher_brien@hotmail.com>, r=bzbarsky,ssaux, sr=alecf
2002-06-25 23:29:48 +00:00
relyea%netscape.com
43480112f3
Initialize type field to clear off purify warnings.
2002-06-25 23:00:59 +00:00
relyea%netscape.com
c8d5ba28b5
Don't force the update if the cert doesn't already exist.
2002-06-25 22:58:13 +00:00
relyea%netscape.com
87a3188583
Collect the full names of the certs, not just the stan names.
2002-06-25 22:57:22 +00:00
relyea%netscape.com
6061b43df2
Add new function which returns the NSS 3.4 style nickname directly from a
...
NSSCertificate structure.
2002-06-25 22:33:37 +00:00
ian.mcgreer%sun.com
4091f82677
two more places to dump templates
2002-06-25 19:40:16 +00:00
ian.mcgreer%sun.com
bb3bfc1199
fix AIX builds, 64-bit compiler chokes on large switches in debug builds
2002-06-25 16:57:40 +00:00
relyea%netscape.com
5fc7efb515
Fix solaris compiler error/warning. Fix prototype to return correct value (PRBool not PRStatus).
2002-06-24 23:54:16 +00:00
kaie%netscape.com
c0454d676c
b=87902 Cannot reach TLS intolerant servers through SSL proxy.
...
r=javi sr=darin
2002-06-24 23:02:08 +00:00
relyea%netscape.com
7caefab6ed
Don't decode or extract trust for certs if we are just getting the nicknames -- particularly for user certs.
2002-06-24 22:36:59 +00:00
ian.mcgreer%sun.com
2a67969b3c
fix broken AIX builds
2002-06-24 22:29:12 +00:00
ian.mcgreer%sun.com
b73a1edc81
log more mechanisms and templates
2002-06-24 22:22:57 +00:00
relyea%netscape.com
cbeed1cfd5
Copy the type value as well as the rest.
2002-06-24 21:57:27 +00:00
relyea%netscape.com
7cc9843630
More performance improvements for PK11ListCerts/ CERT_GetUserCertByUsage().
2002-06-24 21:54:41 +00:00
nelsonb%netscape.com
071fe9ae9c
Fix bug 135261. Create symbolic names for the values 2 and 3 for the
...
SSL_REQUIRE_CERTIFICATE option. Value 2 has always been the default.
New Value 3 is appropriate for servers that want to re-request, but
still not require, client-auth from a client with whom an SSL session
is already established.
2002-06-22 01:40:32 +00:00
nicolson%netscape.com
01f5e0790f
Fix 128259: Cannot get SSL trust for a CA residing on PKCS#11 module.
2002-06-21 23:53:58 +00:00
relyea%netscape.com
3c89da1564
Need to preserve non-modifiable trustbits.
2002-06-21 22:28:03 +00:00
relyea%netscape.com
aa8dddaacb
zero structure before we fill it in, not after
2002-06-21 20:25:49 +00:00
nicolson%netscape.com
fe199405d1
fix a build error in JDK 1.2.
2002-06-21 18:31:36 +00:00
wtc%netscape.com
47b432c0f5
Bug 153380: TLS is enabled by default now.
2002-06-21 18:25:46 +00:00
kaie%netscape.com
1887483a18
b=90956 Dot (.) instead of localized characters in pipnss module
...
r=ssaux sr=alecf
2002-06-20 23:41:02 +00:00
kaie%netscape.com
f1f07ddeb8
https surfing: Clicking on a link early leads to "mixed/broken" lock icon
...
r=javi sr=rpotts
2002-06-20 23:36:48 +00:00
bryner%netscape.com
6845058771
Don't crash if NSSDialogs doesn't implement nsICertificateDialogs (bug 150862). r=kaie, sr=blake.
2002-06-20 23:31:47 +00:00
javi%netscape.com
b81e7cc522
Make the file C++ friendly.
2002-06-20 22:32:38 +00:00
relyea%netscape.com
ffa0ecc514
Reduce the cost of decoding a certificate.
2002-06-20 18:53:16 +00:00
relyea%netscape.com
d7a32bbce6
reduce the calls to get the login state as these calls seem to be pretty expensive
...
for some tokens.
2002-06-20 18:49:45 +00:00
relyea%netscape.com
eb95452896
Patches to reduce the cost of getting attributes on certs or finding certs in lists.
2002-06-20 18:46:47 +00:00
nicolson%netscape.com
43274230b4
catch a null pointer and throw it back to Java, instead of crashing in C.
2002-06-19 22:59:08 +00:00
nicolson%netscape.com
105ed4a40e
upgrade to NSS 3.4.2.
2002-06-19 22:58:40 +00:00
nicolson%netscape.com
ab90ccc5bf
add SSLClientAuth test.
...
remove obsolete socketTest.
Get passwords from a file so we can run in batch mode.
2002-06-19 22:50:47 +00:00
nicolson%netscape.com
9d33093ccb
Fix 112227: set SSL server without nickname
...
Specify the certificate to use for both server and client auth directly,
rather than by nickname.
2002-06-19 20:33:28 +00:00
stephend%netscape.com
aaa4ab622f
Bug 151418. Polish Page Info & Certificate Details. Patch by Stephen Walker <walk84@yahoo.com> r=kaie@netscape.com, sr=jaggernaut@netscape.com
2002-06-19 20:32:54 +00:00
ian.mcgreer%sun.com
48d6b949c1
bug 98926, PKCS#11 session logging
2002-06-19 18:32:57 +00:00
rangansen%netscape.com
bff8c533ce
exporting CERT_VerifyCertChain. r=relyea
2002-06-19 15:58:51 +00:00
ian.mcgreer%sun.com
4cf84d39dd
missed part of last patch (bug 145322)
2002-06-19 15:26:55 +00:00
ian.mcgreer%sun.com
e30639f9cd
bug 145322, second patch, clean up pk11_saveContextHelper
2002-06-19 15:22:54 +00:00
ian.mcgreer%sun.com
607f12501a
bug 145322, reduce the number of PKCS#11 sessions used in SSL connections, implement new function PK11_SaveContextAlloc
...
r=relyea
2002-06-19 15:21:37 +00:00
ian.mcgreer%sun.com
0992642b67
bug 150704, PK11_Finalize can crash because softoken does not implement C_XXXFinal correctly
2002-06-19 14:59:24 +00:00
bishakhabanerjee%netscape.com
19dbdc5df8
correcting init_mcom function to enable "nssqa" to run at Netscape - 150752
2002-06-18 21:45:31 +00:00
relyea%netscape.com
6f356a0f36
1) Map flags both coming and going.
...
2) Finish transaction of the target database not the source database.
2002-06-18 16:41:41 +00:00
kaie%netscape.com
f21ae0fa21
b=145730 Avoid unnecessary repeated "encrypted page" alerts on JavaScript links.
...
r=jst sr=darin
2002-06-18 14:17:10 +00:00
wtc%netscape.com
29df488eaa
Bug 151940: SEC_PKCS12DecoderVerify should call SEC_ASN1DecoderFinish first
...
to detect insufficient input data error.
2002-06-18 05:00:39 +00:00
relyea%netscape.com
27153b6afb
Standardize the open flags as 'enums' when using multiaccess databases, no matter
...
if we are using PR_ versions of the flags or O_ versions of the flags.
2002-06-17 18:46:27 +00:00
kaie%netscape.com
549e28cb1f
b=148610 Lock icon should be updated as early as possible.
...
r=javi sr=rpotts
2002-06-17 09:56:14 +00:00
stephend%netscape.com
f16abb505b
Bug145409. JS strict warnings in certManager.js. Patch by Stephen Walker <walk84@yahoo.com> r=kaie@netscape.com, sr=jaggernaut@netscape.com
2002-06-16 21:19:25 +00:00
nicolson%netscape.com
2d108bf4b9
add new tests.
2002-06-14 18:15:45 +00:00
nicolson%netscape.com
ec04d87172
remove broken code until bug is fixed.
2002-06-14 18:15:21 +00:00
nicolson%netscape.com
ff2ce0953a
remove bogus comment.
2002-06-14 18:13:27 +00:00
relyea%netscape.com
e2f5a0ac1f
check version of the existing DB, not the updatedb.
2002-06-14 17:29:56 +00:00
kaie%netscape.com
36c340f00c
b=119394 Support fetching certificates from LDAP servers.
...
r=javi/dmose sr=mscott
2002-06-14 02:10:02 +00:00
kaie%netscape.com
9202384131
b=150863 Fix lock icon state for low/high crypto mix.
...
r=javi sr=alecf
2002-06-13 23:59:01 +00:00
relyea%netscape.com
d31340924d
Add transactions to the database update portion of the code.
2002-06-13 23:25:37 +00:00
relyea%netscape.com
3839be90f6
Update cert handle on token insertion/removal.
2002-06-13 21:43:30 +00:00
relyea%netscape.com
e84f17e0ea
Add series to keep track of object handle value validity.
2002-06-13 21:42:41 +00:00
relyea%netscape.com
b7167f5cba
Reset the cert cache and clobber cert handles on token insertion an removal
2002-06-13 21:40:43 +00:00
jpierre%netscape.com
8739d6f231
Add missing AOL root CA certs
2002-06-13 10:14:50 +00:00
nicolson%netscape.com
c01ead5178
add javadoc target.
2002-06-12 22:54:16 +00:00
nicolson%netscape.com
caac61f6c1
remove these files--there's no C code in this directory.
2002-06-12 20:18:10 +00:00
nicolson%netscape.com
98fd1b572a
Grab NSS headers from directory "nss" instead of directory "security".
2002-06-12 20:11:22 +00:00
nicolson%netscape.com
d8cf3f39f6
remove makefiles for this directory, since it's only Java files.
2002-06-12 20:08:39 +00:00
kaie%netscape.com
53b1d03a9c
b=126944 Handle NSS error codes within PSM.
...
r=ssaux sr=darin
2002-06-12 16:44:22 +00:00
wtc%netscape.com
aae4410a4d
Bug 150143: use map file to limit exported symbols on Mac OS X. The patch
...
is contributed by Brian Ryner <bryner@netscape.com>.
Modified files: Darwin.mk rules.mk
2002-06-12 00:21:19 +00:00
relyea%netscape.com
696026ef88
When checking NeedInit status, go back and check the token in case the token
...
has been initialized offline.
2002-06-11 23:33:25 +00:00
jpierre%netscape.com
b473a8e33d
Update for root certs - bug 139874
2002-06-11 23:16:25 +00:00
kirk.erickson%sun.com
80cae9e038
Fixed indentation caught by Wan-Teh (66606).
2002-06-11 22:41:45 +00:00
kirk.erickson%sun.com
6e3d00368d
Resolves 66606. Added -O (enable OCSP checking).
2002-06-11 16:29:28 +00:00
ddrinan%netscape.com
c87736a06b
Bug 150708. Incorrect keysize when finding bulk alg. r=wtc.
2002-06-10 22:00:32 +00:00
relyea%netscape.com
bb528345ff
Return public and private keys in the order specified by the PKCS #11 spec.
2002-06-10 20:33:31 +00:00
leaf%mozilla.org
6e6bf977e5
updating locale version string for impending release, bug 149802
2002-06-07 07:45:38 +00:00
alecf%netscape.com
bcf192e308
fix for bug 101761 - REQUIRES update - remove all REQUIRES that are no longer necessary.. r=cls, a=asa (build-only changes)
2002-06-06 20:28:14 +00:00
jpierre%netscape.com
165951e036
Fix for 141256 - rewrite OCSP HTTP download code to fix error handling
2002-06-06 01:05:40 +00:00
jpierre%netscape.com
42c9d8d43b
Fix for 139874 - Inject Latest CA Root Certs
2002-06-06 00:12:56 +00:00
cathleen%netscape.com
64856eb68b
clean up last traces of nsCRT::strlen(char* s), bug 124536 r=dp, sr=brendan
2002-06-04 23:05:39 +00:00
thayes%netscape.com
9355438f45
Reserve OID (netscape_name_components 2) - see 605437
2002-06-04 21:46:05 +00:00
bishakhabanerjee%netscape.com
76c8329a07
to build the new NSS tests.. bugzilla bug 144316
2002-06-03 17:16:57 +00:00
wtc%netscape.com
c99a93829c
Backed out the previous checkin, which is not being used and triggers
...
a bug in gmake 3.76.1 with MKS shell on Windows.
2002-06-01 04:31:44 +00:00
wtc%netscape.com
a1598af613
Use $(DLL_SUFFIX) instead of ${DLL_SUFFIX}.
2002-06-01 04:25:38 +00:00
nicolson%netscape.com
fa1fbd5d69
Fix 147794: PK11_ImportDERPrivateKeyInfoAndReturnKey frees the private key incorrectly.
2002-06-01 00:43:46 +00:00
rangansen%netscape.com
b355617820
Fix to ensure change password on db is commited - using rv == SECSuccess would actually abort it.
...
r = wtc
2002-06-01 00:37:00 +00:00
kaie%netscape.com
0f6f591340
b=138479 Disable Security tab in View Frame Info
...
r=javi sr=jag
2002-05-30 04:56:16 +00:00
wtc%netscape.com
6a49741d7d
This is a test. I changed Revision and Date to bogus values and want to
...
see what actually got checked in.
2002-05-30 02:08:07 +00:00
glen.beasley%sun.com
764659f58f
for release eng to build multiple platforms
2002-05-30 00:47:18 +00:00
wtc%netscape.com
118670f573
Import NSPR 4.2 and DBM 1.61.
2002-05-30 00:36:48 +00:00
nicolson%netscape.com
7c6284c42b
Fix bug 112330: CryptoToken.changePassword(new ConsolePasswordCallback(), new ConsolePasswordCallback()) throws Native Exception.
...
We were zeroing the password after freeing it, which in some cases caused
memory corruption and crashing.
2002-05-29 21:54:14 +00:00
ian.mcgreer%sun.com
7ad9c0cc44
bug 136701, certutil should use PK11_ListCerts
2002-05-29 18:19:33 +00:00
kaie%netscape.com
b9a747d97f
b=130650 In page info, "Security" tab lacks shortcut.
...
r=kaie sr=jag
2002-05-29 03:40:46 +00:00
kaie%netscape.com
bd0b2c053a
b=110195 Master passwords steals focus in prefs
...
r=kaie sr=alecf
2002-05-29 03:32:04 +00:00
kirk.erickson%sun.com
9ef935cd78
Fixed OCSP typo.
2002-05-28 18:26:37 +00:00
wtc%netscape.com
a0715a5bd0
Bug 142575: use the PRIVATE keyword for the /EXPORT linker option.
2002-05-25 16:00:55 +00:00
wtc%netscape.com
278f8fcbfa
Bug 142575: use the /EXPORT linker option on the command line.
...
Modified files: nssinit.c config.mk
2002-05-25 06:52:19 +00:00
wtc%netscape.com
c82e51fc58
Bug 142575: a better fix.
2002-05-25 01:02:39 +00:00
wtc%netscape.com
54db8b9c90
Bug 142575: added function forwarder for 'mktemp' for "bug compatibility".
2002-05-24 21:00:55 +00:00
javi%netscape.com
d19ba0f868
Make pkcs12.h C++ friendly.
2002-05-24 20:11:29 +00:00
wtc%netscape.com
00ab5fdbae
Back out the previous checkin. It broken the cmd/certcgi build.
2002-05-24 14:58:02 +00:00
javi%netscape.com
69088764da
Add macros to make header file C++ friendly.
2002-05-24 00:53:48 +00:00
wtc%netscape.com
b1a997971e
Bug 142575: on Windows added mktemp (which simply calls _mktemp in the C
...
run-time library) to be backward compatible with the bug that mktemp was
accidentally exported from the nss3.dll in NSS 3.2.x and 3.3.x.
2002-05-23 22:28:50 +00:00
kirk.erickson%sun.com
fa04da4ff4
Resolves bug 90070 (now exiting with PK12UERR_PK11GETSLOT 13).
2002-05-23 22:21:42 +00:00
nicolson%netscape.com
f2f9158fd3
Fix 146515: PK11PrivKey.fromPrivateKeyInfo enables no operations for RSA keys
2002-05-23 20:32:10 +00:00
nicolson%netscape.com
da61b269f4
move new entry to end of file
2002-05-23 18:45:23 +00:00
nicolson%netscape.com
3a1cd67cf6
cleanup tabs and spaces.
2002-05-23 18:45:00 +00:00
nicolson%netscape.com
d17d79e101
Various minor tweaks for code cleanliness.
2002-05-23 18:29:07 +00:00
glen.beasley%sun.com
7ef88f180e
bug 144913 isCertValid addition
2002-05-23 17:52:23 +00:00
relyea%netscape.com
a37f083171
Refresh token cache after login on tokens that need to log in before they
...
could read their certs.
2002-05-22 23:13:05 +00:00
relyea%netscape.com
dccf0f20f4
Close our peer database handles because some platforms (Mac) do bad things
...
if you hold two berkelydb handles open to the same database in the same process.
(actually a lot of platforms could cause problems, the Mac version of dbm (1.85)
just does the bad things right away).
2002-05-22 21:47:23 +00:00
nicolson%netscape.com
411f9347cc
Fix http://bugzilla.mozilla.org/show_bug.cgi?id=144934 : generating DSA public key from spec is broken.
2002-05-22 02:13:31 +00:00
relyea%netscape.com
482a55e955
Back out the change on Module destruction.
2002-05-22 00:25:48 +00:00
relyea%netscape.com
dc0b0c243c
Don't crash if url is specified, but the crl is broken
2002-05-21 21:26:52 +00:00
relyea%netscape.com
91abc91169
Missing component when deleting should not be fatal
2002-05-21 21:26:14 +00:00
relyea%netscape.com
3b707d47e7
Fix spelling error.
...
Clear out certs from the cache before the token goes away.
2002-05-21 21:24:35 +00:00
relyea%netscape.com
c936511eb9
Fix spelling error.
2002-05-21 21:23:33 +00:00
relyea%netscape.com
fe96b95117
Clear out certs associated with tokens that have just been taken off the trust domain.
2002-05-21 21:22:55 +00:00
jpierre%netscape.com
d5de75b62b
Fix for bug 137645 - cached certificate does not get its nickname updated after P12 import of matching user certificate
2002-05-20 23:21:39 +00:00
ian.mcgreer%sun.com
dc613b61ee
bug 144309, return value of STAN_GetCERTCertificate not checked
...
r=wtc
2002-05-20 18:05:11 +00:00
ian.mcgreer%sun.com
b60654eafd
fix bustage caused by generated file discrepancies
2002-05-20 16:01:21 +00:00
ian.mcgreer%sun.com
8fca6832bc
need to match ckapi.perl with generated target nssck.api, which was modified
2002-05-20 14:38:48 +00:00
wtc%netscape.com
5b50af192d
Bugzilla bug 145178: added OpenBSD build support. The patch is contributed
...
by Christopher Seawood <seawood@netscape.com>.
Modified Files: coreconf/config.mk sslmutex.c sslmutex.h
Added Files: coreconf/OpenBSD.mk
2002-05-18 03:24:17 +00:00
wtc%netscape.com
a1bc754db7
Bugzilla bug 131171: added HP-UX IPF (ia64) support. Portions of the patch
...
(attachment 84127) were contributed by Jim Dunn <jdunn@netscape.com>.
2002-05-18 00:52:11 +00:00
wtc%netscape.com
c8518d87b7
Bugzilla bug 145128: fixed a typo error in sec_pkcs5_rc4(). Also simplfied
...
two other similar constructs. r=relyea.
2002-05-17 21:29:27 +00:00
kaie%netscape.com
11c622dd7c
b=143532 Only allow toggling FIPS when it is safe to
...
r=javi sr=alecf
2002-05-17 19:56:11 +00:00
ian.mcgreer%sun.com
787847bf44
bug 144448, incorrect use of ## operator in creating CKFW entry points
2002-05-17 18:57:34 +00:00
kaie%netscape.com
7b1433c386
b=144823 Localized certificate name is garbled, unable to send out signed/encrypted mail on a localized build
...
r=javi sr=mscott
2002-05-17 01:21:31 +00:00
relyea%netscape.com
f83a0c6851
Fix Linux and Solaris builds
2002-05-17 00:39:26 +00:00
relyea%netscape.com
ff81ec8d87
The tip is now NSS 3.6, make sure new builds properly indicate this
2002-05-16 22:12:37 +00:00
relyea%netscape.com
2491c84161
Add PK11_GetPBEIV to exported symbol list.
2002-05-16 22:12:10 +00:00
relyea%netscape.com
b9c9b409d6
Add function to get the PBEIV.
2002-05-16 22:06:19 +00:00
relyea%netscape.com
9e71058dbf
Add support to turn on or off optimizations based on parameters to NSS_Init functions
2002-05-16 22:05:17 +00:00
relyea%netscape.com
7828ad6ad0
Make a single softoken which works for both servers and clients depending on configuration.
...
Add the _PAD functions to the internal database token.
2002-05-16 22:04:12 +00:00
rpotts%netscape.com
73de225b01
bug #46856 (r=valeski, sr=darin). API Changes to nsIWebProgress/nsIWebProgressListener)
2002-05-16 20:57:37 +00:00
relyea%netscape.com
81db56051e
Argh. I thought I had compiled this! fixe compile errors.
2002-05-16 20:48:27 +00:00
relyea%netscape.com
ad57ee44a1
Add Transactions (still need to add transactions on database upgrade).
...
Make trust objects their own objects to reduce a couple of unnecessary cert decodes.
2002-05-16 20:39:04 +00:00
wtc%netscape.com
b05d855681
Bug 131171: added HP-UX 11.20 support.
2002-05-16 17:35:41 +00:00
wtc%netscape.com
ec52ca8b50
Bugzilla bug 138532: use pipes instead of semaphores for NetBSD, which does
...
not have semaphore.h. Thanks to Chris Seawood <seawood@netscape.com> for
the patch. Modified files: sslmutex.h sslmutex.c
2002-05-16 13:36:03 +00:00
wtc%netscape.com
9d9c8c4c56
Bugzilla bug 133753: added support for AIX 5.1 to security/coreconf.
2002-05-16 13:12:33 +00:00
wtc%netscape.com
272f7f9153
Fixed build breakage on BeOS -- made the ifdef match the one in sslsnce.c.
2002-05-16 05:32:30 +00:00
kaie%netscape.com
1a9df62b37
b=129067 Deleted certs still appear in Cert Manager.
...
r=javi sr=alecf
2002-05-16 04:03:19 +00:00
kaie%netscape.com
6d4667a84a
b=129067 Backing out unreliable patch.
...
See bugzilla for details.
Better patch will be checked in a minute.
2002-05-16 03:59:36 +00:00
kaie%netscape.com
4876fecd7c
b=136948 Give better feedback when no valid certs for S/Mime are available
...
r=javi sr=mscott
2002-05-16 03:51:37 +00:00
kaie%netscape.com
439537d137
b=144056 security state not reset after loading about:blank pages
...
r=javi sr=rpotts
2002-05-16 03:39:59 +00:00
jpierre%netscape.com
338f2f561a
Fix for 141256 - correct HTTP parsing for OCSP in NSS
2002-05-15 23:59:40 +00:00
dougt%netscape.com
c683a217ab
Fixes mozilla/strings requiring unfrozen nsCRT class. patch by scc, r=dougt, sr=jag, b=136756
2002-05-15 18:55:21 +00:00
relyea%netscape.com
6f20bf6c21
bug 133397. Move AddPermModule() inside the previously empty if statement where it belongs.
2002-05-14 23:16:16 +00:00
kaie%netscape.com
0bc542e7d3
b=137874 Unable to import CA cert before SSL keep alive connection is terminated
...
r=javi sr=alecf
2002-05-14 20:46:03 +00:00
kaie%netscape.com
a856cfb637
Backing out code from bug 102633 and the unsuccessful fix attempt from bug 137530, because the UI does not work as expected.
...
r=javi / sr=alecf for backing out
2002-05-14 20:42:54 +00:00
nicolson%netscape.com
9bd721b3fc
Support DSAPrivateKey.
2002-05-14 02:21:25 +00:00
wtc%netscape.com
8e09a8cca3
Bugzilla bug 135069: SEC_PKCS12DestroyExportContext should free the slot
...
reference allocated in SEC_PKCS12CreateExportContext. r=relyea,mcgreer.
2002-05-13 17:22:46 +00:00
wtc%netscape.com
0c57191723
Bugzilla bug 135824: fixed slot reference leaks in signtool and removed
...
a faulty attempt to set user trust. r=relyea,mcgreer.
Modified files: certgen.c util.c
2002-05-13 17:08:20 +00:00
wtc%netscape.com
f6f0339d00
Bugzilla bug 135052: more cleanup in SEC_PKCS12DecoderStart. r=relyea.
2002-05-10 23:10:06 +00:00
jpierre%netscape.com
e1a3c306e8
Fix for bug 142868 - CA certificates are imported with NULL nicknames .
2002-05-10 20:21:38 +00:00
relyea%netscape.com
94a587472a
Add function to determine if it's safe to delete the internal module.
2002-05-10 18:36:18 +00:00
relyea%netscape.com
fdca53cf70
Detect when we have a previously deleted internal module which has not yet been freed, and don't try to switch to it.
2002-05-10 18:13:44 +00:00
relyea%netscape.com
3ee0c3c996
Add new error code for trying to all previously deleted modules which have not yet been freed.
2002-05-10 18:12:39 +00:00
relyea%netscape.com
0d88474fba
Allow both FIPS and non-FIPS tokens to be initialized and active at the same time.
2002-05-10 18:11:37 +00:00
relyea%netscape.com
610b845a52
When we force, we should preserve the NULL nickname semantics.
2002-05-10 18:10:26 +00:00
nicolson%netscape.com
3ebe79c4e3
comment out JDK 1.4 test so we can build with earlier versions
2002-05-10 00:13:19 +00:00
nicolson%netscape.com
89807692f8
Don't run javac if there are no source files to compille
2002-05-10 00:12:44 +00:00
wtc%netscape.com
a8cdaf3aca
Bugzilla bug 135821: fixed the internal slot reference leak in
...
PK11_WrapPrivKey. r=relyea.
2002-05-09 23:34:24 +00:00
wtc%netscape.com
9c38dd9727
Bugzilla bug 135809: fixed the slot reference leaks in PBE_CreateContext
...
and SEC_PKCS5GetIV. r=relyea.
2002-05-09 23:21:16 +00:00
wtc%netscape.com
0daca2313b
Bugzilla bug 135818: fixed internal slot reference leaks in
...
PK11_VerifySlotMechanisms and PK11_InitToken. r=relyea.
2002-05-09 23:18:15 +00:00
wtc%netscape.com
363fb30239
Bugzilla bug 135826: fixed the slot reference leaks.
2002-05-09 23:01:21 +00:00
ian.mcgreer%sun.com
6804ba674f
bug 135808, STAN_GetDefaultCryptoToken appears to leak a slot reference, but there are no callers of it. Removing function.
...
r=wtc
2002-05-09 22:42:23 +00:00
wtc%netscape.com
894efe87d2
Bugzilla bug 135334: free the internal key slot reference when we are done.
2002-05-09 21:14:36 +00:00
wtc%netscape.com
43f8939e7c
Bugzilla bug 135058: free nickCopy on error returns in
...
PK11_FindCertsFromNickname. r=mcgreer.
2002-05-09 20:01:18 +00:00
nicolson%netscape.com
607b7e8309
add SocketBase.getLocalAddressNative.
2002-05-09 17:11:18 +00:00
nicolson%netscape.com
a9fb648aec
Fix 143256: SSLServerSocket.getInetAddress returns the wrong address.
...
Implement toString() for both socket types.
2002-05-09 17:10:06 +00:00
nicolson%netscape.com
2134638d66
add more PBE keygen algorithms.
2002-05-09 14:32:54 +00:00
nicolson%netscape.com
64576fd7fe
update to work better with PBE.
2002-05-09 14:32:33 +00:00
nicolson%netscape.com
67a8c281e6
get rid of PBEKeySpec, just use PBEKeyGenParams.
2002-05-09 14:29:07 +00:00
glen.beasley%sun.com
c87a19a616
115778 return local port
2002-05-09 02:26:25 +00:00
kaie%netscape.com
4443c130a5
b=137530 Fix checkboxes in Edit Cipher dialog.
...
r=javi sr=hewitt idea-for-fix=varga
2002-05-08 19:06:11 +00:00
darin%netscape.com
2ec96af213
fixing mac bustage (next time i'll remember to build PSM on my mac)
2002-05-08 00:07:23 +00:00
wtc%netscape.com
0a6086505a
Bugzilla bug 136279: Return oldpath only if it is different from path.
...
Avoid an unnecessary call to SECMOD_HasRootCerts in nss_FindExternalRoot.
2002-05-07 23:35:22 +00:00
darin%netscape.com
6fd5862e6e
fixes bug 142870 "nsIFile should use UCS-2 instead of UTF-8"
...
r=dougt sr=alecf
2002-05-07 23:07:19 +00:00
nicolson%netscape.com
05963322d2
change assert to _assert.
2002-05-07 20:45:09 +00:00
nicolson%netscape.com
dd6484222e
add some checks to prevent misunderstandings
2002-05-07 20:44:48 +00:00
relyea%netscape.com
56f8e3b5e8
Automatically create a NULL email profile for certs with email addresses which
...
are imported into the internal token.
2002-05-07 20:38:59 +00:00
nicolson%netscape.com
c0a935fe8a
update version numbers.
2002-05-07 20:34:54 +00:00
nicolson%netscape.com
eb72e56e0a
make it public so that it can be instantiated from CryptoManager.
2002-05-07 20:34:05 +00:00
nicolson%netscape.com
a62c7231f1
implement some methods in support of java.security.Key.
2002-05-07 20:33:23 +00:00
nicolson%netscape.com
e3bf596343
fix broken error message.
2002-05-07 20:32:29 +00:00
ian.mcgreer%sun.com
3a91379d33
bug 141936, crash when NULL nickname entry is stored in temp store
...
r=jpierre
2002-05-07 20:31:59 +00:00
nicolson%netscape.com
e0f7d257cc
Now SymmetricKey knows what KeyGenAlgorithm its associated with.
2002-05-07 20:31:52 +00:00
nicolson%netscape.com
2b7211a011
force load of SHA1 provider before installing it as a provider.
2002-05-07 20:31:14 +00:00
nicolson%netscape.com
1795a4d054
add JCE providers.
2002-05-07 20:30:38 +00:00
nicolson%netscape.com
705e4b5479
update version strings.
2002-05-07 20:24:03 +00:00
ian.mcgreer%sun.com
d250a3e38f
bug 142175, PK11_ListCerts regressions -- handle PKCS#11 incompatibilites with serial numbers, and fix trust collection.
2002-05-07 14:58:12 +00:00
kaie%netscape.com
20d03f9370
b=141871 Releasing callback in nsNSSSocketInfo must be proxied.
...
r=javi sr=alecf
2002-05-07 09:35:00 +00:00
kaie%netscape.com
ac1bfbc0b2
b=112384 Unable to download some CRLs.
...
r=javi sr=darin
2002-05-07 09:29:23 +00:00
kaie%netscape.com
a1ca0c87e8
b=139329 Crashes trying to send signed mail.
...
r=javi sr=alecf
2002-05-07 09:25:19 +00:00
jpierre%netscape.com
41ba83e283
Fix for 142658 - fix certutil crash with NULL nickname
2002-05-06 23:10:40 +00:00
nicolson%netscape.com
3e92affe57
Renamed to JSS*.
2002-05-06 21:54:38 +00:00
nicolson%netscape.com
cb9ba101a4
Sun's PBE Key Spec is incomplete.
2002-05-06 18:58:39 +00:00
nicolson%netscape.com
314c5a982b
add DESede.
2002-05-06 18:49:52 +00:00
wtc%netscape.com
300f9cadfe
Bugzilla bug 136279: fixed bugs where 'path' and 'oldpath' were passed
...
to string functions before they were null-terminated. Added a comment
to explain what 'oldpath' is for.
2002-05-03 20:59:50 +00:00
nicolson%netscape.com
b02b8aab56
move alg-specific provider classes into generic parent classes.
2002-05-03 00:27:03 +00:00
nicolson%netscape.com
169b621765
upgrade to NSS 3.4.1 RTM and NSPR 4.2.
2002-05-02 23:02:49 +00:00
nicolson%netscape.com
f7c27d4ae8
New provider files for JSS 3.2.
2002-05-02 20:25:15 +00:00
ian.mcgreer%sun.com
f0d29104b1
bug 141355, CERT_DecodeDERCertificate is not a safe function for some uses, must be replaced with CERT_NewTempCertificate.
2002-05-02 19:00:13 +00:00
relyea%netscape.com
7143d6f89c
Fix the RSA key check to correctly accept keys with p < q.
2002-05-02 17:39:13 +00:00
glen.beasley%sun.com
0cc88d04eb
bug 131308 build 64 bit JSS with JDK 1.4
2002-05-02 04:37:16 +00:00
glen.beasley%sun.com
6ddc297e30
bug 129394 change assert to _assert
2002-05-02 04:04:23 +00:00
kaie%netscape.com
29ca7dc66d
b=139948 SSL Tooltip not updated when going from one ssl site to another
...
r=javi sr=jag
2002-05-01 14:15:27 +00:00
jpierre%netscape.com
e7ee105522
Fix for 136279 - initialize NSS in a way compatible with < 3.4 versions of NSS
2002-05-01 01:04:41 +00:00
wtc%netscape.com
e4f5bd3810
Bugzilla bug 127062: use PR_MSG_PEEK instead of MSG_PEEK.
2002-05-01 00:21:50 +00:00
wtc%netscape.com
10bae1a1e3
Bugzilla bug 131057: define PORT_Strdup as a function that calls PORT_Alloc.
...
Modified files:
lib/ckfw/nsprstub.c lib/fortcrypt/swfort/pkcs11/stub.c
lib/nss/nss.def lib/util/secport.c lib/util/secport.h
2002-05-01 00:06:39 +00:00
wtc%netscape.com
4747c98947
Whitespace change.
2002-04-30 00:11:19 +00:00
relyea%netscape.com
cec43732fb
Use NewTempCert and AddTempCert when importing because the cert may already exist
...
in the cache.
2002-04-29 23:54:07 +00:00
darin%netscape.com
e554d83626
fixes bug 129279 "nsIFile unicode/utf8/ascii task"
...
r=dougt sr=alecf
2002-04-27 05:33:09 +00:00
wtc%netscape.com
35e9736426
Added pkibase.c to the project.
2002-04-26 23:29:19 +00:00
wtc%netscape.com
787be44323
Needed a (char *) cast for slotInfo.manufacturerID because it is an array
...
of "unsigned" chars. Mac's compiler complains about that.
2002-04-26 23:05:40 +00:00
jgmyers%netscape.com
bf7e6b01fd
Remove ssl-forcehandshake workaround r=kaie/rpotts/bienvenu sr=darin
2002-04-26 23:02:11 +00:00
wtc%netscape.com
4841e2949f
Removed devobject.c from the project. That file was removed.
2002-04-26 22:52:07 +00:00
wtc%netscape.com
2762eaebca
Need to define SHLIB_SUFFIX for lib/softoken/dbinit.c.
2002-04-26 22:42:15 +00:00
relyea%netscape.com
3d3a200209
return error when incomplete shutdown has been detected.
2002-04-26 22:36:07 +00:00
ian.mcgreer%sun.com
cdae9ed5a1
When doing cert traversals, create the certs in full as they are found. This avoids thrashing the softoken's object cache when the database has a large number of certs.
2002-04-26 14:34:05 +00:00
ian.mcgreer%sun.com
74b86448f7
fix broken HPUX builds
2002-04-26 12:59:06 +00:00
relyea%netscape.com
600cb240a3
Add code to update nickname and 'CKA_ID' from set attribute calls. This allows
...
us to add a nickname to a cert after we import it from pkcs #12 .
2002-04-26 01:44:33 +00:00
relyea%netscape.com
fbb0134208
Write the nickname entry as well when adding a nickname to a bug.
2002-04-26 01:09:21 +00:00
relyea%netscape.com
2cd6213ca5
Detect Active Card presents and disable PROTECTED_PIN_PATH login when found.
2002-04-25 21:24:47 +00:00
wtc%netscape.com
d3e14fdce2
Deleted code that was made obsolete by the previous revision.
2002-04-25 21:10:09 +00:00