Commit Graph

364 Commits

Author SHA1 Message Date
nicolson%netscape.com
c3e4461e42 Fix 225615: memory leak in SSLSocket.socketConnect. 2003-11-13 23:10:13 +00:00
wtc%netscape.com
7124399198 Bugzilla bug 216117: added a TokenProxy member to the PK11Cert class to
store the slot pointer for the certificate *instance*.  This slot pointer
is not necessarily cert->slot.  Try to get the correct slot pointer for a
cert instance where possible.  This patch helps us handle multiple
instances of the same cert better.
Modified Files:
	PK11Finder.c pkcs11/PK11Cert.c pkcs11/PK11Cert.java
	pkcs11/PK11InternalCert.java pkcs11/PK11InternalTokenCert.java
	pkcs11/PK11Store.c pkcs11/PK11Token.c
	pkcs11/PK11TokenCert.java pkcs11/pk11util.h
	provider/java/security/JSSKeyStoreSpi.c ssl/SSLServerSocket.c
	ssl/callbacks.c ssl/common.c ssl/jssl.h util/java_ids.h
2003-09-24 22:20:15 +00:00
wtc%netscape.com
9c91edd706 Bugzilla bug 220209: fixed a cert reference leak in
JSSL_CallCertSelectionCallback if the PK11_FindKeyByAnyCert call fails.
2003-09-24 21:07:17 +00:00
wtc%netscape.com
d4c0e6f2e4 Deleted unused code. 2003-09-23 22:56:46 +00:00
wtc%netscape.com
72601483e7 Set JSS version to 3.4.2 Beta 1.
Modified Files: CryptoManager.java util/jssver.h
2003-09-23 20:57:15 +00:00
wtc%netscape.com
c1499f4a08 Bugzilla bug 219756: fixed a CERTCertificate reference leak. 2003-09-20 00:27:30 +00:00
nicolson%netscape.com
ec0fcca998 Update JSS to version 3.4.1. 2003-08-27 00:08:43 +00:00
wtc%netscape.com
ca9de7e2fa Bugscape bug 50033: make the KeyType class public and force it to load
during CryptoManager.initialize(), before we add JSS as a provider.  The
KeyType class was failing to load properly, because its static initializers
force the class load of KeyWrapAlgorithm, whose signature needed to be
verified, which invoked JSS's signature provider, which accessed KeyType.
Basically, installing JSS as the default signature provider before its
classes have loaded creates a possibility of circular dependencies in class
initialization.  The patch is due to Jamie Nicolson.  r=wtc.
Modified Files: CryptoManager.java pkcs11/KeyType.java
2003-08-15 01:00:35 +00:00
wtc%netscape.com
1d0969818d Bugscape bug 49314: code cleanup. Throw InvalidKeyException directly
instead of NoSuchAlgorithmException.
2003-08-07 21:45:35 +00:00
glen.beasley%sun.com
f0a3999250 215190 delete CA created certs 2003-08-07 00:34:32 +00:00
nicolson%netscape.com
75d97a0079 Convert public key to JSS public key. 2003-08-05 18:54:49 +00:00
glen.beasley%sun.com
6ded2b6eb3 remove no longer used include blapi.h 2003-07-24 23:01:08 +00:00
nicolson%netscape.com
9eaa5fbd47 Remove dependency on secrng.h. We don't need it. 2003-07-11 18:13:26 +00:00
nicolson%netscape.com
f0f344e82a update to JSS 3.4 RTM. 2003-05-19 21:44:23 +00:00
nicolson%netscape.com
822995bd0b Partial fix for 189964: support more algorithm names. 2003-05-19 18:36:38 +00:00
glen.beasley%sun.com
c257837f18 201047 ssl timeouts 2003-05-14 22:34:38 +00:00
nicolson%netscape.com
027947b867 Fix 205066: double-free in PK11KeyGenerator.c:constructSHA1PBAKey() 2003-05-14 00:04:02 +00:00
nicolson%netscape.com
7cd1436ceb Fix 205069: broken loop logic in PFX.java. 2003-05-09 19:02:56 +00:00
nicolson%netscape.com
36d2120328 Replace unnecessary Debug.trace() statement with a comment in the code. 2003-05-09 18:57:15 +00:00
nicolson%netscape.com
f7123ebbf1 Improve parameter class handling. 2003-04-28 23:32:39 +00:00
nicolson%netscape.com
ae6470da30 Fix blackflag 619793: support RC2/CBC/PKCS5Padding. 2003-04-28 21:48:33 +00:00
nicolson%netscape.com
3d44a05368 Move to JSS 3.4 beta. 2003-04-28 21:28:00 +00:00
glen.beasley%sun.com
5973e1c1e8 201245 convert SecretKey to SecretKeyFacade 2003-04-21 21:38:34 +00:00
nicolson%netscape.com
0aa4ee62dd Take out bogus dependency on ASN1Util. 2003-04-15 23:21:04 +00:00
nicolson%netscape.com
91109807f8 Fix 202182: Base64InputStream throws EOFException on valid input. 2003-04-15 22:39:36 +00:00
nicolson%netscape.com
97011b8592 Catch NULL pointers before passing them to C and risking a crash.
Improve javadoc.
2003-04-15 21:55:53 +00:00
nicolson%netscape.com
f05b22eedd Remove misleading comment. 2003-04-09 21:30:19 +00:00
nicolson%netscape.com
bbedcf3afe Fix 198125: PK11Signature.engineUpdateNative ignores offset and length. 2003-03-19 00:57:29 +00:00
nicolson%netscape.com
9460ab9be1 Upgrade version from 3.2 to 3.3.
Uncomment MessageDigest implementations (doh!).
2003-01-01 02:58:22 +00:00
nicolson%netscape.com
5e1bcfd6d2 Add DigestTest to all.pl.
Make DigestTest and SigTest return nonzero error code on failure.
2003-01-01 02:57:50 +00:00
nicolson%netscape.com
76ceb77be4 Fix 186097: ProofOfPossession.encode() has paranoid assertion. 2002-12-19 02:31:38 +00:00
nicolson%netscape.com
a7f090b8a6 Partial fix for 184754: assertion violation in get_token_certs_for_cache.
Don't assert if we fail to lookup the cert we just imported. It could
be a bug in the PKCS #11 driver. Instead, throw an exception.
2002-12-18 23:14:48 +00:00
nicolson%netscape.com
f5c66b92aa Fix 180827: Update version strings for JSS 3.3. 2002-12-13 06:12:30 +00:00
nicolson%netscape.com
844a47f512 Fix 180396: javax.crypto.Cipher wrapping does not work with RSA algorithm.
Support RSA as a wrapping/unwrapping algorithm.
2002-11-19 00:41:09 +00:00
nicolson%netscape.com
80f7fdb602 Throw InvalidKeyException instead of InvalidAlgorithmParameterException,
because the latter may get thrown away by our caller, but the former will
not be.
2002-11-19 00:39:43 +00:00
nicolson%netscape.com
929e00e5b5 Change silly switch statement to an if statement. 2002-11-19 00:31:10 +00:00
nicolson%netscape.com
5f21037ae6 Make NotExtractableException take a String argument to its constructor. 2002-11-19 00:30:43 +00:00
nicolson%netscape.com
62297d34ca default doesProduceOutput to true for compatibility. 2002-11-08 02:24:20 +00:00
nicolson%netscape.com
ac141012ed Add isExtensionPresent and getExtension. 2002-11-08 00:40:26 +00:00
glen.beasley%sun.com
d39fba9d10 removes sun provider and set passwords 2002-11-07 22:49:26 +00:00
glen.beasley%sun.com
da13ded012 move removeSunProvider after JSS JCE provider is loaded 2002-11-07 03:33:04 +00:00
nicolson%netscape.com
c6fdcc6563 Add license header to new file. 2002-11-06 03:24:39 +00:00
nicolson%netscape.com
ecfe6a3ccd Add TestSDR, to test the new SecretDecoderRing.
In all.pl, always set the CLASSPATH to be the signed JSS JAR file, so
that we can use the JCE (javax.crypto.*) interface.
2002-11-06 03:22:10 +00:00
nicolson%netscape.com
7ddd008d89 Correctly detect a missing key. 2002-11-06 03:20:53 +00:00
nicolson%netscape.com
10b3205212 Improve InvalidBERException.
Add feature of SEQUENCE.OF_Template whereby elements need not produce
any output. This is for dealing with very large SEQUENCEs, such as
large CRLs, where the list should be processed in some way, but not made
into an ASN1 object hierarchy.
2002-11-06 02:00:55 +00:00
nicolson%netscape.com
bf773f650f update version strings. 2002-10-18 23:59:01 +00:00
nicolson%netscape.com
c30e440420 The new SecretDecoderRing. 2002-10-17 00:33:42 +00:00
nicolson%netscape.com
9327ee2bc2 Generate a permanent key pair, since KeyStore isn't working yet. 2002-10-17 00:32:48 +00:00
nicolson%netscape.com
2ed819fbe8 remove print statements. 2002-10-17 00:07:50 +00:00
nicolson%netscape.com
0dc2c94550 Forget KeyStore, it is still very broken. 2002-10-17 00:07:29 +00:00
nicolson%netscape.com
9f40fcb3c9 More little hacks, but it still doesn't work right. 2002-10-17 00:07:08 +00:00
nicolson%netscape.com
f061515562 Fix an implementation detail. 2002-10-17 00:05:53 +00:00
nicolson%netscape.com
5a6988bce7 Temporary fix for 164692: SSL ops that timeout should throw
java.net.SocketTimeoutException.
2002-10-11 03:49:34 +00:00
glen.beasley%sun.com
827c5b030a 171027 removed deprecated code 2002-10-10 04:35:56 +00:00
nicolson%netscape.com
07d11e97ed fix warning. 2002-10-07 18:00:28 +00:00
nicolson%netscape.com
cc61c535dd Fix 158727: JSSKeyStoreSpi.getCertificateChain is questionable.
Make KeyStore.getCertificateChain() work.
2002-10-05 00:19:49 +00:00
nicolson%netscape.com
a2394e4148 Fix 162904: Missing invalidityDate in RevRequest in CMMF package.
Update RevRequest to conform to RFC 2797.
Also updated the CRLReason enumeration.
2002-10-04 22:46:04 +00:00
nicolson%netscape.com
82f245ad70 Fix 160028: JSSKeyGeneratorSpi.HmacSHA1 should be renamed to PBAHmacSHA1. 2002-10-04 22:27:46 +00:00
nicolson%netscape.com
ef56ced392 Fix 160017: getAlgorithm() not implemented for PKCS #11 keys. 2002-10-04 22:13:21 +00:00
nicolson%netscape.com
d227f02eee Open up the class a little. 2002-10-04 21:18:35 +00:00
nicolson%netscape.com
f013957a9e Remove hardcoded algorithms (now that NSS bug 162761 is fixed). 2002-10-04 21:05:18 +00:00
nicolson%netscape.com
035d09e748 Deprecate this, start using javax.crypto.BadPaddingException instead. 2002-10-04 21:04:37 +00:00
nicolson%netscape.com
ad556c8a45 Fix EncryptionAlgorithm to handle lookups from JCA descriptions.
Support CipherSpi.engineGetKeySize.
Handle javax.crypto.spec.IvParameterSpec.
Handle multiple parameter classes.
2002-10-04 21:04:09 +00:00
nicolson%netscape.com
d761e8497b support storing private and symmetric keys (now that NSS bug 128172 is fixed). 2002-10-04 21:02:50 +00:00
nicolson%netscape.com
cac200a7c2 Handle AES keys. 2002-10-04 21:02:16 +00:00
nicolson%netscape.com
3fd1601e52 allow algorithms to support multiple parameter classes. 2002-10-04 21:00:58 +00:00
nicolson%netscape.com
a793f44808 Cleanup spurious printlns and exceptions. 2002-10-04 20:59:20 +00:00
nicolson%netscape.com
19c38d81ff Add SymmetricKey.getLength(). 2002-10-04 20:58:05 +00:00
nicolson%netscape.com
65af04c0b9 Fix error message when we find something unexpected in a SEQUENCE. 2002-09-27 00:07:11 +00:00
nicolson%netscape.com
72d7f9c27c override INTEGER.getTemplate() with one that returns an ENUMERATED.Template. 2002-09-26 23:25:21 +00:00
nicolson%netscape.com
17483a5da8 Fix 160024: remove class JSSJCEProvider. 2002-09-19 01:22:52 +00:00
nicolson%netscape.com
d6b5ddebcd make SPKI.getEncoded() actually return itself, DER-encoded. This way it
correctly implements X509EncodedKeySpec.
2002-09-19 01:16:41 +00:00
nicolson%netscape.com
9691a59be5 more descriptive error message. 2002-09-19 01:15:36 +00:00
nicolson%netscape.com
4a6c72448b Fix 150720: Support KeyFactory.generatePrivate(DSAPrivateKeySpec). 2002-09-19 01:14:08 +00:00
nicolson%netscape.com
b3fdb4c8db Fix 157513: SignerInfo.java does not verify what it have signed. 2002-09-16 19:42:13 +00:00
sonja.mirtitsch%sun.com
d7ae78b606 if USE_64 is set use option -d64 to java
write to stderr like the programs do so output is in order and logfiles
	are clean
fixed path so script works on NT
tarted to put in markers strings so a status report script will be
	able to find the things
clean fix for the NATIVE_FLAG problem
more output for the ENVIRONMENT section
2002-09-13 00:24:34 +00:00
nicolson%netscape.com
7c36a5ea49 Fix 160020: KeyFactory.translateKey uses bad format names. 2002-09-09 23:21:45 +00:00
nicolson%netscape.com
24ac9ef616 Initialize variable to null. Indicated by bug 160076: Crashes when the
PasswordCallback returns an invalid password.
2002-09-09 21:24:48 +00:00
nicolson%netscape.com
13520fed74 deal with new exceptions. 2002-09-06 16:23:48 +00:00
nicolson%netscape.com
ab02daa4a8 Fix 166711: SSLSocket.setCipherPreference does the wrong thing. 2002-09-05 01:17:00 +00:00
nicolson%netscape.com
b3a2ea855b "assert" is now a keyword, so remove this method. 2002-09-05 01:06:26 +00:00
nicolson%netscape.com
5f68a9a11b Take out the NSS_USE_STATIC_LIBS flag. I have no idea why we needed it before. 2002-08-29 18:07:42 +00:00
nicolson%netscape.com
d784f5eac1 Fix 143163: Add public constructors for some CRMF classes. 2002-08-28 18:20:24 +00:00
nicolson%netscape.com
778302c1c6 merge premature JSS_3_2_BRANCH back to the trunk. 2002-08-28 18:05:40 +00:00
nicolson%netscape.com
506b620d77 clean up comments 2002-08-28 17:57:48 +00:00
nicolson%netscape.com
a84510a250 useful getAlgorithm method. 2002-08-28 17:57:20 +00:00
nicolson%netscape.com
4c9a4cc39d remove alg-dependent code. 2002-08-28 17:56:48 +00:00
nicolson%netscape.com
e1813e1cc3 fix bugs in keygen, particularly that break AES. 2002-08-28 17:56:15 +00:00
glen.beasley%sun.com
70ab9c67cb 163762 verify cert test example 2002-08-27 21:50:44 +00:00
glen.beasley%sun.com
cb0a78f863 163762 make OCSP responder configurable at runtime 2002-08-27 21:46:13 +00:00
nicolson%netscape.com
2377d2f3f6 syntax error wasn't caught because of bug in build script. 2002-08-26 17:22:02 +00:00
nicolson%netscape.com
d2296480fd A FilterInputStream to decode base64-encoded data. 2002-08-23 23:17:00 +00:00
nicolson%netscape.com
aab844b223 Remove try/catch block when loading libjss. This allows any UnsatisfiedLinkError
to get thrown to the application, where it can print it out with all its
information. Also stop checking for jssjava.
2002-08-14 23:00:45 +00:00
glen.beasley%sun.com
178cd7c22b commented debug statement 2002-08-06 16:41:43 +00:00
nicolson%netscape.com
994e4ce3a2 Turn off the beta flag. Time for JSS 3.2 RTM! 2002-07-31 22:36:06 +00:00
nicolson%netscape.com
10ca31b470 Fix 157998: unable to importCertToPerm 2002-07-19 00:20:24 +00:00
glen.beasley%sun.com
51a67c36d3 typecast for AIX build proper way 2002-07-17 01:14:58 +00:00
glen.beasley%sun.com
966f2ff5b0 typecast for AIX build 2002-07-16 23:52:45 +00:00
nicolson%netscape.com
2bf050cc40 Fix 157622: cleanup javadoc warnings.
These changes should only affect documentation. There should be no
functional effect of the changes.
2002-07-15 22:48:06 +00:00
nicolson%netscape.com
44dd584a7a put back the assertion check. 2002-07-12 21:12:22 +00:00
nicolson%netscape.com
fbb8083387 Fix misspelled exception name. 2002-07-12 21:08:22 +00:00
nicolson%netscape.com
8272ce3448 add default constructor 2002-07-12 21:07:40 +00:00
nicolson%netscape.com
79ef0013a6 This test isn't working yet, but I may get it working at some point. 2002-07-12 20:33:39 +00:00
nicolson%netscape.com
528f0be217 Fix 98613: using SSLSocket after close causes crash.
Now the SSLSocket and SSLServerSocket close() methods only call PR_Close()
on the underlying fd. Freeing data structures is postponed until the
Java object is finalized.
2002-07-12 04:26:56 +00:00
nicolson%netscape.com
de40255dcc clarify error message. 2002-07-12 04:09:14 +00:00
glen.beasley%sun.com
3a0bcb0fb2 verify certificate in memory method 2002-07-04 00:36:52 +00:00
nicolson%netscape.com
5deb4aec40 Fix 120785: SSLSocket does not throw java.net.BindException. 2002-07-04 00:29:24 +00:00
nicolson%netscape.com
0e19cf236a need to include nspr.h. 2002-07-04 00:25:46 +00:00
nicolson%netscape.com
ae2a06d43f Fix 121710: throw better SSL exceptions. 2002-07-04 00:03:47 +00:00
nicolson%netscape.com
9db79236dd Print subject name instead of issuer name. 2002-07-03 23:58:58 +00:00
nicolson%netscape.com
8d5e4dc7c6 Update documentation for these functions. 2002-07-03 23:57:12 +00:00
nicolson%netscape.com
4bda169e18 deprecate old classes in favor of the JCA. 2002-07-03 23:51:20 +00:00
nicolson%netscape.com
3c7759665e moved JSSSecureRandomSpi into provider/java/security directory. 2002-07-03 23:49:32 +00:00
nicolson%netscape.com
0254942b89 Provider classes have been moved into the java/security and javax/crypto
subdirectories.
2002-07-03 23:48:53 +00:00
nicolson%netscape.com
1daf49c785 Fix 106846: Version strings in CryptoManager need updating. 2002-07-03 23:46:02 +00:00
nicolson%netscape.com
e6e1da9b32 typo in error message 2002-06-28 20:14:47 +00:00
nicolson%netscape.com
bb9ae88653 remove spurious println. 2002-06-27 21:16:42 +00:00
nicolson%netscape.com
01f5e0790f Fix 128259: Cannot get SSL trust for a CA residing on PKCS#11 module. 2002-06-21 23:53:58 +00:00
nicolson%netscape.com
fe199405d1 fix a build error in JDK 1.2. 2002-06-21 18:31:36 +00:00
nicolson%netscape.com
43274230b4 catch a null pointer and throw it back to Java, instead of crashing in C. 2002-06-19 22:59:08 +00:00
nicolson%netscape.com
ab90ccc5bf add SSLClientAuth test.
remove obsolete socketTest.
Get passwords from a file so we can run in batch mode.
2002-06-19 22:50:47 +00:00
nicolson%netscape.com
9d33093ccb Fix 112227: set SSL server without nickname
Specify the certificate to use for both server and client auth directly,
rather than by nickname.
2002-06-19 20:33:28 +00:00
nicolson%netscape.com
2d108bf4b9 add new tests. 2002-06-14 18:15:45 +00:00
nicolson%netscape.com
ec04d87172 remove broken code until bug is fixed. 2002-06-14 18:15:21 +00:00
nicolson%netscape.com
ff2ce0953a remove bogus comment. 2002-06-14 18:13:27 +00:00
nicolson%netscape.com
caac61f6c1 remove these files--there's no C code in this directory. 2002-06-12 20:18:10 +00:00
nicolson%netscape.com
98fd1b572a Grab NSS headers from directory "nss" instead of directory "security". 2002-06-12 20:11:22 +00:00
nicolson%netscape.com
d8cf3f39f6 remove makefiles for this directory, since it's only Java files. 2002-06-12 20:08:39 +00:00
nicolson%netscape.com
7c6284c42b Fix bug 112330: CryptoToken.changePassword(new ConsolePasswordCallback(), new ConsolePasswordCallback()) throws Native Exception.
We were zeroing the password after freeing it, which in some cases caused
memory corruption and crashing.
2002-05-29 21:54:14 +00:00
nicolson%netscape.com
f2f9158fd3 Fix 146515: PK11PrivKey.fromPrivateKeyInfo enables no operations for RSA keys 2002-05-23 20:32:10 +00:00
nicolson%netscape.com
3a1cd67cf6 cleanup tabs and spaces. 2002-05-23 18:45:00 +00:00
nicolson%netscape.com
d17d79e101 Various minor tweaks for code cleanliness. 2002-05-23 18:29:07 +00:00
glen.beasley%sun.com
7ef88f180e bug 144913 isCertValid addition 2002-05-23 17:52:23 +00:00
nicolson%netscape.com
411f9347cc Fix http://bugzilla.mozilla.org/show_bug.cgi?id=144934: generating DSA public key from spec is broken. 2002-05-22 02:13:31 +00:00
nicolson%netscape.com
9bd721b3fc Support DSAPrivateKey. 2002-05-14 02:21:25 +00:00
nicolson%netscape.com
3ebe79c4e3 comment out JDK 1.4 test so we can build with earlier versions 2002-05-10 00:13:19 +00:00
nicolson%netscape.com
a9fb648aec Fix 143256: SSLServerSocket.getInetAddress returns the wrong address.
Implement toString() for both socket types.
2002-05-09 17:10:06 +00:00
nicolson%netscape.com
2134638d66 add more PBE keygen algorithms. 2002-05-09 14:32:54 +00:00
nicolson%netscape.com
64576fd7fe update to work better with PBE. 2002-05-09 14:32:33 +00:00
nicolson%netscape.com
67a8c281e6 get rid of PBEKeySpec, just use PBEKeyGenParams. 2002-05-09 14:29:07 +00:00
glen.beasley%sun.com
c87a19a616 115778 return local port 2002-05-09 02:26:25 +00:00
nicolson%netscape.com
c0a935fe8a update version numbers. 2002-05-07 20:34:54 +00:00
nicolson%netscape.com
eb72e56e0a make it public so that it can be instantiated from CryptoManager. 2002-05-07 20:34:05 +00:00
nicolson%netscape.com
a62c7231f1 implement some methods in support of java.security.Key. 2002-05-07 20:33:23 +00:00
nicolson%netscape.com
e3bf596343 fix broken error message. 2002-05-07 20:32:29 +00:00
nicolson%netscape.com
e0f7d257cc Now SymmetricKey knows what KeyGenAlgorithm its associated with. 2002-05-07 20:31:52 +00:00
nicolson%netscape.com
2b7211a011 force load of SHA1 provider before installing it as a provider. 2002-05-07 20:31:14 +00:00
nicolson%netscape.com
1795a4d054 add JCE providers. 2002-05-07 20:30:38 +00:00
nicolson%netscape.com
705e4b5479 update version strings. 2002-05-07 20:24:03 +00:00
nicolson%netscape.com
3e92affe57 Renamed to JSS*. 2002-05-06 21:54:38 +00:00