nelsonb%netscape.com
c9be494de9
Back out revision 1.2, which was a workaround for a c preprocessor bug
...
in a certain version of the c compiler for Dec/Compaq Alpha OSF1.
The file now requires one of these compilers on that platform:
Compaq C V6.3-132 or Compaq C V6.4-214 (dtk)
2002-11-20 05:25:58 +00:00
nelsonb%netscape.com
6986b980f7
Optimization: change macros to do only 32-bit arithmetic on platforms
...
with only 32-bit registers.
2002-11-20 00:48:09 +00:00
jpierre%netscape.com
e965a244ec
Fix for bug 180894 - don't assert in ShutdownCRLCache()
2002-11-19 21:37:50 +00:00
kirk.erickson%sun.com
b32a73f6fe
Made 'solarispkg' copy pkg/solars to pkg/$(OBJDIR), and go there to
...
build packages. This addresses the problems Sonja reported which
resulted from building in the same tree nfs'd from multiple platforms
simultaneously. Also removed -$(MACH) and ROOT-$OBJDIR changes that
failed to address this problem.
2002-11-17 17:26:51 +00:00
nelsonb%netscape.com
0391c3a0ab
Change all functions that create contexts for encryption to treat their
...
input buffers as const. Warning reduction.
2002-11-16 06:09:58 +00:00
jpierre%netscape.com
071bcc8ef0
Fix again?
2002-11-16 05:05:17 +00:00
jpierre%netscape.com
2854b0f273
Fix build again !
2002-11-16 04:27:39 +00:00
nelsonb%netscape.com
c69f246d7a
Recognize new SHAxxx OIDs.
2002-11-16 03:34:53 +00:00
jpierre%netscape.com
a46a21ce98
Fix build
2002-11-16 03:32:40 +00:00
nelsonb%netscape.com
d2a0920045
Correct softoken routines to work with new larger SHAxxx hashes.
2002-11-16 03:32:39 +00:00
nelsonb%netscape.com
5556b4b77f
Correct HMAC code to work with new larger SHAxxx hashes.
2002-11-16 03:30:37 +00:00
nelsonb%netscape.com
dd4c5651b8
Add new SHAxxx hash algorithms to tables of SECHashObjects.
2002-11-16 03:29:32 +00:00
nelsonb%netscape.com
0575c4bc91
Declare new vendor-defined mechanisms for SHA256, SHA384 and SHA512.
2002-11-16 03:25:01 +00:00
nelsonb%netscape.com
eeb4bc7c50
Now that we have hashes larger than SHA1,
...
#define HASH_LENGTH_MAX SHA512_LENGTH
2002-11-16 03:21:53 +00:00
nelsonb%netscape.com
6b4fae5a4a
Don't reject a cert request with an empty list of CA cert names.
...
Don't crash with an empty CA name list.
2002-11-16 03:19:48 +00:00
nelsonb%netscape.com
9ee53c1fde
Add "const" modifier to all fixed arrays used for keys or known text.
2002-11-16 01:00:44 +00:00
nelsonb%netscape.com
2d2f10ff75
Fix crash when formatting a cert with optional version not given.
2002-11-15 06:32:51 +00:00
jpierre%netscape.com
d654882327
Patch for 180228 - export CRL cache flush API . r=wtc
2002-11-15 05:04:05 +00:00
nelsonb%netscape.com
4f733e25ac
Make selfserv build for Darwin.
2002-11-14 23:33:24 +00:00
ian.mcgreer%sun.com
476282ab25
bug 39494, handle non-standard AVAs properly
...
r=nelsonb
2002-11-14 17:04:43 +00:00
relyea%netscape.com
de6635b1b4
Adjust the time values so we have correct and consistant displays.
2002-11-11 22:01:57 +00:00
relyea%netscape.com
c89a0a7444
Multi-access database race condition patches. These changes are already checked
...
into NSS 3.6.1.
2002-11-11 22:00:03 +00:00
kirk.erickson%sun.com
7b5d682d55
Made awk_pkginfo-$(MACH) machine dependent for Sonja's release build.
2002-11-11 20:44:55 +00:00
relyea%netscape.com
37feda0de1
Remove long dead code from util. triggered by bug 179038
2002-11-11 18:17:24 +00:00
jpierre%netscape.com
cc471dc4ee
Assert if the QuickDER decoder does not consume all the input
2002-11-09 01:56:01 +00:00
relyea%netscape.com
df7578f751
Bug 176667: kaie authored the patch, ian/relyea reviewed it.
2002-11-08 19:10:54 +00:00
jpierre%netscape.com
3fe1f54335
Fix for 177798 . Improve handling of initialization / shutdown of the CRL cache using a static status variable
2002-11-07 00:02:31 +00:00
ian.mcgreer%sun.com
9ec0046baa
bug 177366, clean up refcounting
...
r=relyea
2002-11-06 18:53:55 +00:00
nelsonb%netscape.com
e1484b41c3
Workaround a c preprocessor bug on a certain 64-bit platform. Bug 178314.
2002-11-05 01:52:49 +00:00
nelsonb%netscape.com
6710514e32
Fix missing strings that cause crash in SSL_SecurityStatus(). Bug 178342.
2002-11-05 00:25:20 +00:00
relyea%netscape.com
789fae9e28
!@#!$@! signtool thinks it knows how to verify if the certdb's are there and
...
OK or not. Of course it doesn't.
bob
2002-11-04 20:37:08 +00:00
relyea%netscape.com
9452f46ac8
db8 code part 1:
...
1) Create new dbs with 32 k buffers.
2) New dbs never store a single entry greater than 30 k (those are stored
using the blob code).
3) NSS can run with either new or old dbs read only.
4) If possible a new db is upgraded from and old db.
2002-11-04 19:31:59 +00:00
nelsonb%netscape.com
c2ff4f68a2
Add some processor and compiler dependent optimizations to SHA1.
2002-11-02 01:53:01 +00:00
nelsonb%netscape.com
2ff4c01664
Add SHA256 SHA512 and SHA384 hashes to freebl.
2002-11-02 01:51:44 +00:00
jpierre%netscape.com
edd979ec33
Fix for bug 177798 - NULL pointers in ShutdownCRLCache to allow shutdown/restart
...
of NSS.
2002-11-02 00:07:48 +00:00
nelsonb%netscape.com
95badac2f4
Fix several problems related to error messages, including an attempt to
...
print a null string pointer.
2002-11-01 21:04:33 +00:00
nelsonb%netscape.com
cea8a96338
Reformat text. Fix syntax error in first examples.
2002-11-01 21:03:24 +00:00
jpierre%netscape.com
9c6ca52dde
Remove call to PL_ArenaFinish . This effectively shut down NSPR arenas and created problems when restarting NSS . r=relyea
2002-10-31 22:02:10 +00:00
jpierre%netscape.com
f3907a7439
Fix for 177208 - unmark arena when DER decoding is successful
2002-10-31 01:54:13 +00:00
jpierre%netscape.com
8083074fbc
Fix for bug 175115 . Remove incorrect check for CA cert expiration. Also fix CRL signature verification and clean up internal functions . r=mcgreer,relyea,nelsonb,wtc
2002-10-30 23:31:38 +00:00
relyea%netscape.com
5d8b5a40ce
Fix build breakage. Some platforms do not like to assign unsigned char * to
...
char * without a cast.
2002-10-30 19:01:21 +00:00
relyea%netscape.com
4db4a5989a
The Serial number needs to be the DEREncoded serial number, not the decoded
...
Serial number.
2002-10-30 17:22:06 +00:00
relyea%netscape.com
c301258ee1
Check in new certdata file generated from certdata.txt
2002-10-30 17:20:59 +00:00
relyea%netscape.com
014936248b
Allow the builtin's to accept old style serial numbers as well the the correct
...
PKCS #11 serial numbers.
2002-10-30 17:18:14 +00:00
relyea%netscape.com
a8cddf9408
Make the Serial Numbers DER Wrapped rather than raw serial numbers.
...
This is required by PKCS #11 and was causing some bugs in NSS 3.6.
2002-10-30 17:09:28 +00:00
wtc%netscape.com
182f81490a
Bug 177201: declare NSS_CMSEncoder_Cancel.
2002-10-30 01:31:01 +00:00
bishakhabanerjee%netscape.com
446c866598
creating the cmdtests.sh script - bug 144316
2002-10-30 00:20:10 +00:00
jpierre%netscape.com
c4e2aa9127
Fix for bug 95311 - copy the DER input key to the arena, and free the arena upon decoding failure.
2002-10-29 23:47:31 +00:00
jpierre%netscape.com
31ce9957ca
Use QuickDER to decode DER public key. Bug #95311
2002-10-29 22:52:31 +00:00
kirk.erickson%sun.com
46d92ed7fa
Integrated bundle of changes that we're done on NSS_3_3_2_SUN_PKG_BRANCH.
...
x86 support (separate prototype_sparc, prototype_i386)
single updated copyright on common_files
no pkgdepend in common_files
2002-10-26 18:04:40 +00:00
nelsonb%netscape.com
b1090ac99f
Plug cert leak in NSS_SMIMESignerInfo_SaveSMIMEProfile. Bug 176799.
...
Patch contributed by Kai Engert.
2002-10-25 22:46:48 +00:00
nelsonb%netscape.com
4554b52c1c
Add new function CERT_VerifySignedDataWithPublicKey containing common code
...
factored from existing functions CERT_VerifySignedDataWithPubKeyInfo and
CERT_VerifySignedData. Bug 174193.
2002-10-25 03:21:24 +00:00
jpierre%netscape.com
f759ddb2eb
Fix for 169038 - bump builtins library version to 1.20 on the tip
2002-10-25 00:17:37 +00:00
nelsonb%netscape.com
2d36f59d67
Add -v option, which prints email addresses in certs. This excersizes
...
the new functions for extracting email addresses from certs. Bug 152986.
2002-10-24 01:40:40 +00:00
bishakhabanerjee%netscape.com
1d08dec690
commented out unchecked in tests
2002-10-24 00:19:53 +00:00
jpierre%netscape.com
85f14ab5f0
Fix comment formatting style
2002-10-23 23:41:02 +00:00
jpierre%netscape.com
55df3cd350
Fix for bug 95311 - replace assertion with comments
2002-10-23 23:18:17 +00:00
relyea%netscape.com
940043e883
Make sure the array is big enough to handle all the cases.
2002-10-23 22:51:10 +00:00
nelsonb%netscape.com
25d4b3dd39
Include certi.h to resolve invocation of undeclared function.
2002-10-23 22:00:48 +00:00
nelsonb%netscape.com
b0c5f20ec4
Add 2 new functions to NSS, so an application can get a list of all
...
email addresses in a cert. Bug 152986.
Modified Files: lib/nss/nss.def lib/certdb/alg1485.c lib/certdb/cert.h
lib/certdb/certdb.c lib/certdb/certi.h
2002-10-23 20:50:51 +00:00
wtc%netscape.com
1521c67903
The version of the builtin root certs module is now specified in nssckbi.h.
2002-10-23 19:04:22 +00:00
jpierre%netscape.com
50bc3486f0
Up library number for TC roots - bug #169038
2002-10-23 01:38:57 +00:00
ian.mcgreer%sun.com
b9d29eefdc
bug 174634, fix handling of authorityCertIssuer in chain construction
2002-10-22 14:43:08 +00:00
jpierre%netscape.com
8797b2c565
Fix for bug 175167 - SEC_QuickDERDecodeItem should fre memory upon failure. r=wtc
2002-10-18 22:32:34 +00:00
nelsonb%netscape.com
dc79671232
Verify the self-signed signature on PKCS 10 cert requests before honoring
...
them. Bug 174193.
2002-10-18 21:58:24 +00:00
bishakhabanerjee%netscape.com
7fcb4ea142
changed error string to reflect error better: 162714
2002-10-18 00:13:03 +00:00
nelsonb%netscape.com
b0606e475e
New utility to test cert chain verification using certs in files.
2002-10-17 22:24:35 +00:00
nelsonb%netscape.com
72e8094d87
Change instructions for entering a new token password to say "should"
...
instead of "must". Bug 174135.
2002-10-17 02:06:31 +00:00
nelsonb%netscape.com
5a4244682c
Use unsigned ints for serial numbers. Bug 173872.
...
Add missing line break to cert requests. Bug 174659.
Remove unused variables, and #ifndef NSPR20 code.
2002-10-17 01:41:14 +00:00
nelsonb%netscape.com
16d37d34ce
Use the new quick DER decoder to decode Certificate requests, because
...
it does it correctly. Fix some memory leaks in print code.
Print OCTET strings and bits strings better.
2002-10-16 05:34:54 +00:00
nelsonb%netscape.com
acdec25c4b
Eliminate a crash in pp formatting cert requests. Bug 174188.
...
When asking for a new password and the two values don't match, ask for
both again. Bug 174133.
2002-10-16 01:40:22 +00:00
nelsonb%netscape.com
f1d2ae9c89
Fix DER_GetInteger. Bug 174644.
2002-10-16 01:36:10 +00:00
relyea%netscape.com
72fe83e3f2
Make grammar, punctuation, capitalization, and content changes suggested by
...
nelson.
2002-10-15 00:56:23 +00:00
jpierre%netscape.com
1dfb9604b6
Fix for 169038 - correct entries for TC TrustCenter roots
2002-10-12 01:05:47 +00:00
jpierre%netscape.com
634583edc6
Fix for 169038 - correct entries for TC TrustCenter roots
2002-10-12 01:04:53 +00:00
jpierre%netscape.com
66672a3266
Fix addbuiltin t add issuer & serial number to trust object
2002-10-12 01:00:33 +00:00
relyea%netscape.com
e00f4b4887
Fix memory leaks in the startup of the builtins.
2002-10-10 22:39:23 +00:00
relyea%netscape.com
7db5df2a89
Fix memory leak in vfyserv.c
2002-10-10 22:38:09 +00:00
relyea%netscape.com
936e0f80f3
Fix optimized build failures
2002-10-10 21:17:39 +00:00
wtc%netscape.com
00c4231267
Bug 131386: use 'tee' (in a pipe) instead of 'tail -f' when we need to
...
display the test output on stdout. This avoids the need to kill the tail
process, which is tricky to do under MKS Korn Shell on Windows.
Modified Files: all.sh jssqa common/init.sh
2002-10-10 20:36:53 +00:00
relyea%netscape.com
7cb062be5d
Fix Cert Reference leak in error path
2002-10-10 20:34:29 +00:00
relyea%netscape.com
e7544aab69
Add missing errors from secerr.h in lib/util
2002-10-10 20:31:25 +00:00
relyea%netscape.com
5fd94ca1a9
Bug 164501. Return a proper error code from PK11_FindCrlByName() so the CRL
...
code can decide if there is a hw or system failure preventing the reading of a
CRL or if the CRL is just not there.
2002-10-10 20:30:19 +00:00
relyea%netscape.com
e352244c4b
Unix and Mac platforms need to load librdb.* not rdb.*.
2002-10-10 20:11:09 +00:00
relyea%netscape.com
006424c6d4
Fix minor memory leak on init.
2002-10-10 20:09:30 +00:00
jpierre%netscape.com
fa9b7e0590
Bump softoken version to 3.7 on tip
2002-10-08 04:07:22 +00:00
nelsonb%netscape.com
44827860fe
Make indentation style self-consistent: 4 spaces per indent.
...
Save error code at the beginning of printCertProblems, and restore it at
the end, since CERT_VerifyCert nearly always sets the error code to
-8157 Certificate extension not found when building an error log.
Bug 172036.
2002-10-08 03:39:50 +00:00
jpierre%netscape.com
2495acd6a6
Fix for 172732. r=relyea
2002-10-08 01:23:09 +00:00
wtc%netscape.com
51729f2108
Set NSS version to 3.7 Beta on the tip.
2002-10-07 20:47:18 +00:00
jpierre%netscape.com
d1ffbcafb9
Fix for 172678 - move internal functions InitCRLCache and ShutdownCRLCache to private header certi.h
2002-10-05 02:24:25 +00:00
wtc%netscape.com
83c6850bf0
Sorted NSS 3.6 symbols in alphabetical order.
2002-10-04 22:11:34 +00:00
wtc%netscape.com
b9b6bf16b8
Import nspr20/v4.2.2.
2002-10-04 21:26:10 +00:00
kirk.erickson%sun.com
3b89f811a5
Added SUNW_ISA=sparcv9 to clear up error message.
2002-10-04 20:43:35 +00:00
wtc%netscape.com
63fb76c996
Bug 164744: fixed the comment block style.
2002-10-03 04:01:34 +00:00
wtc%netscape.com
22c42f1c08
Bug 149832: renamed highestUsage as certificateUsageHighest.
...
Modified files: certdb/certt.h certhigh/certvfy.c
2002-10-03 03:48:55 +00:00
jpierre%netscape.com
b0fe3718ae
Fix for 164744 - implement new functions for pk12util . r=wtc
2002-10-03 03:35:32 +00:00
wtc%netscape.com
9a64e105d5
Restored a # that was accidentally deleted.
2002-10-03 02:11:01 +00:00
kirk.erickson%sun.com
f519d2bd89
Moved solarispkg target to the end of the file.
2002-10-02 23:42:40 +00:00
kirk.erickson%sun.com
57d8aec96c
Fixes 158683, adds new directory mozilla/security/nss/pkg/solaris.
...
And 'solarispkg' target to mozilla/security/nss/Makefile.
2002-10-02 23:11:39 +00:00
jpierre%netscape.com
2e48c1c8a4
Fix for 164744 - fix for pk12util to export multiple certs
2002-10-02 04:32:17 +00:00