Commit Graph

2478 Commits

Author SHA1 Message Date
nelsonb%netscape.com
c9be494de9 Back out revision 1.2, which was a workaround for a c preprocessor bug
in a certain version of the c compiler for Dec/Compaq Alpha OSF1.
The file now requires one of these compilers on that platform:
Compaq C V6.3-132  or Compaq C V6.4-214 (dtk)
2002-11-20 05:25:58 +00:00
nelsonb%netscape.com
6986b980f7 Optimization: change macros to do only 32-bit arithmetic on platforms
with only 32-bit registers.
2002-11-20 00:48:09 +00:00
jpierre%netscape.com
e965a244ec Fix for bug 180894 - don't assert in ShutdownCRLCache() 2002-11-19 21:37:50 +00:00
kirk.erickson%sun.com
b32a73f6fe Made 'solarispkg' copy pkg/solars to pkg/$(OBJDIR), and go there to
build packages.  This addresses the problems Sonja reported which
resulted from building in the same tree nfs'd from multiple platforms
simultaneously.  Also removed -$(MACH) and ROOT-$OBJDIR changes that
failed to address this problem.
2002-11-17 17:26:51 +00:00
nelsonb%netscape.com
0391c3a0ab Change all functions that create contexts for encryption to treat their
input buffers as const.  Warning reduction.
2002-11-16 06:09:58 +00:00
jpierre%netscape.com
071bcc8ef0 Fix again? 2002-11-16 05:05:17 +00:00
jpierre%netscape.com
2854b0f273 Fix build again ! 2002-11-16 04:27:39 +00:00
nelsonb%netscape.com
c69f246d7a Recognize new SHAxxx OIDs. 2002-11-16 03:34:53 +00:00
jpierre%netscape.com
a46a21ce98 Fix build 2002-11-16 03:32:40 +00:00
nelsonb%netscape.com
d2a0920045 Correct softoken routines to work with new larger SHAxxx hashes. 2002-11-16 03:32:39 +00:00
nelsonb%netscape.com
5556b4b77f Correct HMAC code to work with new larger SHAxxx hashes. 2002-11-16 03:30:37 +00:00
nelsonb%netscape.com
dd4c5651b8 Add new SHAxxx hash algorithms to tables of SECHashObjects. 2002-11-16 03:29:32 +00:00
nelsonb%netscape.com
0575c4bc91 Declare new vendor-defined mechanisms for SHA256, SHA384 and SHA512. 2002-11-16 03:25:01 +00:00
nelsonb%netscape.com
eeb4bc7c50 Now that we have hashes larger than SHA1,
#define HASH_LENGTH_MAX         SHA512_LENGTH
2002-11-16 03:21:53 +00:00
nelsonb%netscape.com
6b4fae5a4a Don't reject a cert request with an empty list of CA cert names.
Don't crash with an empty CA name list.
2002-11-16 03:19:48 +00:00
nelsonb%netscape.com
9ee53c1fde Add "const" modifier to all fixed arrays used for keys or known text. 2002-11-16 01:00:44 +00:00
nelsonb%netscape.com
2d2f10ff75 Fix crash when formatting a cert with optional version not given. 2002-11-15 06:32:51 +00:00
jpierre%netscape.com
d654882327 Patch for 180228 - export CRL cache flush API . r=wtc 2002-11-15 05:04:05 +00:00
nelsonb%netscape.com
4f733e25ac Make selfserv build for Darwin. 2002-11-14 23:33:24 +00:00
ian.mcgreer%sun.com
476282ab25 bug 39494, handle non-standard AVAs properly
r=nelsonb
2002-11-14 17:04:43 +00:00
relyea%netscape.com
de6635b1b4 Adjust the time values so we have correct and consistant displays. 2002-11-11 22:01:57 +00:00
relyea%netscape.com
c89a0a7444 Multi-access database race condition patches. These changes are already checked
into NSS 3.6.1.
2002-11-11 22:00:03 +00:00
kirk.erickson%sun.com
7b5d682d55 Made awk_pkginfo-$(MACH) machine dependent for Sonja's release build. 2002-11-11 20:44:55 +00:00
relyea%netscape.com
37feda0de1 Remove long dead code from util. triggered by bug 179038 2002-11-11 18:17:24 +00:00
jpierre%netscape.com
cc471dc4ee Assert if the QuickDER decoder does not consume all the input 2002-11-09 01:56:01 +00:00
relyea%netscape.com
df7578f751 Bug 176667: kaie authored the patch, ian/relyea reviewed it. 2002-11-08 19:10:54 +00:00
jpierre%netscape.com
3fe1f54335 Fix for 177798 . Improve handling of initialization / shutdown of the CRL cache using a static status variable 2002-11-07 00:02:31 +00:00
ian.mcgreer%sun.com
9ec0046baa bug 177366, clean up refcounting
r=relyea
2002-11-06 18:53:55 +00:00
nelsonb%netscape.com
e1484b41c3 Workaround a c preprocessor bug on a certain 64-bit platform. Bug 178314. 2002-11-05 01:52:49 +00:00
nelsonb%netscape.com
6710514e32 Fix missing strings that cause crash in SSL_SecurityStatus(). Bug 178342. 2002-11-05 00:25:20 +00:00
relyea%netscape.com
789fae9e28 !@#!$@! signtool thinks it knows how to verify if the certdb's are there and
OK or not. Of course it doesn't.

bob
2002-11-04 20:37:08 +00:00
relyea%netscape.com
9452f46ac8 db8 code part 1:
1) Create new dbs with 32 k buffers.
   2) New dbs never store a single entry greater than 30 k (those are stored
using the blob code).
   3) NSS can run with either new or old dbs read only.
   4) If possible a new db is upgraded from and old db.
2002-11-04 19:31:59 +00:00
nelsonb%netscape.com
c2ff4f68a2 Add some processor and compiler dependent optimizations to SHA1. 2002-11-02 01:53:01 +00:00
nelsonb%netscape.com
2ff4c01664 Add SHA256 SHA512 and SHA384 hashes to freebl. 2002-11-02 01:51:44 +00:00
jpierre%netscape.com
edd979ec33 Fix for bug 177798 - NULL pointers in ShutdownCRLCache to allow shutdown/restart
of NSS.
2002-11-02 00:07:48 +00:00
nelsonb%netscape.com
95badac2f4 Fix several problems related to error messages, including an attempt to
print a null string pointer.
2002-11-01 21:04:33 +00:00
nelsonb%netscape.com
cea8a96338 Reformat text. Fix syntax error in first examples. 2002-11-01 21:03:24 +00:00
jpierre%netscape.com
9c6ca52dde Remove call to PL_ArenaFinish . This effectively shut down NSPR arenas and created problems when restarting NSS . r=relyea 2002-10-31 22:02:10 +00:00
jpierre%netscape.com
f3907a7439 Fix for 177208 - unmark arena when DER decoding is successful 2002-10-31 01:54:13 +00:00
jpierre%netscape.com
8083074fbc Fix for bug 175115 . Remove incorrect check for CA cert expiration. Also fix CRL signature verification and clean up internal functions . r=mcgreer,relyea,nelsonb,wtc 2002-10-30 23:31:38 +00:00
relyea%netscape.com
5d8b5a40ce Fix build breakage. Some platforms do not like to assign unsigned char * to
char * without a cast.
2002-10-30 19:01:21 +00:00
relyea%netscape.com
4db4a5989a The Serial number needs to be the DEREncoded serial number, not the decoded
Serial number.
2002-10-30 17:22:06 +00:00
relyea%netscape.com
c301258ee1 Check in new certdata file generated from certdata.txt 2002-10-30 17:20:59 +00:00
relyea%netscape.com
014936248b Allow the builtin's to accept old style serial numbers as well the the correct
PKCS #11 serial numbers.
2002-10-30 17:18:14 +00:00
relyea%netscape.com
a8cddf9408 Make the Serial Numbers DER Wrapped rather than raw serial numbers.
This is required by PKCS #11 and was causing some bugs in NSS 3.6.
2002-10-30 17:09:28 +00:00
wtc%netscape.com
182f81490a Bug 177201: declare NSS_CMSEncoder_Cancel. 2002-10-30 01:31:01 +00:00
bishakhabanerjee%netscape.com
446c866598 creating the cmdtests.sh script - bug 144316 2002-10-30 00:20:10 +00:00
jpierre%netscape.com
c4e2aa9127 Fix for bug 95311 - copy the DER input key to the arena, and free the arena upon decoding failure. 2002-10-29 23:47:31 +00:00
jpierre%netscape.com
31ce9957ca Use QuickDER to decode DER public key. Bug #95311 2002-10-29 22:52:31 +00:00
kirk.erickson%sun.com
46d92ed7fa Integrated bundle of changes that we're done on NSS_3_3_2_SUN_PKG_BRANCH.
x86 support (separate prototype_sparc, prototype_i386)
	single updated copyright on common_files
	no pkgdepend in common_files
2002-10-26 18:04:40 +00:00
nelsonb%netscape.com
b1090ac99f Plug cert leak in NSS_SMIMESignerInfo_SaveSMIMEProfile. Bug 176799.
Patch contributed by Kai Engert.
2002-10-25 22:46:48 +00:00
nelsonb%netscape.com
4554b52c1c Add new function CERT_VerifySignedDataWithPublicKey containing common code
factored from existing functions CERT_VerifySignedDataWithPubKeyInfo and
CERT_VerifySignedData.  Bug 174193.
2002-10-25 03:21:24 +00:00
jpierre%netscape.com
f759ddb2eb Fix for 169038 - bump builtins library version to 1.20 on the tip 2002-10-25 00:17:37 +00:00
nelsonb%netscape.com
2d36f59d67 Add -v option, which prints email addresses in certs. This excersizes
the new functions for extracting email addresses from certs.  Bug 152986.
2002-10-24 01:40:40 +00:00
bishakhabanerjee%netscape.com
1d08dec690 commented out unchecked in tests 2002-10-24 00:19:53 +00:00
jpierre%netscape.com
85f14ab5f0 Fix comment formatting style 2002-10-23 23:41:02 +00:00
jpierre%netscape.com
55df3cd350 Fix for bug 95311 - replace assertion with comments 2002-10-23 23:18:17 +00:00
relyea%netscape.com
940043e883 Make sure the array is big enough to handle all the cases. 2002-10-23 22:51:10 +00:00
nelsonb%netscape.com
25d4b3dd39 Include certi.h to resolve invocation of undeclared function. 2002-10-23 22:00:48 +00:00
nelsonb%netscape.com
b0c5f20ec4 Add 2 new functions to NSS, so an application can get a list of all
email addresses in a cert.  Bug 152986.
Modified Files: lib/nss/nss.def lib/certdb/alg1485.c lib/certdb/cert.h
                lib/certdb/certdb.c lib/certdb/certi.h
2002-10-23 20:50:51 +00:00
wtc%netscape.com
1521c67903 The version of the builtin root certs module is now specified in nssckbi.h. 2002-10-23 19:04:22 +00:00
jpierre%netscape.com
50bc3486f0 Up library number for TC roots - bug #169038 2002-10-23 01:38:57 +00:00
ian.mcgreer%sun.com
b9d29eefdc bug 174634, fix handling of authorityCertIssuer in chain construction 2002-10-22 14:43:08 +00:00
jpierre%netscape.com
8797b2c565 Fix for bug 175167 - SEC_QuickDERDecodeItem should fre memory upon failure. r=wtc 2002-10-18 22:32:34 +00:00
nelsonb%netscape.com
dc79671232 Verify the self-signed signature on PKCS 10 cert requests before honoring
them.  Bug 174193.
2002-10-18 21:58:24 +00:00
bishakhabanerjee%netscape.com
7fcb4ea142 changed error string to reflect error better: 162714 2002-10-18 00:13:03 +00:00
nelsonb%netscape.com
b0606e475e New utility to test cert chain verification using certs in files. 2002-10-17 22:24:35 +00:00
nelsonb%netscape.com
72e8094d87 Change instructions for entering a new token password to say "should"
instead of "must".  Bug 174135.
2002-10-17 02:06:31 +00:00
nelsonb%netscape.com
5a4244682c Use unsigned ints for serial numbers. Bug 173872.
Add missing line break to cert requests.  Bug 174659.
Remove unused variables, and #ifndef NSPR20 code.
2002-10-17 01:41:14 +00:00
nelsonb%netscape.com
16d37d34ce Use the new quick DER decoder to decode Certificate requests, because
it does it correctly.  Fix some memory leaks in print code.
Print OCTET strings and bits strings better.
2002-10-16 05:34:54 +00:00
nelsonb%netscape.com
acdec25c4b Eliminate a crash in pp formatting cert requests. Bug 174188.
When asking for a new password and the two values don't match, ask for
both again.  Bug 174133.
2002-10-16 01:40:22 +00:00
nelsonb%netscape.com
f1d2ae9c89 Fix DER_GetInteger. Bug 174644. 2002-10-16 01:36:10 +00:00
relyea%netscape.com
72fe83e3f2 Make grammar, punctuation, capitalization, and content changes suggested by
nelson.
2002-10-15 00:56:23 +00:00
jpierre%netscape.com
1dfb9604b6 Fix for 169038 - correct entries for TC TrustCenter roots 2002-10-12 01:05:47 +00:00
jpierre%netscape.com
634583edc6 Fix for 169038 - correct entries for TC TrustCenter roots 2002-10-12 01:04:53 +00:00
jpierre%netscape.com
66672a3266 Fix addbuiltin t add issuer & serial number to trust object 2002-10-12 01:00:33 +00:00
relyea%netscape.com
e00f4b4887 Fix memory leaks in the startup of the builtins. 2002-10-10 22:39:23 +00:00
relyea%netscape.com
7db5df2a89 Fix memory leak in vfyserv.c 2002-10-10 22:38:09 +00:00
relyea%netscape.com
936e0f80f3 Fix optimized build failures 2002-10-10 21:17:39 +00:00
wtc%netscape.com
00c4231267 Bug 131386: use 'tee' (in a pipe) instead of 'tail -f' when we need to
display the test output on stdout.  This avoids the need to kill the tail
process, which is tricky to do under MKS Korn Shell on Windows.
Modified Files: all.sh jssqa common/init.sh
2002-10-10 20:36:53 +00:00
relyea%netscape.com
7cb062be5d Fix Cert Reference leak in error path 2002-10-10 20:34:29 +00:00
relyea%netscape.com
e7544aab69 Add missing errors from secerr.h in lib/util 2002-10-10 20:31:25 +00:00
relyea%netscape.com
5fd94ca1a9 Bug 164501. Return a proper error code from PK11_FindCrlByName() so the CRL
code can decide if there is a hw or system failure preventing the reading of a
CRL or if the CRL is just not there.
2002-10-10 20:30:19 +00:00
relyea%netscape.com
e352244c4b Unix and Mac platforms need to load librdb.* not rdb.*. 2002-10-10 20:11:09 +00:00
relyea%netscape.com
006424c6d4 Fix minor memory leak on init. 2002-10-10 20:09:30 +00:00
jpierre%netscape.com
fa9b7e0590 Bump softoken version to 3.7 on tip 2002-10-08 04:07:22 +00:00
nelsonb%netscape.com
44827860fe Make indentation style self-consistent: 4 spaces per indent.
Save error code at the beginning of printCertProblems, and restore it at
the end, since CERT_VerifyCert nearly always sets the error code to
-8157 Certificate extension not found when building an error log.
Bug 172036.
2002-10-08 03:39:50 +00:00
jpierre%netscape.com
2495acd6a6 Fix for 172732. r=relyea 2002-10-08 01:23:09 +00:00
wtc%netscape.com
51729f2108 Set NSS version to 3.7 Beta on the tip. 2002-10-07 20:47:18 +00:00
jpierre%netscape.com
d1ffbcafb9 Fix for 172678 - move internal functions InitCRLCache and ShutdownCRLCache to private header certi.h 2002-10-05 02:24:25 +00:00
wtc%netscape.com
83c6850bf0 Sorted NSS 3.6 symbols in alphabetical order. 2002-10-04 22:11:34 +00:00
wtc%netscape.com
b9b6bf16b8 Import nspr20/v4.2.2. 2002-10-04 21:26:10 +00:00
kirk.erickson%sun.com
3b89f811a5 Added SUNW_ISA=sparcv9 to clear up error message. 2002-10-04 20:43:35 +00:00
wtc%netscape.com
63fb76c996 Bug 164744: fixed the comment block style. 2002-10-03 04:01:34 +00:00
wtc%netscape.com
22c42f1c08 Bug 149832: renamed highestUsage as certificateUsageHighest.
Modified files: certdb/certt.h certhigh/certvfy.c
2002-10-03 03:48:55 +00:00
jpierre%netscape.com
b0fe3718ae Fix for 164744 - implement new functions for pk12util . r=wtc 2002-10-03 03:35:32 +00:00
wtc%netscape.com
9a64e105d5 Restored a # that was accidentally deleted. 2002-10-03 02:11:01 +00:00
kirk.erickson%sun.com
f519d2bd89 Moved solarispkg target to the end of the file. 2002-10-02 23:42:40 +00:00
kirk.erickson%sun.com
57d8aec96c Fixes 158683, adds new directory mozilla/security/nss/pkg/solaris.
And 'solarispkg' target to mozilla/security/nss/Makefile.
2002-10-02 23:11:39 +00:00
jpierre%netscape.com
2e48c1c8a4 Fix for 164744 - fix for pk12util to export multiple certs 2002-10-02 04:32:17 +00:00