relyea%netscape.com
3597080dab
Initial CAPI PKCS #11 Module.
...
Needs the updated ckfw.
2005-11-04 02:05:04 +00:00
wtchang%redhat.com
898c89fc45
Bugzilla Bug 298512: Ensure the seed and seed key input for RNG do not have
...
same value for FIPS 140-2. r=nelsonb.
2005-11-04 01:07:30 +00:00
julien.pierre.bugs%sun.com
da619f8dec
Fix for 314115 . Comments about QuickDER and classic ASN.1 decoders relating to SECItem.type field
2005-10-31 18:52:20 +00:00
julien.pierre.bugs%sun.com
3e221bfb46
Fix for 314115 - QuickDER modifies SECItem.type while decoding. r=wtchang
2005-10-31 18:34:42 +00:00
wtchang%redhat.com
8e70cf6f2e
Bugzilla bug 298522: added power-up self tests for HMAC SHA-1 and HMAC
...
SHA-256. The patch is contributed by Glen Beasley of Sun. r=wtc.
2005-10-20 21:46:51 +00:00
julien.pierre.bugs%sun.com
c3b3a7e2c1
Add dependency on freebl so ssl will rebuild if freebl has changed.
2005-10-19 01:04:16 +00:00
julien.pierre.bugs%sun.com
4c37a26617
Add dependency on freebl so softoken will rebuild if freebl has changed.
2005-10-19 01:03:31 +00:00
wtchang%redhat.com
e58492ea00
Bugzilla bug 311440: ssl3_ConsumeHandshakeVariable now longer returns a
...
SECItem pointing to memory allocated with PORT_Alloc, so we don't need to
use PORT_Free to free the SECItem's buffer. r=nelsonb.
2005-10-14 16:48:58 +00:00
wtchang%redhat.com
b957c8d0a7
Bugzilla Bug 312202: checked in HP-UX IPF (Itanium) porting changes
...
contributed by Grace Lu of HP. Use the .so suffix for shared libraries
on HP-UX IPF. Support building on HP-UX B.11.23. r=wtc.
Modified Files:
coreconf/HP-UX.mk nss/lib/nss/nssinit.c
Added Files:
coreconf/HP-UXB.11.23.mk
2005-10-12 19:04:13 +00:00
wtchang%redhat.com
2193d926c7
Bugzilla Bug 302998: disallow x=0,1 and k=0. r=nelsonb.
2005-10-12 00:48:25 +00:00
neil.williams%sun.com
8657972540
CBug 290263, patch CERT_CreateCertificateRequest for doing extensions
...
r=bob
`VS: ----------------------------------------------------------------------
2005-10-12 00:10:17 +00:00
wtchang%redhat.com
491b4ef092
Bugzilla Bug 304360: generate ECC key with private key value less than the
...
group order using a combination of ANSI X9.62 A.4.1 and FIPS 186-2 Change
Notice 1. Also changed structure of EC key generation functions to match
the scheme used in dsa.c. The patch is contributed by Douglas Stebila
<douglas@stebila.ca> of Sun Labs. r=wtc.
2005-10-06 23:16:20 +00:00
wtchang%redhat.com
81299cbc68
Bugzilla Bug 257693: set the correct error code in EC_ValidatePublicKey.
...
Documented the return values of ECPoint_validate. Have the tests compare
the return value of ECPoint_validate with MP_NO for negative test cases.
r=doublas.stebila.
Modified Files:
ec.c ecl/ecl.h ecl/tests/ec2_test.c ecl/tests/ecp_test.c
2005-10-06 21:42:55 +00:00
wtchang%redhat.com
d420dda744
Bugzilla bug 259135: fixed build breakage. In C, declarations must precede
...
code.
2005-10-05 22:03:14 +00:00
wtchang%redhat.com
002c9cc505
Bugzilla bug 259135: minor comment fix.
2005-10-05 17:58:01 +00:00
glen.beasley%sun.com
814a61d561
259135 added SHA 256,384,512 and AES powerupself tests sr=Wan-Teh
2005-10-05 16:31:01 +00:00
relyea%netscape.com
b0d1e52691
Back out non-reviewed strictly white space change in pk11sdr.c
2005-10-04 01:11:01 +00:00
wtchang%redhat.com
058312eaa6
Bugzilla bug 310518: map CKR_PIN_INVALID and CKR_PIN_LEN_RANGE to
...
SEC_ERROR_INVALID_PASSWORD instead of SEC_ERROR_BAD_PASSWORD. r=relyea.
2005-10-03 22:41:45 +00:00
relyea%netscape.com
5c3685a18e
Bug 272484 Certificate manager crashes [@ _PR_MD_ATOMIC_DECREMENT - PK11_FreeSymKey]
...
r=wtc [part 3 of 3]
2005-10-03 22:01:57 +00:00
relyea%netscape.com
0cefb4acd8
Bug 272484 Certificate manager crashes [@ _PR_MD_ATOMIC_DECREMENT - PK11_FreeSymKey]
...
r=wtc [part 2 of 3]
2005-10-03 22:00:22 +00:00
relyea%netscape.com
0223a07982
This change was not part of bug 272484 and has not been reviewed.
...
Back it out.
2005-10-03 21:58:24 +00:00
relyea%netscape.com
53f4189369
Bug 272484 Certificate manager crashes [@ _PR_MD_ATOMIC_DECREMENT - PK11_FreeSymKey]
...
The problem only happens if we try to import a key into a token which then fails
to import. The basic issue was a hack in the pkcs 7 code to support PKCS 12, A
special structure was used to replace the SymKey structure, and the code 'knew'
the special structure existed before it dealt with the symkey. The fix addes a
new capability to symkeys, where applications can attach application specific
data to the key structure. PKCS 12 uses this to attache the PBE information
for CMS. (part 1 of 3)
This patch also improves the key's reuse of sessions, so sessions are not thrashed
when SSL is used with them.
r=wtc
2005-10-03 21:55:29 +00:00
wtchang%redhat.com
5d52123474
Bugzilla Bug 294106: removed an assertion that's no longer necessary.
...
Added buffer length error checking to back up an assertion. r=nelsonb.
2005-09-30 22:01:46 +00:00
relyea%netscape.com
bb7e1cb9f9
Bugzilla Bug 244922 ASN.1 encoder outputs trash for optional may-stream subtemplate
...
r=nelson (original patch by nelson, modifications by me).
2005-09-30 19:22:48 +00:00
relyea%netscape.com
b354997d97
Bug 119500 PKCS#11 CKF_PROTECTED_AUTHENTICATION_PATH token flag not supported
...
wtc's review r=wtc
2005-09-29 23:44:39 +00:00
wtchang%redhat.com
5c38b2d572
Bugzilla Bug 294106: dsa.c: use const in the function prototype of
...
DSA_GenerateGlobalRandomBytes. prng_fips1861.c: implemented Algorithm 1
of FIPS 186-2 Change Notice 1 and increased the size (b) of the RNG's
seed-key from 160 bits to 256 bits. r=relyea,nelsonb.
2005-09-29 23:22:53 +00:00
relyea%netscape.com
f07ca5cfef
Bug 308887 CRMF request generation problem when using latest firefox
...
Add crmf tests to the test suite.
2005-09-29 21:36:42 +00:00
relyea%netscape.com
9c9cecb9d7
Bugzilla Bug 119500 PKCS#11 CKF_PROTECTED_AUTHENTICATION_PATH token flag not supported
...
r=nelson
This is only the NSS portion of this patch. The PSM portion will be checked in once the
NSS portion is mainlined to mozilla.
2005-09-29 21:00:58 +00:00
wtchang%redhat.com
fc511c7607
Bug 271317, remove the old fortezza code
2005-09-29 18:09:11 +00:00
relyea%netscape.com
93e1f22027
Bugzilla Bug 298630 freebl needs a memory cache invariant RSA implementation.
...
r=nelson
2005-09-29 17:17:09 +00:00
relyea%netscape.com
665d2accd1
Bug 271317, remove the old fortezza code
2005-09-29 00:36:53 +00:00
relyea%netscape.com
8d4f93463a
Internal NSS defines shared between softoken and the rest of NSS, but not
...
exported.
added as part of bug 305697.
2005-09-28 23:52:59 +00:00
relyea%netscape.com
c4abacd281
Bug 305697 Softoken needs to give on the fly access to additional databases. Part 2, User interface
...
r=julien
2005-09-28 17:17:49 +00:00
relyea%netscape.com
e35607b9c4
bug 305697: open additional database on the fly in softoken. part1: softoken changes.
...
r=julien
2005-09-28 17:12:17 +00:00
nelsonb%netscape.com
ac626ee74e
Avoid NULL ptr deref. Bug 310260. patch by Glen.Beasley. r=nelson.
2005-09-28 07:55:37 +00:00
neil.williams%sun.com
7b415783ba
Bug 303508, committing attachment 196965. r=nelson,saul
2005-09-23 02:15:03 +00:00
nelsonb%netscape.com
abc6a22d68
Eliminate environment variable SSLNOLOCKS, add environment variable
...
SSLFORCELOCKS. Make SSL_FDX option mutually exclusive with SSL_NOLOCKS
option. Bug 305147. r=rrelyea.
2005-09-23 01:04:32 +00:00
nelsonb%netscape.com
d05886f50d
Add version info to freebl shared libs for Windows and Unix. bub 303508.
...
Modified Files: config.mk ldvector.c manifest.mn
Added Files: freebl.rc freeblver.c r=wtc.
2005-09-21 03:01:49 +00:00
nelsonb%netscape.com
f12a0e5a63
Replace "fast" and "slow" with fpu and int in loader.c. Also add a
...
comment explaining ISA lists. r=wtc. bug 303508.
2005-09-21 02:53:25 +00:00
wtchang%redhat.com
73f597f990
Bug 299197: added the comment for PK11_TokenKeyGen back. r=relyea.
2005-09-21 01:32:11 +00:00
wtchang%redhat.com
ecdf90d92d
Bug 299197: fixed comments. r=relyea.
2005-09-21 01:31:37 +00:00
relyea%netscape.com
aa8a2c0490
Only call C_WaitForSlotEvent if the module is PKCS #11 v2.01 or later.
...
bug 196811 r=wtc sr=julien
2005-09-20 20:56:07 +00:00
wtchang%redhat.com
13f41d4840
Bugzilla bug 303508: a more elegant way to decide when we need to prefix
...
LIBRARY_VERSION with '_'. r=nelsonb.
2005-09-16 23:18:01 +00:00
julien.pierre.bugs%sun.com
d42e92ad88
Fix hoarked build from previous checkin. Doh.
2005-09-16 21:28:20 +00:00
wtchang%redhat.com
b427dc6efe
Bugzilla Bug 298517: when in FIPS mode, impose minimum password length and
...
quality to ensure a password guessing probability of less than 1 in
10,000,000, and impose a one second delay after failed login attempt to
allow at most 60 login attempts per minute. r=relyea,nelsonb.
Modified files: fipstokn.c pkcs11.c pkcs11i.h
2005-09-16 20:37:58 +00:00
julien.pierre.bugs%sun.com
c56d3589f6
Fix for bug 127960 . Add SSL force handshake APIs which take a timeout . r=nelson
2005-09-16 20:33:09 +00:00
wtchang%redhat.com
2e75eae9d5
Bugzilla Bug 288728: handle invalid values of recipient identifier type.
...
r=jpierre,relyea.
2005-09-16 17:54:31 +00:00
wtchang%redhat.com
019a13cbeb
Bugzilla Bug 288728: use a whitelist instead of a blacklist when checking
...
for invalid values of "type". r=jpierre,relyea.
2005-09-16 17:52:37 +00:00
wtchang%redhat.com
dcad184fa4
Bugzilla Bug 303508: removed the underscore from the name of the "single"
...
freebl shared library (freebl_3.dll -> freebl3.dll). Do the recursive
child builds without changing directories. This fixed the BUILD_TREE build
problem. r=nelsonb,saul.edwards.
Modified files: Makefile freebl.def manifest.mn
2005-09-16 17:17:45 +00:00
wtchang%redhat.com
65241f7ef4
Removed an unnecessary -L linker flag. r=nelsonb,saul.edwards.
2005-09-16 17:02:49 +00:00