Commit Graph

3677 Commits

Author SHA1 Message Date
relyea%netscape.com
6061b43df2 Add new function which returns the NSS 3.4 style nickname directly from a
NSSCertificate structure.
2002-06-25 22:33:37 +00:00
ian.mcgreer%sun.com
4091f82677 two more places to dump templates 2002-06-25 19:40:16 +00:00
ian.mcgreer%sun.com
bb3bfc1199 fix AIX builds, 64-bit compiler chokes on large switches in debug builds 2002-06-25 16:57:40 +00:00
relyea%netscape.com
5fc7efb515 Fix solaris compiler error/warning. Fix prototype to return correct value (PRBool not PRStatus). 2002-06-24 23:54:16 +00:00
kaie%netscape.com
c0454d676c b=87902 Cannot reach TLS intolerant servers through SSL proxy.
r=javi sr=darin
2002-06-24 23:02:08 +00:00
relyea%netscape.com
7caefab6ed Don't decode or extract trust for certs if we are just getting the nicknames -- particularly for user certs. 2002-06-24 22:36:59 +00:00
ian.mcgreer%sun.com
2a67969b3c fix broken AIX builds 2002-06-24 22:29:12 +00:00
ian.mcgreer%sun.com
b73a1edc81 log more mechanisms and templates 2002-06-24 22:22:57 +00:00
relyea%netscape.com
cbeed1cfd5 Copy the type value as well as the rest. 2002-06-24 21:57:27 +00:00
relyea%netscape.com
7cc9843630 More performance improvements for PK11ListCerts/ CERT_GetUserCertByUsage(). 2002-06-24 21:54:41 +00:00
nelsonb%netscape.com
071fe9ae9c Fix bug 135261. Create symbolic names for the values 2 and 3 for the
SSL_REQUIRE_CERTIFICATE option.  Value 2 has always been the default.
New Value 3 is appropriate for servers that want to re-request, but
still not require, client-auth from a client with whom an SSL session
is already established.
2002-06-22 01:40:32 +00:00
nicolson%netscape.com
01f5e0790f Fix 128259: Cannot get SSL trust for a CA residing on PKCS#11 module. 2002-06-21 23:53:58 +00:00
relyea%netscape.com
3c89da1564 Need to preserve non-modifiable trustbits. 2002-06-21 22:28:03 +00:00
relyea%netscape.com
aa8dddaacb zero structure before we fill it in, not after 2002-06-21 20:25:49 +00:00
nicolson%netscape.com
fe199405d1 fix a build error in JDK 1.2. 2002-06-21 18:31:36 +00:00
wtc%netscape.com
47b432c0f5 Bug 153380: TLS is enabled by default now. 2002-06-21 18:25:46 +00:00
kaie%netscape.com
1887483a18 b=90956 Dot (.) instead of localized characters in pipnss module
r=ssaux sr=alecf
2002-06-20 23:41:02 +00:00
kaie%netscape.com
f1f07ddeb8 https surfing: Clicking on a link early leads to "mixed/broken" lock icon
r=javi sr=rpotts
2002-06-20 23:36:48 +00:00
bryner%netscape.com
6845058771 Don't crash if NSSDialogs doesn't implement nsICertificateDialogs (bug 150862). r=kaie, sr=blake. 2002-06-20 23:31:47 +00:00
javi%netscape.com
b81e7cc522 Make the file C++ friendly. 2002-06-20 22:32:38 +00:00
relyea%netscape.com
ffa0ecc514 Reduce the cost of decoding a certificate. 2002-06-20 18:53:16 +00:00
relyea%netscape.com
d7a32bbce6 reduce the calls to get the login state as these calls seem to be pretty expensive
for some tokens.
2002-06-20 18:49:45 +00:00
relyea%netscape.com
eb95452896 Patches to reduce the cost of getting attributes on certs or finding certs in lists. 2002-06-20 18:46:47 +00:00
nicolson%netscape.com
43274230b4 catch a null pointer and throw it back to Java, instead of crashing in C. 2002-06-19 22:59:08 +00:00
nicolson%netscape.com
105ed4a40e upgrade to NSS 3.4.2. 2002-06-19 22:58:40 +00:00
nicolson%netscape.com
ab90ccc5bf add SSLClientAuth test.
remove obsolete socketTest.
Get passwords from a file so we can run in batch mode.
2002-06-19 22:50:47 +00:00
nicolson%netscape.com
9d33093ccb Fix 112227: set SSL server without nickname
Specify the certificate to use for both server and client auth directly,
rather than by nickname.
2002-06-19 20:33:28 +00:00
stephend%netscape.com
aaa4ab622f Bug 151418. Polish Page Info & Certificate Details. Patch by Stephen Walker <walk84@yahoo.com> r=kaie@netscape.com, sr=jaggernaut@netscape.com 2002-06-19 20:32:54 +00:00
ian.mcgreer%sun.com
48d6b949c1 bug 98926, PKCS#11 session logging 2002-06-19 18:32:57 +00:00
rangansen%netscape.com
bff8c533ce exporting CERT_VerifyCertChain. r=relyea 2002-06-19 15:58:51 +00:00
ian.mcgreer%sun.com
4cf84d39dd missed part of last patch (bug 145322) 2002-06-19 15:26:55 +00:00
ian.mcgreer%sun.com
e30639f9cd bug 145322, second patch, clean up pk11_saveContextHelper 2002-06-19 15:22:54 +00:00
ian.mcgreer%sun.com
607f12501a bug 145322, reduce the number of PKCS#11 sessions used in SSL connections, implement new function PK11_SaveContextAlloc
r=relyea
2002-06-19 15:21:37 +00:00
ian.mcgreer%sun.com
0992642b67 bug 150704, PK11_Finalize can crash because softoken does not implement C_XXXFinal correctly 2002-06-19 14:59:24 +00:00
bishakhabanerjee%netscape.com
19dbdc5df8 correcting init_mcom function to enable "nssqa" to run at Netscape - 150752 2002-06-18 21:45:31 +00:00
relyea%netscape.com
6f356a0f36 1) Map flags both coming and going.
2) Finish transaction of the target database not the source database.
2002-06-18 16:41:41 +00:00
kaie%netscape.com
f21ae0fa21 b=145730 Avoid unnecessary repeated "encrypted page" alerts on JavaScript links.
r=jst sr=darin
2002-06-18 14:17:10 +00:00
wtc%netscape.com
29df488eaa Bug 151940: SEC_PKCS12DecoderVerify should call SEC_ASN1DecoderFinish first
to detect insufficient input data error.
2002-06-18 05:00:39 +00:00
relyea%netscape.com
27153b6afb Standardize the open flags as 'enums' when using multiaccess databases, no matter
if we are using PR_ versions of the flags or O_ versions of the flags.
2002-06-17 18:46:27 +00:00
kaie%netscape.com
549e28cb1f b=148610 Lock icon should be updated as early as possible.
r=javi sr=rpotts
2002-06-17 09:56:14 +00:00
stephend%netscape.com
f16abb505b Bug145409. JS strict warnings in certManager.js. Patch by Stephen Walker <walk84@yahoo.com> r=kaie@netscape.com, sr=jaggernaut@netscape.com 2002-06-16 21:19:25 +00:00
nicolson%netscape.com
2d108bf4b9 add new tests. 2002-06-14 18:15:45 +00:00
nicolson%netscape.com
ec04d87172 remove broken code until bug is fixed. 2002-06-14 18:15:21 +00:00
nicolson%netscape.com
ff2ce0953a remove bogus comment. 2002-06-14 18:13:27 +00:00
relyea%netscape.com
e2f5a0ac1f check version of the existing DB, not the updatedb. 2002-06-14 17:29:56 +00:00
kaie%netscape.com
36c340f00c b=119394 Support fetching certificates from LDAP servers.
r=javi/dmose sr=mscott
2002-06-14 02:10:02 +00:00
kaie%netscape.com
9202384131 b=150863 Fix lock icon state for low/high crypto mix.
r=javi sr=alecf
2002-06-13 23:59:01 +00:00
relyea%netscape.com
d31340924d Add transactions to the database update portion of the code. 2002-06-13 23:25:37 +00:00
relyea%netscape.com
3839be90f6 Update cert handle on token insertion/removal. 2002-06-13 21:43:30 +00:00
relyea%netscape.com
e84f17e0ea Add series to keep track of object handle value validity. 2002-06-13 21:42:41 +00:00
relyea%netscape.com
b7167f5cba Reset the cert cache and clobber cert handles on token insertion an removal 2002-06-13 21:40:43 +00:00
jpierre%netscape.com
8739d6f231 Add missing AOL root CA certs 2002-06-13 10:14:50 +00:00
nicolson%netscape.com
c01ead5178 add javadoc target. 2002-06-12 22:54:16 +00:00
nicolson%netscape.com
caac61f6c1 remove these files--there's no C code in this directory. 2002-06-12 20:18:10 +00:00
nicolson%netscape.com
98fd1b572a Grab NSS headers from directory "nss" instead of directory "security". 2002-06-12 20:11:22 +00:00
nicolson%netscape.com
d8cf3f39f6 remove makefiles for this directory, since it's only Java files. 2002-06-12 20:08:39 +00:00
kaie%netscape.com
53b1d03a9c b=126944 Handle NSS error codes within PSM.
r=ssaux sr=darin
2002-06-12 16:44:22 +00:00
wtc%netscape.com
aae4410a4d Bug 150143: use map file to limit exported symbols on Mac OS X. The patch
is contributed by Brian Ryner <bryner@netscape.com>.
Modified files: Darwin.mk rules.mk
2002-06-12 00:21:19 +00:00
relyea%netscape.com
696026ef88 When checking NeedInit status, go back and check the token in case the token
has been initialized offline.
2002-06-11 23:33:25 +00:00
jpierre%netscape.com
b473a8e33d Update for root certs - bug 139874 2002-06-11 23:16:25 +00:00
kirk.erickson%sun.com
80cae9e038 Fixed indentation caught by Wan-Teh (66606). 2002-06-11 22:41:45 +00:00
kirk.erickson%sun.com
6e3d00368d Resolves 66606. Added -O (enable OCSP checking). 2002-06-11 16:29:28 +00:00
ddrinan%netscape.com
c87736a06b Bug 150708. Incorrect keysize when finding bulk alg. r=wtc. 2002-06-10 22:00:32 +00:00
relyea%netscape.com
bb528345ff Return public and private keys in the order specified by the PKCS #11 spec. 2002-06-10 20:33:31 +00:00
leaf%mozilla.org
6e6bf977e5 updating locale version string for impending release, bug 149802 2002-06-07 07:45:38 +00:00
alecf%netscape.com
bcf192e308 fix for bug 101761 - REQUIRES update - remove all REQUIRES that are no longer necessary.. r=cls, a=asa (build-only changes) 2002-06-06 20:28:14 +00:00
jpierre%netscape.com
165951e036 Fix for 141256 - rewrite OCSP HTTP download code to fix error handling 2002-06-06 01:05:40 +00:00
jpierre%netscape.com
42c9d8d43b Fix for 139874 - Inject Latest CA Root Certs 2002-06-06 00:12:56 +00:00
cathleen%netscape.com
64856eb68b clean up last traces of nsCRT::strlen(char* s), bug 124536 r=dp, sr=brendan 2002-06-04 23:05:39 +00:00
thayes%netscape.com
9355438f45 Reserve OID (netscape_name_components 2) - see 605437 2002-06-04 21:46:05 +00:00
bishakhabanerjee%netscape.com
76c8329a07 to build the new NSS tests.. bugzilla bug 144316 2002-06-03 17:16:57 +00:00
wtc%netscape.com
c99a93829c Backed out the previous checkin, which is not being used and triggers
a bug in gmake 3.76.1 with MKS shell on Windows.
2002-06-01 04:31:44 +00:00
wtc%netscape.com
a1598af613 Use $(DLL_SUFFIX) instead of ${DLL_SUFFIX}. 2002-06-01 04:25:38 +00:00
nicolson%netscape.com
fa1fbd5d69 Fix 147794: PK11_ImportDERPrivateKeyInfoAndReturnKey frees the private key incorrectly. 2002-06-01 00:43:46 +00:00
rangansen%netscape.com
b355617820 Fix to ensure change password on db is commited - using rv == SECSuccess would actually abort it.
r = wtc
2002-06-01 00:37:00 +00:00
kaie%netscape.com
0f6f591340 b=138479 Disable Security tab in View Frame Info
r=javi sr=jag
2002-05-30 04:56:16 +00:00
wtc%netscape.com
6a49741d7d This is a test. I changed Revision and Date to bogus values and want to
see what actually got checked in.
2002-05-30 02:08:07 +00:00
glen.beasley%sun.com
764659f58f for release eng to build multiple platforms 2002-05-30 00:47:18 +00:00
wtc%netscape.com
118670f573 Import NSPR 4.2 and DBM 1.61. 2002-05-30 00:36:48 +00:00
nicolson%netscape.com
7c6284c42b Fix bug 112330: CryptoToken.changePassword(new ConsolePasswordCallback(), new ConsolePasswordCallback()) throws Native Exception.
We were zeroing the password after freeing it, which in some cases caused
memory corruption and crashing.
2002-05-29 21:54:14 +00:00
ian.mcgreer%sun.com
7ad9c0cc44 bug 136701, certutil should use PK11_ListCerts 2002-05-29 18:19:33 +00:00
kaie%netscape.com
b9a747d97f b=130650 In page info, "Security" tab lacks shortcut.
r=kaie sr=jag
2002-05-29 03:40:46 +00:00
kaie%netscape.com
bd0b2c053a b=110195 Master passwords steals focus in prefs
r=kaie sr=alecf
2002-05-29 03:32:04 +00:00
kirk.erickson%sun.com
9ef935cd78 Fixed OCSP typo. 2002-05-28 18:26:37 +00:00
wtc%netscape.com
a0715a5bd0 Bug 142575: use the PRIVATE keyword for the /EXPORT linker option. 2002-05-25 16:00:55 +00:00
wtc%netscape.com
278f8fcbfa Bug 142575: use the /EXPORT linker option on the command line.
Modified files: nssinit.c config.mk
2002-05-25 06:52:19 +00:00
wtc%netscape.com
c82e51fc58 Bug 142575: a better fix. 2002-05-25 01:02:39 +00:00
wtc%netscape.com
54db8b9c90 Bug 142575: added function forwarder for 'mktemp' for "bug compatibility". 2002-05-24 21:00:55 +00:00
javi%netscape.com
d19ba0f868 Make pkcs12.h C++ friendly. 2002-05-24 20:11:29 +00:00
wtc%netscape.com
00ab5fdbae Back out the previous checkin. It broken the cmd/certcgi build. 2002-05-24 14:58:02 +00:00
javi%netscape.com
69088764da Add macros to make header file C++ friendly. 2002-05-24 00:53:48 +00:00
wtc%netscape.com
b1a997971e Bug 142575: on Windows added mktemp (which simply calls _mktemp in the C
run-time library) to be backward compatible with the bug that mktemp was
accidentally exported from the nss3.dll in NSS 3.2.x and 3.3.x.
2002-05-23 22:28:50 +00:00
kirk.erickson%sun.com
fa04da4ff4 Resolves bug 90070 (now exiting with PK12UERR_PK11GETSLOT 13). 2002-05-23 22:21:42 +00:00
nicolson%netscape.com
f2f9158fd3 Fix 146515: PK11PrivKey.fromPrivateKeyInfo enables no operations for RSA keys 2002-05-23 20:32:10 +00:00
nicolson%netscape.com
da61b269f4 move new entry to end of file 2002-05-23 18:45:23 +00:00
nicolson%netscape.com
3a1cd67cf6 cleanup tabs and spaces. 2002-05-23 18:45:00 +00:00
nicolson%netscape.com
d17d79e101 Various minor tweaks for code cleanliness. 2002-05-23 18:29:07 +00:00
glen.beasley%sun.com
7ef88f180e bug 144913 isCertValid addition 2002-05-23 17:52:23 +00:00
relyea%netscape.com
a37f083171 Refresh token cache after login on tokens that need to log in before they
could read their certs.
2002-05-22 23:13:05 +00:00
relyea%netscape.com
dccf0f20f4 Close our peer database handles because some platforms (Mac) do bad things
if you hold two berkelydb handles open to the same database in the same process.
(actually a lot of platforms could cause problems, the Mac version of dbm (1.85)
just does the bad things right away).
2002-05-22 21:47:23 +00:00
nicolson%netscape.com
411f9347cc Fix http://bugzilla.mozilla.org/show_bug.cgi?id=144934: generating DSA public key from spec is broken. 2002-05-22 02:13:31 +00:00
relyea%netscape.com
482a55e955 Back out the change on Module destruction. 2002-05-22 00:25:48 +00:00
relyea%netscape.com
dc0b0c243c Don't crash if url is specified, but the crl is broken 2002-05-21 21:26:52 +00:00
relyea%netscape.com
91abc91169 Missing component when deleting should not be fatal 2002-05-21 21:26:14 +00:00
relyea%netscape.com
3b707d47e7 Fix spelling error.
Clear out certs from the cache before the token goes away.
2002-05-21 21:24:35 +00:00
relyea%netscape.com
c936511eb9 Fix spelling error. 2002-05-21 21:23:33 +00:00
relyea%netscape.com
fe96b95117 Clear out certs associated with tokens that have just been taken off the trust domain. 2002-05-21 21:22:55 +00:00
jpierre%netscape.com
d5de75b62b Fix for bug 137645 - cached certificate does not get its nickname updated after P12 import of matching user certificate 2002-05-20 23:21:39 +00:00
ian.mcgreer%sun.com
dc613b61ee bug 144309, return value of STAN_GetCERTCertificate not checked
r=wtc
2002-05-20 18:05:11 +00:00
ian.mcgreer%sun.com
b60654eafd fix bustage caused by generated file discrepancies 2002-05-20 16:01:21 +00:00
ian.mcgreer%sun.com
8fca6832bc need to match ckapi.perl with generated target nssck.api, which was modified 2002-05-20 14:38:48 +00:00
wtc%netscape.com
5b50af192d Bugzilla bug 145178: added OpenBSD build support. The patch is contributed
by Christopher Seawood <seawood@netscape.com>.
Modified Files: coreconf/config.mk sslmutex.c sslmutex.h
Added Files: coreconf/OpenBSD.mk
2002-05-18 03:24:17 +00:00
wtc%netscape.com
a1bc754db7 Bugzilla bug 131171: added HP-UX IPF (ia64) support. Portions of the patch
(attachment 84127) were contributed by Jim Dunn <jdunn@netscape.com>.
2002-05-18 00:52:11 +00:00
wtc%netscape.com
c8518d87b7 Bugzilla bug 145128: fixed a typo error in sec_pkcs5_rc4(). Also simplfied
two other similar constructs.  r=relyea.
2002-05-17 21:29:27 +00:00
kaie%netscape.com
11c622dd7c b=143532 Only allow toggling FIPS when it is safe to
r=javi sr=alecf
2002-05-17 19:56:11 +00:00
ian.mcgreer%sun.com
787847bf44 bug 144448, incorrect use of ## operator in creating CKFW entry points 2002-05-17 18:57:34 +00:00
kaie%netscape.com
7b1433c386 b=144823 Localized certificate name is garbled, unable to send out signed/encrypted mail on a localized build
r=javi sr=mscott
2002-05-17 01:21:31 +00:00
relyea%netscape.com
f83a0c6851 Fix Linux and Solaris builds 2002-05-17 00:39:26 +00:00
relyea%netscape.com
ff81ec8d87 The tip is now NSS 3.6, make sure new builds properly indicate this 2002-05-16 22:12:37 +00:00
relyea%netscape.com
2491c84161 Add PK11_GetPBEIV to exported symbol list. 2002-05-16 22:12:10 +00:00
relyea%netscape.com
b9c9b409d6 Add function to get the PBEIV. 2002-05-16 22:06:19 +00:00
relyea%netscape.com
9e71058dbf Add support to turn on or off optimizations based on parameters to NSS_Init functions 2002-05-16 22:05:17 +00:00
relyea%netscape.com
7828ad6ad0 Make a single softoken which works for both servers and clients depending on configuration.
Add the _PAD functions to the internal database token.
2002-05-16 22:04:12 +00:00
rpotts%netscape.com
73de225b01 bug #46856 (r=valeski, sr=darin). API Changes to nsIWebProgress/nsIWebProgressListener) 2002-05-16 20:57:37 +00:00
relyea%netscape.com
81db56051e Argh. I thought I had compiled this! fixe compile errors. 2002-05-16 20:48:27 +00:00
relyea%netscape.com
ad57ee44a1 Add Transactions (still need to add transactions on database upgrade).
Make trust objects their own objects to reduce a couple of unnecessary cert decodes.
2002-05-16 20:39:04 +00:00
wtc%netscape.com
b05d855681 Bug 131171: added HP-UX 11.20 support. 2002-05-16 17:35:41 +00:00
wtc%netscape.com
ec52ca8b50 Bugzilla bug 138532: use pipes instead of semaphores for NetBSD, which does
not have semaphore.h.  Thanks to Chris Seawood <seawood@netscape.com> for
the patch.  Modified files: sslmutex.h sslmutex.c
2002-05-16 13:36:03 +00:00
wtc%netscape.com
9d9c8c4c56 Bugzilla bug 133753: added support for AIX 5.1 to security/coreconf. 2002-05-16 13:12:33 +00:00
wtc%netscape.com
272f7f9153 Fixed build breakage on BeOS -- made the ifdef match the one in sslsnce.c. 2002-05-16 05:32:30 +00:00
kaie%netscape.com
1a9df62b37 b=129067 Deleted certs still appear in Cert Manager.
r=javi sr=alecf
2002-05-16 04:03:19 +00:00
kaie%netscape.com
6d4667a84a b=129067 Backing out unreliable patch.
See bugzilla for details.
Better patch will be checked in a minute.
2002-05-16 03:59:36 +00:00
kaie%netscape.com
4876fecd7c b=136948 Give better feedback when no valid certs for S/Mime are available
r=javi sr=mscott
2002-05-16 03:51:37 +00:00
kaie%netscape.com
439537d137 b=144056 security state not reset after loading about:blank pages
r=javi sr=rpotts
2002-05-16 03:39:59 +00:00
jpierre%netscape.com
338f2f561a Fix for 141256 - correct HTTP parsing for OCSP in NSS 2002-05-15 23:59:40 +00:00
dougt%netscape.com
c683a217ab Fixes mozilla/strings requiring unfrozen nsCRT class. patch by scc, r=dougt, sr=jag, b=136756 2002-05-15 18:55:21 +00:00
relyea%netscape.com
6f20bf6c21 bug 133397. Move AddPermModule() inside the previously empty if statement where it belongs. 2002-05-14 23:16:16 +00:00
kaie%netscape.com
0bc542e7d3 b=137874 Unable to import CA cert before SSL keep alive connection is terminated
r=javi sr=alecf
2002-05-14 20:46:03 +00:00
kaie%netscape.com
a856cfb637 Backing out code from bug 102633 and the unsuccessful fix attempt from bug 137530, because the UI does not work as expected.
r=javi / sr=alecf for backing out
2002-05-14 20:42:54 +00:00
nicolson%netscape.com
9bd721b3fc Support DSAPrivateKey. 2002-05-14 02:21:25 +00:00
wtc%netscape.com
8e09a8cca3 Bugzilla bug 135069: SEC_PKCS12DestroyExportContext should free the slot
reference allocated in SEC_PKCS12CreateExportContext. r=relyea,mcgreer.
2002-05-13 17:22:46 +00:00
wtc%netscape.com
0c57191723 Bugzilla bug 135824: fixed slot reference leaks in signtool and removed
a faulty attempt to set user trust.  r=relyea,mcgreer.
Modified files: certgen.c util.c
2002-05-13 17:08:20 +00:00
wtc%netscape.com
f6f0339d00 Bugzilla bug 135052: more cleanup in SEC_PKCS12DecoderStart. r=relyea. 2002-05-10 23:10:06 +00:00
jpierre%netscape.com
e1a3c306e8 Fix for bug 142868 - CA certificates are imported with NULL nicknames . 2002-05-10 20:21:38 +00:00
relyea%netscape.com
94a587472a Add function to determine if it's safe to delete the internal module. 2002-05-10 18:36:18 +00:00
relyea%netscape.com
fdca53cf70 Detect when we have a previously deleted internal module which has not yet been freed, and don't try to switch to it. 2002-05-10 18:13:44 +00:00
relyea%netscape.com
3ee0c3c996 Add new error code for trying to all previously deleted modules which have not yet been freed. 2002-05-10 18:12:39 +00:00
relyea%netscape.com
0d88474fba Allow both FIPS and non-FIPS tokens to be initialized and active at the same time. 2002-05-10 18:11:37 +00:00
relyea%netscape.com
610b845a52 When we force, we should preserve the NULL nickname semantics. 2002-05-10 18:10:26 +00:00
nicolson%netscape.com
3ebe79c4e3 comment out JDK 1.4 test so we can build with earlier versions 2002-05-10 00:13:19 +00:00
nicolson%netscape.com
89807692f8 Don't run javac if there are no source files to compille 2002-05-10 00:12:44 +00:00
wtc%netscape.com
a8cdaf3aca Bugzilla bug 135821: fixed the internal slot reference leak in
PK11_WrapPrivKey.  r=relyea.
2002-05-09 23:34:24 +00:00
wtc%netscape.com
9c38dd9727 Bugzilla bug 135809: fixed the slot reference leaks in PBE_CreateContext
and SEC_PKCS5GetIV.  r=relyea.
2002-05-09 23:21:16 +00:00
wtc%netscape.com
0daca2313b Bugzilla bug 135818: fixed internal slot reference leaks in
PK11_VerifySlotMechanisms and PK11_InitToken.  r=relyea.
2002-05-09 23:18:15 +00:00
wtc%netscape.com
363fb30239 Bugzilla bug 135826: fixed the slot reference leaks. 2002-05-09 23:01:21 +00:00
ian.mcgreer%sun.com
6804ba674f bug 135808, STAN_GetDefaultCryptoToken appears to leak a slot reference, but there are no callers of it. Removing function.
r=wtc
2002-05-09 22:42:23 +00:00
wtc%netscape.com
894efe87d2 Bugzilla bug 135334: free the internal key slot reference when we are done. 2002-05-09 21:14:36 +00:00
wtc%netscape.com
43f8939e7c Bugzilla bug 135058: free nickCopy on error returns in
PK11_FindCertsFromNickname.  r=mcgreer.
2002-05-09 20:01:18 +00:00
nicolson%netscape.com
607b7e8309 add SocketBase.getLocalAddressNative. 2002-05-09 17:11:18 +00:00
nicolson%netscape.com
a9fb648aec Fix 143256: SSLServerSocket.getInetAddress returns the wrong address.
Implement toString() for both socket types.
2002-05-09 17:10:06 +00:00
nicolson%netscape.com
2134638d66 add more PBE keygen algorithms. 2002-05-09 14:32:54 +00:00
nicolson%netscape.com
64576fd7fe update to work better with PBE. 2002-05-09 14:32:33 +00:00
nicolson%netscape.com
67a8c281e6 get rid of PBEKeySpec, just use PBEKeyGenParams. 2002-05-09 14:29:07 +00:00
glen.beasley%sun.com
c87a19a616 115778 return local port 2002-05-09 02:26:25 +00:00
kaie%netscape.com
4443c130a5 b=137530 Fix checkboxes in Edit Cipher dialog.
r=javi sr=hewitt idea-for-fix=varga
2002-05-08 19:06:11 +00:00
darin%netscape.com
2ec96af213 fixing mac bustage (next time i'll remember to build PSM on my mac) 2002-05-08 00:07:23 +00:00
wtc%netscape.com
0a6086505a Bugzilla bug 136279: Return oldpath only if it is different from path.
Avoid an unnecessary call to SECMOD_HasRootCerts in nss_FindExternalRoot.
2002-05-07 23:35:22 +00:00
darin%netscape.com
6fd5862e6e fixes bug 142870 "nsIFile should use UCS-2 instead of UTF-8"
r=dougt sr=alecf
2002-05-07 23:07:19 +00:00
nicolson%netscape.com
05963322d2 change assert to _assert. 2002-05-07 20:45:09 +00:00
nicolson%netscape.com
dd6484222e add some checks to prevent misunderstandings 2002-05-07 20:44:48 +00:00
relyea%netscape.com
56f8e3b5e8 Automatically create a NULL email profile for certs with email addresses which
are imported into the internal token.
2002-05-07 20:38:59 +00:00
nicolson%netscape.com
c0a935fe8a update version numbers. 2002-05-07 20:34:54 +00:00
nicolson%netscape.com
eb72e56e0a make it public so that it can be instantiated from CryptoManager. 2002-05-07 20:34:05 +00:00
nicolson%netscape.com
a62c7231f1 implement some methods in support of java.security.Key. 2002-05-07 20:33:23 +00:00
nicolson%netscape.com
e3bf596343 fix broken error message. 2002-05-07 20:32:29 +00:00
ian.mcgreer%sun.com
3a91379d33 bug 141936, crash when NULL nickname entry is stored in temp store
r=jpierre
2002-05-07 20:31:59 +00:00
nicolson%netscape.com
e0f7d257cc Now SymmetricKey knows what KeyGenAlgorithm its associated with. 2002-05-07 20:31:52 +00:00
nicolson%netscape.com
2b7211a011 force load of SHA1 provider before installing it as a provider. 2002-05-07 20:31:14 +00:00
nicolson%netscape.com
1795a4d054 add JCE providers. 2002-05-07 20:30:38 +00:00
nicolson%netscape.com
705e4b5479 update version strings. 2002-05-07 20:24:03 +00:00
ian.mcgreer%sun.com
d250a3e38f bug 142175, PK11_ListCerts regressions -- handle PKCS#11 incompatibilites with serial numbers, and fix trust collection. 2002-05-07 14:58:12 +00:00
kaie%netscape.com
20d03f9370 b=141871 Releasing callback in nsNSSSocketInfo must be proxied.
r=javi sr=alecf
2002-05-07 09:35:00 +00:00
kaie%netscape.com
ac1bfbc0b2 b=112384 Unable to download some CRLs.
r=javi sr=darin
2002-05-07 09:29:23 +00:00
kaie%netscape.com
a1ca0c87e8 b=139329 Crashes trying to send signed mail.
r=javi sr=alecf
2002-05-07 09:25:19 +00:00
jpierre%netscape.com
41ba83e283 Fix for 142658 - fix certutil crash with NULL nickname 2002-05-06 23:10:40 +00:00
nicolson%netscape.com
3e92affe57 Renamed to JSS*. 2002-05-06 21:54:38 +00:00
nicolson%netscape.com
cb9ba101a4 Sun's PBE Key Spec is incomplete. 2002-05-06 18:58:39 +00:00
nicolson%netscape.com
314c5a982b add DESede. 2002-05-06 18:49:52 +00:00
wtc%netscape.com
300f9cadfe Bugzilla bug 136279: fixed bugs where 'path' and 'oldpath' were passed
to string functions before they were null-terminated.  Added a comment
to explain what 'oldpath' is for.
2002-05-03 20:59:50 +00:00
nicolson%netscape.com
b02b8aab56 move alg-specific provider classes into generic parent classes. 2002-05-03 00:27:03 +00:00
nicolson%netscape.com
169b621765 upgrade to NSS 3.4.1 RTM and NSPR 4.2. 2002-05-02 23:02:49 +00:00
nicolson%netscape.com
f7c27d4ae8 New provider files for JSS 3.2. 2002-05-02 20:25:15 +00:00
ian.mcgreer%sun.com
f0d29104b1 bug 141355, CERT_DecodeDERCertificate is not a safe function for some uses, must be replaced with CERT_NewTempCertificate. 2002-05-02 19:00:13 +00:00
relyea%netscape.com
7143d6f89c Fix the RSA key check to correctly accept keys with p < q. 2002-05-02 17:39:13 +00:00
glen.beasley%sun.com
0cc88d04eb bug 131308 build 64 bit JSS with JDK 1.4 2002-05-02 04:37:16 +00:00
glen.beasley%sun.com
6ddc297e30 bug 129394 change assert to _assert 2002-05-02 04:04:23 +00:00
kaie%netscape.com
29ca7dc66d b=139948 SSL Tooltip not updated when going from one ssl site to another
r=javi sr=jag
2002-05-01 14:15:27 +00:00
jpierre%netscape.com
e7ee105522 Fix for 136279 - initialize NSS in a way compatible with < 3.4 versions of NSS 2002-05-01 01:04:41 +00:00
wtc%netscape.com
e4f5bd3810 Bugzilla bug 127062: use PR_MSG_PEEK instead of MSG_PEEK. 2002-05-01 00:21:50 +00:00
wtc%netscape.com
10bae1a1e3 Bugzilla bug 131057: define PORT_Strdup as a function that calls PORT_Alloc.
Modified files:
	lib/ckfw/nsprstub.c lib/fortcrypt/swfort/pkcs11/stub.c
	lib/nss/nss.def lib/util/secport.c lib/util/secport.h
2002-05-01 00:06:39 +00:00
wtc%netscape.com
4747c98947 Whitespace change. 2002-04-30 00:11:19 +00:00
relyea%netscape.com
cec43732fb Use NewTempCert and AddTempCert when importing because the cert may already exist
in the cache.
2002-04-29 23:54:07 +00:00
darin%netscape.com
e554d83626 fixes bug 129279 "nsIFile unicode/utf8/ascii task"
r=dougt sr=alecf
2002-04-27 05:33:09 +00:00
wtc%netscape.com
35e9736426 Added pkibase.c to the project. 2002-04-26 23:29:19 +00:00
wtc%netscape.com
787be44323 Needed a (char *) cast for slotInfo.manufacturerID because it is an array
of "unsigned" chars.  Mac's compiler complains about that.
2002-04-26 23:05:40 +00:00
jgmyers%netscape.com
bf7e6b01fd Remove ssl-forcehandshake workaround r=kaie/rpotts/bienvenu sr=darin 2002-04-26 23:02:11 +00:00
wtc%netscape.com
4841e2949f Removed devobject.c from the project. That file was removed. 2002-04-26 22:52:07 +00:00
wtc%netscape.com
2762eaebca Need to define SHLIB_SUFFIX for lib/softoken/dbinit.c. 2002-04-26 22:42:15 +00:00
relyea%netscape.com
3d3a200209 return error when incomplete shutdown has been detected. 2002-04-26 22:36:07 +00:00
ian.mcgreer%sun.com
cdae9ed5a1 When doing cert traversals, create the certs in full as they are found. This avoids thrashing the softoken's object cache when the database has a large number of certs. 2002-04-26 14:34:05 +00:00
ian.mcgreer%sun.com
74b86448f7 fix broken HPUX builds 2002-04-26 12:59:06 +00:00
relyea%netscape.com
600cb240a3 Add code to update nickname and 'CKA_ID' from set attribute calls. This allows
us to add a nickname to a cert after we import it from pkcs #12.
2002-04-26 01:44:33 +00:00
relyea%netscape.com
fbb0134208 Write the nickname entry as well when adding a nickname to a bug. 2002-04-26 01:09:21 +00:00
relyea%netscape.com
2cd6213ca5 Detect Active Card presents and disable PROTECTED_PIN_PATH login when found. 2002-04-25 21:24:47 +00:00
wtc%netscape.com
d3e14fdce2 Deleted code that was made obsolete by the previous revision. 2002-04-25 21:10:09 +00:00
relyea%netscape.com
1abdbba5a8 Don't let activeCards set the Protect_Auth bit because they weren't intending to
to begin with.
2002-04-25 20:57:06 +00:00
ian.mcgreer%sun.com
44d76f3678 if a cert already exists, use C_SetAttributeValue to change its mutable attributes during import (instead of trying to recreate it) 2002-04-25 20:49:49 +00:00
ian.mcgreer%sun.com
05bc7f4136 bug 138626, remove deleted cert from cache even if references still exist 2002-04-25 19:37:30 +00:00
ian.mcgreer%sun.com
2e14215952 reorganize token cache so that cache entries for imported objects are created from the token, not from the user-supplied template 2002-04-25 19:33:47 +00:00
relyea%netscape.com
b02d968215 NSS 3.4 has branch, that makes the tip at least NSS 3.5 2002-04-25 18:51:45 +00:00
relyea%netscape.com
0008ea5125 Don't set the Token value before fetching CRL attributes. This code is fetching
attributes from a known CRL, not looking up new attributes (I'm pretty sure that
CVS apropos would show I checked in the previously wrong code).

bob
2002-04-25 18:33:45 +00:00
seawood%netscape.com
c0ec608df6 Add 'make install' target to build. It's "MRE-friendly". (See http://www.mozilla.org/projects/embedding/MRE.html for details.)
Changes:
* Added EXTRA_COMPONENTS variable to build.  Use it to automagically install files into the components dir.
* Added SYSINSTALL variable.  Use it install files onto the system.
* Move mozilla-config generation from configure to makefiles
* mozilla-config will now generate paths based upon the MRE-based directory layout.
* Generate mozilla script from template

The installation heirarchy currently looks like:
$prefix -> /bin/mozilla
           /bin/mozilla-config
           /include/mozilla-ver/*
           /lib/mozilla-ver  (mozappdir)
                            /components
                            /res
                            /defaults
                            /chrome

There is preliminary build support for MRE dirs as well though the component manager hasn't had MRE support added yet.

$prefix -> /lib/mre/mre-ver  (mredir)
                            /components
2002-04-25 02:52:44 +00:00
sonja.mirtitsch%sun.com
adb8e67a58 trying a version that can test tip as default for tinderbox and 341
as default for nightly QA
2002-04-25 01:04:10 +00:00
relyea%netscape.com
8747bf72ad Don't crash if our cache entry is not found. 2002-04-25 00:45:42 +00:00
relyea%netscape.com
35695b7987 Turn off caching for non-hardware tokens for now until we fix some of our
tokens which can be updated out-of-band to use the proper 'removable token'
semantics.
2002-04-25 00:25:58 +00:00
relyea%netscape.com
df120eb43d Don't crash if we don't find the profile (and thus don't have a slot to free). 2002-04-24 22:23:37 +00:00
ian.mcgreer%sun.com
217231840b This is a real corner case. If a search is done by issuer/serial, and the returned cert was in the cache, need to see if the cert's slot was removed. If so, destroy the cert and retry the search on the present tokens. 2002-04-24 19:39:41 +00:00
relyea%netscape.com
23724ed2c8 Don't crash when getting a single user cert, but old certs are in the database
with the same subject, but no keys.
2002-04-24 18:29:04 +00:00
relyea%netscape.com
ac5aeb9932 Look up both DER encoded serial numbers (PKCS #11 spec), and decode serial
numbers (Old NSS) when looking up certs by issuer and SN.
2002-04-24 18:27:17 +00:00
relyea%netscape.com
71e35b07b7 Authenticate to tokens before looking up user certs. 2002-04-24 18:25:48 +00:00
kaie%netscape.com
9bd7d0e5ad b=129067 Deleted certs still appear in Cert Manager, uses slow workaround, which should get removed once bug 138626 is fixed.
r=javi sr=alecf
2002-04-24 00:51:33 +00:00
kaie%netscape.com
d71f02939c b=134992 Fix crash when displaying some S/Mime messages.
r=javi sr=alecf
2002-04-24 00:40:49 +00:00
kaie%netscape.com
b18280dee7 b=139349 Need to use dont_AddRef with GetCertAtIndex
r=bryner sr=alecf
2002-04-24 00:35:05 +00:00
kaie%netscape.com
bb35709550 b=139325 Leaking CERTCertificate references from nsNSSCertificate::GetChain
r=bryner/javi sr=alecf
2002-04-24 00:15:12 +00:00
thayes%netscape.com
df2c867541 Reserved Netscape extension (NETSCAPE 1 18) 2002-04-23 23:48:20 +00:00
ian.mcgreer%sun.com
9221a5bd63 fix shutdown leaks 2002-04-23 17:22:13 +00:00
kaie%netscape.com
fb19288806 b=125607 Temporary workaround for better displaying signed S/Mime messages w/ attachments from IMAP servers.
r=ducarroz sr=bienvenu
2002-04-22 23:02:29 +00:00
ian.mcgreer%sun.com
caad76ef9c avoid use of iterator 2002-04-22 20:44:07 +00:00
ian.mcgreer%sun.com
f9f60b9735 NewTemp has to be matched with AddTempCertToPerm 2002-04-22 20:27:52 +00:00
relyea%netscape.com
ce09346d8c Token and cert processing fixes:
1) use NewTempCert rather than DERDecode cert in all import cert cases.
When DERDecode cert is used, we may wind up with a cert that gets cleared
when we try to import it because it already in the cache. NewTempCert will
return the version that is in the cache.
   2) If we are returning the CAList, only return certs that are CA's
(not usercerts).
   3) Authenticate to all the tokens if necessary before we try to list
certs. (Stan code should eventually get automatic authentication calls in
the code itself).
   4) When looking up user certs, don't return those certs with the same
subject, but do not have any key material associated with them (that is
don't crash if we have old certs in our database without nicknames, but
match user certs on our smart cards).
   5) Save the nickname associated with our subject list in the temp
cache so we can correctly remove the entry even if the cert's nickname
changes (because of smart card insertions and removals, or because of
creation and deletions of our user cert).
2002-04-22 19:09:01 +00:00
ian.mcgreer%sun.com
9596c39faa file is no longer part of build (functionality in devtoken.c) 2002-04-22 18:28:30 +00:00
ian.mcgreer%sun.com
a4591dfe82 overwrite old entry during import, so that changing trust works correctly 2002-04-22 15:21:06 +00:00
ian.mcgreer%sun.com
abac680269 fix bugs in cert import with smart card cache 2002-04-22 14:14:44 +00:00
ian.mcgreer%sun.com
a7ab27bc63 re-sync the trust domain cache with token insertion/removal 2002-04-19 23:06:44 +00:00
nicolson%netscape.com
9c53042faa JSS 3.2 features check-in. 2002-04-19 22:42:05 +00:00
ian.mcgreer%sun.com
36e1d960b7 * make sure the token cache returns failure in overflow case
* change internal module trust order again, builtins uses 100, and internal module must come first
2002-04-19 19:30:12 +00:00
ian.mcgreer%sun.com
3a62ba7fdd try again, the default is 50 so the internal module must be higher 2002-04-19 19:19:33 +00:00
ian.mcgreer%sun.com
7061750a28 make sure the internal module defaults to trust order > 50 2002-04-19 19:01:45 +00:00
ian.mcgreer%sun.com
7c6de6462d improve synchronization between the token state and token cache operations 2002-04-19 17:32:22 +00:00
ian.mcgreer%sun.com
a4d9b8b514 Only fall back to email search if the "nickname" has an @ character. This is because email searches will not go through the cache, so should be avoided if possible. 2002-04-19 16:22:31 +00:00
ian.mcgreer%sun.com
5377ca2a6c Fixes for smart card cache. Don't do cache searches by email address, since GetAttributeValue does not set that field. Handle removal correctly for item at tail of list. Don't search token after a successful cache search that returned zero hits. 2002-04-19 16:14:13 +00:00
kaie%netscape.com
da66977564 b=137154 PSM needs to call SSL_ClearSessionCache before switching profiles
r=javi sr=alecf
2002-04-18 22:25:26 +00:00
jpierre%netscape.com
2d21c59ccc Fix for 138084 - free slot list if NSC_Initialize fails 2002-04-18 20:54:22 +00:00
ian.mcgreer%sun.com
ee8ba26ef6 catch non-present tokens before searching them 2002-04-18 19:37:12 +00:00
ian.mcgreer%sun.com
f618a840b0 two fixes for certs with multiple instances 2002-04-18 19:26:17 +00:00
relyea%netscape.com
8964d7d12e Don't crash if we try to get the name of a non-existant token. 2002-04-18 17:54:30 +00:00
relyea%netscape.com
77950da5b1 Remember the nickname in the cache entry so that we can always free it when the cert goes away, even if the nickname has changes.
Also, initialize subjectList to NULL at the beginning, so we don't try to add nickname when we aren't supposed to.
2002-04-18 17:52:55 +00:00
relyea%netscape.com
a9286881d6 We need to make sure we always return a trust object, even if that object says
there is no trust.
2002-04-18 17:50:40 +00:00
ian.mcgreer%sun.com
5dbec9a12d landing new smart card cache, bug 135429 2002-04-18 17:30:05 +00:00
nicolson%netscape.com
cdc867c54c update NSS version. 2002-04-18 14:33:16 +00:00
wtc%netscape.com
f971211696 Bugzilla bug 126087: removed symKey->refLock because we are using atomic
routines on symKey->refCount now.  Declare symKey->refCount as PRInt32 to
match the prototype of PR_AtomicIncrement/Decrement.
Modified files: pk11skey.c secmodti.h
2002-04-17 01:03:23 +00:00
jgmyers%netscape.com
3052458a05 Remove unneeded ForceHandshake code which broke IMAP/SSL over SOCKS: bug 133434 r=kaie@netscape.com sr=brendan@mozilla.org a=asa 2002-04-16 22:49:33 +00:00
wtc%netscape.com
8236aafeec Bugzilla bug 133584: PK11_SaveSMimeProfile also needs to free free_slot if
it returns on error.
2002-04-16 22:40:07 +00:00
dbragg%netscape.com
bcc260038d Regular milestone update of localeVersion values to 1.0.0. Bug 126785. r=tao, sr=alecf, a=asa 2002-04-16 22:19:10 +00:00
sonja.mirtitsch%sun.com
f091c5b444 changes for jdk 1.4; and mccrel move 2002-04-16 20:57:42 +00:00
relyea%netscape.com
117c6b4800 Don't free the temp secmod.db name until we are through using it. 2002-04-16 00:24:34 +00:00
ian.mcgreer%sun.com
b4146d9933 bug 63815, AIX compiler fails to build ckhelper.c in debug mode 2002-04-15 21:04:00 +00:00
ian.mcgreer%sun.com
54e6d33515 fix bbroken solaris x86 build 2002-04-15 16:20:39 +00:00
ian.mcgreer%sun.com
a7256cf9ec bug 135521, change cert lookups on tokens to be actual finds instead of traversals 2002-04-15 15:22:11 +00:00
ian.mcgreer%sun.com
a9ff4e3f4d fix a cert reference leak in strsclnt 2002-04-15 14:24:15 +00:00
kaie%netscape.com
1f3856b5a5 b=136908 Make CRL manager UI work again.
r=kaie sr=ben
2002-04-15 12:18:13 +00:00
kirk.erickson%sun.com
9cf5576b32 Resolves 126087. Backed out of slot->keyCount atomic instructions. 2002-04-14 14:07:12 +00:00
ian.mcgreer%sun.com
6d36e7eddc fix error statement 2002-04-12 19:17:48 +00:00
relyea%netscape.com
7aa8e229f4 Bug 133584: Fix reference leaks which prevent shutdown in NSS and in the tests.
Debug builds can verify correct operation by setting NSS_STRICT_SHUTDOWN, which
will cause an assert if shutdown is called but not all the modules are freed (which
means a slot, key, or cert reference has been leaked).
2002-04-12 19:05:21 +00:00
ian.mcgreer%sun.com
341d4faa3c bug 136806, don't authenticate to friendly slots when adding certs 2002-04-12 18:07:49 +00:00
ian.mcgreer%sun.com
55b154c58d testing theory that unmatched atomic increment/decrement is causing occasional tinderbox failures. See bug 126087. 2002-04-12 15:51:11 +00:00
kaie%netscape.com
805157a4b3 b=102633 Changed cipher prefs dialog.
Allow the user to enable additional ciphers.
Disable two cipher suites that are no longer in use (said the NSS team).
r=javi/nelsonb/cotter sr=alecf
2002-04-12 04:44:29 +00:00
kaie%netscape.com
cc964d5bed b=119418 Fix handling of opaque signed S/Mime messages.
Also fixes some other S/Mime issues, as described in the bug.
r=ddrinan/ducarroz/darin sr=alecf
2002-04-12 04:26:40 +00:00
relyea%netscape.com
9b84261e2a Update the version field in the handle when doing the automatic update. 2002-04-12 03:43:34 +00:00
ian.mcgreer%sun.com
85eee15af6 additional fix for the patch from bug 126087. Must not set symKey->slot to NULL after leaving the freelist lock, or somebody else might pick up the symKey from the freelist, have their slot NULL'ed, and whamo.. 2002-04-11 23:05:38 +00:00
ian.mcgreer%sun.com
a07c97c4aa key should be freed when refcount == 0 after decrement. See bug 126087. 2002-04-11 19:15:31 +00:00
kaie%netscape.com
3bb822a9ab b=102633 Allow the user to enable additional ciphers, dynamically obtaining a list of ciphers from NSS.
Disable support for two ciphers that are no longer in use.
r=javi/nelsonb/cotter sr=alecf
2002-04-11 05:07:09 +00:00
kaie%netscape.com
c360fab9ce b=119481 Fix various unitialized variables.
r=kaie/javi sr=kin
2002-04-11 05:01:29 +00:00
kaie%netscape.com
583eafcb12 b=118319 Fix memory leak.
r=javi/wtc sr=blizzard
2002-04-11 04:35:08 +00:00
kaie%netscape.com
4a5807462b b=119481 Fix various unitialized variables.
r=kaie/javi sr=kin
2002-04-11 04:31:53 +00:00
kaie%netscape.com
1fa789d4cb b=129740 Fix client auth with profiles migrated from Communicator.
r=javi sr=alecf
2002-04-11 04:24:20 +00:00
kaie%netscape.com
568e70767c b=132543 Fix crash when downloading CRL
r=javi sr=alecf
2002-04-11 04:21:18 +00:00
relyea%netscape.com
f0c6675537 bug 128586 (and other) importing non-NSS pkcs#12 files.
We need to decode the privatekeyinfo attributes if they exist.
2002-04-11 00:59:43 +00:00
nelsonb%netscape.com
12322a141f Add enum names for use in forward declarations. 2002-04-10 23:27:50 +00:00
wtc%netscape.com
0d4ecebd48 Bugzilla bug 136625: prevent pk11_cert_collect from storing NULL in the
certData.certs array so that pk11_searchCertsAndTrust won't deference a
NULL pointer.  r=relyea.
2002-04-10 17:56:52 +00:00
wtc%netscape.com
09eb8a090a Bugzilla bug 119418: export NSS_CMSMessage_IsEncrypted. 2002-04-10 17:54:02 +00:00
ian.mcgreer%sun.com
e62cf2fe9d bug 135871, CERT_ImportCerts not storing temp certs
r=relyea
2002-04-09 23:46:57 +00:00
nicolson%netscape.com
aee0f2e0e1 login to token before importing private key. 2002-04-09 19:23:49 +00:00
relyea%netscape.com
8aeb4d9e03 Handle yet another PKCS #11 device which has non-standard behavior, but is well established in the market place. 2002-04-09 17:58:00 +00:00
relyea%netscape.com
78033ccb01 Add the ability to test the multi-access database feature with existing test cases. 2002-04-08 23:39:44 +00:00
relyea%netscape.com
710d547b27 Add database update capabilities to NSS softoken for multi-access database. 2002-04-08 23:37:49 +00:00
nicolson%netscape.com
ad470cfd5c merge JDK 1.4 changes to the trunk. 2002-04-08 21:46:56 +00:00
wtc%netscape.com
fa6cabf3a9 Restored the 'static' qualifier that was accidentally deleted in the
previous revision.
2002-04-05 19:38:03 +00:00
wtc%netscape.com
02c4bae431 Bug 135728: include pki3hack.h for the declaration of
STAN_AddModuleToDefaultTrustDomain, etc. r=mcgreer.
2002-04-05 19:30:38 +00:00
wtc%netscape.com
95f21cf9dd Bug 135728: should return SECFailure because the function's return type
is SECStatus.  r=mcgreer.
2002-04-05 19:25:48 +00:00
ian.mcgreer%sun.com
a1eb08fab6 remove unused Stan build files 2002-04-05 19:08:32 +00:00
ian.mcgreer%sun.com
c2e59a5608 fix broken 64-bit platforms 2002-04-05 15:19:37 +00:00
jpierre%netscape.com
dc6f8c3867 Fix world record warning message 2002-04-05 10:23:58 +00:00
relyea%netscape.com
57da95c52b Tempararily back out random change so that we don't actually read *every* file in system32. 2002-04-05 09:18:57 +00:00
relyea%netscape.com
1e4fbdcfa4 Multi-access database changes. 2002-04-05 09:17:51 +00:00
nelsonb%netscape.com
153a1e1fa9 WinCE mods (2nd try). Use NSPR for file system I/O on WinCE.
Change algorithm for selecting files to read for seeding the PRNG.
Old algorithm sometimes read very few files if opens failed.
2002-04-05 03:49:35 +00:00
nelsonb%netscape.com
ead7be632b Don't build nss/cmd or nss/lib/fortcrypt on WinCE. 2002-04-05 03:34:57 +00:00
nelsonb%netscape.com
130c1e83db On WinCE, DBM's dbopen uses NSPR file open flags rather than libc's
file open flags (which are not defined on WinCE).
2002-04-05 03:33:42 +00:00
nelsonb%netscape.com
977f0c234a Stop linking in wsock32.lib and winmm.lib on Windows. We haven't needed
these since we started linking with NSPR's DLLs, and they don't exist
on WinCE.
2002-04-05 03:30:37 +00:00
relyea%netscape.com
328abf7121 Fix linux build errors 2002-04-05 03:29:50 +00:00
relyea%netscape.com
68c7d19edd return the correct error codes to make all.sh happy. 2002-04-05 03:16:41 +00:00
sonja.mirtitsch%sun.com
1a80c72971 fixed a bug that had resulted in tinderbox results not always being uploaded 2002-04-05 01:41:34 +00:00
relyea%netscape.com
d0385fe4ca Add ';' so Solaris and Linux will build 2002-04-05 01:09:39 +00:00
nelsonb%netscape.com
c2c7b26b40 New platform files for WinCE. 2002-04-05 00:52:32 +00:00
relyea%netscape.com
24ff51d1d9 Link certutil dynamically. 2002-04-05 00:12:21 +00:00
relyea%netscape.com
9edd53c39f Add symbols so the certutil can be linked dynmically 2002-04-05 00:11:25 +00:00
relyea%netscape.com
f7df04f838 Don't try verifying the db's in a multi-access database case 2002-04-05 00:10:39 +00:00
kaie%netscape.com
649bf84ac3 b=125041 CA not imported when getting personal cert
r=ssaux sr=alecf a=asa
2002-04-04 22:30:40 +00:00
ian.mcgreer%sun.com
4ef0569976 New file for common PKI stuff. Not yet part of build. 2002-04-04 21:15:27 +00:00
ian.mcgreer%sun.com
b1ccccd70a Land Stan changes to tip. Mostly header file / structure / API cleanup. Note
that these changes *do not* affect the current build, except for some minor edits.
2002-04-04 20:00:28 +00:00
kirk.erickson%sun.com
2144eabbcb Addresses bug 126087 (hot locks identified by Ning at Sun).
Using atomic instructions to reduce contention on slot->freeListLock
and symKey->refLock.
2002-04-04 18:30:51 +00:00
relyea%netscape.com
3b55947b03 Make sure we aren't confusing secret keys with private and public keys 2002-04-04 18:08:30 +00:00
relyea%netscape.com
7df2fc6877 Don't include the public key on a list if it doesn't exist. 2002-04-04 18:07:19 +00:00
ian.mcgreer%sun.com
03f9222af7 define nss_ZREALLOCARRAY, fix bugs in nss_ZRealloc 2002-04-04 16:14:26 +00:00
nelsonb%netscape.com
6fea29075e Back out win_rand changes. The changes used NSPR for file I/O instead
of using libc.  But some of our DLLs don't link against NSPR :-(.
2002-04-04 02:09:01 +00:00
nelsonb%netscape.com
ba4e5d74fc Fix build error on NT. 2002-04-04 01:41:19 +00:00
nelsonb%netscape.com
29d5f9376c Add missing #include to fix errors on AIX. 2002-04-04 01:35:13 +00:00
nelsonb%netscape.com
d3e17b1324 Remove duplicative include. arch.mk is included by config.mk. 2002-04-04 00:22:47 +00:00
nelsonb%netscape.com
d378f5131e Get freebl and mpi to build for WinCE. Use NSPR for I/O in sysrand. 2002-04-04 00:19:43 +00:00
nelsonb%netscape.com
e61fb92200 Fix (er, improve) Makefile dependencies for sysrand.{o,obj} 2002-04-04 00:17:17 +00:00
nelsonb%netscape.com
f9e447b703 Make libSSL build for WinCE. 2002-04-04 00:14:12 +00:00
nelsonb%netscape.com
641d6a3bb9 Make libutil build for WinCE. 2002-04-04 00:11:48 +00:00
nelsonb%netscape.com
9d16425428 Warning reduction. substitute (uchar) cast for ANDing with 0xff. 2002-04-04 00:10:34 +00:00
nelsonb%netscape.com
43238a5498 Since WinCE has no command line shell, don't build cmd for it. 2002-04-04 00:03:03 +00:00
nelsonb%netscape.com
515ed51a75 Add cross-platform (WinCE) support. 2002-04-04 00:00:27 +00:00
nelsonb%netscape.com
62bcb070d8 Add WinCE suport. 2002-04-03 23:27:16 +00:00
ian.mcgreer%sun.com
067b682a97 merge branch fix for bug 115954 to tip 2002-04-03 19:22:15 +00:00
javi%netscape.com
53b314fb39 Don't include the static library util.o in all of the NSS shared libraries to prevent each shared library from getting its own copy of some of the NSS global symbols. 2002-04-03 18:29:40 +00:00
wtc%netscape.com
5915719048 Bugzilla bug 134095: removed error-handling code that's not quite correct. 2002-03-29 18:53:15 +00:00
jpierre%netscape.com
b38e1cb19d Fix for 134095 - allow PKCS#11 framework to free attributes for non-const token objects 2002-03-29 07:34:22 +00:00
hewitt%netscape.com
41e544f079 110156 - renaming outliner to tree - weird cvs events causing us to lose the log for this file, sadly. if you want the old log, see Attic/nsICertOutliner.idl 2002-03-29 03:36:00 +00:00
hewitt%netscape.com
d38a0937d9 bugs 110156, 110155
Removing support for <outliner> tags
Removing <tree> layout code and moving <tree> tags to outliner layout
Convert all usage of <outliner> to tree tags
Convert all usage of <tree> tags to new <tree> syntax or <listbox>
r=cmanske,varga sr=hyatt,sspitzer a=asa

Also includes fixes by Jan Varga (varga@utcruk.sk) for bugs 132020, 133451, 131393, 115894, and 129327
2002-03-29 02:46:01 +00:00
sonja.mirtitsch%sun.com
f67b5a6f41 moving security products from mccrel to mccrel3 2002-03-28 00:42:36 +00:00
kaie%netscape.com
2d6fbf60d6 b=130949 Fix lock icon issues
r=ddrinan sr=rpotts a=valeski
2002-03-27 07:56:02 +00:00
kaie%netscape.com
6414cb969a b=129100 OOPS fixing wrong case in my prior checkin 2002-03-27 07:54:47 +00:00
wtc%netscape.com
dd90c969db Bugzilla bug 133668: use PR_MIN instead of MIN, which is no longer defined
by the Mozilla header file that we include.
2002-03-27 07:29:57 +00:00
jpierre%netscape.com
79cf58115f Call NSS_Shudown in modutil 2002-03-27 05:02:58 +00:00
kaie%netscape.com
f2af1c2edb b=107817 Make sure sent encrypted messages will be decryptable by sender.
r=ddrinan
sr=alecf
a=roc+moz
2002-03-27 03:27:43 +00:00
kaie%netscape.com
5e65891f50 b=129774 Increment PSM version to 2.3
r=ssaux
sr=alecf
a=valeski
2002-03-27 02:43:43 +00:00
kaie%netscape.com
dba2bcf468 b=122967 Disable "edit email trust button" in certificate manager, until functionality gets implemented correctly.
r=javi
sr=alecf
a=roc+moz
2002-03-27 02:41:58 +00:00