Commit Graph

3210 Commits

Author SHA1 Message Date
wtc%netscape.com
9318a2b270 Bugzilla bug 131427: add "for Clients" to the version id strings in the
softoken shared library if MOZ_CLIENT is defined.  r=relyea.
2002-03-20 21:17:30 +00:00
jaggernaut%netscape.com
8f26b59dcb Bug 101723: security icon only works for the first tab
Bug 117203: Insecure POST warning only comes up for first tab
Bug 120043: Page Info shows information about a page in the first tab
r=sgehani, r=kaie/ddrinan (for security stuff), sr=sspitzer (for mail/news stuff), sr=hyatt, a=asa. Work based on patch by Smaug <smaug@jippii.fi>.
2002-03-20 09:57:35 +00:00
wtc%netscape.com
c1adf4b062 Bugzilla bug 131430: changed "softoken" to "softokn" to match the file
name.  r=relyea.
2002-03-20 04:43:41 +00:00
wtc%netscape.com
64cc8d0455 Bugzilla bug 131427: added sccs and rcs version id strings to the softoken
shared library.  r=relyea.
Modified files: manifest.mn pkcs11.c
Added file: softkver.c
2002-03-20 04:38:09 +00:00
sonja.mirtitsch%sun.com
08ce0e0ee9 patch for bug 87914 r=wtc, NSS test scripts require . in the PATH 2002-03-20 03:01:27 +00:00
sonja.mirtitsch%sun.com
35e022c85a uploading only waht's specified in the parameters 2002-03-19 19:54:16 +00:00
alecf%netscape.com
451df7d6c3 a further nsString api reduction: remove the last case-insensitive PRUnichar*-to-PRUnichar* comparisons, moving to new API, and remove old methods from nsString. r=dougt, sr=jag a=scc 2002-03-19 06:46:56 +00:00
oeschger%netscape.com
30be10945c add a help button to crl manager dlog, update links in two others, bug=129143, sr=alecf, r=ssaux, a=asa/drivers 2002-03-18 23:41:45 +00:00
wtc%netscape.com
3112e85b77 Bugzilla bug 130101: this file is no longer necessary because we now
generate nslib.c in $(OBJDIR).
2002-03-16 00:06:28 +00:00
wtc%netscape.com
6f6c4947bb Bugzilla bug 131289: fixed a UMR error and bad placement of the terminating
null byte of a string in nss_FindExternalRoot.  r=mcgreer.
2002-03-15 23:05:58 +00:00
wtc%netscape.com
7f18de5feb Fixed a memory leak on memory allocation error. r=mcgreer. (bug 129709) 2002-03-15 22:09:45 +00:00
wtc%netscape.com
8a7b873e45 Bugzilla bug 130703: final adjustment of the CERTSignedCrl structure for
NSS 3.4.  r=relyea.
2002-03-15 20:21:45 +00:00
wtc%netscape.com
0fd6892956 Bugzilla bug 130983: SEC_FindCrlByName needs to set the 'pkcs11ID' field
of the CERTSignedCrl structure it returns.  The patch is contributed by
Rangan Sen <rangansen@netscape.com>.  r=relyea.
2002-03-15 20:17:15 +00:00
relyea%netscape.com
c650f7f90e handle older tokens that do not handle GetAttributes correctly. 2002-03-15 19:51:27 +00:00
ian.mcgreer%sun.com
f6f58a33ec bug 130747, update trust after login to catch user certs when token doesn't return public key (ncipher) 2002-03-15 19:23:14 +00:00
wtc%netscape.com
608314e686 Bugzilla bug 131078: fixed compiler warnings. r=mcgreer. 2002-03-15 06:07:41 +00:00
wtc%netscape.com
b2673560c4 Bugzilla bug 131057: define PORT_Strdup as PL_strdup so that it uses NSPR's
memory allocator.  r=mcgreer.  Modified files: secport.c secport.h
2002-03-15 05:54:22 +00:00
wtc%netscape.com
4d973f2f8e The previous checkin breaks signtool on Linux, AIX, and OSF1. Backing it
out.
2002-03-15 05:27:34 +00:00
wtc%netscape.com
9cf86aee4f Bugzilla bug 131062: fixed a zlib vulnerability. 2002-03-15 01:43:49 +00:00
ian.mcgreer%sun.com
392378fcaa bug 129709, incorrect free of cert->nickname
r=wtc
2002-03-14 17:42:02 +00:00
ian.mcgreer%sun.com
003962fa63 bug 129778, cert instances incorrectly reset when cert was not deleted
checked in for wtc, r=mcgreer
2002-03-14 17:39:12 +00:00
seawood%netscape.com
9bdb6711d0 Remove now redudant REGCHROME calls.
Bug#129456 r=bryner a=asa
2002-03-14 07:11:30 +00:00
seawood%netscape.com
abb8a23948 Remove REGCHROME calls since we now auto-register chrome when jars are processed.
Bug #129456 r=bryner a=asa
2002-03-14 06:17:54 +00:00
wtc%netscape.com
62b88996d5 Bugzilla bug 130703: fixed several issues in the NSS 3.4 exported headers.
1) Preseve the position of NSS 3.3 elements in the data structures.  Some
new fields replace some old deprecated fields where possible to preserve
the total size of the structure.
2) Stan headers are removed from public exports.
3) Some exported functions didn't have prototypes in the public headers.
4) One bug fix: dev3hack.c did not pass the second argument to
nssToken_DestroyCertList.
5) Include the necessary headers to fix undeclared function warnings.
2002-03-14 04:12:25 +00:00
wtc%netscape.com
8db34d758e Bugzilla bug 130158: fixed a crash in NSC_CopyObject if pk11_CopyObject
fails.
2002-03-14 03:34:11 +00:00
oeschger%netscape.com
4f1a83dd41 left-overs from last week's syntax change to help, should been updated url+key->key, a=asa,r=andreww,r=ssaux, sr=alecf, bug=124902, got left out 2002-03-13 21:05:21 +00:00
nicolson%netscape.com
c89247a09f Fix 129756: PK11_SetObjectNickname is broken.
r=relyea.
2002-03-12 01:50:57 +00:00
kaie%netscape.com
bcbe88f8af b=125807 Fix Lock Icon Set Incorrectly
Checking in for ddrinan
r=kaie sr=mscott a=asa
2002-03-08 22:27:16 +00:00
wtc%netscape.com
f411d185fe Bugzilla bug 129298: the assertion may be false. Remove it, and initialize
stanNick to NULL.  r=mcgreer.
2002-03-08 00:02:35 +00:00
relyea%netscape.com
fd92279500 Cache whether there are no CRL's and Trust objects on removable HW tokens 2002-03-07 23:21:39 +00:00
ian.mcgreer%sun.com
1c0702fa1e additional change to last patch, suggested by wtc
r=wtc
2002-03-07 22:53:40 +00:00
ian.mcgreer%sun.com
ab7d7da30f bug 129298, handle different nicknames across tokens
r=relyea/a=wtc
2002-03-07 22:08:00 +00:00
nelsonb%netscape.com
44154b43ce Build p7content p7env p7sign and p7verify using nss shared libs.
bug 129354.  r=wtc.
2002-03-07 22:07:21 +00:00
nelsonb%netscape.com
34151e77cf Add support for new -p option to pass password to PK11 token.
Patch by evanchu@aol.com (Evan Chu).  r=nelsonb a=wtc bug 129354.
2002-03-07 22:05:43 +00:00
wtc%netscape.com
7c9a8c3428 Bugzilla bug 129408: removed the "FOR PSM" comment. All of these NSS 3.4
exports are fine for general use.  r=relyea.
2002-03-07 21:31:05 +00:00
wtc%netscape.com
1ced872252 Bugzilla bug 129408: final adjustments of the NSS 3.4 *.def files. List
the symbols in alphabetical order.  In softokn.def, changed "Sofoken 3.4
release" to "NSS 3.4 release, which is what we use in other *.def files.
Added seven new PKCS7 exports to smime.def.  r=relyea
Modified files: nss.def smime.def softokn.def ssl.def
2002-03-07 21:18:49 +00:00
ian.mcgreer%sun.com
1891e7ab51 bug 129370, temp cert trusts and S/MIME profiles may cause crashes
r/a=wtc
2002-03-07 20:42:40 +00:00
nicolson%netscape.com
b24b11d263 Fix 129389: Algorithm.c treats oidIndex as short when it should be int. 2002-03-07 01:59:58 +00:00
jpierre%netscape.com
524157740c Fix for 129201 - allow parameter string to be retrieved in a PKCS#11 module built on top of ckfw 2002-03-06 21:41:35 +00:00
darin%netscape.com
f1a6738b6c fixes bug 124042 "support internationalized URIs" r=dougt, sr=alecf, a=asa 2002-03-06 07:48:55 +00:00
relyea%netscape.com
578a4b59ae bug 125808 :
Reset the token name on token removal.
Check for token presence to reset the session handle.
Consolidate the NSS3 style TokenInit with the stan init so everything is in sync.
r=ddrinan
2002-03-06 01:44:50 +00:00
relyea%netscape.com
86fae50a07 Initialize result to SECSuccess before we return. 2002-03-05 22:14:44 +00:00
ian.mcgreer%sun.com
a297296053 missed part of last patch 2002-03-05 16:54:16 +00:00
ian.mcgreer%sun.com
e2f7031637 bug 125112, don't alloc return array if there are no certs found 2002-03-05 16:08:53 +00:00
wtc%netscape.com
f4a0a5c24d Bugzilla bug 128915: the first part of the previous change is not
necessary, so replace it with an assertion.  r=mcgreer.
2002-03-05 15:49:33 +00:00
wtc%netscape.com
c6e8882b5e Temporary workaround to make 'depend' do a 'clean' in NSS. This is for
the landing described in bug 128593.
Modified Files: Makefile.in security/manager/Makefile.in
	security/nss/makefile.win
2002-03-05 15:22:48 +00:00
alecf%netscape.com
13265ef155 one more attempt at bustage 2002-03-05 00:12:20 +00:00
alecf%netscape.com
7f8b43512f fix NSS bustage 2002-03-04 23:57:13 +00:00
ian.mcgreer%sun.com
57cc1567da bug 128915, prevent crash on empty S/MIME profiles 2002-03-04 23:19:20 +00:00
relyea%netscape.com
cab04c2fb6 Fix token/cert interactions:
1) don't have certs disappear because we have empty tokens.
2) Make sure the NSSToken structure has up-to-date nicknames.
2002-03-04 22:39:28 +00:00
ian.mcgreer%sun.com
5494fb48cd bug 125808, fix crash seen with Javi's db 2002-03-04 21:06:10 +00:00
ian.mcgreer%sun.com
3b9dceb097 IMPLEMENT-->EXTERN for header file 2002-03-04 17:17:47 +00:00
ian.mcgreer%sun.com
bd346d7bfd bug 125808, update cert token instances when caching smart card certs that are already cached 2002-03-04 17:13:54 +00:00
wtc%netscape.com
1d74ff3063 Bugzilla bug 128599: link libnss3.so with -R $ORIGIN on Solaris to help it
find libsoftokn3.so.  Fixed an outdated comment in softoken/config.mk.
2002-03-03 02:34:32 +00:00
wtc%netscape.com
e853ff7e07 Bugzilla bug 112198: use the correct root certs module name for Darwin. 2002-03-03 02:29:31 +00:00
wtc%netscape.com
2dfbc7deeb Bugzilla bug 122261: removed an assertion on bad input. Bad input should
be reported by returning a failure status.  Thanks to erl@voxi.com
(Erland Lewin) for the bug report.  r=relyea,kaie.
2002-03-02 15:31:25 +00:00
jpierre%netscape.com
44ae883a06 Fix bug 128347 - add -string argument to pass strings to PKCS#11 modules upon addition 2002-03-02 01:56:27 +00:00
oeschger%netscape.com
abbee7ebcb updating UI in Cert Manager: 'Restore' button should say 'Import', a=asa/drivers for trunk, sr=alecf, r=ssaux, bug=114454 2002-03-02 01:08:25 +00:00
relyea%netscape.com
9a0f03ede1 Implement PQG Generate and Verify. 2002-03-02 00:53:11 +00:00
relyea%netscape.com
0a88feb486 Implement PKCS #11 2.11 DSA PQG Parameter generation. 2002-03-02 00:52:05 +00:00
relyea%netscape.com
27a4ab74b6 Make makepqg build dynamic.
Call the dynamic high-level functions to accomplish the generation.
2002-03-02 00:50:39 +00:00
ian.mcgreer%sun.com
ffa4c947ec modify last patch to only take effect if the slot certs are not publicly readable, and to not update the token cert list more than once 2002-03-01 21:43:57 +00:00
ian.mcgreer%sun.com
213696bc04 another fix for bug 125808, force update of cache after login/logout 2002-03-01 16:28:53 +00:00
wtc%netscape.com
d0c71c0e9d Bugzilla bug 112987: merged changes contributed by FreeBSD developer
Jeremy <reg@shale.csir.co.za>.  r=wtc.
2002-03-01 16:08:12 +00:00
relyea%netscape.com
dfe3ee8685 Don't go searching for the matching certs if they weren't on the token the
private key lived on.
2002-03-01 02:15:00 +00:00
relyea%netscape.com
39c2b9d38b When we free the clists, clear out our head pointer (don't keep pointing to
freed memory);
2002-03-01 02:13:42 +00:00
nelsonb%netscape.com
ebc48d2fa1 Fix Usage message. Add missing \n to string. 2002-03-01 01:53:07 +00:00
jpierre%netscape.com
3a5e730566 Fix for 128355 - add SECMOD_AddNewModuleEx to take module parameters 2002-03-01 00:37:42 +00:00
ian.mcgreer%sun.com
3e984aecf0 bug 125808, refresh trust and slot pointers of cert after token removal/insertion 2002-02-28 22:55:30 +00:00
relyea%netscape.com
089b31a446 Fix PSM name problem.
Fix crash when trying to access/delete an non-existant object.
2002-02-28 21:30:13 +00:00
relyea%netscape.com
459a3ef1a6 Load builtins even if we are openning the database read only. 2002-02-28 21:28:47 +00:00
ian.mcgreer%sun.com
09c00fbd12 bug 126653, intermediate cert should have valid CA trust 2002-02-28 19:41:51 +00:00
cathleen%netscape.com
7a8a52afaa fix build bustage due to nsCRT::strlen(char* s) removed 2002-02-28 05:14:10 +00:00
ian.mcgreer%sun.com
bec85f00b2 misdeclared function signature 2002-02-28 01:32:32 +00:00
ian.mcgreer%sun.com
061674f14c fix aix bustage 2002-02-27 23:17:12 +00:00
ian.mcgreer%sun.com
0900842e0a bug 125808, smart card cache fixes 2002-02-27 22:41:56 +00:00
ian.mcgreer%sun.com
e9ae28e48e fix looking up a key on a token 2002-02-27 22:12:06 +00:00
bishakhabanerjee%netscape.com
208526857e Bug 127785 - checked in cseawood's patch 2002-02-27 21:49:41 +00:00
ian.mcgreer%sun.com
d58fbac280 partial fix for bug 125808, if the otken is not logged in when the cert cache loading is done, retry later 2002-02-27 21:36:19 +00:00
oeschger%netscape.com
ce586a48b0 these syntax updates fell through the cracks of the Monday check-in for restoring context-sensitive help, r=andrew, security r=ssaux, sr=alecf, a=asa, bug=124902 2002-02-27 21:12:23 +00:00
wtc%netscape.com
1b62c0e373 Bugzilla bug 108021: removed unused variable 'validity'. 2002-02-27 19:39:26 +00:00
relyea%netscape.com
6d7e648d51 remove LastUpdate time checks from Crl's when verifying certificates. 2002-02-27 18:56:24 +00:00
relyea%netscape.com
dc5064178b Don't crash on when adding certs with null url's . 2002-02-27 16:59:33 +00:00
relyea%netscape.com
cebd4b1a6f The KRL reserved handled should be different from the primordial CRL handle
so that CRL matching code will work correctly.
2002-02-27 16:57:45 +00:00
kaie%netscape.com
f6be46bd1d b=125259 r=rangansen sr=shaver a=asa
Edit CA dialog misshaped
2002-02-27 09:50:21 +00:00
nelsonb%netscape.com
681ff24ca9 1. the sslSecurityInfo and sslGather structs are now part of the sslSocket
rather than being pointed to by the sslSocket.  This reduces the number
of malloc/free calls, and greatly reduces pointer fetches, and null
pointer checks.  sslGather and sslSecurityInfo are separately initialized.
2. SSL_ResetHandshake no longer deallocates and reallocates the sslSecurityInfo and all its subcomponents.
3. Many places that formerly did not check for memory allocation failures
now do check, and do the right thing when allocation failed.
2002-02-27 04:40:17 +00:00
wtc%netscape.com
0fa341362b Bugzilla bug 127517: Darwin optimized build should use -O2. The patch is
contributed by Brian Ryner <bryner@netscape.com>.
2002-02-27 01:48:41 +00:00
ian.mcgreer%sun.com
0d658ba4f8 bug 125796, make sure all CERTCertificates are destroyed as such, and that cache collisions when traversing are handled correctly (by destroying extra reference) 2002-02-26 16:21:48 +00:00
nicolson%netscape.com
72347524cb Initial checkin of the keystore code. It's not complete yet, but
I want others to be able to see it and comment on it.
2002-02-26 04:19:33 +00:00
relyea%netscape.com
bd56c1e043 When using global params, noCertDB implies noKeyDB as well bug 127312 2002-02-26 02:28:21 +00:00
relyea%netscape.com
226cb8ac42 CRL issues: 1) return url when finding and importing CRL's.
2) fix CERT_ImportCRL so it actually works.

NOTE: Calls of SEC_NewCrl() should verify the signature on the CRL before
importing!.
2002-02-26 02:02:53 +00:00
oeschger%netscape.com
86c5368302 restore context-sensitive help to ui: new help file to include and updated syntax, bug=124902, a=asa/drivers, sr=alecf, r=andreww, r=ssaux for security ui 2002-02-26 01:14:09 +00:00
relyea%netscape.com
82ac932cf2 Bug 125728 truncate utf8 correctly in the pkcs11 string. 2002-02-26 00:33:42 +00:00
relyea%netscape.com
ae01fe45e4 Changes to allow protected pin path to work in applications that code for it. 2002-02-26 00:28:50 +00:00
nelsonb%netscape.com
4bfe43978d Change ssl_GetPeerInfo to no longer assume that an address is IPV6 if
it's not IPv4.  Fixes a bug on systems that don't support IPV6, but
do support other address families.
2002-02-26 00:28:15 +00:00
wtc%netscape.com
1a7fc6755d Removed the temporary depend->clean hack for NSS 3.4 update.
Modified Files:
	Makefile.in security/manager/Makefile.in
	security/nss/makefile.win
2002-02-23 04:41:30 +00:00
wtc%netscape.com
11bbf1a4da Temporary hack for the NSS 3.4 update (BeOS port, etc.) Will remove
tomorrow.
Modified files: Makefile.in security/manager/Makefile.in
                security/nss/makefile.win
2002-02-22 21:26:29 +00:00
seawood%netscape.com
1c02e4f877 Use blocking sockets for SSL connections since BeOS does not have support for nonblocking sockets.
Bug #70217 r=wtc a=shaver
2002-02-22 09:30:31 +00:00
wtc%netscape.com
6c79ece2fe Bugzilla bug 70217: ported NSS to BeOS. The patch is contributed by
Christopher Seawood <seawood@netscape.com>.
2002-02-22 04:23:30 +00:00
ian.mcgreer%sun.com
bc5808a5ed bug 125359, by default the ASN.1 en/decoder should treat all numbers as signed. But many source/target items desire unsigned integers (specifically, bignums in the crypto stuff), so implement an siUnsignedInteger type which notifies the en/decoder to handle the conversion.
r=nelsonb
2002-02-21 22:41:44 +00:00
nelsonb%netscape.com
e2f58af25a Fix warning on Windows builds. Bug 104541. 2002-02-21 21:23:14 +00:00
nicolson%netscape.com
856d45b4e1 fixes to make it work better on windows. 2002-02-21 01:23:12 +00:00
wtc%netscape.com
4f99429abb Fixed misspelling. 2002-02-21 00:06:14 +00:00
wtc%netscape.com
667ed9e4c8 Bugzilla bug 125149: prevent the session ID count component of the session
ID from overflowing and corrupting the slot index component.  Do a lookup
in the session hash table to make sure the session id is not in use before
adding it to the table.  r=relyea.
Modified files: pkcs11.c pkcs11i.h
2002-02-20 23:59:35 +00:00
wtc%netscape.com
ba5d3c7107 nscSlotHashTable is not protected by a lock, so we need to use
PL_HashTableLookupConst to do the lookups.  r=mcgreer.  This bug is
discussed in bug 125149 but is not the main topic of that bug.
2002-02-20 23:53:45 +00:00
kirk.erickson%sun.com
0e2122791d Added tokenIDCount, and tokenHashTable to comments about objectLock. 2002-02-20 18:05:52 +00:00
dbragg%netscape.com
c7478fbb13 Updating the localeVersion to 0.9.9. Fixes bug 126240. r=tao, sr=dveditz 2002-02-20 03:18:10 +00:00
wtc%netscape.com
1fd68fb5cc Bugzilla bug 124952: removed the "depend->clean" hack for NSS 3.4 landing.
Modified files: Makefile.in security/manager/Makefile.in
security/nss/makefile.win
2002-02-19 15:03:07 +00:00
seawood%netscape.com
f059e0adae Set NSS_LIBS in config.mk. Use "-L<dir> -l<blah>" to link instead of paths to actual shared libraries on unix platforms.
r=rjesup@wgate.com,wtc@netscape.com
2002-02-19 03:00:08 +00:00
nelsonb%netscape.com
619da61034 Fix two logic errors reported as warnings on windows. Bug 110187 2002-02-19 02:06:25 +00:00
sfraser%netscape.com
7627949064 Fix for bug 121952 -- make PR_ConnectContinue work on Mac, re-enabling non-blocking connects. r=wtc 2002-02-19 01:10:06 +00:00
kaie%netscape.com
e46c7f3115 b=115010 Implement "Message Security Info" when reading S/Mime messages.
(includes b=115209 Only care for outermost signing/encryption level)
r=javi/ducarroz sr=mscott
2002-02-18 15:36:30 +00:00
kaie%netscape.com
81d6ce6977 b=125553 fix wrong string usage
r=javi rs=blizzard
2002-02-18 13:15:56 +00:00
wtc%netscape.com
ddf21869a1 Bugzilla bug 125730: fixed OpenVMS build breakage. Thanks to Colin Blakes
<colin@theblakes.com> for the patch.
odified Files: sslmutex.c sslmutex.h sslsnce.c
2002-02-16 02:52:07 +00:00
relyea%netscape.com
8f3c87eaa3 Use timers to determine whether or not to do the smart card present checks
or not.

bob
2002-02-16 00:29:37 +00:00
jpierre%netscape.com
8c731969c2 Fix OS/2 standalone NSS build which got broken after the fix for 104541 2002-02-16 00:10:24 +00:00
wtc%netscape.com
cb5e5f1f21 Bugzilla bug 112198: use the -dylib_file ld option to link the ssl3 and
smime3 dylibs and the NSS tools so that they can find the indirectly
referenced libsoftokn3.dylib.  Define and export DYLD_LIBRARY_PATH.  The
patch is contributed by Brian Ryner <bryner@netscape.com>. r=wtc,beard.
Modified Files:
	coreconf/Darwin.mk nss/cmd/platlibs.mk nss/lib/smime/config.mk
	nss/lib/ssl/config.mk nss/tests/common/init.sh
2002-02-15 23:38:47 +00:00
nelsonb%netscape.com
e023b4422a Change most coreconf and NSS makefiles to use OS_TARGET (which can
be overridden via an environment variable) rather than OS_ARCH.
This is a precursor to more flexibility in cross-platform builds.
Bug 104541.
2002-02-15 22:54:08 +00:00
wtc%netscape.com
71f0b1eaab Bugzilla bug 125790: free the nickName and passwd strings 2002-02-15 21:53:25 +00:00
ian.mcgreer%sun.com
a56e787c34 clean up certs & keys for purify 2002-02-15 20:50:47 +00:00
relyea%netscape.com
18e535baad Fix missing certs from the listing of all the certs in tokens with large cert caches (larger than 32). 2002-02-15 17:37:58 +00:00
relyea%netscape.com
8c2f9e3bae Implement SEC_NicknameConflicts(). 2002-02-15 01:57:08 +00:00
javi%netscape.com
045149cbac Fix crash when looking up cert by nickname when the token on which
the cert is located is not plugged in.

Bug 125611
2002-02-15 01:50:28 +00:00
ian.mcgreer%sun.com
df5c3fad91 bug 125263, race condition destroying temp certs 2002-02-15 01:10:07 +00:00
ian.mcgreer%sun.com
f10bd5bd8e make listing of certs finish cleanly under purify 2002-02-14 18:02:30 +00:00
wtc%netscape.com
c2620c0df7 Bug 114748: now that NSS uses the same LIB_PREFIX as the Mozilla client,
removed the obsolete NSS_LIB_PREFIX. r=cls.  The patch was originally
contributed by Javier Pedemonte <pedemont@us.ibm.com>.
Modified Files:
	config/config.mk security/manager/Makefile.in
	security/manager/ssl/src/Makefile.in
2002-02-14 15:29:22 +00:00
wtc%netscape.com
6a0a965489 Bug 122712: renamed cert_DecodeGeneralName as CERT_DecodeGeneralName. 2002-02-14 15:25:17 +00:00
kaie%netscape.com
d4e1d67707 b=99083 Polish cert display if field common name (CN) is not present
r=javi sr=alecf
2002-02-14 07:21:33 +00:00
wtc%netscape.com
4acba952bc Bugzilla bug 122712: renamed cert_DecodeGeneralName to
CERT_DecodeGeneralName because we export this function from nss.def.
(The cert_ prefix suggests an internal function.)
Modified Files:
	lib/certdb/genname.c lib/certdb/genname.h lib/certdb/xconst.c
	lib/nss/nss.def
2002-02-14 02:53:20 +00:00
wtc%netscape.com
993e97c4e8 Bugzilla bug 123938: renamed cert_EncodeGeneralName to
CERT_EncodeGeneralName.  Export CERT_EncodeGeneralName and
CERT_FindKeyUsageExtension from nss.def.  Have cmmfrec.c include
nssrenam.h to get __CERT_NewTempCertificate.
Modified Files:
	lib/certdb/genname.c lib/certdb/genname.h lib/certdb/xconst.c
	lib/crmf/cmmfchal.c lib/crmf/cmmfrec.c lib/nss/nss.def
2002-02-14 02:25:21 +00:00
relyea%netscape.com
87e1407f2c Fix UMR in the session info structure. 2002-02-14 01:12:51 +00:00
jpierre%netscape.com
284f6b65f8 Fix for 125373 - crash in crlutil 2002-02-14 00:06:52 +00:00
ian.mcgreer%sun.com
0ae7b14eb9 bug 125165, don't crash when the softoken fails to return attributes for a cert object 2002-02-13 21:09:15 +00:00
ian.mcgreer%sun.com
e8d1c34918 bug 125263, the subject lists in the temp store are actual hash entries, thus any attempt to extract certs from them must be done within the store's lock. 2002-02-13 16:58:05 +00:00
relyea%netscape.com
2453c05e6e Bug 120651: Memory leaks in PK11_GetCertList.
1) Fix leaks in error paths (bfind.c -- found by inspection).
2) Don't allocate hash table data out of the arena. PL_Hash grows and shrinks
the hash buckets as necessary. In arenas they will just grow.
3) Don't allocate temparary locks out of the global instance arena pool.
2002-02-13 02:26:47 +00:00
jpierre%netscape.com
7716bf30c8 Fix for 125143 - allow modutil to report PKCS#11 library load failure errors 2002-02-13 01:43:10 +00:00
kaie%netscape.com
d092e45efa b=124241 Remove all fixed size attributes from XUL
r=rangansen sr=hewitt
2002-02-12 23:16:07 +00:00
wtc%netscape.com
4beb80b857 Bugzilla bug 125102: six files in mozilla/security/nss/lib/ckfw/builtins
got renamed.
2002-02-12 22:51:09 +00:00
sonja.mirtitsch%sun.com
58e4856539 fixed returncode after modification in error.h 2002-02-12 18:34:35 +00:00
wtc%netscape.com
ed9c8f445a Bugzilla bug 112198: on Mac OS X (Darwin), we need to run 'ranlib' on a
static library after renaming it.  This is not necessary but harmless on
other platforms.  The patch is contributed by Javier Pedemonte
<pedemonte@alimni.utexas.net>.  r=wtc,cls.
2002-02-12 15:21:26 +00:00
jpierre%netscape.com
a5c73d7696 Reset NSPR error text before adding the module to make sure we aren't getting some previous error 2002-02-12 04:25:15 +00:00
jpierre%netscape.com
4a5d5b109f Make modutil display a more detailed error when a PKCS#11 module fails to load. This is done by checking the NSPR error text that is set by PR_LoadLibrary failures deep in SECMOD_AddNewModule 2002-02-12 04:09:21 +00:00
wtc%netscape.com
232cdb0fbc Bugzilla bug 114748: deleted unnecessary EXTRA_LIBS augmentation. The
zlib and jar libs are already added to EXTRA_LIBS by ../platlibs.mk.
2002-02-12 02:01:03 +00:00
relyea%netscape.com
e3552493a8 Load all slots into the trust domain, even if the tokens are empty.
Fix problems with the token caching code when tokens are removed.
2002-02-12 01:33:41 +00:00
ian.mcgreer%sun.com
bbabfda7e9 bug 124082, don't change trust of existing CA certs during PKCS#12 import 2002-02-12 00:38:16 +00:00
ian.mcgreer%sun.com
ffce9a0860 bug 124446, thread safety issues with static oid hashtable.
r=wtc
2002-02-11 23:12:00 +00:00
ian.mcgreer%sun.com
6958bd9af8 NSSCryptoContext_ImportCertificate cannot inform the caller that the cert already exists as a temp cert, is is necessary to work around this in CERT_NewTempCertificate by doing a lookup on the cert after it was imported.
r=relyea
2002-02-11 22:12:01 +00:00
kirk.erickson%sun.com
abbde77e08 Commented SlotStr with information what what locks protect what. 2002-02-11 20:14:05 +00:00
nelsonb%netscape.com
42fdae57e1 Make NSS 3.4 build as part of mozilla on OS/2. Bug 114748.
Patch supplied by Javier Pedemonte.
2002-02-11 05:48:37 +00:00
wtc%netscape.com
2cb1de5abe Bugzilla bug 112198: On Darwin we must link libnssckbi.dylib with -bundle
so that we can load it correctly.  Thanks to Brian Ryner for the patch.
2002-02-10 06:18:17 +00:00
wtc%netscape.com
da15146da7 Bugzilla bug 112198: Port NSS to Mac OS X (Darwin). The patch is
contributed by Javier Pedemonte <pedemonte@alumni.utexas.net>.
Modified Files:
	coreconf/config.mk coreconf/nsinstall/nsinstall.c
	coreconf/nsinstall/pathsub.c nss/lib/freebl/unix_rand.c
	nss/lib/ssl/unix_err.c
2002-02-10 05:24:49 +00:00
wtc%netscape.com
52ade1c793 Define DARWIN instead of XP_MACOSX. 2002-02-09 03:26:51 +00:00
wtc%netscape.com
e4d2b9a314 Bugzilla bug 112198: added Darwin.mk. This file is contributed by
Javier Pedemonte <pedemonte@alumni.utexas.net>, based on the NSPR file.
2002-02-09 02:21:27 +00:00
javi%netscape.com
b1680cb442 Give fragment names to the 2 targets. Will help with Talkback. 2002-02-09 00:15:57 +00:00
ian.mcgreer%sun.com
4edd6cfd21 localize the adding of cert references to one function to save an iteration, add two NULL pointer checks 2002-02-08 21:47:05 +00:00
wtc%netscape.com
a07e28ee9a Accidentally deleted PK11_GetSymKeyNickname in my previous checkin. 2002-02-08 19:50:07 +00:00
wtc%netscape.com
c314c19f6d Checked in Jamie's patches for
bug 124232: export SECKEY_DestroyPublicKeyLis; and
bug 124233: add new function PK11_GetNextSymKey.
Also fixed two problems in nss.def.
Modified files: nss/nss.def pk11wrap/pk11func.h pk11wrap/pk11skey.c
2002-02-08 19:42:40 +00:00
seawood%netscape.com
ebbdfa7c68 Backing out fix for win32 gmake static bustage until we figure out how to resolve bug 114748 for OS/2. Should fix current OS/2 bustage. 2002-02-08 19:17:37 +00:00
ian.mcgreer%sun.com
338b4d1c54 as with the cache, a search by cert DER should crack the DER into issuer and serial, then index the hash directly, as opposed to iteration 2002-02-08 16:26:07 +00:00
ian.mcgreer%sun.com
8930954284 bug 124268, usage statement for dump chain option 2002-02-08 15:22:54 +00:00
ian.mcgreer%sun.com
3296ff5ffb bug 124189, signtool hangs 2002-02-08 15:13:13 +00:00
seawood%netscape.com
5871ae6f2d Use @ so that regchrome commands aren't echoed.
Thanks to Stephen Walker <walk84@yahoo.com> for the patch.
Bug #124328 r=cls
2002-02-08 08:30:30 +00:00
wtc%netscape.com
b93c9b751a Added SunOS5.10.mk for Solaris 10. 2002-02-08 06:15:24 +00:00
seawood%netscape.com
bfd2d230fb OS/2 & Win32 non-gcc builds require that you link against their import library instead of directly against a shared library. Fixing static build bustage.
Use the centralized NSS_LIBS rather than explicitly writing out each NSS lib when linking.
2002-02-08 06:04:05 +00:00
wtc%netscape.com
a972f0ed13 Bugzilla bug 124318: do not link with -lsoftokn3 explicitly. Use the
-rpath-link linker option on Linux to find libsoftokn3.so.
2002-02-08 03:15:40 +00:00
ian.mcgreer%sun.com
cf2e1cd363 bug 124309, fix various issues with the cache/temp store and thread safety. Is one line different than the patch on the bug, the one line seemed to fix the reported crash. 2002-02-08 02:51:41 +00:00
sonja.mirtitsch%sun.com
7a62a90f8e script to clean up old tinderbox QA 2002-02-08 02:12:21 +00:00
sonja.mirtitsch%sun.com
6882942b67 QAstatus file now made at the right place (global Exit()) and putting
killed info in as well
partial fix for 122632 r=wtc
2002-02-08 01:50:26 +00:00
bishakhabanerjee%netscape.com
fad9c854e8 Patch for bug 119368: SECU_PrintError prints decimal error code now if
unknown error
2002-02-08 01:20:04 +00:00
sonja.mirtitsch%sun.com
562719f774 removed compiler workshop 5 marker bug# 124256 r=nelsonb 2002-02-08 00:43:18 +00:00
relyea%netscape.com
9c6d49165a Bug 120651: Stop up memory leaks in the built-in token. We are slowly leaking
memory in arenas by allocating temporary objects out of permanment arenas.

Also rename file sin the builtins directory that conflict with it's parent.

xxxxx.c -> bxxxx.c except instance.c becomes binst.c
2002-02-08 00:10:07 +00:00
ian.mcgreer%sun.com
c60a4bd7b4 bug 124268, -P is used twice 2002-02-07 22:28:04 +00:00
ian.mcgreer%sun.com
c20c215bdb This is a revision of the patch shown in bug 122907. It should fix the leakage seen with client auth. It is needed either way, as NSS 3.3 always checked for pre-existing temp certs before creating a new one. 2002-02-07 14:58:05 +00:00
wtc%netscape.com
3bfefc2636 Bugzilla bug 119376: initialize a local variable to eliminate a compiler
warning.
2002-02-07 01:57:48 +00:00
wtc%netscape.com
4f95c4463a Bugzilla bug 119376: fixed the uninitialized variable 'rv' in
rsa_PrivateKeyOp.
2002-02-07 01:00:31 +00:00
relyea%netscape.com
9c46c55eb3 Identify certs that have no trust as CA's if they have the right settings 2002-02-07 00:50:47 +00:00
ian.mcgreer%sun.com
6b3e8a8041 another misused arena 2002-02-06 23:11:08 +00:00
kaie%netscape.com
6f0fffae1c b=122961 Fix sending encrypted mail
r=relyea sr=alecf
2002-02-06 20:38:58 +00:00
ian.mcgreer%sun.com
6d38eae938 Don't waste time searching on tokens for trust of a temp cert. It can only be found in the temp store. 2002-02-06 20:18:18 +00:00
ian.mcgreer%sun.com
a51d0334fd cleanup shutdown leak 2002-02-06 19:58:54 +00:00
ian.mcgreer%sun.com
feba509c51 PK11_VerifyRecover leaks a slot reference, this fixes it.
r=relyea
2002-02-06 19:21:20 +00:00
seawood%netscape.com
32e0e62d5e Link against the import lib on win32 and not the dll itself. 2002-02-06 16:27:01 +00:00
wtc%netscape.com
6305bdaa4e Bugzilla bug 120003: support OpenUNIX 8 build. Thanks to Hiram Clawson
<hiramc@caldera.com> for contributing the patch.
Modified file: config.mk
Added file: OpenUNIX.mk
2002-02-06 14:29:38 +00:00
kaie%netscape.com
288bbab890 Checkin related to NSS 3.4 landing. Temporarily causing Unix depend builds to clean NSS, making those builds work. This
patch will be removed shortly after landing. A similar patch for Windows is inside NSS.
2002-02-06 13:40:18 +00:00
kaie%netscape.com
7792168b34 b=116334 NSS 3.4 landing
r=cls/wtc sr=kin/simon
2002-02-06 13:31:07 +00:00
sonja.mirtitsch%sun.com
95d835e50a changing the way to figure out if selfserv is still present from ps to
kill -0 so we might be able to debug the disapearing selfserv problem
better
2002-02-06 05:34:16 +00:00
sonja.mirtitsch%sun.com
0fbd97206f start of fix for 122632 to avoid overflows 2002-02-06 04:02:46 +00:00
sonja.mirtitsch%sun.com
0f9e24e63e calling the selfserv now with -y to get the certs at the end, adjusted clients and wait times 2002-02-06 02:51:59 +00:00
relyea%netscape.com
89fbd30151 Fix memory leak in hash table keys. Hash tables stay around forever.
keys go into and out of the table. the old code allocated the keys from
the hash table's arena, so they would grow without bounds. Now the keys
are allocated from the heap, and get freed when they are expunged from the
table.
2002-02-06 02:42:08 +00:00
wtc%netscape.com
2e844c5b23 Bugzilla bug 119340: write the "selfserv: received SIGTERM" message to
standard output (fd 1) instead of standard error (fd 2) because the test
script writes its output to standard output (with the echo command).
2002-02-06 01:38:06 +00:00
sonja.mirtitsch%sun.com
25e324cbb6 debugging info for the intermittant multiple recipient problem on linux 2002-02-06 01:15:51 +00:00
ian.mcgreer%sun.com
89d46447f6 fixes for bugs 123479 and 123081 (possibly others). break up arena usage in hash table entries for the temp store and cert cache. 2002-02-05 23:55:43 +00:00
wtc%netscape.com
7d12a23186 Bugzilla bug 121523: checked in Kirk Erickson's session lock fix.
Modified Files:
	lib/pk11wrap/pk11slot.c lib/softoken/pkcs11.c
	lib/softoken/pkcs11i.h lib/softoken/pkcs11u.c
2002-02-05 23:41:36 +00:00
ian.mcgreer%sun.com
b3c9eb8565 place where iterator was not freed 2002-02-05 22:32:38 +00:00
jpierre%netscape.com
ecbc4538c7 Fix for 122907 - patch to disable arena free lists with environment variable 2002-02-05 22:20:43 +00:00
ian.mcgreer%sun.com
2f6edd19c3 some of the output in bug 123081 shows potential leaks around iterators, since the iterator is explicitly freed allocate it in its own block to avoid this 2002-02-05 22:08:12 +00:00
ian.mcgreer%sun.com
274e685871 cleanup suggested by review by Nelson 2002-02-05 03:53:50 +00:00
relyea%netscape.com
c133a81be6 Fix error path, only free arena is one was allocated. 2002-02-05 01:47:01 +00:00
cathleen%netscape.com
740d95a0a9 eliminates 107 nsCRT::memset calls to use memset instead. removed nsCRT::memset() function. bug 118135 r=dp sr=brendan 2002-02-05 01:41:13 +00:00
nelsonb%netscape.com
494eb9ffcc Plug one of the leaks reported in bugzilla bug 123081 2002-02-04 23:15:11 +00:00
ian.mcgreer%sun.com
757fa95794 plug leak found doing client auth, move freeing of cert's slot down a level in case the cert was not made external 2002-02-04 23:04:11 +00:00
ian.mcgreer%sun.com
0528192331 fix leak reported in bug 123081 by avoiding allocation for time variable 2002-02-04 22:34:22 +00:00
ian.mcgreer%sun.com
7bd72fa102 last part of bug 121628, permanent slots should respond immediately to IsPresent() call 2002-02-04 21:57:07 +00:00
relyea%netscape.com
71b1a77b4d Function to read PQG params from the key. 2002-02-04 18:00:14 +00:00
wtc%netscape.com
20881a495b Temporary hack to make 'depend' do a 'clean' in NSS. 2002-02-04 15:57:38 +00:00
relyea%netscape.com
31218c1ff3 Bug 117978: accessor functions to all JCE keystore API to be implemented. 2002-02-03 03:37:26 +00:00
ian.mcgreer%sun.com
d9f18429d4 Fix cert leaks when building a chain. There are several client auth bugs filed, this may not be for any one in particular, but was found with tstclnt. 2002-02-02 20:01:22 +00:00
ian.mcgreer%sun.com
cee0e72c0a bug 90518, selfserv dumps cache state before shutdown with -y option 2002-02-02 19:39:48 +00:00
wtc%netscape.com
fbbe598603 Bugzilla bug 122961: export CERT_CreateSubjectCertList for PSM. 2002-02-02 04:41:06 +00:00
relyea%netscape.com
8159126d0b Add new PK11_ImportSymKeyWithFlags function for JSS 2002-02-02 01:46:05 +00:00
javi%netscape.com
9054da7961 Fix Mac bustage. 2002-02-02 01:20:54 +00:00
wtc%netscape.com
6b642a0259 Bugzilla bug 122712: moved the two newly exported symbols to the right
place.
2002-02-01 21:16:43 +00:00
ian.mcgreer%sun.com
f2b84b4779 fix cert leak found by client auth 2002-02-01 18:18:13 +00:00
relyea%netscape.com
677076a9bb Fix memory leak. 2002-02-01 17:57:05 +00:00
wtc%netscape.com
c32ce01a87 Bugzilla bug 122944: detect Cygwin's uname. 2002-02-01 17:27:55 +00:00
ian.mcgreer%sun.com
c124ec770d bug 121628, persistent cache of hardware token certs 2002-02-01 17:25:15 +00:00
wtc%netscape.com
3b6cd1ed50 Bugzilla bug 119340: install a SIGTERM handler on Linux for debugging. 2002-02-01 05:57:49 +00:00
relyea%netscape.com
24ec92e64a certutil -L now opens the DB ReadOnly. Add the '-X' option to the test is still
testing the R/W case.
2002-02-01 02:28:32 +00:00
relyea%netscape.com
f462f5a326 Make the following functions open the databases Readonly:
ListCerts PrintHelp ListKeys ListModules CheckCertValidity Version

Add an option (-X) to restore the old behaviour of openning the Databases R/W
2002-02-01 02:26:40 +00:00
heikki%netscape.com
55a5667dd2 Bug 106053, remove unused XHTML namespace declarations, and fix incorrect namespace usages. r=harishd, sr=hewitt. 2002-01-31 22:12:36 +00:00
ian.mcgreer%sun.com
8939b19afe have certutil shutdown cleanly so purify is easier to deal with 2002-01-31 19:27:07 +00:00
relyea%netscape.com
82e1be6d15 Fix thread local storage leak. 2002-01-31 19:18:55 +00:00
javi%netscape.com
2bfd470c5f Make the projects depend on a .exp file that doesn't start with '_' so that we know the .exp file wasn't generated by CodeWarrior. 2002-01-31 19:10:46 +00:00
javi%netscape.com
f67c98ba51 Use LoadableRoots.mcp.exp instead of _*.exp so that we know
the .exp wasn't generated by CodeWarrior.
2002-01-31 19:05:27 +00:00
ian.mcgreer%sun.com
9a03239427 couple of fixes 2002-01-31 17:28:49 +00:00
ian.mcgreer%sun.com
7f14d4e1fb bug 90518, implement methods for dumping the state of the cache and temp cert store in NSS 3.4 2002-01-31 17:08:32 +00:00
ddrinan%netscape.com
92c85311ed Checkin for relyea. Call CERT_DestoryCertificateList instead of CERT_DestroyCertList 2002-01-31 04:00:12 +00:00
relyea%netscape.com
3adedc6688 Fix certlist memory leak. 2002-01-31 02:19:43 +00:00
wtc%netscape.com
eeef12be2f Bugzilla bug 119340: backed out the fix. We are still seeing the
"selfserv process not detectable" errors on Linux and I don't have
time to get to the bottom of it.
Modified files:
	cmd/selfserv/selfserv.c tests/common/init.sh tests/ssl/ssl.sh
2002-01-31 02:03:57 +00:00
wtc%netscape.com
dc7133e6ef Bugzilla bug 122712: temporarily export two additional symbols for Mozilla
static build.
2002-01-31 01:03:21 +00:00
sonja.mirtitsch%sun.com
7b6f72131a put the sleep 30 back into the linux ssl test to give the selfserv time
to free the socket...
2002-01-31 01:01:47 +00:00
relyea%netscape.com
5862391160 restore checks for critical extenstions and fail if we have any we don't
recognize. Just remove the bogus check that v2 crls must have critical extensions
2002-01-31 00:42:43 +00:00
sonja.mirtitsch%sun.com
37e7d17867 next thry for bug 115200 2002-01-31 00:34:04 +00:00
relyea%netscape.com
71237064fc Set token flag when saving the CRLs so they actually get put into the database! 2002-01-31 00:18:09 +00:00
relyea%netscape.com
622f360f9e Fix searching code so it can find CRL's 2002-01-31 00:16:29 +00:00
sfraser%netscape.com
d133d4956f Making the nsModuleComponentInfo data const; bug 74803. r=dp, sr=waterson 2002-01-30 21:14:20 +00:00
nicolson%netscape.com
6984f362d9 Fix problems caused by changing package names. 2002-01-30 20:54:24 +00:00
nicolson%netscape.com
760b70054b move org/mozilla/jss/manage subdirectory to org/mozilla/jss 2002-01-30 20:51:00 +00:00
nicolson%netscape.com
52b9697197 move /manage subdirectory up one level to coincide with org.mozilla.jss
package name
2002-01-30 20:50:18 +00:00
nicolson%netscape.com
1dcedf59aa move this stuff up one directory to coincide with the org.mozilla.jss
package name.
2002-01-30 20:49:00 +00:00
nicolson%netscape.com
9560cbe70b update all classes to be in org.mozilla.jss.tests.package.
Improve TestKeyGen test.
2002-01-30 20:47:41 +00:00
nicolson%netscape.com
9773b96ba4 added KeyPairGenerator. 2002-01-30 20:39:09 +00:00
nicolson%netscape.com
15e0a8e116 Change default token from InternalCryptoToken to InternalKeyStorageToken. 2002-01-30 20:38:53 +00:00
nicolson%netscape.com
4c0174c4b5 always do a private_export. 2002-01-30 20:00:31 +00:00
nicolson%netscape.com
d035dfd0c5 Fix 122437: Memory leak in read method of SSLSocket 2002-01-30 19:52:02 +00:00
sonja.mirtitsch%sun.com
81a33a5f77 another try for QA / RE / tinderbox problem bug #115200 2002-01-30 04:37:35 +00:00
relyea%netscape.com
f62b6e82b9 Unsigned values are always greater than '0'! 2002-01-30 00:48:24 +00:00
relyea%netscape.com
9a66c5386d Indexes are zero based. Do our realloc when index == size (not after). 2002-01-30 00:25:34 +00:00
relyea%netscape.com
c66d0660f4 1) put some defensive programming so we don't crash on invalid der.
2) set the start offset correctly for multi-byte lengths when decoding sets
and sequences
2002-01-30 00:24:12 +00:00
relyea%netscape.com
9d74b35058 Restore idempontency to nss_init* 2002-01-29 22:27:15 +00:00