Commit Graph

6799 Commits

Author SHA1 Message Date
kaie@kuix.de
67bf3693e9 Bug 404059, connection to t-mobile hotspot startup page takes very long Landing workaround patch (shorten timeout) r=rrelyea, blocking1.9=mtschrep 2007-12-03 14:58:06 -08:00
kaie@kuix.de
b3718507bf bug 402574, Identity UI lost when switching between tabs r=rrelyea, blocking-ff3=mconnor Also includes merged fix for: Bug 405145, Mixed SSL/non-SSL content reporting inconsistent between standard and EV Certs Patch contributed by Bill Gianopoulos r=kengert, a=dsicore 2007-12-03 14:09:27 -08:00
reed@reedloden.com
9e161066cd Bug 400096 - "In <pippki.properties> (at least), rename "Web Site" to "Server"" ((Bv2a) |importWebSiteCertPrompt| fix) [p=sgautherie.bz@free.fr (Serge Gautherie) r=kaie a1.9=damons] 2007-11-30 23:03:54 -08:00
Olli.Pettay@helsinki.fi
cda16f551b Bug 401906, nsCertTreeDispInfo leaks, r=kengert, a=dsicore 2007-11-30 11:55:31 -08:00
cbiesinger@gmx.at
4360b9ffe5 bug 262116 make disk cache serialize/deserialize the security info, if present also make nsNSSSocketInfo serializable PSM part: r=kaie sr=darin rest: r+sr=darin 2007-11-30 10:05:54 -08:00
cbiesinger@gmx.at
cde1accb1a bug 405481 add nsISerializable and nsIClassInfo to nsNSSCertificate's QI impl r+sr=bz a=beltzner 2007-11-28 14:22:13 -08:00
reed@reedloden.com
9f32f05195 Bug 373623 - "Unicode … should be used instead of three separate dots: ..." (browser locales) [p=hendrik.maryns@uni-tuebingen.de (Hendrik Maryns) r=mconnor a1.9=beltzner] 2007-11-26 18:44:44 -08:00
johnath@mozilla.com
39e2a45b3f Bug 402207 - SSL error page "Add Exception" support should be pref-controlled. r=gavin r=kengert ui-r=beltzner a=beltzner 2007-11-23 13:59:10 -08:00
philringnalda@gmail.com
b7aa2d7626 Bug 404292 - use global/skin/ instead of communicator/skin/ in crl manager, r=kengert, sr=neil, a=schrep 2007-11-21 18:51:09 -08:00
rrelyea@redhat.com
c09d43c431 Enable real EV checking. Bug 289520. patch by kai engert. review rrelyea approval mtschrep. 2007-11-21 14:28:13 -08:00
johnath@mozilla.com
bf1eaa25c6 Fix whitespace in Add Exception dialog. b=404425 r=kaie a=schrep 2007-11-21 13:34:18 -08:00
reed@reedloden.com
6c5798116d Back out patch from bug 373525 now that bug 386202 has been fixed [r=kaie a=blocking1.9+] 2007-11-20 16:46:47 -08:00
kaie@kuix.de
74e478d629 Bug 402726, Allow to view cert on SSL protocol errors r=rrelyea, r=neil, r=gavin, a=dsicore 2007-11-20 09:59:33 -08:00
kaie@kuix.de
9323f6a736 Bug 401755, Cleanup nsNSSIOLayer.cpp->getErrorMessage Patch v3 to address regression r=rrelyea, a=mtschrep 2007-11-20 09:56:04 -08:00
reed@reedloden.com
a309e05ff7 Bug 403994 - "Don't install nss headers when system-nss is used" [p=fta+bugzilla@sofaraway.org (Fabien Tassin) r=rrelyea a1.9=schrep] 2007-11-20 02:05:41 -08:00
bzbarsky@mit.edu
705a0393ea Remove some duplicated code. Bug 397651, r=kaie, sr=jst, a=schrep 2007-11-19 20:32:06 -08:00
kaie@kuix.de
c8c4b197ac Bug 404046, File nsIdentityChecking.cpp needs license header r=rrelyea, a=dsicore 2007-11-19 11:33:03 -08:00
kaie@kuix.de
727e0e371e bug 399589, PSM + tip of NSS, error ‘SECAlgorithmIDTemplate’ not declared r=rrelyea, a=mtschrep 2007-11-19 09:02:43 -08:00
kaie@kuix.de
f2e2a270fb Bug 399696, allow temporary certificate exceptions r=rrelyeea, a=vladimir 2007-11-19 07:32:43 -08:00
kairo@kairo.at
12a3fe57b9 bug 403301 - Wrong character and accesskey alignment in certManager.dtd, r=kengert a=dsicore 2007-11-19 05:55:35 -08:00
reed@reedloden.com
dcf6382cf8 Actually delete files that were removed as part of the patch in bug 327181 2007-11-13 08:55:48 -08:00
reed@reedloden.com
e6c39667b8 Bug 403221 - "Fix typo: |explaination| -> |explanation|" [p=sgautherie.bz@free.fr (Serge Gautherie) r=kaie a1.9=schrep] 2007-11-12 22:52:49 -08:00
kaie@kuix.de
ff55da21a1 Bug 403219, Remove obsolete <newserver.*> files Patch to stop packaging contributed by Serge Gautherie r=kengert, a=mtschrep 2007-11-12 16:49:55 -08:00
kaie@kuix.de
14f19a2541 Bug 401958, Cert Manager, Servers tab: Rename "Site" column r=rrelyea, a=mtschrep 2007-11-12 16:44:42 -08:00
kaie@kuix.de
13d865d8e4 Bug 401755, Cleanup nsNSSIOLayer.cpp->getErrorMessage r=rrelyea, a=mtschrep 2007-11-12 16:41:29 -08:00
kaie@kuix.de
2869efb571 Bug 399318, Fix 2 one time leaks in nsKeygenHandler r=rrelyea, a=mtschrep 2007-11-12 16:31:23 -08:00
kaie@kuix.de
ac28d73c04 Bug 399698, Cert Manager: also allow export of "exception certs" from the Servers tab Patch contributed by Kaspar Brand r=kengert, a=mtschrep 2007-11-12 16:13:43 -08:00
kaie@kuix.de
911f7d9d6f Bug 402602, https://paypal.com doesn't trigger the netError page that allows exceptions r=rrelyea, blocking-1.9=dsicore 2007-11-12 16:12:30 -08:00
kaie@kuix.de
e57bc0544e Bug 401954, Include latest NSS error strings r=nelson, a=mtschrep 2007-11-12 16:11:54 -08:00
kaie@kuix.de
a87665b45d Bug 400195, cert exception file has unix line endings on Windows r=nelson, a/blocking=sayrer 2007-11-09 07:12:34 -08:00
kaie@kuix.de
9f5339be7b Bug 399706, glibc detected: free(): invalid pointer attempting to select cert Landing better patch. r=rrelyea, a/blocking=beltzner 2007-11-09 07:09:58 -08:00
kaie@kuix.de
48a05bfe9f Bug 400096, In <pippki.properties> (at least), rename "Web Site" to "Server" Trivial string and string ID change r=johnath, a=dsicore 2007-11-09 06:59:25 -08:00
reed@reedloden.com
f5f27fd7da Bug 401575 - "Support cert overriding from SSL error pages" [p=johnath r=kaie r=gavin r+sr=bzbarsky ui-r=beltzner a=blocking1.9+ for M9] 2007-11-03 11:49:47 -07:00
reed@reedloden.com
aeb9c559c1 Bustage fix for bug 398718. 2007-10-30 13:59:26 -07:00
reed@reedloden.com
f453d049c0 Bug 398718 - "Better explanatory text for SSL error pages" [p=kaie/johnath r=rrelyea r=biesi a=blocking1.9+ for M9] 2007-10-30 13:26:25 -07:00
dolske@mozilla.com
453f293f6b Bug 398886 (typo fix) 2007-10-25 14:11:12 -07:00
dolske@mozilla.com
fee96d5c65 Bug 398886: resetting a master password does not clear existing password manager logins. r=kaie, sr=mconnor, a=beltzner, aM9=beltzer. 2007-10-25 14:01:49 -07:00
kaie@kuix.de
b798d096a4 Bug 399706, glibc detected: free(): invalid pointer attempting to select cert Regression fix for crash introduced by recent landing for bug 392790. Using minimal fix for M9 endgame. r=kengert, r=Kaspar Brand, a=beltzner 2007-10-24 15:30:34 -07:00
kaie@kuix.de
5d83f880e7 Bug 400759, PSM should build with NSS size optimization r=rrelyea, r=wtc, a=beltzner 2007-10-24 15:25:30 -07:00
kaie@kuix.de
0762d8a400 Bug 374336, add knowledge of Extended Validation / EV Certificates to PSM r=rrelyea, a=mconnor/beltzner 2007-10-23 11:30:16 -07:00
kaie@kuix.de
2f89adf6e1 Bug 387480, Follow up patch for "Add Exception" dialog to fix a whitespace style issue. Patch contributed by Johnathan Nightingale r=kengert, a=beltzner 2007-10-22 11:08:18 -07:00
kaie@kuix.de
62979d92f2 relanding Bug 399043, Workaround for Add-Certificate-Exception for (mail) ports blocked by Necko r=rrelyea, a=sayrer 2007-10-19 12:16:34 -07:00
kaie@kuix.de
da462460fd relanding Bug 398549, Rename the "Extra" tab in Cert Manager r=rrelyea, a=sayrer 2007-10-19 12:13:23 -07:00
kaie@kuix.de
8b0144895e relanding Bug 399022, Leak-prone code in nsCertTree r=bzbarsky, a=sayrer 2007-10-19 12:12:07 -07:00
kaie@kuix.de
8e87f98dbd relanding: Bug 399045, PSM should remember valid intermediate CA certificates r=rrelyea, a=sayrer 2007-10-19 12:10:09 -07:00
reed@reedloden.com
fdc5b563f9 Bug 345665 - "nsKeygenHandler calls nsITokenDialogs ::ChooseToken with NULL context" [p=chpe r=kaie sr=dveditz a1.9=sayrer] 2007-10-18 23:10:39 -07:00
kaie@kuix.de
cc10e25877 backing out all my patches from yesterday, 399043 398549 399022 399045 345665 2007-10-16 17:18:55 -07:00
kaie@kuix.de
0eeb2e6c81 Bug 345665, nsKeygenHandler calls nsITokenDialogs ::ChooseToken with NULL context Patch contributed by Christian Persch r=kengert, sr=dveditz, a=sayrer 2007-10-15 17:38:58 -07:00
kaie@kuix.de
6a02ed9c37 Bug 399045, PSM should remember valid intermediate CA certificates r=rrelyea, a=sayrer 2007-10-15 17:38:16 -07:00
kaie@kuix.de
252b29b6b2 Bug 399022, Leak-prone code in nsCertTree r=bzbarsky, a=sayrer 2007-10-15 17:37:03 -07:00
kaie@kuix.de
30cedfd535 Bug 398549, Rename the "Extra" tab in Cert Manager r=rrelyea, a=sayrer 2007-10-15 17:36:02 -07:00
kaie@kuix.de
d586f9c3d1 Bug 399043, Workaround for Add-Certificate-Exception for (mail) ports blocked by Necko r=rrelyea, a=sayrer 2007-10-15 17:33:01 -07:00
benjamin@smedbergs.us
190309e089 Bug 398566 - Set MOZ_FIX_LINK_PATHS unconditionally, r=luser a=sayrer 2007-10-13 14:13:50 -07:00
reed@reedloden.com
a647c41131 Bug 392790 - "In certificate selection dialogs, also show e-mail addresses from the subjectAltName extension" [p=mozbugzilla@velox.ch (Kaspar Brand) r=kaie sr=rrelyea a1.9=sayrer] 2007-10-13 00:46:11 -07:00
sdwilsh@shawnwilsher.com
9d653231ba Bug 369428 - nsExternalAppHandler::SetUpTempFile uses a poor source of randomness, resulting in predictable filenames. r=kaie, sr=rrelyea, a=blocking1.9 2007-10-12 15:48:07 -07:00
sdwilsh@shawnwilsher.com
103189add3 Full backout of Bug 369428 2007-10-12 08:30:45 -07:00
sdwilsh@shawnwilsher.com
eea39bddb7 Bug 369428 - nsExternalAppHandler::SetUpTempFile uses a poor source of randomness, resulting in predictable filenames. r=kaie, sr=rrelyea, a=blocking1.9 2007-10-12 06:00:57 -07:00
kaie@kuix.de
4ae3700b64 Bug 399048, Add accesskeys to all buttons, make Get Certificate the default button (Add Exception dialog) r=johnath, r=gavin, a=dsicore 2007-10-11 12:34:23 -07:00
kaie@kuix.de
3378a7656a Bug 397296, Firefox builds need to use the current NSS CVS tag r=mconnor, blocking-firefox3=benjamin 2007-10-11 12:03:05 -07:00
bzbarsky@mit.edu
07549c4ecf Don't leak strings from <keygen>. Bug 398665, r=kaie, sr=jst, a=dbaron 2007-10-09 19:10:00 -07:00
kaie@kuix.de
dafd4be7f5 Bug 373525, "Certificate Manager" opens with wrong tab selected, and inconsistent content displayed Back out the band aid patch, re-enable the original code, now that the regression got gixed (398289). r=me, a=dsicore 2007-10-09 15:32:42 -07:00
kaie@kuix.de
0e5257b5fc Bug 373525, "Certificate Manager" opens with wrong tab selected, and inconsistent content displayed Patch to disable persistent selection and make cert manager usable r=rrelyea, a=dsicore 2007-10-03 10:21:42 -07:00
kaie@kuix.de
553030041b Bug 387480, Support network-fetched cert import in Web Sites tab of Cert Mgr Follow up patch to rename "Internet Site(s)" to "Server(s)" in new dialog and cert manager r=rrelyea, blocking1.9=beltzner 2007-10-03 10:20:39 -07:00
kaie@kuix.de
4a67feba15 Bug 387480, Support network-fetched cert import in Web Sites tab of Cert Mgr Most code contributed by Johnathan Nightingale, some by me r=me, sr=rrelyea blocking1.9=beltzner 2007-10-03 04:56:06 -07:00
kaie@kuix.de
4826252f22 Bug 327181, Improve error reporting for invalid-certificate errors (error page for https, or combined dialog) Code in mozilla/security/manager: r=rrelyea Code elsewhere: r=mconnor, sr=dveditz blocking1.9=mconnor 2007-10-03 04:52:25 -07:00
kaie@kuix.de
ad2bb22af2 Bug 327181, Improve error reporting for invalid-certificate errors (error page for https, or combined dialog) Code in mozilla/security/manager: r=rrelyea Code elsewhere: r=mconnor, sr=dveditz blocking1.9=mconnor 2007-10-03 04:47:26 -07:00
kaie@kuix.de
61d16d4cd9 Bug 327181, Improve error reporting for invalid-certificate errors (error page for https, or combined dialog) Code in mozilla/security/manager: r=rrelyea Code elsewhere: r=mconnor, sr=dveditz blocking1.9=mconnor 2007-10-03 04:43:54 -07:00
kaie@kuix.de
6613df3bd1 Bug 315871, In Certificate Viewer, allow to export cert or full chain Also covers Bug 161275, Support export of SSL, S/MIME, and CA certs Patch contributed by Kaspar Brand r=kengert, sr=rrelyea, a=dsicore 2007-10-01 09:38:21 -07:00
bent.mozilla@gmail.com
1232ee381c Bug 397319 - "Add JSAutoRequest to other users of GetArgvPtr". r+sr+a=jst. 2007-09-28 11:15:26 -07:00
dbaron@dbaron.org
84930cd3ec Fix leak of mPendingHTTPRequest in nsSSLThread::rememberPendingHTTPRequest by converting it to an nsCOMPtr. b=394528 r=kengert sr=bzbarsky a=bsmedberg 2007-09-17 17:31:37 -07:00
reed@reedloden.com
e761042ec3 Bug 392780 - "nsNSSCertificateDB::FindCertByDBKey() crashes on invalid input" [p=mozbugzilla@velox.ch (Kaspar Brand) r=rrelyea sr=kaie a1.9=bzbarsky] 2007-09-17 13:46:27 -07:00
jag@tty.nl
167cbfff3a Bug 394139: Replace a bunch of NS_DEFINE_CIDs with CONTRACTIDs. r=/sr=/a=bsmedberg 2007-09-05 06:04:54 -07:00
jwalden@mit.edu
423d30ba39 Bug 348748 - Replace a cast that's commented out; I think my script ignored comment contents and thus missed this, but I haven't looked at the source recently enough to be sure. r=bsmedberg on the script, a=no-functionality-change 2007-09-05 00:13:46 -07:00
dtownsend@oxymoronical.com
ac423ebd87 Bug 394778: Unit tests in security/manager/ssl/tests not run. r=kengert, a=mconnor 2007-09-04 08:29:13 -07:00
dtownsend@oxymoronical.com
9842dc1237 Bug 390615: Add scriptable interface to verify digital signatures. r=kaie, a=blocking-1.9 2007-09-03 10:32:39 -07:00
kaie@kuix.de
d9fa93d8b4 bug 386654, Implement notification for EV certs r=rrelyea, sr=bzbarsky, a=bzbarsky 2007-08-23 14:28:15 -07:00
bzbarsky@mit.edu
6da8502521 Make it possible to fastload NSSCertificates. Bug 388128, r=kaie, sr=brendan, a=bzbarsky 2007-08-23 11:59:12 -07:00
kairo@kairo.at
9474ce3bd8 bug 385458 - UI strings using "browser" when meaning "application", r=kaie 2007-08-05 04:53:59 -07:00
benjamin@smedbergs.us
d3b16377ad Bug 389872 - Install NSS headers to dist/include, r=luser and a=blocks approved bug 389673 2007-08-03 07:04:33 -07:00
kaie@kuix.de
d193b24d27 Bug 376329, Thunderbird fails on certificate path with circular references
r=nelson
2007-07-25 15:57:51 -07:00
kaie@kuix.de
5b82067aa4 Bug 382223, Add support for Camellia to PSM
Patch contributed by okazaki
r=kengert
2007-07-25 15:53:30 -07:00
rrelyea@redhat.com
695f5ec87a Bug 388403 Land NSS 3.12 Alpha r=kai. 2007-07-23 12:02:59 -07:00
kaie@kuix.de
d5fc3b59ef Bug 387011, Crash when importing certificate [@ nsNSSCertificateDB::ImportCertsFromFile]
r=rrelyea
2007-07-23 03:48:51 -07:00
kaie@kuix.de
eda243077c Bug 387613, Crash [@ nsNSSCertificate::GetCert fb3ac2be] on click submit on chrome://pippki/content/editcacert.xul
r=rrelyea
2007-07-23 03:25:23 -07:00
rrelyea@redhat.com
efa15a946e Back out the previous change. Mac Universal failed again (even though Mac PPC
works fine for me ;().
2007-07-19 19:20:12 -07:00
rrelyea@redhat.com
5af1ffab5d finally land NSS 3.12 into the trunk bug 388403 2007-07-19 18:33:48 -07:00
jwalden@mit.edu
a703c2d62a Bug 388276 - Missing file from previous checkin, still r=cls 2007-07-18 17:19:41 -07:00
kaie@kuix.de
cdf4a621f2 Bug 380744, Thunderbird reports "unable to decrypt" on truncated decryptable messages
r=relyea, sr=mscott
2007-07-16 23:13:38 -07:00
jwalden@mit.edu
6d7584839a Bug 348748 - Replace all instances of NS_STATIC_CAST and friends with C++ casts (and simultaneously bitrot nearly every patch in existence). r=bsmedberg on the script that did this. Tune in next time for Macro Wars: Episode II: Attack on the LL_* Macros. 2007-07-08 00:08:04 -07:00
kaie@kuix.de
5ebc109dde Bug 317630, PSM's FIPS token label is truncated
Incremental patch to improve wording
r=rrelyea
2007-07-06 18:20:42 -07:00
kaie@kuix.de
abdf95411a Bug 373525, "Certificate Manager" opens with wrong tab selected, and inconsistent content displayed
Workaround that disables selected="true" which never worked anyway, r/sr=shaver
Separate improvement: make selected tab in Cert Manager persistent, r=kengert
2007-06-27 15:20:46 -07:00
kaie@kuix.de
88ab18656e Bug 176501, mozilla apps must manage NSS configuration for PKCS#11 shared libs, including nssckbi.dll
Incremental Patch v4, make sure we indeed look in all possible locations.
r=rrelyea
2007-06-27 06:15:02 -07:00
kaie@kuix.de
461c345b39 Bug 385904, Actually hook up the new NSS error strings
r=rrelyea
2007-06-27 06:12:03 -07:00
kaie@kuix.de
a51c59f4af Bug 372389, Typos in pippki.properties
r=gerv
2007-06-26 07:48:30 -07:00
kaie@kuix.de
ceeaa1575b Bug 370875, "ASSERTION: nsSecureBrowserUIImpl not thread-safe" * 4 loading any https site
Patch contributed by Neil, r=kengert
2007-06-25 14:45:30 -07:00
kairo@kairo.at
eb20684b4f bug 385461 - Small improvements to CRL manager window, r=kengert 2007-06-23 07:47:16 -07:00
kairo@kairo.at
618cf51d1f bug 385460 - remove an unused string from master password prefs, r=kengert 2007-06-23 07:42:16 -07:00
kaie@kuix.de
1f070ca133 Bug 383390, follow up check in, adding a unit Test.
Patch contributed by Nils Maier, comments provided by Jeff Walden
r=kengert
2007-06-21 08:22:43 -07:00
rrelyea@redhat.com
1daaf9dc7b Backing previous patch because it broke the universal binary Mac build. 2007-06-19 01:41:28 -07:00
rrelyea@redhat.com
7da4e3c47b bug 217538 Check in NSS 3.12 into FF 3.0
r=kaie
2007-06-19 00:32:12 -07:00
kaie@kuix.de
b7f5ec7eef Bug 384252, Cert viewer: Give feedback that cert verification is pending
r=rrelyea
2007-06-15 15:09:23 -07:00
kaie@kuix.de
066a2dbdcf Bug 383969, PSM should not use OCSP while building cert manager display
r=rrelyea
2007-06-15 15:06:54 -07:00
kaie@kuix.de
3db3c7333e Bug 355643, Review PSM's error message overrides - are NSS errors better?Removing overrides, thereby enabling NSS messages.r=nelson 2007-06-12 19:48:41 -07:00
kaie@kuix.de
623f7ec6db Bug 375759, Cert manager showing date strings for "Your Certificates" namesFollow up checkin to improve memory use.r=kengert 2007-06-12 19:46:07 -07:00
kaie@kuix.de
3f24fa47f6 Bug 383390, nsICrypto Hash truncates to 32 byte; renders sha384 and sha512 corruptPatch contributed by Nils Maierr=kengert 2007-06-10 18:42:36 -07:00
kaie@kuix.de
e62734761e Bug 378629, SSL file uploads settle into oscillating pattern with very small packetsr=rrelyea 2007-06-10 16:42:28 -07:00
kaie@kuix.de
42e0a9a00c Bug 375759, Cert manager showing date strings for "Your Certificates" namesPatch contributed by Kaspar Brandr=kengert 2007-06-10 16:24:15 -07:00
kaie@kuix.de
376e52620d Bug 110161, enable OCSP by default, follow up checkin,fixing string identifiers. r=marcoos, sr=mconnor 2007-06-05 15:14:39 -07:00
kaie@kuix.de
778a50719a Bug 110161, follow up check in to fix SeaMonkey accesskeys in the sameway as done for Firefox. r=me 2007-05-30 16:42:34 -07:00
kaie@kuix.de
146b7c014e Bug 110161. Code related to the plan to enable OCSP by default.r=rrelyea, toolkit r=mconnor 2007-05-30 16:13:28 -07:00
kaie@kuix.de
5a918bf8aa bug 334185, potential crasher fixr=kengert 2007-05-29 18:20:09 -07:00
kaie@kuix.de
fcf90f31c6 bug 380558, Some event waiting in PSM make the CPU wake from idle with no reasonPatch contributed by Mike Hommeyr=kengert 2007-05-29 18:14:32 -07:00
bzbarsky@mit.edu
76c4fecf5f Make PSM make sure to shut down NSS before trying to start it up with theinitial profile on app startup. Fix leak of one of the user modules that waspreventing a clean shutdown. Bug 379582, r=rrelyea, kaie, sr=biesi. 2007-05-14 14:09:58 -07:00
kaie@kuix.de
6100caf3ca Bug 379190, crashes when loading chrome urlsr=rrelyea 2007-05-09 16:43:01 -07:00
benjamin@smedbergs.us
baab01ada6 Bug 376636 - Building with gcc 4.3 and -pendatic fails due to extra semicolons, patch by Art Haas <ahaas@airmail.net>, rs=me 2007-04-23 07:21:53 -07:00
philringnalda@gmail.com
811bd70baf Bug 370561 - Make nsIFormSubmitObserver scriptable, patch by Justin Dolske <dolske@mozilla.com>, r+sr=jst 2007-04-16 21:06:12 -07:00
mozilla.mano@sent.com
fe51e1ff1c Bug 339102 - New Page Info dialog. work done by Florian Queze <f.qu@queze.net>, ui-r=beltzner, r=me. 2007-04-12 18:26:39 -07:00
cbiesinger@web.de
c6ef8b6043 Bug 375878 remove users of Recycle()patch by taras glek r+sr=biesi 2007-03-30 15:44:22 -07:00
dbaron@dbaron.org
d98d9fdec5 Remove unused getKey callback from PLDHashTableOps/JSDHashTableOps. b=374906 r=bsmedberg 2007-03-27 08:33:38 -07:00
hg@mozilla.com
05e5d33a57 Free the (distributed) Lizard! Automatic merge from CVS: Module mozilla: tag HG_REPO_INITIAL_IMPORT at 22 Mar 2007 10:30 PDT, 2007-03-22 10:30:00 -07:00
glen.beasley%sun.com
019c765c08 370970 Server SSL code should invalidate Session ID when redoing handshake r=sparkinson sr=nkwan 2007-03-21 14:52:54 +00:00
glen.beasley%sun.com
ca0b3b2704 big 370970 Server SSL code should invalidate Session ID when redoing handshake r=sparkins,sr=nkwan 2007-03-20 22:39:28 +00:00
alexei.volkov.bugs%sun.com
a7eab29428 366557 - Small memory leaks in selfserv. fix for selfserv crash. r=nelson 2007-03-14 20:22:22 +00:00
alexei.volkov.bugs%sun.com
5e1db83a67 129218 - memory leaks in tstclnt. r=neil, sr=nelson 2007-03-13 15:40:58 +00:00
richm%stanfordalumni.org
ce2d0257bf Make sure all copyrights/licenses are the mpl/gpl/lgpl tri-license
Update version to 4.0.4
Remove the build rpm script
2007-03-13 15:39:58 +00:00
wtchang%redhat.com
58dd621592 Bugzilla bug 358785: landed libpkix test scripts and data on the trunk. 2007-03-13 01:27:12 +00:00
alexei.volkov.bugs%sun.com
b8fa16c289 366557 - Small memory leaks in selfserv. r=nelson 2007-03-12 17:29:59 +00:00
nelson%bolyard.com
e0720471d6 Bug 367037 - don't call usage from any thread but the primordial thread.
Instead, return from the thread so the primordial thread will clean up.
This fixes many leaks.  r=neil.williams,alexei.volkov
For any errors involving bad cipher letters, print a meaningful error.
2007-03-10 00:54:44 +00:00
alexei.volkov.bugs%sun.com
0e6fb7773c 129218 - memory leaks in tstclnt. r=nelson 2007-03-09 23:23:55 +00:00
slavomir.katuscak%sun.com
0448bbe4cb update of known memleak stacks 2007-03-09 22:53:38 +00:00
slavomir.katuscak%sun.com
b9b62de48a bug 335752 - patch for shorter version of all.sh; r=nelson, sr=alexei 2007-03-08 19:30:14 +00:00
kaie%kuix.de
72bf637e4f Bug 368126, client abandons SSL connection during bad cert dialogs
Incremental patch v2
r=nelson, sr=rrelyea
2007-03-07 19:54:54 +00:00
slavomir.katuscak%sun.com
523ad4feeb bug 372279 - patch for incomplete logs; r=christophe 2007-03-07 18:02:13 +00:00
alexei.volkov.bugs%sun.com
526d3e2011 129218 - memory leaks in tstclnt. r=neil 2007-03-05 21:01:25 +00:00
slavomir.katuscak%sun.com
3c40f0c46e bug 363827 - added reporting bug IDs, fixed status reporting, updated list of leaks; r=alexei, sr=christophe 2007-03-05 19:59:08 +00:00
alexei.volkov.bugs%sun.com
be98f074f1 129218 - memory leaks in tstclnt. Fix mem leak in strsclnt.c/main/PL_CreateOptState. r=wtc 2007-03-05 19:48:16 +00:00
alexei.volkov.bugs%sun.com
a01d7203f6 add-on for patch to bug 367288: turn on OCSP testing + fix for tinderbox test failure on solaris and windows. 2007-03-05 18:53:41 +00:00
nelson%bolyard.com
a60c48bc91 Back out rev 1.24. Turn OCSP testing off until it's fixed. Sheriff Nelson 2007-03-03 06:53:42 +00:00
alexei.volkov.bugs%sun.com
27be0a80ff Additional changes for patch 367288: add debug output 2007-03-03 02:03:23 +00:00
alexei.volkov.bugs%sun.com
8bc6821d74 Enable OCSP testing. 2007-03-03 01:07:05 +00:00
alexei.volkov.bugs%sun.com
bbdb4a804e 367288 - write tests that covers existing OCSP functionality. r=nelson 2007-03-02 23:13:32 +00:00
glen.beasley%sun.com
1e34d677b3 341681 report underlying NSS/NSPR error r=neil 2007-03-01 03:53:53 +00:00
rrelyea%redhat.com
b8797befe2 Turn off Camillia tests until apache interop tests are updated. 2007-03-01 00:46:40 +00:00
alexei.volkov.bugs%sun.com
09e095e597 338986 - Unauthorized OCSP response error from user's default OCSP responder. r=nelson 2007-03-01 00:30:19 +00:00
rrelyea%redhat.com
75c2698ee0 Add Camilla cipher suites TLS RFC4132 bug 361025
code supplied by okazaki@kick.gr.jp
2007-02-28 19:47:40 +00:00
glen.beasley%sun.com
d994835610 363103 fix by Bartlomiej Lopatka r=glen sr=neil 2007-02-28 03:28:05 +00:00
wtchang%redhat.com
2f31c66385 Bugzilla bug 358785: removed redundant declaration of PKIX_ERRORNAMES,
which is declared in pkix_tools.h (included by testutil_nss.h).
2007-02-28 02:28:02 +00:00
wtchang%redhat.com
a455dffdc2 Bugzilla bug 358785: don't build the static library. We only use the
shared library, and on Windows the static library and import library have
the same file name (pkixutil.lib).
2007-02-28 01:30:27 +00:00
wtchang%redhat.com
0eee10d40d Bugzilla bug 358785: merged the libpkix test programs (in
mozilla/security/nss/cmd/libpkix) from the NSS_LIBPKIX_BRANCH onto the
trunk.  Most directories that contained only one test program were
consolidated as suggested by Nelson Bolyard.
2007-02-26 19:56:55 +00:00
kaie%kuix.de
52bb0dd7af bug 335801, Loading a cert URL can make an http page look like https
r/sr=cbiesinger
2007-02-24 13:22:55 +00:00
wtchang%redhat.com
17a4693e50 Bugzilla bug 371399: removed unused files. r=glen.beaskely
Removed files: Makefile pkgdepend pkginfo.tmpl prototype_com prototype_sparc
2007-02-23 22:59:34 +00:00
glen.beasley%sun.com
f9c09dae09 367235 only see PKCS11 tokens available to it at initialization r=wan-teh sr=relyea 2007-02-23 17:40:21 +00:00
wtchang%redhat.com
4465b36b1b Bug 317323: Set NSPR31_LIB_PREFIX to empty explicitly for WIN95 and WINCE
builds.  r=nelsonb
Modified files: WIN954.0.mk WINCE3.0.mk
2007-02-22 23:13:58 +00:00
kaie%kuix.de
4839be543f Bug 371024, Typos in NSS' error strings
r=rrelyea, r=nelson
2007-02-22 10:51:09 +00:00
kaie%kuix.de
88b4027c75 Bug 317630, PSM's FIPS token label is truncated
r=rrelyea
2007-02-20 16:26:07 +00:00
kaie%kuix.de
a9459f49db Patch v9 - mozilla/security/manager portion
Enabling final portion of patch, enabling new SSL error page.
r=rrelyea
2007-02-18 04:26:02 +00:00
kaie%kuix.de
72cce1e6f4 Bug 107491, improve SSL error messages
Patch v9 - mozilla/security/manager portion
Not yet enabling as browser error page
r=rrelyea
2007-02-17 03:47:59 +00:00
kaie%kuix.de
2ce19dbaa4 Bug 370136, Firefox 2.0.0.1 and later breaks automatic client certificate authentification.
Fixes a regression introduced with the fix for bug 328346.
Thanks a lot to Momtchil Momtchev for identifying the cause and providing the initial patch.
r=kengert/rrelyea
2007-02-16 08:01:40 +00:00
wtchang%redhat.com
20c58bf1dd Changed the JSS version back to 4.2.5 Beta. 2007-02-16 00:20:07 +00:00
kaie%kuix.de
5ebd315aa8 bug 363455, Enhance PSM's SSL handling on blocking sockets
r=wtchang
2007-02-15 02:46:25 +00:00
wtchang%redhat.com
da44db510f Removed an out-of-date comment. 2007-02-15 01:39:07 +00:00
wtchang%redhat.com
a910769f2a Set JSS version to 4.2.5 (RTM). Import NSPR 4.6.6 and NSS 3.11.6.
Modified Files:
	manifest.mn org/mozilla/jss/CryptoManager.java
	org/mozilla/jss/util/jssver.h
2007-02-15 01:32:44 +00:00
wtchang%redhat.com
c99e5bb54d Bugzilla Bug 115951: backed out the previous checkin because the test
program bltest could not locate and load libfreebl3.dylib.
2007-02-15 01:13:39 +00:00
gerv%gerv.net
8e8acc58af Bug 236613: change to MPL/LGPL/GPL tri-license. 2007-02-14 17:33:38 +00:00
alexei.volkov.bugs%sun.com
911502366b 363476(vfyserv needs OCSP option) and 363477(vfyserv needs option to save server certs to local files. sr=kengert, r=neil.williams 2007-02-14 00:39:34 +00:00
alexei.volkov.bugs%sun.com
d492a46e5d Bug 348882 - addbuiltin command ignores "c" trust arg (and probably others). r=kengert, r=neil.williams 2007-02-14 00:35:53 +00:00
glen.beasley%sun.com
e53481a5d1 369660 MAC OS X support for build and all.pl r=christophe 2007-02-12 04:09:56 +00:00
kaie%kuix.de
e1ef76bcb1 bug 367878, Mistake in PSM's OCSP pref switching code
r=rrelyea/nelson
Checking in two patches at once.
2007-02-09 19:29:12 +00:00
kaie%kuix.de
67ce3c3059 bug 368126, client abandons SSL connection during bad cert dialogs
bug 365898, SSL handshake timeout is too short
r=rrelyea
2007-02-09 19:12:33 +00:00
kaie%kuix.de
0d20506f60 but 368048, Device Manager list updates incorrectly after security module is unloaded
r=rrelyea
2007-02-09 19:06:23 +00:00
slavomir.katuscak%sun.com
f0af4a7b13 Bug 363827: Implementation of memory leak checking. r=glen, sr=christophe 2007-02-08 17:53:12 +00:00
glen.beasley%sun.com
187f6e4777 193386 added MAC OS X support for mangle test r=neil, sr=slavo 2007-02-06 22:42:19 +00:00
glen.beasley%sun.com
7f00cf68f8 333636 bind exception in socket tests r=neil 2007-02-06 20:50:00 +00:00
glen.beasley%sun.com
683629493a 367910 pk11mode -verbose mode r=Neil, sr=alexei 2007-02-06 04:43:41 +00:00
christophe.ravel.bugs%sun.com
4ec62a2062 Set the JSS version to 4.2.5 Beta.
Tag: none.
2007-02-05 23:07:31 +00:00
kaie%kuix.de
f49ee1026f Bug 369098, Unable to Import personal certificate
Regression from recent checkin of bug 343612
Backing out obvious duplicate JS line
r=me
2007-02-02 22:53:48 +00:00
nelson%bolyard.com
d7cef343c3 Replace <LAYER> tags with <IFRAME>. Results looks right, but variables
from right frame are not succesfully fetched by left frame.  Bug 54685.
2007-02-01 18:55:53 +00:00
slavomir.katuscak%sun.com
d47a52eb09 Bug 193386: Patch to fips.sh, fixed paths on HP-UX and AIX and added
PASSED/FAILED status reporting. r=nelson
2007-01-31 21:03:56 +00:00
kaie%kuix.de
a23cd46973 bug 343612, Reset master password confirmation dialog should be opened as a dialog.
patch contributed by Dorian (boissomag@free.fr)
r=kengert
2007-01-31 17:57:44 +00:00
nelson%bolyard.com
fe33cd4708 Bug 366803 - Improve SSL tracing, make it work in browsers, to help with
debugging bug 356470.  r=neil.williams,alexei.volkov
2007-01-31 04:20:26 +00:00
nelson%bolyard.com
9fcc9835a8 Re-enable mangle test with offset of EOF - 8. Bug 193386. 2007-01-26 19:44:35 +00:00
nelson%bolyard.com
b8daf2030f Bug 193386. Add ability to seek to negative offset from EOF.
r=slavo.katuscak,glen.beasley
2007-01-26 19:38:05 +00:00
nelson%bolyard.com
d707389862 Disable mangle test to make Tinderbox go green again. Bug 193386. 2007-01-26 04:39:05 +00:00
nelson%bolyard.com
7e12526836 Open output file in binary mode for writing binary PKCS7 message.
Bug 301496. Patch by Alexei.Volkov, r=nelson
2007-01-26 01:15:43 +00:00
glen.beasley%sun.com
76d19a48ed 367910 add pk11mode to fips.sh r=neil williams 2007-01-25 23:24:56 +00:00
glen.beasley%sun.com
8f1f0843df 367910 pk11mode added to build and fips.sh r=neil 2007-01-25 19:04:57 +00:00
slavomir.katuscak%sun.com
ab11110365 Bug 193386: Patch to fips.sh to use temporary library for mangle test. r=alexei, sr=nelson 2007-01-25 12:40:33 +00:00
alexei.volkov.bugs%sun.com
e3daa3fdf9 Bug 301496: NSS_Shutdown failure in p7sign. r=nelson 2007-01-25 00:52:26 +00:00
neil.williams%sun.com
3dbccadf4c Bug 337519, Certutil/blapitest usage mentions unimplemented curves,r=nelson 2007-01-24 01:30:00 +00:00
alexei.volkov.bugs%sun.com
74f451b2f2 wrong place for assertions committed in previous revision. fixed now. 2007-01-17 23:15:46 +00:00
kaie%kuix.de
40ce17ceed bug 302803, Changes to enabled SSL versions do not take immediate effect
r=nelson
2007-01-16 06:10:51 +00:00
kaie%kuix.de
71c2731c98 bug 356117, Incorrect spelling in Delete E-Mail Certificates
Patch contributed by Magnus Melin.
r=kengert
2007-01-15 17:43:20 +00:00
wtchang%redhat.com
51def6fdd7 Bug 232600: use the same linker flags for programs as for DLLs when doing
optimized builds with MOZ_DEBUG_SYMBOLS=1. r=nelsonb
2007-01-14 02:54:49 +00:00
nelson%bolyard.com
f6dc121033 Bug 335019. When importing certs from PKCS12 files, and the cert and the
private key both have different nicknames, import the cert with the
nickname from the file's cert, not from the file's private key.
Also, fix an infinite loop and certain other bugs.  r=neil.williams.
2007-01-14 00:02:36 +00:00
nelson%bolyard.com
7ac8cd4be7 Bug 366405. Fix PK11_DeleteTokenPrivateKey to not leak the cert when
force is true.  r=alexei.volkov,wtchang
2007-01-13 23:41:21 +00:00
neil.williams%sun.com
920fd71509 Bug 353745, r=nelson, Patch to fix 7 Klocwork bugs, submitted by Ryan Jones 2007-01-13 00:24:34 +00:00
slavomir.katuscak%sun.com
e2426a7ee1 Bug 335752. Fix for previous patch. r=alexei,sr=nelson 2007-01-12 10:51:54 +00:00
nelson%bolyard.com
3804069f7e Convert from calling PR_GetIPNodeByName to calling PR_GetAddrInfoByName.
Bug 324305. Patch by wtchang.  r=nelson
2007-01-11 04:29:11 +00:00
nelson%bolyard.com
1ceb6c1185 Bug 364684. Fix session object handle counter overflows. r=rrelyea,wtchang 2007-01-10 04:47:57 +00:00
nelson%bolyard.com
d115920aca Bug 366390. correct misleading function names in fipstest. r=glen.beasley 2007-01-10 04:14:30 +00:00
alexei.volkov.bugs%sun.com
87d8b45572 This patch incorporates additional suggestions to 342461 fix from Wan-Teh review. 2007-01-09 23:39:08 +00:00
alexei.volkov.bugs%sun.com
dcf1a44372 279085: NSS tools display public exponent as negative number. r=nelson 2007-01-09 00:56:28 +00:00
alexei.volkov.bugs%sun.com
e9899fa07e 365966: infinite recursive call in VFY_VerifyDigestDirect. r=nelson 2007-01-09 00:37:20 +00:00
kaie%kuix.de
4553b718c8 Bug 164707, Provide a way to view/delete orphan certs
Supplemental patch
r=rrelyea
2007-01-06 16:36:19 +00:00
mozilla%weilbacher.org
91a182f92a [OS/2] Bug 351246: Load Mozilla into Highmem on OS/2. Part 6, changes to NSS build config. r=mkaply, sr=wtc 2007-01-06 14:27:21 +00:00
nelson%bolyard.com
ce323f5d17 Bug 321584. When importing a PKCS#12 file that has no friendly names,
construct new friendly names, so the import will succeed. r=neil.williams
2007-01-06 06:05:50 +00:00
nelson%bolyard.com
64434bbb04 Bug 232600. Define MOZ_DEBUG_SYMBOLS in environment to create .pdb files
and install them in $DIST.   r=rrelyea,wtchang
2007-01-06 05:47:10 +00:00
wtchang%redhat.com
3108c0b56e Bug 51429: in safe_pclose, we may call kill + waitpid(WNOHANG) 1000 times
without giving the child any time to receive the SIGKILL signal and
terminate, break out of the while loop, and leave the child behind as a
zombie process.  The patch is contributed by John G. Myers
<jgmyers@speakeasy.net> and Tomas Mraz of Red Hat. r=neil.williams,relyea
2007-01-06 01:45:56 +00:00
wtchang%redhat.com
4085de657d Bug 51429: make sure that safe_popen cannot fail (in the parent process)
after fork succeeded.  r=neil.williams
2007-01-06 01:18:24 +00:00
wtchang%redhat.com
a6a1fc50a8 Bugzilla Bug 351246: Load memory into Highmem on OS/2. The patch is
contributed by Peter Weilbacher <mozilla@Weilbacher.org>. r=wtc,kaply
2007-01-05 22:10:04 +00:00
nelson%bolyard.com
15963b1ed8 Fix crash when importing (unwrapping) private key with no label.
Bug 335481. r=julien,rrelyea
2007-01-05 09:46:55 +00:00
nelson%bolyard.com
5dbd7fac02 When storing new CRL, Find old CRL and if it can be decoded, delete it.
Bug 363749. r=wtchang,alexei.volkov
2007-01-05 01:32:18 +00:00
alexei.volkov.bugs%sun.com
37cdb4f755 359331: modutil -changepw strict shutdown failure. r=nelson 2007-01-05 00:33:54 +00:00
alexei.volkov.bugs%sun.com
94b26cb24b 353895: klocwork Null ptr derefs in pki/pkibase.c. r=nelson 2007-01-05 00:25:05 +00:00
alexei.volkov.bugs%sun.com
19b31abc6a 353912: Misc klocwork bugs in lib/ckfw. r=nelson 2007-01-05 00:23:14 +00:00
alexei.volkov.bugs%sun.com
ae1b9b3386 353780: Klocwork NULL ptr dereferences in pkcs11.c. r=nelson 2007-01-05 00:21:45 +00:00
alexei.volkov.bugs%sun.com
916c3e90b4 340218: Coverity 910, memory leaks in CRMF code. r=nelson 2007-01-05 00:00:50 +00:00
alexei.volkov.bugs%sun.com
bb79adf6e0 301496: NSS_Shutdown failure in p7sign. r=nelson 2007-01-04 22:42:41 +00:00
alexei.volkov.bugs%sun.com
0f8727be10 342461 - verify signature on an OCSP response without intermediate decoding and encoding. r=nelson 2007-01-04 20:38:29 +00:00
alexei.volkov.bugs%sun.com
2f4800c822 Bug 158242: PK11_PutCRL is very memory inefficient. r=nelson, julien 2007-01-04 20:25:41 +00:00
alexei.volkov.bugs%sun.com
3827e72683 Bug 363987: crlutil does not change thisUpdate date when creating a modified CRL. r=nelson,neil 2007-01-04 20:18:58 +00:00
alexei.volkov.bugs%sun.com
126e48ff41 Bug 363480 ocspclnt needs option to take cert from specified file. r=nelson 2007-01-04 20:07:33 +00:00
glen.beasley%sun.com
1412847de7 update error codes to NSS r=wtc 2007-01-04 19:08:47 +00:00
neil.williams%sun.com
382bf24c53 Bug 339906, r=nelson, sec_pkcs12_install_bags passes uninitialized variables 2007-01-03 23:02:12 +00:00
nelson%bolyard.com
dd71fb79e3 Bug 256046. Don't prefix with $(JAVA_DESTPATH)/ if it's undefined.
r=Glen.beasley,neil.williams
2007-01-03 13:07:47 +00:00
nelson%bolyard.com
33b126149c Bug 353904. Fix potential NULL ptr deref. Klocwork. r=alexei.volkov 2007-01-03 12:57:41 +00:00
nelson%bolyard.com
a2f54df6a6 Bug 354423. Get the right string length. R=alexei.volkov,rrelyea 2007-01-03 12:54:10 +00:00
nelson%bolyard.com
d0fdcbf71c Improve checking of received SSL2 records.
Bug 364319, bug 364323. r=rrelyea, wtchang
2007-01-03 05:30:33 +00:00
richm%stanfordalumni.org
8dab19b1f9 Resolves: bug 299995
Description: Use PK11_TokenKeyGenWithFlags instead of PK11_KeyGen
Fix Description: Use the new function and pass in CKF_ENCRYPT|CKF_DECRYPT
as the keygen flags.
2006-12-14 17:09:17 +00:00
richm%stanfordalumni.org
0660fc6940 Resolves: bug 363168
Description: Add autotool support to svrcore; have svrcore build shared libs
Fix Description: This is a pretty basic autotool-ization using libtool
to build the shared library.  The vast majority of the work was done
by Toshio-san.  However, there are a couple of extras worth noting:
1) Windows builds are different now.  In order to build on Windows using
the MSVC compiler, you still have to use coreconf.  I just could not get
configure/libtool to work correctly with the MSVC compiler.  The old
makefile has been moved to src/Makefile.win, so you just have to
 cd src ; make -f Makefile.win
I also updated the README and INSTALL.win to add this information.
2) I added some m4 files to find and figure out which nspr and nss to use
based on the environment and pkg-config.
2006-12-14 17:07:32 +00:00
wtchang%redhat.com
db39c54c49 Bug 236613: added newline at end of file. 2006-12-12 23:26:40 +00:00
kaie%kuix.de
584a6edf70 Bug 355409, unable to search LDAP server (over SSL) with tbird 2.0 build, but 1.5.0.7 works
r=wtchang
2006-12-11 13:51:25 +00:00
gerv%gerv.net
caae487a24 Bug 236613: change to MPL/LGPL/GPL tri-license. 2006-12-11 09:45:41 +00:00
wtchang%redhat.com
9f7d451f99 Bugzilla Bug 358785: merged the mozilla/security/nss/lib/libpkix from the
NSS_LIBPKIX_BRANCH onto the NSS trunk.  Approved by rrelyea and nelsonb.
2006-12-09 00:27:38 +00:00
wtchang%redhat.com
6defe87ad2 Bugzilla Bug 363073: verify that the peer's ephemeral public key is the
type we expect before using it.  r=nelsonb
Modified Files: ssl3con.c ssl3ecc.c
2006-12-08 22:37:29 +00:00
wtchang%redhat.com
36db94292d Bugzilla Bug 357197: a small but subtle change to reject a hash algorithm
identifier with bogus 'parameters', and a large but straightforward change
of renaming function arguments and improving comments to clarify the
asymmetry between the two certID arguments. r=nelsonb
2006-12-08 22:10:52 +00:00
wtchang%redhat.com
b71144ac43 Bugzilla Bug 361077: removed commented-out code. r=christophe.ravel 2006-12-07 18:31:49 +00:00
wtchang%redhat.com
55af5b19ae Bugzilla Bug 361077: fixed the bug that HP-UXB.11.*.mk test USE_PTHREADS
before it is set.  Since we always use pthreads now, we can unconditionally
add -D_POSIX_C_SOURCE=199506L to OS_CFLAGS in HP-UXB.11.mk.
r=christophe.ravel
Modified Files:
	HP-UXB.11.00.mk HP-UXB.11.11.mk HP-UXB.11.20.mk
	HP-UXB.11.22.mk HP-UXB.11.23.mk HP-UXB.11.mk
2006-12-07 18:28:40 +00:00
kaie%kuix.de
5be8e17fe9 Bug 362980, Unable to verify the identity of [www.something.com] as a trusted site
Fixes a regression from yesterday's checkin for bug 176501.
r=rrelyea, r=wtchang
2006-12-07 13:02:28 +00:00
wtchang%redhat.com
3628ebbf9c Bugzilla Bug 345482: changed abspath to core_abspath to avoid conflict with
the built-in abspath function of GNU make 3.81.  The patch is contributed
by Benjamin Smedberg <benjamin@smedbergs.us>. r=wtc,christophe.ravel
Modified Files:
	coreconf/rules.mk nss/cmd/shlibsign/Makefile
	nss/lib/freebl/Makefile nss/lib/pk11wrap/Makefile
2006-12-07 01:57:18 +00:00
wtchang%redhat.com
5a40d49a00 Bug 332350: fixed a typo in the comment. 2006-12-06 23:00:17 +00:00
wtchang%redhat.com
f43e37d11b Bugzilla Bug 342795: the call-once functions need to store the error code
on failure so that the error code can be retrieved later. r=nelsonb and
alexei.volkov.
2006-12-06 21:50:40 +00:00
christophe.ravel.bugs%sun.com
ca95de552d Bugzilla 362857 Simplify the NSS version string definition.
r+ wtchang
2006-12-06 21:14:54 +00:00
wtchang%redhat.com
3af4185ee2 Bugzilla Bug 362857: simplified the NSS and softoken version string
definition.  r=christophe.ravel,nelsonb.
Modified files: nss/nss.h softoken/softkver.h
2006-12-06 19:51:30 +00:00
kaie%kuix.de
7d28513beb Bug 362967, export SECMOD_DeleteModuleEx
r=rrelyea, r=wtchang
2006-12-06 17:56:04 +00:00
kaie%kuix.de
75410ae8da follow up checkin, make sure entries in nss.def are sorted 2006-12-06 17:32:47 +00:00
kaie%kuix.de
4540b73845 Bug 345277, When "Certificate Viewer" is shut, the object leaks
r=rrelyea
2006-12-06 17:25:14 +00:00
kaie%kuix.de
c2228af20b Export two NSS functions, required for:
Bug 307319, Certificate details show incorrect public key information
r=rrelyea
2006-12-06 17:12:41 +00:00
kaie%kuix.de
6a93344bb3 Bug 360526, Cert not imported - Feedback prompt sometimes does not work
r=rrelyea
2006-12-06 16:31:32 +00:00
kaie%kuix.de
c204990ad5 Bug 360528, Can no longer import trusted email cert
r=rrelyea
2006-12-06 16:20:08 +00:00
kaie%kuix.de
07ea6d51d9 Bug 164707, Provide a way to view/delete orphan certs
r=rrelyea
2006-12-06 16:16:52 +00:00
kaie%kuix.de
625ec5ca20 Bug 176501, mozilla apps must manage NSS configuration for PKCS#11 shared libs, including nssckbi.dll
r=rrelyea
2006-12-06 15:42:39 +00:00
wtchang%redhat.com
93d4e5a864 Bugzilla Bug 357197: when we compare hash algorithm identifiers, allow the
'parameters' to be either NULL or missing.  r=nelsonb,relyea
2006-12-06 02:25:52 +00:00
wtchang%redhat.com
6fcff517e0 Bugzilla Bug 358248: SSL_ShutdownServerSessionIDCache should stop the
LockPoller thread.  r=nelsonb,relyea
2006-12-06 01:36:08 +00:00
wtchang%redhat.com
f430d03a0b Bugzilla Bug 362173: The NSS cryptographic module (the softoken and freebl
shared libraries) should have its own version numbers. r=nelsonb and
neil.williams.
Modified Files:
	lib/freebl/freebl.rc lib/freebl/freeblver.c
	lib/softoken/manifest.mn lib/softoken/pkcs11.c
	lib/softoken/softkver.c lib/softoken/softokn.rc
Added Files:
	lib/softoken/softkver.h
2006-12-04 23:31:35 +00:00
alexei.volkov.bugs%sun.com
e3c549190e 343231: certutil issues certs for invalid requests. r=nelson 2006-12-01 01:10:03 +00:00
wtchang%redhat.com
e02f09041f Bugzilla Bug 358785: fixed incorrect x509PolicyConstraints OID and typos in
a comment. r=relyea
2006-11-30 00:27:28 +00:00
wtchang%redhat.com
d3cc76a662 Bugzilla Bug 361089: fixed memory leaks in mp_bdivmod. r=douglas.stebila 2006-11-30 00:21:04 +00:00
mozilla.mano%sent.com
33537036df Bug 359718 - Page info: Security tab never shown. r=gavin, mpa=darin. 2006-11-23 09:41:03 +00:00
mozilla.mano%sent.com
7dd5c39a89 Backing out bug 359718, tree is closed 2006-11-22 21:24:56 +00:00
mozilla.mano%sent.com
a4e5a5340b Bug 359718 - Page info: Security tab never shown. r=gavin, mpa=darin. 2006-11-22 21:23:35 +00:00
wtchang%redhat.com
a31821060f Bugzilla Bug 361076: removed code that handled multiple NSPR threading
implementations.  We only use the pthreads-based implementation now.
r=christophe.ravel.
2006-11-17 21:57:14 +00:00
christophe.ravel.bugs%sun.com
394cd26fbd 335454: Unable to find library 'libsoftokn3.sl' on HP-UX 64 bit
r=nelson, sr=wan-teh
2006-11-17 01:30:16 +00:00
neil.williams%sun.com
b82ec2ed15 bug 360818, set RPATH for signtool, signver
r=wan-teh, nelson
2006-11-17 01:16:53 +00:00
nelson%bolyard.com
3ce134cf12 Export two new functions that were added in NSS 3.11:
SSL_ForceHandshakeWithTimeout and SSL_ReHandshakeWithTimeout
Bug 127960. r=alexei.volkov,wtchang
2006-11-15 00:14:42 +00:00
wtchang%redhat.com
f6144cb805 Bugzilla Bug 359484: made the fix for bug 341707 work for the SSL2 client
hello case. r=nelsonb,alexei.volkov
2006-11-14 01:09:54 +00:00
wtchang%redhat.com
492039f374 Bugzilla Bug 357197: fixed the fallthrough case in ocsp_CertIDsMatch. The
patch is contributed by Steve Parkinson <sparkins@redhat.com>. r=nelson,wtc
2006-11-13 18:16:58 +00:00
kaie%kuix.de
7820ce6270 Bug 356309, CertVerifyLog in CERT_VerifyCertificate terminates early on expired certs
r=rrelyea
2006-11-08 18:41:53 +00:00
kaie%kuix.de
e71bbe8d57 Bug 356109, Improve KU_NON_REPUDIATION indication in client auth prompt
r=rrelyea
2006-11-08 18:14:21 +00:00
kaie%kuix.de
dcd873788a Bug 355447, Certificate Viewer shows no details for certs in chain
Patch v2 - make extension display in cert viewer more robust
Contributed by Kaspar Brand
r=kengert
2006-11-02 22:48:32 +00:00
kaie%kuix.de
5d1ba10a53 Bug 359280, fix typo in mozilla/security/nss/cmd/lib/SSLerrs.h
r=nelson
2006-11-02 22:07:57 +00:00
kaie%kuix.de
690955f219 Bug 355447, Certificate Viewer shows no details for certs in chain
Fix template patch
r=kengert
2006-11-02 21:49:22 +00:00
kaie%kuix.de
14a234befa bug 346766, tons of valgrind warnings if nsEntropyCollector collects entropy before NSS initialization
r=kengert, r=rrelyea
2006-11-02 19:22:56 +00:00
kaie%kuix.de
1de51a708c Bug 328346, Certificates with keyusage nonRepudiation should not be used as SSL client certificates
Checking in incremental patch to fix an obvious mistake.
r=kengert
2006-11-02 18:51:27 +00:00
alexei.volkov.bugs%sun.com
07c83e0e53 353763: klocwork Null ptr dereferences in pk11cert.c. r=nelson 2006-10-31 00:31:53 +00:00
alexei.volkov.bugs%sun.com
0625316efb 353865: klocwork Null ptr deref in softoken/pk11db.c. r=nelson 2006-10-31 00:29:43 +00:00
alexei.volkov.bugs%sun.com
33f9b12c9f 353902: klocwork bugs in stanpcertdb.c. r=nelson 2006-10-31 00:24:38 +00:00
alexei.volkov.bugs%sun.com
341b92ca26 additional fix for 353909: klocwork ptr dereference before NULL check in devutil.c. r=nelson 2006-10-31 00:21:24 +00:00
alexei.volkov.bugs%sun.com
1deb23d955 353909: klocwork ptr dereference before NULL check in devutil.c. r=nelson 2006-10-31 00:05:04 +00:00
julien.pierre.bugs%sun.com
280bcba7da Fix for bug 350948 . freebl macro change gives 1% improvement in RSA on Solaris AMD64 2006-10-26 22:22:57 +00:00
nelson%bolyard.com
a723cfe070 Fix leaks in softoken's argument string parsin. r=rrelyea,alexei.
Bug 339173. Modified Files: pk11db.c pk11pars.h
2006-10-25 18:47:02 +00:00
bzbarsky%mit.edu
0ce72c77cd Make nsIStreamLoader and nsIUnicharStreamLoader be stream listeners. Bug
281153, patch by Son Le <son.le0@gmail.com>, r=biesi, sr=darin
2006-10-24 21:47:40 +00:00
wtchang%redhat.com
61caebbe8a Bugzilla Bug 351140: handle the case that params->field is an invalid
value.  The patch is by Ryan Jones <sciguyryan+bugzilla@gmail.com>.
r=nelsonb,wtc.
2006-10-24 00:05:43 +00:00
alexei.volkov.bugs%sun.com
966e3934b8 265784: SSL interoperability regression testing. r=nelson
To turn on the feature, set and export env variable
IOPR_HOSTADDR_LIST to space separated interoperability server fqdn list
2006-10-23 23:46:47 +00:00
wtchang%redhat.com
91dfa64226 Bugzilla Bug 341122: it's not necessary to test slot->slotLock because
slot->slotLock cannot be NULL at that point.  The patch is contributed by
Ryan Jones <sciguyryan+bugzilla@gmail.com>. r=nelsonb,wtc.
2006-10-23 22:56:31 +00:00
wtchang%redhat.com
c491737eac Bugzilla Bug 339907: fixed the leak of sha1cx. The patch is contributed by
Ryan Jones <sciguyryan+bugzilla@gmail.com>. r=nelsonb,wtc.
2006-10-23 21:24:38 +00:00
wtchang%redhat.com
4c82545467 Bugzilla Bug 351897: Say a != b instead of (! (a == b)). r=jpierre. 2006-10-23 20:46:50 +00:00
wtchang%redhat.com
dbb6ae1065 Bugzilla Bug 357015: it turns out the code is correct. it's the comment
that's wrong.
2006-10-18 23:45:32 +00:00
wtchang%redhat.com
a9aa5230b7 Bugzilla Bug 357015: added a comment to describe the actual number of files
ReadSystemFiles reads.
2006-10-18 23:05:59 +00:00
slavomir.katuscak%sun.com
951283acfa Fix for previous patch. 2006-10-18 17:59:40 +00:00
wtchang%redhat.com
a3c9bc84e3 Bugzilla Bug 356595: noted in the comment that GetCurrentProcess returns
a constant pseudo handle. Added a GetCurrentThreadId call. r=glen.beasley,
neil.williams.
2006-10-17 17:58:06 +00:00
slavomir.katuscak%sun.com
9ed6996ee7 1. Adding timestamps + total time measure for testing subscripts
2. Enables using TESTS variable from system environment (for example TESTS=cert
./all.sh will test only cert tests)
2006-10-17 09:48:17 +00:00
wtchang%redhat.com
7e38c40e38 Bugzilla Bug 355297: changed the way we reseed the RNG so that we modify
all the 256 bits of XKEY. Define struct SHA256ContextStr in the new header
sha256.h so that prng_fips1861.c can use it. r=nelsonb,jpierre.
Modified files: manifest.mn prng_fips1861.c sha512.c
Added file: sha256.h
2006-10-13 16:54:04 +00:00
gavin%gavinsharp.com
075590b967 Bug 338022: remove dead code in buildASN1ObjectFromDER, patch by Ryan Jones <sciguyryan+bugzilla@gmail.com>, r=darin+kaie 2006-10-13 15:35:59 +00:00
glen.beasley%sun.com
081ca00a78 355297 rng update checking in wan-tehs patch 2006-10-12 22:48:19 +00:00
glen.beasley%sun.com
390792a63d 356073 C_GetTokenInfo should return CKR_CRYPTOKI_NOT_INITIALIZED if not initialized r=nelson,sr=neil 2006-10-12 22:27:16 +00:00
wtchang%redhat.com
51cd930242 Bugzilla Bug 355297: added new function RNG_SystemRNG, which gets random
bits from the system RNG, and use it for the very first RNG_RandomUpdate
call in rng_init so that we initialize the RNG's XKEY with high quality
entropy. r=jpierre,relyea.
Modified Files:
	os2_rand.c prng_fips1861.c secrng.h unix_rand.c win_rand.c
2006-10-12 02:23:49 +00:00
wtchang%redhat.com
ffca628aba Bugzilla Bug 354900: code cleanup -- consolidates some duplicate code,
checks for NULL pointers, and renames the SFTK_IS_SECURE_KEY_OBJECT macro.
r=glen.beasley,relyea.
Modified files: fipsaudt.c fipstokn.c
2006-10-10 22:28:48 +00:00
kaie%kuix.de
328a1f6b55 Bug 328346, Certificates with keyusage nonRepudiation should not be used as SSL client certificates
r=rrelyea
2006-10-10 02:04:40 +00:00
alexei.volkov.bugs%sun.com
3b9a109d82 353908: klocwork OOM crash in tdcache.c. r=nelson 2006-10-09 22:29:12 +00:00
alexei.volkov.bugs%sun.com
a8f4eefb65 353903: klocwork oom crash in softoken/keydb.c. r=nelson 2006-10-09 22:28:07 +00:00
alexei.volkov.bugs%sun.com
f4e98c2852 353888: klockwork IDs for ssl3con.c. r=nelson 2006-10-09 22:26:44 +00:00
alexei.volkov.bugs%sun.com
12668703e3 353777: Klocwork Null ptr dereferences in pk11obj.c. r=nelson 2006-10-09 22:25:36 +00:00
alexei.volkov.bugs%sun.com
164d4c2907 353773: klocwork Null ptr dereferences in pk11nobj.c. r=nelson 2006-10-09 22:24:18 +00:00
alexei.volkov.bugs%sun.com
76dff9c91f 353760: klocwork null pointer dereference in p7decode.c. r=nelson 2006-10-09 22:22:33 +00:00
alexei.volkov.bugs%sun.com
4cc26433e6 353742: klocwork null ptr dereferences in pki3hack.c. r=nelson 2006-10-09 22:21:41 +00:00
alexei.volkov.bugs%sun.com
c93ff6a5f2 353742: klocwork null ptr dereference in ocsp_DecodeResponseBytes. r=nelson 2006-10-09 22:19:58 +00:00
alexei.volkov.bugs%sun.com
6d632efb6c 353741: klocwork cascading memory leak in mpp_make_prime. r=nelson 2006-10-09 22:18:38 +00:00
alexei.volkov.bugs%sun.com
c8c6d0c339 353739: Klocwork Null ptr dereferences in instance.c. r=nelson 2006-10-09 22:16:59 +00:00
alexei.volkov.bugs%sun.com
a555a69765 353423: Klocwork bugs in nss/lib/pk11wrap/dev3hack.c. r=nelson 2006-10-09 22:14:04 +00:00
alexei.volkov.bugs%sun.com
eb392ed332 353416: Klocwork 76593 null ptr deref in nssCryptokiPrivateKey_SetCertificate. r=nelson 2006-10-09 22:11:44 +00:00
alexei.volkov.bugs%sun.com
a168b0dbcc 353375: Klocwork 76513 - Null ptr deref in nssCertificateList_DoCallback. r=nelson 2006-10-09 18:51:55 +00:00
alexei.volkov.bugs%sun.com
a7edef3088 353371: Klocwork 91117 - Null Pointer Dereference in CERT_CertChainFromCert. r=nelson 2006-10-09 18:45:02 +00:00
alexei.volkov.bugs%sun.com
fc1706cbbb 338226: Core files may be reported in the wrong tests for SSL, or missed. r=neil 2006-10-09 17:42:58 +00:00
wtchang%redhat.com
4d79de55ec Bugzilla Bug 354565: improved an error message as suggested by Neil
Williams.
2006-10-06 23:50:48 +00:00
wtchang%redhat.com
80b56f2e83 Bugzilla Bug 115951: libfreebl3.dylib should be built as a loadable bundle
just like libnssckbi.dylib because it is only dynamically loaded.  We don't
have the import library freebl3.lib on Windows either. r=julien.pierre
2006-10-06 23:45:39 +00:00
wtchang%redhat.com
6f25509ce4 Bugzilla Bug 354900: audit the modifications, accesses, deletions, and
additions of cryptographic keys.  r=glen.beasley,relyea.
Modified files: fipstokn.c manifest.mn pkcs11c.c softoken.h
Added file: fipsaudt.c
2006-10-02 22:48:31 +00:00
wtchang%redhat.com
73f3b25c8c Bugzilla Bug 351482: fail if some of the needed functions don't exist.
r=glen.beasley,relyea.
2006-10-02 22:04:33 +00:00
julien.pierre.bugs%sun.com
81bb832c8f Fix for bug 115951 . Separate BL_Cleanup and BL_Unload . r=wtchang,nelson 2006-10-02 21:15:46 +00:00
kaie%kuix.de
4773f65967 Bug 344817, PSM: fix UI display problems for X.509 certs with empty DNs
Patch for GetWindowTitle, contributed by Kaspar Brand
r=kengert
2006-10-02 20:16:23 +00:00
kaie%kuix.de
630d4f6a21 Bug 352867, Cert Manager shows incorrect cert names if any twisty is closed
r=rrelyea
2006-10-02 20:11:49 +00:00
kaie%kuix.de
1928a929d5 Bug 352401, Cert Manager: If issuer org is empty, fall back to display common name
r=rrelyea
2006-10-02 20:06:27 +00:00
nelson%bolyard.com
500db6f324 Bug 353475. When building NSS with MSVC 2005, use the "mt" command to
embed the manifest files into the executables and DLLs.
Patch contributed by Allan Beaufour <allan@beaufour.dk>, r=nelson,wtchang
2006-10-01 06:48:25 +00:00
nelson%bolyard.com
7c15fcda7a Bug 354384. Fix some (not all) of the reference leaks in vfyserv.
Also, improve usage message.  r=alexei,julien
2006-10-01 05:47:18 +00:00
nelson%bolyard.com
d4df5484a3 Bug 354313. Fix leak in STAN_GetCERTCertificateName. r=julien,rrelyea 2006-10-01 05:37:24 +00:00
alexei.volkov.bugs%sun.com
0154446bb1 353413: Klocwork 76541 free uninitialized pointer in CERT_FindCertURLExtension. r=nelson 2006-09-29 20:20:21 +00:00
alexei.volkov.bugs%sun.com
956aaa0068 353374: Klocwork 76494 - Null ptr derefs in CERT_FormatName. r=nelson 2006-09-29 20:18:55 +00:00
alexei.volkov.bugs%sun.com
c89f85e085 341114: Coverity 517 SECU_ParseCommandLine leaks optstate. r=nelson 2006-09-29 20:15:47 +00:00
alexei.volkov.bugs%sun.com
2e23193e89 354403:: nssList_CreateIterator returns pointer to a freed memory if the function fails to allocate a lock. r=nelson 2006-09-29 20:13:30 +00:00
alexei.volkov.bugs%sun.com
11e889d320 354008: klocwork bugs in freebl. r=nelson 2006-09-29 20:12:21 +00:00
alexei.volkov.bugs%sun.com
21c4f16a00 321600: SECMOD_LoadPKCS11Module calls to PR_GetLibraryName must use PR_FreeLibraryName. r=wtchang. Patch provided by timeless. 2006-09-29 19:53:07 +00:00
alexei.volkov.bugs%sun.com
3041f905ec 314178: NSS PK11 Module: certificates with unknown AlgorythmIdentifiers make ThunderBird crashed. r=nelson, sr=julien 2006-09-29 19:38:42 +00:00
kaie%kuix.de
62f4c9518f Bug 326159, enhance cert request generation using KEYGEN tag and JS function crypto.generateCRMFRequest
r=rrelyea
Portions of this patch originally appeared in bug 235773 and were contributed by Sheueling Chang / Vipul Gupta / Douglas Stebila
2006-09-29 00:50:46 +00:00
kaie%kuix.de
6d4f2e307b Bug 307319, Certificate details show incorrect public key information
r=rrelyea
Patch contributed by Martin v. Loewis
2006-09-28 23:31:34 +00:00
kaie%kuix.de
4336a5d2a5 Bug 350200, Implement DHMAC based POP (ProofOfPossession)
r=rrelyea, r=nelson
2006-09-28 22:25:55 +00:00
wtchang%redhat.com
fd110ec6de Bugzilla Bug 354565: detect SHA tests that are incorrectly configured for
BIT oriented implementations. r=glen.beasley
2006-09-28 16:37:25 +00:00
julien.pierre.bugs%sun.com
24aa200d7b Fix for bug 115951 . Unload freebl dynamic library . Also fix tiny one-time leak of library name . r=nelson,wtchang 2006-09-28 00:40:55 +00:00
kaie%kuix.de
e3587d973a Bug 337087, Coverity 406, dead code in mozilla/security/manager/ssl/src/nsSDR.cpp
r=kengert
Patch provided by Jon Smirl
2006-09-27 03:19:46 +00:00
julien.pierre.bugs%sun.com
fe0ff2999b Fix for bug 353910 . Memory leak in RNG_RNGInit . r=nelson, wtchang 2006-09-26 22:20:18 +00:00
julien.pierre.bugs%sun.com
ddd30a01be Fix for bug 351897 . OCSP check should only be skipped for certificateStausResponder usage alone . 2006-09-26 20:18:57 +00:00
kaie%kuix.de
8713ab7b8f Bug 353422, Klocwork bugs in nss/lib/crmf
r=nelson, r=rrelyea
Patch inspired by Nelson
2006-09-26 18:57:28 +00:00
kaie%kuix.de
6877823e96 Bug 344812, string ID typo in CertViewer: fix display of KU_CRL_SIGN key usage bit
r=kengert
Patch provided by Kaspar Brand
2006-09-26 18:47:05 +00:00
kaie%kuix.de
0875c1d09d Bug 353597, Process events while waiting for OCSP result on main thread
r=darin
Thanks a lot to Christian Biesinger for making me aware of this solution.
Thanks a lot to Darin Fisher for rewriting thread manager that provides the new API.
2006-09-26 17:52:56 +00:00
nelson%bolyard.com
ff07e960c1 Fix build bustage caused by previous checkin. 2006-09-25 21:46:06 +00:00
julien.pierre.bugs%sun.com
909e463e76 Fix for bug 353896 . Assert at compile time if NSS_ECC_MORE_THAN_SUITE_B is set. For NSS_3_11_BRANCH and tip. r=nelson, alexei 2006-09-25 20:51:11 +00:00
nelson%bolyard.com
2f72927b06 Unifdef USE_MOZ_THREAD (bug 351510) and remove dead code (bug 351443).
Patch contributed by ehsan.akhgari@gmail.com. r=nelson, alexei.volkov
Modified Files: jarint.h jarsign.c jarver.c manifest.mn
Removed Files: jarevil.c jarevil.h
2006-09-25 19:45:40 +00:00
nelson%bolyard.com
c33352aa54 Fix leaks in jarfile.c (bug 338453), jarjart.c (bug 351408), and
jarver.c (bug 337361). Patch contributed by ehsan.akhgari@gmail.com
2006-09-25 19:20:37 +00:00
wtchang%redhat.com
a326c3f815 Bugzilla Bug 334914: removed a useless null check. Contributed by
Ryan Jones <sciguyryan+bugzilla@gmail.com>.  r=wtc
2006-09-22 19:02:07 +00:00
wtchang%redhat.com
9fb73060ed Bugzilla Bug 353749: for DSA KAT increased the size of P to 1024 bits
used nistK283 binary field curve KAT. Contributed by Glen Beasley of Sun.
r=wtc.
2006-09-22 18:33:25 +00:00
julien.pierre.bugs%sun.com
f7ae527571 Fix for bug 353572. Leak in sftk_OpenCertDB . r=alexei,nelson 2006-09-22 00:19:49 +00:00