Commit Graph

696 Commits

Author SHA1 Message Date
wtc%netscape.com
c83d9284ee Bugzilla bug #80809: use the correct assembler flags under gcc on IRIX.
Thanks to John Vandenberg <zeroJ@null.net> for the patch.
2001-05-22 13:43:47 +00:00
wtc%netscape.com
70ba3f51b2 Bugzilla bug #77199: Make NSS build under OS/2. Thanks to Javier
Pedemonte <pedemont@us.ibm.com> for the patch.
Modified Files:
        coreconf/OS2.mk coreconf/rules.mk coreconf/ruleset.mk
        nss/lib/freebl/Makefile nss/lib/pkcs12/p12.h nss/lib/ssl/ssl.h
        nss/lib/util/secport.h
2001-05-21 21:25:32 +00:00
nelsonb%netscape.com
6b57d89463 Add a workaround for bug 80092. If the last write returned WOULDBLOCK
and data is now buffered for sending and the application calls PR_Poll
to poll on read, poll on write also.  This way, if the socket becomes
writable, the application's read attempt will send (more of) the buffered
write data.
2001-05-18 20:44:35 +00:00
mcgreer%netscape.com
87506235bb check in more roots to mozilla 2001-05-17 16:08:19 +00:00
nelsonb%netscape.com
da41cda585 Only disable Nagle delays on those platforms that benefit from doing so. 2001-05-10 02:37:59 +00:00
kirke%netscape.com
fa4b889925 Now setting error before new SECFailure returns (see 78577). 2001-05-09 22:40:22 +00:00
nelsonb%netscape.com
975e24163f Disable TCP Nagle delays on SSL sockets for NSS 3.3. Bug 67898.
Modified Files:
	ssldef.c sslimpl.h sslsecur.c sslsock.c
2001-05-08 23:12:34 +00:00
kirke%netscape.com
008c6935ca Fixes 78577 (second half) This gets the SECItem->data member NULL case. 2001-05-08 22:53:23 +00:00
kirke%netscape.com
91ba46c031 Fixes 78577. Checking for NULL src arg. 2001-05-08 22:38:02 +00:00
relyea%netscape.com
e8fc77d869 Get NT builds running again by turning off building of the sw fortezza pkcs11 module. 2001-05-08 21:22:20 +00:00
nelsonb%netscape.com
1ca01b9eec Restore explicit dependencies on headers and other sources. 2001-05-08 03:50:02 +00:00
relyea%netscape.com
be138a13b2 remove bogus check for CRLs 2001-05-07 21:07:23 +00:00
relyea%netscape.com
ec2f86824c Add new semantic when importing a cert chain for the case where the cert chain
may have otherwise invalid CA's, but that the CA's should be implicitly trusted.
2001-05-03 16:31:34 +00:00
wtc%netscape.com
61a7e87834 Bugzilla bug #78528: put the const ASN1 template declarations in certt.h,
secdig.h, and secoid.h inside extern "C" blocks.
2001-05-02 21:34:13 +00:00
wtc%netscape.com
a30611cb83 Bugzilla bug #78528: put the const ASN1 template declarations inside
an extern "C" block.  Thanks to Javier Delgadillo for the patch.
2001-05-02 20:14:46 +00:00
relyea%netscape.com
ede226f675 Fix names in .def file which caused Sunos Debug builds to fail (why didn't any other builds fail?) 2001-05-02 18:59:16 +00:00
wtc%netscape.com
8b2bc6b9d6 Bugzilla bug #78467: fixed a memory leak in SECMOD_AddNewModule(). Thanks
to Patrick Beard <beard@netscape.com> for the bug report.
2001-05-02 18:50:07 +00:00
wtc%netscape.com
e8890d91a2 Bugzilla bug #78464: fixed a memory leak in pk11_HandleTrustObject().
Thanks to Patrick Beard <beard@netscape.com> for the patch.
2001-05-02 18:35:34 +00:00
relyea%netscape.com
5e55ce4623 Export those symbols needed for JSS to link with the dynamic NSS libraries. 2001-05-02 00:03:02 +00:00
relyea%netscape.com
7c1b2dd0c9 Make CKM_MD5_RSA_PKCS actually do MD5 hashes instead of MD2 hashes. 2001-05-02 00:02:10 +00:00
relyea%netscape.com
4dfc3221bf JSS integration bug 76958 . Add accessor functions go get the cert and key's
CKA_ID.
2001-05-02 00:00:57 +00:00
relyea%netscape.com
9e28385aa3 JSS integration bug 77662 . Allow Verification by passing the signature at the
end of the process rather than at the beginning.
2001-05-01 23:59:27 +00:00
relyea%netscape.com
8b5d6059c9 Add .asm to the vpath as well. 2001-05-01 00:22:30 +00:00
relyea%netscape.com
7f6d97c8f1 Set vpath up so builds in readonly trees will work. 2001-04-30 21:52:46 +00:00
relyea%netscape.com
d81b780d84 Changes to allow NSS to build in to a separate object tree. 2001-04-30 16:40:19 +00:00
nelsonb%netscape.com
80046e3076 MPI now uses assembler code for Solaris i86pc. 2001-04-27 20:49:17 +00:00
nelsonb%netscape.com
142643b2df A version of the Intel assembler code for Solaris i86pc's as assembler. 2001-04-27 20:47:39 +00:00
nelsonb%netscape.com
a87ed3e7fe Build freebl on Solaris x86 with either gcc or Forte'. Not yet using
x86 assembler sources though.  That's TBD.   Bug 73115.
2001-04-27 04:17:59 +00:00
nelsonb%netscape.com
e49455a04c Eliminate cause of assertion failure that occurs when SSL is not the top
protocol on the socket's stack.
2001-04-26 21:53:11 +00:00
relyea%netscape.com
b435cc8059 Back out changes which prevent NT from building. Need to figure something else out (sigh).
bob
2001-04-25 16:34:33 +00:00
relyea%netscape.com
c0f1668066 Role an 2.8.5 fix forward. (fix for O= dependencie in generating a nickname). 2001-04-24 21:27:40 +00:00
relyea%netscape.com
d530cbbec8 Export function to extract the public key from a subject key info
for JSS to use for CMS.
2001-04-24 20:04:14 +00:00
relyea%netscape.com
504b359984 Make sure the signature key verification checks get ran if the key can
do signing.
2001-04-24 20:02:52 +00:00
relyea%netscape.com
7818d0eda2 Patch to make the build work in both traditional and re-directed object mode. 2001-04-24 19:52:06 +00:00
relyea%netscape.com
1787fc7d5e Add client requested features to coreconf:
building cross platform.
        targetting the Objects to a separate tree.
2001-04-24 17:05:18 +00:00
nicolson%netscape.com
94755d42a1 Fix bug 75770: RSA_NewKey returns an incomplete key. Reviewed by mcgreer
and nelsonb.
2001-04-12 20:23:42 +00:00
nelsonb%netscape.com
9bd14a2bc5 Merge in NSS 3.2.1 changes. (VersionCheck function) 2001-04-11 22:52:09 +00:00
nelsonb%netscape.com
2eefc0c170 Merge in NSS 3.2.1 changes. 2001-04-11 22:49:07 +00:00
nelsonb%netscape.com
b2d4d53739 Merge in changes from NSS 3.2.1. 2001-04-11 22:47:14 +00:00
nelsonb%netscape.com
7108ab8829 Merge NSS 3.2.1 changes. 2001-04-11 22:45:40 +00:00
nelsonb%netscape.com
adbd40bef7 Merge in NSS 3.2.1 changes into nss.def. Update version to 3.3 Beta. 2001-04-11 22:42:28 +00:00
nelsonb%netscape.com
1fb4834339 Merged in changes from NSS_3_2_BRANCH. 2001-04-11 22:28:11 +00:00
nelsonb%netscape.com
f8e2a2a948 Implementation of 5 DHE ciphersuites, client side only.
Contributed by Dr Stephen Henson <stephen.henson@gemplus.com>
2001-04-11 00:29:18 +00:00
nelsonb%netscape.com
3b182de89f Merge changes from NSS_3_2_BRANCH. Fix backward compatibility issues. 2001-04-06 17:47:15 +00:00
nelsonb%netscape.com
661c26b99c Fix a couple of memory leaks that occur in rare error paths. 2001-03-31 02:49:59 +00:00
nelsonb%netscape.com
2ed1feb8e1 Eliminate the old global arena lock. Each ArenaPool now has its own lock.
The new PORTArenaPool struct, an extended PLAreanaPool, is used in place
of PLArenaPools.
2001-03-23 23:40:09 +00:00
nelsonb%netscape.com
3ef58c1b72 Fix bug in SSL_ResetHandshake introduced in last checkin. 2001-03-20 00:39:02 +00:00
nelsonb%netscape.com
46c15355d3 Reinterpret the READ and WRITE poll flags depending on the state of the
socket and the SSL handshake.  Rename the badly named "connected" flag.
Bugzilla bugs 56924, 56926, 66706.
Modified Files:
    ssl3con.c sslauth.c sslcon.c ssldef.c sslgathr.c sslimpl.h
    sslsecur.c sslsock.c
2001-03-16 23:26:06 +00:00
nelsonb%netscape.com
a6ff2f9594 Build changes for Solaris and gcc. Get gcc to use the proper architecture
flags when building v8plus code on Solaris/Ultrasparc.  Use gcc instead of
ld to build the freebl DSOs when using gcc on Solaris.  And stop using the
"sparkfix" program on Solaris.  It is no longer needed.  Bug 69052.
2001-03-14 23:30:37 +00:00
javi%netscape.com
edf7e1032b Fix for Bug 71889 Null out secmodname during NSS_Shutdown so that a later call to NSS_Init succesfully initializes the SECMOD libraries. Also, free the memory allocated to allocated the name of the keydb and remove an unused local variable. 2001-03-14 18:58:14 +00:00
relyea%netscape.com
b22a7c1f09 bug 70992 patches to build 4.2 BSD 2001-03-13 19:02:05 +00:00
relyea%netscape.com
a23285e902 DES key gens need to fall through to set the rest of their attributes
(remove spurious break). S/MIME should function again after this.
2001-03-13 00:04:51 +00:00
relyea%netscape.com
37306c1267 CK_ULONG != unsigned int on 64 bit platforms. Fix the cast which was obviously
put in to remove a warning.

bug 70713
2001-03-10 01:35:17 +00:00
relyea%netscape.com
9d9fb5174d Fix AIX 64 bit tools failure. For some reason the 64 bit compilier didn't like
the massive switch statement. The new code is easier to read anyway now.
bug 70713
2001-03-10 01:34:08 +00:00
relyea%netscape.com
75275b086f Bug 70657 . Old CERT DB doesn't always get closed after migration. 2001-03-07 17:34:44 +00:00
relyea%netscape.com
6e3e253b55 Fix Bug 70441 where ava fields with one or two characters are not formatted properly. 2001-03-07 17:31:53 +00:00
nelsonb%netscape.com
36f08d78d2 Increase the temp cert db's memory buffer size from 64KB to 256KB.
This reduces the liklihood that it will overflow into a disk file.
This is a partial fix for bug 67953.
2001-02-28 22:50:12 +00:00
relyea%netscape.com
34316080bc Fix mismatched parameter problem. 2001-02-22 18:27:28 +00:00
relyea%netscape.com
bc28489209 Fix bug 69471 and bug 69472 : Memory leak in PK11_VerifyMechanisms and incorrectly
calling EnterSlotMonitor rather than ExitSlotMonitor on an error condition.

bob
2001-02-21 22:22:33 +00:00
relyea%netscape.com
2293bbf9d7 Leave a reference to the static version strings so agressive linkers linkers
like AIS won't optimize the id strings away.
2001-02-21 22:18:42 +00:00
relyea%netscape.com
6e2d9268f5 Add wrapper bindings for AES so S/MIME and SSL may implement their AES suites. 2001-02-21 19:52:12 +00:00
relyea%netscape.com
126437e7e3 Make the public interface use a flags variable instead of a billion little
Bools.

suggested and reviewed by wtc in bug 66230
2001-02-10 02:03:03 +00:00
relyea%netscape.com
3d2bfa7d13 Bug 68234. Handle automatic update of NES2.0, and NES 3.X databases.
reviewed by nelsonb
2001-02-10 01:44:34 +00:00
nelsonb%netscape.com
ecb09e90e8 Modify ssl_FindSocket() to set error PR_BAD_DESCRIPTOR_ERROR when it
cannot find the SSL layer on the specified PRFileDesc. Ensure all
callers detect when ssl_FindSocket returns NULL and handle it properly.
Bug 68241. Reviewed by jgmyers and relyea.
Modified Files:
 	prelib.c sslauth.c sslsecur.c sslsock.c
2001-02-09 02:11:31 +00:00
relyea%netscape.com
9a4a2d9ddb Allow applications to initialize nss without necessarily initializing databases.Needed to keep old modutil semantics. Bug 66230. reviewed by wtc. 2001-02-09 01:34:12 +00:00
relyea%netscape.com
ea8de3c817 Move cdbhdl.h to private exports. bug 64260 revied by nelsonb. 2001-02-09 01:32:42 +00:00
nelsonb%netscape.com
01bdbccb5d Allow application to customize cert verification slop time.
Default is 24 hours.  Bug 48300. Reviewed by wtc.
Modified Files:
 	lib/nss/nss.def lib/certdb/cert.h lib/certdb/certdb.c
2001-02-09 01:06:41 +00:00
nelsonb%netscape.com
7dcf6f9722 Make SSL API consistent in using SECStatus as return value for functions
that return only values in that enumeration.  Bug 68097. R&A = relyea.
Modified Files:
 	lib/ssl/ssl.h lib/ssl/sslauth.c lib/ssl/sslsecur.c
 	lib/ssl/sslsnce.c lib/ssl/sslsock.c cmd/selfserv/selfserv.c
 	cmd/strsclnt/strsclnt.c
2001-02-09 00:32:14 +00:00
javi%netscape.com
4e85b7019a Fix for Bug 68063 r=nelsonb, a=wtc Make NSS_Init backwards compatible for the Mac. 2001-02-08 23:43:00 +00:00
wtc%netscape.com
18e1a7aec5 Set NSS version to 3.2. 2001-02-08 01:22:01 +00:00
wtc%netscape.com
782588654c Need to include "prthread.h" for the PRThread type. 2001-02-07 17:50:43 +00:00
nelsonb%netscape.com
720374d8c3 When half-duplex applications (e.g. one thread per socket, doing alternate
reading and writing) call PR_Send and PR_Recv with a non-infinite timeout
value, use that value for both underlying read and write operations.
Fixes bug 67402.  Reviewed by Wan-Teh.
2001-02-07 02:06:05 +00:00
nelsonb%netscape.com
4207bb1bdb Coalesce the final Finished message in the SSL handshake and the first
record of application data into a single write, when possible, to avoid
TCP's "Nagle" delays.  Fixes bug 67898.  r&a: wtc.  Modified Files:
	ssl3con.c sslimpl.h sslsecur.c sslsock.c
2001-02-07 00:34:56 +00:00
relyea%netscape.com
f1ffa04d9e Bug 67068. Fix Crash in SECMOD_Shutdown. reviewed by wtc. 2001-02-06 00:11:24 +00:00
relyea%netscape.com
42e1aaee86 Fix error value to return a less misleading generic error when the bignum libraries fail 2001-02-06 00:09:54 +00:00
wtc%netscape.com
804472db43 Bugzilla bug #60143: checked in OpenVMS patch from Colin Blake
<colin@theblakes.com>.
Modified Files:
	coreconf/OpenVMS.mk coreconf/arch.mk coreconf/rules.mk
	coreconf/ruleset.mk nss/cmd/lib/secpwd.c nss/lib/nss/nss.h
	nss/lib/nss/nssinit.c
2001-02-04 05:52:42 +00:00
mcgreer%netscape.com
c4d36363d2 get pk12util working with shared libs. Change ciphersuites to
be disabled by default to allow user control.  Export a couple
more functions to allow ciphersuite preferences.
2001-02-02 15:24:29 +00:00
wtc%netscape.com
a83eb31b00 Bugzilla bug #63768: removed references to the obsolete PURE_LIBRARY,
HAVE_PURIFY etc. make variables in NSS files.  Reviewed by nelson Bolyard.
Modified Files:
	cmd/platrules.mk cmd/crmf-cgi/config.mk cmd/crmftest/config.mk
	cmd/lib/config.mk cmd/zlib/config.mk lib/base/config.mk
	lib/certdb/config.mk lib/certhigh/config.mk lib/ckfw/config.mk
	lib/crmf/config.mk lib/cryptohi/config.mk
	lib/fortcrypt/swfort/config.mk lib/freebl/config.mk
	lib/jar/config.mk lib/nss/config.mk lib/pk11wrap/config.mk
	lib/pkcs12/config.mk lib/pkcs7/config.mk lib/smime/config.mk
	lib/softoken/config.mk lib/ssl/config.mk lib/util/config.mk
2001-02-02 01:49:57 +00:00
relyea%netscape.com
2c9a42201b Add code to shutdown the PKCS #11 subsystem so NSS can be called to switch profiles. 2001-02-01 19:09:23 +00:00
wtc%netscape.com
899e61b6cb Bugzilla bug #62855: added stubs for the SSL session cache functions so
that selfserv can link without unresolved symbols on OS/2.
2001-01-31 23:43:47 +00:00
wtc%netscape.com
1ca200c1e1 Bugzilla bug #62855: checked in OS/2 makefile patches from Javier
Pedemonte <pedemont@us.ibm.com>.
Modified Files:
	coreconf/OS2.mk coreconf/arch.mk coreconf/prefix.mk
	coreconf/rules.mk coreconf/suffix.mk nss/Makefile
	nss/cmd/platlibs.mk nss/lib/ckfw/builtins/config.mk
2001-01-31 21:29:31 +00:00
wtc%netscape.com
0669b974b3 Bugzilla bug #62855: checked in OS/2 patches from Javier Pedemonte
<pedemont@us.ibm.com>.
Modified files: selfserv.c, swfutl.c, os2_rand.c.
2001-01-31 19:09:48 +00:00
wtc%netscape.com
2d031feba0 Bugzilla bug #62855: do not use the XP_PC macro. Use XP_WIN16 when we mean
Win 16.  Thanks to Javier Pedemonte <pedemont@us.ibm.com> for the patch.
2001-01-31 18:27:15 +00:00
wtc%netscape.com
586b10f4c5 Bugzilla bug #67122: put PR_CALLBACK after the return type in function
declarations.  This is the order required by OS/2 compilers.  Thanks to
Javier Pedemonte <pedemont@us.ibm.com> for the patch.
Modified files: hashops.c, tracker.c, certt.h, oid.c.
2001-01-31 18:01:53 +00:00
mcgreer%netscape.com
57379e33fe bug 67100, memory leaks in rsa.c and pqg.c fixed. 2001-01-31 15:49:19 +00:00
nelsonb%netscape.com
e69cdb69fa Fix memory leak in mpp_make_prime. Bug 67094. 2001-01-31 00:37:40 +00:00
wtc%netscape.com
104ac36a8d Bugzilla bug #66367: rename the internal NSS functions that we have to
export from the NSS shared library.  Reviewed by Bob Relyea.
Modified Files:
	nss/lib/certdb/certdb.c nss/lib/certdb/pcertdb.c
	nss/lib/nss/Makefile nss/lib/nss/manifest.mn
	nss/lib/nss/nss.def nss/lib/pk11wrap/pk11skey.c
	nss/lib/pkcs12/p12d.c nss/lib/pkcs12/p12e.c
	nss/lib/pkcs12/p12local.c nss/lib/pkcs7/certread.c
	nss/lib/pkcs7/p7decode.c nss/lib/pkcs7/p7encode.c
	nss/lib/smime/cmsutil.c nss/lib/softoken/secpkcs5.c
	nss/lib/ssl/ssl3con.c nss/lib/ssl/sslcon.c
	nss/lib/ssl/sslnonce.c nss/lib/ssl/sslsnce.c
	nss/lib/util/nsslocks.c
Added Files:
	nss/lib/nss/nssrenam.h
2001-01-30 21:02:28 +00:00
mcgreer%netscape.com
60a4d653fb export PKCS#12 symbols via the S/MIME DSO. Change default cipher list
to enable all available ciphersuites.
2001-01-30 19:47:39 +00:00
wtc%netscape.com
2a8e617b8b Bugzilla bug #66889: do not export the Windows import libraries for the
loadable PKCS#11 modules fort32.dll, swft32.dll, and nssckbi.dll.
Reviewed by Bob Relyea.
Modified files:
	nss/lib/ckfw/builtins/Makefile nss/lib/ckfw/builtins/config.mk
	nss/lib/fortcrypt/config.mk
	nss/lib/fortcrypt/swfort/pkcs11/config.mk
2001-01-30 19:43:26 +00:00
wtc%netscape.com
2caddf43c1 Bugzilla bug #64306: added stubs for PR_SetError and PR_SetErrorText.
Reviewed by Nelson Bolyard.
2001-01-30 02:03:47 +00:00
wtc%netscape.com
ea7ef76a25 Bugzilla bug #63935: use our own macro LINUX instead of the compiler
predefined macro __linux as __linux is not defined by some compilers.
Thanks to jsmith@penguinppc.org for the bug report and a suggested fix.
2001-01-30 01:52:47 +00:00
mcgreer%netscape.com
d27b33644d handle leading zeroes in q bug (66558). suggested by nicolson; r=mcgreer,a=wtc 2001-01-29 14:24:57 +00:00
mcgreer%netscape.com
46aebc320c Per bug #66551, remove all HMAC_ calls from exported symbol list. All
HMAC_ functionality can be done the PKCS#11 interface.
2001-01-27 16:38:45 +00:00
mcgreer%netscape.com
673e033338 Change all HMAC_ calls to use PKCS#11 interface. Now the PKCS#12 library
only depends on functions already exported from the NSS DSO (the HMAC_
calls will be removed from the exported symbol list).
r=nelsonb
2001-01-27 16:34:27 +00:00
relyea%netscape.com
5b76b8136a Allow NSS_Initialize to succeed even if the databases cannot be opened.
NOTE: BETA 3 solution only. After Beta 3 NSS_Initialize will get to new
options to control this functionality more finely
2001-01-26 04:33:45 +00:00
nelsonb%netscape.com
86efe6a23a Win32 processes have two environments, a Unix-compatible one and an NT
environment.  NSS has no control over which of these environments will
be inherited by any child processes, so when NSS modifies or adds an
environment variable, it needs to do so to both environments.
This fixes bugzilla bug 66615.  Reviewed by wtc.
2001-01-26 03:24:05 +00:00
wtc%netscape.com
ef5aed7aaa Bugzilla bug #65416: assign values to enumeration constants in secutil.h
and nssilock.h explicitly.  Reviewed by Ian McGreer.
2001-01-25 19:05:50 +00:00
wtc%netscape.com
58a4b87a75 Export the new function NSS_VersionCheck(). Reviewed by Nelson. 2001-01-25 02:43:48 +00:00
wtc%netscape.com
752be879db Bugzilla bug #66286: link libnss3.so with -R '$ORIGIN' on Solaris so that
it searches for libfreebl_*.so in the same directory where it resides.
As a result, libnss3.so, not libnspr4.so, must be the one calling dlopen,
so libnss3.so can't call PR_LoadLibraryWithFlags.
Modified files: lib/freebl/loader.c, lib/nss/config.mk
2001-01-24 05:26:19 +00:00
nelsonb%netscape.com
ad184460a8 Always detect failure of RNG_RNGInit(), which on Solaris and HPUX systems
typically signifies a failure to load the freebl DSO.  Fixes 66229.
r & a = wtc
2001-01-24 04:20:10 +00:00
wtc%netscape.com
cb0969a8ae Bugzilla bug #65918: do not build shared libraries on OSF1 with the -all
linker option.  The temporary workaround in two makefiles were removed.
Modified Files:
	coreconf/OSF1.mk nss/lib/ckfw/builtins/Makefile
	nss/lib/fortcrypt/swfort/pkcs11/Makefile
2001-01-22 17:16:47 +00:00
relyea%netscape.com
9cd4ef8884 Follow Wan-Teh's suggesion of using typedef's for enums.
Follow the same style we use elsewhere for enums.
2001-01-19 07:57:18 +00:00
relyea%netscape.com
5d4fd03040 Incorporate Wan-Teh's suggestion of using a typdef for the enum.
Follow the same standard we use elsewhere for enums.
2001-01-19 07:56:06 +00:00
relyea%netscape.com
537ac247fa Bug 65903: Fixes to allow iWS admin stuff to work with shared library NSS
Add necessary exported symbols.
Fix bug in NSS_Initialize where we weren't passing the read only paramter
	through.
Add function to search for Certificate Lists so that Traverse does not need to
	be exposed.
Update pkcs11 names.
2001-01-19 07:53:54 +00:00
relyea%netscape.com
e5c3ee4f95 Bug 65902 Add OSF/1 to the OS's that can restrict symbols in shared libraries 2001-01-19 07:51:12 +00:00
relyea%netscape.com
5f1c5255b8 Bug 65902 Add OSF/1 to the OS's that can restrict symbols in shared libraries 2001-01-19 07:50:58 +00:00
relyea%netscape.com
8d3882178a Fix Serial number searches by removing the DER tag.
Bug 65895.
2001-01-19 07:47:57 +00:00
wtc%netscape.com
c33e0a8553 Add library version info to the NSS, S/MIME, and SSL shared libraries.
Define the NSS version macros and add NSS_VersionCheck in nss.h.
Add linker option to record internal name of shared libraries.
Add Windows resource files.  Add rcs and sccs id strings that can be
retrieved with 'ident' and 'what'.
Modified Files:
	coreconf/HP-UX.mk coreconf/OSF1.mk coreconf/SunOS5.mk
        coreconf/WIN954.0.mk coreconf/WINNT4.0.mk coreconf/WINNT5.0.mk
	coreconf/rules.mk nss/lib/nss/config.mk
	nss/lib/nss/manifest.mn nss/lib/nss/nss.h
	nss/lib/nss/nssinit.c nss/lib/smime/config.mk
	nss/lib/smime/manifest.mn nss/lib/ssl/config.mk
	nss/lib/ssl/manifest.mn
Added Files:
	nss/lib/nss/nss.rc nss/lib/nss/nssver.c nss/lib/smime/smime.rc
	nss/lib/smime/smimever.c nss/lib/ssl/ssl.rc
	nss/lib/ssl/sslver.c
2001-01-18 20:29:10 +00:00
mcgreer%netscape.com
73586118bb fixes for prime generatation:
1.  Increase maximum tries to 600 (based on 2*(approx. frequency of 1024-bit primes))
2.  Lower the number of Miller-Rabin iterations for p and q based on HAC table 4.4
r=nelsonb,a=wtc
2001-01-18 16:39:10 +00:00
wtc%netscape.com
6f7422a77a Bugzilla bug #65416: assign values explicitly to enumeration constants.
The same values that the compiler would assign are assigned, with only
one exception (cmmfNoPKIStatus in cmmft.h).  This is patch id=22555,
reviewed by Nelson Bolyard.
2001-01-18 16:36:43 +00:00
nelsonb%netscape.com
fe9fa27179 When searching for a prime, the number of Miller-Rabin tests to be
performed will be done in accordance with a table published in the
Handbook of Applied Cryptography.  See Bug 65151.  Also, changes to
test program for this function.
2001-01-18 01:39:17 +00:00
nelsonb%netscape.com
edc48f136d Send SSL 3.x alert records when a version mismatch occurs.
Use the other party's version number to decide which alert to send.
Bug 65142.  R&A: relyea.
2001-01-13 02:32:39 +00:00
nelsonb%netscape.com
14c87961d5 Add implementation of SSL_RSA_WITH_RC4_128_SHA SSL3 cipher suite,
which is not enabled by default.  Bug 59795.
2001-01-13 02:05:15 +00:00
nelsonb%netscape.com
d5ae266115 Remove all vestiges of old pre-NSS socks client implementation from NSS.
Bug 51471.
2001-01-13 01:52:59 +00:00
mcgreer%netscape.com
addbd94893 take back export of NSS_CMSArray_Count 2001-01-12 18:38:31 +00:00
mcgreer%netscape.com
03f5d37be2 remove unspecified arg check (bug 65122) 2001-01-12 14:30:44 +00:00
mcgreer%netscape.com
3f0e83ae0c bug 64706
when prime generation step fails, retry up to a specified number of times
2001-01-12 14:29:47 +00:00
wtc%netscape.com
a674e530ea Added NSS_CMSArray_Count back to the exports list because
cmd/smimetools/cmsutil.c needs it.
2001-01-12 06:07:34 +00:00
nelsonb%netscape.com
a6efa3c2c5 Save and restore %ebx register in all functions. Fixes bug 64940. 2001-01-12 01:37:02 +00:00
mcgreer%netscape.com
9f6b371648 prune list of exported symbols for s/mime library 2001-01-11 20:09:01 +00:00
mcgreer%netscape.com
91698770e4 back out previous change 2001-01-08 19:43:01 +00:00
mcgreer%netscape.com
c7c96f7f51 decoding nickname entries needs to include the nickname.
when searching for smime entry, verify subject is correct (can be multiple
subjects per email address)
2001-01-08 19:24:23 +00:00
nelsonb%netscape.com
729c505bf3 Changed HP assembler routine multacc512 in hpma512.s so that it
propagates carries exactly the same way that maxpy_little does.
Re-enabled use of multacc512 in mpi_hp.c.
2001-01-08 05:58:34 +00:00
nelsonb%netscape.com
c974f7d877 Fix infinite loop by making "i" be signed again.
Also match up braces for vi editor.
2001-01-08 03:26:50 +00:00
nelsonb%netscape.com
1f1f72480e Generation of prime numbers has been failing on HP since MPI began to
use the newest HP assembler function, multacc512.  So, that function
has been disabled.  Further investigation is needed.
2001-01-08 01:01:35 +00:00
nelsonb%netscape.com
68049fe0ce Eliminate some warnings found when compiling on Unix boxen. 2001-01-07 09:21:25 +00:00
nelsonb%netscape.com
eea673c43a MSVC won't let you initialize a pointer in a data structure with the
address of an external variable that comes from another DLL.
This is a fundamental difference between WIN32 DLLs and Unix DSOs.
So, for every SEC_ASN1Template inside of libnss3 that is referenced by
other templates outside of libnss3, a new "chooser" function was created
that returns the address of that template.  For WIN32, the templates
outside of libnss3 access libnss3's templates by the chooser function
rather than by direct reference.  Some simple macros allow Unix to
continue to use direct references, avoiding the extra function calls.
With these changes, all.sh (qa script) passes all tests on NT with DLLs.
Modified Files:
	cmd/checkcert/checkcert.c cmd/lib/secutil.c lib/asn1/asn1t.h
	lib/certdb/certdb.c lib/certdb/certt.h lib/certdb/crl.c
	lib/certhigh/certreq.c lib/crmf/asn1cmn.c lib/crmf/crmfcont.c
	lib/crmf/crmftmpl.c lib/cryptohi/secsign.c lib/nss/nss.def
	lib/pkcs12/p12local.c lib/pkcs12/p12tmpl.c
	lib/pkcs7/certread.c lib/pkcs7/p7decode.c lib/pkcs7/p7local.c
	lib/smime/cmsasn1.c lib/smime/cmsattr.c lib/smime/cmspubkey.c
	lib/smime/cmssigdata.c lib/smime/smimeutil.c
	lib/softoken/keydb.c lib/softoken/keydbt.h lib/util/secalgid.c
	lib/util/secasn1.h lib/util/secasn1d.c lib/util/secasn1t.h
	lib/util/secasn1u.c lib/util/secdig.c lib/util/secdig.h
	lib/util/secoid.h
2001-01-07 08:13:13 +00:00
nelsonb%netscape.com
9407723b67 Eliminate some warnings by adding missing #include lines, or other minor
cleanup.
2001-01-07 07:56:35 +00:00
nelsonb%netscape.com
f202bf1882 Fix several bugs to get NSS_Init working again. 2001-01-07 07:37:18 +00:00
relyea%netscape.com
1c171b46f8 Fix HP map file option ('-c rather than -e') 2001-01-07 00:27:06 +00:00
relyea%netscape.com
647e6ae2e4 Get down to a signle.def file 2001-01-07 00:26:19 +00:00
relyea%netscape.com
b81edc1838 Add HP to the platforms that handle restricted symbols 2001-01-07 00:25:29 +00:00
relyea%netscape.com
766659480a Add HP to the .def file processing.
Add SDR functions
2001-01-07 00:24:51 +00:00
relyea%netscape.com
a1caf9ee0d Conform to the new .def rules 2001-01-06 23:52:11 +00:00
relyea%netscape.com
6480efed38 Conform the .def files to the new rules.
update missing symbols from the export list documentation.
2001-01-06 23:51:05 +00:00
nelsonb%netscape.com
800d49e219 Remove 8 deprecated functions from export list. 2001-01-06 23:10:30 +00:00
relyea%netscape.com
558f0063f1 Add CERT_Find functions for the s/mime test programs. 2001-01-06 22:12:16 +00:00
relyea%netscape.com
a1229115a0 Merge Unix and win data types 2001-01-06 21:37:30 +00:00
relyea%netscape.com
69531a060f Merge UNIX and Win Data types 2001-01-06 21:36:59 +00:00
relyea%netscape.com
0d5404ab76 Add symbols needed by secutil and the command libraries. 2001-01-06 21:14:03 +00:00
nelsonb%netscape.com
1962fdcb4f Remove declarations of SOCKS support functions, which have never worked
in NSS 3.x and are not supported.  Ifdef out declarations of deprecated
functions, since they are not exported by ssl3.dll.
2001-01-06 20:56:40 +00:00
mcgreer%netscape.com
a12fc02b67 reflect function declaration changes to loader module (const stuff) 2001-01-06 17:07:07 +00:00
mcgreer%netscape.com
ffeb56bbd2 on hypbrid cpu models (except sparc), use long long instead of long 2001-01-06 17:06:26 +00:00
mcgreer%netscape.com
50c492d08c fix broken build on bigendian platforms 2001-01-06 16:34:23 +00:00
relyea%netscape.com
c3228676cf 1) Add AIX to the exportted symbols controlled plaform.
2) reduce the exported symbol list down to one
2001-01-06 01:59:03 +00:00
relyea%netscape.com
e1e34747da 1) Add AIX to the build.
2) prune nss.def
3) reduce the count of exported symbol files down to one.
4) add NSS_Initialize()
2001-01-06 01:57:48 +00:00
nelsonb%netscape.com
f4895bd017 Use _WIN32 instead of _WINDOWS in windows-dependent ifdefs. 2001-01-05 23:53:38 +00:00
mcgreer%netscape.com
ec87616c36 widespread changes to reduce compiler warnings. liberal application of const. 2001-01-05 22:37:50 +00:00
wtc%netscape.com
119735b937 Bugzilla bug #64261: moved certread.c from lib/certhigh to lib/pkcs7.
As a result of this move I have to export one more data symbol
(SECAnyTemplate) from libnss3.so. :(  Removed the temporary workaround
in coreconf/rules.mk.
Modified Files:
	coreconf/rules.mk nss/lib/certhigh/manifest.mn
	nss/lib/nss/mapfile nss/lib/nss/nss.def
	nss/lib/pkcs7/manifest.mn
Added Files:
	nss/lib/pkcs7/certread.c
Removed Files:
	nss/lib/certhigh/certread.c
2001-01-05 02:18:55 +00:00
nelsonb%netscape.com
1311ab52d4 Changes to deal with exporting data from Windows DLLs.
SECHashObjects[] is no longer exported.
New function HASH_GetHashObject returns pointer to selected const object.
SSL statistics are now in a structure whose address is obtained via a
call to SSL_GetStatistics().
On NT, the new symbol NSS_USE_STATIC_LIBS must be declared in programs
that use the static SSL library.
Also, propagate "const" declaration for SECHashObjects.
2001-01-05 01:38:26 +00:00
wtc%netscape.com
4e87e7fbbf Bugzilla bug #64261: moved pkcs7 from libnss3.so back to libsmime3.so.
coreconf/rules.mk has a temporary workaround for the dependency of
certread.c on some PKCS7 symbols.
Modified Files:
	coreconf/rules.mk nss/lib/manifest.mn nss/lib/nss/config.mk
	nss/lib/nss/mapfile nss/lib/nss/nss.def
	nss/lib/smime/config.mk nss/lib/smime/mapfile
	nss/lib/smime/smime.def
2001-01-04 21:33:06 +00:00
wtc%netscape.com
71a2d8ca02 Include secder.h for the declaration of the DER_UTCDayToAscii functions. 2001-01-04 19:14:45 +00:00
nelsonb%netscape.com
97cc48fda6 Reduce warnings by adding missing #includes to eliminate calls to
undeclared functions.
2001-01-04 08:21:15 +00:00
wtc%netscape.com
6548194a37 Removed unnecessary inclusion of secder.h. (The #include "secder.h"
in cms.h was probably cut and pasted from secpkcs7.h, which was added
in rev. 1.3 of secpkcs7.h in the Netscape internal /m/src cvs repository
in 11/1996.)
Modified files: secpkcs7.h, cms.h
2001-01-04 06:02:43 +00:00
wtc%netscape.com
4c72980500 Bugzilla bug #64238: removed the unnecessary inclusion of mcom_db.h from
cryptohi.h, pk11func.h, secpkcs7.h, and cms.h.  Some files now need to
include <errno.h>.  They were including <errno.h> indirectly through
mcom_db.h.
Modified Files:
	cmd/atob/atob.c cmd/btoa/btoa.c cmd/derdump/derdump.c
	lib/cryptohi/cryptohi.h lib/pk11wrap/pk11func.h
	lib/pkcs7/secpkcs7.h lib/smime/cms.h lib/ssl/sslsnce.c
2001-01-04 00:44:30 +00:00
wtc%netscape.com
3f770a36f6 Have lib/fortcrypt/Makefile and lib/fortcrypt/swfort/pkcs11/Makefile
include the local config.mk file so that libfort.a and libswft.a don't
get built.
2001-01-03 23:49:48 +00:00
larryh%netscape.com
351f30a205 Bugzilla: 64132. NSS lock instrumentation 2001-01-03 19:51:22 +00:00
larryh%netscape.com
ef56557ca6 Bugzilla: 64132 2001-01-03 01:39:43 +00:00
wtc%netscape.com
1e4d956b10 Added the LIBRARY statements to the .DEF files.
Modified files: nss.def, smime.def, and ssl.def.
2001-01-03 01:31:10 +00:00
wtc%netscape.com
f3840a0b6e Deleted an unnecessary blank line. 2001-01-03 00:59:09 +00:00
mcgreer%netscape.com
2266954d60 fix problem in decrypt 2001-01-02 16:57:47 +00:00
nelsonb%netscape.com
dfe078513f Don't build libfreebl_*_3.a . Just build the .so's. 2000-12-29 23:21:51 +00:00
wtc%netscape.com
ed14a2aca7 Use mapfiles when building the nss, smime, and ssl shared libraries on
Solaris and Linux.
Modified files: nss/config.mk smime/config.mk ssl/config.mk
2000-12-29 07:13:20 +00:00
wtc%netscape.com
4f92128074 Added mapfiles for libnss3.so, libsmime.so, and libssl3.so. The linkers
on Solaris and Linux support mapfiles (also called version scripts).
Added Files:
    nss/mapfile smime/mapfile ssl/mapfile
2000-12-29 06:07:06 +00:00
wtc%netscape.com
a8c1709124 Removed five symbols that shouldn't be exported. 2000-12-29 03:58:40 +00:00
wtc%netscape.com
3e8962790f I found that the Windows linker 'link' pulls from an archive library only
the object files needed to resolve referenced symbols, so we will need to
link with the objects directly as we do on Unix.  As a result, nss3.dll
needs to export more (PKCS7) symbols, needed by the new PKCS12 objects
that are linked into smime3.dll.
2000-12-29 02:50:16 +00:00
wtc%netscape.com
f77af3ca2a I found that the Windows linker 'link' pulls from an archive library only
the object files needed to resolve referenced symbols, so we will need to
link with the objects directly as we do on Unix.  As a result, nss3.dll
needs to export more (PKCS7) symbols, needed by the new PKCS12 objects
that are linked into smime3.dll.
Modified Files:
    coreconf/rules.mk nss/lib/nss/config.mk
    nss/lib/smime/config.mk nss/lib/ssl/config.mk
2000-12-29 02:47:16 +00:00
wtc%netscape.com
007933d882 Built nss3.dll, smime3.dll, and ssl3.dll on Windows. Note that we do
not want the "32" in the DLL names that coreconf adds by default.  We
use module-definition (.DEF) files to control the exported symbols.
Made pkcs7 part of nss3.dll to temporarily work around circular dependency
between nss3.dll and smime3.dll (certread.c depends on some PKCS7 symbols).
Modified files: lib/nss/config.mk, lib/smime/config.mk, lib/ssl/config.mk
2000-12-29 01:16:56 +00:00
nelsonb%netscape.com
16a28a548d This file has been superseded by mpv_sparcv8.s and mpv_sparcv9.s 2000-12-29 01:07:00 +00:00
nelsonb%netscape.com
165ce1171a Implement new mpi function mpi_read_variable_radix(). It's like
mpi_read_radix(), except that if the input stream begins with a leading
zero or "0x", it will interpret the input as octal or hex, respectively.
2000-12-29 01:01:37 +00:00
wtc%netscape.com
e424fb6173 Added Windows module-definition (.DEF) files for nss, smime, and ssl
shared libraries.
Added files: nss.def, smime.def, ssl.def
2000-12-29 00:57:17 +00:00
nelsonb%netscape.com
99f5c067fe Optimized version of these functions, contributed by Sun. 2000-12-29 00:36:31 +00:00
nelsonb%netscape.com
2701ecb476 Add missing release_md target. This will cause the new DSOs to be
included in the released jar files.
2000-12-28 21:35:55 +00:00
nelsonb%netscape.com
30ce773929 Define NSS_USE_HYBRID in hybrid builds. 2000-12-28 04:13:02 +00:00
nelsonb%netscape.com
19aaa707ef Separate the floating point and integer implementations of modular
exponentiation into two functions that can be chosen at run time.
2000-12-28 03:41:50 +00:00
nelsonb%netscape.com
d84a97a8ac Radical change to freebl "32-bit" builds on Solaris and HP-UX "32-bit".
Build two DSOs, both conforming to the platform's 32-bit ABI, one of
which uses only 32-bit instructions, the other uses 64-bit instructions.
Then load the best one for the local CPU at run time.  This allows
greatly enhanced performance on 64-bit CPUs while still supporting older
32-bit CPUs.
2000-12-28 03:39:01 +00:00
nelsonb%netscape.com
3cf4961be7 mapfile defines the public ABI for the new freebl DSOs. 2000-12-28 03:35:43 +00:00
nelsonb%netscape.com
4a9ba412bb Verify vector version and length before relying on the DSO's vector. 2000-12-28 03:26:29 +00:00
wtc%netscape.com
56caa19b5a Bugzilla bug #63832: use $(MAKE) instead of gmake in sub-makes. 2000-12-28 03:07:27 +00:00
wtc%netscape.com
d8b46439c0 More work on shared libraries for NSS.
1. Implemented a way to link all the objects in archive libraries into
   a shared library.  I query each subdirectory for the list of objects
   comprising an archive library (the get_objs makefile target) and link
   these objects as opposed to the archive libraries.  Not all linkers
   support the --whole-archive, -all, or -z allextract options.  The
   *sym.c solution cannot fully control what objects in the archive
   libraries are pulled and what symbols are exported.
2. Moved pkcs7 from libsmime3.so to libnss3.so because certread.c in
   libcerthi.a (part of libnss3.so) depends on some PKCS7 functions,
   which creates a circular dependency between libsmime3.so and libnss3.so.
This should work on all Unix platforms.
2000-12-28 02:22:33 +00:00
wtc%netscape.com
fe524519f7 Bugzilla bug #63815: this AIX compilation problem only occurs in 64-bit
builds.  lib/softoken/pkcs11c.c also needs the workaround.
Modified files: lib/pk11wrap/Makefile, lib/softoken/Makefile
2000-12-28 00:35:26 +00:00
nelsonb%netscape.com
85579df540 Detect null slot pointer instead of crashing. 2000-12-27 21:31:39 +00:00
wtc%netscape.com
a766ac4429 Bugzilla bug #63815: a workaround for IBM xlC_r 3.6.6 (on AIX 4.3) to
compile pk11slot.c.
2000-12-27 20:58:38 +00:00
wtc%netscape.com
46ef2e65b7 Bugzilla bug #63807: fixed function prototype of SHA1_TraceState. 2000-12-27 18:47:57 +00:00
nelsonb%netscape.com
b41b82ce9d This code permits multiple implementations of freebl to coexist for a
single platform.  The best implementation for the local CPU is dynamicly
loaded at run time.  Requires DSOs to be in the LD_LIBRARY_PATH or
equivalent (e.g. SHLIB_PATH).
2000-12-27 03:20:04 +00:00
nelsonb%netscape.com
855cec4af9 Stubs for RC5 functions. This is NOT a working implementation of RC5. 2000-12-27 03:16:59 +00:00
nelsonb%netscape.com
f7c24847c7 Attempt to clarify code to reduce confusion about side effect of
MP_CHECKOK macro.
2000-12-27 03:14:28 +00:00
nelsonb%netscape.com
29c09b0208 Ensure function SHA1_TraceState is always defined, even when TRACING_SSL
is not defined.
2000-12-27 02:41:59 +00:00
nelsonb%netscape.com
3dc39fe215 Change HP 64-bit and hybrid builds to use new HP assembly code.
Fix uses of $(LIB).
2000-12-27 02:08:54 +00:00
nelsonb%netscape.com
9e517f5d33 The Initial Developer of the Original Code is Netscape
Communications Corporation.  Portions created by Netscape are
Copyright (C) 2000 Netscape Communications Corporation.  All Rights
Reserved.
2000-12-27 01:48:25 +00:00
nelsonb%netscape.com
ed7c69d604 The Initial Developer of the Original Code is the Hewlett-Packard Company.
Portions created by Hewlett-Packard Company are
Copyright (C) 1999 Hewlett-Packard Company.  All Rights Reserved.
2000-12-27 01:45:23 +00:00
nelsonb%netscape.com
14f9d75af8 The Initial Developer of the Original Code is the Hewlett-Packard Company.
Portions created by Hewlett-Packard Company are
Copyright (C) 1997 Hewlett-Packard Company.  All Rights Reserved.
2000-12-27 01:44:44 +00:00
mcgreer%netscape.com
be387f833b merge from branch (this process will be fixed, someday) 2000-12-22 19:23:41 +00:00
relyea%netscape.com
065da8f734 Shared library changes.
Three directories pull the NSS libraries together into a three shared libaries:
nss, ssl, and smime. Symbols need to be exported by the DLL from the imported
libraries are defined in XXX/XXXsym.c Library linkage is controlled by
XXX/config.mk
2000-12-22 17:16:24 +00:00
nelsonb%netscape.com
2b04b7346c Revise mp_div and s_mp_div substantially. Reduce the number of temporary
variables.  Eliminate inner loop of shifts from s_mp_div.
2000-12-20 05:54:18 +00:00
mcgreer%netscape.com
49ed8cb93a initial checkin of Rijndael (AES) implementation. Only blocksize == 128 bits
has been tested on this checkin.
Added make target "rijndael_tables", which will generate rijndael32.tab.
2000-12-19 23:43:12 +00:00
nelsonb%netscape.com
f6d5a84b79 Correct make variable name for AIX. 2000-12-15 06:00:55 +00:00
nelsonb%netscape.com
a758f782ec Change AIX 32-bit options to use new fine-grained feature test macros. 2000-12-15 05:54:08 +00:00
nelsonb%netscape.com
fd321489ff Implement new feature test macros for controlling the use of mp_word over
individual types of operations, e.g., multiply, divide, add, subtract.
Use a specific combination of these for 32-bit on AIX.
2000-12-15 05:38:09 +00:00
nelsonb%netscape.com
cbcc0658f2 Add missing Makefile lines to build mpi optimally for AIX 32 and 64-bit. 2000-12-15 03:01:23 +00:00