Commit Graph

1057 Commits

Author SHA1 Message Date
relyea%netscape.com
9e28385aa3 JSS integration bug 77662 . Allow Verification by passing the signature at the
end of the process rather than at the beginning.
2001-05-01 23:59:27 +00:00
relyea%netscape.com
8b5d6059c9 Add .asm to the vpath as well. 2001-05-01 00:22:30 +00:00
relyea%netscape.com
7f6d97c8f1 Set vpath up so builds in readonly trees will work. 2001-04-30 21:52:46 +00:00
relyea%netscape.com
d81b780d84 Changes to allow NSS to build in to a separate object tree. 2001-04-30 16:40:19 +00:00
nelsonb%netscape.com
80046e3076 MPI now uses assembler code for Solaris i86pc. 2001-04-27 20:49:17 +00:00
nelsonb%netscape.com
142643b2df A version of the Intel assembler code for Solaris i86pc's as assembler. 2001-04-27 20:47:39 +00:00
nelsonb%netscape.com
a87ed3e7fe Build freebl on Solaris x86 with either gcc or Forte'. Not yet using
x86 assembler sources though.  That's TBD.   Bug 73115.
2001-04-27 04:17:59 +00:00
nelsonb%netscape.com
e49455a04c Eliminate cause of assertion failure that occurs when SSL is not the top
protocol on the socket's stack.
2001-04-26 21:53:11 +00:00
relyea%netscape.com
43b7fe814b Fix NT build problems. 2001-04-25 16:35:25 +00:00
relyea%netscape.com
b435cc8059 Back out changes which prevent NT from building. Need to figure something else out (sigh).
bob
2001-04-25 16:34:33 +00:00
kirke%netscape.com
f5d55452bc 64970 stress tests don't fail when selfserver is gone
Added -q argument (quit after about 60 seconds waiting for selfserv).
2001-04-24 23:02:34 +00:00
javi%netscape.com
fce94ea97d Fix for Bug 75950. The loadable root certs module on Mac caused
an assertion every time when loaded because of 2 sets of PR_*
functions being loaded.
2001-04-24 22:39:34 +00:00
sonmi%netscape.com
7f938458d1 changed BCDIST again after NT failures because of unix style path 2001-04-24 21:48:01 +00:00
relyea%netscape.com
c0f1668066 Role an 2.8.5 fix forward. (fix for O= dependencie in generating a nickname). 2001-04-24 21:27:40 +00:00
relyea%netscape.com
d530cbbec8 Export function to extract the public key from a subject key info
for JSS to use for CMS.
2001-04-24 20:04:14 +00:00
relyea%netscape.com
504b359984 Make sure the signature key verification checks get ran if the key can
do signing.
2001-04-24 20:02:52 +00:00
relyea%netscape.com
7818d0eda2 Patch to make the build work in both traditional and re-directed object mode. 2001-04-24 19:52:06 +00:00
relyea%netscape.com
1787fc7d5e Add client requested features to coreconf:
building cross platform.
        targetting the Objects to a separate tree.
2001-04-24 17:05:18 +00:00
relyea%netscape.com
e3c9c38158 Add client requested features to coreconf:
building cross platform.
        targetting the Objects to a separate tree.
2001-04-24 16:47:50 +00:00
sonmi%netscape.com
4dc4b35854 made changes so script (-t) can be run on NT 2001-04-24 00:38:21 +00:00
sonmi%netscape.com
eb90dd6ee2 made changes to the backward compatibility test master dir, so the
master dir does not need to come from the same nssver (for example tip, 32...)
now only a change in the variable BC_MASTER is needed to test against a
different build
2001-04-24 00:37:38 +00:00
sonmi%netscape.com
e86fbbb9ac fixed problems with teh returncode of cert.sh 2001-04-20 21:35:04 +00:00
sonmi%netscape.com
0b64a39959 added -D to the selfserver 2001-04-20 20:50:24 +00:00
sonmi%netscape.com
4a957e9c47 changed the errorcode once more, now there is a system, the higher the
errorcode the more QA errors were encountered
No matter which errors are being found, QA will try to finish the other tests,
so we can't indicate the kind of failure with the returncode
0 means QA passed
open tinderbox issues: results are being put underneath the tinderbox build
this is easy to change by setting the varialbel $RESULTDIR
2001-04-20 01:52:42 +00:00
sonmi%netscape.com
3e17cbfdc3 changes to be able to run qa locally on a tinderbox build 2001-04-20 00:52:11 +00:00
sonmi%netscape.com
646c3e656c changed trustargs on import personal certificates for s/mime
from u,u,u (trusted user) to p,p,p (peer certificate)
2001-04-20 00:32:15 +00:00
sonmi%netscape.com
7251dc781b tinderbox platformlist - which platforems are required to run which tests 2001-04-18 00:28:22 +00:00
sonmi%netscape.com
0381455be0 started tinderbox addition, intermediate checkin 2001-04-17 00:00:58 +00:00
sonmi%netscape.com
62924332a5 added parameters for linux grep 2001-04-13 21:42:18 +00:00
sonmi%netscape.com
aa2b2e9685 added more information to the QA report
ported to linux
added special "before contesxt" and "after context" parameters to grep when
running on linux
2001-04-13 21:41:16 +00:00
nicolson%netscape.com
94755d42a1 Fix bug 75770: RSA_NewKey returns an incomplete key. Reviewed by mcgreer
and nelsonb.
2001-04-12 20:23:42 +00:00
nelsonb%netscape.com
9bd14a2bc5 Merge in NSS 3.2.1 changes. (VersionCheck function) 2001-04-11 22:52:09 +00:00
nelsonb%netscape.com
2eefc0c170 Merge in NSS 3.2.1 changes. 2001-04-11 22:49:07 +00:00
nelsonb%netscape.com
b2d4d53739 Merge in changes from NSS 3.2.1. 2001-04-11 22:47:14 +00:00
nelsonb%netscape.com
7108ab8829 Merge NSS 3.2.1 changes. 2001-04-11 22:45:40 +00:00
nelsonb%netscape.com
adbd40bef7 Merge in NSS 3.2.1 changes into nss.def. Update version to 3.3 Beta. 2001-04-11 22:42:28 +00:00
nelsonb%netscape.com
1fb4834339 Merged in changes from NSS_3_2_BRANCH. 2001-04-11 22:28:11 +00:00
nelsonb%netscape.com
45d40e4d84 Merge change from NSS_3_2_BRANCH. Use DBM 1_55_RTM instead of 1_54. 2001-04-11 22:16:29 +00:00
sonmi%netscape.com
cc708addc2 fixed problem, now links are seperated where they should be 2001-04-11 20:48:04 +00:00
javi%netscape.com
4016a3fd40 Tell coreconf where the nspr header files are in the mozilla client
build.
2001-04-11 20:40:30 +00:00
sonmi%netscape.com
d15ffc5a89 fixed win2K bugs 2001-04-11 20:19:58 +00:00
sonmi%netscape.com
5394e43468 ported to linux, fixed Win2K missing problem - this version is broken and
needs to be replaced again
2001-04-11 20:09:53 +00:00
sonmi%netscape.com
e4f742f9fd added variable RMAIL so qa_stat can use sendmail on linux 2001-04-11 20:07:04 +00:00
sonmi%netscape.com
fd764aadc2 fixed rmail problem, several problems with running qa_stat on linux
took out the never working -l local option
2001-04-11 20:05:48 +00:00
nelsonb%netscape.com
aee93030c0 Remove unnecessary global tables of cipherSuite numbers. This solves
a problem with gcc on Linux, which overrides local/automatic definitions
with global ones.
2001-04-11 20:03:22 +00:00
sonmi%netscape.com
68de6c1aac added Win2K 2001-04-11 20:02:43 +00:00
nelsonb%netscape.com
f8e2a2a948 Implementation of 5 DHE ciphersuites, client side only.
Contributed by Dr Stephen Henson <stephen.henson@gemplus.com>
2001-04-11 00:29:18 +00:00
sonmi%netscape.com
8d44b495a4 fixed an sed command toi get process ID of tail -f on NT 2001-04-10 22:34:19 +00:00
sonmi%netscape.com
eeaea4c91d fixed a stresstest failures were not recognized by this script 2001-04-10 18:39:14 +00:00
bryner%uiuc.edu
79912dede8 Fixing NSS to know about the new include path for NSPR. Patch from cls, r=bryner. 2001-04-07 07:22:18 +00:00
nelsonb%netscape.com
3b182de89f Merge changes from NSS_3_2_BRANCH. Fix backward compatibility issues. 2001-04-06 17:47:15 +00:00
sonmi%netscape.com
1024501661 updated 2001-04-04 23:28:57 +00:00
sonmi%netscape.com
53bf6dffde removed unneccessary variables 2001-04-04 00:31:59 +00:00
sonmi%netscape.com
768eccfd85 workaround, when running backward compatibility tests pk12util tests don't run 2001-04-04 00:29:27 +00:00
sonmi%netscape.com
4c0da07bc0 added functionallity for backward compatibility testing, improved messages 2001-04-04 00:28:12 +00:00
sonmi%netscape.com
262ccc1479 added backward compatibility tests 2001-04-04 00:23:18 +00:00
sonmi%netscape.com
8c075bc586 added functionallity for backward compatibility testing 2001-04-04 00:22:43 +00:00
sonmi%netscape.com
4fd12678a2 improved usage and parameters, reduced connections from 5 to 1 2001-04-02 17:32:48 +00:00
nelsonb%netscape.com
661c26b99c Fix a couple of memory leaks that occur in rare error paths. 2001-03-31 02:49:59 +00:00
nelsonb%netscape.com
b4e192dc29 Fix leak of cert reference in cert authentication callback functions. 2001-03-30 00:40:24 +00:00
sonmi%netscape.com
309ff2e156 added RSH variable, since 4 out of 5 rsh on NT don't work as expected... 2001-03-28 00:04:37 +00:00
sonmi%netscape.com
308b720dd1 fixed a win2K MKS problem (PATH seperator) 2001-03-28 00:03:59 +00:00
sonmi%netscape.com
74c9db24b6 changes for the new distributed stress test
-) split generating of cert into 2 functions, so we can add any
      number of certs to an existing Database
   -) added function to generate n certs for the stress test (run
      from the server side)^M
2001-03-28 00:03:02 +00:00
sonmi%netscape.com
af96184467 changes for the new distributed stress test
-) improved errormessages
   -) changes to get around the DNS/ipaddress problem
   -) changes necessary for the remote side of the distributed test
        running in the server's directory structure
        messages and errormessages
   -) changes for the server side of the dist. stress test
        set $RSH for windows
        set variables for the certdatabase of the dist stress test
2001-03-28 00:02:27 +00:00
sonmi%netscape.com
3e4ef196fb changes for the new distributed stress test
-) to get around the DNS/ipaddress problem
   -) be sourcable from ssl_dist_stress.sh (share a lot of functionality)
2001-03-28 00:01:43 +00:00
sonmi%netscape.com
f9ebd65d76 distributed stress test
new script to run the server and the remote side of the test
   -) have cert.sh generate certs
   -) start a server
   -) launch strsclnts via rsh, each rsh with a range of certs to use
   -) wait 10 minutes
   -) shut down the server
2001-03-28 00:00:48 +00:00
nelsonb%netscape.com
2ed1feb8e1 Eliminate the old global arena lock. Each ArenaPool now has its own lock.
The new PORTArenaPool struct, an extended PLAreanaPool, is used in place
of PLArenaPools.
2001-03-23 23:40:09 +00:00
sonmi%netscape.com
9a48fb2883 took out yesterday's change, since it did not work 2001-03-23 21:11:14 +00:00
relyea%netscape.com
48b8d71340 Change structure passing to pointer passing.
removed debugging printf's
2001-03-23 19:33:59 +00:00
sonmi%netscape.com
50d8957c5e put Ian's fix to the HP coredump back, call cmsutil without parameters prior
to any cmsutil action
2001-03-23 00:39:57 +00:00
sonmi%netscape.com
70103e5231 searching for "error" "failed" and "fatal" in the output logs 2001-03-21 21:29:48 +00:00
nelsonb%netscape.com
cc91679cd9 Add function SECU_PrintBuf() which prints a buffer in hex and ASCII. 2001-03-20 04:23:38 +00:00
nelsonb%netscape.com
3ef58c1b72 Fix bug in SSL_ResetHandshake introduced in last checkin. 2001-03-20 00:39:02 +00:00
javi%netscape.com
5e88efda34 Add new sources from freebl to the Mac project. 2001-03-19 19:06:42 +00:00
nelsonb%netscape.com
46c15355d3 Reinterpret the READ and WRITE poll flags depending on the state of the
socket and the SSL handshake.  Rename the badly named "connected" flag.
Bugzilla bugs 56924, 56926, 66706.
Modified Files:
    ssl3con.c sslauth.c sslcon.c ssldef.c sslgathr.c sslimpl.h
    sslsecur.c sslsock.c
2001-03-16 23:26:06 +00:00
nelsonb%netscape.com
a6ff2f9594 Build changes for Solaris and gcc. Get gcc to use the proper architecture
flags when building v8plus code on Solaris/Ultrasparc.  Use gcc instead of
ld to build the freebl DSOs when using gcc on Solaris.  And stop using the
"sparkfix" program on Solaris.  It is no longer needed.  Bug 69052.
2001-03-14 23:30:37 +00:00
relyea%netscape.com
81bc3e2f3d Make the nss_build_all target work on NT. 2001-03-14 19:12:30 +00:00
javi%netscape.com
edf7e1032b Fix for Bug 71889 Null out secmodname during NSS_Shutdown so that a later call to NSS_Init succesfully initializes the SECMOD libraries. Also, free the memory allocated to allocated the name of the keydb and remove an unused local variable. 2001-03-14 18:58:14 +00:00
relyea%netscape.com
985011a4d9 Add code to all the nss pre-reqs with a single target. 2001-03-14 18:08:25 +00:00
relyea%netscape.com
b22a7c1f09 bug 70992 patches to build 4.2 BSD 2001-03-13 19:02:05 +00:00
relyea%netscape.com
a23285e902 DES key gens need to fall through to set the rest of their attributes
(remove spurious break). S/MIME should function again after this.
2001-03-13 00:04:51 +00:00
relyea%netscape.com
37306c1267 CK_ULONG != unsigned int on 64 bit platforms. Fix the cast which was obviously
put in to remove a warning.

bug 70713
2001-03-10 01:35:17 +00:00
relyea%netscape.com
9d9fb5174d Fix AIX 64 bit tools failure. For some reason the 64 bit compilier didn't like
the massive switch statement. The new code is easier to read anyway now.
bug 70713
2001-03-10 01:34:08 +00:00
thayes%netscape.com
e4cd41a92c Bug 71323: set MOZILLA_CLIENT when building in client make environment 2001-03-09 01:08:44 +00:00
relyea%netscape.com
75275b086f Bug 70657 . Old CERT DB doesn't always get closed after migration. 2001-03-07 17:34:44 +00:00
relyea%netscape.com
6e3e253b55 Fix Bug 70441 where ava fields with one or two characters are not formatted properly. 2001-03-07 17:31:53 +00:00
sonmi%netscape.com
bed15077e8 fixed a typo in an echo 2001-03-03 01:59:29 +00:00
sonmi%netscape.com
76ed4ee73c fix for bug 69582, empty scripts due to a full /tmp cause programms to
bahave wrong - instead of generating temorary scripts the input comes directly
from this script, redirected via <<
2001-03-03 00:14:17 +00:00
sonmi%netscape.com
6b28b0ebd9 added fix fo bug 69588 - QA failure not recognized - now a certain #
of passes is reqiired, otherwise an incomplete line is generated
if more tests than expected a warning is issued in the text scetion
2001-03-02 23:37:21 +00:00
nelsonb%netscape.com
e42af5fa30 Use $TMP, $TMPDIR, or $TEMP for directory to hold server SID cache file.
Implements RFE 70617.
2001-03-02 02:52:21 +00:00
javi%netscape.com
199f51be6f Add a -C lib to the gmake line to prevent nmake from getting
confused.
2001-03-01 22:54:10 +00:00
kirke%netscape.com
f0fde27571 Bug 69582 endless loop on EOF reading Extensions 2001-03-01 21:45:33 +00:00
sonmi%netscape.com
8c56e52ac3 tools tests activated 2001-03-01 19:48:52 +00:00
relyea%netscape.com
9d01803642 change '-p' to '-P' to be consistant with other tools. 2001-03-01 01:21:56 +00:00
sonmi%netscape.com
1effa6fb8f was still running ksh 2001-03-01 00:43:24 +00:00
sonmi%netscape.com
e82d67c3ce restructuring of NSS QA 2001-03-01 00:40:38 +00:00
sonmi%netscape.com
a5f4cb28ec restructuring of NSS QA 2001-02-28 23:35:21 +00:00
nelsonb%netscape.com
36f08d78d2 Increase the temp cert db's memory buffer size from 64KB to 256KB.
This reduces the liklihood that it will overflow into a disk file.
This is a partial fix for bug 67953.
2001-02-28 22:50:12 +00:00
sonmi%netscape.com
1ae750085c complete restructuring and cleanup of the QA suites.
bug 65000 and 68878
2001-02-28 22:12:47 +00:00
relyea%netscape.com
4c010838b2 On NT, it looks like isatty doesn't always work. Since we always use stdin for this use
that test instead.
2001-02-28 01:58:02 +00:00
relyea%netscape.com
a1f1e67e84 Finish WinNT changes. 2001-02-28 01:57:08 +00:00
relyea%netscape.com
c2baea888a Add '-p' to specify a dbprefix.
Move the Tempfile created on input to /tmp so the code works in directories
that aren't writeable.
Fix the code to remove the Tempfile when done.
Use SECU_ConfigureDir so that we get the same defaultdb as other tools.
2001-02-28 01:21:11 +00:00
javi%netscape.com
eed9cb7afe Merge the changes from NSS_CLIENT_TAG onto trunk. 2001-02-27 21:43:33 +00:00
sonmi%netscape.com
777a319b9d improvements, bugfixes, intermediate checkin before trying to make
everything run in . and relative paths to also work on cygnus
not yet activated
2001-02-23 02:23:05 +00:00
mcgreer%netscape.com
7a923cca51 fix for #63982, -o not using file password 2001-02-22 23:35:17 +00:00
relyea%netscape.com
34316080bc Fix mismatched parameter problem. 2001-02-22 18:27:28 +00:00
sonmi%netscape.com
398b270c48 new script to do the certificate portion of the nss QA 2001-02-21 23:56:14 +00:00
relyea%netscape.com
bc28489209 Fix bug 69471 and bug 69472 : Memory leak in PK11_VerifyMechanisms and incorrectly
calling EnterSlotMonitor rather than ExitSlotMonitor on an error condition.

bob
2001-02-21 22:22:33 +00:00
relyea%netscape.com
2293bbf9d7 Leave a reference to the static version strings so agressive linkers linkers
like AIS won't optimize the id strings away.
2001-02-21 22:18:42 +00:00
relyea%netscape.com
6e2d9268f5 Add wrapper bindings for AES so S/MIME and SSL may implement their AES suites. 2001-02-21 19:52:12 +00:00
sonmi%netscape.com
2f51414a3f added a function to watch for hanging rsh processes, if an rsh does not
return for 60 seconds it will be killed
2001-02-21 01:53:00 +00:00
sonmi%netscape.com
4bab82b1f7 test choked on a ]# - replaced by ] # 2001-02-20 23:11:55 +00:00
sonmi%netscape.com
7182d1fa38 formatted to tabstop 8 2001-02-20 22:00:50 +00:00
sonmi%netscape.com
e5449804e3 formated to tabstop 8 2001-02-20 21:55:47 +00:00
sonmi%netscape.com
967a27a3cc deleted comments, formated with tabstop 8 2001-02-20 21:53:52 +00:00
sonmi%netscape.com
d56d55b69b formatted according to the nss tab 8 rules 2001-02-20 21:49:30 +00:00
relyea%netscape.com
0a1f85a8bd OK, let's not get sloppy on the types... flags should be a PRUint32. 2001-02-10 02:05:19 +00:00
relyea%netscape.com
126437e7e3 Make the public interface use a flags variable instead of a billion little
Bools.

suggested and reviewed by wtc in bug 66230
2001-02-10 02:03:03 +00:00
relyea%netscape.com
3d2bfa7d13 Bug 68234. Handle automatic update of NES2.0, and NES 3.X databases.
reviewed by nelsonb
2001-02-10 01:44:34 +00:00
mcgreer%netscape.com
47e7b4834f add a script for testing various nss commands. not run by default for now. 2001-02-09 22:06:16 +00:00
nelsonb%netscape.com
ecb09e90e8 Modify ssl_FindSocket() to set error PR_BAD_DESCRIPTOR_ERROR when it
cannot find the SSL layer on the specified PRFileDesc. Ensure all
callers detect when ssl_FindSocket returns NULL and handle it properly.
Bug 68241. Reviewed by jgmyers and relyea.
Modified Files:
 	prelib.c sslauth.c sslsecur.c sslsock.c
2001-02-09 02:11:31 +00:00
relyea%netscape.com
a2d46ed98c update certutil and modutil to use the new NSS_Initialize signature.
modutil can now specify it's nocertdb paramter.

bug 64260 reviewed by wtc
2001-02-09 01:38:04 +00:00
relyea%netscape.com
9a4a2d9ddb Allow applications to initialize nss without necessarily initializing databases.Needed to keep old modutil semantics. Bug 66230. reviewed by wtc. 2001-02-09 01:34:12 +00:00
relyea%netscape.com
ea8de3c817 Move cdbhdl.h to private exports. bug 64260 revied by nelsonb. 2001-02-09 01:32:42 +00:00
nelsonb%netscape.com
01bdbccb5d Allow application to customize cert verification slop time.
Default is 24 hours.  Bug 48300. Reviewed by wtc.
Modified Files:
 	lib/nss/nss.def lib/certdb/cert.h lib/certdb/certdb.c
2001-02-09 01:06:41 +00:00
nelsonb%netscape.com
7dcf6f9722 Make SSL API consistent in using SECStatus as return value for functions
that return only values in that enumeration.  Bug 68097. R&A = relyea.
Modified Files:
 	lib/ssl/ssl.h lib/ssl/sslauth.c lib/ssl/sslsecur.c
 	lib/ssl/sslsnce.c lib/ssl/sslsock.c cmd/selfserv/selfserv.c
 	cmd/strsclnt/strsclnt.c
2001-02-09 00:32:14 +00:00
javi%netscape.com
4e85b7019a Fix for Bug 68063 r=nelsonb, a=wtc Make NSS_Init backwards compatible for the Mac. 2001-02-08 23:43:00 +00:00
nelsonb%netscape.com
9c6844617f Changes suggested by Wan-Teh. 2001-02-08 01:32:32 +00:00
wtc%netscape.com
18e1a7aec5 Set NSS version to 3.2. 2001-02-08 01:22:01 +00:00
wtc%netscape.com
782588654c Need to include "prthread.h" for the PRThread type. 2001-02-07 17:50:43 +00:00
nelsonb%netscape.com
720374d8c3 When half-duplex applications (e.g. one thread per socket, doing alternate
reading and writing) call PR_Send and PR_Recv with a non-infinite timeout
value, use that value for both underlying read and write operations.
Fixes bug 67402.  Reviewed by Wan-Teh.
2001-02-07 02:06:05 +00:00
nelsonb%netscape.com
e9439fc5c2 Big changes to get better SSL performance out of selfserv.
Launch all connection handler threads at program startup, and reuse those
threads for new connections, rather than creating new threads for each
connection and having them terminate at the end of each connection.
The main thread is now the acceptor thread.  It creates a queue of
accepted but unprocessed connections.  NSPR Condition variables are used
to schedule the connection handler threads.
Only one GET /stop message is now required to terminate selfserv.
Note, the -2 (full duplex) option is temporarily disabled until I get it
to work with this new thread model.
Add new -D command line option to suppress TCP Nagle delays.
Used to verify the fix to bug 67898.
2001-02-07 01:56:30 +00:00
nelsonb%netscape.com
c216172478 Add new -D command line option to suppress TCP Nagle delays.
This is used to verify the fix for bug 67898.
2001-02-07 01:50:46 +00:00
nelsonb%netscape.com
4207bb1bdb Coalesce the final Finished message in the SSL handshake and the first
record of application data into a single write, when possible, to avoid
TCP's "Nagle" delays.  Fixes bug 67898.  r&a: wtc.  Modified Files:
	ssl3con.c sslimpl.h sslsecur.c sslsock.c
2001-02-07 00:34:56 +00:00
mcgreer%netscape.com
532933e0be bug 67132. certutil crashes on -C -x combination, deny it for now.
certutil -C was not recognizing the -a (ascii) option, implement it.
r=wtc
2001-02-06 18:26:30 +00:00
relyea%netscape.com
0373ca7fe5 Bug 67501: Fix suggested by Nelson. Make '-d' option work again in sdrtest. 2001-02-06 01:05:21 +00:00
relyea%netscape.com
f1ffa04d9e Bug 67068. Fix Crash in SECMOD_Shutdown. reviewed by wtc. 2001-02-06 00:11:24 +00:00
relyea%netscape.com
42e1aaee86 Fix error value to return a less misleading generic error when the bignum libraries fail 2001-02-06 00:09:54 +00:00
wtc%netscape.com
804472db43 Bugzilla bug #60143: checked in OpenVMS patch from Colin Blake
<colin@theblakes.com>.
Modified Files:
	coreconf/OpenVMS.mk coreconf/arch.mk coreconf/rules.mk
	coreconf/ruleset.mk nss/cmd/lib/secpwd.c nss/lib/nss/nss.h
	nss/lib/nss/nssinit.c
2001-02-04 05:52:42 +00:00
mcgreer%netscape.com
c4d36363d2 get pk12util working with shared libs. Change ciphersuites to
be disabled by default to allow user control.  Export a couple
more functions to allow ciphersuite preferences.
2001-02-02 15:24:29 +00:00
wtc%netscape.com
a83eb31b00 Bugzilla bug #63768: removed references to the obsolete PURE_LIBRARY,
HAVE_PURIFY etc. make variables in NSS files.  Reviewed by nelson Bolyard.
Modified Files:
	cmd/platrules.mk cmd/crmf-cgi/config.mk cmd/crmftest/config.mk
	cmd/lib/config.mk cmd/zlib/config.mk lib/base/config.mk
	lib/certdb/config.mk lib/certhigh/config.mk lib/ckfw/config.mk
	lib/crmf/config.mk lib/cryptohi/config.mk
	lib/fortcrypt/swfort/config.mk lib/freebl/config.mk
	lib/jar/config.mk lib/nss/config.mk lib/pk11wrap/config.mk
	lib/pkcs12/config.mk lib/pkcs7/config.mk lib/smime/config.mk
	lib/softoken/config.mk lib/ssl/config.mk lib/util/config.mk
2001-02-02 01:49:57 +00:00
javi%netscape.com
b8986c4568 Bring projects up to date for NSS 3.2 2001-02-01 21:52:03 +00:00
relyea%netscape.com
2c9a42201b Add code to shutdown the PKCS #11 subsystem so NSS can be called to switch profiles. 2001-02-01 19:09:23 +00:00
relyea%netscape.com
261bf7afac remove cdbhdl.h and recode. bug 64206 reviewed by wtc. 2001-02-01 19:05:10 +00:00
relyea%netscape.com
0f7d6dba5f remove cdbhdl.h bug 64260 reviewed by wtc. 2001-02-01 18:09:50 +00:00
kirke%netscape.com
c1a3909887 Resolved merge conflict with Ian. 2001-02-01 01:29:04 +00:00
kirke%netscape.com
eb932053fa Fixed bogus tab introduced by my previous checkin. 2001-02-01 00:57:26 +00:00
wtc%netscape.com
899e61b6cb Bugzilla bug #62855: added stubs for the SSL session cache functions so
that selfserv can link without unresolved symbols on OS/2.
2001-01-31 23:43:47 +00:00
kirke%netscape.com
b4bed1dcdb Resolves bug 66244 - Many NSS command do not detect failure of NSS_Init* functions. Introduced SECU_PrintPRandOSError(progName); to print on failure. Each command is responsible for exiting with appropriate status to distinguish failure points. 2001-01-31 23:25:02 +00:00
wtc%netscape.com
1ca200c1e1 Bugzilla bug #62855: checked in OS/2 makefile patches from Javier
Pedemonte <pedemont@us.ibm.com>.
Modified Files:
	coreconf/OS2.mk coreconf/arch.mk coreconf/prefix.mk
	coreconf/rules.mk coreconf/suffix.mk nss/Makefile
	nss/cmd/platlibs.mk nss/lib/ckfw/builtins/config.mk
2001-01-31 21:29:31 +00:00
wtc%netscape.com
39bfa805f3 I found that #include <unistd.h> is still needed on Unix for getpid(). 2001-01-31 19:18:09 +00:00
wtc%netscape.com
0669b974b3 Bugzilla bug #62855: checked in OS/2 patches from Javier Pedemonte
<pedemont@us.ibm.com>.
Modified files: selfserv.c, swfutl.c, os2_rand.c.
2001-01-31 19:09:48 +00:00
wtc%netscape.com
2d031feba0 Bugzilla bug #62855: do not use the XP_PC macro. Use XP_WIN16 when we mean
Win 16.  Thanks to Javier Pedemonte <pedemont@us.ibm.com> for the patch.
2001-01-31 18:27:15 +00:00
wtc%netscape.com
586b10f4c5 Bugzilla bug #67122: put PR_CALLBACK after the return type in function
declarations.  This is the order required by OS/2 compilers.  Thanks to
Javier Pedemonte <pedemont@us.ibm.com> for the patch.
Modified files: hashops.c, tracker.c, certt.h, oid.c.
2001-01-31 18:01:53 +00:00
mcgreer%netscape.com
57379e33fe bug 67100, memory leaks in rsa.c and pqg.c fixed. 2001-01-31 15:49:19 +00:00
wtc%netscape.com
f3e44424d8 Backed out the previous checkin as it requires
sec_port_ucs4_utf8_conversion_function and
sec_port_ucs2_utf8_conversion_function be exported on Unix.
2001-01-31 03:44:43 +00:00
wtc%netscape.com
218134872a We can just pass NULL as the 'envp' argument to PR_CreateProcess, so we
do not need to get the declaration of 'environ' on Unix.  Reviewed by
Nelson Bolyard.
2001-01-31 03:39:59 +00:00
nelsonb%netscape.com
e69cdb69fa Fix memory leak in mpp_make_prime. Bug 67094. 2001-01-31 00:37:40 +00:00
wtc%netscape.com
104ac36a8d Bugzilla bug #66367: rename the internal NSS functions that we have to
export from the NSS shared library.  Reviewed by Bob Relyea.
Modified Files:
	nss/lib/certdb/certdb.c nss/lib/certdb/pcertdb.c
	nss/lib/nss/Makefile nss/lib/nss/manifest.mn
	nss/lib/nss/nss.def nss/lib/pk11wrap/pk11skey.c
	nss/lib/pkcs12/p12d.c nss/lib/pkcs12/p12e.c
	nss/lib/pkcs12/p12local.c nss/lib/pkcs7/certread.c
	nss/lib/pkcs7/p7decode.c nss/lib/pkcs7/p7encode.c
	nss/lib/smime/cmsutil.c nss/lib/softoken/secpkcs5.c
	nss/lib/ssl/ssl3con.c nss/lib/ssl/sslcon.c
	nss/lib/ssl/sslnonce.c nss/lib/ssl/sslsnce.c
	nss/lib/util/nsslocks.c
Added Files:
	nss/lib/nss/nssrenam.h
2001-01-30 21:02:28 +00:00
mcgreer%netscape.com
b0f6416250 change pk12util to use shared libs. 2001-01-30 19:49:52 +00:00
mcgreer%netscape.com
60a4d653fb export PKCS#12 symbols via the S/MIME DSO. Change default cipher list
to enable all available ciphersuites.
2001-01-30 19:47:39 +00:00
wtc%netscape.com
2a8e617b8b Bugzilla bug #66889: do not export the Windows import libraries for the
loadable PKCS#11 modules fort32.dll, swft32.dll, and nssckbi.dll.
Reviewed by Bob Relyea.
Modified files:
	nss/lib/ckfw/builtins/Makefile nss/lib/ckfw/builtins/config.mk
	nss/lib/fortcrypt/config.mk
	nss/lib/fortcrypt/swfort/pkcs11/config.mk
2001-01-30 19:43:26 +00:00
wtc%netscape.com
a122eb5a2e Bugzilla bug #54989: Use the AIX -brtl linker option to link the NSS
utilities with NSPR shared libraries.  Reviewed by Bob Relyea.
2001-01-30 19:11:22 +00:00
wtc%netscape.com
2caddf43c1 Bugzilla bug #64306: added stubs for PR_SetError and PR_SetErrorText.
Reviewed by Nelson Bolyard.
2001-01-30 02:03:47 +00:00
wtc%netscape.com
ea7ef76a25 Bugzilla bug #63935: use our own macro LINUX instead of the compiler
predefined macro __linux as __linux is not defined by some compilers.
Thanks to jsmith@penguinppc.org for the bug report and a suggested fix.
2001-01-30 01:52:47 +00:00
mcgreer%netscape.com
d27b33644d handle leading zeroes in q bug (66558). suggested by nicolson; r=mcgreer,a=wtc 2001-01-29 14:24:57 +00:00
mcgreer%netscape.com
46aebc320c Per bug #66551, remove all HMAC_ calls from exported symbol list. All
HMAC_ functionality can be done the PKCS#11 interface.
2001-01-27 16:38:45 +00:00
mcgreer%netscape.com
673e033338 Change all HMAC_ calls to use PKCS#11 interface. Now the PKCS#12 library
only depends on functions already exported from the NSS DSO (the HMAC_
calls will be removed from the exported symbol list).
r=nelsonb
2001-01-27 16:34:27 +00:00
nelsonb%netscape.com
06f8df58de Add multi-process server capability to selfserv. Bug 66630.
New -M command line option runs multiple selfserv processes,
all serving in parallel on the same TCP listen socket.
2001-01-27 00:36:15 +00:00
mcgreer%netscape.com
1f5e95bb36 thought I'd be cool and make it build with DSO's, but alas, need CERT_DecodeTrustString... 2001-01-26 16:45:46 +00:00
mcgreer%netscape.com
523c951da7 initial checkin of tool which converts CA certs into format for certdata.txt 2001-01-26 16:32:10 +00:00
relyea%netscape.com
5b76b8136a Allow NSS_Initialize to succeed even if the databases cannot be opened.
NOTE: BETA 3 solution only. After Beta 3 NSS_Initialize will get to new
options to control this functionality more finely
2001-01-26 04:33:45 +00:00
nelsonb%netscape.com
86efe6a23a Win32 processes have two environments, a Unix-compatible one and an NT
environment.  NSS has no control over which of these environments will
be inherited by any child processes, so when NSS modifies or adds an
environment variable, it needs to do so to both environments.
This fixes bugzilla bug 66615.  Reviewed by wtc.
2001-01-26 03:24:05 +00:00
wtc%netscape.com
ef5aed7aaa Bugzilla bug #65416: assign values to enumeration constants in secutil.h
and nssilock.h explicitly.  Reviewed by Ian McGreer.
2001-01-25 19:05:50 +00:00
nelsonb%netscape.com
bbb9df0829 Detect failures of NSS_Init and report them.
This fixes bug 66244 for certutil (only).
2001-01-25 04:14:22 +00:00
wtc%netscape.com
58a4b87a75 Export the new function NSS_VersionCheck(). Reviewed by Nelson. 2001-01-25 02:43:48 +00:00
wtc%netscape.com
752be879db Bugzilla bug #66286: link libnss3.so with -R '$ORIGIN' on Solaris so that
it searches for libfreebl_*.so in the same directory where it resides.
As a result, libnss3.so, not libnspr4.so, must be the one calling dlopen,
so libnss3.so can't call PR_LoadLibraryWithFlags.
Modified files: lib/freebl/loader.c, lib/nss/config.mk
2001-01-24 05:26:19 +00:00
nelsonb%netscape.com
ad184460a8 Always detect failure of RNG_RNGInit(), which on Solaris and HPUX systems
typically signifies a failure to load the freebl DSO.  Fixes 66229.
r & a = wtc
2001-01-24 04:20:10 +00:00
javi%netscape.com
deab01007d Don't build cmd directory for mozilla builds. 2001-01-24 03:45:53 +00:00
sonmi%netscape.com
07415aa237 cleanup after testclient -q successfully connected before exiting 2001-01-23 05:01:24 +00:00
sonmi%netscape.com
22ebe36804 do_accept now ignores the PR_CONNECT_RESET_ERROR 2001-01-23 04:56:53 +00:00
sonmi%netscape.com
7c1970ee45 Since we have frozen the tip I only checked in high priority fixes.
The individual fixes:
1) A complete QA failure produces a readable email now
2) the nssqa has goes thru a central Exit
3) hanging processes under NT and Win2K are killed (tail -f)
4) Functionallity is implemented to kill other remaining processes (killpif file)
5) improved general cleanup in Exit functions
6) the header is sourced from the nssqa dir rateher than /u/sonmi/bin
7) Problems with QA being reported as passed even if missing fixed
8) Most problems with the "missing Platform list" fixed
9) One QA failure path (cd to a dir without permission) did not give
	errormessage about the reason of failure before
10) fixed html errors in generated email
11) stopped filtering the "bad password" cases as real failures (was fixed in
	nssqa a while ago, but still filtered
12) removing more tmp files from /tmp (decreased debugging)
2001-01-23 01:51:47 +00:00
sonmi%netscape.com
74241c3ef8 added information in the result.html when selfserver dies (previously
only in output.log)
2001-01-23 01:47:32 +00:00
mcgreer%netscape.com
deab71f885 add option for db prefix 2001-01-22 20:14:05 +00:00
mcgreer%netscape.com
655cf6e4ed dbprefix option added 2001-01-22 19:51:41 +00:00
wtc%netscape.com
cb0969a8ae Bugzilla bug #65918: do not build shared libraries on OSF1 with the -all
linker option.  The temporary workaround in two makefiles were removed.
Modified Files:
	coreconf/OSF1.mk nss/lib/ckfw/builtins/Makefile
	nss/lib/fortcrypt/swfort/pkcs11/Makefile
2001-01-22 17:16:47 +00:00
relyea%netscape.com
9cd4ef8884 Follow Wan-Teh's suggesion of using typedef's for enums.
Follow the same style we use elsewhere for enums.
2001-01-19 07:57:18 +00:00
relyea%netscape.com
5d4fd03040 Incorporate Wan-Teh's suggestion of using a typdef for the enum.
Follow the same standard we use elsewhere for enums.
2001-01-19 07:56:06 +00:00
relyea%netscape.com
537ac247fa Bug 65903: Fixes to allow iWS admin stuff to work with shared library NSS
Add necessary exported symbols.
Fix bug in NSS_Initialize where we weren't passing the read only paramter
	through.
Add function to search for Certificate Lists so that Traverse does not need to
	be exposed.
Update pkcs11 names.
2001-01-19 07:53:54 +00:00
relyea%netscape.com
e5c3ee4f95 Bug 65902 Add OSF/1 to the OS's that can restrict symbols in shared libraries 2001-01-19 07:51:12 +00:00
relyea%netscape.com
5f1c5255b8 Bug 65902 Add OSF/1 to the OS's that can restrict symbols in shared libraries 2001-01-19 07:50:58 +00:00
relyea%netscape.com
8d3882178a Fix Serial number searches by removing the DER tag.
Bug 65895.
2001-01-19 07:47:57 +00:00
mcgreer%netscape.com
5f188b705a make blapitest return error codes so QA lights up correctly. Fix bug with DSA
self-test.  r=wtc
2001-01-18 21:45:47 +00:00
wtc%netscape.com
c33e0a8553 Add library version info to the NSS, S/MIME, and SSL shared libraries.
Define the NSS version macros and add NSS_VersionCheck in nss.h.
Add linker option to record internal name of shared libraries.
Add Windows resource files.  Add rcs and sccs id strings that can be
retrieved with 'ident' and 'what'.
Modified Files:
	coreconf/HP-UX.mk coreconf/OSF1.mk coreconf/SunOS5.mk
        coreconf/WIN954.0.mk coreconf/WINNT4.0.mk coreconf/WINNT5.0.mk
	coreconf/rules.mk nss/lib/nss/config.mk
	nss/lib/nss/manifest.mn nss/lib/nss/nss.h
	nss/lib/nss/nssinit.c nss/lib/smime/config.mk
	nss/lib/smime/manifest.mn nss/lib/ssl/config.mk
	nss/lib/ssl/manifest.mn
Added Files:
	nss/lib/nss/nss.rc nss/lib/nss/nssver.c nss/lib/smime/smime.rc
	nss/lib/smime/smimever.c nss/lib/ssl/ssl.rc
	nss/lib/ssl/sslver.c
2001-01-18 20:29:10 +00:00
mcgreer%netscape.com
73586118bb fixes for prime generatation:
1.  Increase maximum tries to 600 (based on 2*(approx. frequency of 1024-bit primes))
2.  Lower the number of Miller-Rabin iterations for p and q based on HAC table 4.4
r=nelsonb,a=wtc
2001-01-18 16:39:10 +00:00
wtc%netscape.com
6f7422a77a Bugzilla bug #65416: assign values explicitly to enumeration constants.
The same values that the compiler would assign are assigned, with only
one exception (cmmfNoPKIStatus in cmmft.h).  This is patch id=22555,
reviewed by Nelson Bolyard.
2001-01-18 16:36:43 +00:00
nelsonb%netscape.com
fe9fa27179 When searching for a prime, the number of Miller-Rabin tests to be
performed will be done in accordance with a table published in the
Handbook of Applied Cryptography.  See Bug 65151.  Also, changes to
test program for this function.
2001-01-18 01:39:17 +00:00
sonmi%netscape.com
49a2766afc changed the stopQ conditionvariable to theadQ 2001-01-17 02:26:27 +00:00
nelsonb%netscape.com
edc48f136d Send SSL 3.x alert records when a version mismatch occurs.
Use the other party's version number to decide which alert to send.
Bug 65142.  R&A: relyea.
2001-01-13 02:32:39 +00:00
nelsonb%netscape.com
14c87961d5 Add implementation of SSL_RSA_WITH_RC4_128_SHA SSL3 cipher suite,
which is not enabled by default.  Bug 59795.
2001-01-13 02:05:15 +00:00