Commit Graph

1012 Commits

Author SHA1 Message Date
sonmi%netscape.com
68de6c1aac added Win2K 2001-04-11 20:02:43 +00:00
nelsonb%netscape.com
f8e2a2a948 Implementation of 5 DHE ciphersuites, client side only.
Contributed by Dr Stephen Henson <stephen.henson@gemplus.com>
2001-04-11 00:29:18 +00:00
sonmi%netscape.com
8d44b495a4 fixed an sed command toi get process ID of tail -f on NT 2001-04-10 22:34:19 +00:00
sonmi%netscape.com
eeaea4c91d fixed a stresstest failures were not recognized by this script 2001-04-10 18:39:14 +00:00
bryner%uiuc.edu
79912dede8 Fixing NSS to know about the new include path for NSPR. Patch from cls, r=bryner. 2001-04-07 07:22:18 +00:00
nelsonb%netscape.com
3b182de89f Merge changes from NSS_3_2_BRANCH. Fix backward compatibility issues. 2001-04-06 17:47:15 +00:00
sonmi%netscape.com
1024501661 updated 2001-04-04 23:28:57 +00:00
sonmi%netscape.com
53bf6dffde removed unneccessary variables 2001-04-04 00:31:59 +00:00
sonmi%netscape.com
768eccfd85 workaround, when running backward compatibility tests pk12util tests don't run 2001-04-04 00:29:27 +00:00
sonmi%netscape.com
4c0da07bc0 added functionallity for backward compatibility testing, improved messages 2001-04-04 00:28:12 +00:00
sonmi%netscape.com
262ccc1479 added backward compatibility tests 2001-04-04 00:23:18 +00:00
sonmi%netscape.com
8c075bc586 added functionallity for backward compatibility testing 2001-04-04 00:22:43 +00:00
sonmi%netscape.com
4fd12678a2 improved usage and parameters, reduced connections from 5 to 1 2001-04-02 17:32:48 +00:00
nelsonb%netscape.com
661c26b99c Fix a couple of memory leaks that occur in rare error paths. 2001-03-31 02:49:59 +00:00
nelsonb%netscape.com
b4e192dc29 Fix leak of cert reference in cert authentication callback functions. 2001-03-30 00:40:24 +00:00
sonmi%netscape.com
309ff2e156 added RSH variable, since 4 out of 5 rsh on NT don't work as expected... 2001-03-28 00:04:37 +00:00
sonmi%netscape.com
308b720dd1 fixed a win2K MKS problem (PATH seperator) 2001-03-28 00:03:59 +00:00
sonmi%netscape.com
74c9db24b6 changes for the new distributed stress test
-) split generating of cert into 2 functions, so we can add any
      number of certs to an existing Database
   -) added function to generate n certs for the stress test (run
      from the server side)^M
2001-03-28 00:03:02 +00:00
sonmi%netscape.com
af96184467 changes for the new distributed stress test
-) improved errormessages
   -) changes to get around the DNS/ipaddress problem
   -) changes necessary for the remote side of the distributed test
        running in the server's directory structure
        messages and errormessages
   -) changes for the server side of the dist. stress test
        set $RSH for windows
        set variables for the certdatabase of the dist stress test
2001-03-28 00:02:27 +00:00
sonmi%netscape.com
3e4ef196fb changes for the new distributed stress test
-) to get around the DNS/ipaddress problem
   -) be sourcable from ssl_dist_stress.sh (share a lot of functionality)
2001-03-28 00:01:43 +00:00
sonmi%netscape.com
f9ebd65d76 distributed stress test
new script to run the server and the remote side of the test
   -) have cert.sh generate certs
   -) start a server
   -) launch strsclnts via rsh, each rsh with a range of certs to use
   -) wait 10 minutes
   -) shut down the server
2001-03-28 00:00:48 +00:00
nelsonb%netscape.com
2ed1feb8e1 Eliminate the old global arena lock. Each ArenaPool now has its own lock.
The new PORTArenaPool struct, an extended PLAreanaPool, is used in place
of PLArenaPools.
2001-03-23 23:40:09 +00:00
sonmi%netscape.com
9a48fb2883 took out yesterday's change, since it did not work 2001-03-23 21:11:14 +00:00
relyea%netscape.com
48b8d71340 Change structure passing to pointer passing.
removed debugging printf's
2001-03-23 19:33:59 +00:00
sonmi%netscape.com
50d8957c5e put Ian's fix to the HP coredump back, call cmsutil without parameters prior
to any cmsutil action
2001-03-23 00:39:57 +00:00
sonmi%netscape.com
70103e5231 searching for "error" "failed" and "fatal" in the output logs 2001-03-21 21:29:48 +00:00
nelsonb%netscape.com
cc91679cd9 Add function SECU_PrintBuf() which prints a buffer in hex and ASCII. 2001-03-20 04:23:38 +00:00
nelsonb%netscape.com
3ef58c1b72 Fix bug in SSL_ResetHandshake introduced in last checkin. 2001-03-20 00:39:02 +00:00
javi%netscape.com
5e88efda34 Add new sources from freebl to the Mac project. 2001-03-19 19:06:42 +00:00
nelsonb%netscape.com
46c15355d3 Reinterpret the READ and WRITE poll flags depending on the state of the
socket and the SSL handshake.  Rename the badly named "connected" flag.
Bugzilla bugs 56924, 56926, 66706.
Modified Files:
    ssl3con.c sslauth.c sslcon.c ssldef.c sslgathr.c sslimpl.h
    sslsecur.c sslsock.c
2001-03-16 23:26:06 +00:00
nelsonb%netscape.com
a6ff2f9594 Build changes for Solaris and gcc. Get gcc to use the proper architecture
flags when building v8plus code on Solaris/Ultrasparc.  Use gcc instead of
ld to build the freebl DSOs when using gcc on Solaris.  And stop using the
"sparkfix" program on Solaris.  It is no longer needed.  Bug 69052.
2001-03-14 23:30:37 +00:00
relyea%netscape.com
81bc3e2f3d Make the nss_build_all target work on NT. 2001-03-14 19:12:30 +00:00
javi%netscape.com
edf7e1032b Fix for Bug 71889 Null out secmodname during NSS_Shutdown so that a later call to NSS_Init succesfully initializes the SECMOD libraries. Also, free the memory allocated to allocated the name of the keydb and remove an unused local variable. 2001-03-14 18:58:14 +00:00
relyea%netscape.com
985011a4d9 Add code to all the nss pre-reqs with a single target. 2001-03-14 18:08:25 +00:00
relyea%netscape.com
b22a7c1f09 bug 70992 patches to build 4.2 BSD 2001-03-13 19:02:05 +00:00
relyea%netscape.com
a23285e902 DES key gens need to fall through to set the rest of their attributes
(remove spurious break). S/MIME should function again after this.
2001-03-13 00:04:51 +00:00
relyea%netscape.com
37306c1267 CK_ULONG != unsigned int on 64 bit platforms. Fix the cast which was obviously
put in to remove a warning.

bug 70713
2001-03-10 01:35:17 +00:00
relyea%netscape.com
9d9fb5174d Fix AIX 64 bit tools failure. For some reason the 64 bit compilier didn't like
the massive switch statement. The new code is easier to read anyway now.
bug 70713
2001-03-10 01:34:08 +00:00
thayes%netscape.com
e4cd41a92c Bug 71323: set MOZILLA_CLIENT when building in client make environment 2001-03-09 01:08:44 +00:00
relyea%netscape.com
75275b086f Bug 70657 . Old CERT DB doesn't always get closed after migration. 2001-03-07 17:34:44 +00:00
relyea%netscape.com
6e3e253b55 Fix Bug 70441 where ava fields with one or two characters are not formatted properly. 2001-03-07 17:31:53 +00:00
sonmi%netscape.com
bed15077e8 fixed a typo in an echo 2001-03-03 01:59:29 +00:00
sonmi%netscape.com
76ed4ee73c fix for bug 69582, empty scripts due to a full /tmp cause programms to
bahave wrong - instead of generating temorary scripts the input comes directly
from this script, redirected via <<
2001-03-03 00:14:17 +00:00
sonmi%netscape.com
6b28b0ebd9 added fix fo bug 69588 - QA failure not recognized - now a certain #
of passes is reqiired, otherwise an incomplete line is generated
if more tests than expected a warning is issued in the text scetion
2001-03-02 23:37:21 +00:00
nelsonb%netscape.com
e42af5fa30 Use $TMP, $TMPDIR, or $TEMP for directory to hold server SID cache file.
Implements RFE 70617.
2001-03-02 02:52:21 +00:00
javi%netscape.com
199f51be6f Add a -C lib to the gmake line to prevent nmake from getting
confused.
2001-03-01 22:54:10 +00:00
kirke%netscape.com
f0fde27571 Bug 69582 endless loop on EOF reading Extensions 2001-03-01 21:45:33 +00:00
sonmi%netscape.com
8c56e52ac3 tools tests activated 2001-03-01 19:48:52 +00:00
relyea%netscape.com
9d01803642 change '-p' to '-P' to be consistant with other tools. 2001-03-01 01:21:56 +00:00
sonmi%netscape.com
1effa6fb8f was still running ksh 2001-03-01 00:43:24 +00:00
sonmi%netscape.com
e82d67c3ce restructuring of NSS QA 2001-03-01 00:40:38 +00:00
sonmi%netscape.com
a5f4cb28ec restructuring of NSS QA 2001-02-28 23:35:21 +00:00
nelsonb%netscape.com
36f08d78d2 Increase the temp cert db's memory buffer size from 64KB to 256KB.
This reduces the liklihood that it will overflow into a disk file.
This is a partial fix for bug 67953.
2001-02-28 22:50:12 +00:00
sonmi%netscape.com
1ae750085c complete restructuring and cleanup of the QA suites.
bug 65000 and 68878
2001-02-28 22:12:47 +00:00
relyea%netscape.com
4c010838b2 On NT, it looks like isatty doesn't always work. Since we always use stdin for this use
that test instead.
2001-02-28 01:58:02 +00:00
relyea%netscape.com
a1f1e67e84 Finish WinNT changes. 2001-02-28 01:57:08 +00:00
relyea%netscape.com
c2baea888a Add '-p' to specify a dbprefix.
Move the Tempfile created on input to /tmp so the code works in directories
that aren't writeable.
Fix the code to remove the Tempfile when done.
Use SECU_ConfigureDir so that we get the same defaultdb as other tools.
2001-02-28 01:21:11 +00:00
javi%netscape.com
eed9cb7afe Merge the changes from NSS_CLIENT_TAG onto trunk. 2001-02-27 21:43:33 +00:00
sonmi%netscape.com
777a319b9d improvements, bugfixes, intermediate checkin before trying to make
everything run in . and relative paths to also work on cygnus
not yet activated
2001-02-23 02:23:05 +00:00
mcgreer%netscape.com
7a923cca51 fix for #63982, -o not using file password 2001-02-22 23:35:17 +00:00
relyea%netscape.com
34316080bc Fix mismatched parameter problem. 2001-02-22 18:27:28 +00:00
sonmi%netscape.com
398b270c48 new script to do the certificate portion of the nss QA 2001-02-21 23:56:14 +00:00
relyea%netscape.com
bc28489209 Fix bug 69471 and bug 69472 : Memory leak in PK11_VerifyMechanisms and incorrectly
calling EnterSlotMonitor rather than ExitSlotMonitor on an error condition.

bob
2001-02-21 22:22:33 +00:00
relyea%netscape.com
2293bbf9d7 Leave a reference to the static version strings so agressive linkers linkers
like AIS won't optimize the id strings away.
2001-02-21 22:18:42 +00:00
relyea%netscape.com
6e2d9268f5 Add wrapper bindings for AES so S/MIME and SSL may implement their AES suites. 2001-02-21 19:52:12 +00:00
sonmi%netscape.com
2f51414a3f added a function to watch for hanging rsh processes, if an rsh does not
return for 60 seconds it will be killed
2001-02-21 01:53:00 +00:00
sonmi%netscape.com
4bab82b1f7 test choked on a ]# - replaced by ] # 2001-02-20 23:11:55 +00:00
sonmi%netscape.com
7182d1fa38 formatted to tabstop 8 2001-02-20 22:00:50 +00:00
sonmi%netscape.com
e5449804e3 formated to tabstop 8 2001-02-20 21:55:47 +00:00
sonmi%netscape.com
967a27a3cc deleted comments, formated with tabstop 8 2001-02-20 21:53:52 +00:00
sonmi%netscape.com
d56d55b69b formatted according to the nss tab 8 rules 2001-02-20 21:49:30 +00:00
relyea%netscape.com
0a1f85a8bd OK, let's not get sloppy on the types... flags should be a PRUint32. 2001-02-10 02:05:19 +00:00
relyea%netscape.com
126437e7e3 Make the public interface use a flags variable instead of a billion little
Bools.

suggested and reviewed by wtc in bug 66230
2001-02-10 02:03:03 +00:00
relyea%netscape.com
3d2bfa7d13 Bug 68234. Handle automatic update of NES2.0, and NES 3.X databases.
reviewed by nelsonb
2001-02-10 01:44:34 +00:00
mcgreer%netscape.com
47e7b4834f add a script for testing various nss commands. not run by default for now. 2001-02-09 22:06:16 +00:00
nelsonb%netscape.com
ecb09e90e8 Modify ssl_FindSocket() to set error PR_BAD_DESCRIPTOR_ERROR when it
cannot find the SSL layer on the specified PRFileDesc. Ensure all
callers detect when ssl_FindSocket returns NULL and handle it properly.
Bug 68241. Reviewed by jgmyers and relyea.
Modified Files:
 	prelib.c sslauth.c sslsecur.c sslsock.c
2001-02-09 02:11:31 +00:00
relyea%netscape.com
a2d46ed98c update certutil and modutil to use the new NSS_Initialize signature.
modutil can now specify it's nocertdb paramter.

bug 64260 reviewed by wtc
2001-02-09 01:38:04 +00:00
relyea%netscape.com
9a4a2d9ddb Allow applications to initialize nss without necessarily initializing databases.Needed to keep old modutil semantics. Bug 66230. reviewed by wtc. 2001-02-09 01:34:12 +00:00
relyea%netscape.com
ea8de3c817 Move cdbhdl.h to private exports. bug 64260 revied by nelsonb. 2001-02-09 01:32:42 +00:00
nelsonb%netscape.com
01bdbccb5d Allow application to customize cert verification slop time.
Default is 24 hours.  Bug 48300. Reviewed by wtc.
Modified Files:
 	lib/nss/nss.def lib/certdb/cert.h lib/certdb/certdb.c
2001-02-09 01:06:41 +00:00
nelsonb%netscape.com
7dcf6f9722 Make SSL API consistent in using SECStatus as return value for functions
that return only values in that enumeration.  Bug 68097. R&A = relyea.
Modified Files:
 	lib/ssl/ssl.h lib/ssl/sslauth.c lib/ssl/sslsecur.c
 	lib/ssl/sslsnce.c lib/ssl/sslsock.c cmd/selfserv/selfserv.c
 	cmd/strsclnt/strsclnt.c
2001-02-09 00:32:14 +00:00
javi%netscape.com
4e85b7019a Fix for Bug 68063 r=nelsonb, a=wtc Make NSS_Init backwards compatible for the Mac. 2001-02-08 23:43:00 +00:00
nelsonb%netscape.com
9c6844617f Changes suggested by Wan-Teh. 2001-02-08 01:32:32 +00:00
wtc%netscape.com
18e1a7aec5 Set NSS version to 3.2. 2001-02-08 01:22:01 +00:00
wtc%netscape.com
782588654c Need to include "prthread.h" for the PRThread type. 2001-02-07 17:50:43 +00:00
nelsonb%netscape.com
720374d8c3 When half-duplex applications (e.g. one thread per socket, doing alternate
reading and writing) call PR_Send and PR_Recv with a non-infinite timeout
value, use that value for both underlying read and write operations.
Fixes bug 67402.  Reviewed by Wan-Teh.
2001-02-07 02:06:05 +00:00
nelsonb%netscape.com
e9439fc5c2 Big changes to get better SSL performance out of selfserv.
Launch all connection handler threads at program startup, and reuse those
threads for new connections, rather than creating new threads for each
connection and having them terminate at the end of each connection.
The main thread is now the acceptor thread.  It creates a queue of
accepted but unprocessed connections.  NSPR Condition variables are used
to schedule the connection handler threads.
Only one GET /stop message is now required to terminate selfserv.
Note, the -2 (full duplex) option is temporarily disabled until I get it
to work with this new thread model.
Add new -D command line option to suppress TCP Nagle delays.
Used to verify the fix to bug 67898.
2001-02-07 01:56:30 +00:00
nelsonb%netscape.com
c216172478 Add new -D command line option to suppress TCP Nagle delays.
This is used to verify the fix for bug 67898.
2001-02-07 01:50:46 +00:00
nelsonb%netscape.com
4207bb1bdb Coalesce the final Finished message in the SSL handshake and the first
record of application data into a single write, when possible, to avoid
TCP's "Nagle" delays.  Fixes bug 67898.  r&a: wtc.  Modified Files:
	ssl3con.c sslimpl.h sslsecur.c sslsock.c
2001-02-07 00:34:56 +00:00
mcgreer%netscape.com
532933e0be bug 67132. certutil crashes on -C -x combination, deny it for now.
certutil -C was not recognizing the -a (ascii) option, implement it.
r=wtc
2001-02-06 18:26:30 +00:00
relyea%netscape.com
0373ca7fe5 Bug 67501: Fix suggested by Nelson. Make '-d' option work again in sdrtest. 2001-02-06 01:05:21 +00:00
relyea%netscape.com
f1ffa04d9e Bug 67068. Fix Crash in SECMOD_Shutdown. reviewed by wtc. 2001-02-06 00:11:24 +00:00
relyea%netscape.com
42e1aaee86 Fix error value to return a less misleading generic error when the bignum libraries fail 2001-02-06 00:09:54 +00:00
wtc%netscape.com
804472db43 Bugzilla bug #60143: checked in OpenVMS patch from Colin Blake
<colin@theblakes.com>.
Modified Files:
	coreconf/OpenVMS.mk coreconf/arch.mk coreconf/rules.mk
	coreconf/ruleset.mk nss/cmd/lib/secpwd.c nss/lib/nss/nss.h
	nss/lib/nss/nssinit.c
2001-02-04 05:52:42 +00:00
mcgreer%netscape.com
c4d36363d2 get pk12util working with shared libs. Change ciphersuites to
be disabled by default to allow user control.  Export a couple
more functions to allow ciphersuite preferences.
2001-02-02 15:24:29 +00:00
wtc%netscape.com
a83eb31b00 Bugzilla bug #63768: removed references to the obsolete PURE_LIBRARY,
HAVE_PURIFY etc. make variables in NSS files.  Reviewed by nelson Bolyard.
Modified Files:
	cmd/platrules.mk cmd/crmf-cgi/config.mk cmd/crmftest/config.mk
	cmd/lib/config.mk cmd/zlib/config.mk lib/base/config.mk
	lib/certdb/config.mk lib/certhigh/config.mk lib/ckfw/config.mk
	lib/crmf/config.mk lib/cryptohi/config.mk
	lib/fortcrypt/swfort/config.mk lib/freebl/config.mk
	lib/jar/config.mk lib/nss/config.mk lib/pk11wrap/config.mk
	lib/pkcs12/config.mk lib/pkcs7/config.mk lib/smime/config.mk
	lib/softoken/config.mk lib/ssl/config.mk lib/util/config.mk
2001-02-02 01:49:57 +00:00
javi%netscape.com
b8986c4568 Bring projects up to date for NSS 3.2 2001-02-01 21:52:03 +00:00
relyea%netscape.com
2c9a42201b Add code to shutdown the PKCS #11 subsystem so NSS can be called to switch profiles. 2001-02-01 19:09:23 +00:00
relyea%netscape.com
261bf7afac remove cdbhdl.h and recode. bug 64206 reviewed by wtc. 2001-02-01 19:05:10 +00:00
relyea%netscape.com
0f7d6dba5f remove cdbhdl.h bug 64260 reviewed by wtc. 2001-02-01 18:09:50 +00:00
kirke%netscape.com
c1a3909887 Resolved merge conflict with Ian. 2001-02-01 01:29:04 +00:00
kirke%netscape.com
eb932053fa Fixed bogus tab introduced by my previous checkin. 2001-02-01 00:57:26 +00:00
wtc%netscape.com
899e61b6cb Bugzilla bug #62855: added stubs for the SSL session cache functions so
that selfserv can link without unresolved symbols on OS/2.
2001-01-31 23:43:47 +00:00
kirke%netscape.com
b4bed1dcdb Resolves bug 66244 - Many NSS command do not detect failure of NSS_Init* functions. Introduced SECU_PrintPRandOSError(progName); to print on failure. Each command is responsible for exiting with appropriate status to distinguish failure points. 2001-01-31 23:25:02 +00:00
wtc%netscape.com
1ca200c1e1 Bugzilla bug #62855: checked in OS/2 makefile patches from Javier
Pedemonte <pedemont@us.ibm.com>.
Modified Files:
	coreconf/OS2.mk coreconf/arch.mk coreconf/prefix.mk
	coreconf/rules.mk coreconf/suffix.mk nss/Makefile
	nss/cmd/platlibs.mk nss/lib/ckfw/builtins/config.mk
2001-01-31 21:29:31 +00:00
wtc%netscape.com
39bfa805f3 I found that #include <unistd.h> is still needed on Unix for getpid(). 2001-01-31 19:18:09 +00:00
wtc%netscape.com
0669b974b3 Bugzilla bug #62855: checked in OS/2 patches from Javier Pedemonte
<pedemont@us.ibm.com>.
Modified files: selfserv.c, swfutl.c, os2_rand.c.
2001-01-31 19:09:48 +00:00
wtc%netscape.com
2d031feba0 Bugzilla bug #62855: do not use the XP_PC macro. Use XP_WIN16 when we mean
Win 16.  Thanks to Javier Pedemonte <pedemont@us.ibm.com> for the patch.
2001-01-31 18:27:15 +00:00
wtc%netscape.com
586b10f4c5 Bugzilla bug #67122: put PR_CALLBACK after the return type in function
declarations.  This is the order required by OS/2 compilers.  Thanks to
Javier Pedemonte <pedemont@us.ibm.com> for the patch.
Modified files: hashops.c, tracker.c, certt.h, oid.c.
2001-01-31 18:01:53 +00:00
mcgreer%netscape.com
57379e33fe bug 67100, memory leaks in rsa.c and pqg.c fixed. 2001-01-31 15:49:19 +00:00
wtc%netscape.com
f3e44424d8 Backed out the previous checkin as it requires
sec_port_ucs4_utf8_conversion_function and
sec_port_ucs2_utf8_conversion_function be exported on Unix.
2001-01-31 03:44:43 +00:00
wtc%netscape.com
218134872a We can just pass NULL as the 'envp' argument to PR_CreateProcess, so we
do not need to get the declaration of 'environ' on Unix.  Reviewed by
Nelson Bolyard.
2001-01-31 03:39:59 +00:00
nelsonb%netscape.com
e69cdb69fa Fix memory leak in mpp_make_prime. Bug 67094. 2001-01-31 00:37:40 +00:00
wtc%netscape.com
104ac36a8d Bugzilla bug #66367: rename the internal NSS functions that we have to
export from the NSS shared library.  Reviewed by Bob Relyea.
Modified Files:
	nss/lib/certdb/certdb.c nss/lib/certdb/pcertdb.c
	nss/lib/nss/Makefile nss/lib/nss/manifest.mn
	nss/lib/nss/nss.def nss/lib/pk11wrap/pk11skey.c
	nss/lib/pkcs12/p12d.c nss/lib/pkcs12/p12e.c
	nss/lib/pkcs12/p12local.c nss/lib/pkcs7/certread.c
	nss/lib/pkcs7/p7decode.c nss/lib/pkcs7/p7encode.c
	nss/lib/smime/cmsutil.c nss/lib/softoken/secpkcs5.c
	nss/lib/ssl/ssl3con.c nss/lib/ssl/sslcon.c
	nss/lib/ssl/sslnonce.c nss/lib/ssl/sslsnce.c
	nss/lib/util/nsslocks.c
Added Files:
	nss/lib/nss/nssrenam.h
2001-01-30 21:02:28 +00:00
mcgreer%netscape.com
b0f6416250 change pk12util to use shared libs. 2001-01-30 19:49:52 +00:00
mcgreer%netscape.com
60a4d653fb export PKCS#12 symbols via the S/MIME DSO. Change default cipher list
to enable all available ciphersuites.
2001-01-30 19:47:39 +00:00
wtc%netscape.com
2a8e617b8b Bugzilla bug #66889: do not export the Windows import libraries for the
loadable PKCS#11 modules fort32.dll, swft32.dll, and nssckbi.dll.
Reviewed by Bob Relyea.
Modified files:
	nss/lib/ckfw/builtins/Makefile nss/lib/ckfw/builtins/config.mk
	nss/lib/fortcrypt/config.mk
	nss/lib/fortcrypt/swfort/pkcs11/config.mk
2001-01-30 19:43:26 +00:00
wtc%netscape.com
a122eb5a2e Bugzilla bug #54989: Use the AIX -brtl linker option to link the NSS
utilities with NSPR shared libraries.  Reviewed by Bob Relyea.
2001-01-30 19:11:22 +00:00
wtc%netscape.com
2caddf43c1 Bugzilla bug #64306: added stubs for PR_SetError and PR_SetErrorText.
Reviewed by Nelson Bolyard.
2001-01-30 02:03:47 +00:00
wtc%netscape.com
ea7ef76a25 Bugzilla bug #63935: use our own macro LINUX instead of the compiler
predefined macro __linux as __linux is not defined by some compilers.
Thanks to jsmith@penguinppc.org for the bug report and a suggested fix.
2001-01-30 01:52:47 +00:00
mcgreer%netscape.com
d27b33644d handle leading zeroes in q bug (66558). suggested by nicolson; r=mcgreer,a=wtc 2001-01-29 14:24:57 +00:00
mcgreer%netscape.com
46aebc320c Per bug #66551, remove all HMAC_ calls from exported symbol list. All
HMAC_ functionality can be done the PKCS#11 interface.
2001-01-27 16:38:45 +00:00
mcgreer%netscape.com
673e033338 Change all HMAC_ calls to use PKCS#11 interface. Now the PKCS#12 library
only depends on functions already exported from the NSS DSO (the HMAC_
calls will be removed from the exported symbol list).
r=nelsonb
2001-01-27 16:34:27 +00:00
nelsonb%netscape.com
06f8df58de Add multi-process server capability to selfserv. Bug 66630.
New -M command line option runs multiple selfserv processes,
all serving in parallel on the same TCP listen socket.
2001-01-27 00:36:15 +00:00
mcgreer%netscape.com
1f5e95bb36 thought I'd be cool and make it build with DSO's, but alas, need CERT_DecodeTrustString... 2001-01-26 16:45:46 +00:00
mcgreer%netscape.com
523c951da7 initial checkin of tool which converts CA certs into format for certdata.txt 2001-01-26 16:32:10 +00:00
relyea%netscape.com
5b76b8136a Allow NSS_Initialize to succeed even if the databases cannot be opened.
NOTE: BETA 3 solution only. After Beta 3 NSS_Initialize will get to new
options to control this functionality more finely
2001-01-26 04:33:45 +00:00
nelsonb%netscape.com
86efe6a23a Win32 processes have two environments, a Unix-compatible one and an NT
environment.  NSS has no control over which of these environments will
be inherited by any child processes, so when NSS modifies or adds an
environment variable, it needs to do so to both environments.
This fixes bugzilla bug 66615.  Reviewed by wtc.
2001-01-26 03:24:05 +00:00
wtc%netscape.com
ef5aed7aaa Bugzilla bug #65416: assign values to enumeration constants in secutil.h
and nssilock.h explicitly.  Reviewed by Ian McGreer.
2001-01-25 19:05:50 +00:00
nelsonb%netscape.com
bbb9df0829 Detect failures of NSS_Init and report them.
This fixes bug 66244 for certutil (only).
2001-01-25 04:14:22 +00:00
wtc%netscape.com
58a4b87a75 Export the new function NSS_VersionCheck(). Reviewed by Nelson. 2001-01-25 02:43:48 +00:00
wtc%netscape.com
752be879db Bugzilla bug #66286: link libnss3.so with -R '$ORIGIN' on Solaris so that
it searches for libfreebl_*.so in the same directory where it resides.
As a result, libnss3.so, not libnspr4.so, must be the one calling dlopen,
so libnss3.so can't call PR_LoadLibraryWithFlags.
Modified files: lib/freebl/loader.c, lib/nss/config.mk
2001-01-24 05:26:19 +00:00
nelsonb%netscape.com
ad184460a8 Always detect failure of RNG_RNGInit(), which on Solaris and HPUX systems
typically signifies a failure to load the freebl DSO.  Fixes 66229.
r & a = wtc
2001-01-24 04:20:10 +00:00
javi%netscape.com
deab01007d Don't build cmd directory for mozilla builds. 2001-01-24 03:45:53 +00:00
sonmi%netscape.com
07415aa237 cleanup after testclient -q successfully connected before exiting 2001-01-23 05:01:24 +00:00
sonmi%netscape.com
22ebe36804 do_accept now ignores the PR_CONNECT_RESET_ERROR 2001-01-23 04:56:53 +00:00
sonmi%netscape.com
7c1970ee45 Since we have frozen the tip I only checked in high priority fixes.
The individual fixes:
1) A complete QA failure produces a readable email now
2) the nssqa has goes thru a central Exit
3) hanging processes under NT and Win2K are killed (tail -f)
4) Functionallity is implemented to kill other remaining processes (killpif file)
5) improved general cleanup in Exit functions
6) the header is sourced from the nssqa dir rateher than /u/sonmi/bin
7) Problems with QA being reported as passed even if missing fixed
8) Most problems with the "missing Platform list" fixed
9) One QA failure path (cd to a dir without permission) did not give
	errormessage about the reason of failure before
10) fixed html errors in generated email
11) stopped filtering the "bad password" cases as real failures (was fixed in
	nssqa a while ago, but still filtered
12) removing more tmp files from /tmp (decreased debugging)
2001-01-23 01:51:47 +00:00
sonmi%netscape.com
74241c3ef8 added information in the result.html when selfserver dies (previously
only in output.log)
2001-01-23 01:47:32 +00:00
mcgreer%netscape.com
deab71f885 add option for db prefix 2001-01-22 20:14:05 +00:00
mcgreer%netscape.com
655cf6e4ed dbprefix option added 2001-01-22 19:51:41 +00:00
wtc%netscape.com
cb0969a8ae Bugzilla bug #65918: do not build shared libraries on OSF1 with the -all
linker option.  The temporary workaround in two makefiles were removed.
Modified Files:
	coreconf/OSF1.mk nss/lib/ckfw/builtins/Makefile
	nss/lib/fortcrypt/swfort/pkcs11/Makefile
2001-01-22 17:16:47 +00:00
relyea%netscape.com
9cd4ef8884 Follow Wan-Teh's suggesion of using typedef's for enums.
Follow the same style we use elsewhere for enums.
2001-01-19 07:57:18 +00:00
relyea%netscape.com
5d4fd03040 Incorporate Wan-Teh's suggestion of using a typdef for the enum.
Follow the same standard we use elsewhere for enums.
2001-01-19 07:56:06 +00:00
relyea%netscape.com
537ac247fa Bug 65903: Fixes to allow iWS admin stuff to work with shared library NSS
Add necessary exported symbols.
Fix bug in NSS_Initialize where we weren't passing the read only paramter
	through.
Add function to search for Certificate Lists so that Traverse does not need to
	be exposed.
Update pkcs11 names.
2001-01-19 07:53:54 +00:00
relyea%netscape.com
e5c3ee4f95 Bug 65902 Add OSF/1 to the OS's that can restrict symbols in shared libraries 2001-01-19 07:51:12 +00:00
relyea%netscape.com
5f1c5255b8 Bug 65902 Add OSF/1 to the OS's that can restrict symbols in shared libraries 2001-01-19 07:50:58 +00:00
relyea%netscape.com
8d3882178a Fix Serial number searches by removing the DER tag.
Bug 65895.
2001-01-19 07:47:57 +00:00
mcgreer%netscape.com
5f188b705a make blapitest return error codes so QA lights up correctly. Fix bug with DSA
self-test.  r=wtc
2001-01-18 21:45:47 +00:00
wtc%netscape.com
c33e0a8553 Add library version info to the NSS, S/MIME, and SSL shared libraries.
Define the NSS version macros and add NSS_VersionCheck in nss.h.
Add linker option to record internal name of shared libraries.
Add Windows resource files.  Add rcs and sccs id strings that can be
retrieved with 'ident' and 'what'.
Modified Files:
	coreconf/HP-UX.mk coreconf/OSF1.mk coreconf/SunOS5.mk
        coreconf/WIN954.0.mk coreconf/WINNT4.0.mk coreconf/WINNT5.0.mk
	coreconf/rules.mk nss/lib/nss/config.mk
	nss/lib/nss/manifest.mn nss/lib/nss/nss.h
	nss/lib/nss/nssinit.c nss/lib/smime/config.mk
	nss/lib/smime/manifest.mn nss/lib/ssl/config.mk
	nss/lib/ssl/manifest.mn
Added Files:
	nss/lib/nss/nss.rc nss/lib/nss/nssver.c nss/lib/smime/smime.rc
	nss/lib/smime/smimever.c nss/lib/ssl/ssl.rc
	nss/lib/ssl/sslver.c
2001-01-18 20:29:10 +00:00
mcgreer%netscape.com
73586118bb fixes for prime generatation:
1.  Increase maximum tries to 600 (based on 2*(approx. frequency of 1024-bit primes))
2.  Lower the number of Miller-Rabin iterations for p and q based on HAC table 4.4
r=nelsonb,a=wtc
2001-01-18 16:39:10 +00:00
wtc%netscape.com
6f7422a77a Bugzilla bug #65416: assign values explicitly to enumeration constants.
The same values that the compiler would assign are assigned, with only
one exception (cmmfNoPKIStatus in cmmft.h).  This is patch id=22555,
reviewed by Nelson Bolyard.
2001-01-18 16:36:43 +00:00
nelsonb%netscape.com
fe9fa27179 When searching for a prime, the number of Miller-Rabin tests to be
performed will be done in accordance with a table published in the
Handbook of Applied Cryptography.  See Bug 65151.  Also, changes to
test program for this function.
2001-01-18 01:39:17 +00:00
sonmi%netscape.com
49a2766afc changed the stopQ conditionvariable to theadQ 2001-01-17 02:26:27 +00:00
nelsonb%netscape.com
edc48f136d Send SSL 3.x alert records when a version mismatch occurs.
Use the other party's version number to decide which alert to send.
Bug 65142.  R&A: relyea.
2001-01-13 02:32:39 +00:00
nelsonb%netscape.com
14c87961d5 Add implementation of SSL_RSA_WITH_RC4_128_SHA SSL3 cipher suite,
which is not enabled by default.  Bug 59795.
2001-01-13 02:05:15 +00:00
nelsonb%netscape.com
d5ae266115 Remove all vestiges of old pre-NSS socks client implementation from NSS.
Bug 51471.
2001-01-13 01:52:59 +00:00
nelsonb%netscape.com
59a40ba22f Suppress EOF messages unless running with -v. Bug 60879. 2001-01-13 00:55:30 +00:00
mcgreer%netscape.com
addbd94893 take back export of NSS_CMSArray_Count 2001-01-12 18:38:31 +00:00
mcgreer%netscape.com
1bd1fe5b0b removing use of external NSS_CMSArray_Count 2001-01-12 18:37:41 +00:00
mcgreer%netscape.com
03f5d37be2 remove unspecified arg check (bug 65122) 2001-01-12 14:30:44 +00:00
mcgreer%netscape.com
3f0e83ae0c bug 64706
when prime generation step fails, retry up to a specified number of times
2001-01-12 14:29:47 +00:00
wtc%netscape.com
a674e530ea Added NSS_CMSArray_Count back to the exports list because
cmd/smimetools/cmsutil.c needs it.
2001-01-12 06:07:34 +00:00
sonmi%netscape.com
1212517fec added documentation on how to activate it when it is needed 2001-01-12 02:45:01 +00:00
sonmi%netscape.com
2d0c2744be new script, supposed to be started in the background by all.sh, to watch
for cores and rename them, so multiple corefiles can be saved
checked in during freeze but not activated yet
2001-01-12 02:00:28 +00:00
nelsonb%netscape.com
a6efa3c2c5 Save and restore %ebx register in all functions. Fixes bug 64940. 2001-01-12 01:37:02 +00:00
sonmi%netscape.com
94b0ea5983 now killing tail -f when done under MKS as well. 2001-01-12 00:18:32 +00:00
mcgreer%netscape.com
9f6b371648 prune list of exported symbols for s/mime library 2001-01-11 20:09:01 +00:00
sonmi%netscape.com
14b74a767a formated everything to a <tab4> format - still needs reformating to linelength 2001-01-11 01:55:23 +00:00
sonmi%netscape.com
672d2f9598 terminate now if no selfserver is running before attempting to start the
clients (with exception of the -q testclien)
2001-01-11 01:45:12 +00:00
mcgreer%netscape.com
91698770e4 back out previous change 2001-01-08 19:43:01 +00:00
mcgreer%netscape.com
c7c96f7f51 decoding nickname entries needs to include the nickname.
when searching for smime entry, verify subject is correct (can be multiple
subjects per email address)
2001-01-08 19:24:23 +00:00
nelsonb%netscape.com
729c505bf3 Changed HP assembler routine multacc512 in hpma512.s so that it
propagates carries exactly the same way that maxpy_little does.
Re-enabled use of multacc512 in mpi_hp.c.
2001-01-08 05:58:34 +00:00
nelsonb%netscape.com
c974f7d877 Fix infinite loop by making "i" be signed again.
Also match up braces for vi editor.
2001-01-08 03:26:50 +00:00
nelsonb%netscape.com
1f1f72480e Generation of prime numbers has been failing on HP since MPI began to
use the newest HP assembler function, multacc512.  So, that function
has been disabled.  Further investigation is needed.
2001-01-08 01:01:35 +00:00
nelsonb%netscape.com
68049fe0ce Eliminate some warnings found when compiling on Unix boxen. 2001-01-07 09:21:25 +00:00
nelsonb%netscape.com
eea673c43a MSVC won't let you initialize a pointer in a data structure with the
address of an external variable that comes from another DLL.
This is a fundamental difference between WIN32 DLLs and Unix DSOs.
So, for every SEC_ASN1Template inside of libnss3 that is referenced by
other templates outside of libnss3, a new "chooser" function was created
that returns the address of that template.  For WIN32, the templates
outside of libnss3 access libnss3's templates by the chooser function
rather than by direct reference.  Some simple macros allow Unix to
continue to use direct references, avoiding the extra function calls.
With these changes, all.sh (qa script) passes all tests on NT with DLLs.
Modified Files:
	cmd/checkcert/checkcert.c cmd/lib/secutil.c lib/asn1/asn1t.h
	lib/certdb/certdb.c lib/certdb/certt.h lib/certdb/crl.c
	lib/certhigh/certreq.c lib/crmf/asn1cmn.c lib/crmf/crmfcont.c
	lib/crmf/crmftmpl.c lib/cryptohi/secsign.c lib/nss/nss.def
	lib/pkcs12/p12local.c lib/pkcs12/p12tmpl.c
	lib/pkcs7/certread.c lib/pkcs7/p7decode.c lib/pkcs7/p7local.c
	lib/smime/cmsasn1.c lib/smime/cmsattr.c lib/smime/cmspubkey.c
	lib/smime/cmssigdata.c lib/smime/smimeutil.c
	lib/softoken/keydb.c lib/softoken/keydbt.h lib/util/secalgid.c
	lib/util/secasn1.h lib/util/secasn1d.c lib/util/secasn1t.h
	lib/util/secasn1u.c lib/util/secdig.c lib/util/secdig.h
	lib/util/secoid.h
2001-01-07 08:13:13 +00:00
nelsonb%netscape.com
9407723b67 Eliminate some warnings by adding missing #include lines, or other minor
cleanup.
2001-01-07 07:56:35 +00:00
nelsonb%netscape.com
fbb67a9c4c Eliminate warnings about functions returning values of the wrong type. 2001-01-07 07:49:22 +00:00
nelsonb%netscape.com
a97e2c5e3d Add missing declaration of library function printflags(). 2001-01-07 07:48:04 +00:00
nelsonb%netscape.com
6edc66e859 This program tests low level functions that aren't exported from the DSOs,
so it must be built with the static libs.
2001-01-07 07:47:17 +00:00
nelsonb%netscape.com
920c5a1f77 The recent deletion of the SECU_Password function from cmd/lib made this
progam stop compiling.  So, as a temporary measure, to fix the build,
ifdef out the calls to the missing functions, and always behave as if
the "-n none" option had been supplied.
2001-01-07 07:46:36 +00:00
nelsonb%netscape.com
1ddc0c071d Get this file to build again on Windows. 2001-01-07 07:44:39 +00:00
nelsonb%netscape.com
cf51c9006f Add missing #include "nss.h" 2001-01-07 07:43:28 +00:00
nelsonb%netscape.com
f202bf1882 Fix several bugs to get NSS_Init working again. 2001-01-07 07:37:18 +00:00
relyea%netscape.com
69ba9f4f57 Move SDR tests to use nss dll's 2001-01-07 00:32:36 +00:00
relyea%netscape.com
941360ff6e Remove depricated Open function 2001-01-07 00:29:25 +00:00
relyea%netscape.com
1c171b46f8 Fix HP map file option ('-c rather than -e') 2001-01-07 00:27:06 +00:00
relyea%netscape.com
647e6ae2e4 Get down to a signle.def file 2001-01-07 00:26:19 +00:00
relyea%netscape.com
b81edc1838 Add HP to the platforms that handle restricted symbols 2001-01-07 00:25:29 +00:00
relyea%netscape.com
766659480a Add HP to the .def file processing.
Add SDR functions
2001-01-07 00:24:51 +00:00
relyea%netscape.com
7922b6463d Remove depricated functions that's referencing a removed symbol 2001-01-06 23:55:22 +00:00
relyea%netscape.com
a1caf9ee0d Conform to the new .def rules 2001-01-06 23:52:11 +00:00
relyea%netscape.com
6480efed38 Conform the .def files to the new rules.
update missing symbols from the export list documentation.
2001-01-06 23:51:05 +00:00
nelsonb%netscape.com
800d49e219 Remove 8 deprecated functions from export list. 2001-01-06 23:10:30 +00:00
relyea%netscape.com
558f0063f1 Add CERT_Find functions for the s/mime test programs. 2001-01-06 22:12:16 +00:00
relyea%netscape.com
d246ad65a3 Fix initialization to use NSS_Init* functions rather than low level
init functions.
2001-01-06 22:09:04 +00:00
relyea%netscape.com
a1229115a0 Merge Unix and win data types 2001-01-06 21:37:30 +00:00
relyea%netscape.com
69531a060f Merge UNIX and Win Data types 2001-01-06 21:36:59 +00:00
relyea%netscape.com
0d5404ab76 Add symbols needed by secutil and the command libraries. 2001-01-06 21:14:03 +00:00
relyea%netscape.com
1825c169ff derdump needs to initialize NSS before calling the SECU functions. 2001-01-06 21:12:29 +00:00