relyea%netscape.com
cbd308d951
Handle the switch from the static buffer to the realloc buffer.
2002-08-09 18:48:31 +00:00
relyea%netscape.com
c57a14afb4
remove unreferenced Variable.
2002-08-09 18:05:24 +00:00
jpierre%netscape.com
e6ee1f4c60
Add comment about partial CRLs
2002-08-09 07:09:25 +00:00
wtc%netscape.com
f0a85f101a
Bug 148220: removed the unused field 'isFIPS'.
2002-08-08 22:52:14 +00:00
relyea%netscape.com
667aff1517
Bug 607834. save the correct name on so we can reset the database.
2002-08-08 18:02:34 +00:00
kaie%netscape.com
141c541484
b=161394 Fix crash in debug builds
...
r=javi sr=alecf
2002-08-08 14:10:42 +00:00
jpierre%netscape.com
6eeafa0a3a
Stop referencing deleted quickder.h header
2002-08-08 01:55:34 +00:00
jpierre%netscape.com
81744b6f54
Updates to quick DER decoder, bug # 161215
...
Fixes from Terry's review :
- remove quick allocator
- always allocate entry array even if there is 0 entry
- rename DecodeConstructed to DecodeExplicit and use a better test for that case
- other misc small fixes
Also move SEC_QuickDERDecodeItem to secasn1.h
2002-08-08 01:54:38 +00:00
wtc%netscape.com
dd0afb2cee
Bug 148220: implements FIPS 198 conformance. r=relyea.
...
Modified Files: alghmac.c alghmac.h lowpbe.c pkcs11c.c
2002-08-07 23:27:58 +00:00
nicolson%netscape.com
c397f25253
Don't link to libhpi.so.
2002-08-07 22:53:01 +00:00
nelsonb%netscape.com
3843ef99c0
Fix bug 160207 by changing the error alerts we send for failed decryption.
2002-08-07 20:01:51 +00:00
kaie%netscape.com
5802ed6d9c
b=161379 Fix JavaScript warnings in security code
...
r=ssaux sr=mscott
2002-08-07 14:24:04 +00:00
kaie%netscape.com
21f0d86067
b=123917 Remove non-NSS_3_4 codepaths
...
r=wtc sr=alecf
2002-08-07 13:39:57 +00:00
jpierre%netscape.com
9b074c9def
Fix for 157649 - allow crlutil to do partial decoding so it can be used as a test program
2002-08-07 03:53:07 +00:00
jpierre%netscape.com
b4ea41c359
Additional error reporting
2002-08-07 03:47:23 +00:00
jpierre%netscape.com
1e8c079b69
Implement partial CRL decoding. Fix for 149816. r=wtc . Uses new quick DER decoder
2002-08-07 03:44:12 +00:00
jpierre%netscape.com
7759ca21de
Reorder functions to avoid forward declaration of DecodePointer
2002-08-07 03:40:47 +00:00
jpierre%netscape.com
4607bbf866
Be consistent in memory allocations - use QuickZAlloc
2002-08-07 03:36:46 +00:00
jpierre%netscape.com
42d8685ccc
Add new quick DER decoder. r=wtc
2002-08-07 03:25:47 +00:00
wtc%netscape.com
fdc41cd064
Bug 161316: make pk11pqg.h C++ safe.
2002-08-06 18:31:35 +00:00
glen.beasley%sun.com
178cd7c22b
commented debug statement
2002-08-06 16:41:43 +00:00
kaie%netscape.com
346ebd7510
b=124037 Decrease cert manager loading time.
...
r=rangansen/jkeiser sr=alecf
2002-08-06 13:25:23 +00:00
kaie%netscape.com
69ea18b8f3
b=136819 Returned value from getPSMContentType is compared to wrong enum
...
Patch from t8m@centrum.cz
r=kaie sr=alecf
2002-08-06 13:21:32 +00:00
kaie%netscape.com
e0682e5b27
b=144435 Allow to edit trust for other people's certificate
...
r=javi sr=alecf
2002-08-06 13:18:12 +00:00
kaie%netscape.com
02d9df0cf7
b=74339 Support import of SSL, S/MIME, and CA certs
...
r=javi sr=alecf
2002-08-06 13:11:15 +00:00
kaie%netscape.com
098841f1b3
b=159053 Memory leak in nsSecureBrowserUIImpl
...
r=jkeiser sr=alecf
2002-08-06 13:06:21 +00:00
kaie%netscape.com
f1bf4f4474
b=135546 Fix internal slot reference leak in cryptojs_generateOneKeyPair()
...
r=wtc sr=alecf
2002-08-06 12:54:39 +00:00
kaie%netscape.com
d47a8b3a35
b=132589 Fix incorrect verification status when viewing email-signing-only certificates.
...
r=javi sr=alecf
2002-08-06 12:51:43 +00:00
henry.jia%sun.com
eed9ab0bdd
3rd patch for bug 158080
...
Description: replace the hardcode of "@mozilla.org/embedcomp/window-watcher;1" with NS_WINDOWWATCHER_CONTRACTID
Patch by Henry.Jia@sun.com
r=anto, sr=alecf
2002-08-06 05:37:58 +00:00
henry.jia%sun.com
17a5f04f77
2nd patch for bug 158080
...
Description: replace the hardcode of "@mozilla.org/embedcomp/window-watcher;1" with NS_WINDOWWATCHER_CONTRACTID
Patch by Henry.Jia@sun.com
r=anto, sr=alecf
2002-08-06 05:11:23 +00:00
jpierre%netscape.com
55bbc1b2b7
Fix for 158141 - add 5 minute slop time for OCSP
2002-08-04 02:50:40 +00:00
relyea%netscape.com
1b5946f3a0
Turn on reset functionality for multiaccessdb clients.
2002-08-02 21:41:01 +00:00
relyea%netscape.com
c0dd962ed9
1) factor out fortezzav1 from the chain processing code to make the code easier
...
to read.
2) only extract keys if we are using fortezzav1 cert (should speed up cert verify
a bit).
3) Add function to verify a specific CA cert to verify a userCert Usage.
2002-08-02 17:51:20 +00:00
relyea%netscape.com
ff0e1ac35e
Merge back 3.5 changes to the tip
2002-08-02 17:43:36 +00:00
jpierre%netscape.com
8fa534cac0
Fix compiler warnings on NT
2002-08-02 00:53:15 +00:00
jpierre%netscape.com
9ee98f355e
Fix incorrect macro usage
2002-08-02 00:28:23 +00:00
nelsonb%netscape.com
8e038c1211
Correct the test of IP addresses in Subject Alternative Name extensions.
...
bug 103752.
2002-08-01 22:51:56 +00:00
relyea%netscape.com
fee201085d
Don't crash if we try to read a nickname that has an invalid cert with it.
2002-08-01 22:28:11 +00:00
ian.mcgreer%sun.com
67ce0992b6
this was obviously backwards
2002-08-01 14:23:49 +00:00
wtc%netscape.com
79910e8ffd
Bug 157730: minor tweak suggested by brendan.
2002-08-01 05:17:49 +00:00
relyea%netscape.com
dc346d44ed
1) collections have size values that need to be updated.
...
2) handle the case where we can't get the encoding from the cert.
3) Check the cert validity when we first extract it.
2002-08-01 01:21:28 +00:00
nicolson%netscape.com
994e4ce3a2
Turn off the beta flag. Time for JSS 3.2 RTM!
2002-07-31 22:36:06 +00:00
relyea%netscape.com
4befeb7bba
Arg.. version 1.63 was a misapplied patch, (supposed to be checked into the
...
3.5 branch). The result is 1.63 backs out 1.62, which is not the intent.
restore 1.62.
2002-07-31 18:55:59 +00:00
relyea%netscape.com
d9d3b45f9e
Bug 157730. Don't crash on bogus input from a PKCS #11 device.
...
review = be & wtc.
a = asa
2002-07-31 18:50:11 +00:00
relyea%netscape.com
bc8d48d520
Protection against Token misbehaving tokens
2002-07-31 02:00:13 +00:00
wtc%netscape.com
2bd38c9821
Bug 148220: FIPS 198's key size requirement broke the NSS QA. Backing it
...
out.
2002-07-31 00:55:35 +00:00
wtc%netscape.com
9590c529f0
Bug 148220: the previous checkin missed the inclusion of secerr.h.
2002-07-30 23:19:44 +00:00
nelsonb%netscape.com
ca36e61638
Fix code to work when subjectAltName extension not present in server cert.
...
Bug 103752.
2002-07-30 23:15:43 +00:00
wtc%netscape.com
e29a299bc0
Bug 148220: enforce FIPS 198's requirement on the secret key's length.
...
Added an assertion. Set the error code on error return.
2002-07-30 22:59:13 +00:00
relyea%netscape.com
18b74cde82
Fix pkcs12 memory leak.
2002-07-30 22:51:13 +00:00
bishakhabanerjee%netscape.com
4225da3758
Checking in riceman+bmo@mail.rit.edu's patch for bug 133702
2002-07-30 21:25:56 +00:00
bishakhabanerjee%netscape.com
65f7eca2f9
Checking in riceman+bmo@mail.rit.edu's patch for bug 133702
2002-07-30 20:57:44 +00:00
bishakhabanerjee%netscape.com
e630b647c5
Checking in riceman+bmo@mail.rit.edu's patch for bug 133702
2002-07-30 20:44:13 +00:00
bishakhabanerjee%netscape.com
ed1acde055
Checking in riceman+bmo@mail.rit.edu's patch for bug 133702
2002-07-30 20:36:29 +00:00
nelsonb%netscape.com
ac73526c2c
Examine SubjectAltName extensions for SSL server name matching.
...
Bug 103752.
2002-07-30 19:32:33 +00:00
bishakhabanerjee%netscape.com
532b7c841e
Checking in riceman+bmo@mail.rit.edu's patch for bug 133702
2002-07-30 19:01:18 +00:00
bishakhabanerjee%netscape.com
a37737a1ca
Checking in riceman+bmo@mail.rit.edu's patch for bug 133702
2002-07-30 18:49:46 +00:00
bishakhabanerjee%netscape.com
a5ff71eccd
Checking in riceman+bmo@mail.rit.edu's patch for bug 133702
2002-07-30 18:44:36 +00:00
bishakhabanerjee%netscape.com
2f5e6fa6d3
Checking in riceman+bmo@mail.rit.edu's patch for bug 133702
2002-07-30 18:36:50 +00:00
wtc%netscape.com
fe44dda52c
Bug 159976: removed the incorrect linker options for building a bundle on
...
Mac OS X. The patch is contributed by Ben Hines <bhines@alumni.ucsd.edu>.
2002-07-29 21:48:39 +00:00
nelsonb%netscape.com
b26f28e997
Add missing const qualifiers to NSS's regular expression match functions.
2002-07-29 21:30:31 +00:00
wtc%netscape.com
869ca6f82b
Fixed the comment. The length of the secret may be larger than 64 bytes.
2002-07-26 18:20:59 +00:00
wtc%netscape.com
80aae405d5
Removed unused ASN.1 templates and unnecessary declarations.
...
Modified Files: lowcert.c pcertt.h
2002-07-25 03:59:38 +00:00
kaie%netscape.com
8edfce7940
b=141268 OCSP error messages should say OCSP, not OSCP (typo)
...
r=hixie sr=alecf a=asa
2002-07-25 02:48:33 +00:00
kaie%netscape.com
3b8f00e02f
b=113844 "Load PKCS#11 Device" dialog sized incorrectly
...
r=kaie/javi sr=alecf a=asa
2002-07-25 02:26:52 +00:00
relyea%netscape.com
2cf20e0041
return certs in sorted order.
2002-07-23 00:34:20 +00:00
bishakhabanerjee%netscape.com
5c04279163
Setting number of tests to 252 to take out warnings on nightly QA reports -Bug 156959
2002-07-19 23:46:10 +00:00
wtc%netscape.com
bb5752e0f0
Bug 158339: we should not call secmod_freeParams if RNG_RNGInit fails.
2002-07-19 18:31:30 +00:00
jpierre%netscape.com
d57baf5140
Fix for 158221 - make crlutil save memory by using the new PK11_ImportCRL function with the CRL_DECODE_DONT_COPY_DER option
2002-07-19 01:07:27 +00:00
jpierre%netscape.com
a82b9f46ba
158005 - add new CRL decode and import functions . Benefits are :
...
- ability to import to any slot
- ability to specify decode options, such as "don't copy DER"
- ability to specify import options, such as "don't do CRL checks"
This patch also maps the existing functions SEC_NewCrl and CERT_ImportCRL
to this new function, eliminating the code duplication that existed
2002-07-19 00:59:34 +00:00
nicolson%netscape.com
10ca31b470
Fix 157998: unable to importCertToPerm
2002-07-19 00:20:24 +00:00
jpierre%netscape.com
9a7c0e7303
Fix for 156802 - remove improper check in CRL decoding
2002-07-19 00:12:13 +00:00
jpierre%netscape.com
c509948a27
Remove unreferenced variables
2002-07-18 23:50:03 +00:00
jpierre%netscape.com
24426f202b
Fix for 139292 - NSS_NoDBInit regression
2002-07-18 23:08:55 +00:00
leaf%mozilla.org
8860985e79
bug 154840, r=cls, sr=brendan, a=jesup update localeVersion strings
2002-07-17 23:51:49 +00:00
jpierre%netscape.com
0ef036408f
Fix usage
2002-07-17 22:53:33 +00:00
jpierre%netscape.com
e7033fb486
Fix for 157996 - add support for SEC_NewCrl browser emulation mode in crlutil
2002-07-17 22:22:26 +00:00
wtc%netscape.com
aa78a2f343
Bug 157946: removed the unused -m option. Added the -v option to Usage().
2002-07-17 18:39:02 +00:00
glen.beasley%sun.com
51a67c36d3
typecast for AIX build proper way
2002-07-17 01:14:58 +00:00
jpierre%netscape.com
2c39c4639f
Fix for 153245
2002-07-17 00:21:09 +00:00
glen.beasley%sun.com
966f2ff5b0
typecast for AIX build
2002-07-16 23:52:45 +00:00
wtc%netscape.com
56c3c291e5
Bug 157750: handle the possibility that some certs do not have a label.
2002-07-16 21:13:40 +00:00
relyea%netscape.com
ccf95e381c
Automatically recover from database corruptions when importing new certs.
2002-07-16 16:44:22 +00:00
jpierre%netscape.com
dc151802c8
Make certutil use the new CERT_VerifyCertificate function when verifying certs
2002-07-16 00:45:50 +00:00
nicolson%netscape.com
d77ce5ba26
fix 157622: cleanup javadoc warnings.
...
Have the build system automatically copy overview-summary.html over
index.html so we get a frame-free version.
2002-07-15 22:52:58 +00:00
nicolson%netscape.com
2bf050cc40
Fix 157622: cleanup javadoc warnings.
...
These changes should only affect documentation. There should be no
functional effect of the changes.
2002-07-15 22:48:06 +00:00
kaie%netscape.com
7a53d72407
b=153232 Add better error message for -8182
...
r=javi sr=alecf a=asa
2002-07-15 13:39:13 +00:00
kaie%netscape.com
a545a67335
b=151250 False warning posting to https site from http site.
...
r=javi sr=alecf a=asa
2002-07-15 13:37:22 +00:00
kaie%netscape.com
5b56e1ff00
b=114893 Can't send encrypted mail if encryption cert has not been imported. Smartcard issue.
...
r=javi sr=alecf a=asa
2002-07-15 13:35:30 +00:00
relyea%netscape.com
f181c1c7a2
Fix solaris signed/unsigned warnings.
...
On updating nicknames, create a nickname record if one doesn't exist (that is
somehow the database got corrupted).
2002-07-13 02:45:04 +00:00
nicolson%netscape.com
44dd584a7a
put back the assertion check.
2002-07-12 21:12:22 +00:00
nicolson%netscape.com
fbb8083387
Fix misspelled exception name.
2002-07-12 21:08:22 +00:00
nicolson%netscape.com
8272ce3448
add default constructor
2002-07-12 21:07:40 +00:00
nicolson%netscape.com
79ef0013a6
This test isn't working yet, but I may get it working at some point.
2002-07-12 20:33:39 +00:00
nicolson%netscape.com
528f0be217
Fix 98613: using SSLSocket after close causes crash.
...
Now the SSLSocket and SSLServerSocket close() methods only call PR_Close()
on the underlying fd. Freeing data structures is postponed until the
Java object is finalized.
2002-07-12 04:26:56 +00:00
nicolson%netscape.com
de40255dcc
clarify error message.
2002-07-12 04:09:14 +00:00
relyea%netscape.com
08f068a1b9
Update the CERTDB_USER bits when our key gets imported through pkcs #12 .
2002-07-12 03:27:44 +00:00
jpierre%netscape.com
a0d70e4967
Make CERT_VerifyCertificate actually work . Oops.
2002-07-12 02:37:49 +00:00
relyea%netscape.com
eb96a2084d
1) When looking for a trust token, return tokens in the following priority order:
...
1) r/w token with trust.
2) r/o token with trust.
3) r/w token
4) r/o token
Also, don't crash if we try to change the trust on a cert in temp storage, just return an error.
2002-07-10 21:34:01 +00:00
wtc%netscape.com
a71935e132
Bug 155626: Handle the failure of ocsp_CreateCertID and use the new
...
CERT_GetOCSPResponseStatus function.
2002-07-10 15:16:10 +00:00