Commit Graph

5748 Commits

Author SHA1 Message Date
wtchang%redhat.com
4b0281cf28 Bugzilla Bug 318968: more ECDSA test cleanup. Do not zeroize when freezing
ECParams' arenas.  Use EC_CopyParams to copy ECParams to an EC public key
and allocate the public key's value from the same arena. r=glen.beasley.
2006-02-15 19:06:51 +00:00
christophe.ravel.bugs%sun.com
4cc50bbc40 322871: JSS needs to handle ECC keys and certs`
Back out changes by rrelyea (2006-02-10) and glen.beasley (2006-02-14).
r+: wtc
2006-02-14 23:53:05 +00:00
glen.beasley%sun.com
569463eb3e temp build fix 2006-02-14 20:16:45 +00:00
wtchang%redhat.com
c0887f9e1d Bugzilla Bug 326754: fixed two minor bugs related to the h parameter in
PQG parameter generation. r=nelsonb,glen.beasley.
2006-02-14 03:04:57 +00:00
wtchang%redhat.com
b19b5965a5 Bugzilla Bug 326144: need to zeroize a SECItem that contains a copy of the
secret key. r=relyea,jpierre.
2006-02-14 02:55:09 +00:00
wtchang%redhat.com
cfe8a9f253 Bugzilla bug 326751: CKR_SIGNATURE_INVALID is a much better default error
code for NSC_VerifyRecover than CKR_DEVICE_ERROR is. r=relyea.
2006-02-11 02:03:25 +00:00
glen.beasley%sun.com
7f3ba76b70 318970 RSA sigver test fix r=wan-teh 2006-02-10 23:27:38 +00:00
rrelyea%redhat.com
2b4f5e5d00 Add multi-hash ECC to jss (based on the 1.4 JCE). 2006-02-10 22:06:22 +00:00
rrelyea%redhat.com
1f4cae4de9 Bugzilla Bug 326482 NSS ECC performance problems.
Patch by Nelson, r=relyea.

Save the public key when we create the keypair so we can use it later.
2006-02-10 19:39:53 +00:00
rrelyea%redhat.com
57d9010865 Bugzilla Bug 326482 NSS ECC performance problems.
r=nelsonb
Fix bug where ECC keys were not being copied on server startup
2006-02-10 18:54:58 +00:00
neil.williams%sun.com
fd25589676 Bug 325657, r=Nelson,Wan-Teh, Unset ECL_USE_FP INT Solaris SPARC freebl 2006-02-10 04:38:05 +00:00
rrelyea%redhat.com
2cf33676b0 Bug 320187 NSC_WrapKey called with null output returns short length
r=nelsonb
2006-02-09 19:54:22 +00:00
dougt%meer.net
52822535eb Fixing bug 326358. checking for null mStringBundle is not needed. r/a=kaie 2006-02-09 18:52:28 +00:00
neil.williams%sun.com
8719a5f375 Bug #325682, Adds -Wl,-rpath to link step for Linux distributions
r=Nelson, sr=Wan-Teh
2006-02-09 00:12:17 +00:00
rrelyea%redhat.com
2c3bfd1312 Bug 320583 Support for SHA256/384/512 with ECC signing 2006-02-08 06:14:31 +00:00
julien.pierre.bugs%sun.com
af4804d7ef Fix for bug 326144 . softoken leaks in nsc_pbe_key_gen. r=nelson, rrelyea 2006-02-07 00:43:31 +00:00
wtchang%redhat.com
eb3a64e821 Bugzilla Bug 318967: fixed compiler warnings, most of which were char *
and unsigned char * mismatches. r=glen.beasley.
2006-02-04 06:39:44 +00:00
kaie%kuix.de
58262b951b Fix build bustage, change // comment to /* */ 2006-02-03 20:22:52 +00:00
kaie%kuix.de
3aa755acfa bug 152426, delegation of HTTP download for OCSP
r=julien.pierre, r=rrelyea
2006-02-03 18:14:49 +00:00
cbiesinger%web.de
c2d981f764 bug 183156 remove *UCS2* functions, replacing them with *UTF16* ones
r+sr=darin
2006-02-03 14:18:39 +00:00
neil.williams%sun.com
d55302f3a8 bug 245518 r=nelson, fix for p12 files encoded with null PWs 2006-02-02 20:26:03 +00:00
nelson%bolyard.com
564cb27d28 Work around bug 292285: don't encode x400 addresses, don't print CRL contents
r=julien.pierre
2006-02-02 07:56:19 +00:00
wtchang%redhat.com
b8088299c2 Allow CKM_ECDSA_SHA1 to be multipart. Bug 325494.
Patch contributed by Andreas Sterbenz <Andreas.Sterbenz@sun.com>
r=nelsonb,relyea,wtc.
2006-02-02 07:21:56 +00:00
alexei.volkov.bugs%sun.com
ff1923a307 [Bug 325307] infinite loop in SECU_FindCrlIssuer. r=julien 2006-02-02 02:45:02 +00:00
alexei.volkov.bugs%sun.com
fa47026f19 [Bug 324878] crlutil -L outputs false CRL names. r=julien 2006-02-02 02:35:07 +00:00
alexei.volkov.bugs%sun.com
22c94ce3da 325305: minor memory leak in CERT_FindCertByNameString. r=wtc 2006-02-02 00:57:54 +00:00
richm%stanfordalumni.org
943071919b added Windows build instructions - fixed spec file - added patch file for broken coreconf location.mk 2006-02-01 23:39:01 +00:00
sandeep.konchady%sun.com
831a7ad015 Bugzilla bug: 324451. Changed JSS version to 4.2.3. sr=glen, r=alexei 2006-02-01 23:18:57 +00:00
wtchang%redhat.com
db3d31ac92 Bugzilla Bug 318966: implemented the tests for the NIST RNG Validation
System.  r=glen.beasley.
Modified file: fipstest.c
Added file: rng.sh
2006-02-01 21:28:25 +00:00
wtchang%redhat.com
c20388e588 Bugzilla Bug 318966: added two RNG functions FIPS186Change_GenerateX and
FIPS186Change_ReduceModQForDSA to blapi.h for the NIST RNG Validation
System. r=relyea,nelsonb.
Modified files: blapi.h ldvector.c loader.c loader.h prng_fips1861.c
2006-02-01 21:18:44 +00:00
rrelyea%redhat.com
3ebd845ca9 Bug 319619 "large" ECC private keys cannot be exported through PKCS #11
1) Change the export encrypted private key function to ask the token the wrap
size rather than trying to figure it out ourselves.

2) Fix the soften to correctly return the size.


r=wtc, nelsonb
2006-02-01 16:43:47 +00:00
glen.beasley%sun.com
decb139ec2 318970 RSA FIPS tests r=wan-teh sr=bobRelyea 2006-01-31 00:49:40 +00:00
glen.beasley%sun.com
46b88044bc 318970 RSA FIPS tests r=wan-teh sr=bobRelyea 2006-01-31 00:49:02 +00:00
kaie%kuix.de
c5d0e51fc7 bug 323903, further improvements on displaying certificate extensions.
Patch contributed by Kaspar Brand, supplementing the recent checkin for bug 259031.
r=Martin v. Loewis / kengert
2006-01-30 23:21:00 +00:00
glen.beasley%sun.com
b4358c2729 318970 RSA FIPS Alg Tests r=wan-teh, sr=bRelyea 2006-01-30 19:58:52 +00:00
nelsonb%netscape.com
2071d2bc7b Fix broken build, caused by c++ style comment in c code. 2006-01-28 02:38:07 +00:00
nelsonb%netscape.com
ddca75b829 Set SSL2 and SSL3 timeout times properly for SSL server session cache.
Bug 223242. r=jullien.pierre
2006-01-28 02:21:31 +00:00
kaie%kuix.de
9c3dcd9900 bug 324109, Re-Add ocsp info string in cert manager, that was accidentially removed by a checkin for bug 212459
r=mscott sr=rrelyea
2006-01-27 21:12:37 +00:00
glen.beasley%sun.com
bb11f0b846 328967 DSA FIPS tests r=Wan-Teh 2006-01-27 18:53:07 +00:00
wtchang%redhat.com
b1f1c414d0 Removed a blank line that broke the ssl_stress function in ecssl.sh, which
cannot handle blank lines.
2006-01-27 18:44:13 +00:00
wtchang%redhat.com
d2bce3f900 Bugzilla Bug 320589: temporary workaround for SEC_SignData ECDSA signature
generation bug introduced by the previous checkin.
2006-01-26 23:51:42 +00:00
wtchang%redhat.com
55e2995224 Removed an extraneous semicolon after the last parameter in a function
declaration.
2006-01-26 23:21:39 +00:00
gavin%gavinsharp.com
8460174f41 Bug 323010: nsSecretDecoderRing::SetWindow should be NS_IMETHODIMP, not nsresult, patch by Jeff Walden <jwalden@mit.edu>, r+sr=dveditz 2006-01-26 01:06:42 +00:00
sandeep.konchady%sun.com
e7333df0cd Bugzilla bug: 316629. Increased SSLServerSocket timeout from 15 sec to
90 sec. Smaller timeout was causing the server to die before client connected.
sr=glen.beasley r=alexei.volkov
2006-01-24 00:42:48 +00:00
nelsonb%netscape.com
6f9d05f035 Remove unnecessary ISALIST test from sparc versions of freebl DSOs.
Bug 302658. r=jullien.pierre,wtchang
2006-01-22 08:43:57 +00:00
nelsonb%netscape.com
6a41641124 Make dbck Debug mode work with Softoken. Bug 323570. r=rrelyea. 2006-01-22 06:54:34 +00:00
nelsonb%netscape.com
944db2b329 Don't use variables as structure initializers. Bug 274512. Fix build
on HPUX.  r=julien.pierre,wtchang
2006-01-22 06:42:14 +00:00
nelsonb%netscape.com
06c2abf1fa Detect certdb reference leaks at shutdown with assertions. Bug 324103.
r=rrelyea.
2006-01-22 06:36:36 +00:00
wtchang%redhat.com
d6b2459e61 Bugzilla Bug 323977: use the "mapfile" (ld version script) on FreeBSD.
Build the freebl shared libraries with the -Bsymbolic flag for GNU ld.
r=nelsonb.  Thanks to Glenn Randers-Pehrson <glennrp@imagemagick.org> for
reporting this bug and verifying these changes.
Modified files: coreconf/FreeBSD.mk nss/lib/freebl/Makefile
2006-01-21 02:33:33 +00:00
nelsonb%netscape.com
9633334de2 Plug a cert DB reference leak in softoken, related to trust objects.
Bug 324103, r=rrelyea
2006-01-21 02:23:42 +00:00
wtchang%redhat.com
f116200e1d Bugzilla Bug 320589: miscellaneous code cleanup: distinguish between the
length of the field size and the length of the base point order.  Report
better error codes.  In ECDSA_VerifyDigest, removed unnecessary local
variables and be lenient in the signature lengths we accept.
r=relyea,nelsonb
2006-01-21 02:14:46 +00:00
julien.pierre.bugs%sun.com
1477ed4b30 Fix for bug 317856 . uninitialized variable correction. r=wtchang 2006-01-20 22:55:15 +00:00
cls%seawood.org
93e4f37f97 Do not attempt to install .chk files when cross-compiling.
Bug #317620 r=wtc
2006-01-20 21:52:18 +00:00
nelsonb%netscape.com
6f9e66cf05 Detect NULL server key pair pointer. Bug 321161. r=wtchang. 2006-01-20 17:40:21 +00:00
julien.pierre.bugs%sun.com
91408cf272 Fix for bug 317856 . compiler warnings in strsclnt 2006-01-20 00:43:23 +00:00
rrelyea%redhat.com
26731456ca Bugzilla Bug 95323. Conditionally compile nsscapi.
r=julien
2006-01-19 19:55:28 +00:00
nelsonb%netscape.com
58862edcbf change QA test order to be bottom-up. Bug 309412. r=jullien.pierre 2006-01-19 11:59:56 +00:00
nelsonb%netscape.com
e521b0a741 Back out last change, which broke the build. 2006-01-19 02:34:12 +00:00
nelsonb%netscape.com
a3089c6a9d Prevent crash when making new cert8.db from old cert5.db.
This is not the final solution, but it works.
Bug 320029. r=rrelyea,sr=julien.pierre.  On TRUNK.
2006-01-19 02:16:30 +00:00
nelsonb%netscape.com
f32a4d3f27 Add new function nsslowcert_DecodeAnyDBEntry. Correct the union
certDBEntry by adding the missing members. Bug 323570. r=rrelyea.
2006-01-19 02:09:37 +00:00
nelsonb%netscape.com
446a084b09 Softoken will no longer generate excessive key material for some SSL3
cipher suites.  Bug 274512. r=rrelyea.
2006-01-19 01:12:53 +00:00
wtchang%redhat.com
d27a2d48d9 Bugzilla Bug 318217: use the new NSPR functions PR_EmulateAcceptRead and
PR_EmulateSendFile added in NSPR 4.1.  r=nelsonb.
Modified files: manifest.mn sslimpl.h sslsock.c
Removed file: emulate.c
2006-01-18 23:06:57 +00:00
julien.pierre.bugs%sun.com
0e9451eaef Fix for bug 319495 . Clean up Makefiles for command-line tools. r=nelson 2006-01-18 22:44:39 +00:00
wtchang%redhat.com
c1b7e30c6f Bugzilla Bug 317620: use "pwd -W" to convert $(DIST) to an absolute
pathname (ABS_DIST) under MSYS on Windows.  We use the same method to
to define MOZ_BUILD_ROOT in configure.in.  The patch is contributed by
Chris Seawood <cls@seawood.org>.  r=wtc.
2006-01-18 21:32:27 +00:00
wtchang%redhat.com
ce5e5d7682 Bugzilla Bug 323379: need to set ADDON_PATH for libsoftokn3.so to load
libfreebl3.so as an add-on on BeOS.  Thanks to Doug Shelton
<doug@sheltonfamily.org>for reporting the bug and verifying the fix.
r=christophe.ravel.
2006-01-18 20:56:28 +00:00
rrelyea%redhat.com
f822c8f7d0 NSS ECDSA can only sign SHA-1 bug 320583
r=nelson patch ammended to change SHA-1 to HASH per wtc comment.
2006-01-17 00:38:59 +00:00
wtchang%redhat.com
7cb9201cf8 Bugzilla Bug 317620: landed NSS 3.11 on the Mozilla trunk. The patch is
contributed by Kai Engert <kengert@redhat.com>. r=wtc,bsmedberg.
Bugzilla Bug 288647: (security/manager/Makefile.in only) enable building
NSS with system NSPR.  The patch is contributed by Chris Seawood
<cls@seawood.org>.  r=wtc,kengert.
Modified Files:
	Makefile.in browser/installer/unix/config.it
	browser/installer/unix/packages-static
	browser/installer/windows/config.it
	browser/installer/windows/packages-static
	calendar/installer/windows/config.it
	calendar/installer/windows/packages-static
	camino/Camino.xcode/project.pbxproj
	embedding/config/basebrowser-installer-win.pkg
	embedding/config/basebrowser-mac-macho
	embedding/config/basebrowser-qnx
	embedding/config/basebrowser-unix
	embedding/config/basebrowser-win embedding/config/minimo-qnx
	embedding/config/minimo-unix mail/config/basemail-os2
	mail/config/basemail-unix mail/installer/windows/config.it
	mail/installer/windows/packages-static
	minimo/config/linux_package.sh security/manager/Makefile.in
	security/manager/psm.pkg toolkit/mozapps/installer/packager.mk
	xpinstall/packager/packages-os2
	xpinstall/packager/packages-static-unix
	xpinstall/packager/packages-static-win
	xpinstall/packager/packages-unix
	xpinstall/packager/unix/deliver.pl
	xpinstall/packager/win_mfcembed/config.it
	xpinstall/packager/windows/browser.jst
	xpinstall/packager/windows/config.it
	xulrunner/installer/mac/Makefile.in
2006-01-13 18:09:32 +00:00
wtchang%redhat.com
143f08953f Bugzilla Bug 320497: indicate that we don't need an executable stack.
r=wolfgang.rosenauer,jpierre.
Modified files: arcfour-amd64-gas.s mpi/mpi_amd64_gas.s
2006-01-13 17:33:10 +00:00
wtchang%redhat.com
386f28eb50 Bugzilla Bug 317858: gcc on Linux/ppc doesn't recognize the -z defs linker
flag, so we need to use -Wl to pass it to the linker. r=caillon.
2006-01-13 17:24:13 +00:00
alexei.volkov.bugs%sun.com
909bcd2da3 HP and AIX cert extension tests failure fix. 2006-01-13 07:59:31 +00:00
wtchang%redhat.com
cdf90d5eb6 Bugzilla Bug 323079: when libsoftoken and libssl load the freebl library,
first try without resolving symlinks.  If we fail to load the library and
the pathname is a symbolic link, resolve the symbolic link and try again.
r=jpierre. sr=relyea.
2006-01-12 23:46:31 +00:00
timeless%mozdev.org
8397d43a6a Bug 106386 Correct misspellings in source code
patch by philippuryear@gmail.com r=timeless rs=brendan
2006-01-12 07:57:31 +00:00
alexei.volkov.bugs%sun.com
d5a3092f79 cert extension test for 53229: certutil should not use gets(). julien:review+ 2006-01-12 01:09:03 +00:00
richm%stanfordalumni.org
7fcf5652b0 remove svrcore-config 2006-01-12 00:49:35 +00:00
kaie%kuix.de
96d896ee39 Use a new IID for changed interface nsIX509CertDB2, supplemental checkin for bug 316710
r=rrelyea
2006-01-12 00:26:19 +00:00
timeless%mozdev.org
916b41ef3d Bug 322429 nsICertPicker is misleading
r=kaie sr=bz
2006-01-11 08:29:49 +00:00
kaie%kuix.de
23733e48f0 bug 101996, temp file with guessable name used during p12 import.
r=rrelyea
2006-01-10 02:51:24 +00:00
kaie%kuix.de
76c2868c0e bug 137506, Only internal token's keys can be exported
Patch by Bob Relyea, r=kengert
2006-01-10 02:29:25 +00:00
kaie%kuix.de
23de42117e bug 149834, Enhance PSM speed by using new NSS API CERT_VerifyCertificateNow
Patch by John G. Myers, r=kengert
2006-01-10 02:14:04 +00:00
kaie%kuix.de
b3b97237fb bug 316710, Land some generic crypto backend code, mostly cleanup, some small enhancements
Patch by Bob Relyea, r=kengert
2006-01-10 02:07:47 +00:00
richm%stanfordalumni.org
827d15274c added .spec file for building RPM - package is svrcore-devel - a script svrcore-config for getting cflag and ldflag information, and a .pc file for pkg-config 2006-01-06 18:02:35 +00:00
wtchang%redhat.com
0d90a194f0 Bugzilla Bug 318968: fixed the build error with NSS_ENABLE_ECC unset.
Modified files: Makefile fipstest.c
2006-01-05 21:49:05 +00:00
wtchang%redhat.com
319fbb6196 Bugzilla Bug 321865: added coreconf files for Solaris 11. The patch is
contributed by Alfred Peng <alfred.peng@sun.com>. r=wtc.
Added files: SunOS5.11.mk SunOS5.11_i86pc.mk
2006-01-03 23:02:11 +00:00
cbiesinger%web.de
72ac26b6ce Bug 321504 Remove unneeded uses of nsIDocumentLoader
r+sr=bz
2005-12-26 16:45:59 +00:00
kaie%kuix.de
50e1f3ea38 bug 259031, Add support for displaying certificate extensions
Patch contributed by Martin v. Loewis.
r=kengert/rrelyea/wtchang sr=shaver/rrelyea
2005-12-25 21:09:45 +00:00
julien.pierre.bugs%sun.com
fb899e04af Fix the build busted by checkin for bug 318968 2005-12-23 03:14:36 +00:00
wtchang%redhat.com
d8c1021594 Bugzilla Bug 318968: added FIPS ECDSA algorithm test. r=glen.beasley.
Modified file: fipstest.c
Added file: ecdsa.sh
2005-12-22 22:22:17 +00:00
wtchang%redhat.com
e681f06b4a Bugzilla Bug 318962: combined a PORT_Realloc and a memset call into an
equivalent PORT_ZAlloc call.  r=glen.beasley.
2005-12-22 22:19:03 +00:00
wtchang%redhat.com
cb01eaf34d Bugzilla bug 318962: it is legal for PORT_Realloc(oldptr, 0) to return
NULL, so that shouldn't be treated as a memory allocation failure.
2005-12-22 01:39:17 +00:00
sandeep.konchady%sun.com
0d963476e9 Bugzilla bug: 320980. Updated common.c and upgraded the JSS version.
sr=glen.beasley
2005-12-21 18:39:24 +00:00
glen.beasley%sun.com
784abb2c93 318958 fixing c++/java comment to C 2005-12-21 00:29:44 +00:00
glen.beasley%sun.com
03bbc006b5 318958 fixing Monte Carlo test r=Wan-Teh 2005-12-21 00:13:52 +00:00
glen.beasley%sun.com
3ce12eeea4 318962 buffer fix for SHA Monte Carlo tests r=wan-teh 2005-12-20 18:20:50 +00:00
kaie%kuix.de
f7632288b8 trying to fix SUN bustage 2005-12-20 12:25:21 +00:00
kaie%kuix.de
55526430f9 b=255408 Need to be able to build mozilla --with-system-nss
r=wtc/bsmedberg
Note: patches for bugs 288647 and 317620 might be required before enabling this build feature works.
2005-12-20 09:47:11 +00:00
wtchang%redhat.com
3b577f224d Bugzilla Bug 317052: removed the obsolete file lib/base/whatnspr.c from
CVS.  r=relyea.
Modified Files:
	base.h error.c manifest.mn
Removed Files:
	whatnspr.c
2005-12-19 17:53:28 +00:00
wtchang%redhat.com
165d7b9185 Bugzilla Bug 272484: code cleanup. keythi.h: remove the unused type
definition of SEC_PKCS5KeyAndPassword.  p12d.c: We only need to set
p12dcx->currentASafeP7Dcx to NULL if it isn't NULL.  r=relyea.
Modified Files: cryptohi/keythi.h pkcs12/p12d.c
2005-12-19 17:46:30 +00:00
nelsonb%netscape.com
8888626b36 Fix build. Remove c++ style declaration of loop control variables. 2005-12-17 01:03:12 +00:00
glen.beasley%sun.com
f39056f8e1 318964 implement HMAC algorithm tests for FIPS 140-2 validation r=Wan-teh 2005-12-16 16:57:49 +00:00
rrelyea%redhat.com
4961f4ed28 Mac fixes to ckfw. 2005-12-16 01:57:41 +00:00