Commit Graph

4821 Commits

Author SHA1 Message Date
nelsonb%netscape.com
3f581fae9e Max crlutil return 0 or 1 correctly, depending on the success of the
operation.  Bug 232937.  r=jpierre.
2004-02-03 06:59:35 +00:00
nelsonb%netscape.com
0789875d7d Change script so that html output and logfile will be broken up into
clearly defined and easy-to-find sections.
2004-02-03 04:15:08 +00:00
nelsonb%netscape.com
abc134f1c0 Make output log file more readable by separating each test case. 2004-02-03 03:07:38 +00:00
bishakhabanerjee%netscape.com
3ed803969c fixed one typo 2004-02-03 01:27:47 +00:00
bishakhabanerjee%netscape.com
d95cb37ea2 checking with all latest revew comments addressed 2004-02-03 00:59:53 +00:00
neil%parkwaycc.co.uk
521d560df7 Bug 232186 Remove deprecated nsIPref usage from PKI chrome moa=kaie r=caillon sr=brendan 2004-01-31 21:11:27 +00:00
jgmyers%speakeasy.net
10b8ef3a20 Extend set of OIDs mapped to text: bug 97406 r=kaie sr=spitzer 2004-01-31 07:10:35 +00:00
jgmyers%speakeasy.net
328311b1d2 Don't use strcmp() on UTF-16: bug 154121 r=kaie sr=sspitzer 2004-01-31 07:09:21 +00:00
nelsonb%netscape.com
3dcf7f696e When an attempt to initialize a slot fails, free up the resources
right away, rather than waiting until NSS_Shutdown.  Bug 123693.
Second try.  r=relyea.
2004-01-30 04:15:47 +00:00
nelsonb%netscape.com
df07bc6cf4 Back out rev 1.90. It breaks shlibsign. 2004-01-29 23:34:21 +00:00
nelsonb%netscape.com
371b9d618e Export SECOID_AddEntry. Bug 132942. r=wtc. 2004-01-29 22:51:55 +00:00
nelsonb%netscape.com
50f63ee713 Invoke SECU_RegisterDynamicOids() so that more OIDs will print out.
Bug 132942.  a=wtc.
2004-01-29 22:48:58 +00:00
nelsonb%netscape.com
792e8d1e9e Bug 132942. r=wtc
Make the following enhancements to NSS's ASN.1 printing code:
- Print warning messages that are properly indendented.
- PrintAsHex notices when the buffer contains entirely printable characters, and is larger than an int, and prints it as text in that case.
- PrintRawString now indents the string, rather than always printing it on
a separate line.
- now prints decoded bit strings
- now prints BMP (UCS2) strings as strings (not as hex) when they contain only printable ASCII characters.
- now prints Universal (UCS4) Strings as strings (not hex) when they contain only printable ASCII characters.
- Decodes certain encoded data that was previously printed as hex.
- Generically decodes ASN.1 data, rather than merely printing an error, when the ASN.1 data doesn't fit a known template.
- properly handles all optional components of basic constraints extensions.
- Prints the names of the bits in the X509 Key Usage extension.
- Prints General Names.
- Print Auth Key ID extensions
- Print subject and issuer alt name extensions
- Print CRL distribution points extensions
- format and print name constraints extensions
- print Authority Information Access extensions
- Print optional X509v2 subject and issuer Unique ID bit strings
2004-01-29 22:45:20 +00:00
nelsonb%netscape.com
a691eadad9 Change some comments and one variable as suggested in review comments.
r=relyea,wtc.  Bug 124923.
2004-01-29 21:57:41 +00:00
nelsonb%netscape.com
ea227986af Make SECOID_AddEntry be thread safe. Export it. Bug 124923. r=relyea. 2004-01-29 21:23:36 +00:00
nelsonb%netscape.com
ee55e2e256 Plug leaks. Bug 123693. r=wtc,relyea 2004-01-29 21:18:24 +00:00
jpierre%netscape.com
f5d7282963 Fix for 232377 - assertion in vfychain with DSA cert. r=wtc, nelsonb 2004-01-28 23:25:07 +00:00
nelsonb%netscape.com
6d506e4aea Export cert functions that decode extensions and traverse decoded
extensions.  Bug 231881. r= relyea, wtc.
2004-01-28 23:23:45 +00:00
nelsonb%netscape.com
978fc338e7 Change program return value to reflect test outcome. Bug 221737. r=wtc 2004-01-28 22:30:27 +00:00
wchang0222%aol.com
cdec2796b4 Bugzilla bug 232380: deleted CERT_FindExpiredIssuer, which is dead code.
In cert_VerifyCertChain, make sure that subjectCert and issuerCert never
point to the same cert to prevent from destroying that cert twice.
r=jpierre,nelsonb.
Modified Files: certdb/cert.h certhigh/certvfy.c
2004-01-28 21:51:10 +00:00
jgmyers%speakeasy.net
a8dcaab07f address review comments: bug 231659 2004-01-28 04:29:14 +00:00
jgmyers%speakeasy.net
c9010119e9 rewrite utf8 parser for strictness: bug 231659 r=MisterSSL 2004-01-28 03:48:43 +00:00
jgmyers%speakeasy.net
21b30d0cf2 fix charset conversion: bug 185167 r=kaie sr=sspitzer 2004-01-28 03:44:38 +00:00
jpierre%netscape.com
a5aaee4048 Fix for 231051 - crlutil asserts after deleting CRL. r=wtc, nelsonb 2004-01-28 01:17:13 +00:00
wchang0222%aol.com
6d8fc90771 Bugzilla bug 231018: use AIX.mk for all AIX versions. Removed the
AIXm.n.mk files.  Removed support for AIX 3.2, 4.1, and 4.2.  Removed
unused make variable EXPORT_RULES.  Removed unused macro define -DAIX4_3.
The patch is contributed by Philip K. Warren <pkw@us.ibm.com>. r=wtc.
Modified Files:
	AIX.mk config.mk
Removed Files:
	AIX3.2.mk AIX4.1.mk AIX4.2.mk AIX4.3.mk AIX5.1.mk AIX5.2.mk
2004-01-27 23:55:38 +00:00
relyea%netscape.com
78ce53de23 bug 231698: fix regression in reading SDR data in databases written on 64-bit platforms.
r=MisterSSL
2004-01-27 18:31:29 +00:00
caillon%returnzero.com
b2141fb556 AddRef() the out parameter, and check for OOM.
Fixes bug 231709, iframes pointing to signed XUL crashes browser
r+sr=jst
2004-01-27 05:01:48 +00:00
jpierre%netscape.com
8c43abd07c Fix for 231051 - crlutil asserts after importing CRL. r=nelsonb, wtc 2004-01-27 00:02:16 +00:00
nelsonb%netscape.com
0df0cbe4cf Fix crashes that occur when optional policyQualifiers are not present.
Bug 230951. r=kinmoz.
2004-01-23 22:50:01 +00:00
wchang0222%aol.com
d3011eaa97 Bumped version to 1.50 (for NSS 3.10). 2004-01-23 22:15:39 +00:00
nelsonb%netscape.com
77a00800e8 RFC 3280 says Name Constraints do not apply to self-issued CA certs,
including self-issued intermediate CA certs (so-called "roll-over" certs).
This fixes an NISCC test failure.  Bug 231030. r=wtc.
2004-01-23 06:06:06 +00:00
nelsonb%netscape.com
61d56ab306 When a name attribute's value exceeds the maximum allowed length, display
a truncated version of it, followed by ellipsis.  Bug 220855. r=wtc
2004-01-22 23:45:30 +00:00
nelsonb%netscape.com
d45b087145 Add -a option for Base64 encoded ASCII input and output.
The -i and -o options now understand "-" to mean stdin and stdout.
Usage is displayed when -? or no arguments are given.
Bug 231536. r=relyea.
2004-01-22 22:08:59 +00:00
nelsonb%netscape.com
7709686c56 Correct NSS's key usage tests for certs with non-RSA public keys.
Bug 221638. r=relyea.
2004-01-22 22:04:54 +00:00
nelsonb%netscape.com
b99a74cbae Detect duplicate issuer name and serial number between two temp certs.
Bug 230996. r=ian, relyea.
2004-01-22 02:36:53 +00:00
nelsonb%netscape.com
1db7eb8535 Fix name constraints code to pass NIST PKITS test 38. r=wtc. Bug 231223. 2004-01-22 02:33:41 +00:00
nelsonb%netscape.com
ce75f8d873 Move an extern function declaration to the header file where it belongs.
Bug 229212. r=relyea.
2004-01-22 02:19:42 +00:00
nelsonb%netscape.com
b45bc04f3b Fix some erronous code that set SEC_ERROR_NO_MEMORY when there had been
no memory failure.  r=relyea.  Bug 231566
2004-01-22 02:17:26 +00:00
nelsonb%netscape.com
1a1c7cb409 Fix bug in cert path length validation. Bug 221644. r=jpierre 2004-01-21 05:32:18 +00:00
jpierre%netscape.com
f10a7a4ffd Support GeneralizedTime in NSS tools. bug 210530. r=wtc 2004-01-21 01:15:01 +00:00
nelsonb%netscape.com
14ff763caa Use the results from PK11_ProtectedAuthenticationPath(slot) in the
password callback function.  Bug 229023. r=relyea.  verified by submittor.
2004-01-21 00:18:59 +00:00
wchang0222%aol.com
5963bd156f Bugzilla bug 229299: fixed unused variable warning. r=nelsonb. 2004-01-20 22:57:40 +00:00
jgmyers%speakeasy.net
ffbdacaeb8 fix review comment: bug 53133 2004-01-20 19:57:17 +00:00
nelsonb%netscape.com
b35fce94e4 Make this code build on Windows as well as Unix. 2004-01-19 01:05:53 +00:00
nelsonb%netscape.com
0ec6f827c6 Fix two more incorrect cert names that caused erroneous test results.
Bug 231221.
2004-01-17 05:55:20 +00:00
nelsonb%netscape.com
d9ccd2ab6f Correct this script to more accurately report errors. Bug 231221. 2004-01-17 05:04:42 +00:00
nelsonb%netscape.com
d8dc4c1455 Detect absent isCA flags in basic constraints. Detect and reject negative
or too large positive path length constraints in basic constraints.
Bug 221644. r=jpierre.
2004-01-16 21:33:16 +00:00
nelsonb%netscape.com
5e140a71db Fix template for Cert policy extensions. Bug 230951, r=jpierre 2004-01-16 05:36:08 +00:00
nelsonb%netscape.com
ad4476ab50 Fix NSS parsing of Issuer Unique ID and Subject Unique ID fields in
certificate.  Bug 216116. r=jpierre
2004-01-16 02:11:44 +00:00
nelsonb%netscape.com
5dea4e12cf Add vfychain to list of NSS cmds being built nightly. r=wtc. Bug 231025 2004-01-16 02:03:08 +00:00
jgmyers%speakeasy.net
fb8076054e fix comment per review: bug 53133 2004-01-16 01:04:57 +00:00
wchang0222%aol.com
30ada30854 Set JSS version to 3.5.
Modified Files:
	org/mozilla/jss/CryptoManager.java
	org/mozilla/jss/util/jssver.h pkg/solaris/Makefile.com
2004-01-16 00:50:21 +00:00
wchang0222%aol.com
c159a3cec3 Another file, pkg/solaris/Makefile.com, also needs to be updated when we
change the JSS version.
2004-01-16 00:48:49 +00:00
wchang0222%aol.com
dd0e83eb66 Minor change after review of previous checkin. Bug 53133. 2004-01-15 22:34:26 +00:00
relyea%netscape.com
30bb314da7 Fix build problems on some platforms. 2004-01-15 16:27:02 +00:00
wchang0222%aol.com
617cabf1fa Set NSS version to 3.10 Beta. 2004-01-15 15:08:58 +00:00
jgmyers%speakeasy.net
a71fdf6c5c Convert T61String-labeled ISO-8859-1 to UTF-8: bug 53133 r=nelsonb a=wtc 2004-01-15 06:23:14 +00:00
nelsonb%netscape.com
65088fd320 Add 2 additional OIDs to the list of acceptable digestEncryptionAlgIDs,
per RFC 3370. r=thayes.  Bug 230761.
2004-01-14 22:20:44 +00:00
relyea%netscape.com
49152980bd Tool to manage pkcs 11 module tests. 2004-01-14 21:34:20 +00:00
nelsonb%netscape.com
0a29c7fe2b Fix double free introduced in rev 1.54. r=wtc. bug 230774.
Bug occurs only in NSS utilities that import base64 encoded files, e.g.
with the -a option.
2004-01-14 01:19:26 +00:00
wchang0222%aol.com
ab1b1d58f9 Bugzilla bug 229289: fixed an unused variable warning. r=relyea. 2004-01-13 01:59:41 +00:00
jst%mozilla.jstenback.com
c000ae86e8 General deCOMtamination of nsIDocument, nsIContent, and nsIFormSubmission. Eliminating nsIAttributeContent, and doing some URL->URI changes. r+sr=peterv@propagandism.org 2004-01-09 23:54:21 +00:00
wchang0222%aol.com
7bcf0f4ab9 Upgraded to NSPR 4.4.1 and NSS 3.9. 2004-01-09 02:34:14 +00:00
wchang0222%aol.com
2543d8c8d1 Bugscape bug 54500: made uniqueNamedKeyExists public. 2004-01-08 18:09:15 +00:00
nelsonb%netscape.com
8dc069e8e4 Overload the error code SSL_ERROR_RX_RECORD_TOO_LONG to report SSL2
records that are too short.  Bugscape bug 54814
2004-01-08 06:52:00 +00:00
jpierre%netscape.com
8a6338d551 Rename PK11_PubDeriveExtended to PK11_PubDeriveWithKDF 2004-01-08 01:37:46 +00:00
wchang0222%aol.com
435bc1ad86 Set NSS version to 3.9. 2004-01-08 01:04:56 +00:00
jpierre%netscape.com
e7036921ca Rename PK11_FindSlotsByAliases to PK11_FindSlotsByNames 2004-01-07 23:12:01 +00:00
jpierre%netscape.com
70f0bbf00d Rename CERT_DecodeTimeChoice/CERT_EncodeTimeChoice to DER_DecodeTimeChoice/DER_EncodeTimeChoice 2004-01-07 23:07:24 +00:00
bsmedberg%covad.net
d0f309943a Continuing to land the PACKAGING_20030906_BRANCH for bug 20640. Not part of the build, yet. 2004-01-07 13:37:00 +00:00
bsmedberg%covad.net
274ef7cd49 Beginning to land the PACKAGING_20030906_BRANCH for bug 20640. Not part of the build, yet. 2004-01-07 01:22:31 +00:00
nelsonb%netscape.com
5d8bd61334 Fix crashes in NSS_CMSSignedData_GetDigestValue and
NSS_CMSContentInfo_GetContent that occur when a detached signature is not
accompanied by the data on which the signature was computed. Bug 229242.
Make NSS_CMSContentInfo_GetInnerContent and NSS_CMSMessage_GetContent
more easily debugged, by storing the results returned by function calls
in automatic variables before using them in subsequent calls/switches.
2004-01-07 00:09:17 +00:00
relyea%netscape.com
6a63299667 Bug 229193
Patch by wtc revied by relyea & ian
2003-12-31 23:19:26 +00:00
bryner%brianryner.com
c54ac86e5f Fix the security warning dialogs to work as designed for Firebird:
- All dialogs will appear the first time a user encounters them
 - The "show every time" checkbox will default to off
 - If the user checks the checkbox to see the dialogs every time, the choice will be remembered.

Because of the change in default prefs, this will cause Firebird users to see these dialogs again (but defaulted to not show after that) when upgrading.  Bug 172091, r=brendan, sr=ben.
2003-12-31 23:03:08 +00:00
wchang0222%aol.com
144c518d7a Set NSS version to 3.9 Beta 6. 2003-12-24 06:22:49 +00:00
wchang0222%aol.com
1550e4ab3e Removed unused variable 'val'. 2003-12-23 21:40:52 +00:00
wchang0222%aol.com
0ea554f2f9 Fixed unused variable compiler warning about 'html'. Declare it inside
the same ifdef with which it is used.
2003-12-23 21:37:07 +00:00
wchang0222%aol.com
34519e6ab3 Removed unused variable 'rawSigLen'. 2003-12-23 21:24:01 +00:00
wchang0222%aol.com
11c67b98af Removed unused variable 'attribute'. 2003-12-23 21:21:39 +00:00
wchang0222%aol.com
60cf880826 Include "nsslocks.h" for nss_InitLock. 2003-12-23 02:09:55 +00:00
wchang0222%aol.com
5bfcd81514 Declare the argument to SECKEY_ECParamsToKeySize as const.
Modified Files: seckey.c pk11skey.c
2003-12-23 02:05:28 +00:00
wchang0222%aol.com
95e1ce0279 Bugscape bug 54500: trim preceding/trailing whitespace from passed-in
String arguments.
2003-12-23 01:19:48 +00:00
wchang0222%aol.com
09584fb9f9 Return a value of the correct type. 2003-12-23 01:03:39 +00:00
wchang0222%aol.com
290a965230 Fixed a spelling error. 2003-12-23 00:52:06 +00:00
wchang0222%aol.com
0433b41c3b Moved ecl-curve.h from the EXPORTS to the PRIVATE_EXPORTS list. 2003-12-23 00:17:04 +00:00
wchang0222%aol.com
79387320b7 Renamed SECKEY_ECParams2KeySize as SECKEY_ECParamsToKeySize. Do not export
this function from the nss3 shared library.
Modified Files: seckey.c pk11skey.c nss.def
2003-12-22 23:36:40 +00:00
wchang0222%aol.com
7adfc17d1d Declare the 'input' argument to CERT_DecodeTimeChoice as 'const'. Removed
an extraneous semicolon (;) after the SEC_ASN1_CHOOSER_IMPLEMENT macro.
Modified Files: secder.h sectime.c
2003-12-22 23:33:39 +00:00
wchang0222%aol.com
4b807fd2b8 Bugzilla bug 228907: added a stub implementation for the obsolete native
function Java_org_mozilla_jss_pkcs11_PK11Cert_getNickname, which is listed
in the symbol export file jss.def.
2003-12-20 15:56:11 +00:00
nelsonb%netscape.com
76bb8f646c Some further cleanup of p12d.c. Bugscape bug 52528. r=wtc. 2003-12-20 01:33:06 +00:00
wchang0222%aol.com
7905ca6b6f Set NSS version to 3.9 Beta 5. 2003-12-20 00:35:01 +00:00
wchang0222%aol.com
9ccb6b87c5 Made wincx the last argument of PK11_PubDeriveExtended. r=relyea.
Modified Files: pk11func.h pk11skey.c ssl3con.c
2003-12-19 23:54:29 +00:00
nelsonb%netscape.com
312061509b Impose new limits on RSA public key sizes. 8k bits for modulus,
64 bits for public exponent.  This prevents certain attacks on SSL
servers.  Bugscape bug 54019.  r=wtc,relyea.
2003-12-19 23:50:45 +00:00
wchang0222%aol.com
010acd81c1 PK11_MoveKey was renamed PK11_MoveSymKey. r=relyea.
Modified Files: symkeyutil.c nss.def pk11func.h pk11skey.c
2003-12-19 23:29:43 +00:00
relyea%netscape.com
6e767fb4eb Make database access to the key db thread safe. 2003-12-19 23:24:48 +00:00
relyea%netscape.com
8ec4937462 Add keydb lock type. keydb should be locked like the certdb. 2003-12-19 23:24:00 +00:00
wchang0222%aol.com
5014045f8c Backed out the previous checkin, which broke our S/MIME QA tests. 2003-12-19 22:54:20 +00:00
wchang0222%aol.com
fac46295ff Bugzilla bug 228624: we need to call STAN_ForceCERTCertificateUpdate if
the cert's instances changed.  r=relyea.
2003-12-19 22:33:12 +00:00
wchang0222%aol.com
64276531dd Bugscape bug 54627: made the fix for NSS_CMSSignedData_Encode_BeforeData
the same as the code in NSS_CMSSignedData_Decode_BeforeData.  r=nelsonb.
2003-12-19 22:08:12 +00:00
wchang0222%aol.com
c367aa403a Bugscape bug 54500: Improved the previous checkin: fixed leaks of the
return values of PK11_GetSymKeyNickname. Removed unnecessary assignment
statements "symKeyObj = NULL;".  Removed an unnecessary else { }.
2003-12-19 19:36:30 +00:00
wchang0222%aol.com
deb29c8f1f Import NSPR 4.4.1. 2003-12-19 17:02:57 +00:00