Commit Graph

5089 Commits

Author SHA1 Message Date
jpierre%netscape.com
d6e93928ed Fix for 254393 - r=nelsonb . PK11_FindKeyByAnyCert returned invalid key objects 2004-08-06 02:24:31 +00:00
jpierre%netscape.com
5b46cda86f Fix for 249488 - make Single-Threaded mode work 2004-08-03 23:24:37 +00:00
relyea%netscape.com
c2b70291da 1) Add time command to time specific functions.
2) improve the help system.
3) bug fixes for arrays.
2004-07-30 00:25:21 +00:00
relyea%netscape.com
b4b4a3f900 Error strings for new error codes. 2004-07-30 00:19:49 +00:00
relyea%netscape.com
e715f98c50 Bugzilla Bug 252702
NSS needs to handle better token insertion and removal.

Applied from patch to NSS 3.9
2004-07-29 23:38:14 +00:00
jpierre%netscape.com
14456163f2 Fix for 249488 - root cert module requires locking functions in CK_C_INITIALIZE_ARGS . r=ian, sr=relyea 2004-07-29 22:51:00 +00:00
christophe.ravel.bugs%sun.com
bb366dc102 238319: Sun packages changes. 2004-07-29 18:43:00 +00:00
nelsonb%netscape.com
20e64eb7e5 Correct option parsing, and add missing error messages. 2004-07-28 21:10:07 +00:00
kaie%kuix.de
491abff18f b=249004 Do not import invalid/untrusted certs, prevent a DoS that disables SSL connections to trusted peers.
r=relyea sr=jst/brendan
2004-07-28 00:31:37 +00:00
jst%mozilla.jstenback.com
282f75a3f0 Fixing bug 253121. Make wyciwyg channels and documents carry the source channels security info. r=darin@meer.net, sr=bzbarsky@mit.edu 2004-07-28 00:26:58 +00:00
nelsonb%netscape.com
c55043fc52 Support GeneralizeTime in the CRMF library. Bug 219080. r=julien.
Patch by nelson and julien.
2004-07-27 05:06:02 +00:00
christophe.ravel.bugs%sun.com
4380067b18 238319: Sun packages changes. 2004-07-22 17:52:04 +00:00
christophe.ravel.bugs%sun.com
d96ede69ac 238319: Sun packages changes. 2004-07-21 23:23:41 +00:00
relyea%netscape.com
7e82fd4194 Bug 250687
NSS Crashes or leaks Cert references if bad certs are passed up by PKCS #11 modules.
r=nelson
sr=ian
2004-07-21 18:18:05 +00:00
relyea%netscape.com
57260fe853 Backing out pk11cert.c changes (not ready for checkin yet). (revert to 1.133) 2004-07-20 23:04:31 +00:00
relyea%netscape.com
950ffdabc7 Fix optimized builds (make tinderbox go green). 2004-07-20 23:02:04 +00:00
glen.beasley%sun.com
b3719b51cb 251635 upgrading to JSS to 4.0 2004-07-20 20:39:25 +00:00
relyea%netscape.com
c5e993c9fd Missed function definition in previous checkin. 2004-07-19 22:37:48 +00:00
relyea%netscape.com
d0af60d089 refactor pk11util, splitting large single files down to a managable size.
bug 246130. The new factor is:

pk11akey.c - asymetric keys constructed from pk11cert.c and pk11skey.c
pk11auth.c - authentication/password management factored from pk11slot.c
pk11cert.c - cert code with private key, crls and trust factored out.
pk11ctx.c -- pkcs11 context code, factored out of pk11skey.c
new pk11func.h -- for backward compatibility.
pk11mech.c - mechanism mapping code, factored mostly from pk11slot.c
pk11nobj.c - netscape objects (crls and trust), factored mostly from pk11cert.c
pk11obj.c - generic object support, factored from pk11skey.c pk11slot.c and
pk11cert.c
pk11priv.h -- private functions factored from pk11func.h
pk11pub.h -- public functions factored from pk11func.h
pk11skey.c - now only symetric key ops; private, public key ops, generic ops
and crypto contexs have been factored out.
pk11slot.c - still slot operations. Authentication, generic object ops,
mechanism mapping has been factored out.

This patch should only have refactoring, no new functions or other changes.
2004-07-19 22:12:38 +00:00
nelsonb%netscape.com
371f19c6b9 Use the "c beautifier" (cb) to give this code a common K&R style with
an indentation of 4.  Also rewrap a few strangely wrapped lines.
Bug 249330.
2004-07-16 00:04:47 +00:00
nelsonb%netscape.com
2ed86b689a Apply review feedback to signtool sources. Add test case to QA tests.
Bug 248751.
2004-07-15 22:21:57 +00:00
nelsonb%netscape.com
07c4feeb45 Add -X option to produce signed XPI files for mozilla. Bug 248751.
Path contributed by jeff klawiter <jeff@j-maxx.net>. r=nelson
2004-07-15 00:01:50 +00:00
nelsonb%netscape.com
98afc62590 Allow subtemplates to have the SEC_ASN1_DYNAMIC flag without asserting.
Bug 245429. Patch 4 of 5.  r=relyea.
2004-07-13 06:02:54 +00:00
nelsonb%netscape.com
55aa7ccc43 Fix some casts. Wrap some long lines. Remove a bogus assert.
Factor a function call out of the arguments of another function call,
which is mostly to make that code more easily debugged.
This is patch 3 of 5 for bug 245429. r=wtc.
2004-07-13 05:52:24 +00:00
nelsonb%netscape.com
f7b4d4bbb7 Function sec_asn1e_write_contents was two functions combined into one,
separated by one huge if-then-else.  They do different things and take
different arguments.  So, I split them into two separate functions:
sec_asn1e_write_contents and sec_asn1e_write_contents_from_buf
the latter of which takes a buf pointer and length argument.
The if statement that chooses between the two is now in the caller.
This is patch 2 of 5 for bug 245429.  r=wtc.
2004-07-13 05:49:48 +00:00
nelsonb%netscape.com
f961aed641 rename "explicit" to "isExplicit" because MSVC6 thinks explicit is a c
keyword.  rename "ignore_stream" to "disallowStreaming" because it
doesn't merely ignore.  rename "ignoresubstream" to "disallowStreaming"
for the same reason.  Patch 1 of 5 for bug 245429. sr=wtc.
2004-07-13 05:44:47 +00:00
nelsonb%netscape.com
55151bc829 Greatly improve the output of the PKCS12 encoder. Adds output buffering
to the output callback function that is called by the ASN.1 encoders,
and which feeds into the next PKCS7 encoder in the outward direction.
Bug 210179.  sr=relyea
2004-07-13 05:31:34 +00:00
nelsonb%netscape.com
33f87dfef9 Ensure that the CRMF library always uses a non-null pool pointer when it
calls the ASN1 Decoder.  This prevents leaks.  Bug 178898. r=relyea.
2004-07-13 05:12:31 +00:00
wchang0222%aol.com
409574ee15 Bugzilla bug 248981: PKCS #11 modules that are based on older lib/ckfw (for
example, the nssckbi module) save a pointer to the CK_C_INITIALIZE_ARGS
passed to them. So if we pass a pointer to the stack variable moduleArgs,
the pointer will point to a structure that has gone out of scope. To
prevent crashes in these broken modules, we continue to pass a pointer to
the global secmodLockFunctions whenever we can. r=relyea.
2004-07-08 23:23:50 +00:00
wchang0222%aol.com
f3c6f7397f Bugzilla bug 249284: removed a duplicate declaration of
CERT_DecodeDERCertificate. r=nelsonb. Thanks to Chris Newman
of Sun for the bug report.
2004-07-07 00:48:53 +00:00
jpierre%netscape.com
4bfc6dca87 Fix for 248981 - make SECMOD_LoadPKCS11Module thread safe. r=relyea 2004-07-01 19:20:51 +00:00
nelsonb%netscape.com
e054aef7bf Output properly encoded PQGParams. r=wtc. Bug 247738. 2004-07-01 02:07:02 +00:00
jpierre%netscape.com
309d389ab8 Fix for 249310 - add option to disable SSL2 in selfserv . r=nelson 2004-07-01 02:06:31 +00:00
nelsonb%netscape.com
23b32f634b Treat non-repudiation-only certs as valid signature certs.
Bug 240456.  r=wtc, sr=relyea.
2004-07-01 00:26:00 +00:00
nelsonb%netscape.com
3bc297e56b Correct NSS to use the most specific, not most general CN attribute in
a cert subject name.  Bug 197964.  r=wtc.
2004-07-01 00:21:42 +00:00
nelsonb%netscape.com
1d3641f999 Follow the SSL2 specification more closely in accepting and rejecting
SSL messages.  Previously NSS would reject some it should accept
and vice versa.  Bugscape bug 57121. r=wtc,julien
2004-06-24 02:02:39 +00:00
christophe.ravel.bugs%sun.com
3e7b859eec 238319: Sun packages changes. 2004-06-24 01:18:12 +00:00
nelsonb%netscape.com
35ab44f5ac Fix certutil's ability to read PQG files. Make certutil able to read
the files produced by the command "makepqg -a".  Plug some memory leaks.
r=relyea,vipul  Bug 247739
2004-06-23 22:23:00 +00:00
relyea%netscape.com
501db85dbc Bug 244914, 244907 r=nelsonb
Add support for unprotected private keys without requiring authentication.
Add support to access application specific PKCS #11 objects through NSS.
2004-06-21 23:01:53 +00:00
nelsonb%netscape.com
3b8151e40a Initialize the "type" member in the SECItems returned by
PK11_PQG_ParamGetSeedLen so encoded values will be correct.
Bug 247737. r=relyea.
2004-06-21 19:22:02 +00:00
saul.edwards%sun.com
172f3b4cbc Bug 245518: add RPATH to BUILD_SUN_PKG, add $ORIGIN to rpath 2004-06-19 06:09:03 +00:00
jpierre%netscape.com
a11c975bed Fix for 237934 - nss_InitLock not atomic. r=nelson 2004-06-19 03:21:39 +00:00
jpierre%netscape.com
65862c5e4f Wrap long lines 2004-06-18 02:03:30 +00:00
jpierre%netscape.com
e8c134e6c5 Restore comment that got removed accidentally. And fix typo in it. 2004-06-18 01:34:11 +00:00
jpierre%netscape.com
6aa648b89e Fix for 247406 . r=wchang0222,glen.beasley 2004-06-18 01:28:41 +00:00
jpierre%netscape.com
b03fe203f6 Fix for 178897 . QuickDER optimizations . r=nelsonb 2004-06-18 00:38:45 +00:00
jpierre%netscape.com
3f739f181e Backout part of the QuickDER changes from 178895 . r=relyea 2004-06-17 23:23:59 +00:00
nelsonb%netscape.com
44e789e395 Destroy cert references held inside the CMMFCertRepContent struct when
that struct is being destroyed.  Plugs a cert reference leak.
Bug 245420.  r=wtc.
2004-06-17 22:12:34 +00:00
christophe.ravel.bugs%sun.com
9601367ad8 238319: Sun packages changes. 2004-06-17 21:57:20 +00:00
roc+%cs.cmu.edu
0f4150a4e5 Bug 226439. Convert codebase to use AppendLiteral/AssignLiteral/LowerCaseEqualsLiteral. r+sr=darin 2004-06-17 00:13:25 +00:00
christophe.ravel.bugs%sun.com
0feee5ab34 238319: Sun packages changes. 2004-06-15 16:47:00 +00:00
christophe.ravel.bugs%sun.com
1693bf117b 238319: Sun packages changes. 2004-06-15 03:50:17 +00:00
christophe.ravel.bugs%sun.com
28f7f0f697 238319: Sun packages changes. 2004-06-14 23:24:58 +00:00
wchang0222%aol.com
8cb927d373 Bugzilla bug 233320: pk11_OpenKeyDB should not return SECFailure (not a
CK_RV value).  Removed two unnecessary assignment statements.  r=relyea.
2004-06-11 22:25:13 +00:00
pedemont%us.ibm.com
88ac5ebad1 Bug 245742 - Crash/memory corruption after using NTLM on Mac. r/sr=darin 2004-06-11 22:06:16 +00:00
christophe.ravel.bugs%sun.com
878abc6269 238319: Sun packages changes. 2004-06-10 18:28:19 +00:00
nelsonb%netscape.com
17e15e8590 Don't crash when CERT_DestroyCertificate is called with a cert with a
null arena pointer.  Bug 245943. r=julien
2004-06-09 07:47:51 +00:00
nelsonb%netscape.com
c89fea6d2e Fold function definition so editor can find it. 2004-06-09 02:22:38 +00:00
jpierre%netscape.com
909489401d Fix for 178895 - QuickDER optimizations. r=relyea 2004-06-05 00:50:32 +00:00
nelsonb%netscape.com
6edf60ce5c Make crmftest compile and run with NSS 3.10 shared libraries.
Enhance the command line parsing to permit portions of the tests
to be individually selected.  The code still doesn't all run
to completion without errors, but it gets MUCH farther than before.
Bug 244329.
2004-06-03 03:56:48 +00:00
nelsonb%netscape.com
45fbe7addd Fix an erroneous assertion. Clean up some other code. Bug 244929.
r= jpierre, wtc.
2004-06-03 03:41:07 +00:00
nelsonb%netscape.com
4bc475a605 Export symbols needed for crmftest. r=relyea. bug 244329. 2004-06-02 22:19:33 +00:00
jpierre%netscape.com
8f86eb3572 Fix for 244915 . resolve issues from previous patch 2004-06-02 01:56:43 +00:00
jpierre%netscape.com
6986ea78e8 Fix for 244915 - r=wtc, misterssl . Correctly build freebl on Solaris 10 2004-06-02 00:40:53 +00:00
bishakhabanerjee%netscape.com
4cb1108d34 chenged log names to better align them in summary, added SMIME test output
to emailed log summary
2004-05-27 22:09:03 +00:00
nelsonb%netscape.com
f2dedf230d a) adds the missing code to put stdin into binary mode.
b) add the -i option to the usage message
c) builds addbuiltins with shared libs
   (includes "nssrenam.h" for some symbols)
d) build addbuiltins as part of the normal builds.
2004-05-25 21:47:44 +00:00
jpierre%netscape.com
3c9a7eb176 Fix for 244095 - link NSS libraries with -R $ORIGIN on Solaris 2004-05-25 00:13:12 +00:00
roc+%cs.cmu.edu
0e3ff503fb Bug 226439. Convert Seamonkey to EqualsLiteral. rs=darin 2004-05-22 22:15:22 +00:00
nelsonb%netscape.com
ed9a466108 Fix crash when array member is used as variable. Bug 243655. r=relyea. 2004-05-22 01:24:22 +00:00
nelsonb%netscape.com
6481991845 Use "slop time" in nextUpdate validity check for CRLs. Bug 242146.
r=julien.pierre
2004-05-22 01:03:26 +00:00
nelsonb%netscape.com
81bf125709 Add missing license block. Wrap long lines. Bug 243580. r=relyea. 2004-05-22 00:56:46 +00:00
bishakhabanerjee%netscape.com
f7ffa7b7e8 script to run NISCC tests; cvs pull of NSS and does special build, runs SMIME
and SSL tests, logs results to file, summarizes log results
2004-05-20 00:56:40 +00:00
ian.mcgreer%sun.com
92584e19c6 certdata.c is checked in and shouldn't be ignored 2004-05-17 20:47:35 +00:00
ian.mcgreer%sun.com
be72ca16c5 bug 180268, reimplement ssl step-up for builtins 2004-05-17 20:08:38 +00:00
christophe.ravel.bugs%sun.com
e23dc68c35 238319 : Sun packaging changes 2004-05-13 07:13:01 +00:00
wchang0222%aol.com
081ede0ac7 Bugscape bug 57081: If the make variable NISCC_TEST is defined at build
time, add -DNISCC_TEST to the compile command line.  The NISCC_TEST macro
enables special code that's conditionally compiled for NISCC testing.
Modified Files:
	cmd/smimetools/Makefile cmd/smimetools/cmsutil.c
	lib/ssl/config.mk lib/ssl/manifest.mn
2004-05-13 01:29:15 +00:00
relyea%netscape.com
5d4e32454a scripts for pk11util 2004-05-12 23:49:39 +00:00
ian.mcgreer%sun.com
1d3c78cf5a program for generating FIPS algorithm test results 2004-05-12 17:30:31 +00:00
jpierre%netscape.com
df13c3077c Fix for 240784 - FIPS doesn't work on OS/2 . r=mkaply,wtc 2004-05-11 04:01:28 +00:00
jpierre%netscape.com
79af302c8e Fix for 242984 - crash with application having incomplete PRIOMethods. r=nelsonb,wtc 2004-05-11 03:48:25 +00:00
jpierre%netscape.com
b97913e992 Fix for 240361 - crash in CERT_CheckValidTimes 2004-05-11 02:43:10 +00:00
cbiesinger%web.de
a43c8c5c29 Bug 242457 make NTLM Auth Module use nspr logging, instead of #ifdef+printf
r+sr=darin
2004-05-08 15:05:56 +00:00
jpierre%netscape.com
576e2a2776 Fix for 202979 . Resolve binary compatibility issue for CERT_ImportCerts . r=wtc, jpierre 2004-05-05 01:15:39 +00:00
relyea%netscape.com
1d997eb6cd Fix mechanism command. 2004-05-05 00:36:52 +00:00
wchang0222%aol.com
59319a778c Bugzilla bug 238914: declare namesRunningOffset as unsigned long to avoid
overflow. Fixed a regression introduced by the previous checkin ('nss' is
allowed to be NULL).  Set slotStrings[i] to NULL after freeing to avoid
double-free. r=relyea,nelsonb.
2004-04-30 23:41:44 +00:00
darin%meer.net
1e8d941f96 landing patch for bug 241124 "move GSSAPI code behind nsIAuthModule so it can be used by mail protocols" r=cneberg sr=bryner 2004-04-28 02:12:52 +00:00
gerv%gerv.net
9bd361a285 Bug 236613: change to MPL/LGPL/GPL tri-license. Restore Id: lines. 2004-04-27 23:04:40 +00:00
gerv%gerv.net
3634d4d94b Bug 236613: change to MPL/LGPL/GPL tri-license. 2004-04-25 15:03:26 +00:00
bzbarsky%mit.edu
c3311361cd VerifySignature should not leak on various failures. Bug 241013, r=jgmyers,
sr=brendan
2004-04-22 17:40:51 +00:00
jst%mozilla.jstenback.com
6a9d89a9fa Fixing bug 240723. Cleaning up nsIFilePicker a bit, no more nsIDOMWindowInternal, and use our string classes and not raw strings. r=caillon@gmail.com, sr=bzbarsky@mit.edu 2004-04-21 23:38:22 +00:00
wchang0222%aol.com
76e3cc1538 Bugzilla bug 90906: removed unused variable 'size'. The patch is from
Serge GAUTHERIE <gautheri@noos.fr>. r=wtc.
2004-04-21 18:57:51 +00:00
gerv%gerv.net
8b8dde7d95 Bug 236613: change to MPL/LGPL/GPL tri-license. 2004-04-18 22:01:16 +00:00
jgmyers%speakeasy.net
b2f4a8b199 move cert details code: bug 230655 r=ddrinan sr=jag 2004-04-18 21:20:31 +00:00
bryner%brianryner.com
642f7ede36 deCOMtaminate nsIScriptObjectPrincipal (bug 240745). This also fixes some code in nsCrypto.cpp that sems to have been mis-braced (I don't think it was working as intended). r+sr=jst. 2004-04-18 00:28:47 +00:00
varga%nixcorp.com
2cd056deb1 Fix for bug 221619. Tree widget refactoring and enhancement. r=neil sr=bryner 2004-04-17 05:53:38 +00:00
neil%parkwaycc.co.uk
a196934eb6 Bug 240256 Fixing DOCTYPE to match document element p=vberon@mecano.gme.usherb.ca r=me sr=mscott 2004-04-13 09:34:47 +00:00
timeless%mozdev.org
a69d43c721 Bug 237844 nsSecureBrowserUIImpl::~nsSecureBrowserUIImpl doesn't need to removeObserver
r=jgmyers sr=alecf
2004-04-13 05:16:05 +00:00
jgmyers%speakeasy.net
50d65e5e71 Check trust bits before examining cert fields when classifying certs: bug 178692 r=ssauxh sr=brendan a=asa 2004-04-11 21:03:05 +00:00
nelsonb%netscape.com
542f76a15a Change ssl test scripts to invoke tstclnt with the server's FQDN.
Necessary because of fix to bug 234058.
2004-04-08 03:01:02 +00:00
nelsonb%netscape.com
abe92ad094 Remove code that attempted to compare simple host names in URLs with
FQDNs in certificate host names.  This was insecure.  Bug 234058. r=wtc.
2004-04-08 00:17:46 +00:00
relyea%netscape.com
e4ab49876e Fix missing indexes when fetching lengths (get tinderbox working again). 2004-04-07 19:00:08 +00:00
relyea%netscape.com
66be1e00e1 Bug 239827: Fix race condition in unwrap private key (if target key is symetric). 2004-04-07 01:18:46 +00:00
relyea%netscape.com
77bd494c63 Bug 238914. r=wchang sr=misterSSL
Agressive checks on database data before we actually reference it. This
should prevent crashes because of invalid databases.
2004-04-07 00:58:58 +00:00
wchang0222%aol.com
a032d5bd44 Bugzilla bug 238565: made the comment match the code. r=nelsonb. 2004-03-27 01:51:25 +00:00
wchang0222%aol.com
ec68ee33b1 Bugzilla bug 237934: in nss_InitLock, nss_InitMonitor, and
NSSRWLock_AtomicCreate, we need to doublecheck the lock/monitor's pointer
after we acquired the spin lock.  r=nelsonb,jpierre.
Modified Files: nsslocks.c nssrwlk.c
2004-03-27 01:08:15 +00:00
nelsonb%netscape.com
c0104f0a69 Correct the parsing of certain forms of GeneralName. Bug 233586.
r=julien.pierre
2004-03-26 01:15:33 +00:00
cls%seawood.org
7747aca85b Use the brute force method to override NSS build variables when cross-compiling.
Bug #172651 r=darin a=chofmann
2004-03-23 04:15:56 +00:00
nelsonb%netscape.com
dade383614 Fix a regression introduced by rev 1.19, after NSS 3.9 was released.
r=julien.pierre.  bugscape 56484.
2004-03-23 03:29:56 +00:00
wchang0222%aol.com
8ebba422fc Bugzilla bug 237870: link the MinGW build with wsock32.dll (Winsock 1)
instead of ws2_32.dll (Winsock 2).  Thanks to neil@parkwaycc.co.uk for the
patch.  r=wtc.
2004-03-23 01:59:40 +00:00
wchang0222%aol.com
f06aa9e47c Bugzilla bug 172651: added a necessary test for MinGW gcc in rules.mk.
Do not install 'nsinstall' to avoid overwriting Mozilla's 'nsinstall'.
r=cls.
Modified Files:
	rules.mk nsinstall/Makefile
2004-03-23 00:54:36 +00:00
relyea%netscape.com
d5abab03d4 Program to decrypt passwords inline from prefs files 2004-03-23 00:46:38 +00:00
relyea%netscape.com
70a5776e59 Fix arrays handling strings, and help 2004-03-13 02:44:26 +00:00
jpierre%netscape.com
b391292c65 Remove unused file 2004-03-11 10:03:24 +00:00
wchang0222%aol.com
bd1e342f9d It is not necessary to define _THREAD_SAFE when using pthreads on OpenBSD.
(See Bugzilla bug 236599 comment 41).
2004-03-11 02:26:25 +00:00
jgmyers%speakeasy.net
c1e600678f enhance certificate categorization: bug 193960 r=ssaux/nelsonb sr=brendan 2004-03-10 07:36:50 +00:00
jgmyers%speakeasy.net
ca499f96dc Clean up TLS intolerant restart code: but 191417 p=darin r=kaie sr=bryner 2004-03-10 05:28:39 +00:00
jpierre%netscape.com
9383b61a6e Fix for bug 143456 - add -P option for dbprefix to selfserv . r=MisterSSL 2004-03-10 02:47:13 +00:00
jgmyers%speakeasy.net
558c81f9af Improve dup serno error message: bug 219980 r=ssaux 2004-03-09 02:21:37 +00:00
peterv%propagandism.org
89953530a6 Remove stray semicolon. 2004-03-06 17:34:12 +00:00
peterv%propagandism.org
8e81f7982b Bustage fix. 2004-03-06 17:22:13 +00:00
peterv%propagandism.org
545ad9d0ad Fix for bug 29152 (Cannot do formsigning - crypto.signText). r=kaie, sr=jst. 2004-03-06 15:52:44 +00:00
jgmyers%speakeasy.net
b621053e6f Make KEYGEN tag treat KEYTYPE value case insensitively: bug 139473 r=ddrinan sr=jag 2004-03-06 05:41:38 +00:00
nelsonb%netscape.com
c4b2be519c Add conditionally compiled code for NISCC testing of NSS's SSL library.
patch by Ian McGreer.  Bugscape bug 53322.
2004-03-05 23:28:57 +00:00
jgmyers%speakeasy.net
084d164f2e make two strings localizable bug 178881 r=ssaux sr=blizzard 2004-03-05 05:42:45 +00:00
jgmyers%speakeasy.net
954ce8f4e0 backout prev checkin 2004-03-05 05:41:45 +00:00
jgmyers%speakeasy.net
ddaa1c387e make two strings localizable bug 178881 r=ssaux sr=blizzard 2004-03-05 05:38:58 +00:00
bishakhabanerjee%netscape.com
195f404925 adding platform RH_Linux_7.3 2004-03-04 22:47:43 +00:00
bishakhabanerjee%netscape.com
fa54334072 adjusting the platform strings as the header file specifies 2004-03-04 20:16:36 +00:00
jgmyers%speakeasy.net
1dc25eb335 remove 512-bit keygen bug 235972 r=ssaux sr=bienvenu 2004-03-04 07:09:02 +00:00
bishakhabanerjee%netscape.com
5f21e877ae removed old,unused platforms; and added newer used ones 2004-03-04 00:35:09 +00:00
jpierre%netscape.com
f1a9128ad1 Fix for 235874 - crash in PK11_DigestKey . r=wtc, nelsonb 2004-03-03 03:18:56 +00:00
darin%meer.net
c380c59f65 landing dbaron's patch for bug 235735 "fix callers that cast away const on result of ns[C]String::get" r+sr=darin 2004-02-28 22:34:07 +00:00
jgmyers%speakeasy.net
1d17b9b549 fix cert tree view corruption: bug 217082 p=dewildt r=ssaux sr=sspitzer 2004-02-27 03:13:26 +00:00
jgmyers%speakeasy.net
2c3a905fd4 Clean up string stuff: bug 232812 r=ssaux sr=jag 2004-02-26 04:07:23 +00:00
nelsonb%netscape.com
a74bbe4b09 Detect NULL arguments to CERT_DecodeTrustString instead of crashing.
Bug 235617. r=wtc.
2004-02-26 00:05:29 +00:00
bishakhabanerjee%netscape.com
c93fcbd840 fix for Bugzilla bug 232481: removed a loop in smime.sh 2004-02-25 23:05:41 +00:00
bishakhabanerjee%netscape.com
c0e6a51ba4 added negative cert import function, changed relevant Policies tests accordingly 2004-02-25 22:34:25 +00:00
darin%meer.net
8d65e087ae landing string defragmentation patch for bug 231995, r/sr=dbaron,jst,dougt 2004-02-19 02:44:03 +00:00
nelsonb%netscape.com
7debba55ce Import base64 encoded certificate files with old MAC line endings.
Bug 221272. sr=wtc.
2004-02-16 23:52:46 +00:00
wchang0222%aol.com
46de977590 Removed unused function _OS_SELECT for AIX. Thanks to Philip K. Warren
<pkw@us.ibm.com> for reporting this.
2004-02-13 03:13:04 +00:00
wchang0222%aol.com
d384e9659d Bugzilla bug 233048: 1. Support doing 64-bit Solaris SPARC builds using
gcc.  2. Enable all.sh to work with gcc-compiled NSS tests which require
setting LD_LIBRARY_PATH to point to the directory where libgcc.so resides.
The patch is contributed by Vladim�r Marek <Vladimir.Marek@printsoft.cz>.
r=wtc,nelsonb.
Modified Files: coreconf/SunOS5.mk nss/tests/common/init.sh
2004-02-13 02:47:53 +00:00
jpierre%netscape.com
42b100808b Fix strings in SECU_PrintError. bug 233493 2004-02-12 02:08:59 +00:00
wchang0222%aol.com
43586b3b97 Bugzilla bug 229297: fixed compiler warning "conversion from 'double' to
'long', possible loss of data".  r=jpierre,relyea.
2004-02-11 19:43:29 +00:00
wchang0222%aol.com
9d027a18fc Bugzilla bug 229293: fixed compiler warning "unary minus operator applied
to unsigned type". r=relyea,jpierre.
2004-02-11 19:37:18 +00:00
jpierre%netscape.com
2703a27453 Fix for bug 233605 . Check CRL entry extensions after partial decoding. Also add some new CRL decoding errors. r=nelsonb 2004-02-11 06:05:18 +00:00
jpierre%netscape.com
560beb63f1 Fix for 233493 . Corrections based on Wan-Teh's feedback. 2004-02-11 05:27:32 +00:00
jpierre%netscape.com
3f92bc7c25 Fix for 233118 . additional check for CRL signing usage. r=nelsonb 2004-02-11 05:25:01 +00:00
wchang0222%aol.com
02b77934ff Bugzilla bug 232742: support Linux/AMD64. The patch is contributed by
Henrik Lynggaard Hansen <admin@mozillatranslator.org>. r=wtc.
2004-02-11 02:31:22 +00:00
wchang0222%aol.com
f8b0c1845d Bugzilla bug 233321: fixed the problem with building utf8.c as a standalone
test program.  Fixed byte-order issue on little-endian architecture.
r=nelsonb.
Modified Files: Makefile utf8.c
2004-02-11 02:17:24 +00:00
bishakhabanerjee%netscape.com
829b7f1122 checking in 5 sections of Certificate Policies. Need to set
NSS_NO_PKITS_POLICIES to run these five sections
2004-02-11 01:31:43 +00:00
jpierre%netscape.com
13dcfd3e4c Fix for 233493 - fix symkeyutil build on OS/2. r=relyea 2004-02-10 23:48:37 +00:00
bishakhabanerjee%netscape.com
e9572b0dff removing dependency of a testcase on a previous testcase; i.e. each testcase
now imports all the CRLs required for it, and then deletes them at the end
of the test
2004-02-09 23:33:26 +00:00
jst%mozilla.jstenback.com
505c634885 Fixing bug 233307. deCOMtaminating nsIScript* and related interfaces. r+sr=bryner@brianryner.com. 2004-02-09 22:48:53 +00:00
wchang0222%aol.com
bab3c2af5e Bugzilla bug 233319: prepend, rather than append, the NSS lib and bin
directories to PATH. r=relyea.
2004-02-09 22:39:11 +00:00
nelsonb%netscape.com
c3a3521876 Enable a chain to validate when a perm cert has been issued by a
temp cert.  Bug 233038. r=ian,relyea
2004-02-07 07:17:31 +00:00
wchang0222%aol.com
bf2c5e5f16 Bugzilla bug 225808: 1. Use a 32-bit integer type for cert->nsCertType so
that it can be safely passed to PR_AtomicSet on all platforms.  Note that
we still use an unsigned type to avoid introducing signed/unsigned compiler
warnings.  2. Added a (PRInt32 *) cast to eliminate a pre-existing
signed/unsigned warning.  r=nelsonb.
Modified Files: certdb.c certt.h
2004-02-07 01:41:15 +00:00
wchang0222%aol.com
5c995a5d18 Bugzilla bug 233239: do not include cmd/zlib and cmd/lib headers and
libraries in NSS binary releases.
Modified Files:
	lib/Makefile lib/manifest.mn makepqg/manifest.mn zlib/Makefile
	zlib/manifest.mn
2004-02-07 00:26:02 +00:00
wchang0222%aol.com
91ad07e7f5 Bugzilla bug 123693: improved the fix for this bug. Maintain the
consistency between the slot hash table and slot list when the
creation of a slot fails. r=relyea,nelsonb.
2004-02-06 02:04:48 +00:00
wchang0222%aol.com
ce288b37c7 Bugzilla bug 233112: fixed a typo: "futuer" -> "future". Thanks to
Heikki Toivonen <hjtoi-bugzilla@comcast.net> for the bug report.
2004-02-05 05:56:54 +00:00
bishakhabanerjee%netscape.com
03643e5f7d added a few more missing $ for variable PKITSdb for more accurate log reporting
also, minor optimization of crlImport and crlImportn script so that $crls does
not have to be specified on every line
2004-02-04 20:04:14 +00:00
kairo%kairo.at
3d12a17e05 bug 232011 - Use the XUL preprocessor for build-time inserting of localeVersion strings, this removes contents*.rdf.in files and resurrects the contents*.rdf files, using preprocessor.pl via the jar.mn definitions 2004-02-04 14:24:38 +00:00
nelsonb%netscape.com
a00bb096af Fix numerous bugs in CERT_FindCertByKeyID. Bug 233019. r=jpierre 2004-02-04 08:54:06 +00:00
nelsonb%netscape.com
4fbee089ca Add a feature to disable all use of CRLs with an environment variable.
Don't run most vfychain commands after crlutil fails to import the CRL,
when that is the expected result.
Remove one error that caused the HTML output to be invalid.
2004-02-04 04:07:32 +00:00
nelsonb%netscape.com
c381ec2657 Put in missing $, so log output will show actual commands exeuted. 2004-02-04 02:23:40 +00:00
bishakhabanerjee%netscape.com
971bc18c70 correcting header of section 4.1, minor edits to make headers more definitive 2004-02-03 20:13:26 +00:00
dbaron%dbaron.org
1e6ed08cc8 Fix some incorrect string usage and improve performance in a few places that show up in an LXR search for the previous pattern. b=232339 r=jshin sr=darin 2004-02-03 18:23:41 +00:00
nelsonb%netscape.com
3462419c4d Invoke crlImportn instead of crlImport in several places where a
negative outcome is expected.  More work on this is needed.
crlImportN should return a value that tells us if it actually failed,
so that the script can decide whether or not to proceed with vfychain.
But this change makes the outcome more green, less red.
2004-02-03 07:14:52 +00:00
nelsonb%netscape.com
bcc309b891 Honor key usage extensions, whether they're critical or not.
Bug 232738. r=jpiperre.
2004-02-03 07:10:04 +00:00
nelsonb%netscape.com
3f581fae9e Max crlutil return 0 or 1 correctly, depending on the success of the
operation.  Bug 232937.  r=jpierre.
2004-02-03 06:59:35 +00:00
nelsonb%netscape.com
0789875d7d Change script so that html output and logfile will be broken up into
clearly defined and easy-to-find sections.
2004-02-03 04:15:08 +00:00
nelsonb%netscape.com
abc134f1c0 Make output log file more readable by separating each test case. 2004-02-03 03:07:38 +00:00
bishakhabanerjee%netscape.com
3ed803969c fixed one typo 2004-02-03 01:27:47 +00:00
bishakhabanerjee%netscape.com
d95cb37ea2 checking with all latest revew comments addressed 2004-02-03 00:59:53 +00:00
neil%parkwaycc.co.uk
521d560df7 Bug 232186 Remove deprecated nsIPref usage from PKI chrome moa=kaie r=caillon sr=brendan 2004-01-31 21:11:27 +00:00
jgmyers%speakeasy.net
10b8ef3a20 Extend set of OIDs mapped to text: bug 97406 r=kaie sr=spitzer 2004-01-31 07:10:35 +00:00
jgmyers%speakeasy.net
328311b1d2 Don't use strcmp() on UTF-16: bug 154121 r=kaie sr=sspitzer 2004-01-31 07:09:21 +00:00
nelsonb%netscape.com
3dcf7f696e When an attempt to initialize a slot fails, free up the resources
right away, rather than waiting until NSS_Shutdown.  Bug 123693.
Second try.  r=relyea.
2004-01-30 04:15:47 +00:00
nelsonb%netscape.com
df07bc6cf4 Back out rev 1.90. It breaks shlibsign. 2004-01-29 23:34:21 +00:00
nelsonb%netscape.com
371b9d618e Export SECOID_AddEntry. Bug 132942. r=wtc. 2004-01-29 22:51:55 +00:00
nelsonb%netscape.com
50f63ee713 Invoke SECU_RegisterDynamicOids() so that more OIDs will print out.
Bug 132942.  a=wtc.
2004-01-29 22:48:58 +00:00
nelsonb%netscape.com
792e8d1e9e Bug 132942. r=wtc
Make the following enhancements to NSS's ASN.1 printing code:
- Print warning messages that are properly indendented.
- PrintAsHex notices when the buffer contains entirely printable characters, and is larger than an int, and prints it as text in that case.
- PrintRawString now indents the string, rather than always printing it on
a separate line.
- now prints decoded bit strings
- now prints BMP (UCS2) strings as strings (not as hex) when they contain only printable ASCII characters.
- now prints Universal (UCS4) Strings as strings (not hex) when they contain only printable ASCII characters.
- Decodes certain encoded data that was previously printed as hex.
- Generically decodes ASN.1 data, rather than merely printing an error, when the ASN.1 data doesn't fit a known template.
- properly handles all optional components of basic constraints extensions.
- Prints the names of the bits in the X509 Key Usage extension.
- Prints General Names.
- Print Auth Key ID extensions
- Print subject and issuer alt name extensions
- Print CRL distribution points extensions
- format and print name constraints extensions
- print Authority Information Access extensions
- Print optional X509v2 subject and issuer Unique ID bit strings
2004-01-29 22:45:20 +00:00
nelsonb%netscape.com
a691eadad9 Change some comments and one variable as suggested in review comments.
r=relyea,wtc.  Bug 124923.
2004-01-29 21:57:41 +00:00
nelsonb%netscape.com
ea227986af Make SECOID_AddEntry be thread safe. Export it. Bug 124923. r=relyea. 2004-01-29 21:23:36 +00:00
nelsonb%netscape.com
ee55e2e256 Plug leaks. Bug 123693. r=wtc,relyea 2004-01-29 21:18:24 +00:00
jpierre%netscape.com
f5d7282963 Fix for 232377 - assertion in vfychain with DSA cert. r=wtc, nelsonb 2004-01-28 23:25:07 +00:00
nelsonb%netscape.com
6d506e4aea Export cert functions that decode extensions and traverse decoded
extensions.  Bug 231881. r= relyea, wtc.
2004-01-28 23:23:45 +00:00
nelsonb%netscape.com
978fc338e7 Change program return value to reflect test outcome. Bug 221737. r=wtc 2004-01-28 22:30:27 +00:00
wchang0222%aol.com
cdec2796b4 Bugzilla bug 232380: deleted CERT_FindExpiredIssuer, which is dead code.
In cert_VerifyCertChain, make sure that subjectCert and issuerCert never
point to the same cert to prevent from destroying that cert twice.
r=jpierre,nelsonb.
Modified Files: certdb/cert.h certhigh/certvfy.c
2004-01-28 21:51:10 +00:00
jgmyers%speakeasy.net
a8dcaab07f address review comments: bug 231659 2004-01-28 04:29:14 +00:00
jgmyers%speakeasy.net
c9010119e9 rewrite utf8 parser for strictness: bug 231659 r=MisterSSL 2004-01-28 03:48:43 +00:00
jgmyers%speakeasy.net
21b30d0cf2 fix charset conversion: bug 185167 r=kaie sr=sspitzer 2004-01-28 03:44:38 +00:00
jpierre%netscape.com
a5aaee4048 Fix for 231051 - crlutil asserts after deleting CRL. r=wtc, nelsonb 2004-01-28 01:17:13 +00:00
wchang0222%aol.com
6d8fc90771 Bugzilla bug 231018: use AIX.mk for all AIX versions. Removed the
AIXm.n.mk files.  Removed support for AIX 3.2, 4.1, and 4.2.  Removed
unused make variable EXPORT_RULES.  Removed unused macro define -DAIX4_3.
The patch is contributed by Philip K. Warren <pkw@us.ibm.com>. r=wtc.
Modified Files:
	AIX.mk config.mk
Removed Files:
	AIX3.2.mk AIX4.1.mk AIX4.2.mk AIX4.3.mk AIX5.1.mk AIX5.2.mk
2004-01-27 23:55:38 +00:00
relyea%netscape.com
78ce53de23 bug 231698: fix regression in reading SDR data in databases written on 64-bit platforms.
r=MisterSSL
2004-01-27 18:31:29 +00:00
caillon%returnzero.com
b2141fb556 AddRef() the out parameter, and check for OOM.
Fixes bug 231709, iframes pointing to signed XUL crashes browser
r+sr=jst
2004-01-27 05:01:48 +00:00
jpierre%netscape.com
8c43abd07c Fix for 231051 - crlutil asserts after importing CRL. r=nelsonb, wtc 2004-01-27 00:02:16 +00:00
nelsonb%netscape.com
0df0cbe4cf Fix crashes that occur when optional policyQualifiers are not present.
Bug 230951. r=kinmoz.
2004-01-23 22:50:01 +00:00
wchang0222%aol.com
d3011eaa97 Bumped version to 1.50 (for NSS 3.10). 2004-01-23 22:15:39 +00:00
nelsonb%netscape.com
77a00800e8 RFC 3280 says Name Constraints do not apply to self-issued CA certs,
including self-issued intermediate CA certs (so-called "roll-over" certs).
This fixes an NISCC test failure.  Bug 231030. r=wtc.
2004-01-23 06:06:06 +00:00
nelsonb%netscape.com
61d56ab306 When a name attribute's value exceeds the maximum allowed length, display
a truncated version of it, followed by ellipsis.  Bug 220855. r=wtc
2004-01-22 23:45:30 +00:00