Commit Graph

386 Commits

Author SHA1 Message Date
alexei.volkov.bugs%sun.com
ff6fa1f51c Patch contributed by timeless@bemail.org
[Bug 334442] Incorrect use of realloc oom Crash in secmod_ReadPermDB;r=nelson
2006-04-19 22:53:45 +00:00
wtchang%redhat.com
b95ecf558f Bugzilla Bug 330114: corrected the checks for the PKCS #1 v1.5 padding
string and the length of the data (hash). r=nelsonb,relyea.
2006-04-13 22:12:17 +00:00
nelson%bolyard.com
424fabe58a Bug 333090: CKM_DH_PKCS_KEY_PAIR_GEN always fails. r=nelson, sr=rrelyea
Patch contributed by Andreas.Sterbenz@sun.com
2006-04-08 05:05:01 +00:00
rrelyea%redhat.com
2cef28020c bug 309701 Softtoken C_CreateObject() should not require
CKA_NETSCAPE_DB attribute to be present

r=alexei
2006-03-31 00:38:48 +00:00
glen.beasley%sun.com
0224b3a860 318970 wtc fix for RSA fipstest using RSA_HashSign r=neilW sr= brelyea 2006-03-25 23:45:23 +00:00
rrelyea%redhat.com
01ef3de28a Bug 273637 3 locks in softoken have unsafe initialization
r=alexi r=julien
2006-03-21 19:36:53 +00:00
rrelyea%redhat.com
dd7e2a2cf6 Correct bug entry:
25683 EC param parsing error not propagated correctly
r=andreas.
2006-03-21 19:33:52 +00:00
rrelyea%redhat.com
6a7da6374e Backing out previous changes that invalid or incorrect log entries for this
patch.
2006-03-21 19:30:10 +00:00
rrelyea%redhat.com
e182cdf8e2 *** empty log message *** 2006-03-21 19:23:30 +00:00
rrelyea%redhat.com
c385e5088d Bug 273637 3 locks in softoken have unsafe initialization
r=alexi r=julien
2006-03-21 02:28:48 +00:00
rrelyea%redhat.com
5f90fef71c Bug 238051 Enable SSL session reuse for ECC cipher suites
r=nelson
2006-03-17 21:15:09 +00:00
nelson%bolyard.com
19a46702bf Bug 329002. fix cert reference leak. r=alexei.volkov,rrelyea 2006-03-09 23:38:57 +00:00
wtchang%redhat.com
8696bd362e Bugzilla Bug 326403: use "Mozilla Foundation" as the manufacturer or
producer of our shared libraries/DLLs.  Removed the optional copyright
notices from our DLLs. r=relyea,jpierre.
Modified Files:
	lib/ckfw/builtins/constants.c lib/ckfw/builtins/nssckbi.rc
	lib/ckfw/capi/nsscapi.rc lib/ckfw/dbm/instance.c
	lib/freebl/freebl.rc lib/nss/nss.rc lib/smime/smime.rc
	lib/softoken/pkcs11.c lib/softoken/softokn.rc lib/ssl/ssl.rc
2006-03-01 19:44:36 +00:00
rrelyea%redhat.com
6a21aaef0e bug 326482 Implement the derive sensitive only for those derivation functions that require it.
fixes a performance problem with ECDH.

r=wtchang, nelson.
2006-03-01 16:12:22 +00:00
nelson%bolyard.com
74a0a6eea2 Bug 325683. EC param parsing error not propagated correctly.
Fix the cases that Andreas identified.  Patch by Andreas.Sterbenz@sun.com
r=Julien,wtchang,nelson
2006-02-28 05:44:56 +00:00
wtchang%redhat.com
7a0f0203c7 Bugzilla Bug 320038: checked in a better fix that allows us to write
EC domain parameters as hex strings with leading 00's. r=douglas.stebila
sr=relyea.
Modified files: softoken/ecdecode.c freebl/ecl/ecl-curve.h
2006-02-27 23:18:34 +00:00
wtchang%redhat.com
0c104c2ece Bugzilla Bug 327384: fixed an off-by-one error in the size of the 'genenc'
array.  The patch is contributed by Andreas Sterbenz
<Andreas.Sterbenz@sun.com>. r=wtc,nelsonb
2006-02-16 22:33:13 +00:00
wtchang%redhat.com
b19b5965a5 Bugzilla Bug 326144: need to zeroize a SECItem that contains a copy of the
secret key. r=relyea,jpierre.
2006-02-14 02:55:09 +00:00
wtchang%redhat.com
cfe8a9f253 Bugzilla bug 326751: CKR_SIGNATURE_INVALID is a much better default error
code for NSC_VerifyRecover than CKR_DEVICE_ERROR is. r=relyea.
2006-02-11 02:03:25 +00:00
rrelyea%redhat.com
57d9010865 Bugzilla Bug 326482 NSS ECC performance problems.
r=nelsonb
Fix bug where ECC keys were not being copied on server startup
2006-02-10 18:54:58 +00:00
rrelyea%redhat.com
2cf33676b0 Bug 320187 NSC_WrapKey called with null output returns short length
r=nelsonb
2006-02-09 19:54:22 +00:00
julien.pierre.bugs%sun.com
af4804d7ef Fix for bug 326144 . softoken leaks in nsc_pbe_key_gen. r=nelson, rrelyea 2006-02-07 00:43:31 +00:00
wtchang%redhat.com
b8088299c2 Allow CKM_ECDSA_SHA1 to be multipart. Bug 325494.
Patch contributed by Andreas Sterbenz <Andreas.Sterbenz@sun.com>
r=nelsonb,relyea,wtc.
2006-02-02 07:21:56 +00:00
rrelyea%redhat.com
3ebd845ca9 Bug 319619 "large" ECC private keys cannot be exported through PKCS #11
1) Change the export encrypted private key function to ask the token the wrap
size rather than trying to figure it out ourselves.

2) Fix the soften to correctly return the size.


r=wtc, nelsonb
2006-02-01 16:43:47 +00:00
glen.beasley%sun.com
b4358c2729 318970 RSA FIPS Alg Tests r=wan-teh, sr=bRelyea 2006-01-30 19:58:52 +00:00
nelsonb%netscape.com
944db2b329 Don't use variables as structure initializers. Bug 274512. Fix build
on HPUX.  r=julien.pierre,wtchang
2006-01-22 06:42:14 +00:00
nelsonb%netscape.com
06c2abf1fa Detect certdb reference leaks at shutdown with assertions. Bug 324103.
r=rrelyea.
2006-01-22 06:36:36 +00:00
nelsonb%netscape.com
9633334de2 Plug a cert DB reference leak in softoken, related to trust objects.
Bug 324103, r=rrelyea
2006-01-21 02:23:42 +00:00
nelsonb%netscape.com
a3089c6a9d Prevent crash when making new cert8.db from old cert5.db.
This is not the final solution, but it works.
Bug 320029. r=rrelyea,sr=julien.pierre.  On TRUNK.
2006-01-19 02:16:30 +00:00
nelsonb%netscape.com
f32a4d3f27 Add new function nsslowcert_DecodeAnyDBEntry. Correct the union
certDBEntry by adding the missing members. Bug 323570. r=rrelyea.
2006-01-19 02:09:37 +00:00
nelsonb%netscape.com
446a084b09 Softoken will no longer generate excessive key material for some SSL3
cipher suites.  Bug 274512. r=rrelyea.
2006-01-19 01:12:53 +00:00
julien.pierre.bugs%sun.com
c5d6929c9f Fix for bug 286685. rename SFTK symbols to SECMOD. r=rrelyea, nelson 2005-11-11 23:36:33 +00:00
wtchang%redhat.com
ff785bd766 Bugzilla Bug 298522: added power-up self tests for HMAC SHA-384 and HMAC
SHA-512.  The patch was written by Glen Beasley of Sun. r=wtc.
2005-11-07 19:05:45 +00:00
wtchang%redhat.com
8e70cf6f2e Bugzilla bug 298522: added power-up self tests for HMAC SHA-1 and HMAC
SHA-256.  The patch is contributed by Glen Beasley of Sun. r=wtc.
2005-10-20 21:46:51 +00:00
julien.pierre.bugs%sun.com
4c37a26617 Add dependency on freebl so softoken will rebuild if freebl has changed. 2005-10-19 01:03:31 +00:00
wtchang%redhat.com
d420dda744 Bugzilla bug 259135: fixed build breakage. In C, declarations must precede
code.
2005-10-05 22:03:14 +00:00
wtchang%redhat.com
002c9cc505 Bugzilla bug 259135: minor comment fix. 2005-10-05 17:58:01 +00:00
glen.beasley%sun.com
814a61d561 259135 added SHA 256,384,512 and AES powerupself tests sr=Wan-Teh 2005-10-05 16:31:01 +00:00
relyea%netscape.com
8d4f93463a Internal NSS defines shared between softoken and the rest of NSS, but not
exported.

added as part of bug 305697.
2005-09-28 23:52:59 +00:00
relyea%netscape.com
e35607b9c4 bug 305697: open additional database on the fly in softoken. part1: softoken changes.
r=julien
2005-09-28 17:12:17 +00:00
wtchang%redhat.com
b427dc6efe Bugzilla Bug 298517: when in FIPS mode, impose minimum password length and
quality to ensure a password guessing probability of less than 1 in
10,000,000, and impose a one second delay after failed login attempt to
allow at most 60 login attempts per minute.  r=relyea,nelsonb.
Modified files: fipstokn.c pkcs11.c pkcs11i.h
2005-09-16 20:37:58 +00:00
nelsonb%netscape.com
9499265f5c Plug leaks in SSL bypass code. Add freeit argument to HMAC_Destroy function.
Change existing callers to pass this argument.  Call HMAC_Destroy from SSL.
Bug 305147. r=Julien.Pierre
Modified Files:  freebl/alghmac.c freebl/alghmac.h freebl/loader.c
  freebl/loader.h freebl/tlsprfalg.c softoken/lowpbe.c softoken/pkcs11c.c
  ssl/ssl3con.c
2005-09-14 04:12:50 +00:00
wtchang%redhat.com
55197b5cfd Bugzilla Bug 289530: fixed signed/unsigned comparison compiler warnings.
Fixed compilation errors of new ECC code added in the previous checkin.
r=nelsonb.
2005-08-15 21:23:39 +00:00
wtchang%redhat.com
2577eb148c Bugzilla bug 302286: fixed the bug that NSS misinterpreted the
CKA_PRIME_BITS attribute for DSA's p parameter. r=relyea.
Modified files: pk11wrap/pk11pqg.c softoken/pkcs11c.c
2005-08-13 00:09:26 +00:00
wtchang%redhat.com
e09393045c Bugzilla bug 292239: have the softoken report Cryptoki version 2.20.
r=relyea.
2005-08-12 23:14:22 +00:00
wtchang%redhat.com
2d2b80688d Bugzilla bug 292239: added a change missed in the previous checkin.
r=relyea.
2005-08-12 23:12:18 +00:00
relyea%netscape.com
684e5d1c2b Correct mistyped version of wtc patch. 2005-08-12 22:19:19 +00:00
relyea%netscape.com
a584ef4a1d Bug 292239 r wtc & julien
Merge PKCS #11 v2.20 header files
2005-08-12 18:58:47 +00:00
relyea%netscape.com
5ab7c1109c Bug 303010 Certificate upgrade can drop S/MIME certificates
r=wtc.

Delay loading the S/MIME records on upgrade until the cert is loaded
2005-08-12 18:01:26 +00:00
wtchang%redhat.com
67ffaff684 Bugzilla Bug 298514: added a missing break statement and removed an unused
variable. r=jpierre.
2005-08-12 00:44:35 +00:00