7081 Commits

Author SHA1 Message Date
nelson%bolyard.com
01bb69bf82 Bug 422866: vfychain -pp command crashes in NSS_shutdown, r=alexei
git-svn-id: svn://10.0.0.236/trunk@247900 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-15 06:58:59 +00:00
alexei.volkov.bugs%sun.com
220ffe47b1 390381 - libpkix rejects cert chain when root CA cert has no basic constraints.
Main patch(by Nelson). r=rrelyea


git-svn-id: svn://10.0.0.236/trunk@247892 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-15 02:15:36 +00:00
kaie%kuix.de
1286f8d32d Bug 294531
Follow up patch to rename some policy function names
r=rrelyea


git-svn-id: svn://10.0.0.236/trunk@247889 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-15 01:21:21 +00:00
kaie%kuix.de
9e03fe454a Bug 294531, fixing bustage, typo in function name
git-svn-id: svn://10.0.0.236/trunk@247884 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-15 00:21:21 +00:00
kaie%kuix.de
5c5c8d388e Changing version number to "Beta 3" for tagging.
git-svn-id: svn://10.0.0.236/trunk@247881 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-14 23:52:51 +00:00
alexei.volkov.bugs%sun.com
bcf6f9b92c 390381 - libpkix rejects cert chain when root CA cert has no basic constraints.
Patch: log correct error info. r=nelson


git-svn-id: svn://10.0.0.236/trunk@247880 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-14 23:41:03 +00:00
kaie%kuix.de
9d732a3568 Bug 412468, modify certutil, vfychain and vfyserv utilities to use CERT_PKIXVerifyCert function
Patch v6: Adjust vfychain to new revocation flags
r=alexei, r=nelson


git-svn-id: svn://10.0.0.236/trunk@247878 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-14 23:29:37 +00:00
kaie%kuix.de
b3d6a0a975 Bug 294531, Design new interfaces for certificate path building and verification for libPKIX
Update CERT_PKIXVerifyCert implementation for new revocation API.
Implement functions that describe NSS 3.11 and NIST revocation checking policies.
Implementation v5 (for Proposal 8)
r=rrelyea


git-svn-id: svn://10.0.0.236/trunk@247877 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-14 23:29:08 +00:00
kaie%kuix.de
4869ddc312 Bug 294531, Design new interfaces for certificate path building and verification for libPKIX
Finalize revocation API for CERT_PKIXVerifyCert.
Proposal 8 as patch (v6)
Final r=rrelyea, most code also r=nelson


git-svn-id: svn://10.0.0.236/trunk@247876 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-14 23:28:46 +00:00
rrelyea%redhat.com
95570a56c1 Final patch for merge: fix layer viloation (bug 391296)
r=nelson


git-svn-id: svn://10.0.0.236/trunk@247865 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-14 20:41:34 +00:00
rrelyea%redhat.com
f9aa7d4286 Fix merge tinderbox failures (bug 391296)
r=slavo


git-svn-id: svn://10.0.0.236/trunk@247864 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-14 20:37:21 +00:00
rrelyea%redhat.com
5c08f33ca1 bug 418546 reference leak in CERT_PKIXVerifyCert
r=nelson (& alexi).


git-svn-id: svn://10.0.0.236/trunk@247848 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-14 18:07:20 +00:00
kaie%kuix.de
9ab1c279d5 bug 374336, add knowledge of Extended Validation / EV Certificates to PSM
Follow up fix contributed by Neil that fixes allocator mismatch.
r=kengert, approval1.9=dsicore


git-svn-id: svn://10.0.0.236/trunk@247826 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-14 15:22:50 +00:00
alexei.volkov.bugs%sun.com
24c5566786 Backout patch 390381 of bug 390381 since the code depends on another fix from the same bug.
git-svn-id: svn://10.0.0.236/trunk@247764 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-13 19:32:18 +00:00
wtc%google.com
ef9647fd65 Bug 419523: made PK11_GetKeyData rather than __PK11_GetKeyData the primary
function. r=rrelyea.


git-svn-id: svn://10.0.0.236/trunk@247707 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-13 03:53:33 +00:00
rrelyea%redhat.com
b713042b71 Turn off merge code util we can fix the test case
git-svn-id: svn://10.0.0.236/trunk@247670 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-12 20:44:01 +00:00
rrelyea%redhat.com
f9abd3cf8d Bug 421978 valgrind uninitialized variables. Patch by dbaron
r rrelyea


git-svn-id: svn://10.0.0.236/trunk@247594 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-12 00:01:07 +00:00
alexei.volkov.bugs%sun.com
3cef16049f 390381 - libpkix rejects cert chain when root CA cert has no basic constraints. Patch adds eku checker data into processing params. r=nelson
git-svn-id: svn://10.0.0.236/trunk@247589 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-11 23:23:41 +00:00
rrelyea%redhat.com
6228a05754 Fix AIX build problem with previous checking.
r=wtc


git-svn-id: svn://10.0.0.236/trunk@247588 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-11 23:14:32 +00:00
rrelyea%redhat.com
0710bb052d Bug 391296 - Need an update helper for Shared Databases
r=nelson.

sdb.c was checked in to the branch rather than the trunk.


git-svn-id: svn://10.0.0.236/trunk@247570 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-11 21:29:27 +00:00
alexei.volkov.bugs%sun.com
95232238df 412468 - modify certutil, vfychain and vfyserv utilities to use CERT_PKIXVerifyCert function. Patches: suply trustlist to CERT_PKIXVerifyCert; use double "p" argument to use CERT_PKIXVerifyCert for validation. r=nelson.
git-svn-id: svn://10.0.0.236/trunk@247568 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-11 20:48:53 +00:00
rrelyea%redhat.com
001eff4277 Fix double free from monster patch (uncovered with leak fix).
r=kai


git-svn-id: svn://10.0.0.236/trunk@247510 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-10 23:33:47 +00:00
alexei.volkov.bugs%sun.com
9af7529b05 400947 - thread unsafe operation in PKIX_PL_HashTable_Add cause selfserv to crash. r=nelson
git-svn-id: svn://10.0.0.236/trunk@247505 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-10 22:56:16 +00:00
rrelyea%redhat.com
f321af3a89 Fix tinderbox bustage from previous checkin
r=kai


git-svn-id: svn://10.0.0.236/trunk@247504 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-10 22:42:54 +00:00
kaie%kuix.de
75f32dfdf4 Bug 421579, crash in PKIX_PL_Cert_GetVersion
r=alexei.volkov


git-svn-id: svn://10.0.0.236/trunk@247503 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-10 22:37:53 +00:00
rrelyea%redhat.com
ef7b124a1b Bug 391296 – Need an update helper for Shared Databases
r=nelson.


git-svn-id: svn://10.0.0.236/trunk@247495 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-10 20:16:51 +00:00
glen.beasley%sun.com
f3eff5caac 419523 remove duplicate declarations patch=wtc r=gb
git-svn-id: svn://10.0.0.236/trunk@247491 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-10 19:05:05 +00:00
wtc%google.com
dd1ffe05f6 Bug 419523: Export Cert_NewTempCertificate. Remove unnecessary inclusions
of nssrenam.h.  Remove functions that no longer need to be renamed from
nssrenam.h.  r=rrelyea.
Modified Files:
	cmd/vfychain/vfychain.c lib/certdb/stanpcertdb.c
	lib/crmf/asn1cmn.c lib/crmf/cmmfrec.c lib/crmf/respcmn.c
	lib/nss/nss.def lib/nss/nssrenam.h lib/pkcs12/p12e.c
	lib/pkcs7/certread.c lib/pkcs7/p7decode.c lib/pkcs7/p7encode.c
	lib/smime/cmsutil.c lib/ssl/ssl3con.c lib/ssl/ssl3ecc.c
	lib/ssl/sslnonce.c lib/ssl/sslsnce.c


git-svn-id: svn://10.0.0.236/trunk@247455 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-10 00:01:28 +00:00
wtc%google.com
a522c3ec67 Bug 417641: fixed compiler warnings in SSL_CanBypass. r=nelson.
git-svn-id: svn://10.0.0.236/trunk@247453 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-09 23:43:26 +00:00
wtc%google.com
f7911d005d Bug 419242: moved a makefile rule from config.mk to Makefile so that 'all'
is the default (first) makefile target.  r=christophe.ravel


git-svn-id: svn://10.0.0.236/trunk@247451 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-09 23:17:25 +00:00
wtc%google.com
c8eb8bda91 Bug 407866: 1. SQRADDSC: sc0, sc1, sc2 are output only, so they shouldn't
be listed as inputs.  This change eliminates the GCC warnings that sc0,
sc1, sc2 "is used uninitialized in this function". 2. SQRADDDB: strictly
speaking, we need "earlyclobbers" ("=&r") for c0, c1, c2 because the inputs
sc0, sc1, sc2 are used again after we have modified c0, c1, c2. The patch
is contributed by Jakub Jelinek <jakub@redhat.com>.  r=wtc.


git-svn-id: svn://10.0.0.236/trunk@247422 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-09 06:06:27 +00:00
reed%reedloden.com
dd9d5afa58 Bug 418543 - "remove -moz-pre-wrap" [p=taken.spc@gmail.com (KUROSAWA, Takeshi) r+sr=roc a1.9=beltzner]
git-svn-id: svn://10.0.0.236/trunk@247364 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-08 09:44:43 +00:00
kaie%kuix.de
754ab9f697 Bug 418398, Need some high level libpkix tracing for mental sanity
Follow up patch to fix tinderbox orange and some more cleanup.
r=alexei.volkov


git-svn-id: svn://10.0.0.236/trunk@247357 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-08 08:17:10 +00:00
kaie%kuix.de
4ebdd999b9 Bug 400085, nsNSSCertificate::hasValidEVOidTag compare DER, not strings
Patch contributed by Honza Bambas, r=rrelyea, r=kengert, approval1.9=beltzner


git-svn-id: svn://10.0.0.236/trunk@247290 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-07 06:14:33 +00:00
alexei.volkov.bugs%sun.com
6875749a6d 294531 - Design new interfaces for certificate path building and verification for libPKIX. Patch to pass trusted roots. r=nelson
git-svn-id: svn://10.0.0.236/trunk@247285 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-07 02:09:32 +00:00
julien.pierre.boogz%sun.com
dfc45f198b Fix for bug 396999 . PK11_Authenticate, PK11_DoPassword fail on 3rd party slots if NSS softoken is in FIPS140-2 mode . r=nelson, rrelyea
git-svn-id: svn://10.0.0.236/trunk@247258 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-06 23:35:48 +00:00
wtc%google.com
6289ace530 Bug 403563: implement the TLS session ticket extension (rfc4507bis). The
patch is contributed by Nagendra Modadugu <ngm+mozilla@google.com>.  A
small portion (PKCS #11 code and tests) was written by Wan-Teh Chang
<wtc@google.com>.  r=nelson,wtc
Modified Files:
	cmd/lib/SSLerrs.h cmd/selfserv/selfserv.c
	cmd/strsclnt/strsclnt.c cmd/tstclnt/tstclnt.c
	lib/ssl/manifest.mn lib/ssl/ssl.h lib/ssl/ssl3con.c
	lib/ssl/ssl3ecc.c lib/ssl/ssl3prot.h lib/ssl/sslerr.h
	lib/ssl/sslimpl.h lib/ssl/sslnonce.c lib/ssl/sslsnce.c
	lib/ssl/sslsock.c lib/ssl/sslt.h tests/ssl/sslstress.txt
Added Files:
	lib/ssl/ssl3ext.c


git-svn-id: svn://10.0.0.236/trunk@247232 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-06 20:16:24 +00:00
rrelyea%redhat.com
c85559c0d8 bug 294531 Add entry to pass trust anchors on input.
r=alexi


git-svn-id: svn://10.0.0.236/trunk@247217 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-06 19:51:38 +00:00
kaie%kuix.de
bd31291022 Bug 418398, Need some high level libpkix tracing for mental sanity
r=alexei.volkov


git-svn-id: svn://10.0.0.236/trunk@247188 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-06 11:58:37 +00:00
kaie%kuix.de
e8eeb9ae52 Bug 412456, ###!!! ASSERTION: nsSecureBrowserUIImpl not thread-safe
r=rrelyea, blocking1.9=beltzner


git-svn-id: svn://10.0.0.236/trunk@247186 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-06 11:21:37 +00:00
alexei.volkov.bugs%sun.com
bc19224628 421216 - libpkix test nss_thread leaks a test certificate. r=nelson
git-svn-id: svn://10.0.0.236/trunk@247161 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-06 03:01:56 +00:00
gavin%gavinsharp.com
f4ae6bc811 Bug 419111: unfrozen interfaces listed in SDK_XPIDLSRCS, r=kaie, sr=bzbarsky
git-svn-id: svn://10.0.0.236/trunk@247134 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-05 22:08:23 +00:00
nelson%bolyard.com
061d7a086c Bug 420979: vfychain ignores -b TIME option when -p option is present.
r=alexei.volkov


git-svn-id: svn://10.0.0.236/trunk@247127 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-05 21:16:51 +00:00
slavomir.katuscak%sun.com
55754a47eb Bug 419425: Patch to run PKITS tests. r=julien
git-svn-id: svn://10.0.0.236/trunk@247080 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-05 08:28:49 +00:00
reed%reedloden.com
be550be263 Bug 351580 - "Possible null pointer dereferences in |nsCrypto::GenerateCRMFRequest|" (Fixed !NULL checks + GC rooting) [p=honzab@allpeers.com (Honza Bambas [mayhemer]) r=mrbkap a=blocking1.9+]
git-svn-id: svn://10.0.0.236/trunk@246993 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-04 11:25:44 +00:00
slavomir.katuscak%sun.com
fe48dabffb Bug 266941: Strsclnt patch. r=nelson
git-svn-id: svn://10.0.0.236/trunk@246986 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-04 09:36:03 +00:00
nelson%bolyard.com
7a6dd3c6f5 Bug 420212: Empty cert DNs handled badly, display as "!INVALID AVA!"
r=kengert


git-svn-id: svn://10.0.0.236/trunk@246940 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-03 19:43:28 +00:00
alexei.volkov.bugs%sun.com
c9f1898fd0 fix for hp builds. r=nelson
git-svn-id: svn://10.0.0.236/trunk@246823 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-01 00:48:14 +00:00
slavomir.katuscak%sun.com
f56cdd53ab Bug 415767: Patch. r=nelson
git-svn-id: svn://10.0.0.236/trunk@246791 18797224-902f-48f8-a5cc-f745e15eee43
2008-02-29 10:39:04 +00:00
bent.mozilla%gmail.com
e47fc69e78 Bug 419655 - "Refreshing a page leaks an nsGlobalWindow until shutdown". r=peterv, sr=jst, a1.9b4+=schrep.
git-svn-id: svn://10.0.0.236/trunk@246770 18797224-902f-48f8-a5cc-f745e15eee43
2008-02-29 02:05:57 +00:00