4045 Commits

Author SHA1 Message Date
relyea%netscape.com
d15360a1cd Check bug 188856 into the tip.
1)return proper error code in more cases. 2) Fix bug in DH KeyPair Generation.

the essential part of this fix in pkcs11c.c where we add the CKA_NETSCAPE_DB
attribute on Diffie-Hellman key gen. I don't know why the code would have even
thought of working without this (unless we were testing with pregenerated
keys).

The rest of the fix is to surface more of the PKCS #11 error back up. There is
a separate bug to continue tracking the issue of lost PKCS #11 errors.


git-svn-id: svn://10.0.0.236/trunk@137229 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-31 23:39:34 +00:00
kaie%netscape.com
05c88cd5fb b=189974 Profile Switching fails after JavaScript based cert import
PSM portion of fix
r=javi sr=darin a=asa


git-svn-id: svn://10.0.0.236/trunk@137221 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-31 22:33:49 +00:00
nelsonb%netscape.com
27a07539b5 Fix an uninitialized variable. Bug 191396.
git-svn-id: svn://10.0.0.236/trunk@137220 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-31 22:26:56 +00:00
nelsonb%netscape.com
216c70fc28 Fix crash in CERT_CheckKeyUsage caused by dereferencing a returned pointer
without checkin it for NULL.


git-svn-id: svn://10.0.0.236/trunk@137180 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-31 02:49:13 +00:00
nelsonb%netscape.com
77684e6b48 Fix bug 191396. Don't generate SEC_ERROR_LIBRARY_FAILURE unnecessarily
while doing dsa signatures.


git-svn-id: svn://10.0.0.236/trunk@137179 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-31 02:39:36 +00:00
relyea%netscape.com
f13a13b227 FIPS library verifier.
git-svn-id: svn://10.0.0.236/trunk@137166 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 23:38:07 +00:00
relyea%netscape.com
8249770fa2 FIPS library verifier
git-svn-id: svn://10.0.0.236/trunk@137165 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 23:36:37 +00:00
wtc%netscape.com
916c634dce Bug 191214: fixed the object leaks in signtool that prevented NSS_Shutdown
from succeeding and added the NSS_Shutdown call back.  r=jpierre.
Modified Files: certgen.c sign.c signtool.c


git-svn-id: svn://10.0.0.236/trunk@137163 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 23:11:13 +00:00
wtc%netscape.com
9072bc6a29 Bug 177387: temporarily added freebl_GetLibraryFilePathname to libfreebl.a.
This function has the same semantics as the NSPR 4.3 function
PR_GetLibraryFilePathname. This patch should be backed out when NSPR 4.3 is
released.
Modified Files: config.mk manifest.mn
Added Files: libpath.c


git-svn-id: svn://10.0.0.236/trunk@137130 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 07:00:32 +00:00
jpierre%netscape.com
3e4fd60532 Fix for 190424 - don't query CKA_NETSCAPE_EMAIL attribute. r=wtc
git-svn-id: svn://10.0.0.236/trunk@137124 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 05:12:10 +00:00
jpierre%netscape.com
4734fd96af Fix for 190424 - don't query CKA_NETSCAPE_EMAIL attribute . r=wtc
git-svn-id: svn://10.0.0.236/trunk@137118 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 03:02:55 +00:00
jpierre%netscape.com
262472f161 Patch for memory leak . Bug 189976 . r=wtc
git-svn-id: svn://10.0.0.236/trunk@137116 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 02:59:35 +00:00
wtc%netscape.com
fc82d526b5 Bug 191214: backed out the previous checkin until this bug (object leaks)
is fixed.


git-svn-id: svn://10.0.0.236/trunk@137106 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 01:50:31 +00:00
wtc%netscape.com
89a5f206f5 Bug 171263: signtool should call NSS_Shutdown before it exits.
git-svn-id: svn://10.0.0.236/trunk@137096 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 00:39:37 +00:00
relyea%netscape.com
1f798137c8 Move LIBJAR definitions around so that NT builds.
git-svn-id: svn://10.0.0.236/trunk@137093 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-29 23:37:10 +00:00
kaie%netscape.com
34e0f96707 b=165301 False mixed content (encrypted page with unencrypted information) Security Warning
r=javi sr=darin a=asa


git-svn-id: svn://10.0.0.236/trunk@137060 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-29 03:52:01 +00:00
relyea%netscape.com
e91cc9a0bf 1) add vfyserv to the standard build.
2) add tool to build shared library signature files for FIP's.

Code to verify requires NSPR changes before we can check it in.


git-svn-id: svn://10.0.0.236/trunk@137034 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-28 18:53:22 +00:00
relyea%netscape.com
86f9a31ae9 New header file to dump defines for managing signed FIPs libraries.
git-svn-id: svn://10.0.0.236/trunk@137033 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-28 18:50:02 +00:00
relyea%netscape.com
ed0e221f04 Compile modutil with shared libraries.
git-svn-id: svn://10.0.0.236/trunk@137032 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-28 16:44:33 +00:00
relyea%netscape.com
f8d21115e4 Export functions needed for modutil to be compiled dynamically.
git-svn-id: svn://10.0.0.236/trunk@137031 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-28 16:41:46 +00:00
relyea%netscape.com
26b427884a Remove dead code and symbols from lib jar so that modutil can compile when
linked with it.


git-svn-id: svn://10.0.0.236/trunk@137030 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-28 16:39:32 +00:00
relyea%netscape.com
3bb3de12ff Sign 3 sets of changes are here:
1) Provide accessor functions for the PK11_DefaultArray so that modutil
does not have to link statically to access it.

2) Try setting the attribute on an object before we go to the work of copying
it (Function Only used in Java).

3) Optimize searching for the more common types of attributes.


git-svn-id: svn://10.0.0.236/trunk@137029 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-28 16:38:04 +00:00
kaie%netscape.com
faaade74cb b=190640 Remove the DHE ciphersuites until they work
r=javi sr=bryner a=asa


git-svn-id: svn://10.0.0.236/trunk@137026 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-28 15:06:29 +00:00
kaie%netscape.com
639dd24dd0 b=190394 "website certified by an unknown authority" - nssckbi not found breaks PKI trust
r=dougt sr=darin a=asa


git-svn-id: svn://10.0.0.236/trunk@137004 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-27 23:53:02 +00:00
wtc%netscape.com
619e3f24af Bug 90010: added support for parisc64. I received this patch from
Christopher Blizzard <blizzard@mozilla.org>.


git-svn-id: svn://10.0.0.236/trunk@136996 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-27 22:36:06 +00:00
wtc%netscape.com
4b6932465e Bug 190396.
Don't fail the search if the token returned an error that indicates that it
legitimately couldn't find a CRL


git-svn-id: svn://10.0.0.236/trunk@136929 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-24 06:37:03 +00:00
relyea%netscape.com
09be8d3cd2 Bug 167756. Clean up previous patch: add lastState field, and set the SSL Error on failure.
git-svn-id: svn://10.0.0.236/trunk@136911 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-23 22:02:37 +00:00
relyea%netscape.com
8e08bd486a Write changes back to the database when we correct incorrect user bit settings.
git-svn-id: svn://10.0.0.236/trunk@136901 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-23 19:38:53 +00:00
relyea%netscape.com
387934ebb1 Set the size value when extracting a key 19011.
git-svn-id: svn://10.0.0.236/trunk@136894 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-23 17:30:15 +00:00
relyea%netscape.com
00bc37d763 Check for token removal before continuing SSL sessions which have client auth
with certs associated with that token. bug 167756.


git-svn-id: svn://10.0.0.236/trunk@136893 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-23 17:27:34 +00:00
relyea%netscape.com
33749fcd61 Fix bug 180824 Version 3.4 string hard coded in default token name.
git-svn-id: svn://10.0.0.236/trunk@136892 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-23 17:16:50 +00:00
wtc%netscape.com
5199cc28c3 Bug 90010: added support for Linux for s390 and s390x. The patch is
contributed by Gerhard Tonn <GerhardTonn@swol.de>.


git-svn-id: svn://10.0.0.236/trunk@136891 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-23 17:16:32 +00:00
ian.mcgreer%sun.com
965a8261d9 always use explicit serial numbers on generated certs, should fix QA failures on leia
git-svn-id: svn://10.0.0.236/trunk@136886 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-23 15:38:03 +00:00
jpierre%netscape.com
22bf9f8cc7 Fix for bug #126930 - make SSL_ConfigServreSessionIDCache work on OS/2 by not using shared memory in single process mode. r=nelsonb
git-svn-id: svn://10.0.0.236/trunk@136858 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-23 00:15:08 +00:00
wtc%netscape.com
7f2e030479 Bug 190112: PK11_ReadAttribute needs to call PK11_ExitSlotMonitor before
we return because of allocation failure.


git-svn-id: svn://10.0.0.236/trunk@136847 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-22 17:44:36 +00:00
wtc%netscape.com
31144c495b Bug 189546: updated the comments to reflect what the new code does.
git-svn-id: svn://10.0.0.236/trunk@136825 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-22 06:24:53 +00:00
timeless%mozdev.org
c784518ba2 Bug 179798 cookie confirm dialog no longer works in embedding (doesn't call nsIPrompt service)
patch by mvl@exedo.nl r=dwitte sr=darin


git-svn-id: svn://10.0.0.236/trunk@136820 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-22 05:52:33 +00:00
nelsonb%netscape.com
11991ff798 Add OIDs for AES Key Wrap mechanism.
git-svn-id: svn://10.0.0.236/trunk@136810 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-22 04:35:54 +00:00
wtc%netscape.com
e54f7214ed Bug 189546: moved the switch statement for known key lengths to the
beginning of PK11_GetKeyLength to work around a deadlock in nCipher
module if PK11_ExtractKeyValue is called.


git-svn-id: svn://10.0.0.236/trunk@136795 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-22 03:55:21 +00:00
kaie%netscape.com
a6730a669f b=188363 Bad error messages when server uses an invalid cert (-8054)
r=nelsonb sr=blizzard


git-svn-id: svn://10.0.0.236/trunk@136789 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-22 03:41:35 +00:00
nelsonb%netscape.com
18c5b1a358 Implement new AES Key Wrap mechanisms. Bug 167818.
git-svn-id: svn://10.0.0.236/trunk@136779 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-22 03:13:04 +00:00
wtc%netscape.com
73bb8966c6 Bug 189345: we incorrectly assumed that a C_XxxFinal call to determine the
length of the buffer would also terminate the active operation if the
buffer length is 0.  PKCS#11 says it doesn't, so we need to make the
additional C_XxxFinal call even if the buffer length is 0.  Allocate a
buffer from the heap if the stack buffer is too small and free the
heap-allocated buffer before we return from pk11_Finalize.  We can use the
stack buffer if count is equal to its size.


git-svn-id: svn://10.0.0.236/trunk@136742 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-21 19:33:24 +00:00
seawood%netscape.com
ecb6d6ed80 I always forget to change both the declaration & the definition.
Thanks to bird@anduin.net for the patch.
Fixing OS/2 bustage.


git-svn-id: svn://10.0.0.236/trunk@136620 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-19 06:43:19 +00:00
seawood%netscape.com
e546507ab5 Callback functions must be defined as such.
Fixing OS/2 bustage.


git-svn-id: svn://10.0.0.236/trunk@136618 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-19 02:43:13 +00:00
kaie%netscape.com
f94f02d55a b=189205 Implement early shutdown of NSS resources
r=javi sr=darin


git-svn-id: svn://10.0.0.236/trunk@136592 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-18 14:03:00 +00:00
relyea%netscape.com
81e98c3878 Bug 198364. Tokens keys do not own their handles. Don't let the key
get destroyed when freed.


git-svn-id: svn://10.0.0.236/trunk@136569 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-18 01:49:33 +00:00
nelsonb%netscape.com
7d38d59a3d When wrapping secret keys with an unpadded block cipher, null padd the keys
as necessary, per the PKCS 11 spec.  Also, implement padding and unpadding
for single-part only ciphers.


git-svn-id: svn://10.0.0.236/trunk@136493 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-17 05:50:08 +00:00
wtc%netscape.com
23826d1288 Bug 145029: fixed compiler warnings (mostly "xxx might be used
uninitialized").


git-svn-id: svn://10.0.0.236/trunk@136476 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-17 02:49:11 +00:00
nelsonb%netscape.com
a1dcee5b94 One more fix for HPUX and Solaris.
git-svn-id: svn://10.0.0.236/trunk@136400 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-16 01:44:43 +00:00
jpierre%netscape.com
5a3c53f555 Fix incorrect usage of QuickDER . See bug 160805 comment 16
git-svn-id: svn://10.0.0.236/trunk@136398 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-16 00:56:10 +00:00