relyea%netscape.com
d15360a1cd
Check bug 188856 into the tip.
...
1)return proper error code in more cases. 2) Fix bug in DH KeyPair Generation.
the essential part of this fix in pkcs11c.c where we add the CKA_NETSCAPE_DB
attribute on Diffie-Hellman key gen. I don't know why the code would have even
thought of working without this (unless we were testing with pregenerated
keys).
The rest of the fix is to surface more of the PKCS #11 error back up. There is
a separate bug to continue tracking the issue of lost PKCS #11 errors.
git-svn-id: svn://10.0.0.236/trunk@137229 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-31 23:39:34 +00:00
kaie%netscape.com
05c88cd5fb
b=189974 Profile Switching fails after JavaScript based cert import
...
PSM portion of fix
r=javi sr=darin a=asa
git-svn-id: svn://10.0.0.236/trunk@137221 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-31 22:33:49 +00:00
nelsonb%netscape.com
27a07539b5
Fix an uninitialized variable. Bug 191396.
...
git-svn-id: svn://10.0.0.236/trunk@137220 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-31 22:26:56 +00:00
nelsonb%netscape.com
216c70fc28
Fix crash in CERT_CheckKeyUsage caused by dereferencing a returned pointer
...
without checkin it for NULL.
git-svn-id: svn://10.0.0.236/trunk@137180 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-31 02:49:13 +00:00
nelsonb%netscape.com
77684e6b48
Fix bug 191396. Don't generate SEC_ERROR_LIBRARY_FAILURE unnecessarily
...
while doing dsa signatures.
git-svn-id: svn://10.0.0.236/trunk@137179 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-31 02:39:36 +00:00
relyea%netscape.com
f13a13b227
FIPS library verifier.
...
git-svn-id: svn://10.0.0.236/trunk@137166 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 23:38:07 +00:00
relyea%netscape.com
8249770fa2
FIPS library verifier
...
git-svn-id: svn://10.0.0.236/trunk@137165 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 23:36:37 +00:00
wtc%netscape.com
916c634dce
Bug 191214: fixed the object leaks in signtool that prevented NSS_Shutdown
...
from succeeding and added the NSS_Shutdown call back. r=jpierre.
Modified Files: certgen.c sign.c signtool.c
git-svn-id: svn://10.0.0.236/trunk@137163 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 23:11:13 +00:00
wtc%netscape.com
9072bc6a29
Bug 177387: temporarily added freebl_GetLibraryFilePathname to libfreebl.a.
...
This function has the same semantics as the NSPR 4.3 function
PR_GetLibraryFilePathname. This patch should be backed out when NSPR 4.3 is
released.
Modified Files: config.mk manifest.mn
Added Files: libpath.c
git-svn-id: svn://10.0.0.236/trunk@137130 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 07:00:32 +00:00
jpierre%netscape.com
3e4fd60532
Fix for 190424 - don't query CKA_NETSCAPE_EMAIL attribute. r=wtc
...
git-svn-id: svn://10.0.0.236/trunk@137124 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 05:12:10 +00:00
jpierre%netscape.com
4734fd96af
Fix for 190424 - don't query CKA_NETSCAPE_EMAIL attribute . r=wtc
...
git-svn-id: svn://10.0.0.236/trunk@137118 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 03:02:55 +00:00
jpierre%netscape.com
262472f161
Patch for memory leak . Bug 189976 . r=wtc
...
git-svn-id: svn://10.0.0.236/trunk@137116 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 02:59:35 +00:00
wtc%netscape.com
fc82d526b5
Bug 191214: backed out the previous checkin until this bug (object leaks)
...
is fixed.
git-svn-id: svn://10.0.0.236/trunk@137106 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 01:50:31 +00:00
wtc%netscape.com
89a5f206f5
Bug 171263: signtool should call NSS_Shutdown before it exits.
...
git-svn-id: svn://10.0.0.236/trunk@137096 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 00:39:37 +00:00
relyea%netscape.com
1f798137c8
Move LIBJAR definitions around so that NT builds.
...
git-svn-id: svn://10.0.0.236/trunk@137093 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-29 23:37:10 +00:00
kaie%netscape.com
34e0f96707
b=165301 False mixed content (encrypted page with unencrypted information) Security Warning
...
r=javi sr=darin a=asa
git-svn-id: svn://10.0.0.236/trunk@137060 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-29 03:52:01 +00:00
relyea%netscape.com
e91cc9a0bf
1) add vfyserv to the standard build.
...
2) add tool to build shared library signature files for FIP's.
Code to verify requires NSPR changes before we can check it in.
git-svn-id: svn://10.0.0.236/trunk@137034 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-28 18:53:22 +00:00
relyea%netscape.com
86f9a31ae9
New header file to dump defines for managing signed FIPs libraries.
...
git-svn-id: svn://10.0.0.236/trunk@137033 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-28 18:50:02 +00:00
relyea%netscape.com
ed0e221f04
Compile modutil with shared libraries.
...
git-svn-id: svn://10.0.0.236/trunk@137032 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-28 16:44:33 +00:00
relyea%netscape.com
f8d21115e4
Export functions needed for modutil to be compiled dynamically.
...
git-svn-id: svn://10.0.0.236/trunk@137031 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-28 16:41:46 +00:00
relyea%netscape.com
26b427884a
Remove dead code and symbols from lib jar so that modutil can compile when
...
linked with it.
git-svn-id: svn://10.0.0.236/trunk@137030 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-28 16:39:32 +00:00
relyea%netscape.com
3bb3de12ff
Sign 3 sets of changes are here:
...
1) Provide accessor functions for the PK11_DefaultArray so that modutil
does not have to link statically to access it.
2) Try setting the attribute on an object before we go to the work of copying
it (Function Only used in Java).
3) Optimize searching for the more common types of attributes.
git-svn-id: svn://10.0.0.236/trunk@137029 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-28 16:38:04 +00:00
kaie%netscape.com
faaade74cb
b=190640 Remove the DHE ciphersuites until they work
...
r=javi sr=bryner a=asa
git-svn-id: svn://10.0.0.236/trunk@137026 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-28 15:06:29 +00:00
kaie%netscape.com
639dd24dd0
b=190394 "website certified by an unknown authority" - nssckbi not found breaks PKI trust
...
r=dougt sr=darin a=asa
git-svn-id: svn://10.0.0.236/trunk@137004 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-27 23:53:02 +00:00
wtc%netscape.com
619e3f24af
Bug 90010: added support for parisc64. I received this patch from
...
Christopher Blizzard <blizzard@mozilla.org>.
git-svn-id: svn://10.0.0.236/trunk@136996 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-27 22:36:06 +00:00
wtc%netscape.com
4b6932465e
Bug 190396.
...
Don't fail the search if the token returned an error that indicates that it
legitimately couldn't find a CRL
git-svn-id: svn://10.0.0.236/trunk@136929 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-24 06:37:03 +00:00
relyea%netscape.com
09be8d3cd2
Bug 167756. Clean up previous patch: add lastState field, and set the SSL Error on failure.
...
git-svn-id: svn://10.0.0.236/trunk@136911 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-23 22:02:37 +00:00
relyea%netscape.com
8e08bd486a
Write changes back to the database when we correct incorrect user bit settings.
...
git-svn-id: svn://10.0.0.236/trunk@136901 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-23 19:38:53 +00:00
relyea%netscape.com
387934ebb1
Set the size value when extracting a key 19011.
...
git-svn-id: svn://10.0.0.236/trunk@136894 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-23 17:30:15 +00:00
relyea%netscape.com
00bc37d763
Check for token removal before continuing SSL sessions which have client auth
...
with certs associated with that token. bug 167756.
git-svn-id: svn://10.0.0.236/trunk@136893 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-23 17:27:34 +00:00
relyea%netscape.com
33749fcd61
Fix bug 180824 Version 3.4 string hard coded in default token name.
...
git-svn-id: svn://10.0.0.236/trunk@136892 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-23 17:16:50 +00:00
wtc%netscape.com
5199cc28c3
Bug 90010: added support for Linux for s390 and s390x. The patch is
...
contributed by Gerhard Tonn <GerhardTonn@swol.de>.
git-svn-id: svn://10.0.0.236/trunk@136891 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-23 17:16:32 +00:00
ian.mcgreer%sun.com
965a8261d9
always use explicit serial numbers on generated certs, should fix QA failures on leia
...
git-svn-id: svn://10.0.0.236/trunk@136886 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-23 15:38:03 +00:00
jpierre%netscape.com
22bf9f8cc7
Fix for bug #126930 - make SSL_ConfigServreSessionIDCache work on OS/2 by not using shared memory in single process mode. r=nelsonb
...
git-svn-id: svn://10.0.0.236/trunk@136858 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-23 00:15:08 +00:00
wtc%netscape.com
7f2e030479
Bug 190112: PK11_ReadAttribute needs to call PK11_ExitSlotMonitor before
...
we return because of allocation failure.
git-svn-id: svn://10.0.0.236/trunk@136847 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-22 17:44:36 +00:00
wtc%netscape.com
31144c495b
Bug 189546: updated the comments to reflect what the new code does.
...
git-svn-id: svn://10.0.0.236/trunk@136825 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-22 06:24:53 +00:00
timeless%mozdev.org
c784518ba2
Bug 179798 cookie confirm dialog no longer works in embedding (doesn't call nsIPrompt service)
...
patch by mvl@exedo.nl r=dwitte sr=darin
git-svn-id: svn://10.0.0.236/trunk@136820 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-22 05:52:33 +00:00
nelsonb%netscape.com
11991ff798
Add OIDs for AES Key Wrap mechanism.
...
git-svn-id: svn://10.0.0.236/trunk@136810 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-22 04:35:54 +00:00
wtc%netscape.com
e54f7214ed
Bug 189546: moved the switch statement for known key lengths to the
...
beginning of PK11_GetKeyLength to work around a deadlock in nCipher
module if PK11_ExtractKeyValue is called.
git-svn-id: svn://10.0.0.236/trunk@136795 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-22 03:55:21 +00:00
kaie%netscape.com
a6730a669f
b=188363 Bad error messages when server uses an invalid cert (-8054)
...
r=nelsonb sr=blizzard
git-svn-id: svn://10.0.0.236/trunk@136789 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-22 03:41:35 +00:00
nelsonb%netscape.com
18c5b1a358
Implement new AES Key Wrap mechanisms. Bug 167818.
...
git-svn-id: svn://10.0.0.236/trunk@136779 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-22 03:13:04 +00:00
wtc%netscape.com
73bb8966c6
Bug 189345: we incorrectly assumed that a C_XxxFinal call to determine the
...
length of the buffer would also terminate the active operation if the
buffer length is 0. PKCS#11 says it doesn't, so we need to make the
additional C_XxxFinal call even if the buffer length is 0. Allocate a
buffer from the heap if the stack buffer is too small and free the
heap-allocated buffer before we return from pk11_Finalize. We can use the
stack buffer if count is equal to its size.
git-svn-id: svn://10.0.0.236/trunk@136742 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-21 19:33:24 +00:00
seawood%netscape.com
ecb6d6ed80
I always forget to change both the declaration & the definition.
...
Thanks to bird@anduin.net for the patch.
Fixing OS/2 bustage.
git-svn-id: svn://10.0.0.236/trunk@136620 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-19 06:43:19 +00:00
seawood%netscape.com
e546507ab5
Callback functions must be defined as such.
...
Fixing OS/2 bustage.
git-svn-id: svn://10.0.0.236/trunk@136618 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-19 02:43:13 +00:00
kaie%netscape.com
f94f02d55a
b=189205 Implement early shutdown of NSS resources
...
r=javi sr=darin
git-svn-id: svn://10.0.0.236/trunk@136592 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-18 14:03:00 +00:00
relyea%netscape.com
81e98c3878
Bug 198364. Tokens keys do not own their handles. Don't let the key
...
get destroyed when freed.
git-svn-id: svn://10.0.0.236/trunk@136569 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-18 01:49:33 +00:00
nelsonb%netscape.com
7d38d59a3d
When wrapping secret keys with an unpadded block cipher, null padd the keys
...
as necessary, per the PKCS 11 spec. Also, implement padding and unpadding
for single-part only ciphers.
git-svn-id: svn://10.0.0.236/trunk@136493 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-17 05:50:08 +00:00
wtc%netscape.com
23826d1288
Bug 145029: fixed compiler warnings (mostly "xxx might be used
...
uninitialized").
git-svn-id: svn://10.0.0.236/trunk@136476 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-17 02:49:11 +00:00
nelsonb%netscape.com
a1dcee5b94
One more fix for HPUX and Solaris.
...
git-svn-id: svn://10.0.0.236/trunk@136400 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-16 01:44:43 +00:00
jpierre%netscape.com
5a3c53f555
Fix incorrect usage of QuickDER . See bug 160805 comment 16
...
git-svn-id: svn://10.0.0.236/trunk@136398 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-16 00:56:10 +00:00