1693 Commits

Author SHA1 Message Date
relyea%netscape.com
d15360a1cd Check bug 188856 into the tip.
1)return proper error code in more cases. 2) Fix bug in DH KeyPair Generation.

the essential part of this fix in pkcs11c.c where we add the CKA_NETSCAPE_DB
attribute on Diffie-Hellman key gen. I don't know why the code would have even
thought of working without this (unless we were testing with pregenerated
keys).

The rest of the fix is to surface more of the PKCS #11 error back up. There is
a separate bug to continue tracking the issue of lost PKCS #11 errors.


git-svn-id: svn://10.0.0.236/trunk@137229 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-31 23:39:34 +00:00
nelsonb%netscape.com
27a07539b5 Fix an uninitialized variable. Bug 191396.
git-svn-id: svn://10.0.0.236/trunk@137220 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-31 22:26:56 +00:00
nelsonb%netscape.com
216c70fc28 Fix crash in CERT_CheckKeyUsage caused by dereferencing a returned pointer
without checkin it for NULL.


git-svn-id: svn://10.0.0.236/trunk@137180 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-31 02:49:13 +00:00
nelsonb%netscape.com
77684e6b48 Fix bug 191396. Don't generate SEC_ERROR_LIBRARY_FAILURE unnecessarily
while doing dsa signatures.


git-svn-id: svn://10.0.0.236/trunk@137179 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-31 02:39:36 +00:00
relyea%netscape.com
f13a13b227 FIPS library verifier.
git-svn-id: svn://10.0.0.236/trunk@137166 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 23:38:07 +00:00
relyea%netscape.com
8249770fa2 FIPS library verifier
git-svn-id: svn://10.0.0.236/trunk@137165 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 23:36:37 +00:00
wtc%netscape.com
9072bc6a29 Bug 177387: temporarily added freebl_GetLibraryFilePathname to libfreebl.a.
This function has the same semantics as the NSPR 4.3 function
PR_GetLibraryFilePathname. This patch should be backed out when NSPR 4.3 is
released.
Modified Files: config.mk manifest.mn
Added Files: libpath.c


git-svn-id: svn://10.0.0.236/trunk@137130 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 07:00:32 +00:00
jpierre%netscape.com
3e4fd60532 Fix for 190424 - don't query CKA_NETSCAPE_EMAIL attribute. r=wtc
git-svn-id: svn://10.0.0.236/trunk@137124 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 05:12:10 +00:00
jpierre%netscape.com
4734fd96af Fix for 190424 - don't query CKA_NETSCAPE_EMAIL attribute . r=wtc
git-svn-id: svn://10.0.0.236/trunk@137118 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 03:02:55 +00:00
jpierre%netscape.com
262472f161 Patch for memory leak . Bug 189976 . r=wtc
git-svn-id: svn://10.0.0.236/trunk@137116 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 02:59:35 +00:00
relyea%netscape.com
86f9a31ae9 New header file to dump defines for managing signed FIPs libraries.
git-svn-id: svn://10.0.0.236/trunk@137033 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-28 18:50:02 +00:00
relyea%netscape.com
f8d21115e4 Export functions needed for modutil to be compiled dynamically.
git-svn-id: svn://10.0.0.236/trunk@137031 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-28 16:41:46 +00:00
relyea%netscape.com
26b427884a Remove dead code and symbols from lib jar so that modutil can compile when
linked with it.


git-svn-id: svn://10.0.0.236/trunk@137030 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-28 16:39:32 +00:00
relyea%netscape.com
3bb3de12ff Sign 3 sets of changes are here:
1) Provide accessor functions for the PK11_DefaultArray so that modutil
does not have to link statically to access it.

2) Try setting the attribute on an object before we go to the work of copying
it (Function Only used in Java).

3) Optimize searching for the more common types of attributes.


git-svn-id: svn://10.0.0.236/trunk@137029 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-28 16:38:04 +00:00
wtc%netscape.com
4b6932465e Bug 190396.
Don't fail the search if the token returned an error that indicates that it
legitimately couldn't find a CRL


git-svn-id: svn://10.0.0.236/trunk@136929 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-24 06:37:03 +00:00
relyea%netscape.com
09be8d3cd2 Bug 167756. Clean up previous patch: add lastState field, and set the SSL Error on failure.
git-svn-id: svn://10.0.0.236/trunk@136911 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-23 22:02:37 +00:00
relyea%netscape.com
8e08bd486a Write changes back to the database when we correct incorrect user bit settings.
git-svn-id: svn://10.0.0.236/trunk@136901 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-23 19:38:53 +00:00
relyea%netscape.com
387934ebb1 Set the size value when extracting a key 19011.
git-svn-id: svn://10.0.0.236/trunk@136894 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-23 17:30:15 +00:00
relyea%netscape.com
00bc37d763 Check for token removal before continuing SSL sessions which have client auth
with certs associated with that token. bug 167756.


git-svn-id: svn://10.0.0.236/trunk@136893 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-23 17:27:34 +00:00
relyea%netscape.com
33749fcd61 Fix bug 180824 Version 3.4 string hard coded in default token name.
git-svn-id: svn://10.0.0.236/trunk@136892 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-23 17:16:50 +00:00
jpierre%netscape.com
22bf9f8cc7 Fix for bug #126930 - make SSL_ConfigServreSessionIDCache work on OS/2 by not using shared memory in single process mode. r=nelsonb
git-svn-id: svn://10.0.0.236/trunk@136858 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-23 00:15:08 +00:00
wtc%netscape.com
7f2e030479 Bug 190112: PK11_ReadAttribute needs to call PK11_ExitSlotMonitor before
we return because of allocation failure.


git-svn-id: svn://10.0.0.236/trunk@136847 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-22 17:44:36 +00:00
wtc%netscape.com
31144c495b Bug 189546: updated the comments to reflect what the new code does.
git-svn-id: svn://10.0.0.236/trunk@136825 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-22 06:24:53 +00:00
nelsonb%netscape.com
11991ff798 Add OIDs for AES Key Wrap mechanism.
git-svn-id: svn://10.0.0.236/trunk@136810 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-22 04:35:54 +00:00
wtc%netscape.com
e54f7214ed Bug 189546: moved the switch statement for known key lengths to the
beginning of PK11_GetKeyLength to work around a deadlock in nCipher
module if PK11_ExtractKeyValue is called.


git-svn-id: svn://10.0.0.236/trunk@136795 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-22 03:55:21 +00:00
nelsonb%netscape.com
18c5b1a358 Implement new AES Key Wrap mechanisms. Bug 167818.
git-svn-id: svn://10.0.0.236/trunk@136779 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-22 03:13:04 +00:00
wtc%netscape.com
73bb8966c6 Bug 189345: we incorrectly assumed that a C_XxxFinal call to determine the
length of the buffer would also terminate the active operation if the
buffer length is 0.  PKCS#11 says it doesn't, so we need to make the
additional C_XxxFinal call even if the buffer length is 0.  Allocate a
buffer from the heap if the stack buffer is too small and free the
heap-allocated buffer before we return from pk11_Finalize.  We can use the
stack buffer if count is equal to its size.


git-svn-id: svn://10.0.0.236/trunk@136742 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-21 19:33:24 +00:00
relyea%netscape.com
81e98c3878 Bug 198364. Tokens keys do not own their handles. Don't let the key
get destroyed when freed.


git-svn-id: svn://10.0.0.236/trunk@136569 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-18 01:49:33 +00:00
nelsonb%netscape.com
7d38d59a3d When wrapping secret keys with an unpadded block cipher, null padd the keys
as necessary, per the PKCS 11 spec.  Also, implement padding and unpadding
for single-part only ciphers.


git-svn-id: svn://10.0.0.236/trunk@136493 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-17 05:50:08 +00:00
wtc%netscape.com
23826d1288 Bug 145029: fixed compiler warnings (mostly "xxx might be used
uninitialized").


git-svn-id: svn://10.0.0.236/trunk@136476 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-17 02:49:11 +00:00
nelsonb%netscape.com
a1dcee5b94 One more fix for HPUX and Solaris.
git-svn-id: svn://10.0.0.236/trunk@136400 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-16 01:44:43 +00:00
jpierre%netscape.com
5a3c53f555 Fix incorrect usage of QuickDER . See bug 160805 comment 16
git-svn-id: svn://10.0.0.236/trunk@136398 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-16 00:56:10 +00:00
nelsonb%netscape.com
2df42235bf Fix compilation error. This file is only compiled on 2 platforms.
git-svn-id: svn://10.0.0.236/trunk@136397 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-16 00:55:53 +00:00
nelsonb%netscape.com
c3e7afd6e5 Switch from the old vendor-defined mechanism numbers to the new official
PKCS 11 mechanism numbers.  These numbers will appear in v2.20.


git-svn-id: svn://10.0.0.236/trunk@136396 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-16 00:43:58 +00:00
nelsonb%netscape.com
c015f6d75a Enforce that softoken's mechanisms are used only with the PKCS 11
functions that they're defined to work with.


git-svn-id: svn://10.0.0.236/trunk@136395 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-16 00:28:05 +00:00
nelsonb%netscape.com
359ba6342a Complete the addition of AES Key Wrap to blapi in freebl.
git-svn-id: svn://10.0.0.236/trunk@136390 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-16 00:15:21 +00:00
nelsonb%netscape.com
9028aec222 Remove the implementation of CKM_KEY_WRAP_LYNKS from softoken.
git-svn-id: svn://10.0.0.236/trunk@136389 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-16 00:14:07 +00:00
nelsonb%netscape.com
7a5b26792c aeskeywrap.c - implement AES Key Wrap algorithm from RFC 3394
git-svn-id: svn://10.0.0.236/trunk@136326 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-14 22:16:04 +00:00
relyea%netscape.com
4e78f57cad Check for Empty CRL list as well.
Bug 164501.


git-svn-id: svn://10.0.0.236/trunk@136165 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-10 19:09:46 +00:00
relyea%netscape.com
f76a18f162 Declare PK11_TokenRefresh()
git-svn-id: svn://10.0.0.236/trunk@136163 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-10 17:56:22 +00:00
relyea%netscape.com
45bdc3d5c4 Remember to include the global: tag
git-svn-id: svn://10.0.0.236/trunk@136075 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-09 18:44:26 +00:00
relyea%netscape.com
d1ef6ba9da backport NSS 3.7 fixes to the tip.
git-svn-id: svn://10.0.0.236/trunk@136071 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-09 18:15:11 +00:00
wtc%netscape.com
d50ec75b06 Bug 186201: should handle a null 'environ' pointer, which can happen on
Solaris if NSS is loaded with dlopen() by an executable linked with the
RTLD_GROUP flag.


git-svn-id: svn://10.0.0.236/trunk@136052 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-09 04:34:31 +00:00
wtc%netscape.com
56a88ba186 Bug 187629: do not refresh a CERTCertificate if the same instance of a
cached cert is added to the collection.


git-svn-id: svn://10.0.0.236/trunk@136051 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-09 04:29:01 +00:00
wtc%netscape.com
ec8de2b7c8 Bug 186586: If at NSS shutdown there are still certs in the cert caches,
cause NSS shutdown and the next NSS initialization to fail but do not
destroy the cert caches (and the crypto context and trust domain containing
them) to avoid a crash if the NSS client destroys the certs later.  New
error codes needed to be added to indicate the failure of NSS shutdown and
NSS initialization due to this cause.


git-svn-id: svn://10.0.0.236/trunk@136016 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-08 21:58:29 +00:00
wtc%netscape.com
83b9358446 Bug 186586: If at NSS shutdown there are still certs in the cert caches,
cause NSS shutdown and the next NSS initialization to fail but do not
destroy the cert caches (and the crypto context and trust domain containing
them) to avoid a crash if the NSS client destroys the certs later.  New
error codes needed to be added to indicate the failure of NSS shutdown and
NSS initialization due to this cause.
Modified Files:
	base/errorval.c nss/nssinit.c pki/pki3hack.c pki/pki3hack.h
	pki/pkistore.c pki/pkistore.h pki/tdcache.c pki/trustdomain.c
	util/secerr.h


git-svn-id: svn://10.0.0.236/trunk@136014 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-08 21:48:47 +00:00
wtc%netscape.com
37a5a7c29e Bug 183612: added some comments.
git-svn-id: svn://10.0.0.236/trunk@135609 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-24 02:25:36 +00:00
wtc%netscape.com
3ed557f63f Bug 183612: SECMOD_InitCallOnce() and SECMOD_CleanupCallOnce() should be
declared and defined with an argument list of "(void)" instead of "()".
Modified Files: pk11cert.c secmodi.h


git-svn-id: svn://10.0.0.236/trunk@135492 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-19 07:03:39 +00:00
wtc%netscape.com
9bb9b998ad Bug 183612: renamed some new functions to be consistent with existing
function names containing SubjectKey and PublicKey.  Moved internal
functions to private headers and use the lowercase cert_ prefix for the
internal functions for subject key ID mapping hash table. r=nelsonb.


git-svn-id: svn://10.0.0.236/trunk@135480 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-19 00:26:34 +00:00
relyea%netscape.com
6aa398e467 Bug 186058
git-svn-id: svn://10.0.0.236/trunk@135473 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-18 23:55:53 +00:00