141 Commits

Author SHA1 Message Date
kaie%kuix.de
413c4b7249 Bug 362980, Unable to verify the identity of [www.something.com] as a trusted site
Fixes a regression from yesterday's checkin for bug 176501.
r=rrelyea, r=wtchang


git-svn-id: svn://10.0.0.236/trunk@216661 18797224-902f-48f8-a5cc-f745e15eee43
2006-12-07 13:02:28 +00:00
kaie%kuix.de
e2a6356e24 Bug 176501, mozilla apps must manage NSS configuration for PKCS#11 shared libs, including nssckbi.dll
r=rrelyea


git-svn-id: svn://10.0.0.236/trunk@216560 18797224-902f-48f8-a5cc-f745e15eee43
2006-12-06 15:42:39 +00:00
timeless%mozdev.org
6884c8fe13 Bug 309877 PSM/NSS init (thus SSL/https) fails when no profile exists
original patch by benb r=rrelyea moa=kaie


git-svn-id: svn://10.0.0.236/trunk@200822 18797224-902f-48f8-a5cc-f745e15eee43
2006-06-25 07:12:44 +00:00
kaie%kuix.de
22a66b5c78 bug 235773, Patch v13
This check in will make PSM aware of ECC cipher suites. Nightly builds will not yet contain ECC, because NSS is still
being compiled with ECC disabled.
r=rrelyea/darin


git-svn-id: svn://10.0.0.236/trunk@196613 18797224-902f-48f8-a5cc-f745e15eee43
2006-05-16 00:33:44 +00:00
darin%meer.net
42edf059cf landing patch for bug 326273 "Implement nsIThreadManager" (Mac portions by Mark Mentovai) with reviews from bienvenu, bsmedberg, bzbarsky, josh, roc, and ssieb
git-svn-id: svn://10.0.0.236/trunk@196254 18797224-902f-48f8-a5cc-f745e15eee43
2006-05-10 17:30:15 +00:00
kaie%kuix.de
dfeab526b2 Follow-up checkin to bug 111384, fixes the tinderbox tests failure.
If the thread runner C function calls the pure virtual Run too early,
before the constructor finished, it will crash.
This patch delays thread creation and virtual function call to a
separate startThread call.
Thanks a lot to Jag for his help in finding the problem!
r=jag


git-svn-id: svn://10.0.0.236/trunk@193503 18797224-902f-48f8-a5cc-f745e15eee43
2006-04-04 13:18:48 +00:00
kaie%kuix.de
e4ab14cd87 bug 111384, Support OCSP requests through a proxy
combined r= by darin / rrelyea
second checkin attempt


git-svn-id: svn://10.0.0.236/trunk@193501 18797224-902f-48f8-a5cc-f745e15eee43
2006-04-04 13:14:40 +00:00
kaie%kuix.de
3881f77126 backing out my checkin, because we can't reproduce the tinderbox test
failure


git-svn-id: svn://10.0.0.236/trunk@193495 18797224-902f-48f8-a5cc-f745e15eee43
2006-04-04 09:48:08 +00:00
kaie%kuix.de
c88b58645c bug 111384, Support OCSP requests through a proxy
combined r= by darin / rrelyea


git-svn-id: svn://10.0.0.236/trunk@193483 18797224-902f-48f8-a5cc-f745e15eee43
2006-04-04 06:41:37 +00:00
kaie%kuix.de
451f5408ab bug 284450, Only use SSL V2 compatible hello, if SSL V2 is enabled
r=jgmyers, r=nelson


git-svn-id: svn://10.0.0.236/trunk@192712 18797224-902f-48f8-a5cc-f745e15eee43
2006-03-21 18:43:09 +00:00
cbiesinger%web.de
6322c04952 bug 183156 remove *UCS2* functions, replacing them with *UTF16* ones
r+sr=darin


git-svn-id: svn://10.0.0.236/trunk@188844 18797224-902f-48f8-a5cc-f745e15eee43
2006-02-03 14:18:39 +00:00
kaie%kuix.de
93f65786df bug 316710, Land some generic crypto backend code, mostly cleanup, some small enhancements
Patch by Bob Relyea, r=kengert


git-svn-id: svn://10.0.0.236/trunk@187222 18797224-902f-48f8-a5cc-f745e15eee43
2006-01-10 02:07:47 +00:00
kaie%kuix.de
a520873869 b=255408 Need to be able to build mozilla --with-system-nss
r=wtc/bsmedberg
Note: patches for bugs 288647 and 317620 might be required before enabling this build feature works.


git-svn-id: svn://10.0.0.236/trunk@186312 18797224-902f-48f8-a5cc-f745e15eee43
2005-12-20 09:47:11 +00:00
dbaron%dbaron.org
ea56e835a3 Make PL_InitEvent callers stop doing potentially dangerous casting of function pointers. b=305278 r=dougt sr=darin
git-svn-id: svn://10.0.0.236/trunk@184589 18797224-902f-48f8-a5cc-f745e15eee43
2005-11-14 20:09:51 +00:00
kaie%kuix.de
7fb80f3920 bug 200119, crash when I shutdown (StopCRLUpdateTimer) [@ nsHashtable::Reset ]
r=darin, sr=bienvenu


git-svn-id: svn://10.0.0.236/trunk@184301 18797224-902f-48f8-a5cc-f745e15eee43
2005-11-08 17:49:52 +00:00
dougt%meer.net
94085e172f Bug 302284. add xpi hash support to InstallTrigger.install(). r=dveditz, sr=shaver, a=asa
git-svn-id: svn://10.0.0.236/trunk@179031 18797224-902f-48f8-a5cc-f745e15eee43
2005-08-26 06:46:21 +00:00
mconnor%steelgryphon.com
07e51d0983 bug 194141 - missing calls to SSL_ClearSessionCache, r=nelson.bolyard, sr=dveditz, a=bsmedberg
git-svn-id: svn://10.0.0.236/trunk@176789 18797224-902f-48f8-a5cc-f745e15eee43
2005-07-28 18:15:20 +00:00
bzbarsky%mit.edu
354647c8df Expose the subject name for the cert and an nsISupports pointer to the cert on
nsIPrincipal that represents a certificate principal.  Change preference
storage to ensure matches in not only the fingerprint but also the subjectName
before applying privileges from preferences to a certificate principal.  Remove
possibility for creating certificate principals without a useful identifying
name and make sure that names don't get munged by being forced to ASCII.  Bug
240661, r=caillon, sr=dveditz, a=bsmedberg


git-svn-id: svn://10.0.0.236/trunk@176458 18797224-902f-48f8-a5cc-f745e15eee43
2005-07-22 19:05:42 +00:00
cls%seawood.org
09c0d093fd Removing extraneous ;
git-svn-id: svn://10.0.0.236/trunk@174029 18797224-902f-48f8-a5cc-f745e15eee43
2005-06-02 02:39:16 +00:00
relyea%netscape.com
0090027704 SmartCard support checkin.
Bug 284366 "PSM needs to handle Smart Cards seamlessly" r=timeless sr=jst
a=shaver


git-svn-id: svn://10.0.0.236/trunk@174016 18797224-902f-48f8-a5cc-f745e15eee43
2005-06-02 01:17:35 +00:00
dougt%meer.net
c3e3eda0f8 Add a scriptable hash function API. basically what this does is moves the hashing function out of the nsISignatureVerifier.idl and creates a new interface nsICryptoHash which is scriptable. Because of this change, we needed to fix up all of the call sites. r=darin, sr=dveditz, a=shaver
git-svn-id: svn://10.0.0.236/trunk@173927 18797224-902f-48f8-a5cc-f745e15eee43
2005-06-01 16:06:53 +00:00
bsmedberg%covad.net
fc4099e666 Bug 281414 - global s/nsIPrefBranchInternal/nsIPrefBranch2/ rs=darin (did not change backwards-compatible code in extensions/irc extensions/venkman or extensions/inspector)
git-svn-id: svn://10.0.0.236/trunk@169868 18797224-902f-48f8-a5cc-f745e15eee43
2005-02-25 20:46:35 +00:00
bzbarsky%mit.edu
e3754cdb72 VerifySignature shouldn't store the certificate in the certificate store. Bug
240668, r=wtc, sr=shaver


git-svn-id: svn://10.0.0.236/trunk@169580 18797224-902f-48f8-a5cc-f745e15eee43
2005-02-21 23:13:18 +00:00
darin%meer.net
3d52b0860b fixes bug 219400 "remove callers of nsServiceManager:: methods" r=bsmedberg
git-svn-id: svn://10.0.0.236/trunk@165089 18797224-902f-48f8-a5cc-f745e15eee43
2004-11-07 23:59:35 +00:00
kjh-5727%comcast.net
f774e416d9 Bug 232068: security should use newer nsIPrefService APIs instead of nsIPref. Patch by Mikael Parknert (mikael@parknert.se), r=bienvenu, sr=darin.
git-svn-id: svn://10.0.0.236/trunk@161859 18797224-902f-48f8-a5cc-f745e15eee43
2004-09-07 18:54:02 +00:00
gerv%gerv.net
43cb9e1492 Bug 236613: change to MPL/LGPL/GPL tri-license.
git-svn-id: svn://10.0.0.236/trunk@155484 18797224-902f-48f8-a5cc-f745e15eee43
2004-04-25 15:03:26 +00:00
bzbarsky%mit.edu
a9bb6d63ab VerifySignature should not leak on various failures. Bug 241013, r=jgmyers,
sr=brendan


git-svn-id: svn://10.0.0.236/trunk@155338 18797224-902f-48f8-a5cc-f745e15eee43
2004-04-22 17:40:51 +00:00
jgmyers%speakeasy.net
f750abe8b1 Clean up string stuff: bug 232812 r=ssaux sr=jag
git-svn-id: svn://10.0.0.236/trunk@153266 18797224-902f-48f8-a5cc-f745e15eee43
2004-02-26 04:07:23 +00:00
caillon%returnzero.com
16839e4cdc AddRef() the out parameter, and check for OOM.
Fixes bug 231709, iframes pointing to signed XUL crashes browser
r+sr=jst


git-svn-id: svn://10.0.0.236/trunk@151888 18797224-902f-48f8-a5cc-f745e15eee43
2004-01-27 05:01:48 +00:00
caillon%returnzero.com
c1914505cb Re-land patch for bug 83536, merging principal objects.
Also includes fixes from bug 216041.
r=bzbarsky
sr=jst


git-svn-id: svn://10.0.0.236/trunk@148229 18797224-902f-48f8-a5cc-f745e15eee43
2003-10-21 22:11:49 +00:00
bryner%brianryner.com
4995514c49 Updating my email address
git-svn-id: svn://10.0.0.236/trunk@147418 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-29 06:04:02 +00:00
bryner%brianryner.com
ef58713352 Fix build on gcc 3.4 by removing extra semicolons (bug 218551). r/sr=dbaron, a=brendan.
git-svn-id: svn://10.0.0.236/trunk@146625 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-08 00:18:24 +00:00
caillon%returnzero.com
d55b44719f Backing out the patch to bug 83536.
I will reland this when 1.6a re-opens.
r+sr=jst@netscape.com
a=chofmann


git-svn-id: svn://10.0.0.236/trunk@146256 18797224-902f-48f8-a5cc-f745e15eee43
2003-08-22 03:06:53 +00:00
caillon%returnzero.com
cd46cbbaad Bug 83536.
Merge script principal implementations into one class.
Should reduce footprint, speed up calls to caps a little bit, and fixes several memory leaks.
Also fixes bugs 211174 and 211263
r=jst@netscape.com
sr=bzbarsky@mit.edu
moa=mstoltz@netscape.com (he looked at an earlier patch and said it looked fine, and will do a retroactive review when he returns from vacation as well)


git-svn-id: svn://10.0.0.236/trunk@145137 18797224-902f-48f8-a5cc-f745e15eee43
2003-07-24 05:15:20 +00:00
jaggernaut%netscape.com
f34216bf2d Bug 25886: Get rid of a bunch of unused NS_DEFINE_IID, NS_DEFINE_CID. r=caillon, sr=dbaron
git-svn-id: svn://10.0.0.236/trunk@144992 18797224-902f-48f8-a5cc-f745e15eee43
2003-07-20 07:47:59 +00:00
neil%parkwaycc.co.uk
e8b502898f Bug 209661 remove unnecessary NS_LITERAL_CSTRING( with ).get() r=jag sr=alecf
git-svn-id: svn://10.0.0.236/trunk@143856 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-18 14:31:45 +00:00
kaie%netscape.com
55d5ec4d6e b=193170 PSM must disallow using NSS database with wrong profile
r=ccarlen sr=jag a=asa


git-svn-id: svn://10.0.0.236/trunk@142199 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-08 13:39:35 +00:00
kaie%netscape.com
1e253ffb01 b=173369 Migrating NSS databases from the "CFM" build to the "mach-o" build
r=javi sr=peterv a=asa


git-svn-id: svn://10.0.0.236/trunk@138009 18797224-902f-48f8-a5cc-f745e15eee43
2003-02-20 00:19:45 +00:00
wtc%netscape.com
438bdcb562 Bug 190960: added the DHE ciphersuites back because the underlying NSS bug
(bug 188856) that broke them has been fixed. r=kaie. sr=bryner. a=asa for
mozilla1.3.
Modified Files:
	netwerk/base/public/security-prefs.js
	security/manager/pki/resources/content/ssl3tlsciphers2.xul
	security/manager/pki/resources/locale/en-US/pref-ssl.dtd
	security/manager/ssl/src/nsNSSComponent.cpp


git-svn-id: svn://10.0.0.236/trunk@137982 18797224-902f-48f8-a5cc-f745e15eee43
2003-02-19 15:08:50 +00:00
kaie%netscape.com
faaade74cb b=190640 Remove the DHE ciphersuites until they work
r=javi sr=bryner a=asa


git-svn-id: svn://10.0.0.236/trunk@137026 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-28 15:06:29 +00:00
kaie%netscape.com
639dd24dd0 b=190394 "website certified by an unknown authority" - nssckbi not found breaks PKI trust
r=dougt sr=darin a=asa


git-svn-id: svn://10.0.0.236/trunk@137004 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-27 23:53:02 +00:00
kaie%netscape.com
f94f02d55a b=189205 Implement early shutdown of NSS resources
r=javi sr=darin


git-svn-id: svn://10.0.0.236/trunk@136592 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-18 14:03:00 +00:00
dbaron%dbaron.org
6ed727cbe8 Bug 178643: Remove uses of NS_INIT_ISUPPORTS, since it is no longer needed. r=timeless sr=jag
git-svn-id: svn://10.0.0.236/trunk@136028 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-08 23:19:20 +00:00
kaie%netscape.com
0c1d5a1bc2 b=184940 Enable additional SSL ciphers, add configuration UI
r=javi sr=jaggernaut


git-svn-id: svn://10.0.0.236/trunk@135917 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-07 00:58:24 +00:00
kaie%netscape.com
7e6de39a8e b=177260 Fix known leaks in PSM, track blocking PSM UI, track open SSL sockets
r=javi sr=darin


git-svn-id: svn://10.0.0.236/trunk@135905 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-06 22:23:49 +00:00
kaie%netscape.com
eada7e261c Temporary fix for bug 182803.
While this masks the reported crashes, this is nothing more than a workaround patch.
As long as this patch is in place, any attempt to do profile switching at run time will fail.
We need real fixes for bug 181230 and 177260.
r=javi sr=darin


git-svn-id: svn://10.0.0.236/trunk@135460 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-18 12:50:35 +00:00
dougt%netscape.com
d0c13e95b3 Allow caller to obtain cert. r=mstoltz, javi. sr=dveditz, b=179016
git-svn-id: svn://10.0.0.236/trunk@135266 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-13 22:26:43 +00:00
cbiesinger%web.de
2bde51296f patch by abecevello@sympatico.ca r=rangansen,me sr=roc+moz
fix some spelling errors


git-svn-id: svn://10.0.0.236/trunk@133982 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-16 20:44:32 +00:00
kaie%netscape.com
5715a6d3b9 b=168450 Cleanup some PSM code and add JavaDoc documentation to all freeze candidates
r=javi sr=alecf


git-svn-id: svn://10.0.0.236/trunk@133794 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-14 00:50:02 +00:00
kaie%netscape.com
3472b5500b b=147280 Ensure Mozilla uses the shipped nssckbi or a newer builtin roots module
r=javi sr=dveditz a=asa


git-svn-id: svn://10.0.0.236/trunk@131963 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-14 14:39:04 +00:00