120 Commits

Author SHA1 Message Date
nelsonb%netscape.com
9012bc4efb Patch by kinmoz@netscape.net. Fix bug 260882 by clearing the valid
cache flag (named "searchedObjectType") even when the cache was empty.


git-svn-id: svn://10.0.0.236/trunk@162647 18797224-902f-48f8-a5cc-f745e15eee43
2004-09-22 01:45:26 +00:00
ian.mcgreer%sun.com
f7fd7e85b4 bug 180268, reimplement ssl step-up for builtins
git-svn-id: svn://10.0.0.236/trunk@156475 18797224-902f-48f8-a5cc-f745e15eee43
2004-05-17 20:08:38 +00:00
gerv%gerv.net
43cb9e1492 Bug 236613: change to MPL/LGPL/GPL tri-license.
git-svn-id: svn://10.0.0.236/trunk@155484 18797224-902f-48f8-a5cc-f745e15eee43
2004-04-25 15:03:26 +00:00
nelsonb%netscape.com
a764068a58 Fix bug 204549. Properly handle memory allocation failures.
git-svn-id: svn://10.0.0.236/trunk@147193 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-23 20:47:43 +00:00
wtc%netscape.com
e8dd7063dd Bugzilla bug 204549: find_objects_by_template was not setting *statusOpt
before one return statement.  r=nelsonb.


git-svn-id: svn://10.0.0.236/trunk@147192 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-23 20:34:15 +00:00
wtc%netscape.com
c6768f3bcf Bugzilla bug 214535: fixed a recursive dead lock on cache->lock. We must
not call nssSlot_IsTokenPresent while cache->lock is locked because
that function may call nssToken_Remove, which locks cache->lock.  r=mcgreer


git-svn-id: svn://10.0.0.236/trunk@146816 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-12 19:17:15 +00:00
wtc%netscape.com
1cbc8808cd Bugzilla bug 214695: fixed incorrect use of PR_AtomicDecrement on reference
counts.  The reference count should not be read "naked".  Instead, we
should simply use the return value of PR_AtomicDecrement for the result of
the decrement.
Modified Files: dev/devmod.c dev/devslot.c dev/devtoken.c pki/certificate.c
pki/pkibase.c


git-svn-id: svn://10.0.0.236/trunk@145445 18797224-902f-48f8-a5cc-f745e15eee43
2003-08-01 02:02:47 +00:00
wtc%netscape.com
81587a9538 Backed out Bob Relyea's workaround for the deadlock in rev. 1.15. The
correct fix is in rev. 1.36 of tdcache.c (see Bugzilla bug 212112).


git-svn-id: svn://10.0.0.236/trunk@144744 18797224-902f-48f8-a5cc-f745e15eee43
2003-07-11 21:52:04 +00:00
nelsonb%netscape.com
aa6267105e Change the function definitions in dev so that the ctags program will
produce valid tags from these sources.


git-svn-id: svn://10.0.0.236/trunk@144324 18797224-902f-48f8-a5cc-f745e15eee43
2003-07-01 00:32:22 +00:00
relyea%netscape.com
da74328ba9 Fix deadlock bugscape 46733
git-svn-id: svn://10.0.0.236/trunk@144005 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-20 23:34:46 +00:00
wtc%netscape.com
8d0a26b479 Bug 202593: the newly added 'lock' field in the NSSToken structure is not
being used.


git-svn-id: svn://10.0.0.236/trunk@142386 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-13 22:59:20 +00:00
wtc%netscape.com
0fcacee35c Bug 202593 and bug 204980: fixed a recursive deadlock introduced by the
fix for bug 202593. The session returned by nssSlot_CreateSession doesn't
need its own lock.  It is either protected by a higher-level lock (the
slot or module lock) or used by only one thread throughout its lifetime.
Modified Files: dev/devslot.c pk11wrap/dev3hack.c


git-svn-id: svn://10.0.0.236/trunk@142302 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-10 14:21:40 +00:00
wtc%netscape.com
497bcfe6f8 Bug 204797: nssTokenObjectCache_Clear needs to lock the cache, otherwise
multiple threads could clear the cache at the same time after a token is
removed.


git-svn-id: svn://10.0.0.236/trunk@142301 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-10 14:19:04 +00:00
relyea%netscape.com
ce10045446 Bug 202593 NSS does not lock non-threadsafe modules correctly.
Consolidate one lock for non-thread safe modules (not one per slot).


git-svn-id: svn://10.0.0.236/trunk@141421 18797224-902f-48f8-a5cc-f745e15eee43
2003-04-19 00:03:13 +00:00
jpierre%netscape.com
4734fd96af Fix for 190424 - don't query CKA_NETSCAPE_EMAIL attribute . r=wtc
git-svn-id: svn://10.0.0.236/trunk@137118 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 03:02:55 +00:00
wtc%netscape.com
4b6932465e Bug 190396.
Don't fail the search if the token returned an error that indicates that it
legitimately couldn't find a CRL


git-svn-id: svn://10.0.0.236/trunk@136929 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-24 06:37:03 +00:00
nelsonb%netscape.com
d36cf9c052 Support SHA256, SHA384, and SHA512 hashes in NSS.
git-svn-id: svn://10.0.0.236/trunk@135163 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-12 06:05:45 +00:00
ian.mcgreer%sun.com
4a6e624c98 bug 172247, don't allow import of duplicate issuer/serial certs
git-svn-id: svn://10.0.0.236/trunk@134280 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-21 20:43:15 +00:00
relyea%netscape.com
f045aece62 Fix optimized build failures
git-svn-id: svn://10.0.0.236/trunk@131718 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-10 21:17:39 +00:00
relyea%netscape.com
faa9e5505e Bug 164501. Return a proper error code from PK11_FindCrlByName() so the CRL
code can decide if there is a hw or system failure preventing the reading of a
CRL or if the CRL is just not there.


git-svn-id: svn://10.0.0.236/trunk@131706 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-10 20:30:19 +00:00
ian.mcgreer%sun.com
599c379a2b bug 166793, uninitialized variables
r=wtc


git-svn-id: svn://10.0.0.236/trunk@130814 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-30 21:15:07 +00:00
ian.mcgreer%sun.com
fe942ec05f bug 166741, fixing bug in previous patches
r=wtc


git-svn-id: svn://10.0.0.236/trunk@129171 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-10 20:30:53 +00:00
wtc%netscape.com
abf9db079e Bug 167532: fixed a regression introduced by the previous checkin.
git-svn-id: svn://10.0.0.236/trunk@129148 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-10 05:10:53 +00:00
nicolson%netscape.com
4b34ca8158 Fix 164126: makefile build error.
Change the NSS module name from "security" to "nss".


git-svn-id: svn://10.0.0.236/trunk@128961 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-06 16:38:56 +00:00
wtc%netscape.com
16ce983004 Bugs 166734 and 166785: fixed compiler warnings reported by gcc on Linux.
The patch for this checkin is attached to bug 166785.


git-svn-id: svn://10.0.0.236/trunk@128926 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-06 00:27:52 +00:00
ian.mcgreer%sun.com
d3b22da555 bug 166741, unitialized variables
r=wtc


git-svn-id: svn://10.0.0.236/trunk@128919 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-05 22:28:30 +00:00
jpierre%netscape.com
10bc1a61c0 Implement the CRL cache . Bug 149854
git-svn-id: svn://10.0.0.236/trunk@128594 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-30 22:57:03 +00:00
relyea%netscape.com
2f2fb64005 close hole in trust lookups.
git-svn-id: svn://10.0.0.236/trunk@128309 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-27 23:38:29 +00:00
relyea%netscape.com
1364a51ba2 bug 161552: Make the recipient list traversal functions call the internal
nsstoken_FindCertByIssuerAndSN() function to gain the benefit of the fixed
Searching code.


git-svn-id: svn://10.0.0.236/trunk@127272 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-14 20:42:40 +00:00
relyea%netscape.com
4cfc101a4c Handle the switch from the static buffer to the realloc buffer.
git-svn-id: svn://10.0.0.236/trunk@126901 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-09 18:48:31 +00:00
relyea%netscape.com
895fa532b2 remove unreferenced Variable.
git-svn-id: svn://10.0.0.236/trunk@126900 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-09 18:05:24 +00:00
relyea%netscape.com
ccff9eabc4 treat lastTime of 0 as never having checked (not within the interval).
git-svn-id: svn://10.0.0.236/trunk@124830 18797224-902f-48f8-a5cc-f745e15eee43
2002-07-09 04:40:35 +00:00
relyea%netscape.com
ff3a4be02e More performance improvements in listing certs:
1) reduce more short term memory allocate/frees.
	2) remove sha1 hash calculations from critical paths.
	3) when listing user certs, skip decoding of non-user certs.


git-svn-id: svn://10.0.0.236/trunk@124499 18797224-902f-48f8-a5cc-f745e15eee43
2002-07-02 15:11:29 +00:00
relyea%netscape.com
db66460cc5 Fix solaris compiler error/warning. Fix prototype to return correct value (PRBool not PRStatus).
git-svn-id: svn://10.0.0.236/trunk@123969 18797224-902f-48f8-a5cc-f745e15eee43
2002-06-24 23:54:16 +00:00
relyea%netscape.com
b64d478e29 Don't decode or extract trust for certs if we are just getting the nicknames -- particularly for user certs.
git-svn-id: svn://10.0.0.236/trunk@123959 18797224-902f-48f8-a5cc-f745e15eee43
2002-06-24 22:36:59 +00:00
relyea%netscape.com
dbfdef4a37 Reset the cert cache and clobber cert handles on token insertion an removal
git-svn-id: svn://10.0.0.236/trunk@123244 18797224-902f-48f8-a5cc-f745e15eee43
2002-06-13 21:40:43 +00:00
relyea%netscape.com
ae88814fc8 Fix spelling error.
git-svn-id: svn://10.0.0.236/trunk@121952 18797224-902f-48f8-a5cc-f745e15eee43
2002-05-21 21:23:33 +00:00
jpierre%netscape.com
3d920a25ee Fix for bug 137645 - cached certificate does not get its nickname updated after P12 import of matching user certificate
git-svn-id: svn://10.0.0.236/trunk@121899 18797224-902f-48f8-a5cc-f745e15eee43
2002-05-20 23:21:39 +00:00
relyea%netscape.com
394940b694 Automatically create a NULL email profile for certs with email addresses which
are imported into the internal token.


git-svn-id: svn://10.0.0.236/trunk@120975 18797224-902f-48f8-a5cc-f745e15eee43
2002-05-07 20:38:59 +00:00
ian.mcgreer%sun.com
1e68160965 bug 142175, PK11_ListCerts regressions -- handle PKCS#11 incompatibilites with serial numbers, and fix trust collection.
git-svn-id: svn://10.0.0.236/trunk@120949 18797224-902f-48f8-a5cc-f745e15eee43
2002-05-07 14:58:12 +00:00
ian.mcgreer%sun.com
2fd68a1c79 When doing cert traversals, create the certs in full as they are found. This avoids thrashing the softoken's object cache when the database has a large number of certs.
git-svn-id: svn://10.0.0.236/trunk@119963 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-26 14:34:05 +00:00
ian.mcgreer%sun.com
befe2ca30f fix broken HPUX builds
git-svn-id: svn://10.0.0.236/trunk@119958 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-26 12:59:06 +00:00
ian.mcgreer%sun.com
240768dc76 if a cert already exists, use C_SetAttributeValue to change its mutable attributes during import (instead of trying to recreate it)
git-svn-id: svn://10.0.0.236/trunk@119856 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-25 20:49:49 +00:00
ian.mcgreer%sun.com
5e0a1eab3c reorganize token cache so that cache entries for imported objects are created from the token, not from the user-supplied template
git-svn-id: svn://10.0.0.236/trunk@119843 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-25 19:33:47 +00:00
relyea%netscape.com
81f4e81e01 Don't set the Token value before fetching CRL attributes. This code is fetching
attributes from a known CRL, not looking up new attributes (I'm pretty sure that
CVS apropos would show I checked in the previously wrong code).

bob


git-svn-id: svn://10.0.0.236/trunk@119832 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-25 18:33:45 +00:00
relyea%netscape.com
6a46ac6264 Don't crash if our cache entry is not found.
git-svn-id: svn://10.0.0.236/trunk@119800 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-25 00:45:42 +00:00
relyea%netscape.com
3d3e22dba5 Look up both DER encoded serial numbers (PKCS #11 spec), and decode serial
numbers (Old NSS) when looking up certs by issuer and SN.


git-svn-id: svn://10.0.0.236/trunk@119722 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-24 18:27:17 +00:00
ian.mcgreer%sun.com
57c0f959ce fix shutdown leaks
git-svn-id: svn://10.0.0.236/trunk@119622 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-23 17:22:13 +00:00
relyea%netscape.com
034136c5db Token and cert processing fixes:
1) use NewTempCert rather than DERDecode cert in all import cert cases.
When DERDecode cert is used, we may wind up with a cert that gets cleared
when we try to import it because it already in the cache. NewTempCert will
return the version that is in the cache.
   2) If we are returning the CAList, only return certs that are CA's
(not usercerts).
   3) Authenticate to all the tokens if necessary before we try to list
certs. (Stan code should eventually get automatic authentication calls in
the code itself).
   4) When looking up user certs, don't return those certs with the same
subject, but do not have any key material associated with them (that is
don't crash if we have old certs in our database without nicknames, but
match user certs on our smart cards).
   5) Save the nickname associated with our subject list in the temp
cache so we can correctly remove the entry even if the cert's nickname
changes (because of smart card insertions and removals, or because of
creation and deletions of our user cert).


git-svn-id: svn://10.0.0.236/trunk@119557 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-22 19:09:01 +00:00
ian.mcgreer%sun.com
eb543c80f2 file is no longer part of build (functionality in devtoken.c)
git-svn-id: svn://10.0.0.236/trunk@119554 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-22 18:28:30 +00:00