relyea%netscape.com
8b5c7835b1
Detect Active Card presents and disable PROTECTED_PIN_PATH login when found.
...
git-svn-id: svn://10.0.0.236/trunk@119871 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-25 21:24:47 +00:00
wtc%netscape.com
430098b6dd
Deleted code that was made obsolete by the previous revision.
...
git-svn-id: svn://10.0.0.236/trunk@119868 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-25 21:10:09 +00:00
relyea%netscape.com
bc88a1e278
Don't let activeCards set the Protect_Auth bit because they weren't intending to
...
to begin with.
git-svn-id: svn://10.0.0.236/trunk@119858 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-25 20:57:06 +00:00
ian.mcgreer%sun.com
240768dc76
if a cert already exists, use C_SetAttributeValue to change its mutable attributes during import (instead of trying to recreate it)
...
git-svn-id: svn://10.0.0.236/trunk@119856 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-25 20:49:49 +00:00
ian.mcgreer%sun.com
d8db4158aa
bug 138626, remove deleted cert from cache even if references still exist
...
git-svn-id: svn://10.0.0.236/trunk@119844 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-25 19:37:30 +00:00
ian.mcgreer%sun.com
5e0a1eab3c
reorganize token cache so that cache entries for imported objects are created from the token, not from the user-supplied template
...
git-svn-id: svn://10.0.0.236/trunk@119843 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-25 19:33:47 +00:00
relyea%netscape.com
176c5f891d
NSS 3.4 has branch, that makes the tip at least NSS 3.5
...
git-svn-id: svn://10.0.0.236/trunk@119835 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-25 18:51:45 +00:00
relyea%netscape.com
81f4e81e01
Don't set the Token value before fetching CRL attributes. This code is fetching
...
attributes from a known CRL, not looking up new attributes (I'm pretty sure that
CVS apropos would show I checked in the previously wrong code).
bob
git-svn-id: svn://10.0.0.236/trunk@119832 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-25 18:33:45 +00:00
seawood%netscape.com
7e4c3987ab
Add 'make install' target to build. It's "MRE-friendly". (See http://www.mozilla.org/projects/embedding/MRE.html for details.)
...
Changes:
* Added EXTRA_COMPONENTS variable to build. Use it to automagically install files into the components dir.
* Added SYSINSTALL variable. Use it install files onto the system.
* Move mozilla-config generation from configure to makefiles
* mozilla-config will now generate paths based upon the MRE-based directory layout.
* Generate mozilla script from template
The installation heirarchy currently looks like:
$prefix -> /bin/mozilla
/bin/mozilla-config
/include/mozilla-ver/*
/lib/mozilla-ver (mozappdir)
/components
/res
/defaults
/chrome
There is preliminary build support for MRE dirs as well though the component manager hasn't had MRE support added yet.
$prefix -> /lib/mre/mre-ver (mredir)
/components
git-svn-id: svn://10.0.0.236/trunk@119809 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-25 02:52:44 +00:00
sonja.mirtitsch%sun.com
c27013e6aa
trying a version that can test tip as default for tinderbox and 341
...
as default for nightly QA
git-svn-id: svn://10.0.0.236/trunk@119806 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-25 01:04:10 +00:00
relyea%netscape.com
6a46ac6264
Don't crash if our cache entry is not found.
...
git-svn-id: svn://10.0.0.236/trunk@119800 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-25 00:45:42 +00:00
relyea%netscape.com
db7beae40a
Turn off caching for non-hardware tokens for now until we fix some of our
...
tokens which can be updated out-of-band to use the proper 'removable token'
semantics.
git-svn-id: svn://10.0.0.236/trunk@119797 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-25 00:25:58 +00:00
relyea%netscape.com
9cc9d97ae5
Don't crash if we don't find the profile (and thus don't have a slot to free).
...
git-svn-id: svn://10.0.0.236/trunk@119767 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-24 22:23:37 +00:00
ian.mcgreer%sun.com
ac0f699149
This is a real corner case. If a search is done by issuer/serial, and the returned cert was in the cache, need to see if the cert's slot was removed. If so, destroy the cert and retry the search on the present tokens.
...
git-svn-id: svn://10.0.0.236/trunk@119727 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-24 19:39:41 +00:00
relyea%netscape.com
748ddfbe78
Don't crash when getting a single user cert, but old certs are in the database
...
with the same subject, but no keys.
git-svn-id: svn://10.0.0.236/trunk@119724 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-24 18:29:04 +00:00
relyea%netscape.com
3d3e22dba5
Look up both DER encoded serial numbers (PKCS #11 spec), and decode serial
...
numbers (Old NSS) when looking up certs by issuer and SN.
git-svn-id: svn://10.0.0.236/trunk@119722 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-24 18:27:17 +00:00
relyea%netscape.com
88854adbcd
Authenticate to tokens before looking up user certs.
...
git-svn-id: svn://10.0.0.236/trunk@119720 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-24 18:25:48 +00:00
kaie%netscape.com
e526af6b60
b=129067 Deleted certs still appear in Cert Manager, uses slow workaround, which should get removed once bug 138626 is fixed.
...
r=javi sr=alecf
git-svn-id: svn://10.0.0.236/trunk@119664 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-24 00:51:33 +00:00
kaie%netscape.com
00fd78d437
b=134992 Fix crash when displaying some S/Mime messages.
...
r=javi sr=alecf
git-svn-id: svn://10.0.0.236/trunk@119662 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-24 00:40:49 +00:00
kaie%netscape.com
2d7ad41f06
b=139349 Need to use dont_AddRef with GetCertAtIndex
...
r=bryner sr=alecf
git-svn-id: svn://10.0.0.236/trunk@119661 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-24 00:35:05 +00:00
kaie%netscape.com
f46cc896e6
b=139325 Leaking CERTCertificate references from nsNSSCertificate::GetChain
...
r=bryner/javi sr=alecf
git-svn-id: svn://10.0.0.236/trunk@119652 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-24 00:15:12 +00:00
thayes%netscape.com
684371ee8f
Reserved Netscape extension (NETSCAPE 1 18)
...
git-svn-id: svn://10.0.0.236/trunk@119646 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-23 23:48:20 +00:00
ian.mcgreer%sun.com
57c0f959ce
fix shutdown leaks
...
git-svn-id: svn://10.0.0.236/trunk@119622 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-23 17:22:13 +00:00
kaie%netscape.com
58208ef2e4
b=125607 Temporary workaround for better displaying signed S/Mime messages w/ attachments from IMAP servers.
...
r=ducarroz sr=bienvenu
git-svn-id: svn://10.0.0.236/trunk@119568 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-22 23:02:29 +00:00
ian.mcgreer%sun.com
5ec26e1000
avoid use of iterator
...
git-svn-id: svn://10.0.0.236/trunk@119560 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-22 20:44:07 +00:00
ian.mcgreer%sun.com
d2b3f9f435
NewTemp has to be matched with AddTempCertToPerm
...
git-svn-id: svn://10.0.0.236/trunk@119558 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-22 20:27:52 +00:00
relyea%netscape.com
034136c5db
Token and cert processing fixes:
...
1) use NewTempCert rather than DERDecode cert in all import cert cases.
When DERDecode cert is used, we may wind up with a cert that gets cleared
when we try to import it because it already in the cache. NewTempCert will
return the version that is in the cache.
2) If we are returning the CAList, only return certs that are CA's
(not usercerts).
3) Authenticate to all the tokens if necessary before we try to list
certs. (Stan code should eventually get automatic authentication calls in
the code itself).
4) When looking up user certs, don't return those certs with the same
subject, but do not have any key material associated with them (that is
don't crash if we have old certs in our database without nicknames, but
match user certs on our smart cards).
5) Save the nickname associated with our subject list in the temp
cache so we can correctly remove the entry even if the cert's nickname
changes (because of smart card insertions and removals, or because of
creation and deletions of our user cert).
git-svn-id: svn://10.0.0.236/trunk@119557 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-22 19:09:01 +00:00
ian.mcgreer%sun.com
eb543c80f2
file is no longer part of build (functionality in devtoken.c)
...
git-svn-id: svn://10.0.0.236/trunk@119554 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-22 18:28:30 +00:00
ian.mcgreer%sun.com
88ac348c0d
overwrite old entry during import, so that changing trust works correctly
...
git-svn-id: svn://10.0.0.236/trunk@119547 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-22 15:21:06 +00:00
ian.mcgreer%sun.com
9d553c9294
fix bugs in cert import with smart card cache
...
git-svn-id: svn://10.0.0.236/trunk@119546 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-22 14:14:44 +00:00
ian.mcgreer%sun.com
bfdfb2a5be
re-sync the trust domain cache with token insertion/removal
...
git-svn-id: svn://10.0.0.236/trunk@119434 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-19 23:06:44 +00:00
nicolson%netscape.com
e470ff6268
JSS 3.2 features check-in.
...
git-svn-id: svn://10.0.0.236/trunk@119432 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-19 22:42:05 +00:00
ian.mcgreer%sun.com
2f30d58738
* make sure the token cache returns failure in overflow case
...
* change internal module trust order again, builtins uses 100, and internal module must come first
git-svn-id: svn://10.0.0.236/trunk@119415 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-19 19:30:12 +00:00
ian.mcgreer%sun.com
aabd47f4fc
try again, the default is 50 so the internal module must be higher
...
git-svn-id: svn://10.0.0.236/trunk@119414 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-19 19:19:33 +00:00
ian.mcgreer%sun.com
b9e6962325
make sure the internal module defaults to trust order > 50
...
git-svn-id: svn://10.0.0.236/trunk@119413 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-19 19:01:45 +00:00
ian.mcgreer%sun.com
782014ef9d
improve synchronization between the token state and token cache operations
...
git-svn-id: svn://10.0.0.236/trunk@119408 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-19 17:32:22 +00:00
ian.mcgreer%sun.com
88d5adeca3
Only fall back to email search if the "nickname" has an @ character. This is because email searches will not go through the cache, so should be avoided if possible.
...
git-svn-id: svn://10.0.0.236/trunk@119406 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-19 16:22:31 +00:00
ian.mcgreer%sun.com
bafa34ec88
Fixes for smart card cache. Don't do cache searches by email address, since GetAttributeValue does not set that field. Handle removal correctly for item at tail of list. Don't search token after a successful cache search that returned zero hits.
...
git-svn-id: svn://10.0.0.236/trunk@119405 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-19 16:14:13 +00:00
kaie%netscape.com
816a215e41
b=137154 PSM needs to call SSL_ClearSessionCache before switching profiles
...
r=javi sr=alecf
git-svn-id: svn://10.0.0.236/trunk@119324 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-18 22:25:26 +00:00
jpierre%netscape.com
862378ca25
Fix for 138084 - free slot list if NSC_Initialize fails
...
git-svn-id: svn://10.0.0.236/trunk@119297 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-18 20:54:22 +00:00
ian.mcgreer%sun.com
88c21a0f77
catch non-present tokens before searching them
...
git-svn-id: svn://10.0.0.236/trunk@119290 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-18 19:37:12 +00:00
ian.mcgreer%sun.com
ce6615c3cf
two fixes for certs with multiple instances
...
git-svn-id: svn://10.0.0.236/trunk@119286 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-18 19:26:17 +00:00
relyea%netscape.com
58bccc96dd
Don't crash if we try to get the name of a non-existant token.
...
git-svn-id: svn://10.0.0.236/trunk@119278 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-18 17:54:30 +00:00
relyea%netscape.com
0e6eb41035
Remember the nickname in the cache entry so that we can always free it when the cert goes away, even if the nickname has changes.
...
Also, initialize subjectList to NULL at the beginning, so we don't try to add nickname when we aren't supposed to.
git-svn-id: svn://10.0.0.236/trunk@119276 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-18 17:52:55 +00:00
relyea%netscape.com
71202164a8
We need to make sure we always return a trust object, even if that object says
...
there is no trust.
git-svn-id: svn://10.0.0.236/trunk@119275 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-18 17:50:40 +00:00
ian.mcgreer%sun.com
2f83527b52
landing new smart card cache, bug 135429
...
git-svn-id: svn://10.0.0.236/trunk@119274 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-18 17:30:05 +00:00
nicolson%netscape.com
e9a1d34759
update NSS version.
...
git-svn-id: svn://10.0.0.236/trunk@119269 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-18 14:33:16 +00:00
wtc%netscape.com
e520ea685d
Bugzilla bug 126087: removed symKey->refLock because we are using atomic
...
routines on symKey->refCount now. Declare symKey->refCount as PRInt32 to
match the prototype of PR_AtomicIncrement/Decrement.
Modified files: pk11skey.c secmodti.h
git-svn-id: svn://10.0.0.236/trunk@119189 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-17 01:03:23 +00:00
jgmyers%netscape.com
ecd4736934
Remove unneeded ForceHandshake code which broke IMAP/SSL over SOCKS: bug 133434 r=kaie@netscape.com sr=brendan@mozilla.org a=asa
...
git-svn-id: svn://10.0.0.236/trunk@119169 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-16 22:49:33 +00:00
wtc%netscape.com
13bd4b2242
Bugzilla bug 133584: PK11_SaveSMimeProfile also needs to free free_slot if
...
it returns on error.
git-svn-id: svn://10.0.0.236/trunk@119165 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-16 22:40:07 +00:00