64 Commits

Author SHA1 Message Date
julien.pierre.boogz%sun.com
b073a231dd Fix for bug 423839 . Add multiple PKCS#11 token password command-line option to NSS tools. r=nelson
git-svn-id: svn://10.0.0.236/trunk@253478 18797224-902f-48f8-a5cc-f745e15eee43
2008-08-08 23:48:12 +00:00
wtc%google.com
6289ace530 Bug 403563: implement the TLS session ticket extension (rfc4507bis). The
patch is contributed by Nagendra Modadugu <ngm+mozilla@google.com>.  A
small portion (PKCS #11 code and tests) was written by Wan-Teh Chang
<wtc@google.com>.  r=nelson,wtc
Modified Files:
	cmd/lib/SSLerrs.h cmd/selfserv/selfserv.c
	cmd/strsclnt/strsclnt.c cmd/tstclnt/tstclnt.c
	lib/ssl/manifest.mn lib/ssl/ssl.h lib/ssl/ssl3con.c
	lib/ssl/ssl3ecc.c lib/ssl/ssl3prot.h lib/ssl/sslerr.h
	lib/ssl/sslimpl.h lib/ssl/sslnonce.c lib/ssl/sslsnce.c
	lib/ssl/sslsock.c lib/ssl/sslt.h tests/ssl/sslstress.txt
Added Files:
	lib/ssl/ssl3ext.c


git-svn-id: svn://10.0.0.236/trunk@247232 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-06 20:16:24 +00:00
slavomir.katuscak%sun.com
fe48dabffb Bug 266941: Strsclnt patch. r=nelson
git-svn-id: svn://10.0.0.236/trunk@246986 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-04 09:36:03 +00:00
wtc%google.com
e0be5e51e4 Bug 402308: fixed several compiler warnings in nss/cmd. r=nelson.
Modified Files:
	checkcert/checkcert.c crmftest/testcrmf.c pk12util/pk12util.c
	shlibsign/shlibsign.c strsclnt/strsclnt.c vfychain/vfychain.c


git-svn-id: svn://10.0.0.236/trunk@238540 18797224-902f-48f8-a5cc-f745e15eee43
2007-11-05 17:13:28 +00:00
wtc%google.com
5a80887f66 Bug 402114: fix the incorrect prototypes of SSL handshake callbacks.
r=nelson.
Modified Files:
	SSLsample/client.c SSLsample/server.c SSLsample/sslsample.c
	SSLsample/sslsample.h strsclnt/strsclnt.c vfyserv/vfyserv.c
	vfyserv/vfyserv.h vfyserv/vfyutil.c


git-svn-id: svn://10.0.0.236/trunk@238425 18797224-902f-48f8-a5cc-f745e15eee43
2007-11-01 22:05:23 +00:00
nelson%bolyard.com
1e055573e9 Bug 272279. Make strsclnt use IPv4 or IPv6, like tstclnt. r=julien
git-svn-id: svn://10.0.0.236/trunk@230734 18797224-902f-48f8-a5cc-f745e15eee43
2007-07-24 04:51:31 +00:00
nelson%bolyard.com
d7d73517fd Add missing TLS_RSA_WITH_NULL_SHA cipher suite. Bug 370957. r=slavo,julien
git-svn-id: svn://10.0.0.236/trunk@225056 18797224-902f-48f8-a5cc-f745e15eee43
2007-04-26 00:22:16 +00:00
alexei.volkov.bugs%sun.com
127dfd3f61 129218 - memory leaks in tstclnt. r=neil, sr=nelson
git-svn-id: svn://10.0.0.236/trunk@221824 18797224-902f-48f8-a5cc-f745e15eee43
2007-03-13 15:40:58 +00:00
nelson%bolyard.com
9da1a3170b Bug 367037 - don't call usage from any thread but the primordial thread.
Instead, return from the thread so the primordial thread will clean up.
This fixes many leaks.  r=neil.williams,alexei.volkov
For any errors involving bad cipher letters, print a meaningful error.


git-svn-id: svn://10.0.0.236/trunk@221661 18797224-902f-48f8-a5cc-f745e15eee43
2007-03-10 00:54:44 +00:00
alexei.volkov.bugs%sun.com
e026409e5b 129218 - memory leaks in tstclnt. r=neil
git-svn-id: svn://10.0.0.236/trunk@221341 18797224-902f-48f8-a5cc-f745e15eee43
2007-03-05 21:01:25 +00:00
alexei.volkov.bugs%sun.com
bae64fdd44 129218 - memory leaks in tstclnt. Fix mem leak in strsclnt.c/main/PL_CreateOptState. r=wtc
git-svn-id: svn://10.0.0.236/trunk@221329 18797224-902f-48f8-a5cc-f745e15eee43
2007-03-05 19:48:16 +00:00
alexei.volkov.bugs%sun.com
874858326e [Bug 220380] Add SSL client auth stress tests. Attachment #4. r=julien
git-svn-id: svn://10.0.0.236/trunk@198093 18797224-902f-48f8-a5cc-f745e15eee43
2006-05-20 18:32:08 +00:00
nelson%bolyard.com
fc11ad1fed Add and use new -2 option for strsclnt to disable SSL2 compatible client
hellos, so we can stress test TLS hello extensions.  Bug 333559.
r=julien.pierre,rrelyea


git-svn-id: svn://10.0.0.236/trunk@194355 18797224-902f-48f8-a5cc-f745e15eee43
2006-04-13 22:43:31 +00:00
nelson%bolyard.com
f17f17ddf5 Add new -i (ignore errors) command line option to strsclnt. Strsclnt now
stops soon after the first error unless the -i option is given.
Strsclnt and tstclnt now look for an environment variable named
NSS_DEBUG_TIMEOUT, and if present, its value is used as a timeout time
for all socket IO operations.  Bug 332348. r=julien.pierre.


git-svn-id: svn://10.0.0.236/trunk@193485 18797224-902f-48f8-a5cc-f745e15eee43
2006-04-04 07:31:46 +00:00
julien.pierre.bugs%sun.com
8cc0246541 Fix for 330068 . Be more verbose in strsclnt error cases
git-svn-id: svn://10.0.0.236/trunk@193225 18797224-902f-48f8-a5cc-f745e15eee43
2006-03-29 22:36:42 +00:00
julien.pierre.bugs%sun.com
1ce5b33bc5 Fix for bug 330068 . Increment counter variable atomically. Be more verbose. r=nelson
git-svn-id: svn://10.0.0.236/trunk@193177 18797224-902f-48f8-a5cc-f745e15eee43
2006-03-29 05:05:09 +00:00
julien.pierre.bugs%sun.com
f7dec9cf20 Fix for bug 317856 . uninitialized variable correction. r=wtchang
git-svn-id: svn://10.0.0.236/trunk@187923 18797224-902f-48f8-a5cc-f745e15eee43
2006-01-20 22:55:35 +00:00
julien.pierre.bugs%sun.com
f6b94accfe Fix for bug 317856 . compiler warnings in strsclnt
git-svn-id: svn://10.0.0.236/trunk@187862 18797224-902f-48f8-a5cc-f745e15eee43
2006-01-20 00:43:23 +00:00
wtchang%redhat.com
67e2b4967d Bugzilla Bug 236245: Updated NSS to "ECC Cipher Suites for TLS" draft 12
plus upcoming revisions.  The patch is contributed by Douglas Stebila
of Sun Labs <douglas@stebila.ca>. r=wtc.
Modified Files:
	cmd/selfserv/selfserv.c cmd/strsclnt/strsclnt.c
	cmd/tstclnt/tstclnt.c cmd/vfyserv/vfyserv.c lib/ssl/ssl3con.c
	lib/ssl/ssl3ecc.c lib/ssl/ssl3prot.h lib/ssl/sslenum.c
	lib/ssl/sslimpl.h lib/ssl/sslinfo.c lib/ssl/sslproto.h
	lib/ssl/sslsock.c tests/ssl/ecssl.sh tests/ssl/ecsslauth.txt
	tests/ssl/ecsslcov.txt tests/ssl/ecsslstress.txt
	tests/ssl/ssl.sh


git-svn-id: svn://10.0.0.236/trunk@186032 18797224-902f-48f8-a5cc-f745e15eee43
2005-12-14 01:49:40 +00:00
saul.edwards%sun.com
e805f1cb78 Bug 305147: add -B (bypass SSL) and -s (disable SSL locking) to server and client commands; add bypass testing to SSL test suite.
git-svn-id: svn://10.0.0.236/trunk@179894 18797224-902f-48f8-a5cc-f745e15eee43
2005-09-09 04:50:07 +00:00
nelsonb%netscape.com
00749853c3 Remove fortezza code from libSSL and from the SSL test programs.
Stop building fortezza's special software token, and fortezza specific
test programs.   Bug 239960. r=rrelyea.
Modified Files:
    cmd/manifest.mn cmd/platlibs.mk cmd/SSLsample/server.c
    cmd/SSLsample/sslsample.c cmd/modutil/modutil.c
    cmd/selfserv/selfserv.c cmd/sslstrength/sslstrength.c
    cmd/strsclnt/strsclnt.c cmd/tstclnt/tstclnt.c
    cmd/vfyserv/vfyserv.c cmd/vfyserv/vfyutil.c lib/manifest.mn
    lib/ssl/nsskea.c lib/ssl/preenc.h lib/ssl/prelib.c
    lib/ssl/ssl.h lib/ssl/ssl3con.c lib/ssl/ssl3prot.h
    lib/ssl/sslauth.c lib/ssl/sslcon.c lib/ssl/sslenum.c
    lib/ssl/sslimpl.h lib/ssl/sslinfo.c lib/ssl/sslproto.h
    lib/ssl/sslsecur.c lib/ssl/sslsnce.c lib/ssl/sslsock.c
    lib/ssl/sslt.h


git-svn-id: svn://10.0.0.236/trunk@177810 18797224-902f-48f8-a5cc-f745e15eee43
2005-08-16 03:42:26 +00:00
julien.pierre.bugs%sun.com
1f88493901 Fix for bug 292151 . Prevent strsclnt from starting threads for each connection. Allow specifying a ratio of full handshakes . r=nelson
git-svn-id: svn://10.0.0.236/trunk@176556 18797224-902f-48f8-a5cc-f745e15eee43
2005-07-25 20:39:14 +00:00
julien.pierre.bugs%sun.com
dc99575fbb Fix for 293091 - add double -o option to skip cert verification completely. r=nelson
git-svn-id: svn://10.0.0.236/trunk@173166 18797224-902f-48f8-a5cc-f745e15eee43
2005-05-07 04:13:48 +00:00
nelsonb%netscape.com
663db84c36 Back out the preceeding fortezza removal patch, which was accidentally
applied to the trunk, not to the intended branch.


git-svn-id: svn://10.0.0.236/trunk@171823 18797224-902f-48f8-a5cc-f745e15eee43
2005-04-06 21:35:45 +00:00
nelsonb%netscape.com
b62572db42 Remove fortezza support from libSSL and related commands. Bug 239960.
ON PERFORMANCE_HACKS_BRANCH.  r=rrelyea.


git-svn-id: svn://10.0.0.236/trunk@171820 18797224-902f-48f8-a5cc-f745e15eee43
2005-04-06 19:43:19 +00:00
julien.pierre.bugs%sun.com
2f90c1eae8 initialize variable
git-svn-id: svn://10.0.0.236/trunk@163343 18797224-902f-48f8-a5cc-f745e15eee43
2004-10-07 03:57:19 +00:00
julien.pierre.bugs%sun.com
b9e174baec Remove unused variables
git-svn-id: svn://10.0.0.236/trunk@163342 18797224-902f-48f8-a5cc-f745e15eee43
2004-10-07 03:56:37 +00:00
gerv%gerv.net
43cb9e1492 Bug 236613: change to MPL/LGPL/GPL tri-license.
git-svn-id: svn://10.0.0.236/trunk@155484 18797224-902f-48f8-a5cc-f745e15eee43
2004-04-25 15:03:26 +00:00
wchang0222%aol.com
7f3eb1098d Bugzilla bug 225373: the return value of CERT_NameToAscii must be freed
with PORT_Free.
Modified Files:
	cmd/lib/secutil.c cmd/selfserv/selfserv.c
	cmd/signver/pk7print.c cmd/strsclnt/strsclnt.c
	cmd/tstclnt/tstclnt.c lib/certdb/cert.h


git-svn-id: svn://10.0.0.236/trunk@149241 18797224-902f-48f8-a5cc-f745e15eee43
2003-11-13 16:10:45 +00:00
kirk.erickson%sun.com
9f693ee885 Resolves bug 206971 - selfserv should OptimizeSpeed (use NSS_Initialize).
Both selfserv and strsclnt no longer OptimizeSpace.  Moved SECMOD_DB
defines from nssinit.c to nss.h, make it availble for public use with
NSS_Initialize().


git-svn-id: svn://10.0.0.236/trunk@143104 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-30 17:25:13 +00:00
nelsonb%netscape.com
234e484f1d Add -3 and -T options, with same meaning as in tstclnt and selfserv,
disabling SSL3 and TLS respectively.  With this change, the QA stress
tests that say they're testing SSL3 or TLS can finally test what they
claim they are testing.


git-svn-id: svn://10.0.0.236/trunk@143084 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-30 05:35:52 +00:00
jpierre%netscape.com
ab1f1ddd86 Fix for bug 204015 - make strsclnt reuse token after it is unplugged . r=nelsonb
git-svn-id: svn://10.0.0.236/trunk@142502 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-15 17:09:19 +00:00
nelsonb%netscape.com
faa5b981f5 Changes to enable ECC over characteristic 2^m fields.
Contribution from Vipul Gupta <Vipul.Gupta@Sun.COM>
Modified Files:
 nss/cmd/strsclnt/strsclnt.c nss/lib/cryptohi/seckey.c
 nss/lib/freebl/blapit.h nss/lib/freebl/ec.c
 nss/lib/freebl/manifest.mn nss/lib/freebl/mpi/Makefile
 nss/lib/softoken/ecdecode.c nss/lib/softoken/pkcs11.c
 nss/lib/ssl/ssl3con.c nss/lib/util/secoid.c
 nss/lib/util/secoidt.h


git-svn-id: svn://10.0.0.236/trunk@140430 18797224-902f-48f8-a5cc-f745e15eee43
2003-03-29 00:18:30 +00:00
wtc%netscape.com
23826d1288 Bug 145029: fixed compiler warnings (mostly "xxx might be used
uninitialized").


git-svn-id: svn://10.0.0.236/trunk@136476 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-17 02:49:11 +00:00
wtc%netscape.com
2bf0c058f2 Need to call SSL_ClearSessionCache before calling NSS_Shutdown.
git-svn-id: svn://10.0.0.236/trunk@136013 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-08 21:40:52 +00:00
bishakhabanerjee%netscape.com
43ef69edd2 checking return value of NSS_Shutdown. Bug 171263
git-svn-id: svn://10.0.0.236/trunk@135950 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-07 22:31:36 +00:00
nicolson%netscape.com
4b34ca8158 Fix 164126: makefile build error.
Change the NSS module name from "security" to "nss".


git-svn-id: svn://10.0.0.236/trunk@128961 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-06 16:38:56 +00:00
ian.mcgreer%sun.com
7f7995e833 fix a cert reference leak in strsclnt
git-svn-id: svn://10.0.0.236/trunk@118983 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-15 14:24:15 +00:00
nelsonb%netscape.com
b82c4acc00 Add cross-platform (WinCE) support.
git-svn-id: svn://10.0.0.236/trunk@118055 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-04 00:00:27 +00:00
ian.mcgreer%sun.com
6c190a7dc1 clean up certs & keys for purify
git-svn-id: svn://10.0.0.236/trunk@114606 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-15 20:50:47 +00:00
nelsonb%netscape.com
f14f3467c1 Add code to test new SSL_LocalCertificate() function on first connection,
or on every connection if -vv option is used.  Bug 78959.
Also, the nickname "none" can now be used to prevent performing client
authentication without having to use an invalid password.


git-svn-id: svn://10.0.0.236/trunk@107730 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-09 05:43:06 +00:00
nelsonb%netscape.com
b91f3120f1 Reimplement SSL_GetChannelInfo. Add new function SSL_GetCipherSuiteInfo().
Also, implement new ciphersuite preference order.  Bug 78959.


git-svn-id: svn://10.0.0.236/trunk@107060 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-02 04:24:28 +00:00
nelsonb%netscape.com
473503a731 Correct the test for length of data in SSL channel info struct.
git-svn-id: svn://10.0.0.236/trunk@103807 18797224-902f-48f8-a5cc-f745e15eee43
2001-09-26 04:22:55 +00:00
nelsonb%netscape.com
c4b44f9b2f Add support for new TLS AES ciphersuites. Bug 87021.
git-svn-id: svn://10.0.0.236/trunk@103410 18797224-902f-48f8-a5cc-f745e15eee43
2001-09-21 03:09:32 +00:00
nelsonb%netscape.com
65c1d8ebc2 Use new function SSL_GetChannelInfo(). Bugzilla bug 78959.
git-svn-id: svn://10.0.0.236/trunk@103058 18797224-902f-48f8-a5cc-f745e15eee43
2001-09-18 02:02:05 +00:00
larryh%netscape.com
d6f2870deb Bugzilla: 81706. strsclnt exit code
git-svn-id: svn://10.0.0.236/trunk@95875 18797224-902f-48f8-a5cc-f745e15eee43
2001-05-24 16:44:25 +00:00
kirke%netscape.com
430f0f8161 64970 stress tests don't fail when selfserver is gone
Added -q argument (quit after about 60 seconds waiting for selfserv).


git-svn-id: svn://10.0.0.236/trunk@93032 18797224-902f-48f8-a5cc-f745e15eee43
2001-04-24 23:02:34 +00:00
nelsonb%netscape.com
58e68a8e98 Fix leak of cert reference in cert authentication callback functions.
git-svn-id: svn://10.0.0.236/trunk@90792 18797224-902f-48f8-a5cc-f745e15eee43
2001-03-30 00:40:24 +00:00
nelsonb%netscape.com
e00b59a1ac Make SSL API consistent in using SECStatus as return value for functions
that return only values in that enumeration.  Bug 68097. R&A = relyea.
Modified Files:
 	lib/ssl/ssl.h lib/ssl/sslauth.c lib/ssl/sslsecur.c
 	lib/ssl/sslsnce.c lib/ssl/sslsock.c cmd/selfserv/selfserv.c
 	cmd/strsclnt/strsclnt.c


git-svn-id: svn://10.0.0.236/trunk@86642 18797224-902f-48f8-a5cc-f745e15eee43
2001-02-09 00:32:14 +00:00
nelsonb%netscape.com
db44eb8ae5 Changes suggested by Wan-Teh.
git-svn-id: svn://10.0.0.236/trunk@86591 18797224-902f-48f8-a5cc-f745e15eee43
2001-02-08 01:32:32 +00:00