64 Commits

Author SHA1 Message Date
glen.beasley%sun.com
cabda7ca2e 402058 backout of patch
git-svn-id: svn://10.0.0.236/trunk@256891 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-11 02:27:44 +00:00
glen.beasley%sun.com
de9905dc8c 402058 fix for new pkix ssl tests r=self tinderbox broke
git-svn-id: svn://10.0.0.236/trunk@256880 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-10 10:06:18 +00:00
glen.beasley%sun.com
d0dc7e6bb1 402058 tstclnt return 254 for expected error for all.sh r=nelson
git-svn-id: svn://10.0.0.236/trunk@256877 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-09 23:52:08 +00:00
julien.pierre.boogz%sun.com
93c29f4d97 Fix for bug 427493. Log tstclnt return code. r=nelson
git-svn-id: svn://10.0.0.236/trunk@254589 18797224-902f-48f8-a5cc-f745e15eee43
2008-10-10 20:47:52 +00:00
julien.pierre.boogz%sun.com
e0fed67af5 Fix for bug 423839. Restore tstclnt.c that had been backed out. r=nelson
git-svn-id: svn://10.0.0.236/trunk@253784 18797224-902f-48f8-a5cc-f745e15eee43
2008-08-22 19:47:20 +00:00
nelson%bolyard.com
5bfb89a869 Backout last checkin to tstclnt.c, which appears to have broken some
tinderboxes.  /Sheriff Nelson


git-svn-id: svn://10.0.0.236/trunk@253519 18797224-902f-48f8-a5cc-f745e15eee43
2008-08-11 19:29:44 +00:00
julien.pierre.boogz%sun.com
b073a231dd Fix for bug 423839 . Add multiple PKCS#11 token password command-line option to NSS tools. r=nelson
git-svn-id: svn://10.0.0.236/trunk@253478 18797224-902f-48f8-a5cc-f745e15eee43
2008-08-08 23:48:12 +00:00
wtc%google.com
6289ace530 Bug 403563: implement the TLS session ticket extension (rfc4507bis). The
patch is contributed by Nagendra Modadugu <ngm+mozilla@google.com>.  A
small portion (PKCS #11 code and tests) was written by Wan-Teh Chang
<wtc@google.com>.  r=nelson,wtc
Modified Files:
	cmd/lib/SSLerrs.h cmd/selfserv/selfserv.c
	cmd/strsclnt/strsclnt.c cmd/tstclnt/tstclnt.c
	lib/ssl/manifest.mn lib/ssl/ssl.h lib/ssl/ssl3con.c
	lib/ssl/ssl3ecc.c lib/ssl/ssl3prot.h lib/ssl/sslerr.h
	lib/ssl/sslimpl.h lib/ssl/sslnonce.c lib/ssl/sslsnce.c
	lib/ssl/sslsock.c lib/ssl/sslt.h tests/ssl/sslstress.txt
Added Files:
	lib/ssl/ssl3ext.c


git-svn-id: svn://10.0.0.236/trunk@247232 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-06 20:16:24 +00:00
nelson%bolyard.com
095abb8742 Bug 417637: tstclnt crashes if -p option is not specified. r=julien.pierre
git-svn-id: svn://10.0.0.236/trunk@246339 18797224-902f-48f8-a5cc-f745e15eee43
2008-02-23 02:52:19 +00:00
julien.pierre.bugs%sun.com
e788d02661 Fix for bug 228190 . Remove unnecessary NSS_ENABLE_ECC declarations . r=nelson
git-svn-id: svn://10.0.0.236/trunk@229789 18797224-902f-48f8-a5cc-f745e15eee43
2007-07-12 04:39:19 +00:00
alexei.volkov.bugs%sun.com
efdf2963dc 129218 - memory leaks in tstclnt. r=nelson
git-svn-id: svn://10.0.0.236/trunk@221649 18797224-902f-48f8-a5cc-f745e15eee43
2007-03-09 23:23:55 +00:00
nelson%bolyard.com
6785167326 Convert from calling PR_GetIPNodeByName to calling PR_GetAddrInfoByName.
Bug 324305. Patch by wtchang.  r=nelson


git-svn-id: svn://10.0.0.236/trunk@218187 18797224-902f-48f8-a5cc-f745e15eee43
2007-01-11 04:29:11 +00:00
alexei.volkov.bugs%sun.com
f13fa8117a 265784: SSL interoperability regression testing. r=nelson
To turn on the feature, set and export env variable
IOPR_HOSTADDR_LIST to space separated interoperability server fqdn list


git-svn-id: svn://10.0.0.236/trunk@214031 18797224-902f-48f8-a5cc-f745e15eee43
2006-10-23 23:46:47 +00:00
julien.pierre.bugs%sun.com
36605e59fd Partial fix for bug 332348 . Add PR_POLL_EXCEPT to a PR_Poll . Allows tstclnt to wake up if server goes away. r=wtchang
git-svn-id: svn://10.0.0.236/trunk@193648 18797224-902f-48f8-a5cc-f745e15eee43
2006-04-06 01:49:03 +00:00
nelson%bolyard.com
f17f17ddf5 Add new -i (ignore errors) command line option to strsclnt. Strsclnt now
stops soon after the first error unless the -i option is given.
Strsclnt and tstclnt now look for an environment variable named
NSS_DEBUG_TIMEOUT, and if present, its value is used as a timeout time
for all socket IO operations.  Bug 332348. r=julien.pierre.


git-svn-id: svn://10.0.0.236/trunk@193485 18797224-902f-48f8-a5cc-f745e15eee43
2006-04-04 07:31:46 +00:00
julien.pierre.bugs%sun.com
59eb9be554 Fix for bug 319495 . Clean up Makefiles for command-line tools. r=nelson
git-svn-id: svn://10.0.0.236/trunk@187780 18797224-902f-48f8-a5cc-f745e15eee43
2006-01-18 22:44:39 +00:00
wtchang%redhat.com
67e2b4967d Bugzilla Bug 236245: Updated NSS to "ECC Cipher Suites for TLS" draft 12
plus upcoming revisions.  The patch is contributed by Douglas Stebila
of Sun Labs <douglas@stebila.ca>. r=wtc.
Modified Files:
	cmd/selfserv/selfserv.c cmd/strsclnt/strsclnt.c
	cmd/tstclnt/tstclnt.c cmd/vfyserv/vfyserv.c lib/ssl/ssl3con.c
	lib/ssl/ssl3ecc.c lib/ssl/ssl3prot.h lib/ssl/sslenum.c
	lib/ssl/sslimpl.h lib/ssl/sslinfo.c lib/ssl/sslproto.h
	lib/ssl/sslsock.c tests/ssl/ecssl.sh tests/ssl/ecsslauth.txt
	tests/ssl/ecsslcov.txt tests/ssl/ecsslstress.txt
	tests/ssl/ssl.sh


git-svn-id: svn://10.0.0.236/trunk@186032 18797224-902f-48f8-a5cc-f745e15eee43
2005-12-14 01:49:40 +00:00
julien.pierre.bugs%sun.com
cd9e48019f Remove dead files. r=wtchang
git-svn-id: svn://10.0.0.236/trunk@184121 18797224-902f-48f8-a5cc-f745e15eee43
2005-11-04 00:48:41 +00:00
saul.edwards%sun.com
e805f1cb78 Bug 305147: add -B (bypass SSL) and -s (disable SSL locking) to server and client commands; add bypass testing to SSL test suite.
git-svn-id: svn://10.0.0.236/trunk@179894 18797224-902f-48f8-a5cc-f745e15eee43
2005-09-09 04:50:07 +00:00
nelsonb%netscape.com
00749853c3 Remove fortezza code from libSSL and from the SSL test programs.
Stop building fortezza's special software token, and fortezza specific
test programs.   Bug 239960. r=rrelyea.
Modified Files:
    cmd/manifest.mn cmd/platlibs.mk cmd/SSLsample/server.c
    cmd/SSLsample/sslsample.c cmd/modutil/modutil.c
    cmd/selfserv/selfserv.c cmd/sslstrength/sslstrength.c
    cmd/strsclnt/strsclnt.c cmd/tstclnt/tstclnt.c
    cmd/vfyserv/vfyserv.c cmd/vfyserv/vfyutil.c lib/manifest.mn
    lib/ssl/nsskea.c lib/ssl/preenc.h lib/ssl/prelib.c
    lib/ssl/ssl.h lib/ssl/ssl3con.c lib/ssl/ssl3prot.h
    lib/ssl/sslauth.c lib/ssl/sslcon.c lib/ssl/sslenum.c
    lib/ssl/sslimpl.h lib/ssl/sslinfo.c lib/ssl/sslproto.h
    lib/ssl/sslsecur.c lib/ssl/sslsnce.c lib/ssl/sslsock.c
    lib/ssl/sslt.h


git-svn-id: svn://10.0.0.236/trunk@177810 18797224-902f-48f8-a5cc-f745e15eee43
2005-08-16 03:42:26 +00:00
julien.pierre.bugs%sun.com
a537a54ba3 Fix for 288892 - fix for tstlcnt to help QA run on OS/2 . r=nelson, wtchang
git-svn-id: svn://10.0.0.236/trunk@171905 18797224-902f-48f8-a5cc-f745e15eee43
2005-04-09 01:46:38 +00:00
nelsonb%netscape.com
663db84c36 Back out the preceeding fortezza removal patch, which was accidentally
applied to the trunk, not to the intended branch.


git-svn-id: svn://10.0.0.236/trunk@171823 18797224-902f-48f8-a5cc-f745e15eee43
2005-04-06 21:35:45 +00:00
nelsonb%netscape.com
b62572db42 Remove fortezza support from libSSL and related commands. Bug 239960.
ON PERFORMANCE_HACKS_BRANCH.  r=rrelyea.


git-svn-id: svn://10.0.0.236/trunk@171820 18797224-902f-48f8-a5cc-f745e15eee43
2005-04-06 19:43:19 +00:00
gerv%gerv.net
43cb9e1492 Bug 236613: change to MPL/LGPL/GPL tri-license.
git-svn-id: svn://10.0.0.236/trunk@155484 18797224-902f-48f8-a5cc-f745e15eee43
2004-04-25 15:03:26 +00:00
wchang0222%aol.com
7f3eb1098d Bugzilla bug 225373: the return value of CERT_NameToAscii must be freed
with PORT_Free.
Modified Files:
	cmd/lib/secutil.c cmd/selfserv/selfserv.c
	cmd/signver/pk7print.c cmd/strsclnt/strsclnt.c
	cmd/tstclnt/tstclnt.c lib/certdb/cert.h


git-svn-id: svn://10.0.0.236/trunk@149241 18797224-902f-48f8-a5cc-f745e15eee43
2003-11-13 16:10:45 +00:00
ian.mcgreer%sun.com
decc84df49 ECC code landing.
Contributed by Sheuling Chang, Stephen Fung, Vipul Gupta, Nils Gura,
and Douglas Stebila of Sun Labs


git-svn-id: svn://10.0.0.236/trunk@148060 18797224-902f-48f8-a5cc-f745e15eee43
2003-10-17 13:45:42 +00:00
nelsonb%netscape.com
a85bd7aafb Make tstclnt work with IPv6 addresses. Bug 161610.
git-svn-id: svn://10.0.0.236/trunk@147646 18797224-902f-48f8-a5cc-f745e15eee43
2003-10-06 23:50:11 +00:00
nelsonb%netscape.com
4bf96c876a Further enhance the verbose debugging command line option in tstclnt
for the case where client auth is requested by the server.  It will
now report the name of the cert sent to the server, or "send no cert".


git-svn-id: svn://10.0.0.236/trunk@146660 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-09 20:22:54 +00:00
nelsonb%netscape.com
dab1e74bb9 Back out rev 1.27, which turned verbose mode on by default for debugging
QA test script failures that only occurred on tinderbox machines.
bug 207313 is now fixed.


git-svn-id: svn://10.0.0.236/trunk@143202 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-02 20:39:48 +00:00
nelsonb%netscape.com
947d897f48 This patch does two things, one large and one small. Bug 207313.
1, It uses two new symbols SSOCK_FD and STDIN_FD instead of 0 and 1 to
reference members of the poll set array.  I just could never remember whether
pollset[0] was the socket or was stdin.  Now I don't have to remember.
This changes a lot of lines, but is very simple.
2. It implementa a new flag clientSpeaksFirst, set with the -f option.
The only effect of this flag is whether the value of
pollset[SSOCK_FD].in_flags is initially zero (if true) or PR_POLL_READ (if false).  Note that pollset[SSOCK_FD].in_flags is set to PR_POLL_READ after
each succesful write to the socket.


git-svn-id: svn://10.0.0.236/trunk@143147 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-01 03:01:39 +00:00
nelsonb%netscape.com
e39d70b9fc Back out rev 1.28 to test some hypotheses about bug 207313.
git-svn-id: svn://10.0.0.236/trunk@143095 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-30 10:06:29 +00:00
nelsonb%netscape.com
8496cdaa88 All diagnostic output goes to stderr, not stdout. This change facilitates
investigation of bug 207313.


git-svn-id: svn://10.0.0.236/trunk@142971 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-28 02:11:17 +00:00
wtc%netscape.com
f3b9348e07 Checked in more temporary debugging code for the strange QA failure on
Windows.


git-svn-id: svn://10.0.0.236/trunk@142901 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-25 19:19:28 +00:00
wtc%netscape.com
daaedf6e35 Enabled verbose mode temporarily for debugging a strange QA failure on
Windows.


git-svn-id: svn://10.0.0.236/trunk@142898 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-25 04:16:03 +00:00
nelsonb%netscape.com
72b1ff4554 Make tstclnt interactive on Windows. Bug 206031.
git-svn-id: svn://10.0.0.236/trunk@142744 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-22 04:34:38 +00:00
nelsonb%netscape.com
8d766c0bcf If the verbose option is given twice (e.g. -vv) and the server requests
client auhtentication, tstclnt will display the server's list of trusted
client CA names.


git-svn-id: svn://10.0.0.236/trunk@142579 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-17 05:38:01 +00:00
wtc%netscape.com
c8c128b326 Bug 134113: make NSS build on Win32 using GCC (MinGW). The patch
(attachment 121068) is contributed by Chris Seawood (cls@seawood.org).


git-svn-id: svn://10.0.0.236/trunk@141471 18797224-902f-48f8-a5cc-f745e15eee43
2003-04-20 04:23:37 +00:00
nelsonb%netscape.com
db2f1140de Add support for Elliptic Curve Cryptography. Bug 195135.
Modified Files:
 	cmd/lib/SECerrs.h cmd/selfserv/selfserv.c
 	cmd/tstclnt/tstclnt.c lib/cryptohi/keyhi.h
 	lib/cryptohi/keythi.h lib/cryptohi/seckey.c
 	lib/cryptohi/secvfy.c lib/freebl/Makefile lib/freebl/blapi.h
 	lib/freebl/blapit.h lib/freebl/ldvector.c lib/freebl/loader.c
 	lib/freebl/loader.h lib/freebl/manifest.mn lib/nss/nss.def
 	lib/pk11wrap/pk11skey.c lib/pk11wrap/pk11slot.c
 	lib/softoken/lowkeyti.h lib/softoken/manifest.mn
 	lib/softoken/pkcs11.c lib/softoken/pkcs11c.c
 	lib/softoken/pkcs11t.h lib/ssl/ssl3con.c lib/ssl/ssl3prot.h
 	lib/ssl/sslcon.c lib/ssl/sslenum.c lib/ssl/sslimpl.h
 	lib/ssl/sslinfo.c lib/ssl/sslproto.h lib/ssl/sslsecur.c
 	lib/ssl/sslsock.c lib/ssl/sslt.h lib/util/secerr.h
 	lib/util/secoid.c lib/util/secoidt.h
Added Files:
 	lib/freebl/GFp_ecl.c lib/freebl/GFp_ecl.h lib/freebl/ec.c
 	lib/freebl/ec.h lib/softoken/ecdecode.c


git-svn-id: svn://10.0.0.236/trunk@138574 18797224-902f-48f8-a5cc-f745e15eee43
2003-02-27 01:31:38 +00:00
bishakhabanerjee%netscape.com
44597bc93e new revision: 1.19; previous revision: 1.18
git-svn-id: svn://10.0.0.236/trunk@135949 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-07 22:29:54 +00:00
nicolson%netscape.com
4b34ca8158 Fix 164126: makefile build error.
Change the NSS module name from "security" to "nss".


git-svn-id: svn://10.0.0.236/trunk@128961 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-06 16:38:56 +00:00
nelsonb%netscape.com
fbc715c31a Support the TLS_RSA_WITH_NULL_SHA cipher suite. Bug 161529. Fix Usage.
git-svn-id: svn://10.0.0.236/trunk@126908 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-09 22:06:12 +00:00
relyea%netscape.com
50406c66c5 Bug 133584: Fix reference leaks which prevent shutdown in NSS and in the tests.
Debug builds can verify correct operation by setting NSS_STRICT_SHUTDOWN, which
will cause an assert if shutdown is called but not all the modules are freed (which
means a slot, key, or cert reference has been leaked).


git-svn-id: svn://10.0.0.236/trunk@118866 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-12 19:05:21 +00:00
nelsonb%netscape.com
d58ebedbc4 Change most coreconf and NSS makefiles to use OS_TARGET (which can
be overridden via an environment variable) rather than OS_ARCH.
This is a precursor to more flexibility in cross-platform builds.
Bug 104541.


git-svn-id: svn://10.0.0.236/trunk@114608 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-15 22:54:08 +00:00
nelsonb%netscape.com
b91f3120f1 Reimplement SSL_GetChannelInfo. Add new function SSL_GetCipherSuiteInfo().
Also, implement new ciphersuite preference order.  Bug 78959.


git-svn-id: svn://10.0.0.236/trunk@107060 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-02 04:24:28 +00:00
nelsonb%netscape.com
473503a731 Correct the test for length of data in SSL channel info struct.
git-svn-id: svn://10.0.0.236/trunk@103807 18797224-902f-48f8-a5cc-f745e15eee43
2001-09-26 04:22:55 +00:00
nelsonb%netscape.com
c4b44f9b2f Add support for new TLS AES ciphersuites. Bug 87021.
git-svn-id: svn://10.0.0.236/trunk@103410 18797224-902f-48f8-a5cc-f745e15eee43
2001-09-21 03:09:32 +00:00
relyea%netscape.com
eca0a94b81 Fix compiler warnings.
git-svn-id: svn://10.0.0.236/trunk@103361 18797224-902f-48f8-a5cc-f745e15eee43
2001-09-20 22:01:37 +00:00
nelsonb%netscape.com
65c1d8ebc2 Use new function SSL_GetChannelInfo(). Bugzilla bug 78959.
git-svn-id: svn://10.0.0.236/trunk@103058 18797224-902f-48f8-a5cc-f745e15eee43
2001-09-18 02:02:05 +00:00
nelsonb%netscape.com
611393a6b4 Allow the 5 new DHE cipher suites to be selected with the -c command line
option.  Facilitates testing of bug 95987.


git-svn-id: svn://10.0.0.236/trunk@102073 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-31 04:29:45 +00:00
wtc%netscape.com
2e28d51dbd Bugzilla bug 94685: deleted unused variable 'iter'.
git-svn-id: svn://10.0.0.236/trunk@101668 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-23 00:05:46 +00:00