400 Commits

Author SHA1 Message Date
julien.pierre.boogz%sun.com
17c03a2785 Fix for bug 506635 . Switch to pre-allocating data buffer in arena. r=nelson
git-svn-id: svn://10.0.0.236/trunk@258043 18797224-902f-48f8-a5cc-f745e15eee43
2009-08-10 22:25:44 +00:00
christophe.ravel.bugs%sun.com
18255f226b Bug 507482 - NSS 3.12.3 (and later) doesn't build on AIX 5.1
r=nelson


git-svn-id: svn://10.0.0.236/trunk@257901 18797224-902f-48f8-a5cc-f745e15eee43
2009-07-31 18:35:44 +00:00
nelson%bolyard.com
dd033b61ea Bug 506407: NULs in cert SAN email addresses are not properly escaped
r=rrelyea


git-svn-id: svn://10.0.0.236/trunk@257836 18797224-902f-48f8-a5cc-f745e15eee43
2009-07-28 23:47:27 +00:00
wtc%google.com
712dfe7374 Bug 495365: The 'nickname' parameter of SEC_CertNicknameConflict should be
a const char *.  r=nelson.
Modified Files:
	certdb.h stanpcertdb.c


git-svn-id: svn://10.0.0.236/trunk@257303 18797224-902f-48f8-a5cc-f745e15eee43
2009-05-29 19:16:54 +00:00
alexei.volkov.bugs%sun.com
fe3dcd05dd 494087 - Passing NULL as the value of cert_pi_trustAnchors causes a crash in cert_pkixSetParam. r=wtc.
git-svn-id: svn://10.0.0.236/trunk@257299 18797224-902f-48f8-a5cc-f745e15eee43
2009-05-29 18:10:39 +00:00
wtc%google.com
6cd5127792 Bug 403543: Document that cert_pi_useAIACertFetch was added in NSS 3.12.1.
r=alexei.volkov.


git-svn-id: svn://10.0.0.236/trunk@257266 18797224-902f-48f8-a5cc-f745e15eee43
2009-05-22 04:29:55 +00:00
nelson%bolyard.com
2b5660c040 Bug 493405: 1 byte overflow in cert_GetDNSPatternsFromGeneralNames
r=julien, patch suggested by Brian Hackett <bhackett1024@gmail.com>


git-svn-id: svn://10.0.0.236/trunk@257216 18797224-902f-48f8-a5cc-f745e15eee43
2009-05-18 21:33:25 +00:00
julien.pierre.boogz%sun.com
040ba95c04 Fix for bug 491919 . Add void argument to prototypes. r=alexei
git-svn-id: svn://10.0.0.236/trunk@257185 18797224-902f-48f8-a5cc-f745e15eee43
2009-05-14 01:33:36 +00:00
julien.pierre.boogz%sun.com
503a10244f Fix for bug 492385 . Stop crash freeing named CRL entry on shudown. r=nelson
git-svn-id: svn://10.0.0.236/trunk@257183 18797224-902f-48f8-a5cc-f745e15eee43
2009-05-13 22:47:28 +00:00
nelson%bolyard.com
f870c89765 Bug 489287: Resolve a few remaining issues with NSS's new revocation flags
git-svn-id: svn://10.0.0.236/trunk@257054 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-24 19:18:32 +00:00
julien.pierre.boogz%sun.com
f0d1b588eb Fix for bug 321755. Plug leak. r=nelson
git-svn-id: svn://10.0.0.236/trunk@257007 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-21 22:53:58 +00:00
nelson%bolyard.com
21594f8e22 Bug 321755 - fix a locking bug in crl.c r=alexei
git-svn-id: svn://10.0.0.236/trunk@256979 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-20 00:29:28 +00:00
alexei.volkov.bugs%sun.com
6872bf2d05 321755 - (CRLDP) implement crlDistributionPoint extension in libPKIX. Patch partially provided by Julien. r=nelson.
git-svn-id: svn://10.0.0.236/trunk@256960 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-18 05:15:58 +00:00
julien.pierre.boogz%sun.com
8386868864 Fix for bug 321755 . Changes in CRL cache to implement CRL DP. Work in progress, not reviewed, per Nelson and Alexei.
git-svn-id: svn://10.0.0.236/trunk@256958 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-17 22:46:54 +00:00
nelson%bolyard.com
5f365b0b3c Bug 487487: CERT_NameToAscii reports "!Invalid AVA!" whenever value exceeds 384 bytes
Patch contributed by Kaspar Brand <mozbugzilla@velox.ch>, r=nelson


git-svn-id: svn://10.0.0.236/trunk@256907 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-13 18:45:34 +00:00
nelson%bolyard.com
6e345c7f78 Bug 480509: Improper character escaping and unescaping in alg1485.c, r=tbd
git-svn-id: svn://10.0.0.236/trunk@256899 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-12 05:43:13 +00:00
nelson%bolyard.com
781ff8330d Bug 487487: CERT_NameToAscii reports "!Invalid AVA!" whenever value exceeds 384 bytes
r=rrelyea


git-svn-id: svn://10.0.0.236/trunk@256898 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-12 04:34:00 +00:00
nelson%bolyard.com
bd4fd80684 Bug 480509: Improper character escaping and unescaping in alg1485.c
r=Honza


git-svn-id: svn://10.0.0.236/trunk@256895 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-11 22:58:52 +00:00
nelson%bolyard.com
1f7c868bde Bug 484111: Must escape all DER DNS names when converting to zStrings.
r=Julien.pierre


git-svn-id: svn://10.0.0.236/trunk@256621 18797224-902f-48f8-a5cc-f745e15eee43
2009-03-23 02:18:19 +00:00
nelson%bolyard.com
eb98f80b22 Bug 483168: Embed a list of default OCSP Responder URLs for certain CAs
r= Honza Bombas, Julien Pierre


git-svn-id: svn://10.0.0.236/trunk@256612 18797224-902f-48f8-a5cc-f745e15eee43
2009-03-21 01:40:36 +00:00
nelson%bolyard.com
1c6c7a1452 Bug 484111: Must escape all DER DNS names when converting to zStrings.
r=Honza Bombas


git-svn-id: svn://10.0.0.236/trunk@256601 18797224-902f-48f8-a5cc-f745e15eee43
2009-03-20 18:03:57 +00:00
nelson%bolyard.com
121c0da547 Bug 480509: Improper character escaping and unescaping in alg1485.c & secname.c
r=Honza Bambas (:mayhemer)


git-svn-id: svn://10.0.0.236/trunk@256580 18797224-902f-48f8-a5cc-f745e15eee43
2009-03-18 23:14:45 +00:00
nelson%bolyard.com
09acd20518 Bug 480509: Improper character escaping and unescaping in alg1485.c & secname.c
r=rrelyea


git-svn-id: svn://10.0.0.236/trunk@256547 18797224-902f-48f8-a5cc-f745e15eee43
2009-03-17 07:30:11 +00:00
nelson%bolyard.com
3ac0fa60b6 The patch for bug 159483 was contributed by Kaspar Brand <mozbugzilla@velox.ch>.
git-svn-id: svn://10.0.0.236/trunk@256521 18797224-902f-48f8-a5cc-f745e15eee43
2009-03-12 08:53:51 +00:00
nelson%bolyard.com
b0d46cea37 Bug 159483: cert name matching: RFC 2818 vs. backwards compatibility (wildcards)
r=wtc.


git-svn-id: svn://10.0.0.236/trunk@256520 18797224-902f-48f8-a5cc-f745e15eee43
2009-03-12 07:21:36 +00:00
nelson%bolyard.com
a20f6cd872 Bug 479601: Wrong encoding for email addresses in subject
Patch contributed by Christoph Hannebauer <chbugzilla@mailinator.com>, r=nelson


git-svn-id: svn://10.0.0.236/trunk@256283 18797224-902f-48f8-a5cc-f745e15eee43
2009-02-22 12:27:33 +00:00
nelson%bolyard.com
66b256f7b3 Bug 468532: Trusted CA trust flags not being honored in CERT_VerifyCert
r=rrelyea


git-svn-id: svn://10.0.0.236/trunk@256154 18797224-902f-48f8-a5cc-f745e15eee43
2009-02-09 07:51:30 +00:00
nelson%bolyard.com
fa1a979fd9 Bug 476126: CERT_AsciiToName fails when AVAs in an RDN are separated by '+'
r=julien.pierre


git-svn-id: svn://10.0.0.236/trunk@256153 18797224-902f-48f8-a5cc-f745e15eee43
2009-02-09 01:16:41 +00:00
nelson%bolyard.com
96835b4287 Bug 371522: Auto-Update of CRLs stops after first update, r=julien.pierre
git-svn-id: svn://10.0.0.236/trunk@256123 18797224-902f-48f8-a5cc-f745e15eee43
2009-02-05 20:31:26 +00:00
nelson%bolyard.com
f83c095af0 Bug 476126: CERT_AsciiToName fails when AVAs in an RDN are separated by '+'
r=julien.pierre


git-svn-id: svn://10.0.0.236/trunk@256121 18797224-902f-48f8-a5cc-f745e15eee43
2009-02-05 19:24:18 +00:00
alexei.volkov.bugs%sun.com
a352dc86ab 461547 - delay child certificate signature check until after trusted anchor is found. r=julien
git-svn-id: svn://10.0.0.236/trunk@255996 18797224-902f-48f8-a5cc-f745e15eee43
2009-01-30 19:54:45 +00:00
nelson%bolyard.com
63d3aa2a49 Bug 464088: Option to build NSS without dbm (handy for WinCE), r=nelson
git-svn-id: svn://10.0.0.236/trunk@255305 18797224-902f-48f8-a5cc-f745e15eee43
2008-12-03 00:06:23 +00:00
nelson%bolyard.com
8060804dc4 Bug 464088: Option to build NSS without dbm (handy for WinCE), r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@255302 18797224-902f-48f8-a5cc-f745e15eee43
2008-12-02 23:24:53 +00:00
wtc%google.com
61e118ece1 Bug 466194: CERT_DecodeTrustString should take a const char * input trusts
string.  r=alexei.volkov.


git-svn-id: svn://10.0.0.236/trunk@255173 18797224-902f-48f8-a5cc-f745e15eee43
2008-11-21 21:02:39 +00:00
nelson%bolyard.com
d01e7081c1 Bug 464406: Fix signtool regressions, make signtool work again
part 3 - reenable peer trust flags, r=Alexei


git-svn-id: svn://10.0.0.236/trunk@255143 18797224-902f-48f8-a5cc-f745e15eee43
2008-11-20 03:52:22 +00:00
alexei.volkov.bugs%sun.com
2b9cac18b8 205434 - Fully implement new libPKIX cert verification API from bug 294531. r=nelson
git-svn-id: svn://10.0.0.236/trunk@254846 18797224-902f-48f8-a5cc-f745e15eee43
2008-10-31 23:03:00 +00:00
wtc%google.com
6042c5e071 Bug 456036: The stubs for deprecated functions should set the
PR_NOT_IMPLEMENTED_ERROR error before returning failure.  r=julien.pierre


git-svn-id: svn://10.0.0.236/trunk@254335 18797224-902f-48f8-a5cc-f745e15eee43
2008-09-20 01:10:04 +00:00
julien.pierre.boogz%sun.com
81633716a9 Fix for bug 449146 . remove dead libsec function declarations. r=nelson
git-svn-id: svn://10.0.0.236/trunk@253412 18797224-902f-48f8-a5cc-f745e15eee43
2008-08-07 00:00:09 +00:00
nelson%bolyard.com
fd04713a60 Bug 448200. fix systemic misspellings of deprecated and function, r=julien.pierre
git-svn-id: svn://10.0.0.236/trunk@253374 18797224-902f-48f8-a5cc-f745e15eee43
2008-08-04 22:32:17 +00:00
julien.pierre.boogz%sun.com
e0c1b811c4 Fix for bug 442618 . Eliminate dead function CERT_CertPackageType . r=nelson
git-svn-id: svn://10.0.0.236/trunk@253172 18797224-902f-48f8-a5cc-f745e15eee43
2008-07-21 20:09:48 +00:00
nelson%bolyard.com
2d667308ec Bug 372241: Need more versatile form of CERT_NameToAscii, r=julien
git-svn-id: svn://10.0.0.236/trunk@252472 18797224-902f-48f8-a5cc-f745e15eee43
2008-06-20 16:57:03 +00:00
wtc%google.com
cff01d808f Bug 436430: removed the declarations of unimplemented functions
CERT_CreateNicknameCertList and CERT_CreateEmailAddrCertList.  r=nelson.


git-svn-id: svn://10.0.0.236/trunk@252420 18797224-902f-48f8-a5cc-f745e15eee43
2008-06-18 01:02:32 +00:00
wtc%google.com
fec57b0868 Bug 436430: the |time| parameter of cert_VerifyCertChainPkix should be
PRTime instead of PRUint64.  r=nelson.
Modified Files:
	certdb/certi.h certhigh/certvfypkix.c


git-svn-id: svn://10.0.0.236/trunk@252419 18797224-902f-48f8-a5cc-f745e15eee43
2008-06-18 01:00:47 +00:00
wtc%google.com
c141d5b222 Bug 436430: NSS public headers should not use NSPR 1.0 compatibility types
and macros.  Replaced PRArenaPool by PLArenaPool and int64 by PRTime.  The
patch is generated by Nelson Bolyard <nelson@bolyard.com>.  r=wtc
Modified Files:
	certdb/cert.h certdb/certdb.h certdb/certt.h certhigh/ocsp.h
	cryptohi/cryptohi.h cryptohi/keyhi.h cryptohi/keythi.h
	freebl/blapit.h pk11wrap/pk11priv.h pk11wrap/pk11pub.h
	pk11wrap/secmodt.h pkcs12/p12.h pkcs12/p12t.h pkcs12/pkcs12t.h
	pkcs7/pkcs7t.h pkcs7/secpkcs7.h smime/cms.h util/nssb64.h
	util/secasn1.h util/secder.h util/secdig.h util/secitem.h
	util/secoid.h


git-svn-id: svn://10.0.0.236/trunk@252350 18797224-902f-48f8-a5cc-f745e15eee43
2008-06-14 14:20:38 +00:00
wtc%google.com
4b9b8481f8 Bug 434187: merged nssCertificateStore_Check into
nssCertificateStore_Unlock because these two functions were always called
together.  r=julien.pierre


git-svn-id: svn://10.0.0.236/trunk@252144 18797224-902f-48f8-a5cc-f745e15eee43
2008-06-06 01:19:31 +00:00
wtc%google.com
06fe065f74 Bug 434187: fixed compiler warnings reported by GCC on Mac OS X.
r=julien.pierre


git-svn-id: svn://10.0.0.236/trunk@252143 18797224-902f-48f8-a5cc-f745e15eee43
2008-06-06 01:16:31 +00:00
nelson%bolyard.com
d736d0bf36 Bug 390296: NSS ignores subject CN even when SAN contains no dNSName
r=wtc


git-svn-id: svn://10.0.0.236/trunk@251663 18797224-902f-48f8-a5cc-f745e15eee43
2008-05-16 03:38:39 +00:00
julien.pierre.boogz%sun.com
124dacb685 Fix for bug 428103. Define CERT_EncodeSubjectKeyID in a public header. r=nelson
git-svn-id: svn://10.0.0.236/trunk@250821 18797224-902f-48f8-a5cc-f745e15eee43
2008-04-26 00:49:15 +00:00
alexei.volkov.bugs%sun.com
436797f4ee 403543 - pkix: need a way to enable/disable AIA cert fetching. r=nelson
git-svn-id: svn://10.0.0.236/trunk@250583 18797224-902f-48f8-a5cc-f745e15eee43
2008-04-21 22:38:35 +00:00
alexei.volkov.bugs%sun.com
1e94d6d75f 412468 - modify certutil, vfychain and vfyserv utilities to use CERT_PKIXVerifyCert function. r=nelson
git-svn-id: svn://10.0.0.236/trunk@248725 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-27 21:56:25 +00:00