julien.pierre.boogz%sun.com
040ba95c04
Fix for bug 491919 . Add void argument to prototypes. r=alexei
...
git-svn-id: svn://10.0.0.236/trunk@257185 18797224-902f-48f8-a5cc-f745e15eee43
2009-05-14 01:33:36 +00:00
julien.pierre.boogz%sun.com
8386868864
Fix for bug 321755 . Changes in CRL cache to implement CRL DP. Work in progress, not reviewed, per Nelson and Alexei.
...
git-svn-id: svn://10.0.0.236/trunk@256958 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-17 22:46:54 +00:00
nelson%bolyard.com
1c6c7a1452
Bug 484111: Must escape all DER DNS names when converting to zStrings.
...
r=Honza Bombas
git-svn-id: svn://10.0.0.236/trunk@256601 18797224-902f-48f8-a5cc-f745e15eee43
2009-03-20 18:03:57 +00:00
wtc%google.com
61e118ece1
Bug 466194: CERT_DecodeTrustString should take a const char * input trusts
...
string. r=alexei.volkov.
git-svn-id: svn://10.0.0.236/trunk@255173 18797224-902f-48f8-a5cc-f745e15eee43
2008-11-21 21:02:39 +00:00
nelson%bolyard.com
fd04713a60
Bug 448200. fix systemic misspellings of deprecated and function, r=julien.pierre
...
git-svn-id: svn://10.0.0.236/trunk@253374 18797224-902f-48f8-a5cc-f745e15eee43
2008-08-04 22:32:17 +00:00
julien.pierre.boogz%sun.com
e0c1b811c4
Fix for bug 442618 . Eliminate dead function CERT_CertPackageType . r=nelson
...
git-svn-id: svn://10.0.0.236/trunk@253172 18797224-902f-48f8-a5cc-f745e15eee43
2008-07-21 20:09:48 +00:00
nelson%bolyard.com
2d667308ec
Bug 372241: Need more versatile form of CERT_NameToAscii, r=julien
...
git-svn-id: svn://10.0.0.236/trunk@252472 18797224-902f-48f8-a5cc-f745e15eee43
2008-06-20 16:57:03 +00:00
wtc%google.com
cff01d808f
Bug 436430: removed the declarations of unimplemented functions
...
CERT_CreateNicknameCertList and CERT_CreateEmailAddrCertList. r=nelson.
git-svn-id: svn://10.0.0.236/trunk@252420 18797224-902f-48f8-a5cc-f745e15eee43
2008-06-18 01:02:32 +00:00
wtc%google.com
c141d5b222
Bug 436430: NSS public headers should not use NSPR 1.0 compatibility types
...
and macros. Replaced PRArenaPool by PLArenaPool and int64 by PRTime. The
patch is generated by Nelson Bolyard <nelson@bolyard.com>. r=wtc
Modified Files:
certdb/cert.h certdb/certdb.h certdb/certt.h certhigh/ocsp.h
cryptohi/cryptohi.h cryptohi/keyhi.h cryptohi/keythi.h
freebl/blapit.h pk11wrap/pk11priv.h pk11wrap/pk11pub.h
pk11wrap/secmodt.h pkcs12/p12.h pkcs12/p12t.h pkcs12/pkcs12t.h
pkcs7/pkcs7t.h pkcs7/secpkcs7.h smime/cms.h util/nssb64.h
util/secasn1.h util/secder.h util/secdig.h util/secitem.h
util/secoid.h
git-svn-id: svn://10.0.0.236/trunk@252350 18797224-902f-48f8-a5cc-f745e15eee43
2008-06-14 14:20:38 +00:00
julien.pierre.boogz%sun.com
124dacb685
Fix for bug 428103. Define CERT_EncodeSubjectKeyID in a public header. r=nelson
...
git-svn-id: svn://10.0.0.236/trunk@250821 18797224-902f-48f8-a5cc-f745e15eee43
2008-04-26 00:49:15 +00:00
alexei.volkov.bugs%sun.com
220ffe47b1
390381 - libpkix rejects cert chain when root CA cert has no basic constraints.
...
Main patch(by Nelson). r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@247892 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-15 02:15:36 +00:00
kaie%kuix.de
1286f8d32d
Bug 294531
...
Follow up patch to rename some policy function names
r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@247889 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-15 01:21:21 +00:00
kaie%kuix.de
b3d6a0a975
Bug 294531, Design new interfaces for certificate path building and verification for libPKIX
...
Update CERT_PKIXVerifyCert implementation for new revocation API.
Implement functions that describe NSS 3.11 and NIST revocation checking policies.
Implementation v5 (for Proposal 8)
r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@247877 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-14 23:29:08 +00:00
alexei.volkov.bugs%sun.com
95232238df
412468 - modify certutil, vfychain and vfyserv utilities to use CERT_PKIXVerifyCert function. Patches: suply trustlist to CERT_PKIXVerifyCert; use double "p" argument to use CERT_PKIXVerifyCert for validation. r=nelson.
...
git-svn-id: svn://10.0.0.236/trunk@247568 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-11 20:48:53 +00:00
julien.pierre.boogz%sun.com
ff91b65496
Fix for bug 369144 . certutil needs option to generate SubjectKeyID extension. r=nelson
...
git-svn-id: svn://10.0.0.236/trunk@245804 18797224-902f-48f8-a5cc-f745e15eee43
2008-02-16 01:17:45 +00:00
kaie%kuix.de
855e7249da
Bug 400917, Want exported function that outputs all host names for DNS name matching
...
r=nelson
git-svn-id: svn://10.0.0.236/trunk@242626 18797224-902f-48f8-a5cc-f745e15eee43
2008-01-08 07:33:59 +00:00
julien.pierre.boogz%sun.com
a8626f2c53
Fix for bug 286642 . Move utility functions to new libnssutil shared library. r=nelson
...
git-svn-id: svn://10.0.0.236/trunk@237631 18797224-902f-48f8-a5cc-f745e15eee43
2007-10-12 01:44:51 +00:00
rrelyea%redhat.com
d2cf075703
bug 284531 Design new interfaces for certificate path building and verification for libPKIX
...
patch by stevep
review by rrelyea.
git-svn-id: svn://10.0.0.236/trunk@236687 18797224-902f-48f8-a5cc-f745e15eee43
2007-09-25 23:48:04 +00:00
neil.williams%sun.com
d23a220b27
Bug 324744, add gen of policy extns to certutil, second of 3 patches
...
r=julien
git-svn-id: svn://10.0.0.236/trunk@235372 18797224-902f-48f8-a5cc-f745e15eee43
2007-09-07 18:45:53 +00:00
nelson%bolyard.com
db9d42f5fa
Back out revision 1.23 of certdb/certdb.c, the "fix" for bug 121487 that
...
started setting the valid override flags routinely on all imported certs.
Bug 376737. r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@229947 18797224-902f-48f8-a5cc-f745e15eee43
2007-07-14 05:51:00 +00:00
julien.pierre.bugs%sun.com
b5c661f69d
Fix for bug 113323 . Constify some functions. r=nelson
...
git-svn-id: svn://10.0.0.236/trunk@229672 18797224-902f-48f8-a5cc-f745e15eee43
2007-07-11 04:47:42 +00:00
alexei.volkov.bugs%sun.com
110431be3e
Bug 358785: Merge NSS_LIBPKIX_BRANCH back to trunk. r=julien, r=alexei
...
git-svn-id: svn://10.0.0.236/trunk@226998 18797224-902f-48f8-a5cc-f745e15eee43
2007-05-25 07:28:38 +00:00
julien.pierre.bugs%sun.com
03f794688f
Fix for bug 380334 . Get rid of some dead code in CERT_HTMLCertInfo . r=nelson, rrlyea
...
git-svn-id: svn://10.0.0.236/trunk@226484 18797224-902f-48f8-a5cc-f745e15eee43
2007-05-15 23:15:28 +00:00
alexei.volkov.bugs%sun.com
3362ecc93f
338986 - Unauthorized OCSP response error from user's default OCSP responder. r=nelson
...
git-svn-id: svn://10.0.0.236/trunk@221121 18797224-902f-48f8-a5cc-f745e15eee43
2007-03-01 00:30:19 +00:00
julien.pierre.bugs%sun.com
a48ba8324d
Fix for bug 178894 . Quick decoder updates for lib/certdb and lib/certhigh . r=nelson .
...
git-svn-id: svn://10.0.0.236/trunk@206742 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-07 19:09:41 +00:00
neil.williams%sun.com
8395d7fafb
r=nelson Bug=263779
...
git-svn-id: svn://10.0.0.236/trunk@170477 18797224-902f-48f8-a5cc-f745e15eee43
2005-03-09 23:02:48 +00:00
julien.pierre.bugs%sun.com
88d1026757
Fix for 285233 - need extra symbols to be exported to support CRL generation. Ch
...
ecking in for alexei volkov . r=nelson
git-svn-id: svn://10.0.0.236/trunk@170373 18797224-902f-48f8-a5cc-f745e15eee43
2005-03-08 07:08:48 +00:00
julien.pierre.bugs%sun.com
dd31c2d763
Move static functions out of certi.h header file and into crl.c source file, to remove warnings with gcc
...
git-svn-id: svn://10.0.0.236/trunk@169803 18797224-902f-48f8-a5cc-f745e15eee43
2005-02-25 00:54:29 +00:00
julien.pierre.bugs%sun.com
37edfe8363
Add comment for bug 243585
...
git-svn-id: svn://10.0.0.236/trunk@169702 18797224-902f-48f8-a5cc-f745e15eee43
2005-02-24 00:22:23 +00:00
julien.pierre.bugs%sun.com
761d5cc7c7
Fix for 243585 - add the ability to use CRL objects from RAM . r=nelson, neil.williams
...
git-svn-id: svn://10.0.0.236/trunk@169200 18797224-902f-48f8-a5cc-f745e15eee43
2005-02-15 06:26:43 +00:00
wchang0222%aol.com
53fa50ce06
Bugzilla bug 248435: declare the exported functions CERT_DecodeGeneralName
...
and CERT_EncodeGeneralName in the public header cert.h. r=jpierre.
Modified Files: cert.h genname.h xconst.c
git-svn-id: svn://10.0.0.236/trunk@165153 18797224-902f-48f8-a5cc-f745e15eee43
2004-11-09 06:13:32 +00:00
wchang0222%aol.com
b4c8df8df4
Bugzilla bug 249284: removed a duplicate declaration of
...
CERT_DecodeDERCertificate. r=nelsonb. Thanks to Chris Newman
of Sun for the bug report.
git-svn-id: svn://10.0.0.236/trunk@158814 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-07 00:48:53 +00:00
gerv%gerv.net
43cb9e1492
Bug 236613: change to MPL/LGPL/GPL tri-license.
...
git-svn-id: svn://10.0.0.236/trunk@155484 18797224-902f-48f8-a5cc-f745e15eee43
2004-04-25 15:03:26 +00:00
nelsonb%netscape.com
a9d9ed95da
Export cert functions that decode extensions and traverse decoded
...
extensions. Bug 231881. r= relyea, wtc.
git-svn-id: svn://10.0.0.236/trunk@151989 18797224-902f-48f8-a5cc-f745e15eee43
2004-01-28 23:23:45 +00:00
wchang0222%aol.com
f2ad2c3faa
Bugzilla bug 232380: deleted CERT_FindExpiredIssuer, which is dead code.
...
In cert_VerifyCertChain, make sure that subjectCert and issuerCert never
point to the same cert to prevent from destroying that cert twice.
r=jpierre,nelsonb.
Modified Files: certdb/cert.h certhigh/certvfy.c
git-svn-id: svn://10.0.0.236/trunk@151977 18797224-902f-48f8-a5cc-f745e15eee43
2004-01-28 21:51:10 +00:00
wchang0222%aol.com
b8a73710e4
Bugscape bug 54021: in CERT_FindSubjectKeyIDExtension, if PORT_NewArena
...
fails we should return SECFailure. Document that the return values of
CERT_GetCommonName and NSS_CMSSignerInfo_GetSignerCommonName must be freed
with PORT_Free. r=nelsonb.
Modified Files:
certdb/alg1485.c certdb/cert.h certdb/certv3.c smime/cms.h
smime/cmssiginfo.c
git-svn-id: svn://10.0.0.236/trunk@149951 18797224-902f-48f8-a5cc-f745e15eee43
2003-12-03 00:09:05 +00:00
wchang0222%aol.com
1048ab0991
Fixed a comment error. r=relyea.
...
git-svn-id: svn://10.0.0.236/trunk@149242 18797224-902f-48f8-a5cc-f745e15eee43
2003-11-13 16:21:46 +00:00
wchang0222%aol.com
7f3eb1098d
Bugzilla bug 225373: the return value of CERT_NameToAscii must be freed
...
with PORT_Free.
Modified Files:
cmd/lib/secutil.c cmd/selfserv/selfserv.c
cmd/signver/pk7print.c cmd/strsclnt/strsclnt.c
cmd/tstclnt/tstclnt.c lib/certdb/cert.h
git-svn-id: svn://10.0.0.236/trunk@149241 18797224-902f-48f8-a5cc-f745e15eee43
2003-11-13 16:10:45 +00:00
nelsonb%netscape.com
deea9f0bcc
Rename get_oid_string to CERT_GetOidString and export it. Also, export
...
CERT_DestroyOidSequence. bug 222568. r=jpierre (for this portion).
git-svn-id: svn://10.0.0.236/trunk@148803 18797224-902f-48f8-a5cc-f745e15eee43
2003-11-04 01:48:39 +00:00
nelsonb%netscape.com
8426542fcd
Eliminate redundant function declarations. Bug 208854. r=wchang0222
...
git-svn-id: svn://10.0.0.236/trunk@147958 18797224-902f-48f8-a5cc-f745e15eee43
2003-10-14 17:44:33 +00:00
nelsonb%netscape.com
22e603216c
Move the declaration for CERT_CompareNameSpace from cert.h to genname.h
...
because it is a private function. Change the interface for this
function so that it returns a SECStatus, unambiguously indicating the
success or failure of the name constraints test. The function no
longer takes a list of cert subject names, instead, it takes a list
of cert pointers, and optionally outputs one of those pointers when
an error occurs. This eliminates a cert reference leak.
git-svn-id: svn://10.0.0.236/trunk@144179 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-26 01:56:34 +00:00
nelsonb%netscape.com
691797151a
Move declarations of NSS private functions for general names from cert.h
...
to genname.h, and eliminate declarations from cert.h that were also
in genname.h. If we ever decide to make any of these functions public,
we can move their declarations back to cert.h.
git-svn-id: svn://10.0.0.236/trunk@143828 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-18 00:38:12 +00:00
nelsonb%netscape.com
5d15f38564
Make CERT_DecodeAVAValue take const inputs and detect NULL pointers.
...
Rewrite CERT_CompareAVA to compare the type OIDs first, and then if
the values are not of the same encoding, convert them before comparing.
Also, do comparisons of printableString encoding properly. Bug 208649.
git-svn-id: svn://10.0.0.236/trunk@143826 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-17 23:44:14 +00:00
jpierre%netscape.com
151353c3d6
Fix for 201134 - race condition when verifying certs. Don't reset the value of nsCertType in CERTCertificate in the middle of the computation. r=nelsonb
...
git-svn-id: svn://10.0.0.236/trunk@141280 18797224-902f-48f8-a5cc-f745e15eee43
2003-04-17 00:35:21 +00:00
relyea%netscape.com
65773f5b59
Bug 142867: pk12util needs to be able to import intermediate CA's into hw
...
tokens.
git-svn-id: svn://10.0.0.236/trunk@140152 18797224-902f-48f8-a5cc-f745e15eee43
2003-03-24 19:09:08 +00:00
wtc%netscape.com
37a5a7c29e
Bug 183612: added some comments.
...
git-svn-id: svn://10.0.0.236/trunk@135609 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-24 02:25:36 +00:00
wtc%netscape.com
9bb9b998ad
Bug 183612: renamed some new functions to be consistent with existing
...
function names containing SubjectKey and PublicKey. Moved internal
functions to private headers and use the lowercase cert_ prefix for the
internal functions for subject key ID mapping hash table. r=nelsonb.
git-svn-id: svn://10.0.0.236/trunk@135480 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-19 00:26:34 +00:00
wtc%netscape.com
688bbc9eba
Bug 183612: added support for looking up a cert by subject key ID and
...
creating a CMS recipient info from a subject key ID. The patch was
contributed by Javi Delgadillo <javi@netscape.com>. r=relyea, wtc.
Modified Files:
certdb/cert.h certdb/certdb.c certdb/certdb.h certdb/certv3.c
certdb/stanpcertdb.c nss/nss.def nss/nssinit.c
pk11wrap/pk11cert.c pk11wrap/pk11func.h pk11wrap/secmod.h
pki/pki3hack.c smime/cms.h smime/cmslocal.h smime/cmspubkey.c
smime/cmsrecinfo.c smime/cmssiginfo.c smime/cmst.h
smime/smime.def
git-svn-id: svn://10.0.0.236/trunk@135377 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-17 01:39:46 +00:00
relyea%netscape.com
e6e68328f4
Make SubjectAltEncode a public function. Fixes build breakage in Linux
...
git-svn-id: svn://10.0.0.236/trunk@135039 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-10 17:41:16 +00:00
jpierre%netscape.com
fcdf6d31a0
Patch for 180228 - export CRL cache flush API . r=wtc
...
git-svn-id: svn://10.0.0.236/trunk@133887 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-15 05:04:05 +00:00