78 Commits

Author SHA1 Message Date
julien.pierre.boogz%sun.com
040ba95c04 Fix for bug 491919 . Add void argument to prototypes. r=alexei
git-svn-id: svn://10.0.0.236/trunk@257185 18797224-902f-48f8-a5cc-f745e15eee43
2009-05-14 01:33:36 +00:00
julien.pierre.boogz%sun.com
8386868864 Fix for bug 321755 . Changes in CRL cache to implement CRL DP. Work in progress, not reviewed, per Nelson and Alexei.
git-svn-id: svn://10.0.0.236/trunk@256958 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-17 22:46:54 +00:00
nelson%bolyard.com
1c6c7a1452 Bug 484111: Must escape all DER DNS names when converting to zStrings.
r=Honza Bombas


git-svn-id: svn://10.0.0.236/trunk@256601 18797224-902f-48f8-a5cc-f745e15eee43
2009-03-20 18:03:57 +00:00
wtc%google.com
61e118ece1 Bug 466194: CERT_DecodeTrustString should take a const char * input trusts
string.  r=alexei.volkov.


git-svn-id: svn://10.0.0.236/trunk@255173 18797224-902f-48f8-a5cc-f745e15eee43
2008-11-21 21:02:39 +00:00
nelson%bolyard.com
fd04713a60 Bug 448200. fix systemic misspellings of deprecated and function, r=julien.pierre
git-svn-id: svn://10.0.0.236/trunk@253374 18797224-902f-48f8-a5cc-f745e15eee43
2008-08-04 22:32:17 +00:00
julien.pierre.boogz%sun.com
e0c1b811c4 Fix for bug 442618 . Eliminate dead function CERT_CertPackageType . r=nelson
git-svn-id: svn://10.0.0.236/trunk@253172 18797224-902f-48f8-a5cc-f745e15eee43
2008-07-21 20:09:48 +00:00
nelson%bolyard.com
2d667308ec Bug 372241: Need more versatile form of CERT_NameToAscii, r=julien
git-svn-id: svn://10.0.0.236/trunk@252472 18797224-902f-48f8-a5cc-f745e15eee43
2008-06-20 16:57:03 +00:00
wtc%google.com
cff01d808f Bug 436430: removed the declarations of unimplemented functions
CERT_CreateNicknameCertList and CERT_CreateEmailAddrCertList.  r=nelson.


git-svn-id: svn://10.0.0.236/trunk@252420 18797224-902f-48f8-a5cc-f745e15eee43
2008-06-18 01:02:32 +00:00
wtc%google.com
c141d5b222 Bug 436430: NSS public headers should not use NSPR 1.0 compatibility types
and macros.  Replaced PRArenaPool by PLArenaPool and int64 by PRTime.  The
patch is generated by Nelson Bolyard <nelson@bolyard.com>.  r=wtc
Modified Files:
	certdb/cert.h certdb/certdb.h certdb/certt.h certhigh/ocsp.h
	cryptohi/cryptohi.h cryptohi/keyhi.h cryptohi/keythi.h
	freebl/blapit.h pk11wrap/pk11priv.h pk11wrap/pk11pub.h
	pk11wrap/secmodt.h pkcs12/p12.h pkcs12/p12t.h pkcs12/pkcs12t.h
	pkcs7/pkcs7t.h pkcs7/secpkcs7.h smime/cms.h util/nssb64.h
	util/secasn1.h util/secder.h util/secdig.h util/secitem.h
	util/secoid.h


git-svn-id: svn://10.0.0.236/trunk@252350 18797224-902f-48f8-a5cc-f745e15eee43
2008-06-14 14:20:38 +00:00
julien.pierre.boogz%sun.com
124dacb685 Fix for bug 428103. Define CERT_EncodeSubjectKeyID in a public header. r=nelson
git-svn-id: svn://10.0.0.236/trunk@250821 18797224-902f-48f8-a5cc-f745e15eee43
2008-04-26 00:49:15 +00:00
alexei.volkov.bugs%sun.com
220ffe47b1 390381 - libpkix rejects cert chain when root CA cert has no basic constraints.
Main patch(by Nelson). r=rrelyea


git-svn-id: svn://10.0.0.236/trunk@247892 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-15 02:15:36 +00:00
kaie%kuix.de
1286f8d32d Bug 294531
Follow up patch to rename some policy function names
r=rrelyea


git-svn-id: svn://10.0.0.236/trunk@247889 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-15 01:21:21 +00:00
kaie%kuix.de
b3d6a0a975 Bug 294531, Design new interfaces for certificate path building and verification for libPKIX
Update CERT_PKIXVerifyCert implementation for new revocation API.
Implement functions that describe NSS 3.11 and NIST revocation checking policies.
Implementation v5 (for Proposal 8)
r=rrelyea


git-svn-id: svn://10.0.0.236/trunk@247877 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-14 23:29:08 +00:00
alexei.volkov.bugs%sun.com
95232238df 412468 - modify certutil, vfychain and vfyserv utilities to use CERT_PKIXVerifyCert function. Patches: suply trustlist to CERT_PKIXVerifyCert; use double "p" argument to use CERT_PKIXVerifyCert for validation. r=nelson.
git-svn-id: svn://10.0.0.236/trunk@247568 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-11 20:48:53 +00:00
julien.pierre.boogz%sun.com
ff91b65496 Fix for bug 369144 . certutil needs option to generate SubjectKeyID extension. r=nelson
git-svn-id: svn://10.0.0.236/trunk@245804 18797224-902f-48f8-a5cc-f745e15eee43
2008-02-16 01:17:45 +00:00
kaie%kuix.de
855e7249da Bug 400917, Want exported function that outputs all host names for DNS name matching
r=nelson


git-svn-id: svn://10.0.0.236/trunk@242626 18797224-902f-48f8-a5cc-f745e15eee43
2008-01-08 07:33:59 +00:00
julien.pierre.boogz%sun.com
a8626f2c53 Fix for bug 286642 . Move utility functions to new libnssutil shared library. r=nelson
git-svn-id: svn://10.0.0.236/trunk@237631 18797224-902f-48f8-a5cc-f745e15eee43
2007-10-12 01:44:51 +00:00
rrelyea%redhat.com
d2cf075703 bug 284531 Design new interfaces for certificate path building and verification for libPKIX
patch by stevep
review by rrelyea.


git-svn-id: svn://10.0.0.236/trunk@236687 18797224-902f-48f8-a5cc-f745e15eee43
2007-09-25 23:48:04 +00:00
neil.williams%sun.com
d23a220b27 Bug 324744, add gen of policy extns to certutil, second of 3 patches
r=julien


git-svn-id: svn://10.0.0.236/trunk@235372 18797224-902f-48f8-a5cc-f745e15eee43
2007-09-07 18:45:53 +00:00
nelson%bolyard.com
db9d42f5fa Back out revision 1.23 of certdb/certdb.c, the "fix" for bug 121487 that
started setting the valid override flags routinely on all imported certs.
Bug 376737.  r=rrelyea


git-svn-id: svn://10.0.0.236/trunk@229947 18797224-902f-48f8-a5cc-f745e15eee43
2007-07-14 05:51:00 +00:00
julien.pierre.bugs%sun.com
b5c661f69d Fix for bug 113323 . Constify some functions. r=nelson
git-svn-id: svn://10.0.0.236/trunk@229672 18797224-902f-48f8-a5cc-f745e15eee43
2007-07-11 04:47:42 +00:00
alexei.volkov.bugs%sun.com
110431be3e Bug 358785: Merge NSS_LIBPKIX_BRANCH back to trunk. r=julien, r=alexei
git-svn-id: svn://10.0.0.236/trunk@226998 18797224-902f-48f8-a5cc-f745e15eee43
2007-05-25 07:28:38 +00:00
julien.pierre.bugs%sun.com
03f794688f Fix for bug 380334 . Get rid of some dead code in CERT_HTMLCertInfo . r=nelson, rrlyea
git-svn-id: svn://10.0.0.236/trunk@226484 18797224-902f-48f8-a5cc-f745e15eee43
2007-05-15 23:15:28 +00:00
alexei.volkov.bugs%sun.com
3362ecc93f 338986 - Unauthorized OCSP response error from user's default OCSP responder. r=nelson
git-svn-id: svn://10.0.0.236/trunk@221121 18797224-902f-48f8-a5cc-f745e15eee43
2007-03-01 00:30:19 +00:00
julien.pierre.bugs%sun.com
a48ba8324d Fix for bug 178894 . Quick decoder updates for lib/certdb and lib/certhigh . r=nelson .
git-svn-id: svn://10.0.0.236/trunk@206742 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-07 19:09:41 +00:00
neil.williams%sun.com
8395d7fafb r=nelson Bug=263779
git-svn-id: svn://10.0.0.236/trunk@170477 18797224-902f-48f8-a5cc-f745e15eee43
2005-03-09 23:02:48 +00:00
julien.pierre.bugs%sun.com
88d1026757 Fix for 285233 - need extra symbols to be exported to support CRL generation. Ch
ecking in for alexei volkov . r=nelson


git-svn-id: svn://10.0.0.236/trunk@170373 18797224-902f-48f8-a5cc-f745e15eee43
2005-03-08 07:08:48 +00:00
julien.pierre.bugs%sun.com
dd31c2d763 Move static functions out of certi.h header file and into crl.c source file, to remove warnings with gcc
git-svn-id: svn://10.0.0.236/trunk@169803 18797224-902f-48f8-a5cc-f745e15eee43
2005-02-25 00:54:29 +00:00
julien.pierre.bugs%sun.com
37edfe8363 Add comment for bug 243585
git-svn-id: svn://10.0.0.236/trunk@169702 18797224-902f-48f8-a5cc-f745e15eee43
2005-02-24 00:22:23 +00:00
julien.pierre.bugs%sun.com
761d5cc7c7 Fix for 243585 - add the ability to use CRL objects from RAM . r=nelson, neil.williams
git-svn-id: svn://10.0.0.236/trunk@169200 18797224-902f-48f8-a5cc-f745e15eee43
2005-02-15 06:26:43 +00:00
wchang0222%aol.com
53fa50ce06 Bugzilla bug 248435: declare the exported functions CERT_DecodeGeneralName
and CERT_EncodeGeneralName in the public header cert.h.  r=jpierre.
Modified Files: cert.h genname.h xconst.c


git-svn-id: svn://10.0.0.236/trunk@165153 18797224-902f-48f8-a5cc-f745e15eee43
2004-11-09 06:13:32 +00:00
wchang0222%aol.com
b4c8df8df4 Bugzilla bug 249284: removed a duplicate declaration of
CERT_DecodeDERCertificate. r=nelsonb. Thanks to Chris Newman
of Sun for the bug report.


git-svn-id: svn://10.0.0.236/trunk@158814 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-07 00:48:53 +00:00
gerv%gerv.net
43cb9e1492 Bug 236613: change to MPL/LGPL/GPL tri-license.
git-svn-id: svn://10.0.0.236/trunk@155484 18797224-902f-48f8-a5cc-f745e15eee43
2004-04-25 15:03:26 +00:00
nelsonb%netscape.com
a9d9ed95da Export cert functions that decode extensions and traverse decoded
extensions.  Bug 231881. r= relyea, wtc.


git-svn-id: svn://10.0.0.236/trunk@151989 18797224-902f-48f8-a5cc-f745e15eee43
2004-01-28 23:23:45 +00:00
wchang0222%aol.com
f2ad2c3faa Bugzilla bug 232380: deleted CERT_FindExpiredIssuer, which is dead code.
In cert_VerifyCertChain, make sure that subjectCert and issuerCert never
point to the same cert to prevent from destroying that cert twice.
r=jpierre,nelsonb.
Modified Files: certdb/cert.h certhigh/certvfy.c


git-svn-id: svn://10.0.0.236/trunk@151977 18797224-902f-48f8-a5cc-f745e15eee43
2004-01-28 21:51:10 +00:00
wchang0222%aol.com
b8a73710e4 Bugscape bug 54021: in CERT_FindSubjectKeyIDExtension, if PORT_NewArena
fails we should return SECFailure.  Document that the return values of
CERT_GetCommonName and NSS_CMSSignerInfo_GetSignerCommonName must be freed
with PORT_Free.  r=nelsonb.
Modified Files:
	certdb/alg1485.c certdb/cert.h certdb/certv3.c smime/cms.h
	smime/cmssiginfo.c


git-svn-id: svn://10.0.0.236/trunk@149951 18797224-902f-48f8-a5cc-f745e15eee43
2003-12-03 00:09:05 +00:00
wchang0222%aol.com
1048ab0991 Fixed a comment error. r=relyea.
git-svn-id: svn://10.0.0.236/trunk@149242 18797224-902f-48f8-a5cc-f745e15eee43
2003-11-13 16:21:46 +00:00
wchang0222%aol.com
7f3eb1098d Bugzilla bug 225373: the return value of CERT_NameToAscii must be freed
with PORT_Free.
Modified Files:
	cmd/lib/secutil.c cmd/selfserv/selfserv.c
	cmd/signver/pk7print.c cmd/strsclnt/strsclnt.c
	cmd/tstclnt/tstclnt.c lib/certdb/cert.h


git-svn-id: svn://10.0.0.236/trunk@149241 18797224-902f-48f8-a5cc-f745e15eee43
2003-11-13 16:10:45 +00:00
nelsonb%netscape.com
deea9f0bcc Rename get_oid_string to CERT_GetOidString and export it. Also, export
CERT_DestroyOidSequence.  bug 222568.  r=jpierre (for this portion).


git-svn-id: svn://10.0.0.236/trunk@148803 18797224-902f-48f8-a5cc-f745e15eee43
2003-11-04 01:48:39 +00:00
nelsonb%netscape.com
8426542fcd Eliminate redundant function declarations. Bug 208854. r=wchang0222
git-svn-id: svn://10.0.0.236/trunk@147958 18797224-902f-48f8-a5cc-f745e15eee43
2003-10-14 17:44:33 +00:00
nelsonb%netscape.com
22e603216c Move the declaration for CERT_CompareNameSpace from cert.h to genname.h
because it is a private function.  Change the interface for this
function so that it returns a SECStatus, unambiguously indicating the
success or failure of the name constraints test.  The function no
longer takes a list of cert subject names, instead, it takes a list
of cert pointers, and optionally outputs one of those pointers when
an error occurs.  This eliminates a cert reference leak.


git-svn-id: svn://10.0.0.236/trunk@144179 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-26 01:56:34 +00:00
nelsonb%netscape.com
691797151a Move declarations of NSS private functions for general names from cert.h
to genname.h, and eliminate declarations from cert.h that were also
in genname.h.  If we ever decide to make any of these functions public,
we can move their declarations back to cert.h.


git-svn-id: svn://10.0.0.236/trunk@143828 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-18 00:38:12 +00:00
nelsonb%netscape.com
5d15f38564 Make CERT_DecodeAVAValue take const inputs and detect NULL pointers.
Rewrite CERT_CompareAVA to compare the type OIDs first, and then if
the values are not of the same encoding, convert them before comparing.
Also, do comparisons of printableString encoding properly.  Bug 208649.


git-svn-id: svn://10.0.0.236/trunk@143826 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-17 23:44:14 +00:00
jpierre%netscape.com
151353c3d6 Fix for 201134 - race condition when verifying certs. Don't reset the value of nsCertType in CERTCertificate in the middle of the computation. r=nelsonb
git-svn-id: svn://10.0.0.236/trunk@141280 18797224-902f-48f8-a5cc-f745e15eee43
2003-04-17 00:35:21 +00:00
relyea%netscape.com
65773f5b59 Bug 142867: pk12util needs to be able to import intermediate CA's into hw
tokens.


git-svn-id: svn://10.0.0.236/trunk@140152 18797224-902f-48f8-a5cc-f745e15eee43
2003-03-24 19:09:08 +00:00
wtc%netscape.com
37a5a7c29e Bug 183612: added some comments.
git-svn-id: svn://10.0.0.236/trunk@135609 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-24 02:25:36 +00:00
wtc%netscape.com
9bb9b998ad Bug 183612: renamed some new functions to be consistent with existing
function names containing SubjectKey and PublicKey.  Moved internal
functions to private headers and use the lowercase cert_ prefix for the
internal functions for subject key ID mapping hash table. r=nelsonb.


git-svn-id: svn://10.0.0.236/trunk@135480 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-19 00:26:34 +00:00
wtc%netscape.com
688bbc9eba Bug 183612: added support for looking up a cert by subject key ID and
creating a CMS recipient info from a subject key ID.  The patch was
contributed by Javi Delgadillo <javi@netscape.com>. r=relyea, wtc.
Modified Files:
	certdb/cert.h certdb/certdb.c certdb/certdb.h certdb/certv3.c
	certdb/stanpcertdb.c nss/nss.def nss/nssinit.c
	pk11wrap/pk11cert.c pk11wrap/pk11func.h pk11wrap/secmod.h
	pki/pki3hack.c smime/cms.h smime/cmslocal.h smime/cmspubkey.c
	smime/cmsrecinfo.c smime/cmssiginfo.c smime/cmst.h
	smime/smime.def


git-svn-id: svn://10.0.0.236/trunk@135377 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-17 01:39:46 +00:00
relyea%netscape.com
e6e68328f4 Make SubjectAltEncode a public function. Fixes build breakage in Linux
git-svn-id: svn://10.0.0.236/trunk@135039 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-10 17:41:16 +00:00
jpierre%netscape.com
fcdf6d31a0 Patch for 180228 - export CRL cache flush API . r=wtc
git-svn-id: svn://10.0.0.236/trunk@133887 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-15 05:04:05 +00:00