169 Commits

Author SHA1 Message Date
alexei.volkov.bugs%sun.com
6d92b1b007 508467 - libpkix ocsp checker should use "date" argument to obtain the time for cert validity verification. r=nelson
git-svn-id: svn://10.0.0.236/trunk@257952 18797224-902f-48f8-a5cc-f745e15eee43
2009-08-05 22:19:44 +00:00
christophe.ravel.bugs%sun.com
18255f226b Bug 507482 - NSS 3.12.3 (and later) doesn't build on AIX 5.1
r=nelson


git-svn-id: svn://10.0.0.236/trunk@257901 18797224-902f-48f8-a5cc-f745e15eee43
2009-07-31 18:35:44 +00:00
nelson%bolyard.com
35ecd691af Bug 504405: pkix_pl_CrlDp_Create will fail on alloc success because of a missing !
Bug 504408: pkix_pl_CrlDp_Create will always fail if dp->distPointType != generalName
Bugs found by Coverity.  Patches by Timeless <timeless@bemail.org>, r=nelson


git-svn-id: svn://10.0.0.236/trunk@257712 18797224-902f-48f8-a5cc-f745e15eee43
2009-07-15 22:38:23 +00:00
nelson%bolyard.com
2bafc7f497 Bug 504398: pkix_pl_AIAMgr_GetHTTPCerts could crash if SEC_GetRegisteredHttpClient fails
Bugs found by Coverity.  Patch by Timeless <timeless@bemail.org>, r=nelson


git-svn-id: svn://10.0.0.236/trunk@257711 18797224-902f-48f8-a5cc-f745e15eee43
2009-07-15 22:36:45 +00:00
alexei.volkov.bugs%sun.com
17a51c6b07 491174 - CERT_PKIXVerifyCert reports wrong error code when EE cert is expired. r=nelson
git-svn-id: svn://10.0.0.236/trunk@257437 18797224-902f-48f8-a5cc-f745e15eee43
2009-06-08 21:13:07 +00:00
nelson%bolyard.com
22bb9d235c Bug 489287: Resolve a few remaining issues with NSS's new revocation flags
sr=rrelyea


git-svn-id: svn://10.0.0.236/trunk@257053 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-24 19:13:51 +00:00
alexei.volkov.bugs%sun.com
c1d79e7842 489188 - object/memory leak in libpkix.r=nelson
git-svn-id: svn://10.0.0.236/trunk@256989 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-20 21:19:41 +00:00
alexei.volkov.bugs%sun.com
761a7cd367 485155 - NSS_ENABLE_PKIX_VERIFY=1 causes sec_error_unknown_issuer errors. r=nelson
git-svn-id: svn://10.0.0.236/trunk@256981 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-20 05:17:48 +00:00
nelson%bolyard.com
8c334e8aec Bug 321755: (CRLDP) implement crlDistributionPoint extension in libPKIX
New file contributed by Alexei Volkov <alexei.volkov@sun.com>.


git-svn-id: svn://10.0.0.236/trunk@256961 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-18 06:31:27 +00:00
alexei.volkov.bugs%sun.com
6872bf2d05 321755 - (CRLDP) implement crlDistributionPoint extension in libPKIX. Patch partially provided by Julien. r=nelson.
git-svn-id: svn://10.0.0.236/trunk@256960 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-18 05:15:58 +00:00
julien.pierre.boogz%sun.com
8386868864 Fix for bug 321755 . Changes in CRL cache to implement CRL DP. Work in progress, not reviewed, per Nelson and Alexei.
git-svn-id: svn://10.0.0.236/trunk@256958 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-17 22:46:54 +00:00
alexei.volkov.bugs%sun.com
a0cf8d9a32 Fix for tinderbox. Bug 487884.
git-svn-id: svn://10.0.0.236/trunk@256912 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-14 16:13:30 +00:00
alexei.volkov.bugs%sun.com
ca077b16d3 487884 - object leak in libpkix library upon error. r=nelson
git-svn-id: svn://10.0.0.236/trunk@256910 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-14 07:30:50 +00:00
alexei.volkov.bugs%sun.com
eed434c379 391434 - avoid multiple encoding/decoding of PKIX_PL_OID to and from ascii string. r=nelson.
git-svn-id: svn://10.0.0.236/trunk@256908 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-14 02:04:08 +00:00
alexei.volkov.bugs%sun.com
2c68347e9f 487962 - pkix_pl_HttpDefaultClient leaks a buffer upon an error.r=nelson
git-svn-id: svn://10.0.0.236/trunk@256901 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-12 16:28:54 +00:00
alexei.volkov.bugs%sun.com
5de65fee9a Fix tinderbox(a debug line from libpkix was added to downloaded script): allow libpkix to print warnings only in debug mode and only into stderr.
git-svn-id: svn://10.0.0.236/trunk@256892 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-11 04:37:53 +00:00
alexei.volkov.bugs%sun.com
f1b774f239 408903 - CERT_PKIXVerifyCert should do revocation checking of the leaf cert. r=nelson
git-svn-id: svn://10.0.0.236/trunk@256890 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-10 23:56:09 +00:00
alexei.volkov.bugs%sun.com
e2aa2b9956 Additional checking to fix tinderbox: 420991 - libPKIX returns wrong NSS error code.
git-svn-id: svn://10.0.0.236/trunk@256887 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-10 22:22:43 +00:00
julien.pierre.boogz%sun.com
f454bd8774 Fix for bug 487736 . Don't call DER_DecodeTimeChoice on PRTime. r=alexei
git-svn-id: svn://10.0.0.236/trunk@256884 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-10 21:59:31 +00:00
alexei.volkov.bugs%sun.com
0cd21ba33c 420991 - libPKIX returns wrong NSS error code. r=nelson
git-svn-id: svn://10.0.0.236/trunk@256883 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-10 21:44:14 +00:00
alexei.volkov.bugs%sun.com
4fe8774e05 473944 - Trust anchor is not trusted when requireFreshInfo flag is set. r=nelson
git-svn-id: svn://10.0.0.236/trunk@256790 18797224-902f-48f8-a5cc-f745e15eee43
2009-04-01 20:33:34 +00:00
alexei.volkov.bugs%sun.com
352176751d 482795 - Avoid time encoding and decoding inside of pkix_pl_date object. r=nelson
git-svn-id: svn://10.0.0.236/trunk@256776 18797224-902f-48f8-a5cc-f745e15eee43
2009-03-31 20:54:44 +00:00
kaie%kuix.de
0a021ed284 Bug 485970 - Remove DEBUG_kaie code testing code which doesn't build any more
r=alexei


git-svn-id: svn://10.0.0.236/trunk@256757 18797224-902f-48f8-a5cc-f745e15eee43
2009-03-30 22:47:27 +00:00
nelson%bolyard.com
f241b9d1c0 Bug 485370: crash, bus error due to unaligned access in pkix_pl_OcspResponse_Create
r=rrelyea


git-svn-id: svn://10.0.0.236/trunk@256731 18797224-902f-48f8-a5cc-f745e15eee43
2009-03-28 01:06:35 +00:00
alexei.volkov.bugs%sun.com
da61c4d5ae 484466 - sec_error_invalid_args with NSS_ENABLE_PKIX_VERIFY=1. r=nelson
git-svn-id: svn://10.0.0.236/trunk@256630 18797224-902f-48f8-a5cc-f745e15eee43
2009-03-23 22:56:01 +00:00
nelson%bolyard.com
8d1ad43eb2 Bug 479029: OCSP Response signature cert found invalid if issuer is trusted
only for SSL.  r=rrelyea,alexei


git-svn-id: svn://10.0.0.236/trunk@256460 18797224-902f-48f8-a5cc-f745e15eee43
2009-03-06 01:27:55 +00:00
alexei.volkov.bugs%sun.com
b7d08bc003 480257 - OCSP fails when response > 1K Byte. r=nelson
git-svn-id: svn://10.0.0.236/trunk@256444 18797224-902f-48f8-a5cc-f745e15eee43
2009-03-04 18:19:53 +00:00
alexei.volkov.bugs%sun.com
607b9260ed 444404 - libpkix reports "unknown issuer" for nearly all certificate errors. r=nelson
git-svn-id: svn://10.0.0.236/trunk@256345 18797224-902f-48f8-a5cc-f745e15eee43
2009-02-27 18:26:12 +00:00
alexei.volkov.bugs%sun.com
b7399ebbc1 479329 - extra decref in PKIX_PL_Cert_GetExtendedKeyUsage leads to dangling pointer. r=nelson
git-svn-id: svn://10.0.0.236/trunk@256259 18797224-902f-48f8-a5cc-f745e15eee43
2009-02-20 05:31:41 +00:00
alexei.volkov.bugs%sun.com
032c3a2279 [Bug 478931] object leak in pkix_List_MergeLists function. r=nelson
git-svn-id: svn://10.0.0.236/trunk@256244 18797224-902f-48f8-a5cc-f745e15eee43
2009-02-17 23:22:47 +00:00
nelson%bolyard.com
80b9a23230 fix const errors in NSS for bug #469944, r=wtc
git-svn-id: svn://10.0.0.236/trunk@256231 18797224-902f-48f8-a5cc-f745e15eee43
2009-02-16 03:47:21 +00:00
alexei.volkov.bugs%sun.com
cc1cfc0e4d 477777 - Selfserv crashed in client/server tests. r=nelson
git-svn-id: svn://10.0.0.236/trunk@256194 18797224-902f-48f8-a5cc-f745e15eee43
2009-02-12 00:23:41 +00:00
alexei.volkov.bugs%sun.com
88f45e0716 473944 - Trust anchor is not trusted when requireFreshInfo flag is set. r=nelson.
git-svn-id: svn://10.0.0.236/trunk@256163 18797224-902f-48f8-a5cc-f745e15eee43
2009-02-09 18:53:00 +00:00
alexei.volkov.bugs%sun.com
11f533092d 475454 - vfychain requireFreshInfo incorrectly claims "revoked". r=nelson
git-svn-id: svn://10.0.0.236/trunk@256036 18797224-902f-48f8-a5cc-f745e15eee43
2009-02-02 23:14:42 +00:00
alexei.volkov.bugs%sun.com
9c151e39ec Fix for tests failures caused by integration of the patch for bug 461547.
git-svn-id: svn://10.0.0.236/trunk@256012 18797224-902f-48f8-a5cc-f745e15eee43
2009-02-01 09:15:32 +00:00
alexei.volkov.bugs%sun.com
49a18c3067 461547 - delay child certificate signature check until after trusted anchor is found. r=nelson
git-svn-id: svn://10.0.0.236/trunk@256005 18797224-902f-48f8-a5cc-f745e15eee43
2009-01-31 00:28:41 +00:00
alexei.volkov.bugs%sun.com
64f72c6abd 473365 - Incompatible argument in pkix_validate.c r=nelson
git-svn-id: svn://10.0.0.236/trunk@255970 18797224-902f-48f8-a5cc-f745e15eee43
2009-01-29 00:44:43 +00:00
alexei.volkov.bugs%sun.com
e10653139e Bug 472319 - Vfychain validates chain even if revoked certificate. r=nelson
git-svn-id: svn://10.0.0.236/trunk@255833 18797224-902f-48f8-a5cc-f745e15eee43
2009-01-16 01:02:10 +00:00
alexei.volkov.bugs%sun.com
13ea7f0f49 additional changes to patch for bug 397805. Fix function declaration.
git-svn-id: svn://10.0.0.236/trunk@255800 18797224-902f-48f8-a5cc-f745e15eee43
2009-01-12 23:51:51 +00:00
alexei.volkov.bugs%sun.com
3b3e52ad31 Bug 397805 - Avoid revalidating the whole cached chain for new cert KU and EKU. r=nelson
git-svn-id: svn://10.0.0.236/trunk@255797 18797224-902f-48f8-a5cc-f745e15eee43
2009-01-12 22:57:22 +00:00
alexei.volkov.bugs%sun.com
d526a4149b 472291 - crash in libpkix object leak tests due to null pointer dereferencing in pkix_build.c. r=nelson
git-svn-id: svn://10.0.0.236/trunk@255735 18797224-902f-48f8-a5cc-f745e15eee43
2009-01-07 00:08:47 +00:00
alexei.volkov.bugs%sun.com
d73995803a 470070 - Multiple object leaks reported by tinderbox. r=nelson
git-svn-id: svn://10.0.0.236/trunk@255597 18797224-902f-48f8-a5cc-f745e15eee43
2008-12-19 21:53:35 +00:00
wtc%google.com
60fc6b64f7 Bug 466736: removed dead NSS_USE_64 code. (The NSS_USE_64 macro is only
defined and used in the lib/freebl directory.)  r=alexei.volkov.


git-svn-id: svn://10.0.0.236/trunk@255248 18797224-902f-48f8-a5cc-f745e15eee43
2008-11-27 15:09:02 +00:00
alexei.volkov.bugs%sun.com
1cada56cdf 205434 - Fully implement new libPKIX cert verification API from bug 294531. Remove obsolite files.
git-svn-id: svn://10.0.0.236/trunk@255217 18797224-902f-48f8-a5cc-f745e15eee43
2008-11-26 20:14:37 +00:00
wtc%google.com
c1c00513fe Bug 390527: include "prprf.h" for PR_snprintf, otherwise the "implicit
function declaration" warnings break the Linux build.  TBR=alexei.volkov.
Modified Files:
	pkix_error.c pkix_logger.c


git-svn-id: svn://10.0.0.236/trunk@255140 18797224-902f-48f8-a5cc-f745e15eee43
2008-11-20 03:32:20 +00:00
alexei.volkov.bugs%sun.com
4d83b9e468 390527 - get rid of pkixErrorMsg variable in PKIX_Error. r=nelson
git-svn-id: svn://10.0.0.236/trunk@255137 18797224-902f-48f8-a5cc-f745e15eee43
2008-11-20 00:38:14 +00:00
alexei.volkov.bugs%sun.com
5281c4db76 439169 - pkix_List_Destroy destroys by recursion, one level per list item. r=nelson
git-svn-id: svn://10.0.0.236/trunk@255006 18797224-902f-48f8-a5cc-f745e15eee43
2008-11-12 18:58:20 +00:00
alexei.volkov.bugs%sun.com
a9764da09f Additional fix for bug 432260. r=nelson
git-svn-id: svn://10.0.0.236/trunk@254888 18797224-902f-48f8-a5cc-f745e15eee43
2008-11-05 21:07:48 +00:00
alexei.volkov.bugs%sun.com
6e68c5d6c6 205434 - Fully implement new libPKIX cert verification API from bug 294531. Fix for hp-ux build failure. r=nelson.
git-svn-id: svn://10.0.0.236/trunk@254859 18797224-902f-48f8-a5cc-f745e15eee43
2008-11-03 21:27:54 +00:00
alexei.volkov.bugs%sun.com
742648c035 205434 - Fully implement new libPKIX cert verification API from bug 294531. r=nelson
git-svn-id: svn://10.0.0.236/trunk@254847 18797224-902f-48f8-a5cc-f745e15eee43
2008-11-01 00:50:17 +00:00