465 Commits

Author SHA1 Message Date
wtc%google.com
20f531e00c Bug 507359: add SSL_ERROR_FEATURE_NOT_SUPPORTED_FOR_VERSION. Update the
error message for SSL_ERROR_HANDSHAKE_NOT_COMPLETED.  r=bsmith,rrelyea.
Modified Files:
	SSLerrs.h sslerr.h sslinfo.c


git-svn-id: svn://10.0.0.236/trunk@264025 18797224-902f-48f8-a5cc-f745e15eee43
2012-07-13 00:51:57 +00:00
gerv%gerv.net
b7de83473a Bug 754139 - update license to MPL 2. r=bsmith.
git-svn-id: svn://10.0.0.236/trunk@264015 18797224-902f-48f8-a5cc-f745e15eee43
2012-07-04 15:21:49 +00:00
wtc%google.com
92d5d06c81 Bug 681065: Rename DTLS_GetTimeout to DTLS_GetHandshakeTimeout. r=ekr.
Modified Files:
	dtlscon.c ssl.def ssl.h


git-svn-id: svn://10.0.0.236/trunk@263966 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-19 21:56:10 +00:00
wtc%google.com
7ecfde73d0 Bug 764649: Always use the PORT_ZNew macro to create sslSessionID objects.
r=emaldona.
Modified Files:
	sslcon.c sslsnce.c


git-svn-id: svn://10.0.0.236/trunk@263947 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-14 19:04:59 +00:00
wtc%google.com
455441c0ab Bug 764649: Declare ssl_DupSocket as static because it is only used in
sslsock.c.  r=emaldona.
Modified Files:
	sslimpl.h sslsock.c


git-svn-id: svn://10.0.0.236/trunk@263946 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-14 19:03:29 +00:00
rrelyea%redhat.com
528d2c4c19 Bug 475578 - Implement Extended DSA as defined in FIPS 186-3 (DSS)
r wtc Patches 1 and 4 in the original bug (lib/softoken lib/freebl, and lib/ssl)


git-svn-id: svn://10.0.0.236/trunk@263930 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-12 16:39:03 +00:00
wtc%google.com
59a2cacd1c Bug 762763: Update the SSL trace message and the comment in the SSL key log
file. The patch is contributed by Adam Langley <agl@chromium.org>.  r=wtc.


git-svn-id: svn://10.0.0.236/trunk@263929 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-12 00:29:34 +00:00
emaldona%redhat.com
aec522fd6a Bug 745281 - Provide the option of disabling SSL PKCS #11 bypass at build time, r=wtc
git-svn-id: svn://10.0.0.236/trunk@263927 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-11 02:38:30 +00:00
wtc%google.com
e12e542966 Bug 762763: Export SSL key logging in normal builds. Move SSL key logging
out from behind the TRACE and DEBUG defines and add a new CLIENT_RANDOM
format to support ECDHE-RSA key agreement (and others). The patch is
contributed by Adam Langley <agl@chromium.org>.  r=wtc.
Modified Files:
	ssl3con.c sslsock.c


git-svn-id: svn://10.0.0.236/trunk@263919 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-08 02:59:44 +00:00
wtc%google.com
678de9d175 Bug 737178: Implement RFC 5764 (DTLS-SRTP). Add the SSL_SetSRTPCiphers and
SSL_GetSRTPCipher functions.  The patch is contributed by Eric Rescorla
<ekr@rtfm.com>.  r=wtc,rsleevi.
Modified Files:
	ssl.h ssl3ext.c sslimpl.h sslproto.h sslsock.c sslt.h


git-svn-id: svn://10.0.0.236/trunk@263911 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-07 02:06:19 +00:00
wtc%google.com
3b82024c06 Bug 751793: NSS_FindCertKEAType and ssl_FindCertKEAType are the same.
Remove nsskea.c and rename the ssl_FindCertKEAType function in sslsecur.c
to NSS_FindCertKEAType.  r=emaldona.
Modified Files:
	manifest.mn sslimpl.h sslsecur.c
Removed Files:
	nsskea.c


git-svn-id: svn://10.0.0.236/trunk@263854 18797224-902f-48f8-a5cc-f745e15eee43
2012-05-24 20:34:51 +00:00
wtc%google.com
c27a55546b Bug 565047: Remove the unused IV members of ssl3SidKeys and
SSLWrappedSymWrappingKey.  r=rrelyea.
Modified Files:
	sslimpl.h sslsnce.c


git-svn-id: svn://10.0.0.236/trunk@263804 18797224-902f-48f8-a5cc-f745e15eee43
2012-05-08 23:08:32 +00:00
wtc%google.com
afccbc5bc3 Bug 743097: Update stale comments for PK11_DefaultArray and
ssl3_DecodeError.  r=emaldona.
Modified Files:
	lib/pk11wrap/pk11slot.c lib/ssl/ssl3con.c


git-svn-id: svn://10.0.0.236/trunk@263796 18797224-902f-48f8-a5cc-f745e15eee43
2012-05-08 00:24:08 +00:00
wtc%google.com
025fac7cf1 Bug 742162: Allow CertificateRequest to have an empty
certificate_authorities list.  The patch is contributed by Eric Rescorla
<ekr@rtfm.com>.  r=wtc,bsmith,rrelyea.
Modified Files:
	ssl3con.c sslerr.h


git-svn-id: svn://10.0.0.236/trunk@263794 18797224-902f-48f8-a5cc-f745e15eee43
2012-05-08 00:10:56 +00:00
emaldona%redhat.com
2352f8d9be Bug 750809 - Remove unwanted include of freebl-private ec.h from ssl3ecc.c, a=emaldona, r=wtc
git-svn-id: svn://10.0.0.236/trunk@263776 18797224-902f-48f8-a5cc-f745e15eee43
2012-05-01 20:15:48 +00:00
wtc%google.com
078da745a4 Bug 749841: Reject Diffie-Hellman generators and public values equal to
zero or one.  The bug was reported by Nikos Mavrogiannopoulos.  The patch
was contributed by Adam Langley <agl@chromium.org>.  r=wtc.


git-svn-id: svn://10.0.0.236/trunk@263762 18797224-902f-48f8-a5cc-f745e15eee43
2012-04-27 23:38:13 +00:00
gerv%gerv.net
f465fa7d7e Bug 716563 - update license to MPL 2. r=rrelyea.
git-svn-id: svn://10.0.0.236/trunk@263750 18797224-902f-48f8-a5cc-f745e15eee43
2012-04-25 14:50:19 +00:00
kaie%kuix.de
508d866339 Change version number to 3.14.0.0 Beta, r=nss-dev
git-svn-id: svn://10.0.0.236/trunk@263746 18797224-902f-48f8-a5cc-f745e15eee43
2012-04-24 16:54:34 +00:00
wtc%google.com
f218517d65 Bug 540535: Don't call ss->sec.uncache() if the SSL_NO_CACHE option is
enabled.  Patch contributed by Alexei Volkov <alvolkov.bgs@gmail.com> and
Eric Rescorla <ekr@rtfm.com>.  r=wtc.


git-svn-id: svn://10.0.0.236/trunk@263646 18797224-902f-48f8-a5cc-f745e15eee43
2012-04-06 01:30:35 +00:00
wtc%google.com
93fdc28df8 Bug 681065: rename dtls1con.c to dtlscon.c.
Modified Files:
	manifest.mn
Added Files:
	dtlscon.c
Removed Files:
	dtls1con.c


git-svn-id: svn://10.0.0.236/trunk@263645 18797224-902f-48f8-a5cc-f745e15eee43
2012-04-06 00:34:25 +00:00
wtc%google.com
0d67eefad0 Bug 681065: export the new DTLS_GetTimeout function.
git-svn-id: svn://10.0.0.236/trunk@263640 18797224-902f-48f8-a5cc-f745e15eee43
2012-04-05 01:43:30 +00:00
wtc%google.com
39e8820abe Bug 681065: Implement DTLS (Datagram TLS) 1.0. The patch is contributed by
Eric Rescorla <ekr@rtfm.com>.  r=wtc.
Modified Files:
	SSLerrs.h derive.c manifest.mn ssl.def ssl.h ssl3con.c
	ssl3gthr.c ssl3prot.h sslcon.c ssldef.c sslerr.h sslgathr.c
	sslimpl.h sslproto.h sslsecur.c sslsock.c sslt.h
Added Files:
	dtls1con.c


git-svn-id: svn://10.0.0.236/trunk@263637 18797224-902f-48f8-a5cc-f745e15eee43
2012-04-04 03:37:07 +00:00
wtc%google.com
1d16428221 Bug 565047: Block export cipher suites when TLS 1.1 is negotiated. The
patch is contributed by Brian Smith <bsmith@mozilla.com>.  r=wtc.
Modified Files:
	SSLerrs.h ssl3con.c sslerr.h


git-svn-id: svn://10.0.0.236/trunk@263634 18797224-902f-48f8-a5cc-f745e15eee43
2012-04-03 02:30:54 +00:00
wtc%google.com
352352e81e Bug 697910: ssl3_HandleHandshake should handle SECWouldBlock from
ssl3_HandleHandshakeMessage when the handshake message spans multiple TLS
records.  Patch by Brian Smith <bsmith@mozilla.com>.  r=wtc.


git-svn-id: svn://10.0.0.236/trunk@263633 18797224-902f-48f8-a5cc-f745e15eee43
2012-04-03 02:00:14 +00:00
wtc%google.com
b81f872bd2 Change the NSS version on the trunk to 3.13.5 Beta.
Modified Files:
	lib/nss/nss.h lib/softoken/softkver.h lib/ssl/ssl.def
	lib/util/nssutil.h


git-svn-id: svn://10.0.0.236/trunk@263621 18797224-902f-48f8-a5cc-f745e15eee43
2012-03-31 02:02:35 +00:00
wtc%google.com
ca681fddad Bug 571722: merge with the "Implement SSL Version Range API [v5]" patch by
Brian Smith <bsmith@mozilla.com>.  Comment changes only.  Export
SSL_VersionRangeGetDefault, SSL_VersionRangeGetSupported, and
SSL_VersionRangeSetDefault.  r=wtc.
Modified Files:
	ssl.def ssl.h ssl3con.c sslcon.c sslimpl.h sslsock.c


git-svn-id: svn://10.0.0.236/trunk@263579 18797224-902f-48f8-a5cc-f745e15eee43
2012-03-18 00:31:20 +00:00
wtc%google.com
e32a1aeb5a Bug 571722: add the SSLProtocolVariant enum type to indicate the byte
stream and datagram variants of SSL/TLS.  Add an SSLProtocolVariant
argument to the version range functions that don't take an fd.  The patch
is written by Brian Smith <bsmith@mozilla.com> and Eric Rescorla
<ekr@rtfm.com>.  r=wtc.
Modified Files:
	ssl.h ssl3con.c sslimpl.h sslsock.c sslt.h


git-svn-id: svn://10.0.0.236/trunk@263575 18797224-902f-48f8-a5cc-f745e15eee43
2012-03-16 01:23:55 +00:00
wtc%google.com
ca327be5b5 Bug 565047: have ssl3_HandleRecord send a bad_record_mac alert instead of
decode_error when the cipher text is shorter than an IV block.  Reduce
MAX_IV_LENGTH to 24 to match the size of IVs in ssl3SidKeys.  r=rrelyea.
Modified Files:
	ssl3con.c sslimpl.h


git-svn-id: svn://10.0.0.236/trunk@263570 18797224-902f-48f8-a5cc-f745e15eee43
2012-03-14 23:02:01 +00:00
wtc%google.com
170761bafa Bug 507359: remove a superfluous "if" in SSL_ExportKeyingMaterial.
Suggested by Adam Langley.


git-svn-id: svn://10.0.0.236/trunk@263567 18797224-902f-48f8-a5cc-f745e15eee43
2012-03-14 00:56:43 +00:00
wtc%google.com
55b2d61236 Bug 565047: Implement TLS 1.1, except for restrictions on export cipher
suites.  The patch is written by Brian Smith <bsmith@mozilla.com>.  r=wtc.
Modified Files:
	ssl3con.c sslimpl.h sslproto.h


git-svn-id: svn://10.0.0.236/trunk@263561 18797224-902f-48f8-a5cc-f745e15eee43
2012-03-13 02:39:11 +00:00
wtc%google.com
bb548cd810 Bug 734534: Fix a buffer length bug and nits in the next protocol
negotiation (NPN) functions.  r=agl.
Modified Files:
	ssl3ext.c sslsock.c


git-svn-id: svn://10.0.0.236/trunk@263560 18797224-902f-48f8-a5cc-f745e15eee43
2012-03-12 19:14:12 +00:00
wtc%google.com
c40d150f71 Bug 571722: Implement SSL Version Range API. The patch is written by
Brian Smith <bsmith@mozilla.com>.  r=wtc.
Modified Files:
	SSLerrs.h ssl.def ssl.h ssl3con.c sslcon.c sslerr.h sslgathr.c
	sslimpl.h sslproto.h sslsock.c sslt.h


git-svn-id: svn://10.0.0.236/trunk@263554 18797224-902f-48f8-a5cc-f745e15eee43
2012-03-11 04:32:35 +00:00
wtc%google.com
72837f0506 Bug 507359: add the hasContext parameter to SSL_ExportKeyingMaterial
to support both nonexistent and zero-length context unambiguously.
The patch is contributed by Douglas Stebila <douglas@stebila.ca>.  r=wtc.
Modified Files:
	ssl.h sslinfo.c


git-svn-id: svn://10.0.0.236/trunk@263543 18797224-902f-48f8-a5cc-f745e15eee43
2012-03-10 02:34:45 +00:00
wtc%google.com
ade9335c30 Bug 507359: Implement TLS keying material exporters. The patch is written
by Douglas Stebila <douglas@stebila.ca> and improved by Adam Langley
<agl@chromium.org>.  r=wtc.
Modified Files:
	ssl.def ssl.h ssl3con.c sslimpl.h sslinfo.c


git-svn-id: svn://10.0.0.236/trunk@263533 18797224-902f-48f8-a5cc-f745e15eee43
2012-03-07 01:27:40 +00:00
wtc%google.com
35ee8cc42f Bug 732258: ssl3_FinishHandshake cleanup. Fix the unused variable compiler
warning about 'rv' and simplify the conditional expression around the
ss->sec.cache call.  r=bsmith.


git-svn-id: svn://10.0.0.236/trunk@263520 18797224-902f-48f8-a5cc-f745e15eee43
2012-03-06 02:23:25 +00:00
wtc%google.com
eae9177a84 Bug 732630: Prefer SSL_RSA_WITH_RC4_128_SHA over SSL_RSA_WITH_RC4_128_MD5.
The change to the suiteInfo table in sslinfo.c is not necessary but is
made to keep that table in roughly the same order as the other two tables
in ssl3con.c and sslenum.c.  r=rrelyea.
Modified Files:
	ssl3con.c sslenum.c sslinfo.c


git-svn-id: svn://10.0.0.236/trunk@263519 18797224-902f-48f8-a5cc-f745e15eee43
2012-03-06 00:26:31 +00:00
kaie%kuix.de
837ba973da Bug 727691, SSL_InvalidateSession crashes if session cache was disabled (edit), Patch contribute by Julien Pierre, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@263508 18797224-902f-48f8-a5cc-f745e15eee43
2012-03-01 18:36:35 +00:00
wtc%google.com
e67e96fa34 Bug 728919: Fix clang warning about equality comparison with extraneous
parentheses.  The patch is contributed by Nico Weber <thakis@chromium.org>.
r=wtc.


git-svn-id: svn://10.0.0.236/trunk@263505 18797224-902f-48f8-a5cc-f745e15eee43
2012-03-01 01:58:22 +00:00
wtc%google.com
c4ffa157f5 Bug 729380: add an emacs mode line to make mxr.mozilla.org display tabs
correctly.  Fix variable declarations in lib/ssl/ssl3con.c to not start
from column 0, which would confuse cvs diff -p.  r=kaie.


git-svn-id: svn://10.0.0.236/trunk@263475 18797224-902f-48f8-a5cc-f745e15eee43
2012-02-23 00:13:23 +00:00
kaie%kuix.de
8684f22723 Bug 713410, move variable declaration, r=jst, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@263438 18797224-902f-48f8-a5cc-f745e15eee43
2012-02-17 09:50:04 +00:00
kaie%kuix.de
6c980c7018 Bug 726315, followup from bug 542832, Patch contributed by Brian Smith, r=kaie
git-svn-id: svn://10.0.0.236/trunk@263415 18797224-902f-48f8-a5cc-f745e15eee43
2012-02-15 21:52:08 +00:00
kaie%kuix.de
01e83ecd8d Bug 726588, attempted tinderbox bustage fix for bug 542832. no review yet. will backout if there's no review by tomorrow.
git-svn-id: svn://10.0.0.236/trunk@263394 18797224-902f-48f8-a5cc-f745e15eee43
2012-02-13 17:19:40 +00:00
kaie%kuix.de
24031fa098 Bug 542832 - SSL_RestartHandshakeAfterServerCert is broken, patch by Brian Smith, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@263387 18797224-902f-48f8-a5cc-f745e15eee43
2012-02-11 13:20:53 +00:00
kaie%kuix.de
f1f6b33c41 Bug 542832 - SSL_RestartHandshakeAfterServerCert is broken, patch by Brian Smith, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@263386 18797224-902f-48f8-a5cc-f745e15eee43
2012-02-11 13:03:08 +00:00
kaie%kuix.de
a80bdaa107 Bug 542832 - SSL_RestartHandshakeAfterServerCert is broken, patch by Brian Smith, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@263385 18797224-902f-48f8-a5cc-f745e15eee43
2012-02-11 12:58:48 +00:00
kaie%kuix.de
f0bd270bae Bug 542832 - SSL_RestartHandshakeAfterServerCert is broken, patch by Brian Smith, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@263384 18797224-902f-48f8-a5cc-f745e15eee43
2012-02-11 12:58:47 +00:00
kaie%kuix.de
1d479025ca Bug 542832 - SSL_RestartHandshakeAfterServerCert is broken, patch by Brian Smith, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@263383 18797224-902f-48f8-a5cc-f745e15eee43
2012-02-11 12:57:28 +00:00
kaie%kuix.de
9d33576904 Bug 542832 - SSL_RestartHandshakeAfterServerCert is broken, patch by Brian Smith, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@263382 18797224-902f-48f8-a5cc-f745e15eee43
2012-02-11 12:55:58 +00:00
wtc%google.com
10830da36d Bug 718554: SSL_ForceHandshake returns wrong positive results after sending
pending data.  The patch is by Brian Smith <bsmith@mozilla.com>.  r=wtc.


git-svn-id: svn://10.0.0.236/trunk@263294 18797224-902f-48f8-a5cc-f745e15eee43
2012-01-22 01:14:14 +00:00
bsmith%mozilla.com
9b720db9f7 Bug 700516: Remove SSL2 support for SSL_RestartHandshakeAfterServerCert and SSL_RestartHandshakeAfterCertReq, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@263089 18797224-902f-48f8-a5cc-f745e15eee43
2011-11-19 21:58:21 +00:00