107 Commits

Author SHA1 Message Date
julien.pierre.bugs%sun.com
56763cafe5 Fix for bug 337789 . PK11_FindKeyByAnyCert doe snot work if softoken is in FIPS140-2 mode. r=wtchang, rrelyea, nelson
git-svn-id: svn://10.0.0.236/trunk@196609 18797224-902f-48f8-a5cc-f745e15eee43
2006-05-15 23:51:01 +00:00
nelson%bolyard.com
75c86f6174 Eliminate duplicated header files in cmd/SSLsample. Bug 332633.
r=julien.pierre
Modified Files: SSLsample/client.mn SSLsample/server.mn lib/manifest.mn
Removed Files:  SSLsample/NSPRerrs.h SSLsample/SECerrs.h SSLsample/SSLerrs.h


git-svn-id: svn://10.0.0.236/trunk@193477 18797224-902f-48f8-a5cc-f745e15eee43
2006-04-04 01:56:27 +00:00
nelson%bolyard.com
cfbcd913d7 Define alerts and error codes for TLS Hello extensions. Bug 226271.
r=julien.pierre


git-svn-id: svn://10.0.0.236/trunk@193468 18797224-902f-48f8-a5cc-f745e15eee43
2006-04-04 00:32:27 +00:00
neil.williams%sun.com
564d2724b7 bug 245518 r=nelson, fix for p12 files encoded with null PWs
git-svn-id: svn://10.0.0.236/trunk@188775 18797224-902f-48f8-a5cc-f745e15eee43
2006-02-02 20:26:03 +00:00
alexei.volkov.bugs%sun.com
f2211c150e [Bug 325307] infinite loop in SECU_FindCrlIssuer. r=julien
git-svn-id: svn://10.0.0.236/trunk@188734 18797224-902f-48f8-a5cc-f745e15eee43
2006-02-02 02:45:02 +00:00
julien.pierre.bugs%sun.com
cd9e48019f Remove dead files. r=wtchang
git-svn-id: svn://10.0.0.236/trunk@184121 18797224-902f-48f8-a5cc-f745e15eee43
2005-11-04 00:48:41 +00:00
nelsonb%netscape.com
f4e78cc1e3 Don't crash when printing an ASN.1 NULL primitive with a NULL prefix
string.  Bug 309651. r=wtchang.


git-svn-id: svn://10.0.0.236/trunk@180832 18797224-902f-48f8-a5cc-f745e15eee43
2005-09-22 22:45:32 +00:00
julien.pierre.bugs%sun.com
29cdb8de2c Fix for 292390. NSS tools with missing command-line operands cause crash. r=nelson
git-svn-id: svn://10.0.0.236/trunk@180597 18797224-902f-48f8-a5cc-f745e15eee43
2005-09-19 20:59:46 +00:00
alexei.volkov.bugs%sun.com
775e2d0de9 Fix for bug 265003: Add CRL generation to crlutil. Reviewed JP+
git-svn-id: svn://10.0.0.236/trunk@172015 18797224-902f-48f8-a5cc-f745e15eee43
2005-04-12 02:24:17 +00:00
wtchang%redhat.com
8deab0fda0 Bugzilla Bug 289819: fixed a typo in the SEC_ERROR_EXTRA_INPUT error
message.  r=nelsonb.


git-svn-id: svn://10.0.0.236/trunk@171990 18797224-902f-48f8-a5cc-f745e15eee43
2005-04-11 19:02:47 +00:00
julien.pierre.bugs%sun.com
eb6e6a3677 Remove unused variable
git-svn-id: svn://10.0.0.236/trunk@171508 18797224-902f-48f8-a5cc-f745e15eee43
2005-04-02 06:52:04 +00:00
nelsonb%netscape.com
07cab5177e Do not crash if Server SID cache is uninitialized. Bug 237724 r=Julien
Instead, if SSL_NO_CACHE is not set, return an error code.


git-svn-id: svn://10.0.0.236/trunk@170428 18797224-902f-48f8-a5cc-f745e15eee43
2005-03-09 05:20:44 +00:00
nelsonb%netscape.com
663a4f528b Correctly print cert request attributes in pp. Bug 284191. r=neil.williams
git-svn-id: svn://10.0.0.236/trunk@170338 18797224-902f-48f8-a5cc-f745e15eee43
2005-03-08 01:20:04 +00:00
wtchang%redhat.com
6a1a2d20e9 Bugzilla Bug 282367: Export CERT_DestroyUserNotice from the nss shared
library.  Added a CERT_DestroyUserNotice call to cmd/lib/pppolicy.c to
fix a leak of CERTUserNotice. r=nelsonb.
Modified Files: lib/nss/nss.def cmd/lib/pppolicy.c


git-svn-id: svn://10.0.0.236/trunk@169609 18797224-902f-48f8-a5cc-f745e15eee43
2005-02-22 20:02:22 +00:00
nelsonb%netscape.com
0ce29ee8bb Fix bugzilla bug 261496. Absent OPTIONAL CHOICEs should not cause fatal
errors.  Fix printing code to not crash on missing optional nextUpdate.
r=julien.pierre


git-svn-id: svn://10.0.0.236/trunk@162858 18797224-902f-48f8-a5cc-f745e15eee43
2004-09-27 22:41:41 +00:00
relyea%netscape.com
506bb7cb63 Error strings for new error codes.
git-svn-id: svn://10.0.0.236/trunk@160102 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-30 00:19:49 +00:00
ian.mcgreer%sun.com
f7fd7e85b4 bug 180268, reimplement ssl step-up for builtins
git-svn-id: svn://10.0.0.236/trunk@156475 18797224-902f-48f8-a5cc-f745e15eee43
2004-05-17 20:08:38 +00:00
gerv%gerv.net
43cb9e1492 Bug 236613: change to MPL/LGPL/GPL tri-license.
git-svn-id: svn://10.0.0.236/trunk@155484 18797224-902f-48f8-a5cc-f745e15eee43
2004-04-25 15:03:26 +00:00
nelsonb%netscape.com
f887f9cc12 Import base64 encoded certificate files with old MAC line endings.
Bug 221272. sr=wtc.


git-svn-id: svn://10.0.0.236/trunk@152828 18797224-902f-48f8-a5cc-f745e15eee43
2004-02-16 23:52:46 +00:00
wchang0222%aol.com
0a475ff33e Removed unused function _OS_SELECT for AIX. Thanks to Philip K. Warren
<pkw@us.ibm.com> for reporting this.


git-svn-id: svn://10.0.0.236/trunk@152746 18797224-902f-48f8-a5cc-f745e15eee43
2004-02-13 03:13:04 +00:00
jpierre%netscape.com
908536cb6c Fix for bug 233605 . Check CRL entry extensions after partial decoding. Also add some new CRL decoding errors. r=nelsonb
git-svn-id: svn://10.0.0.236/trunk@152653 18797224-902f-48f8-a5cc-f745e15eee43
2004-02-11 06:05:18 +00:00
wchang0222%aol.com
9d5d8e591b Bugzilla bug 233239: do not include cmd/zlib and cmd/lib headers and
libraries in NSS binary releases.
Modified Files:
	lib/Makefile lib/manifest.mn makepqg/manifest.mn zlib/Makefile
	zlib/manifest.mn


git-svn-id: svn://10.0.0.236/trunk@152442 18797224-902f-48f8-a5cc-f745e15eee43
2004-02-07 00:26:02 +00:00
nelsonb%netscape.com
14340b9719 Bug 132942. r=wtc
Make the following enhancements to NSS's ASN.1 printing code:
- Print warning messages that are properly indendented.
- PrintAsHex notices when the buffer contains entirely printable characters, and is larger than an int, and prints it as text in that case.
- PrintRawString now indents the string, rather than always printing it on
a separate line.
- now prints decoded bit strings
- now prints BMP (UCS2) strings as strings (not as hex) when they contain only printable ASCII characters.
- now prints Universal (UCS4) Strings as strings (not hex) when they contain only printable ASCII characters.
- Decodes certain encoded data that was previously printed as hex.
- Generically decodes ASN.1 data, rather than merely printing an error, when the ASN.1 data doesn't fit a known template.
- properly handles all optional components of basic constraints extensions.
- Prints the names of the bits in the X509 Key Usage extension.
- Prints General Names.
- Print Auth Key ID extensions
- Print subject and issuer alt name extensions
- Print CRL distribution points extensions
- format and print name constraints extensions
- print Authority Information Access extensions
- Print optional X509v2 subject and issuer Unique ID bit strings


git-svn-id: svn://10.0.0.236/trunk@152050 18797224-902f-48f8-a5cc-f745e15eee43
2004-01-29 22:45:20 +00:00
nelsonb%netscape.com
846d2916ab Use the results from PK11_ProtectedAuthenticationPath(slot) in the
password callback function.  Bug 229023. r=relyea.  verified by submittor.


git-svn-id: svn://10.0.0.236/trunk@151613 18797224-902f-48f8-a5cc-f745e15eee43
2004-01-21 00:18:59 +00:00
nelsonb%netscape.com
69385e6714 Fix double free introduced in rev 1.54. r=wtc. bug 230774.
Bug occurs only in NSS utilities that import base64 encoded files, e.g.
with the -a option.


git-svn-id: svn://10.0.0.236/trunk@151282 18797224-902f-48f8-a5cc-f745e15eee43
2004-01-14 01:19:26 +00:00
wchang0222%aol.com
ec4b0c5de7 Removed unused variable 'val'.
git-svn-id: svn://10.0.0.236/trunk@150701 18797224-902f-48f8-a5cc-f745e15eee43
2003-12-23 21:40:52 +00:00
wchang0222%aol.com
6dd1fdb214 Bugzilla bug 222568: fixed a bug introduced in rev. 1.54.
git-svn-id: svn://10.0.0.236/trunk@149529 18797224-902f-48f8-a5cc-f745e15eee43
2003-11-19 01:38:26 +00:00
nelsonb%netscape.com
f8e9fea1e2 Fix unnecessary assertion failures occuring in SMIME testing in
debug builds only.  Partial fix for bugscape bug 53775. r=wchang0222


git-svn-id: svn://10.0.0.236/trunk@149486 18797224-902f-48f8-a5cc-f745e15eee43
2003-11-18 06:16:26 +00:00
wchang0222%aol.com
7f3eb1098d Bugzilla bug 225373: the return value of CERT_NameToAscii must be freed
with PORT_Free.
Modified Files:
	cmd/lib/secutil.c cmd/selfserv/selfserv.c
	cmd/signver/pk7print.c cmd/strsclnt/strsclnt.c
	cmd/tstclnt/tstclnt.c lib/certdb/cert.h


git-svn-id: svn://10.0.0.236/trunk@149241 18797224-902f-48f8-a5cc-f745e15eee43
2003-11-13 16:10:45 +00:00
nelsonb%netscape.com
463a2092db Fix numerous errors (mostly off-by-1 errors) in the code that formats
and prints certs and CRLs.  This code is common to certutil and pp.
Bug 222568  r=nicholson (for this portion).


git-svn-id: svn://10.0.0.236/trunk@148808 18797224-902f-48f8-a5cc-f745e15eee43
2003-11-04 02:16:42 +00:00
wchang0222%aol.com
770b984788 Bugzilla bug 223624: node->error is a 'long', so it should match a %ld
format.  r=nelsonb.


git-svn-id: svn://10.0.0.236/trunk@148373 18797224-902f-48f8-a5cc-f745e15eee43
2003-10-25 14:01:43 +00:00
ian.mcgreer%sun.com
decc84df49 ECC code landing.
Contributed by Sheuling Chang, Stephen Fung, Vipul Gupta, Nils Gura,
and Douglas Stebila of Sun Labs


git-svn-id: svn://10.0.0.236/trunk@148060 18797224-902f-48f8-a5cc-f745e15eee43
2003-10-17 13:45:42 +00:00
jpierre%netscape.com
e8edbab622 Fix for bug 222180 . Change to quick decoder . r=wtc
git-svn-id: svn://10.0.0.236/trunk@147977 18797224-902f-48f8-a5cc-f745e15eee43
2003-10-15 01:34:22 +00:00
nelsonb%netscape.com
458f866ce8 This file has been dead code since NSS 3.4 released, if not sooner.
git-svn-id: svn://10.0.0.236/trunk@147866 18797224-902f-48f8-a5cc-f745e15eee43
2003-10-11 01:10:51 +00:00
jpierre%netscape.com
4012fce7ab Fix for bug 55898 - print name of certificate causing failure in certutil . r=wtc
git-svn-id: svn://10.0.0.236/trunk@147725 18797224-902f-48f8-a5cc-f745e15eee43
2003-10-08 01:00:37 +00:00
jpierre%netscape.com
7bcb65500d Fix for bug 94413 - OCSP needs more fine tuned error messages. r=wtc
git-svn-id: svn://10.0.0.236/trunk@147449 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-30 01:18:55 +00:00
jpierre%netscape.com
3b8812e241 Fix for bug 219539 - support GeneralizedTime in NSS tools
git-svn-id: svn://10.0.0.236/trunk@147323 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-26 06:18:40 +00:00
nelsonb%netscape.com
a25f55c7c5 Correctly compute certificate fingerprints. Bug 220016.
git-svn-id: svn://10.0.0.236/trunk@147137 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-23 02:05:47 +00:00
jpierre%netscape.com
c124a4adcb Fix for 215182 - certutil prints incorrect nickname. r=wtc
git-svn-id: svn://10.0.0.236/trunk@147135 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-23 00:10:54 +00:00
wtc%netscape.com
eee783e6a0 Bug 206926: 1. Undo the changes to secrng.h, pqgutil.h, swfutl.c,
unix_rand.c, and win_rand.c. 2. Make secrng.h and pqgutil.h private.
3. Public header pk11pqg.h can't include private header pqgutil.h.
4. Many files don't need to include secrng.h.  A few don't need to include
pqgutil.h.  5. Remove duplicate declarations of PQG_DestroyParams and
PQG_DestroyVerify from blapi.h.


git-svn-id: svn://10.0.0.236/trunk@143125 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-30 23:31:32 +00:00
wtc%netscape.com
8d3e1170d8 Bug 205346: need to include <unistd.h> on BeOS for isatty(). Thanks to
timeless@bemail.org for the patch.


git-svn-id: svn://10.0.0.236/trunk@142336 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-12 19:52:44 +00:00
wtc%netscape.com
b9697cb5f5 Bug 205346: fixed a compiler warning about a zero-length format string for
sprintf.


git-svn-id: svn://10.0.0.236/trunk@142334 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-12 18:58:33 +00:00
nelsonb%netscape.com
a5c825f716 Fix bug 198099. Display DSA public keys in certs properly.
git-svn-id: svn://10.0.0.236/trunk@140211 18797224-902f-48f8-a5cc-f745e15eee43
2003-03-25 03:45:04 +00:00
relyea%netscape.com
c03e47d2be remove last references to TraverseCerts by removing depricated functions with call it. r=wtc
git-svn-id: svn://10.0.0.236/trunk@138980 18797224-902f-48f8-a5cc-f745e15eee43
2003-03-05 21:46:20 +00:00
nelsonb%netscape.com
db2f1140de Add support for Elliptic Curve Cryptography. Bug 195135.
Modified Files:
 	cmd/lib/SECerrs.h cmd/selfserv/selfserv.c
 	cmd/tstclnt/tstclnt.c lib/cryptohi/keyhi.h
 	lib/cryptohi/keythi.h lib/cryptohi/seckey.c
 	lib/cryptohi/secvfy.c lib/freebl/Makefile lib/freebl/blapi.h
 	lib/freebl/blapit.h lib/freebl/ldvector.c lib/freebl/loader.c
 	lib/freebl/loader.h lib/freebl/manifest.mn lib/nss/nss.def
 	lib/pk11wrap/pk11skey.c lib/pk11wrap/pk11slot.c
 	lib/softoken/lowkeyti.h lib/softoken/manifest.mn
 	lib/softoken/pkcs11.c lib/softoken/pkcs11c.c
 	lib/softoken/pkcs11t.h lib/ssl/ssl3con.c lib/ssl/ssl3prot.h
 	lib/ssl/sslcon.c lib/ssl/sslenum.c lib/ssl/sslimpl.h
 	lib/ssl/sslinfo.c lib/ssl/sslproto.h lib/ssl/sslsecur.c
 	lib/ssl/sslsock.c lib/ssl/sslt.h lib/util/secerr.h
 	lib/util/secoid.c lib/util/secoidt.h
Added Files:
 	lib/freebl/GFp_ecl.c lib/freebl/GFp_ecl.h lib/freebl/ec.c
 	lib/freebl/ec.h lib/softoken/ecdecode.c


git-svn-id: svn://10.0.0.236/trunk@138574 18797224-902f-48f8-a5cc-f745e15eee43
2003-02-27 01:31:38 +00:00
nelsonb%netscape.com
434fd1bc8e Add missing dependency on error headers.
git-svn-id: svn://10.0.0.236/trunk@138557 18797224-902f-48f8-a5cc-f745e15eee43
2003-02-26 23:52:40 +00:00
ian.mcgreer%sun.com
4a6e624c98 bug 172247, don't allow import of duplicate issuer/serial certs
git-svn-id: svn://10.0.0.236/trunk@134280 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-21 20:43:15 +00:00
nelsonb%netscape.com
2b6e228061 Fix crash when formatting a cert with optional version not given.
git-svn-id: svn://10.0.0.236/trunk@133889 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-15 06:32:51 +00:00
relyea%netscape.com
b486fee8f0 Remove long dead code from util. triggered by bug 179038
git-svn-id: svn://10.0.0.236/trunk@133574 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-11 18:17:24 +00:00
nelsonb%netscape.com
928be21a4a Change instructions for entering a new token password to say "should"
instead of "must".  Bug 174135.


git-svn-id: svn://10.0.0.236/trunk@132127 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-17 02:06:31 +00:00