59 Commits

Author SHA1 Message Date
emaldona%redhat.com
f364be9f97 Bug 691997 Code cleanup for Bug 172051 - All localizable error messages for NSS error codes, r=wtc
git-svn-id: svn://10.0.0.236/trunk@263003 18797224-902f-48f8-a5cc-f745e15eee43
2011-10-22 16:45:40 +00:00
wtc%google.com
93a9d52a1e Bug 685592: fix comment nits in the previous checkin.
Modified Files:
	sslmutex.c sslsnce.c


git-svn-id: svn://10.0.0.236/trunk@262943 18797224-902f-48f8-a5cc-f745e15eee43
2011-10-01 00:11:02 +00:00
rrelyea%redhat.com
8048b035ce Bug 685592 - File descriptor leak after "service httpd reload"
r= wtc.


git-svn-id: svn://10.0.0.236/trunk@262942 18797224-902f-48f8-a5cc-f745e15eee43
2011-09-30 23:27:08 +00:00
emaldona%redhat.com
44f2e32775 Fix Bug 6172051 - Add localizable error messages for NSS error codes, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@262711 18797224-902f-48f8-a5cc-f745e15eee43
2011-08-17 14:41:48 +00:00
alexei.volkov.bugs%sun.com
c41d035d0b 629299 - core dump when tls session tickets are enabled and session cache is disabled. r=wct,rrelyea.
git-svn-id: svn://10.0.0.236/trunk@262058 18797224-902f-48f8-a5cc-f745e15eee43
2011-03-16 18:37:42 +00:00
alexei.volkov.bugs%sun.com
1830da80df Bug 556497 - ServerSessionIDLookup tries very hard to crash if !gotLock or pcce->sessionIDLength != psce->sessionIDLength. r=nelson
git-svn-id: svn://10.0.0.236/trunk@260628 18797224-902f-48f8-a5cc-f745e15eee43
2010-07-05 19:31:56 +00:00
alexei.volkov.bugs%sun.com
00fc6017fa Fix virtual name cache initialisation. Privided by nelson. r=alexei
git-svn-id: svn://10.0.0.236/trunk@260042 18797224-902f-48f8-a5cc-f745e15eee43
2010-03-26 20:47:57 +00:00
alexei.volkov.bugs%sun.com
d26b36b737 360421 - Implement TLS Server Name Indication for servers. r=nelson
git-svn-id: svn://10.0.0.236/trunk@259396 18797224-902f-48f8-a5cc-f745e15eee43
2010-01-14 22:15:26 +00:00
wtc%google.com
c0ec7fbfae Bug 275744: In client hello, list compression methods in the order of
desirability so that servers that simply pick the first mutually supported
compression method will pick the best compression method.  Add compression
method info to the SSLChannelInfo structure.  Rename SSL3CompressionMethod
to SSLCompressionMethod and add the ssl_ prefix to the enum constants.
Remove an extra comma in strsclnt.c that breaks the concatenation of two
string literals.  r=agl,rrelyea,nelson.
Modified Files:
	cmd/selfserv/selfserv.c cmd/strsclnt/strsclnt.c
	cmd/tstclnt/tstclnt.c lib/ssl/ssl3con.c lib/ssl/ssl3ext.c
	lib/ssl/ssl3prot.h lib/ssl/sslimpl.h lib/ssl/sslinfo.c
	lib/ssl/sslsnce.c lib/ssl/sslt.h tests/ssl/sslstress.txt


git-svn-id: svn://10.0.0.236/trunk@258919 18797224-902f-48f8-a5cc-f745e15eee43
2009-11-07 18:23:06 +00:00
nelson%bolyard.com
d75e071b87 Bug 491044: Remove support for VMS (a.k.a., OpenVMS) from NSS, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@257408 18797224-902f-48f8-a5cc-f745e15eee43
2009-06-05 02:34:15 +00:00
nelson%bolyard.com
e25cdff2dd Bug 466180 - SSL server changes for BSD Unix
Patches by Kaspar Brand <mozbugzilla@velox.ch>, r=nelson


git-svn-id: svn://10.0.0.236/trunk@255294 18797224-902f-48f8-a5cc-f745e15eee43
2008-12-02 06:36:59 +00:00
wtc%google.com
5ef4dc5b70 Bug 454120: removed parentheses that are no longer necessary after
"&& !defined(_WIN32_WCE)" was removed.  r=nelson.
Modified Files:
	sslmutex.c sslsnce.c


git-svn-id: svn://10.0.0.236/trunk@255172 18797224-902f-48f8-a5cc-f745e15eee43
2008-11-21 21:00:13 +00:00
nelson%bolyard.com
7aa2b49d91 Bug 454120: Problems Compiling SECURITY module for WinMobile
Patch by Doug Turner <doug.turner@gmail.com>, r=nelson


git-svn-id: svn://10.0.0.236/trunk@255144 18797224-902f-48f8-a5cc-f745e15eee43
2008-11-20 04:39:59 +00:00
nelson%bolyard.com
31e128e527 Bug 455348: Don't use DEBUG_nelsonb. r=wtc
git-svn-id: svn://10.0.0.236/trunk@254473 18797224-902f-48f8-a5cc-f745e15eee43
2008-09-30 03:53:01 +00:00
wtc%google.com
dd1ffe05f6 Bug 419523: Export Cert_NewTempCertificate. Remove unnecessary inclusions
of nssrenam.h.  Remove functions that no longer need to be renamed from
nssrenam.h.  r=rrelyea.
Modified Files:
	cmd/vfychain/vfychain.c lib/certdb/stanpcertdb.c
	lib/crmf/asn1cmn.c lib/crmf/cmmfrec.c lib/crmf/respcmn.c
	lib/nss/nss.def lib/nss/nssrenam.h lib/pkcs12/p12e.c
	lib/pkcs7/certread.c lib/pkcs7/p7decode.c lib/pkcs7/p7encode.c
	lib/smime/cmsutil.c lib/ssl/ssl3con.c lib/ssl/ssl3ecc.c
	lib/ssl/sslnonce.c lib/ssl/sslsnce.c


git-svn-id: svn://10.0.0.236/trunk@247455 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-10 00:01:28 +00:00
wtc%google.com
6289ace530 Bug 403563: implement the TLS session ticket extension (rfc4507bis). The
patch is contributed by Nagendra Modadugu <ngm+mozilla@google.com>.  A
small portion (PKCS #11 code and tests) was written by Wan-Teh Chang
<wtc@google.com>.  r=nelson,wtc
Modified Files:
	cmd/lib/SSLerrs.h cmd/selfserv/selfserv.c
	cmd/strsclnt/strsclnt.c cmd/tstclnt/tstclnt.c
	lib/ssl/manifest.mn lib/ssl/ssl.h lib/ssl/ssl3con.c
	lib/ssl/ssl3ecc.c lib/ssl/ssl3prot.h lib/ssl/sslerr.h
	lib/ssl/sslimpl.h lib/ssl/sslnonce.c lib/ssl/sslsnce.c
	lib/ssl/sslsock.c lib/ssl/sslt.h tests/ssl/sslstress.txt
Added Files:
	lib/ssl/ssl3ext.c


git-svn-id: svn://10.0.0.236/trunk@247232 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-06 20:16:24 +00:00
julien.pierre.boogz%sun.com
b23b02f2e7 Fix for bug 397486 . Session cache locks not freed on strsclnt shutdown. r=nelson,wtc
git-svn-id: svn://10.0.0.236/trunk@246338 18797224-902f-48f8-a5cc-f745e15eee43
2008-02-23 02:21:47 +00:00
julien.pierre.boogz%sun.com
29443dfc70 Fix for bug 403240 - threads hanging in nss_InitLock . r=wtc,nelson
git-svn-id: svn://10.0.0.236/trunk@245810 18797224-902f-48f8-a5cc-f745e15eee43
2008-02-16 04:38:09 +00:00
julien.pierre.boogz%sun.com
2f0d933156 Fix for bug 330721 . Remove OS/2 VACPP compiler support from NSS . Patch contributed by Peter Weilbacher . r=julien.pierre
git-svn-id: svn://10.0.0.236/trunk@235515 18797224-902f-48f8-a5cc-f745e15eee43
2007-09-11 22:40:40 +00:00
glen.beasley%sun.com
79dbc46d9c 369444 sidCacheEntry size forced to 192 bytes r=Nelson,sr=wan-teh
git-svn-id: svn://10.0.0.236/trunk@225547 18797224-902f-48f8-a5cc-f745e15eee43
2007-05-03 21:16:35 +00:00
wtchang%redhat.com
ed4b8e9aeb Bugzilla Bug 358248: SSL_ShutdownServerSessionIDCache should stop the
LockPoller thread.  r=nelsonb,relyea


git-svn-id: svn://10.0.0.236/trunk@216528 18797224-902f-48f8-a5cc-f745e15eee43
2006-12-06 01:36:08 +00:00
alexei.volkov.bugs%sun.com
5761fab072 334459: Variable "(cache)->sharedCache" tracked as NULL was passed to a function that dereferences it. [@ CloseCache - InitCache]. r=nelson
git-svn-id: svn://10.0.0.236/trunk@202258 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-17 22:15:10 +00:00
nelsonb%netscape.com
5f09451b56 Set SSL2 and SSL3 timeout times properly for SSL server session cache.
Bug 223242. r=jullien.pierre


git-svn-id: svn://10.0.0.236/trunk@188382 18797224-902f-48f8-a5cc-f745e15eee43
2006-01-28 02:21:31 +00:00
julien.pierre.bugs%sun.com
8f4becb003 Fix for 292156. Prevent crash in SSL session cache init if invalid arguments are passed. r=nelson
git-svn-id: svn://10.0.0.236/trunk@184446 18797224-902f-48f8-a5cc-f745e15eee43
2005-11-11 02:45:59 +00:00
nelsonb%netscape.com
66cf75f421 Implement two new SSL socket options: SSL_BYPASS_PKCS11 and SSL_NO_LOCKS.
Reorganize the SSL Socket structure contents to obviate ssl3 pointer.
Move much of the ECC code from ssl3con to new file ssl3ecc.c.  derive.c
implements derivation of the SSL/TLS master secret and the encryption and
MAC keys and IVs without using PKCS11. Bug 305147. r=rrelyea.
Modified Files: ssl/config.mk ssl/manifest.mn ssl/ssl.h ssl/ssl3con.c
    ssl/ssl3gthr.c ssl/sslauth.c ssl/sslcon.c ssl/ssldef.c ssl/sslgathr.c
    ssl/sslimpl.h ssl/sslinfo.c ssl/sslnonce.c ssl/sslsecur.c ssl/sslsnce.c
    ssl/sslsock.c
Added Files: ssl/derive.c ssl/ssl3ecc.c


git-svn-id: svn://10.0.0.236/trunk@179892 18797224-902f-48f8-a5cc-f745e15eee43
2005-09-09 03:02:16 +00:00
nelsonb%netscape.com
00749853c3 Remove fortezza code from libSSL and from the SSL test programs.
Stop building fortezza's special software token, and fortezza specific
test programs.   Bug 239960. r=rrelyea.
Modified Files:
    cmd/manifest.mn cmd/platlibs.mk cmd/SSLsample/server.c
    cmd/SSLsample/sslsample.c cmd/modutil/modutil.c
    cmd/selfserv/selfserv.c cmd/sslstrength/sslstrength.c
    cmd/strsclnt/strsclnt.c cmd/tstclnt/tstclnt.c
    cmd/vfyserv/vfyserv.c cmd/vfyserv/vfyutil.c lib/manifest.mn
    lib/ssl/nsskea.c lib/ssl/preenc.h lib/ssl/prelib.c
    lib/ssl/ssl.h lib/ssl/ssl3con.c lib/ssl/ssl3prot.h
    lib/ssl/sslauth.c lib/ssl/sslcon.c lib/ssl/sslenum.c
    lib/ssl/sslimpl.h lib/ssl/sslinfo.c lib/ssl/sslproto.h
    lib/ssl/sslsecur.c lib/ssl/sslsnce.c lib/ssl/sslsock.c
    lib/ssl/sslt.h


git-svn-id: svn://10.0.0.236/trunk@177810 18797224-902f-48f8-a5cc-f745e15eee43
2005-08-16 03:42:26 +00:00
nelsonb%netscape.com
663db84c36 Back out the preceeding fortezza removal patch, which was accidentally
applied to the trunk, not to the intended branch.


git-svn-id: svn://10.0.0.236/trunk@171823 18797224-902f-48f8-a5cc-f745e15eee43
2005-04-06 21:35:45 +00:00
nelsonb%netscape.com
b62572db42 Remove fortezza support from libSSL and related commands. Bug 239960.
ON PERFORMANCE_HACKS_BRANCH.  r=rrelyea.


git-svn-id: svn://10.0.0.236/trunk@171820 18797224-902f-48f8-a5cc-f745e15eee43
2005-04-06 19:43:19 +00:00
nelsonb%netscape.com
07cab5177e Do not crash if Server SID cache is uninitialized. Bug 237724 r=Julien
Instead, if SSL_NO_CACHE is not set, return an error code.


git-svn-id: svn://10.0.0.236/trunk@170428 18797224-902f-48f8-a5cc-f745e15eee43
2005-03-09 05:20:44 +00:00
jpierre%netscape.com
8385c4f9e2 Fix for 237934 - nss_InitLock not atomic. r=nelson
git-svn-id: svn://10.0.0.236/trunk@158176 18797224-902f-48f8-a5cc-f745e15eee43
2004-06-19 03:21:39 +00:00
gerv%gerv.net
62b0f34e77 Bug 236613: change to MPL/LGPL/GPL tri-license. Restore Id: lines.
git-svn-id: svn://10.0.0.236/trunk@155606 18797224-902f-48f8-a5cc-f745e15eee43
2004-04-27 23:04:40 +00:00
gerv%gerv.net
43cb9e1492 Bug 236613: change to MPL/LGPL/GPL tri-license.
git-svn-id: svn://10.0.0.236/trunk@155484 18797224-902f-48f8-a5cc-f745e15eee43
2004-04-25 15:03:26 +00:00
wchang0222%aol.com
2aff98abf2 Bugzilla bug 222065: fixed a bug (inside #ifdef WINNT) introduced in the
previous checkin.


git-svn-id: svn://10.0.0.236/trunk@148244 18797224-902f-48f8-a5cc-f745e15eee43
2003-10-22 01:00:10 +00:00
nelsonb%netscape.com
701f341286 SSL_ShutdownServerSessionIDCache no longer leaks the cache memory.
Bug 222065. r=wchang0222


git-svn-id: svn://10.0.0.236/trunk@148117 18797224-902f-48f8-a5cc-f745e15eee43
2003-10-19 01:25:10 +00:00
nelsonb%netscape.com
06d3adf3af Add missing return statement.
git-svn-id: svn://10.0.0.236/trunk@140378 18797224-902f-48f8-a5cc-f745e15eee43
2003-03-27 03:07:47 +00:00
wtc%netscape.com
ede99124e6 Bug 199082: checked in Nelson's patch, which
a) changes selfserv to test the return value from NSS_Shutdown.
b) changes SECMOD_Shutdown to set the error code SEC_ERROR_BUSY before
   returning SECFailure.
c) Adds a new function SSL_ShutdownServerSessionIDCache to ssl.h.
d) Changes selfserv to call SSL_ShutdownServerSessionIDCache before calling
NSS_Shutdown.
Modified Files:
	cmd/selfserv/selfserv.c lib/pk11wrap/pk11util.c
	lib/ssl/ssl.def lib/ssl/ssl.h lib/ssl/ssl3con.c
	lib/ssl/sslimpl.h lib/ssl/sslsnce.c


git-svn-id: svn://10.0.0.236/trunk@140305 18797224-902f-48f8-a5cc-f745e15eee43
2003-03-26 00:31:13 +00:00
jpierre%netscape.com
22bf9f8cc7 Fix for bug #126930 - make SSL_ConfigServreSessionIDCache work on OS/2 by not using shared memory in single process mode. r=nelsonb
git-svn-id: svn://10.0.0.236/trunk@136858 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-23 00:15:08 +00:00
wtc%netscape.com
16ce983004 Bugs 166734 and 166785: fixed compiler warnings reported by gcc on Linux.
The patch for this checkin is attached to bug 166785.


git-svn-id: svn://10.0.0.236/trunk@128926 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-06 00:27:52 +00:00
nelsonb%netscape.com
a36887f58a Make libSSL build for WinCE.
git-svn-id: svn://10.0.0.236/trunk@118061 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-04 00:14:12 +00:00
wtc%netscape.com
52f5bfd019 Bugzilla bug 70217: ported NSS to BeOS. The patch is contributed by
Christopher Seawood <seawood@netscape.com>.


git-svn-id: svn://10.0.0.236/trunk@115206 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-22 04:23:30 +00:00
wtc%netscape.com
5f32ec59fc Bugzilla bug 125730: fixed OpenVMS build breakage. Thanks to Colin Blakes
<colin@theblakes.com> for the patch.
odified Files: sslmutex.c sslmutex.h sslsnce.c


git-svn-id: svn://10.0.0.236/trunk@114654 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-16 02:52:07 +00:00
javi%netscape.com
b33a159e20 Changes required to get the trunk of NSS building on the Mac.
git-svn-id: svn://10.0.0.236/trunk@111740 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-09 23:22:23 +00:00
jpierre%netscape.com
87e28e9839 Fixes for OS/2 build
git-svn-id: svn://10.0.0.236/trunk@108772 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-22 00:46:48 +00:00
nelsonb%netscape.com
b91f3120f1 Reimplement SSL_GetChannelInfo. Add new function SSL_GetCipherSuiteInfo().
Also, implement new ciphersuite preference order.  Bug 78959.


git-svn-id: svn://10.0.0.236/trunk@107060 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-02 04:24:28 +00:00
jpierre%netscape.com
4ce9c2c54f Fix for 102251 . Implement 2-level locking for the SSL session cache to properly support SSL server applications using Windows NT fibers . Also optimize and enhance portability of locking primitives for single-process servers on all platforms by using a PRLock instead of cross-process locks . Reviewed by wtc
git-svn-id: svn://10.0.0.236/trunk@104699 18797224-902f-48f8-a5cc-f745e15eee43
2001-10-06 00:14:33 +00:00
nelsonb%netscape.com
c38ee88985 Implement new function SSL_GetChannelInfo(). Bugzilla bug 78959.
git-svn-id: svn://10.0.0.236/trunk@103057 18797224-902f-48f8-a5cc-f745e15eee43
2001-09-18 01:59:21 +00:00
nelsonb%netscape.com
06c3f37e12 The environment variable NSS_SSL_SERVER_CACHE_MUTEX_TIMEOUT specifies
the maximum amount of time to wait before recovering a session cache
mutex (semaphore) from a dead process on Unix.


git-svn-id: svn://10.0.0.236/trunk@97732 18797224-902f-48f8-a5cc-f745e15eee43
2001-06-22 03:38:05 +00:00
nelsonb%netscape.com
611ba43412 Add two new functions to permit application tuning of the number of SSL
server session cache locks.  We may yet decide to back this out for the
NSS 3.3 release.  Modified Files: ssl.def ssl.h sslsnce.c


git-svn-id: svn://10.0.0.236/trunk@96958 18797224-902f-48f8-a5cc-f745e15eee43
2001-06-12 20:27:12 +00:00
nelsonb%netscape.com
4d7b87db53 Fix two bugs found in nightly QA. On Solaris/x86, don't assert that the
sid cache entry is a multiple of 8 bytes long.  On OSF1, reduce the
maximum number of POSIX semaphores so it doesn't exceed the per-process
limit of 256.


git-svn-id: svn://10.0.0.236/trunk@96786 18797224-902f-48f8-a5cc-f745e15eee43
2001-06-09 19:30:21 +00:00
nelsonb%netscape.com
3959edfa77 3 Changes:
1. New SSL server session cache implementation that uses finer grained
locking to reduce lock contention, and does 128-way associative caching.
2. rename symbol SSL_SESSIONID_BYTES to SSL2_SESSIONID_BYTES.
3. Work around compiler bug on Solaris i386.
Modified Files:
    manifest.mn sslcon.c sslimpl.h sslsecur.c sslsnce.c


git-svn-id: svn://10.0.0.236/trunk@96768 18797224-902f-48f8-a5cc-f745e15eee43
2001-06-09 03:18:09 +00:00