bishakhabanerjee%netscape.com
43ef69edd2
checking return value of NSS_Shutdown. Bug 171263
...
git-svn-id: svn://10.0.0.236/trunk@135950 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-07 22:31:36 +00:00
wtc%netscape.com
9bb9b998ad
Bug 183612: renamed some new functions to be consistent with existing
...
function names containing SubjectKey and PublicKey. Moved internal
functions to private headers and use the lowercase cert_ prefix for the
internal functions for subject key ID mapping hash table. r=nelsonb.
git-svn-id: svn://10.0.0.236/trunk@135480 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-19 00:26:34 +00:00
nelsonb%netscape.com
d36cf9c052
Support SHA256, SHA384, and SHA512 hashes in NSS.
...
git-svn-id: svn://10.0.0.236/trunk@135163 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-12 06:05:45 +00:00
relyea%netscape.com
835ba61f1e
Sigh, this is what was breaking the Linux builds... incorrect initializer.
...
git-svn-id: svn://10.0.0.236/trunk@135041 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-10 18:09:16 +00:00
relyea%netscape.com
224056f917
Add code to create multiple email addresses in a single cert.
...
git-svn-id: svn://10.0.0.236/trunk@135036 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-10 17:18:06 +00:00
nelsonb%netscape.com
2a6f78cf87
Verify the self-signed signature on PKCS 10 cert requests before honoring
...
them. Bug 174193.
git-svn-id: svn://10.0.0.236/trunk@132267 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-18 21:58:24 +00:00
bishakhabanerjee%netscape.com
93ae51e1cc
changed error string to reflect error better: 162714
...
git-svn-id: svn://10.0.0.236/trunk@132199 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-18 00:13:03 +00:00
nelsonb%netscape.com
01270dc30d
Use unsigned ints for serial numbers. Bug 173872.
...
Add missing line break to cert requests. Bug 174659.
Remove unused variables, and #ifndef NSPR20 code.
git-svn-id: svn://10.0.0.236/trunk@132126 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-17 01:41:14 +00:00
ian.mcgreer%sun.com
c91514f4dd
bug 158078, unitialized variable due to a lot of unneccessary code
...
git-svn-id: svn://10.0.0.236/trunk@130530 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-26 20:30:11 +00:00
nicolson%netscape.com
4b34ca8158
Fix 164126: makefile build error.
...
Change the NSS module name from "security" to "nss".
git-svn-id: svn://10.0.0.236/trunk@128961 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-06 16:38:56 +00:00
wtc%netscape.com
6ee9d013fd
Bug 136804: initialize inFile to PR_STDIN instead of NULL so that we don't
...
crash if the -i option is not specified. Added two assertions to avoid
closing PR_STDIN due to internal errors.
git-svn-id: svn://10.0.0.236/trunk@128940 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-06 03:52:49 +00:00
jpierre%netscape.com
5a725d3799
Make certutil use the new CERT_VerifyCertificate function when verifying certs
...
git-svn-id: svn://10.0.0.236/trunk@125265 18797224-902f-48f8-a5cc-f745e15eee43
2002-07-16 00:45:50 +00:00
ian.mcgreer%sun.com
88f990cef8
bug 136701, certutil should use PK11_ListCerts
...
git-svn-id: svn://10.0.0.236/trunk@122266 18797224-902f-48f8-a5cc-f745e15eee43
2002-05-29 18:19:33 +00:00
kirk.erickson%sun.com
12c97ff0d7
Fixed OCSP typo.
...
git-svn-id: svn://10.0.0.236/trunk@122222 18797224-902f-48f8-a5cc-f745e15eee43
2002-05-28 18:26:37 +00:00
ian.mcgreer%sun.com
087cfad2e3
fix error statement
...
git-svn-id: svn://10.0.0.236/trunk@118867 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-12 19:17:48 +00:00
relyea%netscape.com
50406c66c5
Bug 133584: Fix reference leaks which prevent shutdown in NSS and in the tests.
...
Debug builds can verify correct operation by setting NSS_STRICT_SHUTDOWN, which
will cause an assert if shutdown is called but not all the modules are freed (which
means a slot, key, or cert reference has been leaked).
git-svn-id: svn://10.0.0.236/trunk@118866 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-12 19:05:21 +00:00
ian.mcgreer%sun.com
0b26715a58
bug 136806, don't authenticate to friendly slots when adding certs
...
git-svn-id: svn://10.0.0.236/trunk@118865 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-12 18:07:49 +00:00
relyea%netscape.com
c7bd5dd538
return the correct error codes to make all.sh happy.
...
git-svn-id: svn://10.0.0.236/trunk@118192 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-05 03:16:41 +00:00
relyea%netscape.com
61415f9b42
Link certutil dynamically.
...
git-svn-id: svn://10.0.0.236/trunk@118173 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-05 00:12:21 +00:00
wtc%netscape.com
d6ed4f8b39
Bugzilla bug 133545: fixed spelling errors "signning" in certutil memu
...
options. Thanks to Eric Murphy <ericmurphy@jabber.org> for the bug report.
git-svn-id: svn://10.0.0.236/trunk@117516 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-26 22:22:07 +00:00
wtc%netscape.com
4d2eddeffb
Bugzilla bug 131078: fixed compiler warnings. r=mcgreer.
...
git-svn-id: svn://10.0.0.236/trunk@116631 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-15 06:07:41 +00:00
ian.mcgreer%sun.com
185ed3d0f6
fix looking up a key on a token
...
git-svn-id: svn://10.0.0.236/trunk@115445 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-27 22:12:06 +00:00
ian.mcgreer%sun.com
358f1a0a6a
make listing of certs finish cleanly under purify
...
git-svn-id: svn://10.0.0.236/trunk@114510 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-14 18:02:30 +00:00
ian.mcgreer%sun.com
554c4ef86a
bug 124268, usage statement for dump chain option
...
git-svn-id: svn://10.0.0.236/trunk@114031 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-08 15:22:54 +00:00
ian.mcgreer%sun.com
73e7836ead
bug 124268, -P is used twice
...
git-svn-id: svn://10.0.0.236/trunk@113910 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-07 22:28:04 +00:00
relyea%netscape.com
4965975f8a
Make the following functions open the databases Readonly:
...
ListCerts PrintHelp ListKeys ListModules CheckCertValidity Version
Add an option (-X) to restore the old behaviour of openning the Databases R/W
git-svn-id: svn://10.0.0.236/trunk@113391 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-01 02:26:40 +00:00
ian.mcgreer%sun.com
c2387fe9a7
have certutil shutdown cleanly so purify is easier to deal with
...
git-svn-id: svn://10.0.0.236/trunk@113331 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-31 19:27:07 +00:00
ian.mcgreer%sun.com
c1c7114dbe
changes related to bug 115660
...
* fipstoken will only force authentication for object-related functions when the object is a private or secret key
* certutil does not authenticate to token when in FIPS and only doing cert-related operations
* QA does not provide password to certutil when doing cert-related operations in FIPS tests
git-svn-id: svn://10.0.0.236/trunk@113122 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-29 17:30:22 +00:00
relyea%netscape.com
61c9862c40
Fix bug 115660. Note that fixing the bugs necessitates fixing the test
...
cases as well. The test case was depending on the failure to read certs to
detect the failure to read keys. Now certutil returns a failure if no keys
are found. This also means that the FIPS test after the key and cert
has been deleted should expect a failure to list any keys.
git-svn-id: svn://10.0.0.236/trunk@112866 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-25 19:03:17 +00:00
ian.mcgreer%sun.com
ee3a6d6fd8
force generated serial #'s to always be positive
...
git-svn-id: svn://10.0.0.236/trunk@112143 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-15 01:53:11 +00:00
ian.mcgreer%sun.com
0938408b74
add command to certutil for dumping the chain of a cert
...
git-svn-id: svn://10.0.0.236/trunk@111790 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-10 04:30:00 +00:00
ian.mcgreer%sun.com
9c9e4ed53c
this is why apps shouldn't be able to change cert values...
...
git-svn-id: svn://10.0.0.236/trunk@110729 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-18 21:11:41 +00:00
ian.mcgreer%sun.com
d16299751e
fips changes. forces login for cert listing.
...
git-svn-id: svn://10.0.0.236/trunk@107710 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-09 00:37:03 +00:00
relyea%netscape.com
162c530b16
Land BOB_WORK_BRANCH unto the tip.
...
remove lots of depricated files.
move some files to appropriate directories (pcertdb *_rand
associated headers to soft token, for instance)
rename several stan files which had the same name as other nss files.
remove depricated functions.
git-svn-id: svn://10.0.0.236/trunk@107628 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-08 00:15:51 +00:00
relyea%netscape.com
f9427b6c6c
Remove dead code.
...
Fix compiler warnings.
git-svn-id: svn://10.0.0.236/trunk@103353 18797224-902f-48f8-a5cc-f745e15eee43
2001-09-20 21:45:41 +00:00
relyea%netscape.com
ab5346358b
Add option to reset the cert and key database.
...
git-svn-id: svn://10.0.0.236/trunk@102454 18797224-902f-48f8-a5cc-f745e15eee43
2001-09-06 21:18:13 +00:00
wtc%netscape.com
c263db4585
Bugzilla bug 94685: fixed compiler warnings.
...
git-svn-id: svn://10.0.0.236/trunk@101738 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-24 03:52:23 +00:00
wtc%netscape.com
266995ef87
Bugzilla bug 94685: defining SECUTIL_NEW caused the wrong function
...
declaration (with PRFileDesc* as the first parameter) to be used and
hence a compiler warning.
git-svn-id: svn://10.0.0.236/trunk@101673 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-23 00:22:07 +00:00
mcgreer%netscape.com
8fbcd66ced
make error return more readable
...
git-svn-id: svn://10.0.0.236/trunk@100760 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-10 16:13:13 +00:00
mcgreer%netscape.com
4065d8c61b
duh. Return error % 256 (to get 255 when error is SECFailure).
...
git-svn-id: svn://10.0.0.236/trunk@100759 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-10 16:06:57 +00:00
mcgreer%netscape.com
dc81bd2915
force certutil to always return 255 on error. Make sure there is only one pointer to password callback arg.
...
git-svn-id: svn://10.0.0.236/trunk@100677 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-09 20:57:58 +00:00
mcgreer%netscape.com
7db7feb796
Look for the private key when listing keys.
...
The second part of this patch was checked in, see revision 1.28. Yet, somehow, it never showed up.
git-svn-id: svn://10.0.0.236/trunk@100586 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-08 13:37:42 +00:00
mcgreer%netscape.com
9adc90c6da
Yet Another Instance Of Needing to Send the Password Down for FIPS
...
git-svn-id: svn://10.0.0.236/trunk@100498 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-07 16:46:52 +00:00
mcgreer%netscape.com
626edc3a9e
fix bug in param allocation
...
git-svn-id: svn://10.0.0.236/trunk@100496 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-07 16:35:06 +00:00
mcgreer%netscape.com
168db4e13e
implement key deletion in certutil
...
git-svn-id: svn://10.0.0.236/trunk@100494 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-07 16:04:12 +00:00
mcgreer%netscape.com
ef5da79845
more FIPS fixes. it's possible the old crypto lib alloc'ed the PQG params and copied them over when creating the DSA key, otherwise this code would have never worked. It's also possible this code was never tested as-is. At any rate, the static vars go out of scope and wreak havoc later on, so alloc the memory.
...
git-svn-id: svn://10.0.0.236/trunk@100408 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-06 18:57:16 +00:00
mcgreer%netscape.com
6baaa25d69
another FIPS workaround
...
git-svn-id: svn://10.0.0.236/trunk@100407 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-06 18:19:12 +00:00
mcgreer%netscape.com
36bbd30461
more FIPS changes, keep pw context with key to avoid pw prompt
...
git-svn-id: svn://10.0.0.236/trunk@100400 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-06 16:01:10 +00:00
mcgreer%netscape.com
b30a322c8c
fix DSA key gen
...
git-svn-id: svn://10.0.0.236/trunk@100230 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-02 21:06:38 +00:00
mcgreer%netscape.com
b564bdde7a
changes to make FIPS mode work
...
git-svn-id: svn://10.0.0.236/trunk@100229 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-02 21:04:14 +00:00