81 Commits

Author SHA1 Message Date
bishakhabanerjee%netscape.com
43ef69edd2 checking return value of NSS_Shutdown. Bug 171263
git-svn-id: svn://10.0.0.236/trunk@135950 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-07 22:31:36 +00:00
wtc%netscape.com
9bb9b998ad Bug 183612: renamed some new functions to be consistent with existing
function names containing SubjectKey and PublicKey.  Moved internal
functions to private headers and use the lowercase cert_ prefix for the
internal functions for subject key ID mapping hash table. r=nelsonb.


git-svn-id: svn://10.0.0.236/trunk@135480 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-19 00:26:34 +00:00
nelsonb%netscape.com
d36cf9c052 Support SHA256, SHA384, and SHA512 hashes in NSS.
git-svn-id: svn://10.0.0.236/trunk@135163 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-12 06:05:45 +00:00
relyea%netscape.com
835ba61f1e Sigh, this is what was breaking the Linux builds... incorrect initializer.
git-svn-id: svn://10.0.0.236/trunk@135041 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-10 18:09:16 +00:00
relyea%netscape.com
224056f917 Add code to create multiple email addresses in a single cert.
git-svn-id: svn://10.0.0.236/trunk@135036 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-10 17:18:06 +00:00
nelsonb%netscape.com
2a6f78cf87 Verify the self-signed signature on PKCS 10 cert requests before honoring
them.  Bug 174193.


git-svn-id: svn://10.0.0.236/trunk@132267 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-18 21:58:24 +00:00
bishakhabanerjee%netscape.com
93ae51e1cc changed error string to reflect error better: 162714
git-svn-id: svn://10.0.0.236/trunk@132199 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-18 00:13:03 +00:00
nelsonb%netscape.com
01270dc30d Use unsigned ints for serial numbers. Bug 173872.
Add missing line break to cert requests.  Bug 174659.
Remove unused variables, and #ifndef NSPR20 code.


git-svn-id: svn://10.0.0.236/trunk@132126 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-17 01:41:14 +00:00
ian.mcgreer%sun.com
c91514f4dd bug 158078, unitialized variable due to a lot of unneccessary code
git-svn-id: svn://10.0.0.236/trunk@130530 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-26 20:30:11 +00:00
nicolson%netscape.com
4b34ca8158 Fix 164126: makefile build error.
Change the NSS module name from "security" to "nss".


git-svn-id: svn://10.0.0.236/trunk@128961 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-06 16:38:56 +00:00
wtc%netscape.com
6ee9d013fd Bug 136804: initialize inFile to PR_STDIN instead of NULL so that we don't
crash if the -i option is not specified.  Added two assertions to avoid
closing PR_STDIN due to internal errors.


git-svn-id: svn://10.0.0.236/trunk@128940 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-06 03:52:49 +00:00
jpierre%netscape.com
5a725d3799 Make certutil use the new CERT_VerifyCertificate function when verifying certs
git-svn-id: svn://10.0.0.236/trunk@125265 18797224-902f-48f8-a5cc-f745e15eee43
2002-07-16 00:45:50 +00:00
ian.mcgreer%sun.com
88f990cef8 bug 136701, certutil should use PK11_ListCerts
git-svn-id: svn://10.0.0.236/trunk@122266 18797224-902f-48f8-a5cc-f745e15eee43
2002-05-29 18:19:33 +00:00
kirk.erickson%sun.com
12c97ff0d7 Fixed OCSP typo.
git-svn-id: svn://10.0.0.236/trunk@122222 18797224-902f-48f8-a5cc-f745e15eee43
2002-05-28 18:26:37 +00:00
ian.mcgreer%sun.com
087cfad2e3 fix error statement
git-svn-id: svn://10.0.0.236/trunk@118867 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-12 19:17:48 +00:00
relyea%netscape.com
50406c66c5 Bug 133584: Fix reference leaks which prevent shutdown in NSS and in the tests.
Debug builds can verify correct operation by setting NSS_STRICT_SHUTDOWN, which
will cause an assert if shutdown is called but not all the modules are freed (which
means a slot, key, or cert reference has been leaked).


git-svn-id: svn://10.0.0.236/trunk@118866 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-12 19:05:21 +00:00
ian.mcgreer%sun.com
0b26715a58 bug 136806, don't authenticate to friendly slots when adding certs
git-svn-id: svn://10.0.0.236/trunk@118865 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-12 18:07:49 +00:00
relyea%netscape.com
c7bd5dd538 return the correct error codes to make all.sh happy.
git-svn-id: svn://10.0.0.236/trunk@118192 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-05 03:16:41 +00:00
relyea%netscape.com
61415f9b42 Link certutil dynamically.
git-svn-id: svn://10.0.0.236/trunk@118173 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-05 00:12:21 +00:00
wtc%netscape.com
d6ed4f8b39 Bugzilla bug 133545: fixed spelling errors "signning" in certutil memu
options.  Thanks to Eric Murphy <ericmurphy@jabber.org> for the bug report.


git-svn-id: svn://10.0.0.236/trunk@117516 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-26 22:22:07 +00:00
wtc%netscape.com
4d2eddeffb Bugzilla bug 131078: fixed compiler warnings. r=mcgreer.
git-svn-id: svn://10.0.0.236/trunk@116631 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-15 06:07:41 +00:00
ian.mcgreer%sun.com
185ed3d0f6 fix looking up a key on a token
git-svn-id: svn://10.0.0.236/trunk@115445 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-27 22:12:06 +00:00
ian.mcgreer%sun.com
358f1a0a6a make listing of certs finish cleanly under purify
git-svn-id: svn://10.0.0.236/trunk@114510 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-14 18:02:30 +00:00
ian.mcgreer%sun.com
554c4ef86a bug 124268, usage statement for dump chain option
git-svn-id: svn://10.0.0.236/trunk@114031 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-08 15:22:54 +00:00
ian.mcgreer%sun.com
73e7836ead bug 124268, -P is used twice
git-svn-id: svn://10.0.0.236/trunk@113910 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-07 22:28:04 +00:00
relyea%netscape.com
4965975f8a Make the following functions open the databases Readonly:
ListCerts PrintHelp ListKeys ListModules CheckCertValidity Version

Add an option (-X) to restore the old behaviour of openning the Databases R/W


git-svn-id: svn://10.0.0.236/trunk@113391 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-01 02:26:40 +00:00
ian.mcgreer%sun.com
c2387fe9a7 have certutil shutdown cleanly so purify is easier to deal with
git-svn-id: svn://10.0.0.236/trunk@113331 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-31 19:27:07 +00:00
ian.mcgreer%sun.com
c1c7114dbe changes related to bug 115660
* fipstoken will only force authentication for object-related functions when the object is a private or secret key
* certutil does not authenticate to token when in FIPS and only doing cert-related operations
* QA does not provide password to certutil when doing cert-related operations in FIPS tests


git-svn-id: svn://10.0.0.236/trunk@113122 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-29 17:30:22 +00:00
relyea%netscape.com
61c9862c40 Fix bug 115660. Note that fixing the bugs necessitates fixing the test
cases as well. The test case was depending on the failure to read certs to
detect the failure to read keys. Now certutil returns a failure if no keys
are found. This also means that the FIPS test after the key and cert
has been deleted should expect a failure to list any keys.


git-svn-id: svn://10.0.0.236/trunk@112866 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-25 19:03:17 +00:00
ian.mcgreer%sun.com
ee3a6d6fd8 force generated serial #'s to always be positive
git-svn-id: svn://10.0.0.236/trunk@112143 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-15 01:53:11 +00:00
ian.mcgreer%sun.com
0938408b74 add command to certutil for dumping the chain of a cert
git-svn-id: svn://10.0.0.236/trunk@111790 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-10 04:30:00 +00:00
ian.mcgreer%sun.com
9c9e4ed53c this is why apps shouldn't be able to change cert values...
git-svn-id: svn://10.0.0.236/trunk@110729 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-18 21:11:41 +00:00
ian.mcgreer%sun.com
d16299751e fips changes. forces login for cert listing.
git-svn-id: svn://10.0.0.236/trunk@107710 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-09 00:37:03 +00:00
relyea%netscape.com
162c530b16 Land BOB_WORK_BRANCH unto the tip.
remove lots of depricated files.
move some files to appropriate directories (pcertdb *_rand
associated headers to soft token, for instance)
rename several stan files which had the same name as other nss files.
remove depricated functions.


git-svn-id: svn://10.0.0.236/trunk@107628 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-08 00:15:51 +00:00
relyea%netscape.com
f9427b6c6c Remove dead code.
Fix compiler warnings.


git-svn-id: svn://10.0.0.236/trunk@103353 18797224-902f-48f8-a5cc-f745e15eee43
2001-09-20 21:45:41 +00:00
relyea%netscape.com
ab5346358b Add option to reset the cert and key database.
git-svn-id: svn://10.0.0.236/trunk@102454 18797224-902f-48f8-a5cc-f745e15eee43
2001-09-06 21:18:13 +00:00
wtc%netscape.com
c263db4585 Bugzilla bug 94685: fixed compiler warnings.
git-svn-id: svn://10.0.0.236/trunk@101738 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-24 03:52:23 +00:00
wtc%netscape.com
266995ef87 Bugzilla bug 94685: defining SECUTIL_NEW caused the wrong function
declaration (with PRFileDesc* as the first parameter) to be used and
hence a compiler warning.


git-svn-id: svn://10.0.0.236/trunk@101673 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-23 00:22:07 +00:00
mcgreer%netscape.com
8fbcd66ced make error return more readable
git-svn-id: svn://10.0.0.236/trunk@100760 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-10 16:13:13 +00:00
mcgreer%netscape.com
4065d8c61b duh. Return error % 256 (to get 255 when error is SECFailure).
git-svn-id: svn://10.0.0.236/trunk@100759 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-10 16:06:57 +00:00
mcgreer%netscape.com
dc81bd2915 force certutil to always return 255 on error. Make sure there is only one pointer to password callback arg.
git-svn-id: svn://10.0.0.236/trunk@100677 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-09 20:57:58 +00:00
mcgreer%netscape.com
7db7feb796 Look for the private key when listing keys.
The second part of this patch was checked in, see revision 1.28.  Yet, somehow, it never showed up.


git-svn-id: svn://10.0.0.236/trunk@100586 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-08 13:37:42 +00:00
mcgreer%netscape.com
9adc90c6da Yet Another Instance Of Needing to Send the Password Down for FIPS
git-svn-id: svn://10.0.0.236/trunk@100498 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-07 16:46:52 +00:00
mcgreer%netscape.com
626edc3a9e fix bug in param allocation
git-svn-id: svn://10.0.0.236/trunk@100496 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-07 16:35:06 +00:00
mcgreer%netscape.com
168db4e13e implement key deletion in certutil
git-svn-id: svn://10.0.0.236/trunk@100494 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-07 16:04:12 +00:00
mcgreer%netscape.com
ef5da79845 more FIPS fixes. it's possible the old crypto lib alloc'ed the PQG params and copied them over when creating the DSA key, otherwise this code would have never worked. It's also possible this code was never tested as-is. At any rate, the static vars go out of scope and wreak havoc later on, so alloc the memory.
git-svn-id: svn://10.0.0.236/trunk@100408 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-06 18:57:16 +00:00
mcgreer%netscape.com
6baaa25d69 another FIPS workaround
git-svn-id: svn://10.0.0.236/trunk@100407 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-06 18:19:12 +00:00
mcgreer%netscape.com
36bbd30461 more FIPS changes, keep pw context with key to avoid pw prompt
git-svn-id: svn://10.0.0.236/trunk@100400 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-06 16:01:10 +00:00
mcgreer%netscape.com
b30a322c8c fix DSA key gen
git-svn-id: svn://10.0.0.236/trunk@100230 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-02 21:06:38 +00:00
mcgreer%netscape.com
b564bdde7a changes to make FIPS mode work
git-svn-id: svn://10.0.0.236/trunk@100229 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-02 21:04:14 +00:00