1649 Commits

Author SHA1 Message Date
wtc%netscape.com
ec8de2b7c8 Bug 186586: If at NSS shutdown there are still certs in the cert caches,
cause NSS shutdown and the next NSS initialization to fail but do not
destroy the cert caches (and the crypto context and trust domain containing
them) to avoid a crash if the NSS client destroys the certs later.  New
error codes needed to be added to indicate the failure of NSS shutdown and
NSS initialization due to this cause.


git-svn-id: svn://10.0.0.236/trunk@136016 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-08 21:58:29 +00:00
wtc%netscape.com
83b9358446 Bug 186586: If at NSS shutdown there are still certs in the cert caches,
cause NSS shutdown and the next NSS initialization to fail but do not
destroy the cert caches (and the crypto context and trust domain containing
them) to avoid a crash if the NSS client destroys the certs later.  New
error codes needed to be added to indicate the failure of NSS shutdown and
NSS initialization due to this cause.
Modified Files:
	base/errorval.c nss/nssinit.c pki/pki3hack.c pki/pki3hack.h
	pki/pkistore.c pki/pkistore.h pki/tdcache.c pki/trustdomain.c
	util/secerr.h


git-svn-id: svn://10.0.0.236/trunk@136014 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-08 21:48:47 +00:00
wtc%netscape.com
37a5a7c29e Bug 183612: added some comments.
git-svn-id: svn://10.0.0.236/trunk@135609 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-24 02:25:36 +00:00
wtc%netscape.com
3ed557f63f Bug 183612: SECMOD_InitCallOnce() and SECMOD_CleanupCallOnce() should be
declared and defined with an argument list of "(void)" instead of "()".
Modified Files: pk11cert.c secmodi.h


git-svn-id: svn://10.0.0.236/trunk@135492 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-19 07:03:39 +00:00
wtc%netscape.com
9bb9b998ad Bug 183612: renamed some new functions to be consistent with existing
function names containing SubjectKey and PublicKey.  Moved internal
functions to private headers and use the lowercase cert_ prefix for the
internal functions for subject key ID mapping hash table. r=nelsonb.


git-svn-id: svn://10.0.0.236/trunk@135480 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-19 00:26:34 +00:00
relyea%netscape.com
6aa398e467 Bug 186058
git-svn-id: svn://10.0.0.236/trunk@135473 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-18 23:55:53 +00:00
wtc%netscape.com
29e9e50079 Bug 183612: fixed the bug that 'extra' may be used uninitialized. r=javi.
git-svn-id: svn://10.0.0.236/trunk@135445 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-18 02:06:01 +00:00
wtc%netscape.com
3d91602837 Set NSS version to 3.8 Beta on the trunk.
git-svn-id: svn://10.0.0.236/trunk@135437 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-17 23:04:46 +00:00
wtc%netscape.com
6abee61f79 Export CERT_DestroyOCSPResponse in 3.7. Moved HASH_GetHashObjectByOidTag,
HASH_GetHashTypeByOidTag, and SECITEM_ItemsAreEqual from 3.7 to 3.8.


git-svn-id: svn://10.0.0.236/trunk@135436 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-17 23:02:53 +00:00
relyea%netscape.com
b6c3b8ab7a Make sure the session is protected over PKCS #11 calls.
git-svn-id: svn://10.0.0.236/trunk@135409 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-17 18:22:38 +00:00
wtc%netscape.com
95cab123a2 Need to test for null pointers before destroying the lock and condition
variable.  If NSS initialization fails, this lock and condition variable
may not get created.


git-svn-id: svn://10.0.0.236/trunk@135382 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-17 02:47:46 +00:00
wtc%netscape.com
a4b978b840 I made a mistake in the previous checkin. certdb.h doesn't need to be
included because the new function CERT_FindCertBySubjKeyID is declared in
cert.h.


git-svn-id: svn://10.0.0.236/trunk@135380 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-17 02:08:51 +00:00
wtc%netscape.com
688bbc9eba Bug 183612: added support for looking up a cert by subject key ID and
creating a CMS recipient info from a subject key ID.  The patch was
contributed by Javi Delgadillo <javi@netscape.com>. r=relyea, wtc.
Modified Files:
	certdb/cert.h certdb/certdb.c certdb/certdb.h certdb/certv3.c
	certdb/stanpcertdb.c nss/nss.def nss/nssinit.c
	pk11wrap/pk11cert.c pk11wrap/pk11func.h pk11wrap/secmod.h
	pki/pki3hack.c smime/cms.h smime/cmslocal.h smime/cmspubkey.c
	smime/cmsrecinfo.c smime/cmssiginfo.c smime/cmst.h
	smime/smime.def


git-svn-id: svn://10.0.0.236/trunk@135377 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-17 01:39:46 +00:00
relyea%netscape.com
10cf066de9 Increment the tmpbuf pointer to the correct index point
git-svn-id: svn://10.0.0.236/trunk@135255 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-13 19:02:13 +00:00
relyea%netscape.com
0ef77cf53b Use correct sense of the timeout value.
git-svn-id: svn://10.0.0.236/trunk@135201 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-13 00:25:21 +00:00
nelsonb%netscape.com
d36cf9c052 Support SHA256, SHA384, and SHA512 hashes in NSS.
git-svn-id: svn://10.0.0.236/trunk@135163 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-12 06:05:45 +00:00
relyea%netscape.com
c2747050b5 Don't break solaris or linux (add the ';')
git-svn-id: svn://10.0.0.236/trunk@135137 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-11 17:56:49 +00:00
relyea%netscape.com
ab1e313edc Export new command to pull for token change events.
git-svn-id: svn://10.0.0.236/trunk@135136 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-11 17:53:20 +00:00
relyea%netscape.com
db9fdd7d91 Add token removal blocking function.
git-svn-id: svn://10.0.0.236/trunk@135134 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-11 17:43:24 +00:00
relyea%netscape.com
e6e68328f4 Make SubjectAltEncode a public function. Fixes build breakage in Linux
git-svn-id: svn://10.0.0.236/trunk@135039 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-10 17:41:16 +00:00
relyea%netscape.com
dab92f15e2 Export the AltSubjectEncode function so our test programs can build certs
with multiple email addresses.


git-svn-id: svn://10.0.0.236/trunk@135035 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-10 17:15:15 +00:00
relyea%netscape.com
1d0c8ab8f4 Create profiles for all the email addresses in a certificate.
git-svn-id: svn://10.0.0.236/trunk@135034 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-10 17:14:17 +00:00
relyea%netscape.com
6d321f494d Fix padding value.
git-svn-id: svn://10.0.0.236/trunk@134901 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-06 19:11:57 +00:00
nelsonb%netscape.com
24b5f2f335 Don't compile the .c files in lib/pki1 on the trunk. These files are used
only in Stan.


git-svn-id: svn://10.0.0.236/trunk@134857 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-05 22:15:36 +00:00
wtc%netscape.com
ff1e8de9dc Bug 39494: added a check to prevent buffer overflow. r=mcgreer,nelsonb.
git-svn-id: svn://10.0.0.236/trunk@134817 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-04 23:41:49 +00:00
wtc%netscape.com
3fcc5b0e17 Fixed the build breakage of const unsigned char[] and unsigned char *
mismatch on the Mac (compiler warnings on other platforms) by adding
(unsigned char *) typecasts.  r=relyea.  (Bug 183350)


git-svn-id: svn://10.0.0.236/trunk@134737 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-04 00:28:56 +00:00
wtc%netscape.com
22041a7a31 Bug 181878: fixed two more bugs in the new code to support multiple email
addresses per certificate.  r=nelsonb.


git-svn-id: svn://10.0.0.236/trunk@134510 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-27 01:28:03 +00:00
relyea%netscape.com
4a2048f209 More review changes,
Fix incorrect return in pcertdb.c


git-svn-id: svn://10.0.0.236/trunk@134496 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-26 22:14:56 +00:00
relyea%netscape.com
cfd47f83ed Incorporate some of Nelson's review changes.
Collapse all the profile data into an array for easier processing when printing out.


git-svn-id: svn://10.0.0.236/trunk@134479 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-26 21:03:18 +00:00
wtc%netscape.com
b36655bf56 Bug 180228: moved CERT_CRLCacheRefreshIssuer from the NSS_3.6.1 section to
the NSS_3.7 section.


git-svn-id: svn://10.0.0.236/trunk@134467 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-26 19:21:55 +00:00
relyea%netscape.com
512e484870 Incorporate Terry's and Nelson's reviews.
git-svn-id: svn://10.0.0.236/trunk@134459 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-26 18:27:25 +00:00
nelsonb%netscape.com
78dee2f73b Back out my last change.
git-svn-id: svn://10.0.0.236/trunk@134447 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-26 07:07:20 +00:00
nelsonb%netscape.com
ae3f5cf676 Eliminate bug due to uninitialized variable index. Eliminate leak.
Remove lots of warnings about signed/unsigned and assigning int to uchar.


git-svn-id: svn://10.0.0.236/trunk@134445 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-26 05:58:51 +00:00
relyea%netscape.com
bee24534b4 Bug 181878 allow multiple email addresses to point to a single subject record.
git-svn-id: svn://10.0.0.236/trunk@134427 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-26 00:13:54 +00:00
nelsonb%netscape.com
c7fa828cf4 Put the nss 3.7 section after the nss 3.6.1 section.
git-svn-id: svn://10.0.0.236/trunk@134283 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-21 23:22:52 +00:00
ian.mcgreer%sun.com
4a6e624c98 bug 172247, don't allow import of duplicate issuer/serial certs
git-svn-id: svn://10.0.0.236/trunk@134280 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-21 20:43:15 +00:00
nelsonb%netscape.com
5d17d7f988 Use the 32-bit code on Solaris x86 platforms, too.
git-svn-id: svn://10.0.0.236/trunk@134240 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-21 02:54:04 +00:00
nelsonb%netscape.com
fedc8e686e Back out revision 1.2, which was a workaround for a c preprocessor bug
in a certain version of the c compiler for Dec/Compaq Alpha OSF1.
The file now requires one of these compilers on that platform:
Compaq C V6.3-132  or Compaq C V6.4-214 (dtk)


git-svn-id: svn://10.0.0.236/trunk@134168 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-20 05:25:58 +00:00
nelsonb%netscape.com
a4fade561c Optimization: change macros to do only 32-bit arithmetic on platforms
with only 32-bit registers.


git-svn-id: svn://10.0.0.236/trunk@134135 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-20 00:48:09 +00:00
jpierre%netscape.com
1ed6e55689 Fix for bug 180894 - don't assert in ShutdownCRLCache()
git-svn-id: svn://10.0.0.236/trunk@134124 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-19 21:37:50 +00:00
nelsonb%netscape.com
9d03ba6df4 Change all functions that create contexts for encryption to treat their
input buffers as const.  Warning reduction.


git-svn-id: svn://10.0.0.236/trunk@133961 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-16 06:09:58 +00:00
jpierre%netscape.com
59aebc2144 Fix again?
git-svn-id: svn://10.0.0.236/trunk@133954 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-16 05:05:17 +00:00
jpierre%netscape.com
1a2fc25412 Fix build again !
git-svn-id: svn://10.0.0.236/trunk@133953 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-16 04:27:39 +00:00
nelsonb%netscape.com
c97983a27d Recognize new SHAxxx OIDs.
git-svn-id: svn://10.0.0.236/trunk@133950 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-16 03:34:53 +00:00
jpierre%netscape.com
65217a485f Fix build
git-svn-id: svn://10.0.0.236/trunk@133949 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-16 03:32:40 +00:00
nelsonb%netscape.com
b2932db701 Correct softoken routines to work with new larger SHAxxx hashes.
git-svn-id: svn://10.0.0.236/trunk@133948 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-16 03:32:39 +00:00
nelsonb%netscape.com
db40331209 Correct HMAC code to work with new larger SHAxxx hashes.
git-svn-id: svn://10.0.0.236/trunk@133947 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-16 03:30:37 +00:00
nelsonb%netscape.com
77afeeaeb6 Add new SHAxxx hash algorithms to tables of SECHashObjects.
git-svn-id: svn://10.0.0.236/trunk@133946 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-16 03:29:32 +00:00
nelsonb%netscape.com
c8de0109d7 Declare new vendor-defined mechanisms for SHA256, SHA384 and SHA512.
git-svn-id: svn://10.0.0.236/trunk@133945 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-16 03:25:01 +00:00
nelsonb%netscape.com
4d3de2d45e Now that we have hashes larger than SHA1,
#define HASH_LENGTH_MAX         SHA512_LENGTH


git-svn-id: svn://10.0.0.236/trunk@133944 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-16 03:21:53 +00:00