187 Commits

Author SHA1 Message Date
wtc%netscape.com
37a5a7c29e Bug 183612: added some comments.
git-svn-id: svn://10.0.0.236/trunk@135609 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-24 02:25:36 +00:00
wtc%netscape.com
9bb9b998ad Bug 183612: renamed some new functions to be consistent with existing
function names containing SubjectKey and PublicKey.  Moved internal
functions to private headers and use the lowercase cert_ prefix for the
internal functions for subject key ID mapping hash table. r=nelsonb.


git-svn-id: svn://10.0.0.236/trunk@135480 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-19 00:26:34 +00:00
wtc%netscape.com
688bbc9eba Bug 183612: added support for looking up a cert by subject key ID and
creating a CMS recipient info from a subject key ID.  The patch was
contributed by Javi Delgadillo <javi@netscape.com>. r=relyea, wtc.
Modified Files:
	certdb/cert.h certdb/certdb.c certdb/certdb.h certdb/certv3.c
	certdb/stanpcertdb.c nss/nss.def nss/nssinit.c
	pk11wrap/pk11cert.c pk11wrap/pk11func.h pk11wrap/secmod.h
	pki/pki3hack.c smime/cms.h smime/cmslocal.h smime/cmspubkey.c
	smime/cmsrecinfo.c smime/cmssiginfo.c smime/cmst.h
	smime/smime.def


git-svn-id: svn://10.0.0.236/trunk@135377 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-17 01:39:46 +00:00
nelsonb%netscape.com
d36cf9c052 Support SHA256, SHA384, and SHA512 hashes in NSS.
git-svn-id: svn://10.0.0.236/trunk@135163 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-12 06:05:45 +00:00
relyea%netscape.com
e6e68328f4 Make SubjectAltEncode a public function. Fixes build breakage in Linux
git-svn-id: svn://10.0.0.236/trunk@135039 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-10 17:41:16 +00:00
relyea%netscape.com
1d0c8ab8f4 Create profiles for all the email addresses in a certificate.
git-svn-id: svn://10.0.0.236/trunk@135034 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-10 17:14:17 +00:00
wtc%netscape.com
ff1e8de9dc Bug 39494: added a check to prevent buffer overflow. r=mcgreer,nelsonb.
git-svn-id: svn://10.0.0.236/trunk@134817 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-04 23:41:49 +00:00
ian.mcgreer%sun.com
4a6e624c98 bug 172247, don't allow import of duplicate issuer/serial certs
git-svn-id: svn://10.0.0.236/trunk@134280 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-21 20:43:15 +00:00
jpierre%netscape.com
1ed6e55689 Fix for bug 180894 - don't assert in ShutdownCRLCache()
git-svn-id: svn://10.0.0.236/trunk@134124 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-19 21:37:50 +00:00
jpierre%netscape.com
fcdf6d31a0 Patch for 180228 - export CRL cache flush API . r=wtc
git-svn-id: svn://10.0.0.236/trunk@133887 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-15 05:04:05 +00:00
ian.mcgreer%sun.com
b9da288235 bug 39494, handle non-standard AVAs properly
r=nelsonb


git-svn-id: svn://10.0.0.236/trunk@133828 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-14 17:04:43 +00:00
jpierre%netscape.com
941f0104bd Fix for 177798 . Improve handling of initialization / shutdown of the CRL cache using a static status variable
git-svn-id: svn://10.0.0.236/trunk@133228 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-07 00:02:31 +00:00
ian.mcgreer%sun.com
ac48db6445 bug 177366, clean up refcounting
r=relyea


git-svn-id: svn://10.0.0.236/trunk@133173 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-06 18:53:55 +00:00
jpierre%netscape.com
43710b3f3b Fix for bug 177798 - NULL pointers in ShutdownCRLCache to allow shutdown/restart
of NSS.


git-svn-id: svn://10.0.0.236/trunk@132852 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-02 00:07:48 +00:00
jpierre%netscape.com
f40d5c295c Fix for bug 175115 . Remove incorrect check for CA cert expiration. Also fix CRL signature verification and clean up internal functions . r=mcgreer,relyea,nelsonb,wtc
git-svn-id: svn://10.0.0.236/trunk@132742 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-30 23:31:38 +00:00
nelsonb%netscape.com
1bebb07ba4 Add new function CERT_VerifySignedDataWithPublicKey containing common code
factored from existing functions CERT_VerifySignedDataWithPubKeyInfo and
CERT_VerifySignedData.  Bug 174193.


git-svn-id: svn://10.0.0.236/trunk@132499 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-25 03:21:24 +00:00
nelsonb%netscape.com
cbddd29696 Include certi.h to resolve invocation of undeclared function.
git-svn-id: svn://10.0.0.236/trunk@132412 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-23 22:00:48 +00:00
nelsonb%netscape.com
3162991a34 Add 2 new functions to NSS, so an application can get a list of all
email addresses in a cert.  Bug 152986.
Modified Files: lib/nss/nss.def lib/certdb/alg1485.c lib/certdb/cert.h
                lib/certdb/certdb.c lib/certdb/certi.h


git-svn-id: svn://10.0.0.236/trunk@132408 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-23 20:50:51 +00:00
nelsonb%netscape.com
2a6f78cf87 Verify the self-signed signature on PKCS 10 cert requests before honoring
them.  Bug 174193.


git-svn-id: svn://10.0.0.236/trunk@132267 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-18 21:58:24 +00:00
relyea%netscape.com
faa9e5505e Bug 164501. Return a proper error code from PK11_FindCrlByName() so the CRL
code can decide if there is a hw or system failure preventing the reading of a
CRL or if the CRL is just not there.


git-svn-id: svn://10.0.0.236/trunk@131706 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-10 20:30:19 +00:00
jpierre%netscape.com
c1b8340977 Fix for 172678 - move internal functions InitCRLCache and ShutdownCRLCache to private header certi.h
git-svn-id: svn://10.0.0.236/trunk@131215 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-05 02:24:25 +00:00
wtc%netscape.com
753326f32e Bug 164744: fixed the comment block style.
git-svn-id: svn://10.0.0.236/trunk@131054 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-03 04:01:34 +00:00
wtc%netscape.com
24a53e67b2 Bug 149832: renamed highestUsage as certificateUsageHighest.
Modified files: certdb/certt.h certhigh/certvfy.c


git-svn-id: svn://10.0.0.236/trunk@131053 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-03 03:48:55 +00:00
jpierre%netscape.com
c9fe358c5a Fix for 164744 - implement new functions for pk12util . r=wtc
git-svn-id: svn://10.0.0.236/trunk@131051 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-03 03:35:32 +00:00
ian.mcgreer%sun.com
afc9d90049 bug 171224, changes to path construction
r=nelsonb


git-svn-id: svn://10.0.0.236/trunk@130884 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-01 14:32:15 +00:00
ian.mcgreer%sun.com
c281b854b0 bug 171198, leak moving temp cert to perm; add force parameter
r=wtc,relyea


git-svn-id: svn://10.0.0.236/trunk@130612 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-27 21:23:00 +00:00
wtc%netscape.com
a2219ad21a Bug 169790: renamed CERT_DecodeDERCrlEx to CERT_DecodeDERCrlWithFlags.
Modified files: certdb/cert.h certdb/crl.c nss/nss.def pk11wrap/pk11cert.c


git-svn-id: svn://10.0.0.236/trunk@130288 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-23 21:31:47 +00:00
jpierre%netscape.com
3d90ca4e50 Fix for bug 156042 - crash when CA not issued by a valid CA
git-svn-id: svn://10.0.0.236/trunk@130095 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-20 01:53:33 +00:00
jpierre%netscape.com
3ee12df237 Fix memory leak in CRL cache
git-svn-id: svn://10.0.0.236/trunk@129852 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-18 00:34:32 +00:00
wtc%netscape.com
3f36686830 Bug 168368: fixed an uninitialized memory read in CERT_CreateRDN. It
should not call va_arg if 'ava0' is NULL (which means 'ava0' is the last
argument).


git-svn-id: svn://10.0.0.236/trunk@129463 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-13 00:28:55 +00:00
jpierre%netscape.com
93d06b709b Fix for 167856 - memory leaks in CRL cache
git-svn-id: svn://10.0.0.236/trunk@129182 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-11 01:08:06 +00:00
jpierre%netscape.com
71c36768a7 Fix for 167849 - copy DER subject before adding an issuer to the hash table in CRL cache
git-svn-id: svn://10.0.0.236/trunk@129181 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-11 00:28:22 +00:00
jpierre%netscape.com
e142702047 Fix for 167649 - invalidate CRL cache when new CRL object is imported into a token
git-svn-id: svn://10.0.0.236/trunk@129143 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-10 04:49:09 +00:00
wtc%netscape.com
140573d377 Bug 160805: fixed a leak and a double free of the arena introduced in the
previous checkin.


git-svn-id: svn://10.0.0.236/trunk@129058 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-08 03:25:30 +00:00
jpierre%netscape.com
c58e9e8e95 Fix compiler warnings
git-svn-id: svn://10.0.0.236/trunk@129022 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-07 01:24:27 +00:00
wtc%netscape.com
a6988dbdf4 Bug 166933: fixed build breakage on the Mac.
Modified files: certdb/crl.c certhigh/certhigh.c softoken/dbmshim.c


git-svn-id: svn://10.0.0.236/trunk@128988 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-06 20:17:42 +00:00
nicolson%netscape.com
4b34ca8158 Fix 164126: makefile build error.
Change the NSS module name from "security" to "nss".


git-svn-id: svn://10.0.0.236/trunk@128961 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-06 16:38:56 +00:00
jpierre%netscape.com
b694a86db9 Fix for 162983 - consider all certs revoked if there is a bad CRL in the cache
git-svn-id: svn://10.0.0.236/trunk@128946 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-06 06:53:03 +00:00
wtc%netscape.com
16ce983004 Bugs 166734 and 166785: fixed compiler warnings reported by gcc on Linux.
The patch for this checkin is attached to bug 166785.


git-svn-id: svn://10.0.0.236/trunk@128926 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-06 00:27:52 +00:00
wtc%netscape.com
ed33538220 Fixed unresolved symbol DPCache_Refresh, which I believe is a misspelling
of DP_RefreshCache.


git-svn-id: svn://10.0.0.236/trunk@128879 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-05 16:34:27 +00:00
jpierre%netscape.com
c21d4d52fd Fix for 166714 - make SEC_FindCrlByName use the CRL cache
git-svn-id: svn://10.0.0.236/trunk@128864 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-05 06:12:33 +00:00
nelsonb%netscape.com
2298373c34 Treat empty SubjectAltName extensions as if they were non-existant.
Bugs 162979 166454.


git-svn-id: svn://10.0.0.236/trunk@128783 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-04 00:42:01 +00:00
jpierre%netscape.com
0a57a6320a Fix for 160805 . Make a copy of items into the arena before calling SEC_QuickDERDecodeItem where needed
git-svn-id: svn://10.0.0.236/trunk@128597 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-31 00:37:52 +00:00
jpierre%netscape.com
10bc1a61c0 Implement the CRL cache . Bug 149854
git-svn-id: svn://10.0.0.236/trunk@128594 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-30 22:57:03 +00:00
jpierre%netscape.com
20841a8843 Convert slow SEC_ASN1DecodeItem calls to SEC_QuickDERDecodeItem where possible. Performance improvement. Bug #160805 . r=relyea
git-svn-id: svn://10.0.0.236/trunk@128023 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-24 00:52:47 +00:00
wtc%netscape.com
de732d34dc Bug 164035: checked in a small code optimization suggested by
J”rg Brunsmann <joerg_brunsmann@yahoo.de>. Use the local variable that
has the same value.


git-svn-id: svn://10.0.0.236/trunk@127865 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-22 18:05:32 +00:00
wtc%netscape.com
e87805b09f Bug 163863: removed duplicate PORT_Memset calls in CERT_KeyFromDERCert.
Thanks to J”rg Brunsmann <joerg_brunsmann@yahoo.de> for the fix.


git-svn-id: svn://10.0.0.236/trunk@127779 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-21 18:05:20 +00:00
relyea%netscape.com
1364a51ba2 bug 161552: Make the recipient list traversal functions call the internal
nsstoken_FindCertByIssuerAndSN() function to gain the benefit of the fixed
Searching code.


git-svn-id: svn://10.0.0.236/trunk@127272 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-14 20:42:40 +00:00
jpierre%netscape.com
3459b6c362 Stop referencing deleted quickder.h header
git-svn-id: svn://10.0.0.236/trunk@126724 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-08 01:55:34 +00:00
jpierre%netscape.com
08b5310223 Implement partial CRL decoding. Fix for 149816. r=wtc . Uses new quick DER decoder
git-svn-id: svn://10.0.0.236/trunk@126597 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-07 03:44:12 +00:00