33 Commits

Author SHA1 Message Date
wtc%netscape.com
37a5a7c29e Bug 183612: added some comments.
git-svn-id: svn://10.0.0.236/trunk@135609 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-24 02:25:36 +00:00
wtc%netscape.com
9bb9b998ad Bug 183612: renamed some new functions to be consistent with existing
function names containing SubjectKey and PublicKey.  Moved internal
functions to private headers and use the lowercase cert_ prefix for the
internal functions for subject key ID mapping hash table. r=nelsonb.


git-svn-id: svn://10.0.0.236/trunk@135480 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-19 00:26:34 +00:00
wtc%netscape.com
688bbc9eba Bug 183612: added support for looking up a cert by subject key ID and
creating a CMS recipient info from a subject key ID.  The patch was
contributed by Javi Delgadillo <javi@netscape.com>. r=relyea, wtc.
Modified Files:
	certdb/cert.h certdb/certdb.c certdb/certdb.h certdb/certv3.c
	certdb/stanpcertdb.c nss/nss.def nss/nssinit.c
	pk11wrap/pk11cert.c pk11wrap/pk11func.h pk11wrap/secmod.h
	pki/pki3hack.c smime/cms.h smime/cmslocal.h smime/cmspubkey.c
	smime/cmsrecinfo.c smime/cmssiginfo.c smime/cmst.h
	smime/smime.def


git-svn-id: svn://10.0.0.236/trunk@135377 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-17 01:39:46 +00:00
relyea%netscape.com
e6e68328f4 Make SubjectAltEncode a public function. Fixes build breakage in Linux
git-svn-id: svn://10.0.0.236/trunk@135039 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-10 17:41:16 +00:00
jpierre%netscape.com
fcdf6d31a0 Patch for 180228 - export CRL cache flush API . r=wtc
git-svn-id: svn://10.0.0.236/trunk@133887 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-15 05:04:05 +00:00
nelsonb%netscape.com
1bebb07ba4 Add new function CERT_VerifySignedDataWithPublicKey containing common code
factored from existing functions CERT_VerifySignedDataWithPubKeyInfo and
CERT_VerifySignedData.  Bug 174193.


git-svn-id: svn://10.0.0.236/trunk@132499 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-25 03:21:24 +00:00
nelsonb%netscape.com
3162991a34 Add 2 new functions to NSS, so an application can get a list of all
email addresses in a cert.  Bug 152986.
Modified Files: lib/nss/nss.def lib/certdb/alg1485.c lib/certdb/cert.h
                lib/certdb/certdb.c lib/certdb/certi.h


git-svn-id: svn://10.0.0.236/trunk@132408 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-23 20:50:51 +00:00
nelsonb%netscape.com
2a6f78cf87 Verify the self-signed signature on PKCS 10 cert requests before honoring
them.  Bug 174193.


git-svn-id: svn://10.0.0.236/trunk@132267 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-18 21:58:24 +00:00
jpierre%netscape.com
c1b8340977 Fix for 172678 - move internal functions InitCRLCache and ShutdownCRLCache to private header certi.h
git-svn-id: svn://10.0.0.236/trunk@131215 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-05 02:24:25 +00:00
wtc%netscape.com
753326f32e Bug 164744: fixed the comment block style.
git-svn-id: svn://10.0.0.236/trunk@131054 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-03 04:01:34 +00:00
jpierre%netscape.com
c9fe358c5a Fix for 164744 - implement new functions for pk12util . r=wtc
git-svn-id: svn://10.0.0.236/trunk@131051 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-03 03:35:32 +00:00
wtc%netscape.com
a2219ad21a Bug 169790: renamed CERT_DecodeDERCrlEx to CERT_DecodeDERCrlWithFlags.
Modified files: certdb/cert.h certdb/crl.c nss/nss.def pk11wrap/pk11cert.c


git-svn-id: svn://10.0.0.236/trunk@130288 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-23 21:31:47 +00:00
jpierre%netscape.com
10bc1a61c0 Implement the CRL cache . Bug 149854
git-svn-id: svn://10.0.0.236/trunk@128594 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-30 22:57:03 +00:00
jpierre%netscape.com
08b5310223 Implement partial CRL decoding. Fix for 149816. r=wtc . Uses new quick DER decoder
git-svn-id: svn://10.0.0.236/trunk@126597 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-07 03:44:12 +00:00
relyea%netscape.com
d3854a3ac9 1) factor out fortezzav1 from the chain processing code to make the code easier
to read.
2) only extract keys if we are using fortezzav1 cert (should speed up cert verify
a bit).
3) Add function to verify a specific CA cert to verify a userCert Usage.


git-svn-id: svn://10.0.0.236/trunk@126239 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-02 17:51:20 +00:00
jpierre%netscape.com
a6c742786a 158005 - add new CRL decode and import functions . Benefits are :
- ability to import to any slot
- ability to specify decode options, such as "don't copy DER"
- ability to specify import options, such as "don't do CRL checks"
This patch also maps the existing functions SEC_NewCrl and CERT_ImportCRL
to this new function, eliminating the code duplication that existed


git-svn-id: svn://10.0.0.236/trunk@125481 18797224-902f-48f8-a5cc-f745e15eee43
2002-07-19 00:59:34 +00:00
jpierre%netscape.com
f29a33f656 Add new CERT_VerifyCertificate function - fix for 149832
git-svn-id: svn://10.0.0.236/trunk@124664 18797224-902f-48f8-a5cc-f745e15eee43
2002-07-04 03:09:49 +00:00
rangansen%netscape.com
00563fcd57 exporting CERT_VerifyCertChain. r=relyea
git-svn-id: svn://10.0.0.236/trunk@123595 18797224-902f-48f8-a5cc-f745e15eee43
2002-06-19 15:58:51 +00:00
wtc%netscape.com
a8e2c91a4d Bugzilla bug 130703: fixed several issues in the NSS 3.4 exported headers.
1) Preseve the position of NSS 3.3 elements in the data structures.  Some
new fields replace some old deprecated fields where possible to preserve
the total size of the structure.
2) Stan headers are removed from public exports.
3) Some exported functions didn't have prototypes in the public headers.
4) One bug fix: dev3hack.c did not pass the second argument to
nssToken_DestroyCertList.
5) Include the necessary headers to fix undeclared function warnings.


git-svn-id: svn://10.0.0.236/trunk@116522 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-14 04:12:25 +00:00
relyea%netscape.com
dd1d27c432 Clean up compilier warnings on Solaris and Linux, most particularly:
1) Implicit declaration of function.
2) Possibly unitialized variables.

These warnings have indicated some real problems in the code, so many changes
are not just to silence the warnings, but to fix the problems. Others were
inocuous, but the warnings were silenced to reduce the noise.


git-svn-id: svn://10.0.0.236/trunk@109938 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-07 01:36:25 +00:00
relyea%netscape.com
162c530b16 Land BOB_WORK_BRANCH unto the tip.
remove lots of depricated files.
move some files to appropriate directories (pcertdb *_rand
associated headers to soft token, for instance)
rename several stan files which had the same name as other nss files.
remove depricated functions.


git-svn-id: svn://10.0.0.236/trunk@107628 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-08 00:15:51 +00:00
nelsonb%netscape.com
ff5b19c0fb Fix bug 72753. Interpret the "slop time" as seconds, not microseconds.
Also, use type PRTime instead of int64 in relevant places.


git-svn-id: svn://10.0.0.236/trunk@97663 18797224-902f-48f8-a5cc-f745e15eee43
2001-06-21 03:20:09 +00:00
relyea%netscape.com
3577c25c62 Add DER version of isCA for JSS.
git-svn-id: svn://10.0.0.236/trunk@96571 18797224-902f-48f8-a5cc-f745e15eee43
2001-06-06 23:40:51 +00:00
wtc%netscape.com
c4babfa1f2 Bugzilla bug #77199: more PR_CALLBACK changes received from Javier
Pedemonte <pedemont@us.ibm.com> for OS/2.
Modified files: cert.h, certdb.h


git-svn-id: svn://10.0.0.236/trunk@95708 18797224-902f-48f8-a5cc-f745e15eee43
2001-05-22 22:01:33 +00:00
nelsonb%netscape.com
e4570a946c Merged in changes from NSS_3_2_BRANCH.
git-svn-id: svn://10.0.0.236/trunk@92003 18797224-902f-48f8-a5cc-f745e15eee43
2001-04-11 22:28:11 +00:00
nelsonb%netscape.com
42affac00d Allow application to customize cert verification slop time.
Default is 24 hours.  Bug 48300. Reviewed by wtc.
Modified Files:
 	lib/nss/nss.def lib/certdb/cert.h lib/certdb/certdb.c


git-svn-id: svn://10.0.0.236/trunk@86644 18797224-902f-48f8-a5cc-f745e15eee43
2001-02-09 01:06:41 +00:00
relyea%netscape.com
d796033708 Bug 65903: Fixes to allow iWS admin stuff to work with shared library NSS
Add necessary exported symbols.
Fix bug in NSS_Initialize where we weren't passing the read only paramter
	through.
Add function to search for Certificate Lists so that Traverse does not need to
	be exposed.
Update pkcs11 names.


git-svn-id: svn://10.0.0.236/trunk@85148 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-19 07:53:54 +00:00
mcgreer%netscape.com
7d7458c348 back out previous change
git-svn-id: svn://10.0.0.236/trunk@84582 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-08 19:43:01 +00:00
mcgreer%netscape.com
ea9b61f05b decoding nickname entries needs to include the nickname.
when searching for smime entry, verify subject is correct (can be multiple
subjects per email address)


git-svn-id: svn://10.0.0.236/trunk@84580 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-08 19:24:23 +00:00
nelsonb%netscape.com
c6ec12f986 Reduce warnings by adding missing #includes to eliminate calls to
undeclared functions.


git-svn-id: svn://10.0.0.236/trunk@84366 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-04 08:21:15 +00:00
nelsonb%netscape.com
819d88d496 Create a new function, CERT_DupCertList(), and call it instead of calling
CERT_CertChainFromCert in ssl_DupSocket().  This is MUCH faster.  This is
the first approximation of the right fix.  The next step is to consider
doing ref counting instead of actual duplication.  Fixes bug 51425 .


git-svn-id: svn://10.0.0.236/trunk@78596 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-09 06:08:46 +00:00
chrisk%netscape.com
c97a690adc Merge smimetk_branch to tip...
git-svn-id: svn://10.0.0.236/trunk@72136 18797224-902f-48f8-a5cc-f745e15eee43
2000-06-13 21:56:37 +00:00
relyea%netscape.com
a4d4d45374 Initial NSS Open Source checkin
git-svn-id: svn://10.0.0.236/trunk@64788 18797224-902f-48f8-a5cc-f745e15eee43
2000-03-31 20:13:40 +00:00