361 Commits

Author SHA1 Message Date
jpierre%netscape.com
9d6c410b11 Reset NSPR error text before adding the module to make sure we aren't getting some previous error
git-svn-id: svn://10.0.0.236/trunk@114248 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-12 04:25:15 +00:00
jpierre%netscape.com
8b6f524f9d Make modutil display a more detailed error when a PKCS#11 module fails to load. This is done by checking the NSPR error text that is set by PR_LoadLibrary failures deep in SECMOD_AddNewModule
git-svn-id: svn://10.0.0.236/trunk@114245 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-12 04:09:21 +00:00
wtc%netscape.com
f4a5b96f33 Bugzilla bug 114748: deleted unnecessary EXTRA_LIBS augmentation. The
zlib and jar libs are already added to EXTRA_LIBS by ../platlibs.mk.


git-svn-id: svn://10.0.0.236/trunk@114231 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-12 02:01:03 +00:00
nelsonb%netscape.com
d2efb641d7 Make NSS 3.4 build as part of mozilla on OS/2. Bug 114748.
Patch supplied by Javier Pedemonte.


git-svn-id: svn://10.0.0.236/trunk@114184 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-11 05:48:37 +00:00
ian.mcgreer%sun.com
554c4ef86a bug 124268, usage statement for dump chain option
git-svn-id: svn://10.0.0.236/trunk@114031 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-08 15:22:54 +00:00
wtc%netscape.com
6a055b3707 Bugzilla bug 124318: do not link with -lsoftokn3 explicitly. Use the
-rpath-link linker option on Linux to find libsoftokn3.so.


git-svn-id: svn://10.0.0.236/trunk@113989 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-08 03:15:40 +00:00
bishakhabanerjee%netscape.com
897849a2c9 Patch for bug 119368: SECU_PrintError prints decimal error code now if
unknown error


git-svn-id: svn://10.0.0.236/trunk@113968 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-08 01:20:04 +00:00
ian.mcgreer%sun.com
73e7836ead bug 124268, -P is used twice
git-svn-id: svn://10.0.0.236/trunk@113910 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-07 22:28:04 +00:00
wtc%netscape.com
bab3530e7f Bugzilla bug 119340: write the "selfserv: received SIGTERM" message to
standard output (fd 1) instead of standard error (fd 2) because the test
script writes its output to standard output (with the echo command).


git-svn-id: svn://10.0.0.236/trunk@113735 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-06 01:38:06 +00:00
ian.mcgreer%sun.com
633f5faf30 bug 90518, selfserv dumps cache state before shutdown with -y option
git-svn-id: svn://10.0.0.236/trunk@113530 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-02 19:39:48 +00:00
wtc%netscape.com
6cba3e1cfe Bugzilla bug 119340: install a SIGTERM handler on Linux for debugging.
git-svn-id: svn://10.0.0.236/trunk@113403 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-01 05:57:49 +00:00
relyea%netscape.com
4965975f8a Make the following functions open the databases Readonly:
ListCerts PrintHelp ListKeys ListModules CheckCertValidity Version

Add an option (-X) to restore the old behaviour of openning the Databases R/W


git-svn-id: svn://10.0.0.236/trunk@113391 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-01 02:26:40 +00:00
ian.mcgreer%sun.com
c2387fe9a7 have certutil shutdown cleanly so purify is easier to deal with
git-svn-id: svn://10.0.0.236/trunk@113331 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-31 19:27:07 +00:00
wtc%netscape.com
52cd995d98 Bugzilla bug 119340: backed out the fix. We are still seeing the
"selfserv process not detectable" errors on Linux and I don't have
time to get to the bottom of it.
Modified files:
	cmd/selfserv/selfserv.c tests/common/init.sh tests/ssl/ssl.sh


git-svn-id: svn://10.0.0.236/trunk@113271 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-31 02:03:57 +00:00
relyea%netscape.com
b30eea42df 1) put some defensive programming so we don't crash on invalid der.
2) set the start offset correctly for multi-byte lengths when decoding sets
and sequences


git-svn-id: svn://10.0.0.236/trunk@113168 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-30 00:24:12 +00:00
relyea%netscape.com
cd1b6d6069 More 'pretty print' improvements. Decode context specific data a little more.
git-svn-id: svn://10.0.0.236/trunk@113123 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-29 17:50:27 +00:00
ian.mcgreer%sun.com
c1c7114dbe changes related to bug 115660
* fipstoken will only force authentication for object-related functions when the object is a private or secret key
* certutil does not authenticate to token when in FIPS and only doing cert-related operations
* QA does not provide password to certutil when doing cert-related operations in FIPS tests


git-svn-id: svn://10.0.0.236/trunk@113122 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-29 17:30:22 +00:00
relyea%netscape.com
61c9862c40 Fix bug 115660. Note that fixing the bugs necessitates fixing the test
cases as well. The test case was depending on the failure to read certs to
detect the failure to read keys. Now certutil returns a failure if no keys
are found. This also means that the FIPS test after the key and cert
has been deleted should expect a failure to list any keys.


git-svn-id: svn://10.0.0.236/trunk@112866 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-25 19:03:17 +00:00
wtc%netscape.com
6fd02510af Bugzilla bug 119340: an inelegant but more reliable way to kill the
multithreaded 'selfserv' process on Linux.
Modified files:
    cmd/selfserv/selfserv.c tests/common/init.sh tests/ssl/ssl.sh


git-svn-id: svn://10.0.0.236/trunk@112572 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-23 03:18:57 +00:00
wtc%netscape.com
f3b808bdf3 Bugzilla bug 119340: added a debug printf statement.
git-svn-id: svn://10.0.0.236/trunk@112290 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-16 03:29:06 +00:00
ian.mcgreer%sun.com
ee3a6d6fd8 force generated serial #'s to always be positive
git-svn-id: svn://10.0.0.236/trunk@112143 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-15 01:53:11 +00:00
kirk.erickson%sun.com
be41a6dbba Fixed termination when using -L 30 (see bug 107777).
This is a temporary solution, creating SYSTEM rather than USER loggerThread.
Later we should create a USER thread, Interrupt, and tell the thread to exit.


git-svn-id: svn://10.0.0.236/trunk@111907 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-11 01:03:28 +00:00
ian.mcgreer%sun.com
0938408b74 add command to certutil for dumping the chain of a cert
git-svn-id: svn://10.0.0.236/trunk@111790 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-10 04:30:00 +00:00
nelsonb%netscape.com
b3949a7795 Add error strings for new NSPR error codes. Bug 118668.
git-svn-id: svn://10.0.0.236/trunk@111785 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-10 03:00:30 +00:00
ian.mcgreer%sun.com
9c9e4ed53c this is why apps shouldn't be able to change cert values...
git-svn-id: svn://10.0.0.236/trunk@110729 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-18 21:11:41 +00:00
jpierre%netscape.com
492923673e Fix for 105764 - compiler warnings
git-svn-id: svn://10.0.0.236/trunk@110348 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-12 03:48:28 +00:00
sonja.mirtitsch%sun.com
b6287bc6dd fixed the comment
git-svn-id: svn://10.0.0.236/trunk@109964 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-07 03:18:23 +00:00
jpierre%netscape.com
0537050ef1 Code formatting patch to support legacy text editors
git-svn-id: svn://10.0.0.236/trunk@109954 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-07 02:09:45 +00:00
jpierre%netscape.com
0634c586ca Fix for 108097 - allow cmsutil to work with dual-key certs for signing and encrypting
git-svn-id: svn://10.0.0.236/trunk@109895 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-06 23:19:41 +00:00
jpierre%netscape.com
d4339da176 Improve error handling in cmsutil - don't proceed when error occurs, and display more information about failures using SECU_PrintError
git-svn-id: svn://10.0.0.236/trunk@109797 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-06 03:19:22 +00:00
jpierre%netscape.com
ad378cbe33 Fix OS/2 build bustage - conflict with error.h from OS/2 toolkit . Put explicit include path to resolve it
git-svn-id: svn://10.0.0.236/trunk@109782 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-06 01:36:07 +00:00
sonja.mirtitsch%sun.com
ce79c1719a added dbtest
git-svn-id: svn://10.0.0.236/trunk@109757 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-05 23:35:55 +00:00
sonja.mirtitsch%sun.com
b031c036c9 test for key and cert databases
git-svn-id: svn://10.0.0.236/trunk@109747 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-05 19:18:14 +00:00
wtc%netscape.com
d6278cf4d9 Bugzilla bug 111574: standard header files should be included with
#include <foo.h>, not #include "foo.h".  Thanks to Roland Mainz
<Roland.Mainz@informatik.med.uni-giessen.de> for the patch.  r=wtc.
Modified files: signtool.h jar.h


git-svn-id: svn://10.0.0.236/trunk@109645 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-04 18:36:58 +00:00
jpierre%netscape.com
5c0fe0cb75 Fix crlutil crash on error
git-svn-id: svn://10.0.0.236/trunk@109089 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-28 02:47:22 +00:00
kirk.erickson%sun.com
b992807046 Fixes bug 107777. Added '-L <seconds>' argument (ops/sec logging).
Review by Nelson and Wan-Teh made this patch very clean.  We are
now creating a separating logger() thread.


git-svn-id: svn://10.0.0.236/trunk@109009 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-27 20:08:57 +00:00
ian.mcgreer%sun.com
5c2f85abc0 include AES in performance info dump
git-svn-id: svn://10.0.0.236/trunk@108901 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-26 17:53:44 +00:00
nelsonb%netscape.com
41c640be48 Change form to inform user that serial number is a hex string.
git-svn-id: svn://10.0.0.236/trunk@108748 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-21 23:38:25 +00:00
nelsonb%netscape.com
ad7c192d68 Some bug fixes found while debugging a different bug.
git-svn-id: svn://10.0.0.236/trunk@108746 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-21 23:33:26 +00:00
jpierre%netscape.com
da95debbe0 Fix for 95264 - add more info in s/mime script
git-svn-id: svn://10.0.0.236/trunk@108723 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-21 21:37:12 +00:00
nelsonb%netscape.com
0b78f800ea Change the behavior of the -list <module> option so that it doesn't stop
at the first error it encounters when looping through the slots, and so
that it displays the slot info even if it cannot get token info. 111075


git-svn-id: svn://10.0.0.236/trunk@108719 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-21 20:52:37 +00:00
ian.mcgreer%sun.com
25af9bb35b fips fix for signtool
git-svn-id: svn://10.0.0.236/trunk@108318 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-16 19:39:37 +00:00
kirk.erickson%sun.com
072424c974 Resolves 107777 - selfserv needs log stats mode
git-svn-id: svn://10.0.0.236/trunk@107940 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-13 02:13:19 +00:00
ian.mcgreer%sun.com
3a136e2217 Output validated cert text to stdout, otherwise the QA scripts think there is a failure.
git-svn-id: svn://10.0.0.236/trunk@107742 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-09 16:40:26 +00:00
nelsonb%netscape.com
b4a47a9861 Added a new -o option, to override check on received client auth certs,
forcing those certs to be OK.  -v will now test the SSL_LocalCertificate()
function.  Bug 78959.


git-svn-id: svn://10.0.0.236/trunk@107731 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-09 05:45:21 +00:00
nelsonb%netscape.com
f14f3467c1 Add code to test new SSL_LocalCertificate() function on first connection,
or on every connection if -vv option is used.  Bug 78959.
Also, the nickname "none" can now be used to prevent performing client
authentication without having to use an invalid password.


git-svn-id: svn://10.0.0.236/trunk@107730 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-09 05:43:06 +00:00
ian.mcgreer%sun.com
d16299751e fips changes. forces login for cert listing.
git-svn-id: svn://10.0.0.236/trunk@107710 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-09 00:37:03 +00:00
ian.mcgreer%sun.com
d7dcb593c7 this seems to be needed to get linux linking again. libnss3.so tries to access the C_GetFunctionList entry point to the libsoftokn3.so library directly, and linux complains that it can't find it.
git-svn-id: svn://10.0.0.236/trunk@107645 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-08 03:44:17 +00:00
relyea%netscape.com
162c530b16 Land BOB_WORK_BRANCH unto the tip.
remove lots of depricated files.
move some files to appropriate directories (pcertdb *_rand
associated headers to soft token, for instance)
rename several stan files which had the same name as other nss files.
remove depricated functions.


git-svn-id: svn://10.0.0.236/trunk@107628 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-08 00:15:51 +00:00
nelsonb%netscape.com
b91f3120f1 Reimplement SSL_GetChannelInfo. Add new function SSL_GetCipherSuiteInfo().
Also, implement new ciphersuite preference order.  Bug 78959.


git-svn-id: svn://10.0.0.236/trunk@107060 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-02 04:24:28 +00:00