3212 Commits

Author SHA1 Message Date
wchang0222%aol.com
a975bb0bad Print the error message if NSS_NoDB_Init fails.
git-svn-id: svn://10.0.0.236/trunk@162985 18797224-902f-48f8-a5cc-f745e15eee43
2004-09-30 00:49:36 +00:00
nelsonb%netscape.com
0ce29ee8bb Fix bugzilla bug 261496. Absent OPTIONAL CHOICEs should not cause fatal
errors.  Fix printing code to not crash on missing optional nextUpdate.
r=julien.pierre


git-svn-id: svn://10.0.0.236/trunk@162858 18797224-902f-48f8-a5cc-f745e15eee43
2004-09-27 22:41:41 +00:00
nelsonb%netscape.com
92981b2a58 Fix bug 261333. Use the modulus length for the length of the output
buffer, not the length of the input data.  r=julien.pierre


git-svn-id: svn://10.0.0.236/trunk@162763 18797224-902f-48f8-a5cc-f745e15eee43
2004-09-24 21:44:20 +00:00
nelsonb%netscape.com
9012bc4efb Patch by kinmoz@netscape.net. Fix bug 260882 by clearing the valid
cache flag (named "searchedObjectType") even when the cache was empty.


git-svn-id: svn://10.0.0.236/trunk@162647 18797224-902f-48f8-a5cc-f745e15eee43
2004-09-22 01:45:26 +00:00
saul.edwards%sun.com
ee2a39fa88 258779: Add /usr/lib/mps to RPATH for Solaris 10.
git-svn-id: svn://10.0.0.236/trunk@162514 18797224-902f-48f8-a5cc-f745e15eee43
2004-09-17 22:25:50 +00:00
saul.edwards%sun.com
4df6f209a6 245518: Add /usr/lib/mps to RPATH for tools.
git-svn-id: svn://10.0.0.236/trunk@162513 18797224-902f-48f8-a5cc-f745e15eee43
2004-09-17 22:01:32 +00:00
nelsonb%netscape.com
24cb32cce1 Increase the maximum allowable size of the prime field for DH computations.
bug 259229.


git-svn-id: svn://10.0.0.236/trunk@162482 18797224-902f-48f8-a5cc-f745e15eee43
2004-09-17 00:34:52 +00:00
saul.edwards%sun.com
a4245ddc54 Bug 245915: Add NSS_IsInitialized prototype to header.
git-svn-id: svn://10.0.0.236/trunk@162458 18797224-902f-48f8-a5cc-f745e15eee43
2004-09-16 16:31:45 +00:00
nelsonb%netscape.com
84e4da7446 Two new functions: PK11_PubEncryptPKCS1 and PK11_PrivDecryptPKCS1.
Bugzilla bug 258366. Ported from NSS 3.9 branch.


git-svn-id: svn://10.0.0.236/trunk@161904 18797224-902f-48f8-a5cc-f745e15eee43
2004-09-08 02:52:15 +00:00
nelsonb%netscape.com
1254619e89 export CERT_ConvertAndDecodeCertificate and SEC_PKCS7EncodeItem from
libSMIME.  Bugzilla bug 258362.  Fix ported from 3.9 branch.


git-svn-id: svn://10.0.0.236/trunk@161903 18797224-902f-48f8-a5cc-f745e15eee43
2004-09-08 01:20:46 +00:00
nelsonb%netscape.com
2e83ecc5c6 Add root CA certs for Certum, Comodo, and IPS.
Bugzilla bugs 242040 244982 252132.


git-svn-id: svn://10.0.0.236/trunk@161689 18797224-902f-48f8-a5cc-f745e15eee43
2004-09-03 04:35:28 +00:00
wchang0222%aol.com
25ae563789 Added a comment explaining how NSS_BUILTINS_LIBRARY_VERSION_MINOR should be
incremented.


git-svn-id: svn://10.0.0.236/trunk@161538 18797224-902f-48f8-a5cc-f745e15eee43
2004-08-31 17:39:15 +00:00
wchang0222%aol.com
14a39e0932 Bugzilla bug 252375: added version information to the nssckbi shared
library. r=relyea.
Modified Files: config.mk manifest.mn nssckbi.h
Added Files: ckbiver.c nssckbi.rc


git-svn-id: svn://10.0.0.236/trunk@161536 18797224-902f-48f8-a5cc-f745e15eee43
2004-08-31 17:28:50 +00:00
jpierre%netscape.com
d0508b133e Fix for 254393 - r=nelsonb . PK11_FindKeyByAnyCert returned invalid key objects
git-svn-id: svn://10.0.0.236/trunk@160428 18797224-902f-48f8-a5cc-f745e15eee43
2004-08-06 02:24:31 +00:00
jpierre%netscape.com
b8e901d04f Fix for 249488 - make Single-Threaded mode work
git-svn-id: svn://10.0.0.236/trunk@160324 18797224-902f-48f8-a5cc-f745e15eee43
2004-08-03 23:24:37 +00:00
relyea%netscape.com
af0102823e 1) Add time command to time specific functions.
2) improve the help system.
3) bug fixes for arrays.


git-svn-id: svn://10.0.0.236/trunk@160103 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-30 00:25:21 +00:00
relyea%netscape.com
506bb7cb63 Error strings for new error codes.
git-svn-id: svn://10.0.0.236/trunk@160102 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-30 00:19:49 +00:00
relyea%netscape.com
778eec1a21 Bugzilla Bug 252702
NSS needs to handle better token insertion and removal.

Applied from patch to NSS 3.9


git-svn-id: svn://10.0.0.236/trunk@160095 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-29 23:38:14 +00:00
jpierre%netscape.com
ee35d10017 Fix for 249488 - root cert module requires locking functions in CK_C_INITIALIZE_ARGS . r=ian, sr=relyea
git-svn-id: svn://10.0.0.236/trunk@160090 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-29 22:51:00 +00:00
nelsonb%netscape.com
8277ff48a4 Correct option parsing, and add missing error messages.
git-svn-id: svn://10.0.0.236/trunk@159990 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-28 21:10:07 +00:00
nelsonb%netscape.com
dd98e093ad Support GeneralizeTime in the CRMF library. Bug 219080. r=julien.
Patch by nelson and julien.


git-svn-id: svn://10.0.0.236/trunk@159898 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-27 05:06:02 +00:00
relyea%netscape.com
cb8fbb0164 Bug 250687
NSS Crashes or leaks Cert references if bad certs are passed up by PKCS #11 modules.
r=nelson
sr=ian


git-svn-id: svn://10.0.0.236/trunk@159599 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-21 18:18:05 +00:00
relyea%netscape.com
e3613aae0c Backing out pk11cert.c changes (not ready for checkin yet). (revert to 1.133)
git-svn-id: svn://10.0.0.236/trunk@159558 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-20 23:04:31 +00:00
relyea%netscape.com
edff876e29 Fix optimized builds (make tinderbox go green).
git-svn-id: svn://10.0.0.236/trunk@159557 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-20 23:02:04 +00:00
relyea%netscape.com
df9ee80a77 Missed function definition in previous checkin.
git-svn-id: svn://10.0.0.236/trunk@159509 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-19 22:37:48 +00:00
relyea%netscape.com
79864835d3 refactor pk11util, splitting large single files down to a managable size.
bug 246130. The new factor is:

pk11akey.c - asymetric keys constructed from pk11cert.c and pk11skey.c
pk11auth.c - authentication/password management factored from pk11slot.c
pk11cert.c - cert code with private key, crls and trust factored out.
pk11ctx.c -- pkcs11 context code, factored out of pk11skey.c
new pk11func.h -- for backward compatibility.
pk11mech.c - mechanism mapping code, factored mostly from pk11slot.c
pk11nobj.c - netscape objects (crls and trust), factored mostly from pk11cert.c
pk11obj.c - generic object support, factored from pk11skey.c pk11slot.c and
pk11cert.c
pk11priv.h -- private functions factored from pk11func.h
pk11pub.h -- public functions factored from pk11func.h
pk11skey.c - now only symetric key ops; private, public key ops, generic ops
and crypto contexs have been factored out.
pk11slot.c - still slot operations. Authentication, generic object ops,
mechanism mapping has been factored out.

This patch should only have refactoring, no new functions or other changes.


git-svn-id: svn://10.0.0.236/trunk@159504 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-19 22:12:38 +00:00
nelsonb%netscape.com
4791ee737c Use the "c beautifier" (cb) to give this code a common K&R style with
an indentation of 4.  Also rewrap a few strangely wrapped lines.
Bug 249330.


git-svn-id: svn://10.0.0.236/trunk@159304 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-16 00:04:47 +00:00
nelsonb%netscape.com
324befa90f Apply review feedback to signtool sources. Add test case to QA tests.
Bug 248751.


git-svn-id: svn://10.0.0.236/trunk@159298 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-15 22:21:57 +00:00
nelsonb%netscape.com
8115cc035e Add -X option to produce signed XPI files for mozilla. Bug 248751.
Path contributed by jeff klawiter <jeff@j-maxx.net>. r=nelson


git-svn-id: svn://10.0.0.236/trunk@159222 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-15 00:01:50 +00:00
nelsonb%netscape.com
350330e15f Allow subtemplates to have the SEC_ASN1_DYNAMIC flag without asserting.
Bug 245429. Patch 4 of 5.  r=relyea.


git-svn-id: svn://10.0.0.236/trunk@159128 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-13 06:02:54 +00:00
nelsonb%netscape.com
84eaf700cd Fix some casts. Wrap some long lines. Remove a bogus assert.
Factor a function call out of the arguments of another function call,
which is mostly to make that code more easily debugged.
This is patch 3 of 5 for bug 245429. r=wtc.


git-svn-id: svn://10.0.0.236/trunk@159127 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-13 05:52:24 +00:00
nelsonb%netscape.com
6342fd9761 Function sec_asn1e_write_contents was two functions combined into one,
separated by one huge if-then-else.  They do different things and take
different arguments.  So, I split them into two separate functions:
sec_asn1e_write_contents and sec_asn1e_write_contents_from_buf
the latter of which takes a buf pointer and length argument.
The if statement that chooses between the two is now in the caller.
This is patch 2 of 5 for bug 245429.  r=wtc.


git-svn-id: svn://10.0.0.236/trunk@159126 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-13 05:49:48 +00:00
nelsonb%netscape.com
5586ad953a rename "explicit" to "isExplicit" because MSVC6 thinks explicit is a c
keyword.  rename "ignore_stream" to "disallowStreaming" because it
doesn't merely ignore.  rename "ignoresubstream" to "disallowStreaming"
for the same reason.  Patch 1 of 5 for bug 245429. sr=wtc.


git-svn-id: svn://10.0.0.236/trunk@159125 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-13 05:44:47 +00:00
nelsonb%netscape.com
e405cf4d26 Greatly improve the output of the PKCS12 encoder. Adds output buffering
to the output callback function that is called by the ASN.1 encoders,
and which feeds into the next PKCS7 encoder in the outward direction.
Bug 210179.  sr=relyea


git-svn-id: svn://10.0.0.236/trunk@159123 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-13 05:31:34 +00:00
nelsonb%netscape.com
d4b84e4620 Ensure that the CRMF library always uses a non-null pool pointer when it
calls the ASN1 Decoder.  This prevents leaks.  Bug 178898. r=relyea.


git-svn-id: svn://10.0.0.236/trunk@159121 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-13 05:12:31 +00:00
wchang0222%aol.com
a95cce03b7 Bugzilla bug 248981: PKCS #11 modules that are based on older lib/ckfw (for
example, the nssckbi module) save a pointer to the CK_C_INITIALIZE_ARGS
passed to them. So if we pass a pointer to the stack variable moduleArgs,
the pointer will point to a structure that has gone out of scope. To
prevent crashes in these broken modules, we continue to pass a pointer to
the global secmodLockFunctions whenever we can. r=relyea.


git-svn-id: svn://10.0.0.236/trunk@158932 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-08 23:23:50 +00:00
wchang0222%aol.com
b4c8df8df4 Bugzilla bug 249284: removed a duplicate declaration of
CERT_DecodeDERCertificate. r=nelsonb. Thanks to Chris Newman
of Sun for the bug report.


git-svn-id: svn://10.0.0.236/trunk@158814 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-07 00:48:53 +00:00
jpierre%netscape.com
a65c767359 Fix for 248981 - make SECMOD_LoadPKCS11Module thread safe. r=relyea
git-svn-id: svn://10.0.0.236/trunk@158658 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-01 19:20:51 +00:00
nelsonb%netscape.com
7f3bae81b3 Output properly encoded PQGParams. r=wtc. Bug 247738.
git-svn-id: svn://10.0.0.236/trunk@158626 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-01 02:07:02 +00:00
jpierre%netscape.com
7c5876a082 Fix for 249310 - add option to disable SSL2 in selfserv . r=nelson
git-svn-id: svn://10.0.0.236/trunk@158625 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-01 02:06:31 +00:00
nelsonb%netscape.com
44c47c0478 Treat non-repudiation-only certs as valid signature certs.
Bug 240456.  r=wtc, sr=relyea.


git-svn-id: svn://10.0.0.236/trunk@158624 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-01 00:26:00 +00:00
nelsonb%netscape.com
b463fcd106 Correct NSS to use the most specific, not most general CN attribute in
a cert subject name.  Bug 197964.  r=wtc.


git-svn-id: svn://10.0.0.236/trunk@158623 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-01 00:21:42 +00:00
nelsonb%netscape.com
9fe96f18ad Follow the SSL2 specification more closely in accepting and rejecting
SSL messages.  Previously NSS would reject some it should accept
and vice versa.  Bugscape bug 57121. r=wtc,julien


git-svn-id: svn://10.0.0.236/trunk@158397 18797224-902f-48f8-a5cc-f745e15eee43
2004-06-24 02:06:41 +00:00
nelsonb%netscape.com
24d3f5738b Fix certutil's ability to read PQG files. Make certutil able to read
the files produced by the command "makepqg -a".  Plug some memory leaks.
r=relyea,vipul  Bug 247739


git-svn-id: svn://10.0.0.236/trunk@158387 18797224-902f-48f8-a5cc-f745e15eee43
2004-06-23 22:23:00 +00:00
relyea%netscape.com
01510c097f Bug 244914, 244907 r=nelsonb
Add support for unprotected private keys without requiring authentication.
Add support to access application specific PKCS #11 objects through NSS.


git-svn-id: svn://10.0.0.236/trunk@158274 18797224-902f-48f8-a5cc-f745e15eee43
2004-06-21 23:01:53 +00:00
nelsonb%netscape.com
60b11d5244 Initialize the "type" member in the SECItems returned by
PK11_PQG_ParamGetSeedLen so encoded values will be correct.
Bug 247737. r=relyea.


git-svn-id: svn://10.0.0.236/trunk@158259 18797224-902f-48f8-a5cc-f745e15eee43
2004-06-21 19:22:02 +00:00
saul.edwards%sun.com
45521d7d95 Bug 245518: add RPATH to BUILD_SUN_PKG, add $ORIGIN to rpath
git-svn-id: svn://10.0.0.236/trunk@158184 18797224-902f-48f8-a5cc-f745e15eee43
2004-06-19 06:09:03 +00:00
jpierre%netscape.com
8385c4f9e2 Fix for 237934 - nss_InitLock not atomic. r=nelson
git-svn-id: svn://10.0.0.236/trunk@158176 18797224-902f-48f8-a5cc-f745e15eee43
2004-06-19 03:21:39 +00:00
jpierre%netscape.com
531176a301 Wrap long lines
git-svn-id: svn://10.0.0.236/trunk@158082 18797224-902f-48f8-a5cc-f745e15eee43
2004-06-18 02:03:30 +00:00
jpierre%netscape.com
3090294504 Restore comment that got removed accidentally. And fix typo in it.
git-svn-id: svn://10.0.0.236/trunk@158078 18797224-902f-48f8-a5cc-f745e15eee43
2004-06-18 01:34:11 +00:00