100 Commits

Author SHA1 Message Date
nelsonb%netscape.com
24d3f5738b Fix certutil's ability to read PQG files. Make certutil able to read
the files produced by the command "makepqg -a".  Plug some memory leaks.
r=relyea,vipul  Bug 247739


git-svn-id: svn://10.0.0.236/trunk@158387 18797224-902f-48f8-a5cc-f745e15eee43
2004-06-23 22:23:00 +00:00
ian.mcgreer%sun.com
f7fd7e85b4 bug 180268, reimplement ssl step-up for builtins
git-svn-id: svn://10.0.0.236/trunk@156475 18797224-902f-48f8-a5cc-f745e15eee43
2004-05-17 20:08:38 +00:00
gerv%gerv.net
43cb9e1492 Bug 236613: change to MPL/LGPL/GPL tri-license.
git-svn-id: svn://10.0.0.236/trunk@155484 18797224-902f-48f8-a5cc-f745e15eee43
2004-04-25 15:03:26 +00:00
nelsonb%netscape.com
f887f9cc12 Import base64 encoded certificate files with old MAC line endings.
Bug 221272. sr=wtc.


git-svn-id: svn://10.0.0.236/trunk@152828 18797224-902f-48f8-a5cc-f745e15eee43
2004-02-16 23:52:46 +00:00
wchang0222%aol.com
0882fac1ee Bugzilla bug 233112: fixed a typo: "futuer" -> "future". Thanks to
Heikki Toivonen <hjtoi-bugzilla@comcast.net> for the bug report.


git-svn-id: svn://10.0.0.236/trunk@152357 18797224-902f-48f8-a5cc-f745e15eee43
2004-02-05 05:56:54 +00:00
nelsonb%netscape.com
6a696f9188 Invoke SECU_RegisterDynamicOids() so that more OIDs will print out.
Bug 132942.  a=wtc.


git-svn-id: svn://10.0.0.236/trunk@152051 18797224-902f-48f8-a5cc-f745e15eee43
2004-01-29 22:48:58 +00:00
jpierre%netscape.com
12f7d5ece4 Fix crash in certutil if usage is omitted
git-svn-id: svn://10.0.0.236/trunk@149132 18797224-902f-48f8-a5cc-f745e15eee43
2003-11-11 00:01:32 +00:00
ian.mcgreer%sun.com
decc84df49 ECC code landing.
Contributed by Sheuling Chang, Stephen Fung, Vipul Gupta, Nils Gura,
and Douglas Stebila of Sun Labs


git-svn-id: svn://10.0.0.236/trunk@148060 18797224-902f-48f8-a5cc-f745e15eee43
2003-10-17 13:45:42 +00:00
jpierre%netscape.com
c124a4adcb Fix for 215182 - certutil prints incorrect nickname. r=wtc
git-svn-id: svn://10.0.0.236/trunk@147135 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-23 00:10:54 +00:00
jpierre%netscape.com
0561999feb Fix for 215214 - make certutil show all instances of certs . r=wtc
git-svn-id: svn://10.0.0.236/trunk@147013 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-18 02:00:32 +00:00
jpierre%netscape.com
0ec89fd1ed Prevent crash if certlist is NULL
git-svn-id: svn://10.0.0.236/trunk@146643 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-09 00:54:20 +00:00
jpierre%netscape.com
01e91272d3 Fix bug 214307 - add certutil batch mode . r=wtc
git-svn-id: svn://10.0.0.236/trunk@146640 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-08 23:30:29 +00:00
wtc%netscape.com
eee783e6a0 Bug 206926: 1. Undo the changes to secrng.h, pqgutil.h, swfutl.c,
unix_rand.c, and win_rand.c. 2. Make secrng.h and pqgutil.h private.
3. Public header pk11pqg.h can't include private header pqgutil.h.
4. Many files don't need to include secrng.h.  A few don't need to include
pqgutil.h.  5. Remove duplicate declarations of PQG_DestroyParams and
PQG_DestroyVerify from blapi.h.


git-svn-id: svn://10.0.0.236/trunk@143125 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-30 23:31:32 +00:00
nelsonb%netscape.com
e4a0e4653e Display an error message instead of crashing if the user forgets the -n
option with the -O (Dump Chain) option.


git-svn-id: svn://10.0.0.236/trunk@142153 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-06 02:50:03 +00:00
nelsonb%netscape.com
18a74c3e7d Fix bug 200224. Eliminate null ptr dereference.
git-svn-id: svn://10.0.0.236/trunk@140609 18797224-902f-48f8-a5cc-f745e15eee43
2003-04-02 23:24:01 +00:00
relyea%netscape.com
f054c87eff Incorporate wtc comment from bug 19061 (removal of commented code).
git-svn-id: svn://10.0.0.236/trunk@138888 18797224-902f-48f8-a5cc-f745e15eee43
2003-03-04 23:11:09 +00:00
relyea%netscape.com
48cadc778a Print all the certs for a given nickname, not just the first.
git-svn-id: svn://10.0.0.236/trunk@138881 18797224-902f-48f8-a5cc-f745e15eee43
2003-03-04 22:32:24 +00:00
wtc%netscape.com
23826d1288 Bug 145029: fixed compiler warnings (mostly "xxx might be used
uninitialized").


git-svn-id: svn://10.0.0.236/trunk@136476 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-17 02:49:11 +00:00
relyea%netscape.com
95a9aff695 Add the ability to generate certs with multiple DNS names.
git-svn-id: svn://10.0.0.236/trunk@136094 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-09 22:59:42 +00:00
bishakhabanerjee%netscape.com
43ef69edd2 checking return value of NSS_Shutdown. Bug 171263
git-svn-id: svn://10.0.0.236/trunk@135950 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-07 22:31:36 +00:00
wtc%netscape.com
9bb9b998ad Bug 183612: renamed some new functions to be consistent with existing
function names containing SubjectKey and PublicKey.  Moved internal
functions to private headers and use the lowercase cert_ prefix for the
internal functions for subject key ID mapping hash table. r=nelsonb.


git-svn-id: svn://10.0.0.236/trunk@135480 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-19 00:26:34 +00:00
nelsonb%netscape.com
d36cf9c052 Support SHA256, SHA384, and SHA512 hashes in NSS.
git-svn-id: svn://10.0.0.236/trunk@135163 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-12 06:05:45 +00:00
relyea%netscape.com
835ba61f1e Sigh, this is what was breaking the Linux builds... incorrect initializer.
git-svn-id: svn://10.0.0.236/trunk@135041 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-10 18:09:16 +00:00
relyea%netscape.com
224056f917 Add code to create multiple email addresses in a single cert.
git-svn-id: svn://10.0.0.236/trunk@135036 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-10 17:18:06 +00:00
nelsonb%netscape.com
2a6f78cf87 Verify the self-signed signature on PKCS 10 cert requests before honoring
them.  Bug 174193.


git-svn-id: svn://10.0.0.236/trunk@132267 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-18 21:58:24 +00:00
bishakhabanerjee%netscape.com
93ae51e1cc changed error string to reflect error better: 162714
git-svn-id: svn://10.0.0.236/trunk@132199 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-18 00:13:03 +00:00
nelsonb%netscape.com
01270dc30d Use unsigned ints for serial numbers. Bug 173872.
Add missing line break to cert requests.  Bug 174659.
Remove unused variables, and #ifndef NSPR20 code.


git-svn-id: svn://10.0.0.236/trunk@132126 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-17 01:41:14 +00:00
ian.mcgreer%sun.com
c91514f4dd bug 158078, unitialized variable due to a lot of unneccessary code
git-svn-id: svn://10.0.0.236/trunk@130530 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-26 20:30:11 +00:00
nicolson%netscape.com
4b34ca8158 Fix 164126: makefile build error.
Change the NSS module name from "security" to "nss".


git-svn-id: svn://10.0.0.236/trunk@128961 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-06 16:38:56 +00:00
wtc%netscape.com
6ee9d013fd Bug 136804: initialize inFile to PR_STDIN instead of NULL so that we don't
crash if the -i option is not specified.  Added two assertions to avoid
closing PR_STDIN due to internal errors.


git-svn-id: svn://10.0.0.236/trunk@128940 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-06 03:52:49 +00:00
jpierre%netscape.com
5a725d3799 Make certutil use the new CERT_VerifyCertificate function when verifying certs
git-svn-id: svn://10.0.0.236/trunk@125265 18797224-902f-48f8-a5cc-f745e15eee43
2002-07-16 00:45:50 +00:00
ian.mcgreer%sun.com
88f990cef8 bug 136701, certutil should use PK11_ListCerts
git-svn-id: svn://10.0.0.236/trunk@122266 18797224-902f-48f8-a5cc-f745e15eee43
2002-05-29 18:19:33 +00:00
kirk.erickson%sun.com
12c97ff0d7 Fixed OCSP typo.
git-svn-id: svn://10.0.0.236/trunk@122222 18797224-902f-48f8-a5cc-f745e15eee43
2002-05-28 18:26:37 +00:00
ian.mcgreer%sun.com
087cfad2e3 fix error statement
git-svn-id: svn://10.0.0.236/trunk@118867 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-12 19:17:48 +00:00
relyea%netscape.com
50406c66c5 Bug 133584: Fix reference leaks which prevent shutdown in NSS and in the tests.
Debug builds can verify correct operation by setting NSS_STRICT_SHUTDOWN, which
will cause an assert if shutdown is called but not all the modules are freed (which
means a slot, key, or cert reference has been leaked).


git-svn-id: svn://10.0.0.236/trunk@118866 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-12 19:05:21 +00:00
ian.mcgreer%sun.com
0b26715a58 bug 136806, don't authenticate to friendly slots when adding certs
git-svn-id: svn://10.0.0.236/trunk@118865 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-12 18:07:49 +00:00
relyea%netscape.com
c7bd5dd538 return the correct error codes to make all.sh happy.
git-svn-id: svn://10.0.0.236/trunk@118192 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-05 03:16:41 +00:00
relyea%netscape.com
61415f9b42 Link certutil dynamically.
git-svn-id: svn://10.0.0.236/trunk@118173 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-05 00:12:21 +00:00
wtc%netscape.com
d6ed4f8b39 Bugzilla bug 133545: fixed spelling errors "signning" in certutil memu
options.  Thanks to Eric Murphy <ericmurphy@jabber.org> for the bug report.


git-svn-id: svn://10.0.0.236/trunk@117516 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-26 22:22:07 +00:00
wtc%netscape.com
4d2eddeffb Bugzilla bug 131078: fixed compiler warnings. r=mcgreer.
git-svn-id: svn://10.0.0.236/trunk@116631 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-15 06:07:41 +00:00
ian.mcgreer%sun.com
185ed3d0f6 fix looking up a key on a token
git-svn-id: svn://10.0.0.236/trunk@115445 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-27 22:12:06 +00:00
ian.mcgreer%sun.com
358f1a0a6a make listing of certs finish cleanly under purify
git-svn-id: svn://10.0.0.236/trunk@114510 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-14 18:02:30 +00:00
ian.mcgreer%sun.com
554c4ef86a bug 124268, usage statement for dump chain option
git-svn-id: svn://10.0.0.236/trunk@114031 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-08 15:22:54 +00:00
ian.mcgreer%sun.com
73e7836ead bug 124268, -P is used twice
git-svn-id: svn://10.0.0.236/trunk@113910 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-07 22:28:04 +00:00
relyea%netscape.com
4965975f8a Make the following functions open the databases Readonly:
ListCerts PrintHelp ListKeys ListModules CheckCertValidity Version

Add an option (-X) to restore the old behaviour of openning the Databases R/W


git-svn-id: svn://10.0.0.236/trunk@113391 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-01 02:26:40 +00:00
ian.mcgreer%sun.com
c2387fe9a7 have certutil shutdown cleanly so purify is easier to deal with
git-svn-id: svn://10.0.0.236/trunk@113331 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-31 19:27:07 +00:00
ian.mcgreer%sun.com
c1c7114dbe changes related to bug 115660
* fipstoken will only force authentication for object-related functions when the object is a private or secret key
* certutil does not authenticate to token when in FIPS and only doing cert-related operations
* QA does not provide password to certutil when doing cert-related operations in FIPS tests


git-svn-id: svn://10.0.0.236/trunk@113122 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-29 17:30:22 +00:00
relyea%netscape.com
61c9862c40 Fix bug 115660. Note that fixing the bugs necessitates fixing the test
cases as well. The test case was depending on the failure to read certs to
detect the failure to read keys. Now certutil returns a failure if no keys
are found. This also means that the FIPS test after the key and cert
has been deleted should expect a failure to list any keys.


git-svn-id: svn://10.0.0.236/trunk@112866 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-25 19:03:17 +00:00
ian.mcgreer%sun.com
ee3a6d6fd8 force generated serial #'s to always be positive
git-svn-id: svn://10.0.0.236/trunk@112143 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-15 01:53:11 +00:00
ian.mcgreer%sun.com
0938408b74 add command to certutil for dumping the chain of a cert
git-svn-id: svn://10.0.0.236/trunk@111790 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-10 04:30:00 +00:00