relyea%netscape.com
db66460cc5
Fix solaris compiler error/warning. Fix prototype to return correct value (PRBool not PRStatus).
...
git-svn-id: svn://10.0.0.236/trunk@123969 18797224-902f-48f8-a5cc-f745e15eee43
2002-06-24 23:54:16 +00:00
relyea%netscape.com
b64d478e29
Don't decode or extract trust for certs if we are just getting the nicknames -- particularly for user certs.
...
git-svn-id: svn://10.0.0.236/trunk@123959 18797224-902f-48f8-a5cc-f745e15eee43
2002-06-24 22:36:59 +00:00
relyea%netscape.com
dbfdef4a37
Reset the cert cache and clobber cert handles on token insertion an removal
...
git-svn-id: svn://10.0.0.236/trunk@123244 18797224-902f-48f8-a5cc-f745e15eee43
2002-06-13 21:40:43 +00:00
relyea%netscape.com
ae88814fc8
Fix spelling error.
...
git-svn-id: svn://10.0.0.236/trunk@121952 18797224-902f-48f8-a5cc-f745e15eee43
2002-05-21 21:23:33 +00:00
jpierre%netscape.com
3d920a25ee
Fix for bug 137645 - cached certificate does not get its nickname updated after P12 import of matching user certificate
...
git-svn-id: svn://10.0.0.236/trunk@121899 18797224-902f-48f8-a5cc-f745e15eee43
2002-05-20 23:21:39 +00:00
relyea%netscape.com
394940b694
Automatically create a NULL email profile for certs with email addresses which
...
are imported into the internal token.
git-svn-id: svn://10.0.0.236/trunk@120975 18797224-902f-48f8-a5cc-f745e15eee43
2002-05-07 20:38:59 +00:00
ian.mcgreer%sun.com
1e68160965
bug 142175, PK11_ListCerts regressions -- handle PKCS#11 incompatibilites with serial numbers, and fix trust collection.
...
git-svn-id: svn://10.0.0.236/trunk@120949 18797224-902f-48f8-a5cc-f745e15eee43
2002-05-07 14:58:12 +00:00
ian.mcgreer%sun.com
2fd68a1c79
When doing cert traversals, create the certs in full as they are found. This avoids thrashing the softoken's object cache when the database has a large number of certs.
...
git-svn-id: svn://10.0.0.236/trunk@119963 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-26 14:34:05 +00:00
ian.mcgreer%sun.com
befe2ca30f
fix broken HPUX builds
...
git-svn-id: svn://10.0.0.236/trunk@119958 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-26 12:59:06 +00:00
ian.mcgreer%sun.com
240768dc76
if a cert already exists, use C_SetAttributeValue to change its mutable attributes during import (instead of trying to recreate it)
...
git-svn-id: svn://10.0.0.236/trunk@119856 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-25 20:49:49 +00:00
ian.mcgreer%sun.com
5e0a1eab3c
reorganize token cache so that cache entries for imported objects are created from the token, not from the user-supplied template
...
git-svn-id: svn://10.0.0.236/trunk@119843 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-25 19:33:47 +00:00
relyea%netscape.com
81f4e81e01
Don't set the Token value before fetching CRL attributes. This code is fetching
...
attributes from a known CRL, not looking up new attributes (I'm pretty sure that
CVS apropos would show I checked in the previously wrong code).
bob
git-svn-id: svn://10.0.0.236/trunk@119832 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-25 18:33:45 +00:00
relyea%netscape.com
6a46ac6264
Don't crash if our cache entry is not found.
...
git-svn-id: svn://10.0.0.236/trunk@119800 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-25 00:45:42 +00:00
relyea%netscape.com
3d3e22dba5
Look up both DER encoded serial numbers (PKCS #11 spec), and decode serial
...
numbers (Old NSS) when looking up certs by issuer and SN.
git-svn-id: svn://10.0.0.236/trunk@119722 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-24 18:27:17 +00:00
ian.mcgreer%sun.com
57c0f959ce
fix shutdown leaks
...
git-svn-id: svn://10.0.0.236/trunk@119622 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-23 17:22:13 +00:00
relyea%netscape.com
034136c5db
Token and cert processing fixes:
...
1) use NewTempCert rather than DERDecode cert in all import cert cases.
When DERDecode cert is used, we may wind up with a cert that gets cleared
when we try to import it because it already in the cache. NewTempCert will
return the version that is in the cache.
2) If we are returning the CAList, only return certs that are CA's
(not usercerts).
3) Authenticate to all the tokens if necessary before we try to list
certs. (Stan code should eventually get automatic authentication calls in
the code itself).
4) When looking up user certs, don't return those certs with the same
subject, but do not have any key material associated with them (that is
don't crash if we have old certs in our database without nicknames, but
match user certs on our smart cards).
5) Save the nickname associated with our subject list in the temp
cache so we can correctly remove the entry even if the cert's nickname
changes (because of smart card insertions and removals, or because of
creation and deletions of our user cert).
git-svn-id: svn://10.0.0.236/trunk@119557 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-22 19:09:01 +00:00
ian.mcgreer%sun.com
eb543c80f2
file is no longer part of build (functionality in devtoken.c)
...
git-svn-id: svn://10.0.0.236/trunk@119554 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-22 18:28:30 +00:00
ian.mcgreer%sun.com
88ac348c0d
overwrite old entry during import, so that changing trust works correctly
...
git-svn-id: svn://10.0.0.236/trunk@119547 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-22 15:21:06 +00:00
ian.mcgreer%sun.com
9d553c9294
fix bugs in cert import with smart card cache
...
git-svn-id: svn://10.0.0.236/trunk@119546 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-22 14:14:44 +00:00
ian.mcgreer%sun.com
bfdfb2a5be
re-sync the trust domain cache with token insertion/removal
...
git-svn-id: svn://10.0.0.236/trunk@119434 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-19 23:06:44 +00:00
ian.mcgreer%sun.com
2f30d58738
* make sure the token cache returns failure in overflow case
...
* change internal module trust order again, builtins uses 100, and internal module must come first
git-svn-id: svn://10.0.0.236/trunk@119415 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-19 19:30:12 +00:00
ian.mcgreer%sun.com
782014ef9d
improve synchronization between the token state and token cache operations
...
git-svn-id: svn://10.0.0.236/trunk@119408 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-19 17:32:22 +00:00
ian.mcgreer%sun.com
bafa34ec88
Fixes for smart card cache. Don't do cache searches by email address, since GetAttributeValue does not set that field. Handle removal correctly for item at tail of list. Don't search token after a successful cache search that returned zero hits.
...
git-svn-id: svn://10.0.0.236/trunk@119405 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-19 16:14:13 +00:00
relyea%netscape.com
58bccc96dd
Don't crash if we try to get the name of a non-existant token.
...
git-svn-id: svn://10.0.0.236/trunk@119278 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-18 17:54:30 +00:00
ian.mcgreer%sun.com
2f83527b52
landing new smart card cache, bug 135429
...
git-svn-id: svn://10.0.0.236/trunk@119274 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-18 17:30:05 +00:00
ian.mcgreer%sun.com
7c1a3c929d
bug 63815, AIX compiler fails to build ckhelper.c in debug mode
...
git-svn-id: svn://10.0.0.236/trunk@118990 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-15 21:04:00 +00:00
ian.mcgreer%sun.com
d1d308ecd3
fix bbroken solaris x86 build
...
git-svn-id: svn://10.0.0.236/trunk@118988 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-15 16:20:39 +00:00
ian.mcgreer%sun.com
f87d824279
bug 135521, change cert lookups on tokens to be actual finds instead of traversals
...
git-svn-id: svn://10.0.0.236/trunk@118986 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-15 15:22:11 +00:00
relyea%netscape.com
50406c66c5
Bug 133584: Fix reference leaks which prevent shutdown in NSS and in the tests.
...
Debug builds can verify correct operation by setting NSS_STRICT_SHUTDOWN, which
will cause an assert if shutdown is called but not all the modules are freed (which
means a slot, key, or cert reference has been leaked).
git-svn-id: svn://10.0.0.236/trunk@118866 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-12 19:05:21 +00:00
relyea%netscape.com
7d579a63ce
Handle yet another PKCS #11 device which has non-standard behavior, but is well established in the market place.
...
git-svn-id: svn://10.0.0.236/trunk@118553 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-09 17:58:00 +00:00
ian.mcgreer%sun.com
23a7527e3f
fix broken 64-bit platforms
...
git-svn-id: svn://10.0.0.236/trunk@118255 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-05 15:19:37 +00:00
ian.mcgreer%sun.com
dbcf2c42b3
Land Stan changes to tip. Mostly header file / structure / API cleanup. Note
...
that these changes *do not* affect the current build, except for some minor edits.
git-svn-id: svn://10.0.0.236/trunk@118136 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-04 20:00:28 +00:00
ian.mcgreer%sun.com
fa729cca08
merge branch fix for bug 115954 to tip
...
git-svn-id: svn://10.0.0.236/trunk@118024 18797224-902f-48f8-a5cc-f745e15eee43
2002-04-03 19:22:15 +00:00
relyea%netscape.com
d0f2ca5260
handle older tokens that do not handle GetAttributes correctly.
...
git-svn-id: svn://10.0.0.236/trunk@116654 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-15 19:51:27 +00:00
wtc%netscape.com
a8e2c91a4d
Bugzilla bug 130703: fixed several issues in the NSS 3.4 exported headers.
...
1) Preseve the position of NSS 3.3 elements in the data structures. Some
new fields replace some old deprecated fields where possible to preserve
the total size of the structure.
2) Stan headers are removed from public exports.
3) Some exported functions didn't have prototypes in the public headers.
4) One bug fix: dev3hack.c did not pass the second argument to
nssToken_DestroyCertList.
5) Include the necessary headers to fix undeclared function warnings.
git-svn-id: svn://10.0.0.236/trunk@116522 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-14 04:12:25 +00:00
relyea%netscape.com
156fb9e6dc
Cache whether there are no CRL's and Trust objects on removable HW tokens
...
git-svn-id: svn://10.0.0.236/trunk@116101 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-07 23:21:39 +00:00
ian.mcgreer%sun.com
8e15d46893
bug 129298, handle different nicknames across tokens
...
r=relyea/a=wtc
git-svn-id: svn://10.0.0.236/trunk@116093 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-07 22:08:00 +00:00
relyea%netscape.com
c42edc81c4
bug 125808 :
...
Reset the token name on token removal.
Check for token presence to reset the session handle.
Consolidate the NSS3 style TokenInit with the stan init so everything is in sync.
r=ddrinan
git-svn-id: svn://10.0.0.236/trunk@115905 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-06 01:44:50 +00:00
relyea%netscape.com
b05500f1e0
Fix token/cert interactions:
...
1) don't have certs disappear because we have empty tokens.
2) Make sure the NSSToken structure has up-to-date nicknames.
git-svn-id: svn://10.0.0.236/trunk@115743 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-04 22:39:28 +00:00
ian.mcgreer%sun.com
0fd4de720c
IMPLEMENT-->EXTERN for header file
...
git-svn-id: svn://10.0.0.236/trunk@115725 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-04 17:17:47 +00:00
ian.mcgreer%sun.com
c6c1bc65dc
bug 125808, update cert token instances when caching smart card certs that are already cached
...
git-svn-id: svn://10.0.0.236/trunk@115724 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-04 17:13:54 +00:00
ian.mcgreer%sun.com
c8a065c248
partial fix for bug 125808, if the otken is not logged in when the cert cache loading is done, retry later
...
git-svn-id: svn://10.0.0.236/trunk@115441 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-27 21:36:19 +00:00
relyea%netscape.com
3bf2f19204
Use timers to determine whether or not to do the smart card present checks
...
or not.
bob
git-svn-id: svn://10.0.0.236/trunk@114614 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-16 00:29:37 +00:00
relyea%netscape.com
ee5c92c39f
Fix missing certs from the listing of all the certs in tokens with large cert caches (larger than 32).
...
git-svn-id: svn://10.0.0.236/trunk@114603 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-15 17:37:58 +00:00
ian.mcgreer%sun.com
025e636383
bug 125165, don't crash when the softoken fails to return attributes for a cert object
...
git-svn-id: svn://10.0.0.236/trunk@114429 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-13 21:09:15 +00:00
ian.mcgreer%sun.com
6bdc28b0d8
place where iterator was not freed
...
git-svn-id: svn://10.0.0.236/trunk@113721 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-05 22:32:38 +00:00
ian.mcgreer%sun.com
7ec531594f
last part of bug 121628, permanent slots should respond immediately to IsPresent() call
...
git-svn-id: svn://10.0.0.236/trunk@113631 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-04 21:57:07 +00:00
ian.mcgreer%sun.com
126fdb9cd7
bug 121628, persistent cache of hardware token certs
...
git-svn-id: svn://10.0.0.236/trunk@113428 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-01 17:25:15 +00:00
relyea%netscape.com
f5ee7acbf0
Unsigned values are always greater than '0'!
...
git-svn-id: svn://10.0.0.236/trunk@113170 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-30 00:48:24 +00:00
relyea%netscape.com
9b55e3a569
Built-ins set the ulValueLen to -1 to indicate an unknown attribute type.
...
git-svn-id: svn://10.0.0.236/trunk@113141 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-29 21:12:13 +00:00