Bommels05/Mozilla
Bommels05/Mozilla
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
160,034 Commits 3,986 Branches 0 Tags
Commit Graph

37 Commits

Author SHA1 Message Date
nelsonb%netscape.com
5f09451b56 Set SSL2 and SSL3 timeout times properly for SSL server session cache. 
Bug 223242. r=jullien.pierre


git-svn-id: svn://10.0.0.236/trunk@188382 18797224-902f-48f8-a5cc-f745e15eee43
 2006-01-28 02:21:31 +00:00
julien.pierre.bugs%sun.com
8f4becb003 Fix for 292156. Prevent crash in SSL session cache init if invalid arguments are passed. r=nelson 
git-svn-id: svn://10.0.0.236/trunk@184446 18797224-902f-48f8-a5cc-f745e15eee43
 2005-11-11 02:45:59 +00:00
nelsonb%netscape.com
66cf75f421 Implement two new SSL socket options: SSL_BYPASS_PKCS11 and SSL_NO_LOCKS. 
Reorganize the SSL Socket structure contents to obviate ssl3 pointer.
Move much of the ECC code from ssl3con to new file ssl3ecc.c.  derive.c
implements derivation of the SSL/TLS master secret and the encryption and
MAC keys and IVs without using PKCS11. Bug 305147. r=rrelyea.
Modified Files: ssl/config.mk ssl/manifest.mn ssl/ssl.h ssl/ssl3con.c
    ssl/ssl3gthr.c ssl/sslauth.c ssl/sslcon.c ssl/ssldef.c ssl/sslgathr.c
    ssl/sslimpl.h ssl/sslinfo.c ssl/sslnonce.c ssl/sslsecur.c ssl/sslsnce.c
    ssl/sslsock.c
Added Files: ssl/derive.c ssl/ssl3ecc.c


git-svn-id: svn://10.0.0.236/trunk@179892 18797224-902f-48f8-a5cc-f745e15eee43
 2005-09-09 03:02:16 +00:00
nelsonb%netscape.com
00749853c3 Remove fortezza code from libSSL and from the SSL test programs. 
Stop building fortezza's special software token, and fortezza specific
test programs.   Bug 239960. r=rrelyea.
Modified Files:
    cmd/manifest.mn cmd/platlibs.mk cmd/SSLsample/server.c
    cmd/SSLsample/sslsample.c cmd/modutil/modutil.c
    cmd/selfserv/selfserv.c cmd/sslstrength/sslstrength.c
    cmd/strsclnt/strsclnt.c cmd/tstclnt/tstclnt.c
    cmd/vfyserv/vfyserv.c cmd/vfyserv/vfyutil.c lib/manifest.mn
    lib/ssl/nsskea.c lib/ssl/preenc.h lib/ssl/prelib.c
    lib/ssl/ssl.h lib/ssl/ssl3con.c lib/ssl/ssl3prot.h
    lib/ssl/sslauth.c lib/ssl/sslcon.c lib/ssl/sslenum.c
    lib/ssl/sslimpl.h lib/ssl/sslinfo.c lib/ssl/sslproto.h
    lib/ssl/sslsecur.c lib/ssl/sslsnce.c lib/ssl/sslsock.c
    lib/ssl/sslt.h


git-svn-id: svn://10.0.0.236/trunk@177810 18797224-902f-48f8-a5cc-f745e15eee43
 2005-08-16 03:42:26 +00:00
nelsonb%netscape.com
663db84c36 Back out the preceeding fortezza removal patch, which was accidentally 
applied to the trunk, not to the intended branch.


git-svn-id: svn://10.0.0.236/trunk@171823 18797224-902f-48f8-a5cc-f745e15eee43
 2005-04-06 21:35:45 +00:00
nelsonb%netscape.com
b62572db42 Remove fortezza support from libSSL and related commands. Bug 239960. 
ON PERFORMANCE_HACKS_BRANCH.  r=rrelyea.


git-svn-id: svn://10.0.0.236/trunk@171820 18797224-902f-48f8-a5cc-f745e15eee43
 2005-04-06 19:43:19 +00:00
nelsonb%netscape.com
07cab5177e Do not crash if Server SID cache is uninitialized. Bug 237724 r=Julien 
Instead, if SSL_NO_CACHE is not set, return an error code.


git-svn-id: svn://10.0.0.236/trunk@170428 18797224-902f-48f8-a5cc-f745e15eee43
 2005-03-09 05:20:44 +00:00
jpierre%netscape.com
8385c4f9e2 Fix for 237934 - nss_InitLock not atomic. r=nelson 
git-svn-id: svn://10.0.0.236/trunk@158176 18797224-902f-48f8-a5cc-f745e15eee43
 2004-06-19 03:21:39 +00:00
gerv%gerv.net
62b0f34e77 Bug 236613: change to MPL/LGPL/GPL tri-license. Restore Id: lines. 
git-svn-id: svn://10.0.0.236/trunk@155606 18797224-902f-48f8-a5cc-f745e15eee43
 2004-04-27 23:04:40 +00:00
gerv%gerv.net
43cb9e1492 Bug 236613: change to MPL/LGPL/GPL tri-license. 
git-svn-id: svn://10.0.0.236/trunk@155484 18797224-902f-48f8-a5cc-f745e15eee43
 2004-04-25 15:03:26 +00:00
wchang0222%aol.com
2aff98abf2 Bugzilla bug 222065: fixed a bug (inside #ifdef WINNT) introduced in the 
previous checkin.


git-svn-id: svn://10.0.0.236/trunk@148244 18797224-902f-48f8-a5cc-f745e15eee43
 2003-10-22 01:00:10 +00:00
nelsonb%netscape.com
701f341286 SSL_ShutdownServerSessionIDCache no longer leaks the cache memory. 
Bug 222065. r=wchang0222


git-svn-id: svn://10.0.0.236/trunk@148117 18797224-902f-48f8-a5cc-f745e15eee43
 2003-10-19 01:25:10 +00:00
nelsonb%netscape.com
06d3adf3af Add missing return statement. 
git-svn-id: svn://10.0.0.236/trunk@140378 18797224-902f-48f8-a5cc-f745e15eee43
 2003-03-27 03:07:47 +00:00
wtc%netscape.com
ede99124e6 Bug 199082: checked in Nelson's patch, which 
a) changes selfserv to test the return value from NSS_Shutdown.
b) changes SECMOD_Shutdown to set the error code SEC_ERROR_BUSY before
   returning SECFailure.
c) Adds a new function SSL_ShutdownServerSessionIDCache to ssl.h.
d) Changes selfserv to call SSL_ShutdownServerSessionIDCache before calling
NSS_Shutdown.
Modified Files:
	cmd/selfserv/selfserv.c lib/pk11wrap/pk11util.c
	lib/ssl/ssl.def lib/ssl/ssl.h lib/ssl/ssl3con.c
	lib/ssl/sslimpl.h lib/ssl/sslsnce.c


git-svn-id: svn://10.0.0.236/trunk@140305 18797224-902f-48f8-a5cc-f745e15eee43
 2003-03-26 00:31:13 +00:00
jpierre%netscape.com
22bf9f8cc7 Fix for bug #126930 - make SSL_ConfigServreSessionIDCache work on OS/2 by not using shared memory in single process mode. r=nelsonb 
git-svn-id: svn://10.0.0.236/trunk@136858 18797224-902f-48f8-a5cc-f745e15eee43
 2003-01-23 00:15:08 +00:00
wtc%netscape.com
16ce983004 Bugs 166734 and 166785: fixed compiler warnings reported by gcc on Linux. 
The patch for this checkin is attached to bug 166785.


git-svn-id: svn://10.0.0.236/trunk@128926 18797224-902f-48f8-a5cc-f745e15eee43
 2002-09-06 00:27:52 +00:00
nelsonb%netscape.com
a36887f58a Make libSSL build for WinCE. 
git-svn-id: svn://10.0.0.236/trunk@118061 18797224-902f-48f8-a5cc-f745e15eee43
 2002-04-04 00:14:12 +00:00
wtc%netscape.com
52f5bfd019 Bugzilla bug 70217: ported NSS to BeOS. The patch is contributed by 
Christopher Seawood <seawood@netscape.com>.


git-svn-id: svn://10.0.0.236/trunk@115206 18797224-902f-48f8-a5cc-f745e15eee43
 2002-02-22 04:23:30 +00:00
wtc%netscape.com
5f32ec59fc Bugzilla bug 125730: fixed OpenVMS build breakage. Thanks to Colin Blakes 
<colin@theblakes.com> for the patch.
odified Files: sslmutex.c sslmutex.h sslsnce.c


git-svn-id: svn://10.0.0.236/trunk@114654 18797224-902f-48f8-a5cc-f745e15eee43
 2002-02-16 02:52:07 +00:00
javi%netscape.com
b33a159e20 Changes required to get the trunk of NSS building on the Mac. 
git-svn-id: svn://10.0.0.236/trunk@111740 18797224-902f-48f8-a5cc-f745e15eee43
 2002-01-09 23:22:23 +00:00
jpierre%netscape.com
87e28e9839 Fixes for OS/2 build 
git-svn-id: svn://10.0.0.236/trunk@108772 18797224-902f-48f8-a5cc-f745e15eee43
 2001-11-22 00:46:48 +00:00
nelsonb%netscape.com
b91f3120f1 Reimplement SSL_GetChannelInfo. Add new function SSL_GetCipherSuiteInfo(). 
Also, implement new ciphersuite preference order.  Bug 78959.


git-svn-id: svn://10.0.0.236/trunk@107060 18797224-902f-48f8-a5cc-f745e15eee43
 2001-11-02 04:24:28 +00:00
jpierre%netscape.com
4ce9c2c54f Fix for 102251 . Implement 2-level locking for the SSL session cache to properly support SSL server applications using Windows NT fibers . Also optimize and enhance portability of locking primitives for single-process servers on all platforms by using a PRLock instead of cross-process locks . Reviewed by wtc 
git-svn-id: svn://10.0.0.236/trunk@104699 18797224-902f-48f8-a5cc-f745e15eee43
 2001-10-06 00:14:33 +00:00
nelsonb%netscape.com
c38ee88985 Implement new function SSL_GetChannelInfo(). Bugzilla bug 78959. 
git-svn-id: svn://10.0.0.236/trunk@103057 18797224-902f-48f8-a5cc-f745e15eee43
 2001-09-18 01:59:21 +00:00
nelsonb%netscape.com
06c3f37e12 The environment variable NSS_SSL_SERVER_CACHE_MUTEX_TIMEOUT specifies 
the maximum amount of time to wait before recovering a session cache
mutex (semaphore) from a dead process on Unix.


git-svn-id: svn://10.0.0.236/trunk@97732 18797224-902f-48f8-a5cc-f745e15eee43
 2001-06-22 03:38:05 +00:00
nelsonb%netscape.com
611ba43412 Add two new functions to permit application tuning of the number of SSL 
server session cache locks.  We may yet decide to back this out for the
NSS 3.3 release.  Modified Files: ssl.def ssl.h sslsnce.c


git-svn-id: svn://10.0.0.236/trunk@96958 18797224-902f-48f8-a5cc-f745e15eee43
 2001-06-12 20:27:12 +00:00
nelsonb%netscape.com
4d7b87db53 Fix two bugs found in nightly QA. On Solaris/x86, don't assert that the 
sid cache entry is a multiple of 8 bytes long.  On OSF1, reduce the
maximum number of POSIX semaphores so it doesn't exceed the per-process
limit of 256.


git-svn-id: svn://10.0.0.236/trunk@96786 18797224-902f-48f8-a5cc-f745e15eee43
 2001-06-09 19:30:21 +00:00
nelsonb%netscape.com
3959edfa77 3 Changes: 
1. New SSL server session cache implementation that uses finer grained
locking to reduce lock contention, and does 128-way associative caching.
2. rename symbol SSL_SESSIONID_BYTES to SSL2_SESSIONID_BYTES.
3. Work around compiler bug on Solaris i386.
Modified Files:
    manifest.mn sslcon.c sslimpl.h sslsecur.c sslsnce.c


git-svn-id: svn://10.0.0.236/trunk@96768 18797224-902f-48f8-a5cc-f745e15eee43
 2001-06-09 03:18:09 +00:00
nelsonb%netscape.com
e00b59a1ac Make SSL API consistent in using SECStatus as return value for functions 
that return only values in that enumeration.  Bug 68097. R&A = relyea.
Modified Files:
 	lib/ssl/ssl.h lib/ssl/sslauth.c lib/ssl/sslsecur.c
 	lib/ssl/sslsnce.c lib/ssl/sslsock.c cmd/selfserv/selfserv.c
 	cmd/strsclnt/strsclnt.c


git-svn-id: svn://10.0.0.236/trunk@86642 18797224-902f-48f8-a5cc-f745e15eee43
 2001-02-09 00:32:14 +00:00
wtc%netscape.com
ac46fb12e3 Bugzilla bug #62855: added stubs for the SSL session cache functions so 
that selfserv can link without unresolved symbols on OS/2.


git-svn-id: svn://10.0.0.236/trunk@85903 18797224-902f-48f8-a5cc-f745e15eee43
 2001-01-31 23:43:47 +00:00
wtc%netscape.com
50931f27c7 Bugzilla bug #66367: rename the internal NSS functions that we have to 
export from the NSS shared library.  Reviewed by Bob Relyea.
Modified Files:
	nss/lib/certdb/certdb.c nss/lib/certdb/pcertdb.c
	nss/lib/nss/Makefile nss/lib/nss/manifest.mn
	nss/lib/nss/nss.def nss/lib/pk11wrap/pk11skey.c
	nss/lib/pkcs12/p12d.c nss/lib/pkcs12/p12e.c
	nss/lib/pkcs12/p12local.c nss/lib/pkcs7/certread.c
	nss/lib/pkcs7/p7decode.c nss/lib/pkcs7/p7encode.c
	nss/lib/smime/cmsutil.c nss/lib/softoken/secpkcs5.c
	nss/lib/ssl/ssl3con.c nss/lib/ssl/sslcon.c
	nss/lib/ssl/sslnonce.c nss/lib/ssl/sslsnce.c
	nss/lib/util/nsslocks.c
Added Files:
	nss/lib/nss/nssrenam.h


git-svn-id: svn://10.0.0.236/trunk@85774 18797224-902f-48f8-a5cc-f745e15eee43
 2001-01-30 21:02:28 +00:00
wtc%netscape.com
e57a4cba46 Bugzilla bug #64238: removed the unnecessary inclusion of mcom_db.h from 
cryptohi.h, pk11func.h, secpkcs7.h, and cms.h.  Some files now need to
include <errno.h>.  They were including <errno.h> indirectly through
mcom_db.h.
Modified Files:
	cmd/atob/atob.c cmd/btoa/btoa.c cmd/derdump/derdump.c
	lib/cryptohi/cryptohi.h lib/pk11wrap/pk11func.h
	lib/pkcs7/secpkcs7.h lib/smime/cms.h lib/ssl/sslsnce.c


git-svn-id: svn://10.0.0.236/trunk@84341 18797224-902f-48f8-a5cc-f745e15eee43
 2001-01-04 00:44:30 +00:00
larryh%netscape.com
18549422d1 Bugzilla: 64132. NSS lock instrumentation 
git-svn-id: svn://10.0.0.236/trunk@84300 18797224-902f-48f8-a5cc-f745e15eee43
 2001-01-03 19:51:22 +00:00
jgmyers%netscape.com
ed7132b5a2 support IPv6 in ssl: bug 48657 r=nelsonb 
git-svn-id: svn://10.0.0.236/trunk@78892 18797224-902f-48f8-a5cc-f745e15eee43
 2000-09-12 20:15:44 +00:00
nelsonb%netscape.com
5cd746d35d Attempt to prevent certain NSS internal error codes from being seen by 
applications that use SSL sockets.  These include:
SEC_ERROR_EXTENSION_NOT_FOUND and SSL_ERROR_SESSION_NOT_FOUND


git-svn-id: svn://10.0.0.236/trunk@78330 18797224-902f-48f8-a5cc-f745e15eee43
 2000-09-07 03:35:31 +00:00
relyea%netscape.com
66e653caff Only output caching if we turn tracing on. 
git-svn-id: svn://10.0.0.236/trunk@70062 18797224-902f-48f8-a5cc-f745e15eee43
 2000-05-16 17:28:31 +00:00
relyea%netscape.com
a4d4d45374 Initial NSS Open Source checkin 
git-svn-id: svn://10.0.0.236/trunk@64788 18797224-902f-48f8-a5cc-f745e15eee43
 2000-03-31 20:13:40 +00:00