43 Commits

Author SHA1 Message Date
nicolson%netscape.com
045745acdd Changes for NSS/JSS integration.
git-svn-id: svn://10.0.0.236/trunk@96967 18797224-902f-48f8-a5cc-f745e15eee43
2001-06-12 20:57:20 +00:00
relyea%netscape.com
3577c25c62 Add DER version of isCA for JSS.
git-svn-id: svn://10.0.0.236/trunk@96571 18797224-902f-48f8-a5cc-f745e15eee43
2001-06-06 23:40:51 +00:00
wtc%netscape.com
c4babfa1f2 Bugzilla bug #77199: more PR_CALLBACK changes received from Javier
Pedemonte <pedemont@us.ibm.com> for OS/2.
Modified files: cert.h, certdb.h


git-svn-id: svn://10.0.0.236/trunk@95708 18797224-902f-48f8-a5cc-f745e15eee43
2001-05-22 22:01:33 +00:00
relyea%netscape.com
97a3c5a126 remove bogus check for CRLs
git-svn-id: svn://10.0.0.236/trunk@94137 18797224-902f-48f8-a5cc-f745e15eee43
2001-05-07 21:07:23 +00:00
wtc%netscape.com
86a13c2608 Bugzilla bug #78528: put the const ASN1 template declarations in certt.h,
secdig.h, and secoid.h inside extern "C" blocks.


git-svn-id: svn://10.0.0.236/trunk@93668 18797224-902f-48f8-a5cc-f745e15eee43
2001-05-02 21:34:13 +00:00
relyea%netscape.com
1b9848388f Role an 2.8.5 fix forward. (fix for O= dependencie in generating a nickname).
git-svn-id: svn://10.0.0.236/trunk@93016 18797224-902f-48f8-a5cc-f745e15eee43
2001-04-24 21:27:40 +00:00
nelsonb%netscape.com
e4570a946c Merged in changes from NSS_3_2_BRANCH.
git-svn-id: svn://10.0.0.236/trunk@92003 18797224-902f-48f8-a5cc-f745e15eee43
2001-04-11 22:28:11 +00:00
relyea%netscape.com
bd76aadc94 Bug 70657 . Old CERT DB doesn't always get closed after migration.
git-svn-id: svn://10.0.0.236/trunk@88827 18797224-902f-48f8-a5cc-f745e15eee43
2001-03-07 17:34:44 +00:00
relyea%netscape.com
3eaad4e487 Fix Bug 70441 where ava fields with one or two characters are not formatted properly.
git-svn-id: svn://10.0.0.236/trunk@88826 18797224-902f-48f8-a5cc-f745e15eee43
2001-03-07 17:31:53 +00:00
nelsonb%netscape.com
fd200bd21c Increase the temp cert db's memory buffer size from 64KB to 256KB.
This reduces the liklihood that it will overflow into a disk file.
This is a partial fix for bug 67953.


git-svn-id: svn://10.0.0.236/trunk@88202 18797224-902f-48f8-a5cc-f745e15eee43
2001-02-28 22:50:12 +00:00
relyea%netscape.com
ffc4ae9be7 Bug 68234. Handle automatic update of NES2.0, and NES 3.X databases.
reviewed by nelsonb


git-svn-id: svn://10.0.0.236/trunk@86728 18797224-902f-48f8-a5cc-f745e15eee43
2001-02-10 01:44:34 +00:00
relyea%netscape.com
265e3cd9af Move cdbhdl.h to private exports. bug 64260 revied by nelsonb.
git-svn-id: svn://10.0.0.236/trunk@86647 18797224-902f-48f8-a5cc-f745e15eee43
2001-02-09 01:32:42 +00:00
nelsonb%netscape.com
42affac00d Allow application to customize cert verification slop time.
Default is 24 hours.  Bug 48300. Reviewed by wtc.
Modified Files:
 	lib/nss/nss.def lib/certdb/cert.h lib/certdb/certdb.c


git-svn-id: svn://10.0.0.236/trunk@86644 18797224-902f-48f8-a5cc-f745e15eee43
2001-02-09 01:06:41 +00:00
wtc%netscape.com
9e6c133c84 Bugzilla bug #63768: removed references to the obsolete PURE_LIBRARY,
HAVE_PURIFY etc. make variables in NSS files.  Reviewed by nelson Bolyard.
Modified Files:
	cmd/platrules.mk cmd/crmf-cgi/config.mk cmd/crmftest/config.mk
	cmd/lib/config.mk cmd/zlib/config.mk lib/base/config.mk
	lib/certdb/config.mk lib/certhigh/config.mk lib/ckfw/config.mk
	lib/crmf/config.mk lib/cryptohi/config.mk
	lib/fortcrypt/swfort/config.mk lib/freebl/config.mk
	lib/jar/config.mk lib/nss/config.mk lib/pk11wrap/config.mk
	lib/pkcs12/config.mk lib/pkcs7/config.mk lib/smime/config.mk
	lib/softoken/config.mk lib/ssl/config.mk lib/util/config.mk


git-svn-id: svn://10.0.0.236/trunk@86029 18797224-902f-48f8-a5cc-f745e15eee43
2001-02-02 01:49:57 +00:00
wtc%netscape.com
7374eada86 Bugzilla bug #67122: put PR_CALLBACK after the return type in function
declarations.  This is the order required by OS/2 compilers.  Thanks to
Javier Pedemonte <pedemont@us.ibm.com> for the patch.
Modified files: hashops.c, tracker.c, certt.h, oid.c.


git-svn-id: svn://10.0.0.236/trunk@85833 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-31 18:01:53 +00:00
wtc%netscape.com
50931f27c7 Bugzilla bug #66367: rename the internal NSS functions that we have to
export from the NSS shared library.  Reviewed by Bob Relyea.
Modified Files:
	nss/lib/certdb/certdb.c nss/lib/certdb/pcertdb.c
	nss/lib/nss/Makefile nss/lib/nss/manifest.mn
	nss/lib/nss/nss.def nss/lib/pk11wrap/pk11skey.c
	nss/lib/pkcs12/p12d.c nss/lib/pkcs12/p12e.c
	nss/lib/pkcs12/p12local.c nss/lib/pkcs7/certread.c
	nss/lib/pkcs7/p7decode.c nss/lib/pkcs7/p7encode.c
	nss/lib/smime/cmsutil.c nss/lib/softoken/secpkcs5.c
	nss/lib/ssl/ssl3con.c nss/lib/ssl/sslcon.c
	nss/lib/ssl/sslnonce.c nss/lib/ssl/sslsnce.c
	nss/lib/util/nsslocks.c
Added Files:
	nss/lib/nss/nssrenam.h


git-svn-id: svn://10.0.0.236/trunk@85774 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-30 21:02:28 +00:00
relyea%netscape.com
d796033708 Bug 65903: Fixes to allow iWS admin stuff to work with shared library NSS
Add necessary exported symbols.
Fix bug in NSS_Initialize where we weren't passing the read only paramter
	through.
Add function to search for Certificate Lists so that Traverse does not need to
	be exposed.
Update pkcs11 names.


git-svn-id: svn://10.0.0.236/trunk@85148 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-19 07:53:54 +00:00
wtc%netscape.com
a620d900b4 Bugzilla bug #65416: assign values explicitly to enumeration constants.
The same values that the compiler would assign are assigned, with only
one exception (cmmfNoPKIStatus in cmmft.h).  This is patch id=22555,
reviewed by Nelson Bolyard.


git-svn-id: svn://10.0.0.236/trunk@85087 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-18 16:36:43 +00:00
mcgreer%netscape.com
7d7458c348 back out previous change
git-svn-id: svn://10.0.0.236/trunk@84582 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-08 19:43:01 +00:00
mcgreer%netscape.com
ea9b61f05b decoding nickname entries needs to include the nickname.
when searching for smime entry, verify subject is correct (can be multiple
subjects per email address)


git-svn-id: svn://10.0.0.236/trunk@84580 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-08 19:24:23 +00:00
nelsonb%netscape.com
07e1db7a72 Eliminate some warnings found when compiling on Unix boxen.
git-svn-id: svn://10.0.0.236/trunk@84526 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-07 09:21:25 +00:00
nelsonb%netscape.com
bb7974ac11 MSVC won't let you initialize a pointer in a data structure with the
address of an external variable that comes from another DLL.
This is a fundamental difference between WIN32 DLLs and Unix DSOs.
So, for every SEC_ASN1Template inside of libnss3 that is referenced by
other templates outside of libnss3, a new "chooser" function was created
that returns the address of that template.  For WIN32, the templates
outside of libnss3 access libnss3's templates by the chooser function
rather than by direct reference.  Some simple macros allow Unix to
continue to use direct references, avoiding the extra function calls.
With these changes, all.sh (qa script) passes all tests on NT with DLLs.
Modified Files:
	cmd/checkcert/checkcert.c cmd/lib/secutil.c lib/asn1/asn1t.h
	lib/certdb/certdb.c lib/certdb/certt.h lib/certdb/crl.c
	lib/certhigh/certreq.c lib/crmf/asn1cmn.c lib/crmf/crmfcont.c
	lib/crmf/crmftmpl.c lib/cryptohi/secsign.c lib/nss/nss.def
	lib/pkcs12/p12local.c lib/pkcs12/p12tmpl.c
	lib/pkcs7/certread.c lib/pkcs7/p7decode.c lib/pkcs7/p7local.c
	lib/smime/cmsasn1.c lib/smime/cmsattr.c lib/smime/cmspubkey.c
	lib/smime/cmssigdata.c lib/smime/smimeutil.c
	lib/softoken/keydb.c lib/softoken/keydbt.h lib/util/secalgid.c
	lib/util/secasn1.h lib/util/secasn1d.c lib/util/secasn1t.h
	lib/util/secasn1u.c lib/util/secdig.c lib/util/secdig.h
	lib/util/secoid.h


git-svn-id: svn://10.0.0.236/trunk@84523 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-07 08:13:13 +00:00
nelsonb%netscape.com
dbd95a18a1 Changes to deal with exporting data from Windows DLLs.
SECHashObjects[] is no longer exported.
New function HASH_GetHashObject returns pointer to selected const object.
SSL statistics are now in a structure whose address is obtained via a
call to SSL_GetStatistics().
On NT, the new symbol NSS_USE_STATIC_LIBS must be declared in programs
that use the static SSL library.
Also, propagate "const" declaration for SECHashObjects.


git-svn-id: svn://10.0.0.236/trunk@84403 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-05 01:38:26 +00:00
nelsonb%netscape.com
c6ec12f986 Reduce warnings by adding missing #includes to eliminate calls to
undeclared functions.


git-svn-id: svn://10.0.0.236/trunk@84366 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-04 08:21:15 +00:00
larryh%netscape.com
18549422d1 Bugzilla: 64132. NSS lock instrumentation
git-svn-id: svn://10.0.0.236/trunk@84300 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-03 19:51:22 +00:00
mcgreer%netscape.com
d3c97823b6 merge from branch (this process will be fixed, someday)
git-svn-id: svn://10.0.0.236/trunk@84003 18797224-902f-48f8-a5cc-f745e15eee43
2000-12-22 19:23:41 +00:00
nelsonb%netscape.com
d13601b2b6 Change NewTempCertificate(), making the search for the cert and the
subsequent insertion of the cert into the DB into one atomic operation
by holding the certdb's lock around the pair of operations.  Bug 62286.


git-svn-id: svn://10.0.0.236/trunk@83393 18797224-902f-48f8-a5cc-f745e15eee43
2000-12-08 03:35:29 +00:00
nelsonb%netscape.com
2992ba478c Fix a crash that occurs when NSS is initialized with NSS_NoDB_Init.
git-svn-id: svn://10.0.0.236/trunk@80597 18797224-902f-48f8-a5cc-f745e15eee43
2000-10-06 21:38:57 +00:00
wtc%netscape.com
099ac124d2 Bugzilla bug #49477: fixed memory leak in CERT_OpenCertDB. Have
certDBFilenameCallback duplicate the filename string so that its
return value can be freed.


git-svn-id: svn://10.0.0.236/trunk@80222 18797224-902f-48f8-a5cc-f745e15eee43
2000-10-02 23:23:50 +00:00
thayes%netscape.com
85f95a41ba Use T61 String for any ASCII characters that don't meet the PrintableString
requirements in name attribute values.


git-svn-id: svn://10.0.0.236/trunk@80078 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-28 21:29:14 +00:00
nelsonb%netscape.com
19f21c5bbd Fix numerous bugs in CERT_GetNickName. Fix bug 45247.
git-svn-id: svn://10.0.0.236/trunk@80077 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-28 21:13:29 +00:00
nelsonb%netscape.com
b246eb6761 Fix bug 39482. Don't use varargs when first argument is null.
git-svn-id: svn://10.0.0.236/trunk@80075 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-28 19:01:14 +00:00
thayes%netscape.com
aef272aa20 Add UTF8String handling to Name attributes.
git-svn-id: svn://10.0.0.236/trunk@79949 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-25 21:13:24 +00:00
nelsonb%netscape.com
819d88d496 Create a new function, CERT_DupCertList(), and call it instead of calling
CERT_CertChainFromCert in ssl_DupSocket().  This is MUCH faster.  This is
the first approximation of the right fix.  The next step is to consider
doing ref counting instead of actual duplication.  Fixes bug 51425 .


git-svn-id: svn://10.0.0.236/trunk@78596 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-09 06:08:46 +00:00
relyea%netscape.com
aa1093d9bf Set Root certs to be an externally loaded PKCS #11 module.
git-svn-id: svn://10.0.0.236/trunk@78289 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-06 22:10:07 +00:00
mcgreer%netscape.com
bc1df08d18 merge changes from 3.0 branch
git-svn-id: svn://10.0.0.236/trunk@74930 18797224-902f-48f8-a5cc-f745e15eee43
2000-07-27 18:26:28 +00:00
chrisk%netscape.com
7ff55a4d25 Fix problem where DH certs were always rejected when verifying them
for EMail encryption.
A Diffie-Hellman key needs to be tested for KU_KEY_AGREEMENT, not
KU_KEY_ENCIPHERMENT.


git-svn-id: svn://10.0.0.236/trunk@72661 18797224-902f-48f8-a5cc-f745e15eee43
2000-06-20 16:15:32 +00:00
chrisk%netscape.com
c97a690adc Merge smimetk_branch to tip...
git-svn-id: svn://10.0.0.236/trunk@72136 18797224-902f-48f8-a5cc-f745e15eee43
2000-06-13 21:56:37 +00:00
mcgreer%netscape.com
b60671d35c added roots.
git-svn-id: svn://10.0.0.236/trunk@72055 18797224-902f-48f8-a5cc-f745e15eee43
2000-06-12 22:39:02 +00:00
mcgreer%netscape.com
bb06d7fb45 fork content version between ns-branded builds and mozilla builds.
git-svn-id: svn://10.0.0.236/trunk@71401 18797224-902f-48f8-a5cc-f745e15eee43
2000-06-02 22:35:29 +00:00
mcgreer%netscape.com
937b2f9c3c Allow for building with internal root certs.
git-svn-id: svn://10.0.0.236/trunk@71374 18797224-902f-48f8-a5cc-f745e15eee43
2000-06-02 18:37:14 +00:00
thayes%netscape.com
1267e8cd26 Change handling of hash table for OSCP hashes to delete both hash key and
associated value in the hashtable "free entry" routine.  Fixes a memory leak.
(Re Netscape bug: 390117)


git-svn-id: svn://10.0.0.236/trunk@65396 18797224-902f-48f8-a5cc-f745e15eee43
2000-04-06 00:24:43 +00:00
relyea%netscape.com
a4d4d45374 Initial NSS Open Source checkin
git-svn-id: svn://10.0.0.236/trunk@64788 18797224-902f-48f8-a5cc-f745e15eee43
2000-03-31 20:13:40 +00:00