116 Commits

Author SHA1 Message Date
nelsonb%netscape.com
870eb23c89 Coalesce the final Finished message in the SSL handshake and the first
record of application data into a single write, when possible, to avoid
TCP's "Nagle" delays.  Fixes bug 67898.  r&a: wtc.  Modified Files:
	ssl3con.c sslimpl.h sslsecur.c sslsock.c


git-svn-id: svn://10.0.0.236/trunk@86398 18797224-902f-48f8-a5cc-f745e15eee43
2001-02-07 00:34:56 +00:00
wtc%netscape.com
50931f27c7 Bugzilla bug #66367: rename the internal NSS functions that we have to
export from the NSS shared library.  Reviewed by Bob Relyea.
Modified Files:
	nss/lib/certdb/certdb.c nss/lib/certdb/pcertdb.c
	nss/lib/nss/Makefile nss/lib/nss/manifest.mn
	nss/lib/nss/nss.def nss/lib/pk11wrap/pk11skey.c
	nss/lib/pkcs12/p12d.c nss/lib/pkcs12/p12e.c
	nss/lib/pkcs12/p12local.c nss/lib/pkcs7/certread.c
	nss/lib/pkcs7/p7decode.c nss/lib/pkcs7/p7encode.c
	nss/lib/smime/cmsutil.c nss/lib/softoken/secpkcs5.c
	nss/lib/ssl/ssl3con.c nss/lib/ssl/sslcon.c
	nss/lib/ssl/sslnonce.c nss/lib/ssl/sslsnce.c
	nss/lib/util/nsslocks.c
Added Files:
	nss/lib/nss/nssrenam.h


git-svn-id: svn://10.0.0.236/trunk@85774 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-30 21:02:28 +00:00
nelsonb%netscape.com
3aa312f741 Send SSL 3.x alert records when a version mismatch occurs.
Use the other party's version number to decide which alert to send.
Bug 65142.  R&A: relyea.


git-svn-id: svn://10.0.0.236/trunk@84914 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-13 02:32:39 +00:00
nelsonb%netscape.com
8eaac606a9 Add implementation of SSL_RSA_WITH_RC4_128_SHA SSL3 cipher suite,
which is not enabled by default.  Bug 59795.


git-svn-id: svn://10.0.0.236/trunk@84913 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-13 02:05:15 +00:00
nelsonb%netscape.com
dbd95a18a1 Changes to deal with exporting data from Windows DLLs.
SECHashObjects[] is no longer exported.
New function HASH_GetHashObject returns pointer to selected const object.
SSL statistics are now in a structure whose address is obtained via a
call to SSL_GetStatistics().
On NT, the new symbol NSS_USE_STATIC_LIBS must be declared in programs
that use the static SSL library.
Also, propagate "const" declaration for SECHashObjects.


git-svn-id: svn://10.0.0.236/trunk@84403 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-05 01:38:26 +00:00
larryh%netscape.com
18549422d1 Bugzilla: 64132. NSS lock instrumentation
git-svn-id: svn://10.0.0.236/trunk@84300 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-03 19:51:22 +00:00
nelsonb%netscape.com
56ecdac735 Release the SpecRead Lock before returning in an error path.
This bug was found while reading code looking for a different bug.


git-svn-id: svn://10.0.0.236/trunk@82519 18797224-902f-48f8-a5cc-f745e15eee43
2000-11-10 01:36:26 +00:00
nelsonb%netscape.com
c2af931e2d Remove duplicate PORT_Free call. Fix bug 52633.
git-svn-id: svn://10.0.0.236/trunk@79173 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-14 20:25:26 +00:00
jgmyers%netscape.com
ed7132b5a2 support IPv6 in ssl: bug 48657 r=nelsonb
git-svn-id: svn://10.0.0.236/trunk@78892 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-12 20:15:44 +00:00
nelsonb%netscape.com
475a5fabb5 Emulate an SSL3 client more closely after a server negotiates down to 3.0.
git-svn-id: svn://10.0.0.236/trunk@75822 18797224-902f-48f8-a5cc-f745e15eee43
2000-08-08 22:54:02 +00:00
nelsonb%netscape.com
73f5156cca Fix the logic in client and server to detect version roll-back attack,
rolling back from TLS (SSL 3.1) to SSL 3.0.  Provide a new SSL socket
option to disable roll-back detection in servers, since certain TLS
clients are doing it incorrectly.


git-svn-id: svn://10.0.0.236/trunk@70708 18797224-902f-48f8-a5cc-f745e15eee43
2000-05-24 03:35:23 +00:00
mcgreer%netscape.com
34b54eb2f3 Changing MIN's and MAX's to PR_MIN, PR_MAX
git-svn-id: svn://10.0.0.236/trunk@70448 18797224-902f-48f8-a5cc-f745e15eee43
2000-05-18 15:32:18 +00:00
nelsonb%netscape.com
e3773fbadf In ssl3_GenerateSessionKeys() ensure params secitem always points to valid
CK_SSL3_MASTER_KEY_DERIVE_PARAMS structure.  Bugzilla bug 39682.


git-svn-id: svn://10.0.0.236/trunk@70422 18797224-902f-48f8-a5cc-f745e15eee43
2000-05-18 00:41:38 +00:00
dougt%netscape.com
1931899568 Minor changes to fix mac build bustages.
git-svn-id: svn://10.0.0.236/trunk@69424 18797224-902f-48f8-a5cc-f745e15eee43
2000-05-12 18:43:28 +00:00
nelsonb%netscape.com
c1434fd985 Small optimization for RSA Server Key exchange message. Uses fewer PK11_
calls to do the job. Also, plug one mem leak in Fortezza code.


git-svn-id: svn://10.0.0.236/trunk@68753 18797224-902f-48f8-a5cc-f745e15eee43
2000-05-08 23:55:05 +00:00
relyea%netscape.com
a4d4d45374 Initial NSS Open Source checkin
git-svn-id: svn://10.0.0.236/trunk@64788 18797224-902f-48f8-a5cc-f745e15eee43
2000-03-31 20:13:40 +00:00