6357 Commits

Author SHA1 Message Date
bsmith%mozilla.com
0bcdaabd38 Bug 797572: Export SRTP functions from libssl. Patch contributed by rjesup, r=bsmith
git-svn-id: svn://10.0.0.236/trunk@264291 18797224-902f-48f8-a5cc-f745e15eee43
2012-10-03 22:43:01 +00:00
emaldona%redhat.com
03a7e5738a Bug 753116 - softoken needs to split out common components to util, r=rrelya
git-svn-id: svn://10.0.0.236/trunk@264290 18797224-902f-48f8-a5cc-f745e15eee43
2012-10-03 18:27:03 +00:00
rrelyea%redhat.com
1c45c2e9d3 Bug 764973 - Augment libpkix with callback at chainvalidate (edit)
Patch by cviecco, review by bsmith
checkin for bsmith


git-svn-id: svn://10.0.0.236/trunk@264281 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-28 23:40:17 +00:00
rrelyea%redhat.com
fee4377655 Bug 753116 Add error message for SEC_ERROR_LEGACY_DATABASE to SECerrs.h.
Patch by Brian.
review and checkin by rrelyea


git-svn-id: svn://10.0.0.236/trunk@264280 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-28 23:21:03 +00:00
rrelyea%redhat.com
3d1d44d46e Bug 373108 - Implement AES Galois Counter Mode (GCM)
Patch by relyea, review modified by wtc/ryan,  reviewed by relyea


git-svn-id: svn://10.0.0.236/trunk@264279 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-28 22:46:33 +00:00
wtc%google.com
c53b4fdca1 Bug 794636: CERT_AsciiToName should take a const char * input argument.
r=kaie.
Modified Files:
	alg1485.c cert.h


git-svn-id: svn://10.0.0.236/trunk@264278 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-28 16:05:02 +00:00
wtc%google.com
f2223d329d Bug 795145: Set the max version to TLS 1.0 when testing the export cipher
suites f and g because they are disallowed in TLS 1.1. r=kaie.


git-svn-id: svn://10.0.0.236/trunk@264277 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-28 15:09:54 +00:00
wtc%google.com
8c71050332 Bug 734519: Stop the compression method search for loop when the target is
seen. r=rrelyea.


git-svn-id: svn://10.0.0.236/trunk@264270 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-28 05:10:25 +00:00
wtc%google.com
e79fac955c Bug 783448: When renegotiating, continue to use the client_version used in
the initial ClientHello to work around a Windows SChannel bug.
r=ryan.sleevi,bsmith.


git-svn-id: svn://10.0.0.236/trunk@264269 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-28 04:51:22 +00:00
wtc%google.com
42106ed168 Bug 786431: do not re-import certificates returned by NSS as temporary
certificates. r=bsmith.


git-svn-id: svn://10.0.0.236/trunk@264268 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-28 01:49:29 +00:00
wtc%google.com
812886d071 Bug 681065: ss->ssl3.hs.lastMessageFlight does not need to be allocated
from the heap after bug 793033 is fixed. r=ekr.
Modified Files:
	dtlscon.c ssl3con.c sslimpl.h


git-svn-id: svn://10.0.0.236/trunk@264267 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-28 01:46:45 +00:00
kaie%kuix.de
7f44995478 Bug 590364 - By default, stop accepting MD5 as a hash algorithm in certificate signatures
r=rrelyea


git-svn-id: svn://10.0.0.236/trunk@264266 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-27 17:23:33 +00:00
kaie%kuix.de
1cecb6d137 Bug 785170 - Enhance NSS to run an initial set of TLS 1.1 tests
r=rrelyea


git-svn-id: svn://10.0.0.236/trunk@264265 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-27 17:21:15 +00:00
kaie%kuix.de
46bc676332 Bug 785169 - Change tools to use a version range for SSL/TLS versions + adjust the test suite
r=wtc


git-svn-id: svn://10.0.0.236/trunk@264264 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-27 17:13:36 +00:00
rrelyea%redhat.com
d2be629cdf Bug 475578 - Implement Extended DSA as defined in FIPS 186-3
include Elio's comments for DSA-2 changes to handle FIPS .req files for DSA-2
r=emaldona


git-svn-id: svn://10.0.0.236/trunk@264262 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-26 20:41:25 +00:00
wtc%google.com
7d311a435e Bug 333601: Use the x86 assembly code in mpi on Mac OS X. The patch is
contributed by Mark Mentovai <mark@moxienet.com>. r=wtc.
Modified Files:
	Makefile
Added Files:
	mpi/mpi_sse2.s


git-svn-id: svn://10.0.0.236/trunk@264260 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-26 01:24:18 +00:00
wtc%google.com
64a7b7b1ab Bug 333601: invoke mpi-test as ./mpi-test because the current directory (.)
may not be on the PATH. The patch is contributed by Mark Mentovai
<mark@moxienet.com>. r=wtc.


git-svn-id: svn://10.0.0.236/trunk@264259 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-26 01:22:15 +00:00
wtc%google.com
3b51e603e3 Bug 475578: lib/freebl/pqg.c should not include lib/cryptohi/sechash.h.
The HASH_ResultLen and HASH_HashBuf functions in lib/freebl/rawhash.c
conflict with the same-named functions in lib/cryptohi/sechash.c in NSS
static library builds, so move them to lib/freebl/pqg.c and mark them
static. Ideally they should also be renamed. r=rrelyea.
Modified Files:
	pqg.c rawhash.c


git-svn-id: svn://10.0.0.236/trunk@264258 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-25 23:38:38 +00:00
rrelyea%redhat.com
d31d13c012 Bug 475578 - Implement Extended DSA as defined in FIPS 186-3 (DSS)
DSA-2 changes for commands. (19.13 KB, patch)
r = emaldona


git-svn-id: svn://10.0.0.236/trunk@264257 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-25 22:21:13 +00:00
wtc%google.com
58b7ee4233 Bug 753116: remove an obsolete, commented-out line. r=rrelyea.
git-svn-id: svn://10.0.0.236/trunk@264255 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-25 00:55:21 +00:00
wtc%google.com
66772fcd46 Bug 753116: removed an unused variable in NSC_ModuleDBFunc. r=rrelyea.
git-svn-id: svn://10.0.0.236/trunk@264254 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-25 00:54:28 +00:00
wtc%google.com
5bc7a00159 Bug 753116: Add include guard macro to utilpars.h. Also fix typos and style
nits. r=rrelyea.
Modified Files:
	utilmod.c utilmodt.h utilpars.h


git-svn-id: svn://10.0.0.236/trunk@264253 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-25 00:41:42 +00:00
wtc%google.com
2a3ec3627e Bug 753116: NSSUTIL_EscapeSize should pass addquotes=PR_FALSE to
nssutil_escapeQuotesSize. r=rrelyea.


git-svn-id: svn://10.0.0.236/trunk@264252 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-25 00:35:19 +00:00
wtc%google.com
952b729d73 Bug 792681: Disable the export , DES, and RSA_FIPS cipher suites by
default. Enable the non-ECC Triple DES and AES cipher suites by default.
Enable SSL_RSA_WITH_RC4_128_SHA and SSL_RSA_WITH_RC4_128_MD5 by default.
r=rrelyea.


git-svn-id: svn://10.0.0.236/trunk@264251 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-25 00:25:26 +00:00
wtc%google.com
1915e97b14 Bug 793033: Remove the strange sslSocket copying in ssl_FreeSocket. It
breaks any pointer member that points to some other member. r=rrelyea.


git-svn-id: svn://10.0.0.236/trunk@264250 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-24 23:57:42 +00:00
wtc%google.com
1eb63ca35c Bug 475578: fix a compiler warning and style nits. TBR=emaldona.
Modified Files:
	pqg.c pqg.h shvfy.c


git-svn-id: svn://10.0.0.236/trunk@264242 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-22 15:18:19 +00:00
wtc%google.com
1e7133ebd4 Bug 753116: fix error code collision of SEC_ERROR_LEGACY_DATABASE.
TBR=rrelyea


git-svn-id: svn://10.0.0.236/trunk@264241 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-22 13:53:55 +00:00
wtc%google.com
24df8f6901 Bug 186619: fix compiler warnings by propagating 'const' to more functions.
Update the function argument types in the comments to match the current
argument types. TBR=emaldona.
Modified Files:
	ocsp.c ocsp.h


git-svn-id: svn://10.0.0.236/trunk@264240 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-22 13:41:58 +00:00
wtc%google.com
3365b17bfa Fix the file name (mpi_x86.c -> mpi_x86_asm.c) in the comment.
git-svn-id: svn://10.0.0.236/trunk@264239 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-22 03:26:27 +00:00
wtc%google.com
bdc9852a19 Move the header include guard after the license header.
git-svn-id: svn://10.0.0.236/trunk@264238 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-22 01:11:49 +00:00
wtc%google.com
026310dd32 Bug 716563 - remove the bottom half of the old license block missed by the
upgrade to MPL 2.


git-svn-id: svn://10.0.0.236/trunk@264237 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-22 00:39:35 +00:00
wtc%google.com
824f2aeac7 Bug 716563 - remove "BEGIN LICENSE BLOCK" lines missed by the update to
MPL 2.
Modified Files:
	lib/freebl/stubs.c lib/libpkix/pkix_pl_nss/pki/pkix_pl_date.c


git-svn-id: svn://10.0.0.236/trunk@264236 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-22 00:27:06 +00:00
wtc%google.com
d82dfe2c2a Bug 716563 - update license to MPL 2.
git-svn-id: svn://10.0.0.236/trunk@264235 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-21 23:12:31 +00:00
wtc%google.com
7efcfbe561 Bug 542741: Change NSS_VersionCheck to not call PR_VersionCheck because
system NSS packages are sometimes incorrectly built against an NSPR version
newer than the required NSPR version specified in the NSS package metainfo.
Modified Files:
	lib/ssl/ssl.h lib/nss/nss.h lib/nss/nssinit.c
	lib/smime/smime.h


git-svn-id: svn://10.0.0.236/trunk@264234 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-21 21:58:44 +00:00
wtc%google.com
b651899996 Bug 737178: Fix compiler warnings about signed/unsigned comparisons. r=ekr.
Modified Files:
	ssl3ext.c sslsock.c


git-svn-id: svn://10.0.0.236/trunk@264232 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-21 00:28:05 +00:00
wtc%google.com
e34d846f91 Bug 681065: Replace hardcoded ssl_variant_stream with ss->protocolVariant.
r=ekr.
Modified Files:
	ssl3con.c sslsock.c


git-svn-id: svn://10.0.0.236/trunk@264231 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-21 00:24:53 +00:00
rrelyea%redhat.com
3f21f40150 Bug 785208 - nssutil_escapeQuotesSize returns the wrong size
patch by Ted Mielczarek
r=rrelyea


git-svn-id: svn://10.0.0.236/trunk@264230 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-20 21:33:43 +00:00
kaie%kuix.de
28ce5c57a0 Bug 578861 - CERT_CompareName should take const input parameters, r=wtc
git-svn-id: svn://10.0.0.236/trunk@264221 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-19 15:08:07 +00:00
emaldona%redhat.com
ef19907bf9 Bug 480076 - need sample source: how to avoid hard coding SSL cipher suite info, r=kaie,emaldona
git-svn-id: svn://10.0.0.236/trunk@264194 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-01 18:29:28 +00:00
wtc%google.com
78e05ae906 Bug 786531: DER_EncodeTimeChoice should NOT use a UTCTime for an input
before 1950 or exactly equal to January1st2050. The patch is contributed
by Matt Mueller <mattm@chromium.org>. r=wtc.


git-svn-id: svn://10.0.0.236/trunk@264193 18797224-902f-48f8-a5cc-f745e15eee43
2012-09-01 00:06:06 +00:00
kaie%kuix.de
8964a3a15b bustage fix
git-svn-id: svn://10.0.0.236/trunk@264174 18797224-902f-48f8-a5cc-f745e15eee43
2012-08-29 19:04:53 +00:00
emaldona%redhat.com
0565f292b9 Bug 762198 - softoken sha224 powerup self-test fails on fips mode, r=kaie
git-svn-id: svn://10.0.0.236/trunk@264166 18797224-902f-48f8-a5cc-f745e15eee43
2012-08-29 00:56:52 +00:00
kaie%kuix.de
ef704e86e8 Bug 784316 - NSS: Implement a package_for_testing makefile target, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@264162 18797224-902f-48f8-a5cc-f745e15eee43
2012-08-28 14:15:40 +00:00
wtc%google.com
6117329c60 Bug 774547: set the record layer version number of the initial ClientHello
to at most { 3, 1 } (TLS 1.0) if we don't know what protocol version the
server supports. r=bsmith.
Modified Files:
	dtlscon.c ssl3con.c sslimpl.h


git-svn-id: svn://10.0.0.236/trunk@264158 18797224-902f-48f8-a5cc-f745e15eee43
2012-08-25 00:13:27 +00:00
kaie%kuix.de
8c438de819 Bug 421989 - Enhance pp to dump DER issuer and serial, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@264145 18797224-902f-48f8-a5cc-f745e15eee43
2012-08-16 06:57:24 +00:00
kaie%kuix.de
268c49385c Bug pwdecrypt, Build pwdecrypt patch by Mike Hommey, r=kaie
git-svn-id: svn://10.0.0.236/trunk@264142 18797224-902f-48f8-a5cc-f745e15eee43
2012-08-15 19:24:48 +00:00
wtc%google.com
b8ee059d55 Bug 588269: SECMOD_CloseUserDB should properly close the user DB, and it
should be possible to later re-add that same user DB as a new slot. The
patch is contributed by Ryan Sleevi <ryan.sleevi@gmail.com> of Google.
r=rrelyea,wtc.
Modified Files:
	cmd/tests/manifest.mn lib/pk11wrap/pk11util.c
	lib/softoken/pkcs11.c
Added Files:
	cmd/tests/secmodtest.c


git-svn-id: svn://10.0.0.236/trunk@264140 18797224-902f-48f8-a5cc-f745e15eee43
2012-08-14 02:11:47 +00:00
wtc%google.com
e6f9c4714d Bug 766137: SSL_GetChannelInfo should use cwSpec instead of crSpec to
support False Start.  r=bsmith.


git-svn-id: svn://10.0.0.236/trunk@264116 18797224-902f-48f8-a5cc-f745e15eee43
2012-08-03 23:54:31 +00:00
wtc%google.com
cd62532be2 Bug 753189: declare 'okm' without the 'const' to fix a compiler warning
about different 'const' qualifiers.  r=bsmith.


git-svn-id: svn://10.0.0.236/trunk@264115 18797224-902f-48f8-a5cc-f745e15eee43
2012-08-03 23:40:54 +00:00
kaie%kuix.de
d89aa1cfbf Bug 676114 - pk11_PubDeriveECKeyWithKDF does not work with some smart cards, patch by David Cooper, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@264108 18797224-902f-48f8-a5cc-f745e15eee43
2012-08-02 20:45:32 +00:00