6357 Commits

Author SHA1 Message Date
emaldona%redhat.com
eef8f88fa4 Bug 745281 - Provide the option of disabling SSL PKCS #11 bypass at build time, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@264089 18797224-902f-48f8-a5cc-f745e15eee43
2012-07-30 00:47:36 +00:00
wtc%google.com
14dcfdbf7a Bug 479508, bug 482153, bug 764393: add the isTrustedForUsage method to the
nssDecodedCert structure. Change nssCertificateArray_FindBestCertificate to
take trust into consideration, always choosing a trusted cert over an
untrusted cert when presented with that choice.  Based on a patch by Nelson
Bolyard.  r=rob.stradling,rrelyea.
Modified Files:
	pki3hack.c pkibase.c pkitm.h


git-svn-id: svn://10.0.0.236/trunk@264085 18797224-902f-48f8-a5cc-f745e15eee43
2012-07-27 21:41:52 +00:00
wtc%google.com
1361f732a7 Bug 775337: Use the SHAx_HashBuf functions in NSC_DeriveKey. r=dcooper16.
git-svn-id: svn://10.0.0.236/trunk@264084 18797224-902f-48f8-a5cc-f745e15eee43
2012-07-27 20:06:07 +00:00
wtc%google.com
eb9d6dcdca Bug 775337: <Hash>_HashBuf should zero its local context variable before
returning.  r=dcooper16,rrelyea.
Modified Files:
	md5.c sha512.c sha_fast.c


git-svn-id: svn://10.0.0.236/trunk@264083 18797224-902f-48f8-a5cc-f745e15eee43
2012-07-27 20:00:39 +00:00
rrelyea%redhat.com
8c254ebcb6 Bug 653032 - field_mod() gives incorrect results for NIST-P192 and NIST-P224.
bug and initial patch by Owen Kirby

Modify patch my me r=owen


git-svn-id: svn://10.0.0.236/trunk@264070 18797224-902f-48f8-a5cc-f745e15eee43
2012-07-26 19:18:49 +00:00
kaie%kuix.de
6425d2f9a8 Bug 762057 - Add a helper tool for libpkix error code information, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@264038 18797224-902f-48f8-a5cc-f745e15eee43
2012-07-17 15:25:15 +00:00
kaie%kuix.de
c9cfbe0bd5 Bug 667938 - allow to disable the use of rpath at build time, contributed by Wan-Teh Chang, r=glandium, r=kaie
git-svn-id: svn://10.0.0.236/trunk@264037 18797224-902f-48f8-a5cc-f745e15eee43
2012-07-17 15:22:42 +00:00
kaie%kuix.de
491e83be6b Bug 770057 - Fix remaining crashes when caching is off, contributed by Eric Rescorla, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@264036 18797224-902f-48f8-a5cc-f745e15eee43
2012-07-17 14:43:11 +00:00
kaie%kuix.de
0ffb2fb48b Bug 590515 - Implement SHA-224/256/384/512 key derivation in Softoken, cleanup, contributed by David Cooper, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@264035 18797224-902f-48f8-a5cc-f745e15eee43
2012-07-17 14:40:48 +00:00
kaie%kuix.de
f3f4f05abb Bug 590515 - Implement SHA-224/256/384/512 key derivation in Softoken, implementation, contributed by David Cooper, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@264034 18797224-902f-48f8-a5cc-f745e15eee43
2012-07-17 14:40:16 +00:00
kaie%kuix.de
18e6ed97c2 Bug 767146 - Update run_niscc.sh into a working state. The majority of this work was contributed by Jiri Pospisil, r=kaie. Some tweaks by me.
git-svn-id: svn://10.0.0.236/trunk@264027 18797224-902f-48f8-a5cc-f745e15eee43
2012-07-13 20:30:25 +00:00
wtc%google.com
20f531e00c Bug 507359: add SSL_ERROR_FEATURE_NOT_SUPPORTED_FOR_VERSION. Update the
error message for SSL_ERROR_HANDSHAKE_NOT_COMPLETED.  r=bsmith,rrelyea.
Modified Files:
	SSLerrs.h sslerr.h sslinfo.c


git-svn-id: svn://10.0.0.236/trunk@264025 18797224-902f-48f8-a5cc-f745e15eee43
2012-07-13 00:51:57 +00:00
emaldona%redhat.com
b5f6a419bf Bug 770725 - Export base module functions needed by ckfw based external modules, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@264020 18797224-902f-48f8-a5cc-f745e15eee43
2012-07-06 18:19:32 +00:00
gerv%gerv.net
b7de83473a Bug 754139 - update license to MPL 2. r=bsmith.
git-svn-id: svn://10.0.0.236/trunk@264015 18797224-902f-48f8-a5cc-f745e15eee43
2012-07-04 15:21:49 +00:00
rrelyea%redhat.com
fe99a56387 Include missing file from previous check.
Fix tinderbox breakage.


git-svn-id: svn://10.0.0.236/trunk@264006 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-29 20:56:44 +00:00
rrelyea%redhat.com
94a9ff7be1 Bug 613496 - NSS softtoken ECC support is incomplete when used with other PKCS#11 modules
Original patch by David Cooper. reviewed and modified by relyea.
modifications reviewd by David Cooper.


git-svn-id: svn://10.0.0.236/trunk@264005 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-29 17:46:25 +00:00
rrelyea%redhat.com
7a9349658a Bug 695571 - NSS needs more DRBG test to keep NIST happy in FIPS validations.
r=emaldona


git-svn-id: svn://10.0.0.236/trunk@264002 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-28 17:55:06 +00:00
kaie%kuix.de
02f99ca313 Bug 757197 - May 2012 batch of NSS root CA changes, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@264001 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-28 13:50:28 +00:00
kaie%kuix.de
33028ae6c1 Bug 757189, addbuiltin default output for "no explicit trust" should be consistent with certdata.txt, r=rrelea
git-svn-id: svn://10.0.0.236/trunk@264000 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-28 13:47:47 +00:00
kaie%kuix.de
d9d646cf24 Bug 748020 - Implement self-contained testing of AIA fetching, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@263999 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-28 11:15:17 +00:00
kaie%kuix.de
7de2450718 Bug 747947 - Implement an "http only" variation of selfserv, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@263998 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-28 11:11:06 +00:00
rrelyea%redhat.com
6f280099b5 Fix memory leak introduced by patch for bug 753116
git-svn-id: svn://10.0.0.236/trunk@263997 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-27 17:58:54 +00:00
rrelyea%redhat.com
8e4d1a6ae7 Continue fixing Windows build issues.
git-svn-id: svn://10.0.0.236/trunk@263991 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-27 00:38:03 +00:00
rrelyea%redhat.com
3066670fc6 Fix Mac build errors.
git-svn-id: svn://10.0.0.236/trunk@263990 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-26 23:46:54 +00:00
rrelyea%redhat.com
8809acb18a Bug 753116 - softoken needs to split out common components to util
r=elio


git-svn-id: svn://10.0.0.236/trunk@263989 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-26 22:27:33 +00:00
rrelyea%redhat.com
6ac8edb3d9 Bug 475578 - Implement Extended DSA as defined in FIPS 186-3 (DSS)
r = wtc
patch 5 of 7


git-svn-id: svn://10.0.0.236/trunk@263981 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-25 21:48:41 +00:00
rrelyea%redhat.com
5e92211d71 Bug 475578 - Implement Extended DSA as defined in FIPS 186-3
patch 4 of 7
r=wtc


git-svn-id: svn://10.0.0.236/trunk@263980 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-25 17:30:17 +00:00
kaie%kuix.de
e4937db95f Backout bug 667938 because wtc objected to this patch
git-svn-id: svn://10.0.0.236/trunk@263977 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-22 19:46:39 +00:00
kaie%kuix.de
e7b31d998d Bug 667938, allow to disable the use of rpath at build time, patch by Mike Hommey, r=kaie
git-svn-id: svn://10.0.0.236/trunk@263973 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-21 19:21:40 +00:00
wtc%google.com
92d5d06c81 Bug 681065: Rename DTLS_GetTimeout to DTLS_GetHandshakeTimeout. r=ekr.
Modified Files:
	dtlscon.c ssl.def ssl.h


git-svn-id: svn://10.0.0.236/trunk@263966 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-19 21:56:10 +00:00
gerv%gerv.net
47aa365128 Bug 716563 - update license to MPL 2. r=rrelyea.
git-svn-id: svn://10.0.0.236/trunk@263964 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-19 05:46:57 +00:00
emaldona%redhat.com
749dc25cd6 Bug 356713 - Support SHA224 has/hmac and rsa signature, r=wtc
git-svn-id: svn://10.0.0.236/trunk@263963 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-19 05:46:56 +00:00
wtchang%redhat.com
ddf71f8d9d Bugzilla Bug 313196: HMAC code should not use a fixed hash input block size
of 64 bytes, which is wrong for SHA-384 and SHA-512.  This requires adding
the hash input block size to the SECHashObject structure. r=relyea,nelsonb
Modified Files:
	cryptohi/hasht.h cryptohi/sechash.c freebl/alghmac.c
	freebl/blapit.h freebl/rawhash.c


git-svn-id: svn://10.0.0.236/trunk@263962 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-19 05:46:55 +00:00
gerv%gerv.net
f687912013 Bug 236613: change to MPL/LGPL/GPL tri-license. Restore Id: lines.
git-svn-id: svn://10.0.0.236/trunk@263961 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-19 05:46:54 +00:00
gerv%gerv.net
6c979a1195 Bug 236613: change to MPL/LGPL/GPL tri-license.
git-svn-id: svn://10.0.0.236/trunk@263960 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-19 05:46:53 +00:00
nelsonb%netscape.com
b14e113334 Add new SHAxxx hash algorithms to tables of SECHashObjects.
git-svn-id: svn://10.0.0.236/trunk@263959 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-19 05:46:52 +00:00
wtc%netscape.com
dc5e06c377 Bugzilla bug #65416: assign values explicitly to enumeration constants.
The same values that the compiler would assign are assigned, with only
one exception (cmmfNoPKIStatus in cmmft.h).  This is patch id=22555,
reviewed by Nelson Bolyard.


git-svn-id: svn://10.0.0.236/trunk@263958 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-19 05:46:51 +00:00
nelsonb%netscape.com
a49e689a68 Changes to deal with exporting data from Windows DLLs.
SECHashObjects[] is no longer exported.
New function HASH_GetHashObject returns pointer to selected const object.
SSL statistics are now in a structure whose address is obtained via a
call to SSL_GetStatistics().
On NT, the new symbol NSS_USE_STATIC_LIBS must be declared in programs
that use the static SSL library.
Also, propagate "const" declaration for SECHashObjects.


git-svn-id: svn://10.0.0.236/trunk@263957 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-19 05:46:50 +00:00
relyea%netscape.com
3588d198d7 Initial NSS Open Source checkin
git-svn-id: svn://10.0.0.236/trunk@263956 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-19 05:46:49 +00:00
wtc%google.com
7ecfde73d0 Bug 764649: Always use the PORT_ZNew macro to create sslSessionID objects.
r=emaldona.
Modified Files:
	sslcon.c sslsnce.c


git-svn-id: svn://10.0.0.236/trunk@263947 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-14 19:04:59 +00:00
wtc%google.com
455441c0ab Bug 764649: Declare ssl_DupSocket as static because it is only used in
sslsock.c.  r=emaldona.
Modified Files:
	sslimpl.h sslsock.c


git-svn-id: svn://10.0.0.236/trunk@263946 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-14 19:03:29 +00:00
wtc%google.com
080cf669c8 Bug 596692 and bug 636802: Increase max RSA and DH key sizes to 16K bits.
Adjust DH secret key size to group size.  r=rrelyea.
Modified Files:
	blapit.h dh.c


git-svn-id: svn://10.0.0.236/trunk@263945 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-14 18:55:10 +00:00
wtc%google.com
96a98d75c5 Bug 763117: The src input parameter of HASH_HashBuf should be const.
r=rrelyea.
Modified Files:
	lib/cryptohi/sechash.c lib/freebl/rawhash.c
	lib/freebl/sechash.h


git-svn-id: svn://10.0.0.236/trunk@263944 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-14 18:36:18 +00:00
wtc%google.com
f68607b6f0 Bug 764365: Add new TLS 1.2 cipher suites implemented in iOS 5.1.1 to
ssltap.  r=emaldona.


git-svn-id: svn://10.0.0.236/trunk@263943 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-14 18:16:05 +00:00
emaldona%redhat.com
a1182473ea Bug 762198 - fix tinderbox, testlowhash not supprted everywhere
git-svn-id: svn://10.0.0.236/trunk@263942 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-14 14:56:02 +00:00
emaldona%redhat.com
da3249a522 Bug 762198 - fix syntax error
git-svn-id: svn://10.0.0.236/trunk@263938 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-13 21:05:20 +00:00
emaldona%redhat.com
bd191303f4 Bug 762198 - remove spurious line that breaks the build
git-svn-id: svn://10.0.0.236/trunk@263937 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-13 20:25:31 +00:00
emaldona%redhat.com
c21013d1c7 Bug 762198 - softoken sha224 powerup self-test fails on fips mode, r=rrleyea
git-svn-id: svn://10.0.0.236/trunk@263935 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-13 18:16:40 +00:00
rrelyea%redhat.com
3e1b410d0f Bug 475578 - Implement Extended DSA as defined in FIPS 186-3
r=wtc
New tests for DSA2 algorithms


git-svn-id: svn://10.0.0.236/trunk@263934 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-13 17:17:36 +00:00
rrelyea%redhat.com
902184a8a1 Fix tinderbox errors in windows builds.
git-svn-id: svn://10.0.0.236/trunk@263931 18797224-902f-48f8-a5cc-f745e15eee43
2012-06-13 01:07:28 +00:00