12 Commits

Author SHA1 Message Date
nelsonb%netscape.com
e00b59a1ac Make SSL API consistent in using SECStatus as return value for functions
that return only values in that enumeration.  Bug 68097. R&A = relyea.
Modified Files:
 	lib/ssl/ssl.h lib/ssl/sslauth.c lib/ssl/sslsecur.c
 	lib/ssl/sslsnce.c lib/ssl/sslsock.c cmd/selfserv/selfserv.c
 	cmd/strsclnt/strsclnt.c


git-svn-id: svn://10.0.0.236/trunk@86642 18797224-902f-48f8-a5cc-f745e15eee43
2001-02-09 00:32:14 +00:00
nelsonb%netscape.com
db6ff863fa When half-duplex applications (e.g. one thread per socket, doing alternate
reading and writing) call PR_Send and PR_Recv with a non-infinite timeout
value, use that value for both underlying read and write operations.
Fixes bug 67402.  Reviewed by Wan-Teh.


git-svn-id: svn://10.0.0.236/trunk@86433 18797224-902f-48f8-a5cc-f745e15eee43
2001-02-07 02:06:05 +00:00
nelsonb%netscape.com
870eb23c89 Coalesce the final Finished message in the SSL handshake and the first
record of application data into a single write, when possible, to avoid
TCP's "Nagle" delays.  Fixes bug 67898.  r&a: wtc.  Modified Files:
	ssl3con.c sslimpl.h sslsecur.c sslsock.c


git-svn-id: svn://10.0.0.236/trunk@86398 18797224-902f-48f8-a5cc-f745e15eee43
2001-02-07 00:34:56 +00:00
nelsonb%netscape.com
8eaac606a9 Add implementation of SSL_RSA_WITH_RC4_128_SHA SSL3 cipher suite,
which is not enabled by default.  Bug 59795.


git-svn-id: svn://10.0.0.236/trunk@84913 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-13 02:05:15 +00:00
nelsonb%netscape.com
b9b03fad76 Remove all vestiges of old pre-NSS socks client implementation from NSS.
Bug 51471.


git-svn-id: svn://10.0.0.236/trunk@84912 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-13 01:52:59 +00:00
nelsonb%netscape.com
dbd95a18a1 Changes to deal with exporting data from Windows DLLs.
SECHashObjects[] is no longer exported.
New function HASH_GetHashObject returns pointer to selected const object.
SSL statistics are now in a structure whose address is obtained via a
call to SSL_GetStatistics().
On NT, the new symbol NSS_USE_STATIC_LIBS must be declared in programs
that use the static SSL library.
Also, propagate "const" declaration for SECHashObjects.


git-svn-id: svn://10.0.0.236/trunk@84403 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-05 01:38:26 +00:00
larryh%netscape.com
18549422d1 Bugzilla: 64132. NSS lock instrumentation
git-svn-id: svn://10.0.0.236/trunk@84300 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-03 19:51:22 +00:00
jgmyers%netscape.com
ed7132b5a2 support IPv6 in ssl: bug 48657 r=nelsonb
git-svn-id: svn://10.0.0.236/trunk@78892 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-12 20:15:44 +00:00
nelsonb%netscape.com
e7e7ab52c1 Stop using "reserved" fields of PRIOMethods by name. Fixes bug 52092.
git-svn-id: svn://10.0.0.236/trunk@78790 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-11 22:37:12 +00:00
nelsonb%netscape.com
819d88d496 Create a new function, CERT_DupCertList(), and call it instead of calling
CERT_CertChainFromCert in ssl_DupSocket().  This is MUCH faster.  This is
the first approximation of the right fix.  The next step is to consider
doing ref counting instead of actual duplication.  Fixes bug 51425 .


git-svn-id: svn://10.0.0.236/trunk@78596 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-09 06:08:46 +00:00
nelsonb%netscape.com
73f5156cca Fix the logic in client and server to detect version roll-back attack,
rolling back from TLS (SSL 3.1) to SSL 3.0.  Provide a new SSL socket
option to disable roll-back detection in servers, since certain TLS
clients are doing it incorrectly.


git-svn-id: svn://10.0.0.236/trunk@70708 18797224-902f-48f8-a5cc-f745e15eee43
2000-05-24 03:35:23 +00:00
relyea%netscape.com
a4d4d45374 Initial NSS Open Source checkin
git-svn-id: svn://10.0.0.236/trunk@64788 18797224-902f-48f8-a5cc-f745e15eee43
2000-03-31 20:13:40 +00:00