986 Commits

Author SHA1 Message Date
ddrinan%netscape.com
7de8255ea6 Checkin for relyea. Call CERT_DestoryCertificateList instead of CERT_DestroyCertList
git-svn-id: svn://10.0.0.236/trunk@113285 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-31 04:00:12 +00:00
relyea%netscape.com
5ec404ae36 Fix certlist memory leak.
git-svn-id: svn://10.0.0.236/trunk@113273 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-31 02:19:43 +00:00
wtc%netscape.com
e7047bdc33 Bugzilla bug 122712: temporarily export two additional symbols for Mozilla
static build.


git-svn-id: svn://10.0.0.236/trunk@113264 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-31 01:03:21 +00:00
relyea%netscape.com
7e68464d13 restore checks for critical extenstions and fail if we have any we don't
recognize. Just remove the bogus check that v2 crls must have critical extensions


git-svn-id: svn://10.0.0.236/trunk@113260 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-31 00:42:43 +00:00
relyea%netscape.com
830ed3ff75 Set token flag when saving the CRLs so they actually get put into the database!
git-svn-id: svn://10.0.0.236/trunk@113256 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-31 00:18:09 +00:00
relyea%netscape.com
92d5738180 Fix searching code so it can find CRL's
git-svn-id: svn://10.0.0.236/trunk@113254 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-31 00:16:29 +00:00
relyea%netscape.com
f5ee7acbf0 Unsigned values are always greater than '0'!
git-svn-id: svn://10.0.0.236/trunk@113170 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-30 00:48:24 +00:00
relyea%netscape.com
a47cb54982 Indexes are zero based. Do our realloc when index == size (not after).
git-svn-id: svn://10.0.0.236/trunk@113169 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-30 00:25:34 +00:00
relyea%netscape.com
9ff26f31a1 Restore idempontency to nss_init*
git-svn-id: svn://10.0.0.236/trunk@113157 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-29 22:27:15 +00:00
relyea%netscape.com
9b55e3a569 Built-ins set the ulValueLen to -1 to indicate an unknown attribute type.
git-svn-id: svn://10.0.0.236/trunk@113141 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-29 21:12:13 +00:00
relyea%netscape.com
6622f270f8 Token and slot names are already converted to NULL terminated strings in the slot structure
git-svn-id: svn://10.0.0.236/trunk@113138 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-29 21:10:50 +00:00
relyea%netscape.com
8fc3bf1fcb Don't leak memory in the arena pool
git-svn-id: svn://10.0.0.236/trunk@113126 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-29 19:00:47 +00:00
ian.mcgreer%sun.com
c1c7114dbe changes related to bug 115660
* fipstoken will only force authentication for object-related functions when the object is a private or secret key
* certutil does not authenticate to token when in FIPS and only doing cert-related operations
* QA does not provide password to certutil when doing cert-related operations in FIPS tests


git-svn-id: svn://10.0.0.236/trunk@113122 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-29 17:30:22 +00:00
relyea%netscape.com
2ae1f651be (sigh) not only do we need to find the objects, we need to be able to read
them as well.


git-svn-id: svn://10.0.0.236/trunk@113061 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-28 23:28:29 +00:00
jpierre%netscape.com
3e0d3badd1 Fix for 69556 - remove expired CA "Verisign Class 4 Primary CA"
git-svn-id: svn://10.0.0.236/trunk@113051 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-28 20:43:37 +00:00
relyea%netscape.com
53ad9596fc Fix crashing problem when trying two switch from fips to non-fips and back.
bug 119214.


git-svn-id: svn://10.0.0.236/trunk@113048 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-28 19:18:41 +00:00
wtc%netscape.com
2b6f0984fd Bugzilla bug 100447: on BSD/OS 4.2 and 4.3, we have problem calling
safe_popen in a threaded program.  So we don't call safe_popen when
we obtained some entropy from /dev/urandom.  Thanks to lidl@pix.net
for the bug report and the fix.


git-svn-id: svn://10.0.0.236/trunk@112968 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-27 00:14:59 +00:00
wtc%netscape.com
a3b315a581 Bugzilla bug 111206: make the Solaris version test flexible so that we
don't need to add a new test for each new Solaris release.


git-svn-id: svn://10.0.0.236/trunk@112949 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-26 16:19:51 +00:00
relyea%netscape.com
c0a2bdbd5f Fix PBE_Context failure by making sure CKM_PBA is it's own keygen type.
git-svn-id: svn://10.0.0.236/trunk@112931 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-26 01:20:50 +00:00
relyea%netscape.com
517e6d30a2 Fix 2 memory leaks and a UMR.
(keyhand needs to be initialized before we start xor hashing)
Free item and time elements which are transparently allocated for us.


git-svn-id: svn://10.0.0.236/trunk@112916 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-26 00:16:03 +00:00
relyea%netscape.com
d9934c8ada Change Sha1_hash to a simple XOR hash for building key handles for token
objects.


git-svn-id: svn://10.0.0.236/trunk@112869 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-25 19:09:34 +00:00
relyea%netscape.com
863e2140bf Fix key leak in S/Mime.
git-svn-id: svn://10.0.0.236/trunk@112868 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-25 19:08:19 +00:00
relyea%netscape.com
61c9862c40 Fix bug 115660. Note that fixing the bugs necessitates fixing the test
cases as well. The test case was depending on the failure to read certs to
detect the failure to read keys. Now certutil returns a failure if no keys
are found. This also means that the FIPS test after the key and cert
has been deleted should expect a failure to list any keys.


git-svn-id: svn://10.0.0.236/trunk@112866 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-25 19:03:17 +00:00
relyea%netscape.com
cbe61129a7 Too agressive on fixing leaks;). This one isn't a leak.
bob


git-svn-id: svn://10.0.0.236/trunk@112733 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-24 21:33:51 +00:00
ian.mcgreer%sun.com
d66ce598c6 fix aix issues
git-svn-id: svn://10.0.0.236/trunk@112701 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-24 15:45:55 +00:00
relyea%netscape.com
f1b9f47094 Fix NT crash on startup. (load builtins after trust domain gets initialized).
git-svn-id: svn://10.0.0.236/trunk@112632 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-24 02:46:07 +00:00
nicolson%netscape.com
73e004d9c4 Fix 118679: PK11SDR_Encrypt fails if not logged into token.
git-svn-id: svn://10.0.0.236/trunk@112598 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-24 01:06:22 +00:00
ian.mcgreer%sun.com
cf10eb186e implement istemp and isperm in case clients depend on it, make sure certs own a reference to their slot and then free it
git-svn-id: svn://10.0.0.236/trunk@112596 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-24 00:58:02 +00:00
ian.mcgreer%sun.com
f8e7451012 fix leakage in traversal functions that convert certs to CERTCertificates
git-svn-id: svn://10.0.0.236/trunk@112592 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-24 00:34:03 +00:00
relyea%netscape.com
ae3fbdd717 Fix memory leaks.
git-svn-id: svn://10.0.0.236/trunk@112591 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-24 00:26:29 +00:00
ian.mcgreer%sun.com
d6eac2bdae make sure path string has terminator
git-svn-id: svn://10.0.0.236/trunk@112590 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-24 00:25:32 +00:00
ian.mcgreer%sun.com
767d61d31e restore function CERT_SaveImportedCert, used to set the trust bits of a cert on import. Fixes bug 121487
git-svn-id: svn://10.0.0.236/trunk@112588 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-23 21:43:30 +00:00
ian.mcgreer%sun.com
272d51c4bd traverse functions need to cache as they run in order to catch multiple instances of certs correctly
git-svn-id: svn://10.0.0.236/trunk@112587 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-23 20:35:18 +00:00
ian.mcgreer%sun.com
8ccf2fc960 traversed certs also need to be cached
git-svn-id: svn://10.0.0.236/trunk@112586 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-23 18:24:29 +00:00
ian.mcgreer%sun.com
b34e37b27f fix core when token list is emptied (caused by switch to fips mode)
git-svn-id: svn://10.0.0.236/trunk@112585 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-23 17:39:29 +00:00
ian.mcgreer%sun.com
6cebd8d49a * keep stan in sync with both addition and removal of modules
* clean up compatibilty issues with PKCS#11 serial numbers.  Need to search both encoded and decoded values, while making sure stan code only deals with DER value


git-svn-id: svn://10.0.0.236/trunk@112584 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-23 17:00:39 +00:00
ian.mcgreer%sun.com
57a6e93f05 make the load function for the root token work
git-svn-id: svn://10.0.0.236/trunk@112583 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-23 15:36:54 +00:00
ian.mcgreer%sun.com
b759894bd4 fix breakage caused by yesterday's checkins; since softoken no longer returns terminating NULL for strings must add it above PKCS#11
also fixes bug 121384


git-svn-id: svn://10.0.0.236/trunk@112579 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-23 14:37:48 +00:00
relyea%netscape.com
eaf5a8bae2 Restore code automatic Built-in loading code.
git-svn-id: svn://10.0.0.236/trunk@112576 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-23 04:42:21 +00:00
relyea%netscape.com
4709d9db1c Function to return if any builtins have been loaded yet.
git-svn-id: svn://10.0.0.236/trunk@112575 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-23 04:41:25 +00:00
ian.mcgreer%sun.com
8d87d7c1ca fix PSM crash described in bug 120647
git-svn-id: svn://10.0.0.236/trunk@112574 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-23 03:53:16 +00:00
relyea%netscape.com
c410a92b91 Fix wrong polarity on if statement (should check for success, not failure).
git-svn-id: svn://10.0.0.236/trunk@112565 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-23 02:10:31 +00:00
relyea%netscape.com
a9049ce9b3 Fix memory like in readSMimeEntry
git-svn-id: svn://10.0.0.236/trunk@112560 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-23 01:44:22 +00:00
relyea%netscape.com
f29e33a844 Fix label stuff.
git-svn-id: svn://10.0.0.236/trunk@112556 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-23 01:20:32 +00:00
relyea%netscape.com
3a74953b5a Labels don't have NULL's by default.
git-svn-id: svn://10.0.0.236/trunk@112552 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-23 00:53:53 +00:00
ian.mcgreer%sun.com
6f2350c744 PSM bug 119359, NSS 3.4 also needs to recognize valid CA trust in order for cert download to work correctly
git-svn-id: svn://10.0.0.236/trunk@112551 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-23 00:49:23 +00:00
ian.mcgreer%sun.com
0cf0e70db5 last change to INTEGER encoding, strip extraneous leading zeros from integer values passed to encoder
git-svn-id: svn://10.0.0.236/trunk@112538 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-22 22:48:26 +00:00
ian.mcgreer%sun.com
71e89f46e5 fix for bug 120824; functions which collect certs based on subject need to examine *both* the temp and perm stores
git-svn-id: svn://10.0.0.236/trunk@112528 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-22 21:56:19 +00:00
relyea%netscape.com
c221c4c085 remove bogus verify step (the cert passed in is almost certainly a signing cert).
git-svn-id: svn://10.0.0.236/trunk@112419 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-18 03:38:29 +00:00
relyea%netscape.com
9ef64c94f4 Fix the case where the subjectID is an issuer/SN. don't build a dbkey in
this case, return the actual subject cert id after looking up the cert
directly


git-svn-id: svn://10.0.0.236/trunk@112418 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-18 03:36:44 +00:00