351 Commits

Author SHA1 Message Date
alexei.volkov.bugs%sun.com
1e94d6d75f 412468 - modify certutil, vfychain and vfyserv utilities to use CERT_PKIXVerifyCert function. r=nelson
git-svn-id: svn://10.0.0.236/trunk@248725 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-27 21:56:25 +00:00
alexei.volkov.bugs%sun.com
160d5cc1c8 397832 - libpkix leaks memory if a macro calls a function that returns an error.
Patch 311421. Changes to existing files. r=nelson.


git-svn-id: svn://10.0.0.236/trunk@248560 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-25 22:13:25 +00:00
julien.pierre.boogz%sun.com
b02bb4c1d2 Fix for bug 391721 . GetBestCRL does not set error code when CRL is not found or invalid. r=nelson
git-svn-id: svn://10.0.0.236/trunk@248521 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-25 05:02:22 +00:00
alexei.volkov.bugs%sun.com
220ffe47b1 390381 - libpkix rejects cert chain when root CA cert has no basic constraints.
Main patch(by Nelson). r=rrelyea


git-svn-id: svn://10.0.0.236/trunk@247892 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-15 02:15:36 +00:00
kaie%kuix.de
1286f8d32d Bug 294531
Follow up patch to rename some policy function names
r=rrelyea


git-svn-id: svn://10.0.0.236/trunk@247889 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-15 01:21:21 +00:00
kaie%kuix.de
b3d6a0a975 Bug 294531, Design new interfaces for certificate path building and verification for libPKIX
Update CERT_PKIXVerifyCert implementation for new revocation API.
Implement functions that describe NSS 3.11 and NIST revocation checking policies.
Implementation v5 (for Proposal 8)
r=rrelyea


git-svn-id: svn://10.0.0.236/trunk@247877 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-14 23:29:08 +00:00
kaie%kuix.de
4869ddc312 Bug 294531, Design new interfaces for certificate path building and verification for libPKIX
Finalize revocation API for CERT_PKIXVerifyCert.
Proposal 8 as patch (v6)
Final r=rrelyea, most code also r=nelson


git-svn-id: svn://10.0.0.236/trunk@247876 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-14 23:28:46 +00:00
alexei.volkov.bugs%sun.com
95232238df 412468 - modify certutil, vfychain and vfyserv utilities to use CERT_PKIXVerifyCert function. Patches: suply trustlist to CERT_PKIXVerifyCert; use double "p" argument to use CERT_PKIXVerifyCert for validation. r=nelson.
git-svn-id: svn://10.0.0.236/trunk@247568 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-11 20:48:53 +00:00
wtc%google.com
dd1ffe05f6 Bug 419523: Export Cert_NewTempCertificate. Remove unnecessary inclusions
of nssrenam.h.  Remove functions that no longer need to be renamed from
nssrenam.h.  r=rrelyea.
Modified Files:
	cmd/vfychain/vfychain.c lib/certdb/stanpcertdb.c
	lib/crmf/asn1cmn.c lib/crmf/cmmfrec.c lib/crmf/respcmn.c
	lib/nss/nss.def lib/nss/nssrenam.h lib/pkcs12/p12e.c
	lib/pkcs7/certread.c lib/pkcs7/p7decode.c lib/pkcs7/p7encode.c
	lib/smime/cmsutil.c lib/ssl/ssl3con.c lib/ssl/ssl3ecc.c
	lib/ssl/sslnonce.c lib/ssl/sslsnce.c


git-svn-id: svn://10.0.0.236/trunk@247455 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-10 00:01:28 +00:00
rrelyea%redhat.com
c85559c0d8 bug 294531 Add entry to pass trust anchors on input.
r=alexi


git-svn-id: svn://10.0.0.236/trunk@247217 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-06 19:51:38 +00:00
julien.pierre.boogz%sun.com
29443dfc70 Fix for bug 403240 - threads hanging in nss_InitLock . r=wtc,nelson
git-svn-id: svn://10.0.0.236/trunk@245810 18797224-902f-48f8-a5cc-f745e15eee43
2008-02-16 04:38:09 +00:00
julien.pierre.boogz%sun.com
ff91b65496 Fix for bug 369144 . certutil needs option to generate SubjectKeyID extension. r=nelson
git-svn-id: svn://10.0.0.236/trunk@245804 18797224-902f-48f8-a5cc-f745e15eee43
2008-02-16 01:17:45 +00:00
julien.pierre.boogz%sun.com
99814dae90 Fix for bug 416928 . Invalid template for CERT_UserNoticeTemplate. Patch contributed by Kaspar Brand. r=julien
git-svn-id: svn://10.0.0.236/trunk@245543 18797224-902f-48f8-a5cc-f745e15eee43
2008-02-13 04:03:19 +00:00
julien.pierre.boogz%sun.com
bc7713a14d Fix for bug 291384 . Remove unnecessary semicolons in SEC_ASN1_MKSUB . r=nelson
git-svn-id: svn://10.0.0.236/trunk@245195 18797224-902f-48f8-a5cc-f745e15eee43
2008-02-08 02:50:50 +00:00
nelson%bolyard.com
ed3e67cce0 Bug 413010: CERT_CompareRDN may return a false match. r=julien.pierre
git-svn-id: svn://10.0.0.236/trunk@243779 18797224-902f-48f8-a5cc-f745e15eee43
2008-01-23 01:13:03 +00:00
kaie%kuix.de
98248ce192 fixing bustage
git-svn-id: svn://10.0.0.236/trunk@242627 18797224-902f-48f8-a5cc-f745e15eee43
2008-01-08 08:39:34 +00:00
kaie%kuix.de
855e7249da Bug 400917, Want exported function that outputs all host names for DNS name matching
r=nelson


git-svn-id: svn://10.0.0.236/trunk@242626 18797224-902f-48f8-a5cc-f745e15eee43
2008-01-08 07:33:59 +00:00
julien.pierre.boogz%sun.com
b41dcbfa2e Fix for bug 353577 . Remove NSS_CLASSIC code. r=nelson, wtc
git-svn-id: svn://10.0.0.236/trunk@239801 18797224-902f-48f8-a5cc-f745e15eee43
2007-11-21 21:37:05 +00:00
wtc%google.com
29f2430119 Bug 362278: moved CERT_TimeChoiceTemplate to lib/certdb because it is
declared in certt.h.  r=julien.pierre
Modified Files:
	certdb/certdb.c nss/utilwrap.c util/nssutil.def
	util/templates.c util/utilrename.h


git-svn-id: svn://10.0.0.236/trunk@239799 18797224-902f-48f8-a5cc-f745e15eee43
2007-11-21 21:19:40 +00:00
rrelyea%redhat.com
be6ee7bd15 Bug 403680
Add revocation flag processing.

r=kai


git-svn-id: svn://10.0.0.236/trunk@239744 18797224-902f-48f8-a5cc-f745e15eee43
2007-11-20 21:05:56 +00:00
julien.pierre.boogz%sun.com
3b557e654d Fix for bug 353577 . Delete PURE_STAN code and code outside NSS_3_4_CODE . r=wtc,nelson
git-svn-id: svn://10.0.0.236/trunk@239526 18797224-902f-48f8-a5cc-f745e15eee43
2007-11-16 05:29:27 +00:00
wtc%google.com
1a0a9029f1 Bug 399304: In cert_InitLocks, we can use PZ_NewLock to create the locks
because cert_InitLocks is called by nss_Init.  r=julien.pierre


git-svn-id: svn://10.0.0.236/trunk@239368 18797224-902f-48f8-a5cc-f745e15eee43
2007-11-13 23:10:45 +00:00
julien.pierre.boogz%sun.com
ae91699902 Fix for bug 399304 . Initialize cert trust and refcount locks early. r=relyea, nelson
git-svn-id: svn://10.0.0.236/trunk@239124 18797224-902f-48f8-a5cc-f745e15eee43
2007-11-10 04:26:12 +00:00
wtc%google.com
fa56338784 Bug 402777: Two changes to make lib/util more stand-alone. Moved
CKM_INVALID_MECHANISM from secmodt.h to pkcs11n.h.  Moved the three
CERTValidity functions from lib/util/sectime.c to lib/certdb/certdb.c.
r=rrelyea.
Modified Files:
	lib/certdb/certdb.c lib/nss/utilwrap.c lib/pk11wrap/secmodt.h
	lib/softoken/pkcs11n.h lib/util/nssutil.def lib/util/secoid.c
	lib/util/sectime.c lib/util/utilrename.h


git-svn-id: svn://10.0.0.236/trunk@238930 18797224-902f-48f8-a5cc-f745e15eee43
2007-11-07 21:43:28 +00:00
julien.pierre.boogz%sun.com
a8626f2c53 Fix for bug 286642 . Move utility functions to new libnssutil shared library. r=nelson
git-svn-id: svn://10.0.0.236/trunk@237631 18797224-902f-48f8-a5cc-f745e15eee43
2007-10-12 01:44:51 +00:00
rrelyea%redhat.com
d2cf075703 bug 284531 Design new interfaces for certificate path building and verification for libPKIX
patch by stevep
review by rrelyea.


git-svn-id: svn://10.0.0.236/trunk@236687 18797224-902f-48f8-a5cc-f745e15eee43
2007-09-25 23:48:04 +00:00
neil.williams%sun.com
d23a220b27 Bug 324744, add gen of policy extns to certutil, second of 3 patches
r=julien


git-svn-id: svn://10.0.0.236/trunk@235372 18797224-902f-48f8-a5cc-f745e15eee43
2007-09-07 18:45:53 +00:00
nelson%bolyard.com
69225b8f3e Bug 394040 - Tstclnt crashed in NISCC testing, r=julien
git-svn-id: svn://10.0.0.236/trunk@233528 18797224-902f-48f8-a5cc-f745e15eee43
2007-09-01 00:16:19 +00:00
nelson%bolyard.com
d4cdab7232 Bug 392208 - PK11_FindCertByIssuerAndSN must validate input arguments
r=Kaspar Brand, sr=rrelyea


git-svn-id: svn://10.0.0.236/trunk@233347 18797224-902f-48f8-a5cc-f745e15eee43
2007-08-29 21:59:06 +00:00
alexei.volkov.bugs%sun.com
fcacc7eebb 390888 - CERT_Verify* functions should be able to use libPKIX.
This fix restores all CERT_VerifyCert* functions to their previous
state and modifies only CERT_VerifyCertChain to be able to use the
libpkix switch to build and validate cert chain.
r=nelson.


git-svn-id: svn://10.0.0.236/trunk@233329 18797224-902f-48f8-a5cc-f745e15eee43
2007-08-29 17:53:21 +00:00
alexei.volkov.bugs%sun.com
e46dd0eb15 390888 - CERT_Verify* functions should be able to use libPKIX. r=nelson
git-svn-id: svn://10.0.0.236/trunk@233261 18797224-902f-48f8-a5cc-f745e15eee43
2007-08-29 00:12:08 +00:00
nelson%bolyard.com
7da3a85be6 Bug 210584 - CERT_AsciiToName doesn't accept all valid values, r=Alexei
git-svn-id: svn://10.0.0.236/trunk@233193 18797224-902f-48f8-a5cc-f745e15eee43
2007-08-28 06:41:55 +00:00
christophe.ravel.bugs%sun.com
01014185ad Bug 389781 NSS should be built size-optimized on Linux, Windows, and Mac
r=julien.pierre.boogz


git-svn-id: svn://10.0.0.236/trunk@232117 18797224-902f-48f8-a5cc-f745e15eee43
2007-08-15 15:30:08 +00:00
rrelyea%redhat.com
557cb6151c Bug 391291 Implement Shared Database Integrity checks.
r=nelson (plus review from kengert)


git-svn-id: svn://10.0.0.236/trunk@231760 18797224-902f-48f8-a5cc-f745e15eee43
2007-08-09 22:36:20 +00:00
julien.pierre.bugs%sun.com
dbf7333b81 Fix for bug 390710 . Correct template for decoding name constraints . r=nelson
git-svn-id: svn://10.0.0.236/trunk@231436 18797224-902f-48f8-a5cc-f745e15eee43
2007-08-03 18:37:15 +00:00
nelson%bolyard.com
a1267b775d Bug 379753. NSS WOrkaround for PSM bug 380091.
Don't let PSM clobber S/MIME profiles for our local user certs. r=rrelyea..


git-svn-id: svn://10.0.0.236/trunk@229950 18797224-902f-48f8-a5cc-f745e15eee43
2007-07-14 06:06:53 +00:00
nelson%bolyard.com
db9d42f5fa Back out revision 1.23 of certdb/certdb.c, the "fix" for bug 121487 that
started setting the valid override flags routinely on all imported certs.
Bug 376737.  r=rrelyea


git-svn-id: svn://10.0.0.236/trunk@229947 18797224-902f-48f8-a5cc-f745e15eee43
2007-07-14 05:51:00 +00:00
julien.pierre.bugs%sun.com
b5c661f69d Fix for bug 113323 . Constify some functions. r=nelson
git-svn-id: svn://10.0.0.236/trunk@229672 18797224-902f-48f8-a5cc-f745e15eee43
2007-07-11 04:47:42 +00:00
alexei.volkov.bugs%sun.com
110431be3e Bug 358785: Merge NSS_LIBPKIX_BRANCH back to trunk. r=julien, r=alexei
git-svn-id: svn://10.0.0.236/trunk@226998 18797224-902f-48f8-a5cc-f745e15eee43
2007-05-25 07:28:38 +00:00
julien.pierre.bugs%sun.com
03f794688f Fix for bug 380334 . Get rid of some dead code in CERT_HTMLCertInfo . r=nelson, rrlyea
git-svn-id: svn://10.0.0.236/trunk@226484 18797224-902f-48f8-a5cc-f745e15eee43
2007-05-15 23:15:28 +00:00
neil.williams%sun.com
5988367130 Bug 329067, r=nelson,alexei "NSS encodes DN attributes with wrong type
git-svn-id: svn://10.0.0.236/trunk@225305 18797224-902f-48f8-a5cc-f745e15eee43
2007-04-30 23:31:25 +00:00
alexei.volkov.bugs%sun.com
3362ecc93f 338986 - Unauthorized OCSP response error from user's default OCSP responder. r=nelson
git-svn-id: svn://10.0.0.236/trunk@221121 18797224-902f-48f8-a5cc-f745e15eee43
2007-03-01 00:30:19 +00:00
nelson%bolyard.com
8ea6267f90 When storing new CRL, Find old CRL and if it can be decoded, delete it.
Bug 363749. r=wtchang,alexei.volkov


git-svn-id: svn://10.0.0.236/trunk@217798 18797224-902f-48f8-a5cc-f745e15eee43
2007-01-05 01:32:18 +00:00
alexei.volkov.bugs%sun.com
07e48e520a 353902: klocwork bugs in stanpcertdb.c. r=nelson
git-svn-id: svn://10.0.0.236/trunk@214447 18797224-902f-48f8-a5cc-f745e15eee43
2006-10-31 00:24:38 +00:00
alexei.volkov.bugs%sun.com
6e03ca6609 353413: Klocwork 76541 free uninitialized pointer in CERT_FindCertURLExtension. r=nelson
git-svn-id: svn://10.0.0.236/trunk@212884 18797224-902f-48f8-a5cc-f745e15eee43
2006-09-29 20:20:21 +00:00
alexei.volkov.bugs%sun.com
8b65d799f1 353374: Klocwork 76494 - Null ptr derefs in CERT_FormatName. r=nelson
git-svn-id: svn://10.0.0.236/trunk@212883 18797224-902f-48f8-a5cc-f745e15eee43
2006-09-29 20:18:55 +00:00
julien.pierre.bugs%sun.com
06c5b8ccfa Fix for bug 352041 . oom in CERT_DecodeDERCrlWithFlags . r=alexei,nelson
git-svn-id: svn://10.0.0.236/trunk@209795 18797224-902f-48f8-a5cc-f745e15eee43
2006-09-11 23:14:09 +00:00
julien.pierre.bugs%sun.com
600a141f4c Fix for bug 225525 . Resolve race assigning NSSCertificate fields which leaked memory and slot reference. r=nelson
git-svn-id: svn://10.0.0.236/trunk@208124 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-22 22:54:11 +00:00
nelson%bolyard.com
7aa683b767 Fix race in CERT_NewTempCertificate. Bug 341323. r=julien,rrelyea
git-svn-id: svn://10.0.0.236/trunk@208087 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-22 03:30:14 +00:00
julien.pierre.bugs%sun.com
a48ba8324d Fix for bug 178894 . Quick decoder updates for lib/certdb and lib/certhigh . r=nelson .
git-svn-id: svn://10.0.0.236/trunk@206742 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-07 19:09:41 +00:00