51 Commits

Author SHA1 Message Date
wtc%netscape.com
4d2eddeffb Bugzilla bug 131078: fixed compiler warnings. r=mcgreer.
git-svn-id: svn://10.0.0.236/trunk@116631 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-15 06:07:41 +00:00
ian.mcgreer%sun.com
185ed3d0f6 fix looking up a key on a token
git-svn-id: svn://10.0.0.236/trunk@115445 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-27 22:12:06 +00:00
ian.mcgreer%sun.com
358f1a0a6a make listing of certs finish cleanly under purify
git-svn-id: svn://10.0.0.236/trunk@114510 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-14 18:02:30 +00:00
ian.mcgreer%sun.com
554c4ef86a bug 124268, usage statement for dump chain option
git-svn-id: svn://10.0.0.236/trunk@114031 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-08 15:22:54 +00:00
ian.mcgreer%sun.com
73e7836ead bug 124268, -P is used twice
git-svn-id: svn://10.0.0.236/trunk@113910 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-07 22:28:04 +00:00
relyea%netscape.com
4965975f8a Make the following functions open the databases Readonly:
ListCerts PrintHelp ListKeys ListModules CheckCertValidity Version

Add an option (-X) to restore the old behaviour of openning the Databases R/W


git-svn-id: svn://10.0.0.236/trunk@113391 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-01 02:26:40 +00:00
ian.mcgreer%sun.com
c2387fe9a7 have certutil shutdown cleanly so purify is easier to deal with
git-svn-id: svn://10.0.0.236/trunk@113331 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-31 19:27:07 +00:00
ian.mcgreer%sun.com
c1c7114dbe changes related to bug 115660
* fipstoken will only force authentication for object-related functions when the object is a private or secret key
* certutil does not authenticate to token when in FIPS and only doing cert-related operations
* QA does not provide password to certutil when doing cert-related operations in FIPS tests


git-svn-id: svn://10.0.0.236/trunk@113122 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-29 17:30:22 +00:00
relyea%netscape.com
61c9862c40 Fix bug 115660. Note that fixing the bugs necessitates fixing the test
cases as well. The test case was depending on the failure to read certs to
detect the failure to read keys. Now certutil returns a failure if no keys
are found. This also means that the FIPS test after the key and cert
has been deleted should expect a failure to list any keys.


git-svn-id: svn://10.0.0.236/trunk@112866 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-25 19:03:17 +00:00
ian.mcgreer%sun.com
ee3a6d6fd8 force generated serial #'s to always be positive
git-svn-id: svn://10.0.0.236/trunk@112143 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-15 01:53:11 +00:00
ian.mcgreer%sun.com
0938408b74 add command to certutil for dumping the chain of a cert
git-svn-id: svn://10.0.0.236/trunk@111790 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-10 04:30:00 +00:00
ian.mcgreer%sun.com
9c9e4ed53c this is why apps shouldn't be able to change cert values...
git-svn-id: svn://10.0.0.236/trunk@110729 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-18 21:11:41 +00:00
ian.mcgreer%sun.com
d16299751e fips changes. forces login for cert listing.
git-svn-id: svn://10.0.0.236/trunk@107710 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-09 00:37:03 +00:00
relyea%netscape.com
162c530b16 Land BOB_WORK_BRANCH unto the tip.
remove lots of depricated files.
move some files to appropriate directories (pcertdb *_rand
associated headers to soft token, for instance)
rename several stan files which had the same name as other nss files.
remove depricated functions.


git-svn-id: svn://10.0.0.236/trunk@107628 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-08 00:15:51 +00:00
relyea%netscape.com
f9427b6c6c Remove dead code.
Fix compiler warnings.


git-svn-id: svn://10.0.0.236/trunk@103353 18797224-902f-48f8-a5cc-f745e15eee43
2001-09-20 21:45:41 +00:00
relyea%netscape.com
ab5346358b Add option to reset the cert and key database.
git-svn-id: svn://10.0.0.236/trunk@102454 18797224-902f-48f8-a5cc-f745e15eee43
2001-09-06 21:18:13 +00:00
wtc%netscape.com
c263db4585 Bugzilla bug 94685: fixed compiler warnings.
git-svn-id: svn://10.0.0.236/trunk@101738 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-24 03:52:23 +00:00
mcgreer%netscape.com
8fbcd66ced make error return more readable
git-svn-id: svn://10.0.0.236/trunk@100760 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-10 16:13:13 +00:00
mcgreer%netscape.com
4065d8c61b duh. Return error % 256 (to get 255 when error is SECFailure).
git-svn-id: svn://10.0.0.236/trunk@100759 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-10 16:06:57 +00:00
mcgreer%netscape.com
dc81bd2915 force certutil to always return 255 on error. Make sure there is only one pointer to password callback arg.
git-svn-id: svn://10.0.0.236/trunk@100677 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-09 20:57:58 +00:00
mcgreer%netscape.com
7db7feb796 Look for the private key when listing keys.
The second part of this patch was checked in, see revision 1.28.  Yet, somehow, it never showed up.


git-svn-id: svn://10.0.0.236/trunk@100586 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-08 13:37:42 +00:00
mcgreer%netscape.com
9adc90c6da Yet Another Instance Of Needing to Send the Password Down for FIPS
git-svn-id: svn://10.0.0.236/trunk@100498 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-07 16:46:52 +00:00
mcgreer%netscape.com
168db4e13e implement key deletion in certutil
git-svn-id: svn://10.0.0.236/trunk@100494 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-07 16:04:12 +00:00
mcgreer%netscape.com
6baaa25d69 another FIPS workaround
git-svn-id: svn://10.0.0.236/trunk@100407 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-06 18:19:12 +00:00
mcgreer%netscape.com
b564bdde7a changes to make FIPS mode work
git-svn-id: svn://10.0.0.236/trunk@100229 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-02 21:04:14 +00:00
mcgreer%netscape.com
1c10fbbea6 fix for 90510, listing individual certs from token
git-svn-id: svn://10.0.0.236/trunk@99806 18797224-902f-48f8-a5cc-f745e15eee43
2001-07-24 19:26:53 +00:00
kirke%netscape.com
d01533357d Bug 69582 endless loop on EOF reading Extensions
git-svn-id: svn://10.0.0.236/trunk@88316 18797224-902f-48f8-a5cc-f745e15eee43
2001-03-01 21:45:33 +00:00
relyea%netscape.com
cfdefcfcde Make the public interface use a flags variable instead of a billion little
Bools.

suggested and reviewed by wtc in bug 66230


git-svn-id: svn://10.0.0.236/trunk@86731 18797224-902f-48f8-a5cc-f745e15eee43
2001-02-10 02:03:03 +00:00
relyea%netscape.com
82187a130c update certutil and modutil to use the new NSS_Initialize signature.
modutil can now specify it's nocertdb paramter.

bug 64260 reviewed by wtc


git-svn-id: svn://10.0.0.236/trunk@86649 18797224-902f-48f8-a5cc-f745e15eee43
2001-02-09 01:38:04 +00:00
mcgreer%netscape.com
c81d2c6862 bug 67132. certutil crashes on -C -x combination, deny it for now.
certutil -C was not recognizing the -a (ascii) option, implement it.
r=wtc


git-svn-id: svn://10.0.0.236/trunk@86344 18797224-902f-48f8-a5cc-f745e15eee43
2001-02-06 18:26:30 +00:00
kirke%netscape.com
55dbf03443 Resolves bug 66244 - Many NSS command do not detect failure of NSS_Init* functions. Introduced SECU_PrintPRandOSError(progName); to print on failure. Each command is responsible for exiting with appropriate status to distinguish failure points.
git-svn-id: svn://10.0.0.236/trunk@85896 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-31 23:25:02 +00:00
nelsonb%netscape.com
74ddd2b9da Detect failures of NSS_Init and report them.
This fixes bug 66244 for certutil (only).


git-svn-id: svn://10.0.0.236/trunk@85466 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-25 04:14:22 +00:00
mcgreer%netscape.com
44274af2ae add option for db prefix
git-svn-id: svn://10.0.0.236/trunk@85283 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-22 20:14:05 +00:00
nelsonb%netscape.com
68e54ecade Add missing #include "nss.h"
git-svn-id: svn://10.0.0.236/trunk@84516 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-07 07:43:28 +00:00
relyea%netscape.com
2e0b7692c1 Remove depricated functions that's referencing a removed symbol
git-svn-id: svn://10.0.0.236/trunk@84496 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-06 23:55:22 +00:00
relyea%netscape.com
d5678a9288 Use NSS_initialization.
Remove Low level SECKEY calls (not the private key management is now broken
until PK11 calls are added to replace them).


git-svn-id: svn://10.0.0.236/trunk@84483 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-06 21:11:34 +00:00
mcgreer%netscape.com
52d2b6f439 option for printing content version
git-svn-id: svn://10.0.0.236/trunk@82283 18797224-902f-48f8-a5cc-f745e15eee43
2000-11-03 22:28:26 +00:00
wtc%netscape.com
45c91f68a1 Print NSPR and OS error codes if PR_Open fails.
git-svn-id: svn://10.0.0.236/trunk@80790 18797224-902f-48f8-a5cc-f745e15eee43
2000-10-10 02:38:08 +00:00
nelsonb%netscape.com
f2d9c67c2f Fix a crash caused by using a null PRFileDesc * after PR_Open fails.
git-svn-id: svn://10.0.0.236/trunk@80638 18797224-902f-48f8-a5cc-f745e15eee43
2000-10-07 02:16:03 +00:00
mcgreer%netscape.com
89954b170a include support for adding S/MIME certs to the database. this will be needed for S/MIME test code.
git-svn-id: svn://10.0.0.236/trunk@79533 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-19 16:22:17 +00:00
relyea%netscape.com
f2d81cda06 Fix merge problems from CVS. This version should now compile and work.
git-svn-id: svn://10.0.0.236/trunk@79361 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-15 21:01:53 +00:00
relyea%netscape.com
fe29703cc0 Propogate the password arg to the sign function.
git-svn-id: svn://10.0.0.236/trunk@79345 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-15 15:37:37 +00:00
relyea%netscape.com
47de8f7712 Fix certutil to read Certs from PKCS #11 modules. Make the 'all' option for
modules work for ListCerts and ListKeys. Allow password from file for these
options as well.


git-svn-id: svn://10.0.0.236/trunk@79180 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-14 21:12:13 +00:00
mcgreer%netscape.com
a945d82e5a fixes RFE from bug 49316 (will test on NT before verifying)
git-svn-id: svn://10.0.0.236/trunk@78982 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-13 06:43:52 +00:00
mcgreer%netscape.com
38b432fd26 moved fingerprint handling to secutil.c, see bug 45303
git-svn-id: svn://10.0.0.236/trunk@77539 18797224-902f-48f8-a5cc-f745e15eee43
2000-08-30 01:06:00 +00:00
mcgreer%netscape.com
1a7dd97349 should be able to set negative offset during cert creation
git-svn-id: svn://10.0.0.236/trunk@76327 18797224-902f-48f8-a5cc-f745e15eee43
2000-08-15 05:08:13 +00:00
mcgreer%netscape.com
951eff21a1 fingerprint had to handled in certutil for now since SECU_PrintCertificate receives a decoded DER. see #45303
git-svn-id: svn://10.0.0.236/trunk@74117 18797224-902f-48f8-a5cc-f745e15eee43
2000-07-12 22:42:57 +00:00
relyea%netscape.com
743720da87 merge changes from NSS 3.0 branch to allow NT automated tests to work.
git-svn-id: svn://10.0.0.236/trunk@73533 18797224-902f-48f8-a5cc-f745e15eee43
2000-06-29 21:25:41 +00:00
mcgreer%netscape.com
84112f1bce attempt to add token support for listing certs & keys
git-svn-id: svn://10.0.0.236/trunk@72332 18797224-902f-48f8-a5cc-f745e15eee43
2000-06-16 00:38:44 +00:00
chrisk%netscape.com
040db90898 Sorted output for certutil -L
git-svn-id: svn://10.0.0.236/trunk@72054 18797224-902f-48f8-a5cc-f745e15eee43
2000-06-12 22:25:40 +00:00