105 Commits

Author SHA1 Message Date
wtc%netscape.com
0312d76fcb Bugzilla bug 130703: final adjustment of the CERTSignedCrl structure for
NSS 3.4.  r=relyea.


git-svn-id: svn://10.0.0.236/trunk@116656 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-15 20:21:45 +00:00
wtc%netscape.com
6df50775c7 Bugzilla bug 130983: SEC_FindCrlByName needs to set the 'pkcs11ID' field
of the CERTSignedCrl structure it returns.  The patch is contributed by
Rangan Sen <rangansen@netscape.com>.  r=relyea.


git-svn-id: svn://10.0.0.236/trunk@116655 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-15 20:17:15 +00:00
ian.mcgreer%sun.com
e837eb40ac bug 129709, incorrect free of cert->nickname
r=wtc


git-svn-id: svn://10.0.0.236/trunk@116562 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-14 17:42:02 +00:00
wtc%netscape.com
a8e2c91a4d Bugzilla bug 130703: fixed several issues in the NSS 3.4 exported headers.
1) Preseve the position of NSS 3.3 elements in the data structures.  Some
new fields replace some old deprecated fields where possible to preserve
the total size of the structure.
2) Stan headers are removed from public exports.
3) Some exported functions didn't have prototypes in the public headers.
4) One bug fix: dev3hack.c did not pass the second argument to
nssToken_DestroyCertList.
5) Include the necessary headers to fix undeclared function warnings.


git-svn-id: svn://10.0.0.236/trunk@116522 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-14 04:12:25 +00:00
ian.mcgreer%sun.com
8e15d46893 bug 129298, handle different nicknames across tokens
r=relyea/a=wtc


git-svn-id: svn://10.0.0.236/trunk@116093 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-07 22:08:00 +00:00
ian.mcgreer%sun.com
93335b6c5a bug 129370, temp cert trusts and S/MIME profiles may cause crashes
r/a=wtc


git-svn-id: svn://10.0.0.236/trunk@116072 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-07 20:42:40 +00:00
wtc%netscape.com
3995ddd6d7 Bugzilla bug 128915: the first part of the previous change is not
necessary, so replace it with an assertion.  r=mcgreer.


git-svn-id: svn://10.0.0.236/trunk@115825 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-05 15:49:33 +00:00
ian.mcgreer%sun.com
a9a015ddaf bug 128915, prevent crash on empty S/MIME profiles
git-svn-id: svn://10.0.0.236/trunk@115752 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-04 23:19:20 +00:00
wtc%netscape.com
e77f26b222 Bugzilla bug 122261: removed an assertion on bad input. Bad input should
be reported by returning a failure status.  Thanks to erl@voxi.com
(Erland Lewin) for the bug report.  r=relyea,kaie.


git-svn-id: svn://10.0.0.236/trunk@115644 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-02 15:31:25 +00:00
ian.mcgreer%sun.com
ba654ff84f bug 125796, make sure all CERTCertificates are destroyed as such, and that cache collisions when traversing are handled correctly (by destroying extra reference)
git-svn-id: svn://10.0.0.236/trunk@115371 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-26 16:21:48 +00:00
relyea%netscape.com
99db5dd573 CRL issues: 1) return url when finding and importing CRL's.
2) fix CERT_ImportCRL so it actually works.

NOTE: Calls of SEC_NewCrl() should verify the signature on the CRL before
importing!.


git-svn-id: svn://10.0.0.236/trunk@115345 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-26 02:02:53 +00:00
relyea%netscape.com
c1bf43920f Implement SEC_NicknameConflicts().
git-svn-id: svn://10.0.0.236/trunk@114564 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-15 01:57:08 +00:00
wtc%netscape.com
0d23fb9c84 Bugzilla bug 122712: renamed cert_DecodeGeneralName to
CERT_DecodeGeneralName because we export this function from nss.def.
(The cert_ prefix suggests an internal function.)
Modified Files:
	lib/certdb/genname.c lib/certdb/genname.h lib/certdb/xconst.c
	lib/nss/nss.def


git-svn-id: svn://10.0.0.236/trunk@114471 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-14 02:53:20 +00:00
wtc%netscape.com
0ecadf23c7 Bugzilla bug 123938: renamed cert_EncodeGeneralName to
CERT_EncodeGeneralName.  Export CERT_EncodeGeneralName and
CERT_FindKeyUsageExtension from nss.def.  Have cmmfrec.c include
nssrenam.h to get __CERT_NewTempCertificate.
Modified Files:
	lib/certdb/genname.c lib/certdb/genname.h lib/certdb/xconst.c
	lib/crmf/cmmfchal.c lib/crmf/cmmfrec.c lib/nss/nss.def


git-svn-id: svn://10.0.0.236/trunk@114469 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-14 02:25:21 +00:00
ian.mcgreer%sun.com
0c3606cd66 bug 124082, don't change trust of existing CA certs during PKCS#12 import
git-svn-id: svn://10.0.0.236/trunk@114215 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-12 00:38:16 +00:00
ian.mcgreer%sun.com
0fd707f56a NSSCryptoContext_ImportCertificate cannot inform the caller that the cert already exists as a temp cert, is is necessary to work around this in CERT_NewTempCertificate by doing a lookup on the cert after it was imported.
r=relyea


git-svn-id: svn://10.0.0.236/trunk@114198 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-11 22:12:01 +00:00
ian.mcgreer%sun.com
0c1df9e9f5 This is a revision of the patch shown in bug 122907. It should fix the leakage seen with client auth. It is needed either way, as NSS 3.3 always checked for pre-existing temp certs before creating a new one.
git-svn-id: svn://10.0.0.236/trunk@113901 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-07 14:58:05 +00:00
wtc%netscape.com
920a4207ed Bugzilla bug 119376: initialize a local variable to eliminate a compiler
warning.


git-svn-id: svn://10.0.0.236/trunk@113860 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-07 01:57:48 +00:00
relyea%netscape.com
04a97fd3e2 Identify certs that have no trust as CA's if they have the right settings
git-svn-id: svn://10.0.0.236/trunk@113853 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-07 00:50:47 +00:00
ian.mcgreer%sun.com
3e0d2561a3 plug leak found doing client auth, move freeing of cert's slot down a level in case the cert was not made external
git-svn-id: svn://10.0.0.236/trunk@113640 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-04 23:04:11 +00:00
ian.mcgreer%sun.com
0240bece7f fix leak reported in bug 123081 by avoiding allocation for time variable
git-svn-id: svn://10.0.0.236/trunk@113633 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-04 22:34:22 +00:00
ian.mcgreer%sun.com
f0c3d0a6e5 couple of fixes
git-svn-id: svn://10.0.0.236/trunk@113323 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-31 17:28:49 +00:00
relyea%netscape.com
7e68464d13 restore checks for critical extenstions and fail if we have any we don't
recognize. Just remove the bogus check that v2 crls must have critical extensions


git-svn-id: svn://10.0.0.236/trunk@113260 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-31 00:42:43 +00:00
relyea%netscape.com
517e6d30a2 Fix 2 memory leaks and a UMR.
(keyhand needs to be initialized before we start xor hashing)
Free item and time elements which are transparently allocated for us.


git-svn-id: svn://10.0.0.236/trunk@112916 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-26 00:16:03 +00:00
ian.mcgreer%sun.com
cf10eb186e implement istemp and isperm in case clients depend on it, make sure certs own a reference to their slot and then free it
git-svn-id: svn://10.0.0.236/trunk@112596 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-24 00:58:02 +00:00
ian.mcgreer%sun.com
767d61d31e restore function CERT_SaveImportedCert, used to set the trust bits of a cert on import. Fixes bug 121487
git-svn-id: svn://10.0.0.236/trunk@112588 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-23 21:43:30 +00:00
ian.mcgreer%sun.com
71e89f46e5 fix for bug 120824; functions which collect certs based on subject need to examine *both* the temp and perm stores
git-svn-id: svn://10.0.0.236/trunk@112528 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-22 21:56:19 +00:00
ian.mcgreer%sun.com
f07c00bdc9 more backwards compatibility fixes
* always send DER of serial number to PKCS#11 queries
* in softoken, construct key for certificate using decoded serial number with (possibly) a leading zero, for compatibility with version 7 db
* in softoken, decode serial number *without* removing leading zero for searches


git-svn-id: svn://10.0.0.236/trunk@112364 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-17 00:20:53 +00:00
ian.mcgreer%sun.com
f4ff6b016e PKCS#11 needs to receive the serial number DER-encoded
git-svn-id: svn://10.0.0.236/trunk@112117 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-14 23:19:17 +00:00
relyea%netscape.com
15ae9934f3 Keep a copy of the DER Crl.
git-svn-id: svn://10.0.0.236/trunk@111943 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-11 17:31:09 +00:00
relyea%netscape.com
732ef51aa6 Enable OCSP code.
git-svn-id: svn://10.0.0.236/trunk@111756 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-10 00:43:39 +00:00
ian.mcgreer%sun.com
ab311ba5fb move free of CERTCertificate's arena below the NSSCertificate. needed for the case when an NSSCertificate is freed without ever releasing a CERTCertificate.
git-svn-id: svn://10.0.0.236/trunk@111576 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-08 18:51:18 +00:00
ian.mcgreer%sun.com
dc6c6834e3 PSM fixes
* implement CERT_AddTempCertToPerm in 3.4
* update object instance lists when needed
* correctly check and allocate trust when changing it


git-svn-id: svn://10.0.0.236/trunk@111495 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-07 16:45:26 +00:00
ian.mcgreer%sun.com
7432d9b145 obey the isperm flag as in nss 3.3
git-svn-id: svn://10.0.0.236/trunk@111467 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-06 21:49:48 +00:00
ian.mcgreer%sun.com
b986c9fa14 only free slot if funrction returns correctly
git-svn-id: svn://10.0.0.236/trunk@111323 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-03 22:49:02 +00:00
ian.mcgreer%sun.com
52cc9b8b36 fix aix bustage
git-svn-id: svn://10.0.0.236/trunk@111309 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-03 20:19:55 +00:00
ian.mcgreer%sun.com
f85961a3de move handling of certificate reference counting into Stan. NSS 3.4 needs to maintain persistent references of both temp and perm certs in order to replicate the old temp database.
git-svn-id: svn://10.0.0.236/trunk@111308 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-03 20:09:30 +00:00
ian.mcgreer%sun.com
41dac395df temp certs live in a trust domain. allows the idiom of "if not temp, try perm" to work in 3.4.
git-svn-id: svn://10.0.0.236/trunk@110983 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-21 19:14:04 +00:00
ian.mcgreer%sun.com
43ce20151b remove unneeded hack, put in a couple of error checks
git-svn-id: svn://10.0.0.236/trunk@110900 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-20 16:50:22 +00:00
ian.mcgreer%sun.com
95f9595544 implement local store of objects for crypto context
git-svn-id: svn://10.0.0.236/trunk@110461 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-14 17:32:23 +00:00
relyea%netscape.com
dd1d27c432 Clean up compilier warnings on Solaris and Linux, most particularly:
1) Implicit declaration of function.
2) Possibly unitialized variables.

These warnings have indicated some real problems in the code, so many changes
are not just to silence the warnings, but to fix the problems. Others were
inocuous, but the warnings were silenced to reduce the noise.


git-svn-id: svn://10.0.0.236/trunk@109938 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-07 01:36:25 +00:00
ian.mcgreer%sun.com
1eea1add0d get modification of trust on builtins certs to work by storing the modified trust on the softoken. implement merging of multiple trust instances.
git-svn-id: svn://10.0.0.236/trunk@109899 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-06 23:43:14 +00:00
ian.mcgreer%sun.com
233b7897cf land changes for handling temporary and cached certs in 3.4
* separate trust object from cert object
* move handling of cryptoki objects into libdev
* implement digest in libdev (for trust object indexing)
* fixes in cache implementation; connect cache to 3.4 certs
* implement CERT_NewTempCertificate via crypto context


git-svn-id: svn://10.0.0.236/trunk@109138 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-28 16:23:51 +00:00
relyea%netscape.com
e31243d81f changes for PSM to compile against NSS shared libraries.
Move SSL and S/MIME to the new common MAPFILE usage


git-svn-id: svn://10.0.0.236/trunk@108708 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-21 18:00:28 +00:00
relyea%netscape.com
32ce05f926 More PSM fixes:
clean up of the escape adding string code.
   Code to keep cert->trust in sync with nscert->trust in various situations.
   Code to allow old version of built-ins to continue to work.
   Implement TrustDomain_TraverseCertificates so that PK11_ListCerts will work.


git-svn-id: svn://10.0.0.236/trunk@108596 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-20 18:28:49 +00:00
relyea%netscape.com
d6a02fdc86 NSS 3.4 integration changes.
1) 3.4 needs to bump the version numbers up by one on secmod.db from NSS 3.3
   2) Need to add escapes to the configdirectory. (should add them to other parameters as well.
   3) put exported files back into the correct headers.
   4) Add _BEGIN/_END protos where appropriate.


git-svn-id: svn://10.0.0.236/trunk@108481 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-19 19:04:59 +00:00
ian.mcgreer%sun.com
1f69c02407 changes to get fips working
git-svn-id: svn://10.0.0.236/trunk@107709 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-09 00:36:12 +00:00
ian.mcgreer%sun.com
c63b98c7eb get signtool working
git-svn-id: svn://10.0.0.236/trunk@107688 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-08 21:23:35 +00:00
ian.mcgreer%sun.com
90f3968ca4 a plethora of changes for handling S/MIME certs
git-svn-id: svn://10.0.0.236/trunk@107685 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-08 20:46:11 +00:00
relyea%netscape.com
8e5904ce24 Fixes to make pkcs12 work correctly:
1) Make pkcs12 pbe function.
   2) add code to allow setting and getting of the key nickname attribute.


git-svn-id: svn://10.0.0.236/trunk@107656 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-08 05:39:56 +00:00