39 Commits

Author SHA1 Message Date
ian.mcgreer%sun.com
e837eb40ac bug 129709, incorrect free of cert->nickname
r=wtc


git-svn-id: svn://10.0.0.236/trunk@116562 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-14 17:42:02 +00:00
ian.mcgreer%sun.com
8e15d46893 bug 129298, handle different nicknames across tokens
r=relyea/a=wtc


git-svn-id: svn://10.0.0.236/trunk@116093 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-07 22:08:00 +00:00
ian.mcgreer%sun.com
93335b6c5a bug 129370, temp cert trusts and S/MIME profiles may cause crashes
r/a=wtc


git-svn-id: svn://10.0.0.236/trunk@116072 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-07 20:42:40 +00:00
wtc%netscape.com
3995ddd6d7 Bugzilla bug 128915: the first part of the previous change is not
necessary, so replace it with an assertion.  r=mcgreer.


git-svn-id: svn://10.0.0.236/trunk@115825 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-05 15:49:33 +00:00
ian.mcgreer%sun.com
a9a015ddaf bug 128915, prevent crash on empty S/MIME profiles
git-svn-id: svn://10.0.0.236/trunk@115752 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-04 23:19:20 +00:00
wtc%netscape.com
e77f26b222 Bugzilla bug 122261: removed an assertion on bad input. Bad input should
be reported by returning a failure status.  Thanks to erl@voxi.com
(Erland Lewin) for the bug report.  r=relyea,kaie.


git-svn-id: svn://10.0.0.236/trunk@115644 18797224-902f-48f8-a5cc-f745e15eee43
2002-03-02 15:31:25 +00:00
ian.mcgreer%sun.com
ba654ff84f bug 125796, make sure all CERTCertificates are destroyed as such, and that cache collisions when traversing are handled correctly (by destroying extra reference)
git-svn-id: svn://10.0.0.236/trunk@115371 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-26 16:21:48 +00:00
relyea%netscape.com
c1bf43920f Implement SEC_NicknameConflicts().
git-svn-id: svn://10.0.0.236/trunk@114564 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-15 01:57:08 +00:00
ian.mcgreer%sun.com
0fd707f56a NSSCryptoContext_ImportCertificate cannot inform the caller that the cert already exists as a temp cert, is is necessary to work around this in CERT_NewTempCertificate by doing a lookup on the cert after it was imported.
r=relyea


git-svn-id: svn://10.0.0.236/trunk@114198 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-11 22:12:01 +00:00
ian.mcgreer%sun.com
0c1df9e9f5 This is a revision of the patch shown in bug 122907. It should fix the leakage seen with client auth. It is needed either way, as NSS 3.3 always checked for pre-existing temp certs before creating a new one.
git-svn-id: svn://10.0.0.236/trunk@113901 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-07 14:58:05 +00:00
wtc%netscape.com
920a4207ed Bugzilla bug 119376: initialize a local variable to eliminate a compiler
warning.


git-svn-id: svn://10.0.0.236/trunk@113860 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-07 01:57:48 +00:00
ian.mcgreer%sun.com
3e0d2561a3 plug leak found doing client auth, move freeing of cert's slot down a level in case the cert was not made external
git-svn-id: svn://10.0.0.236/trunk@113640 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-04 23:04:11 +00:00
ian.mcgreer%sun.com
0240bece7f fix leak reported in bug 123081 by avoiding allocation for time variable
git-svn-id: svn://10.0.0.236/trunk@113633 18797224-902f-48f8-a5cc-f745e15eee43
2002-02-04 22:34:22 +00:00
ian.mcgreer%sun.com
f0c3d0a6e5 couple of fixes
git-svn-id: svn://10.0.0.236/trunk@113323 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-31 17:28:49 +00:00
relyea%netscape.com
517e6d30a2 Fix 2 memory leaks and a UMR.
(keyhand needs to be initialized before we start xor hashing)
Free item and time elements which are transparently allocated for us.


git-svn-id: svn://10.0.0.236/trunk@112916 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-26 00:16:03 +00:00
ian.mcgreer%sun.com
cf10eb186e implement istemp and isperm in case clients depend on it, make sure certs own a reference to their slot and then free it
git-svn-id: svn://10.0.0.236/trunk@112596 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-24 00:58:02 +00:00
ian.mcgreer%sun.com
71e89f46e5 fix for bug 120824; functions which collect certs based on subject need to examine *both* the temp and perm stores
git-svn-id: svn://10.0.0.236/trunk@112528 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-22 21:56:19 +00:00
ian.mcgreer%sun.com
f07c00bdc9 more backwards compatibility fixes
* always send DER of serial number to PKCS#11 queries
* in softoken, construct key for certificate using decoded serial number with (possibly) a leading zero, for compatibility with version 7 db
* in softoken, decode serial number *without* removing leading zero for searches


git-svn-id: svn://10.0.0.236/trunk@112364 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-17 00:20:53 +00:00
ian.mcgreer%sun.com
f4ff6b016e PKCS#11 needs to receive the serial number DER-encoded
git-svn-id: svn://10.0.0.236/trunk@112117 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-14 23:19:17 +00:00
ian.mcgreer%sun.com
ab311ba5fb move free of CERTCertificate's arena below the NSSCertificate. needed for the case when an NSSCertificate is freed without ever releasing a CERTCertificate.
git-svn-id: svn://10.0.0.236/trunk@111576 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-08 18:51:18 +00:00
ian.mcgreer%sun.com
dc6c6834e3 PSM fixes
* implement CERT_AddTempCertToPerm in 3.4
* update object instance lists when needed
* correctly check and allocate trust when changing it


git-svn-id: svn://10.0.0.236/trunk@111495 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-07 16:45:26 +00:00
ian.mcgreer%sun.com
7432d9b145 obey the isperm flag as in nss 3.3
git-svn-id: svn://10.0.0.236/trunk@111467 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-06 21:49:48 +00:00
ian.mcgreer%sun.com
b986c9fa14 only free slot if funrction returns correctly
git-svn-id: svn://10.0.0.236/trunk@111323 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-03 22:49:02 +00:00
ian.mcgreer%sun.com
f85961a3de move handling of certificate reference counting into Stan. NSS 3.4 needs to maintain persistent references of both temp and perm certs in order to replicate the old temp database.
git-svn-id: svn://10.0.0.236/trunk@111308 18797224-902f-48f8-a5cc-f745e15eee43
2002-01-03 20:09:30 +00:00
ian.mcgreer%sun.com
41dac395df temp certs live in a trust domain. allows the idiom of "if not temp, try perm" to work in 3.4.
git-svn-id: svn://10.0.0.236/trunk@110983 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-21 19:14:04 +00:00
ian.mcgreer%sun.com
43ce20151b remove unneeded hack, put in a couple of error checks
git-svn-id: svn://10.0.0.236/trunk@110900 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-20 16:50:22 +00:00
ian.mcgreer%sun.com
95f9595544 implement local store of objects for crypto context
git-svn-id: svn://10.0.0.236/trunk@110461 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-14 17:32:23 +00:00
relyea%netscape.com
dd1d27c432 Clean up compilier warnings on Solaris and Linux, most particularly:
1) Implicit declaration of function.
2) Possibly unitialized variables.

These warnings have indicated some real problems in the code, so many changes
are not just to silence the warnings, but to fix the problems. Others were
inocuous, but the warnings were silenced to reduce the noise.


git-svn-id: svn://10.0.0.236/trunk@109938 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-07 01:36:25 +00:00
ian.mcgreer%sun.com
1eea1add0d get modification of trust on builtins certs to work by storing the modified trust on the softoken. implement merging of multiple trust instances.
git-svn-id: svn://10.0.0.236/trunk@109899 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-06 23:43:14 +00:00
ian.mcgreer%sun.com
233b7897cf land changes for handling temporary and cached certs in 3.4
* separate trust object from cert object
* move handling of cryptoki objects into libdev
* implement digest in libdev (for trust object indexing)
* fixes in cache implementation; connect cache to 3.4 certs
* implement CERT_NewTempCertificate via crypto context


git-svn-id: svn://10.0.0.236/trunk@109138 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-28 16:23:51 +00:00
relyea%netscape.com
e31243d81f changes for PSM to compile against NSS shared libraries.
Move SSL and S/MIME to the new common MAPFILE usage


git-svn-id: svn://10.0.0.236/trunk@108708 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-21 18:00:28 +00:00
ian.mcgreer%sun.com
1f69c02407 changes to get fips working
git-svn-id: svn://10.0.0.236/trunk@107709 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-09 00:36:12 +00:00
ian.mcgreer%sun.com
c63b98c7eb get signtool working
git-svn-id: svn://10.0.0.236/trunk@107688 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-08 21:23:35 +00:00
ian.mcgreer%sun.com
90f3968ca4 a plethora of changes for handling S/MIME certs
git-svn-id: svn://10.0.0.236/trunk@107685 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-08 20:46:11 +00:00
relyea%netscape.com
8e5904ce24 Fixes to make pkcs12 work correctly:
1) Make pkcs12 pbe function.
   2) add code to allow setting and getting of the key nickname attribute.


git-svn-id: svn://10.0.0.236/trunk@107656 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-08 05:39:56 +00:00
relyea%netscape.com
162c530b16 Land BOB_WORK_BRANCH unto the tip.
remove lots of depricated files.
move some files to appropriate directories (pcertdb *_rand
associated headers to soft token, for instance)
rename several stan files which had the same name as other nss files.
remove depricated functions.


git-svn-id: svn://10.0.0.236/trunk@107628 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-08 00:15:51 +00:00
ian.mcgreer%sun.com
6c8bd66a32 more trust handling stuff
git-svn-id: svn://10.0.0.236/trunk@107473 18797224-902f-48f8-a5cc-f745e15eee43
2001-11-06 20:16:19 +00:00
ian.mcgreer%sun.com
244e76bc39 fix possible NULL deref
git-svn-id: svn://10.0.0.236/trunk@105788 18797224-902f-48f8-a5cc-f745e15eee43
2001-10-19 20:04:58 +00:00
ian.mcgreer%sun.com
ef6a1afb48 prepare certdb for removal of pcertdb.c; reimplement functions using Stan
git-svn-id: svn://10.0.0.236/trunk@105780 18797224-902f-48f8-a5cc-f745e15eee43
2001-10-19 18:05:38 +00:00