summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* close NSS_3_14_4_RELEASE_BRANCHNSS_3_14_4_RELEASE_BRANCHFranziskus Kiefer2017-09-290-0/+0
|
* Added tag NSS_3_14_4_RTM for changeset 0e83ea9f0c9dKai Engert2013-10-220-0/+0
|
* Added tag NSS_3_14_4_RC0 for changeset c22f83676278NSS_3_14_4_RTMKai Engert2013-10-220-0/+0
|
* Set version numbers to 3.14.4 releaseNSS_3_14_4_RC0Kai Engert2013-10-223-6/+6
|
* Bug 832942: work around an ARMv6 code generation bug in gcc 4.6. r=wtcCamilo Viecco2013-10-221-1/+12
|
* Bug 863947: When using libpkix with both explicit anchors and user/PKCS#11 ↵Ryan Sleevi2013-10-223-17/+60
| | | | trust settings, correctly handle cached trust anchors. r=rrelyea,wtc
* Bug 894370: avoid uninitialised data warning in the event of a decryption ↵Adam Langley2013-10-221-13/+14
| | | | failure. r=sleevi,wtc
* Creating a NSS 3.14.4 release branch based on NSS_3_14_3_RTMKai Engert2013-10-220-0/+0
|
* Bug 822365: Document the <Hash>_EndRaw functions. Fix a typo in the commentNSS_3_14_3_RTMNSS_3_14_3_RC0wtc%google.com2013-02-141-4/+40
| | | | for SHA1_EndRaw (16 -> 20). r=agl.
* prepare version numbers for 3.14.3 RTMkaie%kuix.de2013-02-143-6/+6
|
* Bug 840714 - certutil -a does not produce ASCII output, r=bsmithemaldona%redhat.com2013-02-131-1/+1
|
* Bug 822365: Document the constant-time MAC mechanisms. The patch iswtc%google.com2013-02-121-1/+23
| | | | contributed by Adam Langley <agl@chromium.org>. r=wtc.
* Bug 822365: change the include guard macro to match the file name.wtc%google.com2013-02-111-2/+2
|
* Bug 839109 - Fix TLS version in NSS tests, patch by Wan-Teh Chang, r=kaieNSS_3_14_3_BETA1kaie%kuix.de2013-02-071-1/+1
|
* Bug 822365: Rename the hashAlg field of CK_NSS_MAC_CONSTANT_TIME_PARAMS towtc%google.com2013-02-073-13/+23
| | | | | | macAlg because it is a PKCS #11 MAC mechanism. r=rrelyea. Modified Files: lib/softoken/sftkhmac.c lib/ssl/ssl3con.c lib/util/pkcs11n.h
* Bug 822365: Remove a redundant null pointer check in thewtc%google.com2013-02-071-2/+0
| | | | CKM_NSS_HMAC_CONSTANT_TIME case in NSC_SignInit. r=rrelyea.
* Bug 822365: Fix a typo ("my" -> "may"). r=rrelyea.wtc%google.com2013-02-071-2/+2
|
* Bug 822365: PKCS #11 naming convention and NSS coding style fixes for thewtc%google.com2013-02-068-93/+134
| | | | | | | | constant-time CBC decoding code. r=rrelyea. Modified Files: lib/freebl/hmacct.c lib/freebl/loader.c lib/freebl/md5.c lib/softoken/pkcs11.c lib/softoken/pkcs11c.c lib/softoken/sftkhmac.c lib/ssl/ssl3con.c lib/util/pkcs11n.h
* Bug 822365, Fix ppc64 endianness bug, patch by wtc, r=kaiekaie%kuix.de2013-02-061-8/+8
|
* Bug 822365, Fix compilation error on OSX PowerPC 32bit, TBR=wtckaie%kuix.de2013-02-061-0/+3
|
* Bug 822365: do not shift an unsigned int for more than 32 bits. TBR=aglwtc%google.com2013-02-061-1/+1
|
* Bug 822365: the version for PK11_SignWithSymKey should be NSS_3.14.3.wtc%google.com2013-02-061-1/+1
|
* Bug 822365: Fix the constant-time versions of HMAC-MD5 and SSLv3 MD5 MAC.wtc%google.com2013-02-063-9/+11
| | | | | | | Remove the workaround from ssl3_ComputeRecordMACConstantTime. The patch is contributed by Adam Langley <agl@chromium.org>. r=rrelyea,wtc. Modified Files: lib/freebl/hmacct.c lib/softoken/sftkhmac.c lib/ssl/ssl3con.c
* Bug 822365: SHA512_EndRaw and SHA256_EndRaw need a local variable named t1wtc%google.com2013-02-061-1/+9
| | | | | for the BYTESWAP4 and BYTESWAP8 macros in certain build configurations. TBR=kaie.
* Bug 822365: the SHA_HTONL macro (used by the SHA_STORE_RESULT macro) needswtc%google.com2013-02-051-1/+4
| | | | | a local variable named 'tmp' in some build configurations. Undefine 'tmp' as 'lenB' at the end of SHA1_End. r=kaie.
* Bug 822365: declare variables at the beginning of a block to fix MSVCwtc%google.com2013-02-051-2/+2
| | | | compilation errors. r=kaie.
* Bug 822365: Make CBC decoding constant time. This patch makes the decodingwtc%google.com2013-02-0523-89/+1332
| | | | | | | | | | | | | | | | | | | of SSLv3 and TLS CBC records constant time. Without this, a timing side channel can be used to build a padding oracle and mount Vaudenay's attack. The patch is contributed by Adam Langley <agl@chromium.org>. r=rrelyea,ryan.sleevi. Modified Files: lib/freebl/blapi.h lib/freebl/ldvector.c lib/freebl/loader.c lib/freebl/loader.h lib/freebl/manifest.mn lib/freebl/md5.c lib/freebl/rawhash.c lib/freebl/sha512.c lib/freebl/sha_fast.c lib/freebl/sha_fast.h lib/nss/nss.def lib/pk11wrap/pk11obj.c lib/pk11wrap/pk11pub.h lib/softoken/manifest.mn lib/softoken/pkcs11.c lib/softoken/pkcs11c.c lib/softoken/pkcs11i.h lib/ssl/ssl3con.c lib/util/hasht.h lib/util/pkcs11n.h Added Files: lib/freebl/hmacct.c lib/freebl/hmacct.h lib/softoken/sftkhmac.c
* Bug 158747: Add support for RSA-OAEP to softoken, but do not enable it yet,ryan.sleevi%gmail.com2013-02-055-237/+528
| | | | pending unit tests. r=wtc
* Bug 837799 - Allow building of NSS against older sqlite, r=wtckaie%kuix.de2013-02-041-0/+5
|
* Bug 836562: Use Horner's rule to calculate the elliptic curve polynomial inwtc%google.com2013-02-011-4/+3
| | | | ec_GFp_validate_point. r=agl.
* Setting version to 3.14.3 Betakaie%kuix.de2013-01-313-9/+9
|
* Set version to NSS 3.14.2 RTMNSS_3_14_2_RTMkaie%kuix.de2013-01-313-6/+6
|
* Update/Add license headers.rrelyea%redhat.com2013-01-313-1/+28
|
* Bug 835293: on Linux x86_64, don't use the assembler flag -march=opteronwtc%google.com2013-01-311-1/+1
| | | | | because some of the instructions in intel-gcm.s (such as vmovdqu, vpshufb, vpclmulqdq, vpxor) are not supported on opteron. r=kaie.
* Bug 835486, Provide documentation for NSS tools (both as HTML and Unix-style ↵kaie%kuix.de2013-01-3014-0/+5335
| | | | | | | man-pages format). Documentation has been authored by Deon Lackey and Elio Maldonado. r=kaie for the code related to this checkin and for adding this work-in-progress documentation in general r=emaldona for approving to get this added to NSS
* Bug 805604: use target-specific variable values to add an extra compiler orwtc%google.com2013-01-301-19/+14
| | | | assembler flag to just one source file. r=kaie.
* Bug 805604 and bug 835050: don't use Clang's integrated assembler becauseNSS_3_14_2_BETA3wtc%google.com2013-01-271-0/+8
| | | | | it cannot handle how intel-gcm.s uses the .set directive to refer to registers by symbolic names. r=kaie.
* Bug 373108 Test cases for CTS and GCMrrelyea%redhat.com2013-01-25112-13/+1345
|
* Bug 373108 Fix a double free on the error patch.rrelyea%redhat.com2013-01-251-3/+7
| | | | r=rsleevi
* Bug 833857, fix ocspclnt crash regression, r=wtcNSS_3_14_2_BETA2kaie%kuix.de2013-01-233-7/+15
|
* Bug 833857: Revert the change to ocspResponse_other in rev. 1.9 becausewtc%google.com2013-01-231-2/+2
| | | | | some code in ocspclnt.c (the responseStatusNames array and an assertion) depends on the value of ocspResponse_other. r=kaie.
* Bug 833052: Add three more SHA256 cipher suites to ssltap. r=emaldona.wtc%google.com2013-01-231-0/+3
|
* Bug 629816: Changes to CERT_DecodeCertPackage: remove the support forwtc%google.com2013-01-231-20/+30
| | | | | "netscape wrapped DER cert" and check input length before reading. The patch is written by Bob Relyea <rrelyea@redhat.com>. r=wtc.
* Bug 832005: Fix use of uninitialized variable when sending alert about ↵bsmith%mozilla.com2013-01-181-1/+3
| | | | missing certificate. Patch by mcmanus, r=bsmith
* Bug 578561 - sdb_getTempDir returns NULL, use SQLITE_FCNTL_TEMPFILENAME, ↵kaie%kuix.de2013-01-161-4/+47
| | | | r=rrelyea
* Bug 818275 - Avoid unnecessary allocations in sdb_measureAccess, r=rrelyeakaie%kuix.de2013-01-161-9/+47
|
* Bug 805604 - Efficient AES-GCM implementation that uses Intel's AES and ↵rrelyea%redhat.com2013-01-156-7/+1678
| | | | | | PCLMULQDQ instructions (AES-NI) and the Advanced Vector Extension (AVX) architecture. patch by Shay Gueron, review by rrelyea.
* Bug 820651: Fix comparisons of unsigned variable < 0. r=rrelyea.wtc%google.com2013-01-103-5/+7
| | | | | | Modified Files: lib/freebl/arcfour.c lib/freebl/desblapi.c lib/pk11wrap/pk11merge.c
* Bug 828066: Don't use -I/usr/dt/include -I/usr/openwin/include on Solaris.wtc%google.com2013-01-101-2/+0
| | | | r=rrelyea.
* Bug 772144, add a comment to the bustage fix, requested by relyeakaie%kuix.de2013-01-091-0/+3
|