summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* back out FIPS changesRobert Relyea2015-09-0458-5709/+3694
|
* Backing out FIPS changeRobert Relyea2015-09-041-1/+1
|
* Backout out FIPS checkinRobert Relyea2015-09-041-2/+0
|
* Backout out fips checkinRobert Relyea2015-09-043-0/+14
|
* Backed out changeset 14e10bf5010cRobert Relyea2015-09-041-1/+1
|
* Include mpi even if we aren't using hw gcmRobert Relyea2015-09-041-1/+1
|
* Sigh shot in the dark: remove the pragma even though it's completely inside aRobert Relyea2015-09-043-14/+0
| | | | bunch of ifdefs. This is targetting the sunos-x32 bit machine
* Fix PR_STATIC_ASSERT compile errors in Windows.Robert Relyea2015-09-041-0/+2
|
* Fix part of the Win64 failures (MP_32_BIT_MAX should be MP_32BIT_MAX).Robert Relyea2015-09-041-1/+1
|
* Make sure NSS_NO_INIT_SUPPORT is in lg as well as softoken and freebl.Robert Relyea2015-09-044-10/+25
| | | | If NSS_NO_INIT_SUPPORT is set, don't even try to enable on dll load constructor.
* Turn on NSS_NO_INIT_SUPPORT for everythign except Linux.Robert Relyea2015-09-032-2/+7
| | | | | Do it in both freebl and softoken. Should fix the last of the tinderbox issues.
* Turn off dll load init on solaris and macRobert Relyea2015-09-031-0/+2
|
* Bug 1181814 - Fix include guards. r=mtEKR2015-09-031-0/+5
|
* Bug 1181814 - Fix compile-time errors introduced by FIPS landing. r=mtEKR2015-09-032-7/+7
|
* Bug 1199533 - Add support for CircleCI. r=mtEKR2015-09-031-0/+18
|
* Pick up FIPS-140 certification work.Robert Relyea2015-08-3158-3694/+5699
| | | | | | | | | | | This consists of the following: 1)Move FIPS integrity and post tests to dll load time. 2) Extra data clearing of CPS, change to the prime check requirements. 3) Allow FIPS level 1. This is detected by whether or not there is a password on the database. 4) Update fipstest to handle new tests and the latest formats used by NIST. Also make running of the tests automated. bob
* Bug 1117022: Declare variables at the beginning of a block inWan-Teh Chang2015-08-301-4/+6
| | | | ssl3_ComputeHandshakeHashes. r=ekr.
* Bug 1117022: Fix comment typos. Move code around.Wan-Teh Chang2015-08-281-14/+10
| | | | | | | Move the PMS key length check earlier, to match the "classic" master secret derivation code. Remove a redundant PMS key length check. r=mt.
* Bug 1199494. Trap failures of subtests. r=mtEKR2015-08-281-4/+8
|
* Bug 1199787 - Adding .gitignore file, r=ekrMartin Thomson2015-08-281-0/+5
|
* Bug 1182667 - Declare at the top of the block, r=wtcMartin Thomson2015-08-251-1/+3
|
* Bug 1199467. Temporarily disable NSS_STRICT_SHUTDOWN for SSL gtests. r=mtEKR2015-08-271-0/+3
|
* Bug 1199349. Fix slot leak in ssl3_HandleRSAClientKeyExchange. r=mtEKR2015-08-271-0/+6
|
* Backed out changeset c57a02b3b917 because of hg error.EKR2015-08-271-1/+0
|
* Bug 1199349. Fix slot leak in ssl3_HandleRSAClientKeyExchange. r=mtEKR2015-08-271-0/+1
|
* Bug 1182667: Check the return value of fgets() in GetSubjectFromUser().Wan-Teh Chang2015-08-261-7/+24
| | | | r=mt.
* Bug 1182667: Check the return value of fgets() in SEC_GetPassword().Wan-Teh Chang2015-08-261-2/+4
| | | | r=mt.
* Bug 1182667: Fix strict-aliasing violations in InitCache() andWan-Teh Chang2015-08-261-36/+52
| | | | SSL_InheritMPServerSIDCacheInstance(). r=mt.
* Bug 1182667: Check the return value of fread() in get_serial_number().Wan-Teh Chang2015-08-261-2/+2
| | | | r=mt.
* Bug 1182667: Fix a "variable may be used uninitialized" warning inWan-Teh Chang2015-08-261-1/+1
| | | | the main() function. r=mt.
* Bug 1190248: Just initialize the |sign| field of |part| in s_mp_div().Wan-Teh Chang2015-08-251-2/+1
| | | | r=rrelyea.
* Bug 1185033: Free the arena rather than destroying theDavid Keeler2015-08-251-2/+6
| | | | SECKEYPrivateKeyInfo if ASN.1 decoding fails. r=wtc,rrelyea
* Bug 1192020: Make sure the string is null terminated on return fromWan-Teh Chang2015-08-251-4/+6
| | | | nssutil_DupnCat(). r=rrelyea.
* Bug 1182667: Fix "ignoring return value of ‘write’" compiler warnings.Wan-Teh Chang2015-08-251-6/+6
| | | | r=mt.
* Bug 1117022: Fix a "variable set but not used" compiler warning inWan-Teh Chang2015-08-251-0/+4
| | | | NSC_DeriveKey. r=rbarnes,rrelyea.
* Bug 1117022 - Implement draft-ietf-tls-session-hash [libssl]. r=mtEKR2015-01-1027-198/+938
|
* Bug 1190248: Delete a space at the end of a line.Wan-Teh Chang2015-08-251-1/+1
|
* Bug 1190248: Compute a guess for the next quotient digit correctly inWan-Teh Chang2015-08-251-7/+19
| | | | s_mp_div. r=rrelyea.
* Bug 1182667: Fix a bug in the gcc >= 4.8 detection code. r=mt.Wan-Teh Chang2015-08-242-2/+2
|
* Bug 1117022 - Implement draft-ietf-tls-session-hash [PKCS#11 unit test] r=mtRichard Barnes2015-08-242-0/+254
|
* Bug 1117022 - Implement draft-ietf-tls-session-hash [PKCS#11 part] r=rrelyeaRichard Barnes2015-08-244-7/+141
|
* Bug 1182667: Fix two typecasts. Explicitly cast void * toWan-Teh Chang2015-08-232-2/+2
| | | | | unsigned char * (even though it is not required in C). Remove an unnecessary cast to char *. r=mt.
* Bug 1182667: Define PRNG_MAX_ADDITIONAL_BYTES as a macro to avoid theWan-Teh Chang2015-08-221-1/+1
| | | | | | | | | | | | unused variable warning in some 32-bit builds. Here is the compiler warning generated by clang on Mac OS X: drbg.c:27:22: error: unused variable 'PRNG_MAX_ADDITIONAL_BYTES' [-Werror,-Wunused-const-variable] static const PRInt64 PRNG_MAX_ADDITIONAL_BYTES = LL_INIT(0x1, 0x0); ^ TBR=mt,rrelyea
* Bug 1182667: Remove the statement that assigns an enum value (int) toWan-Teh Chang2015-08-221-1/+0
| | | | | | | | | | | | | | | | | | the |data| member (unsigned char *) of a SECItem. This statement causes a compiler warning. It actually has no effect because the pkix_pl_LdapDefaultClient_VerifyBindResponse call overwrites the |msg| structure when it returns rv=SECSuccess, and we only inspect |msg| when rv == SECSuccess. Here is the compiler warning generated by clang on Mac OS X: pkix_pl_ldapdefaultclient.c:365:59: error: incompatible integer to pointer conversion assigning to 'unsigned char *' from 'int' [-Werror,-Wint-conversion] msg.protocolOp.op.bindResponseMsg.resultCode.data = OTHER; ^ ~~~~~ TBR=mt
* Bug 1182667 - Removing warnings in bypass mode, r=mtKai Engert2015-08-211-3/+9
|
* Bug 1182667 - Disabling -Werror for old versions of gccMartin Thomson2015-08-212-9/+13
|
* Bug 1182667 - Suppressing uninitialized variable warningsMartin Thomson2015-08-202-2/+3
|
* Bug 1182667 - Initializing variableMartin Thomson2015-08-201-1/+1
|
* Bug 1182667 - Initializing variablesMartin Thomson2015-08-202-3/+5
|
* Bug 1182667 - Marking return values unusedMartin Thomson2015-08-201-3/+3
|