summaryrefslogtreecommitdiff
path: root/security/nss/lib/certdb
Commit message (Collapse)AuthorAgeFilesLines
* fixup commit for branch 'GECKO181_20080827_RELBRANCH'cvs2hg2008-01-318-123/+145
|
* Fix for bug 217024. add a function for comparing cert validity periods. ↵julien.pierre.bugs%sun.com2005-08-173-30/+22
| | | | r=wtchang
* Fix for 217024 . Address Wan-Teh's concerns about naming and documentation. ↵julien.pierre.bugs%sun.com2005-07-093-20/+27
| | | | Also fix AIX build by removing extraneous comma.
* Fix for bug 217024 . Add a function to compare validity times. r=relyeajulien.pierre.bugs%sun.com2005-07-083-0/+62
|
* Bugzilla Bug 287057: fixed memory leaks in callers of cert_FindExtension.wtchang%redhat.com2005-06-302-1/+6
| | | | | | | | pass NULL as the SECItem* argument if we only want to know if the extension exists but don't need its value. r=jpierre,nelsonb. Modified Files: certdb/certdb.c certdb/genname.c certhigh/certhigh.c certhigh/certhtml.c certhigh/crlv2.c certhigh/ocsp.c
* Fix for 290121. Replace PRIntervalTime with PRTime when checking for the ↵julien.pierre.bugs%sun.com2005-04-172-22/+16
| | | | need to query the token for CRLs. r=nelson
* Fix for 290121 - always fill the CRL cache on first entry, to fix AIX ↵julien.pierre.bugs%sun.com2005-04-131-5/+8
| | | | problem. r=nelson
* Fix for bug 265003: Add CRL generation to crlutil. Reviewed JP+alexei.volkov.bugs%sun.com2005-04-122-5/+13
|
* Remove unused variablejulien.pierre.bugs%sun.com2005-04-021-2/+1
|
* r=nelson Bug=263779neil.williams%sun.com2005-03-092-0/+72
|
* Fix for 285233 - need extra symbols to be exported to support CRL generation. Chjulien.pierre.bugs%sun.com2005-03-081-1/+14
| | | | ecking in for alexei volkov . r=nelson
* Export CERT_SequenceOfCertExtensionTemplate on Windows.nelsonb%netscape.com2005-03-052-1/+3
| | | | | Fix type of "attributes" member of struct CERTCertificateRequestStr. Bug 284200. r=nelson.williams & wtchang.
* Fix crash in CRL sorting callbacks from qsort.julien.pierre.bugs%sun.com2005-03-031-4/+4
|
* Move static functions out of certi.h header file and into crl.c source file, ↵julien.pierre.bugs%sun.com2005-02-253-66/+67
| | | | to remove warnings with gcc
* Fix compiler warnings under Linuxjulien.pierre.bugs%sun.com2005-02-242-19/+16
|
* Add comment for bug 243585julien.pierre.bugs%sun.com2005-02-241-4/+7
|
* Fix compilation on AIXjulien.pierre.bugs%sun.com2005-02-151-1/+1
|
* Fix for 243585 - add the ability to use CRL objects from RAM . r=nelson, ↵julien.pierre.bugs%sun.com2005-02-153-480/+1540
| | | | neil.williams
* Workaround the occasional SSL server cert that has the step-up OID butnelsonb%netscape.com2004-12-021-0/+12
| | | | | not the SSL server OID. Patch by Aaron Spangler <aaron@spangler.ods.org> Bug 231775. r=nelson
* When attempting to find an SMIME profile for a given email address,nelsonb%netscape.com2004-12-021-0/+4
| | | | | | firt ensure that the email address is not NULL and not empty. Bugzilla bug 263596. r=wan-teh. Modified Files: lib/certdb/stanpcertdb.c lib/pk11wrap/pk11nobj.c
* Bugzilla bug 248435: declare the exported functions CERT_DecodeGeneralNamewchang0222%aol.com2004-11-093-9/+9
| | | | | and CERT_EncodeGeneralName in the public header cert.h. r=jpierre. Modified Files: cert.h genname.h xconst.c
* Bug 250687relyea%netscape.com2004-07-211-42/+24
| | | | | | NSS Crashes or leaks Cert references if bad certs are passed up by PKCS #11 modules. r=nelson sr=ian
* Bugzilla bug 249284: removed a duplicate declaration ofwchang0222%aol.com2004-07-071-7/+0
| | | | | CERT_DecodeDERCertificate. r=nelsonb. Thanks to Chris Newman of Sun for the bug report.
* Treat non-repudiation-only certs as valid signature certs.nelsonb%netscape.com2004-07-011-1/+7
| | | | Bug 240456. r=wtc, sr=relyea.
* Correct NSS to use the most specific, not most general CN attribute innelsonb%netscape.com2004-07-011-1/+47
| | | | a cert subject name. Bug 197964. r=wtc.
* Don't crash when CERT_DestroyCertificate is called with a cert with anelsonb%netscape.com2004-06-091-1/+1
| | | | null arena pointer. Bug 245943. r=julien
* bug 180268, reimplement ssl step-up for builtinsian.mcgreer%sun.com2004-05-171-2/+0
|
* Fix for 240361 - crash in CERT_CheckValidTimesjpierre%netscape.com2004-05-112-1/+7
|
* Fix for 202979 . Resolve binary compatibility issue for CERT_ImportCerts . ↵jpierre%netscape.com2004-05-051-1/+1
| | | | r=wtc, jpierre
* Bug 236613: change to MPL/LGPL/GPL tri-license.gerv%gerv.net2004-04-2522-654/+724
|
* Remove code that attempted to compare simple host names in URLs withnelsonb%netscape.com2004-04-081-21/+2
| | | | FQDNs in certificate host names. This was insecure. Bug 234058. r=wtc.
* Bugzilla bug 238565: made the comment match the code. r=nelsonb.wchang0222%aol.com2004-03-271-2/+3
|
* Correct the parsing of certain forms of GeneralName. Bug 233586.nelsonb%netscape.com2004-03-261-5/+7
| | | | r=julien.pierre
* Fix a regression introduced by rev 1.19, after NSS 3.9 was released.nelsonb%netscape.com2004-03-231-1/+2
| | | | r=julien.pierre. bugscape 56484.
* Detect NULL arguments to CERT_DecodeTrustString instead of crashing.nelsonb%netscape.com2004-02-261-0/+8
| | | | Bug 235617. r=wtc.
* Fix for bug 233605 . Check CRL entry extensions after partial decoding. Also ↵jpierre%netscape.com2004-02-111-59/+87
| | | | add some new CRL decoding errors. r=nelsonb
* Fix for 233118 . additional check for CRL signing usage. r=nelsonbjpierre%netscape.com2004-02-1111-119/+161
|\
| * Bugzilla bug 225808: 1. Use a 32-bit integer type for cert->nsCertType sowchang0222%aol.com2004-02-072-2/+5
| | | | | | | | | | | | | | | | that it can be safely passed to PR_AtomicSet on all platforms. Note that we still use an unsigned type to avoid introducing signed/unsigned compiler warnings. 2. Added a (PRInt32 *) cast to eliminate a pre-existing signed/unsigned warning. r=nelsonb. Modified Files: certdb.c certt.h
| * Fix numerous bugs in CERT_FindCertByKeyID. Bug 233019. r=jpierrenelsonb%netscape.com2004-02-041-8/+18
| |
| * Honor key usage extensions, whether they're critical or not.nelsonb%netscape.com2004-02-031-30/+12
| | | | | | | | Bug 232738. r=jpiperre.
| * Export cert functions that decode extensions and traverse decodednelsonb%netscape.com2004-01-288-71/+125
| | | | | | | | extensions. Bug 231881. r= relyea, wtc.
| * Bugzilla bug 232380: deleted CERT_FindExpiredIssuer, which is dead code.wchang0222%aol.com2004-01-281-7/+0
| | | | | | | | | | | | | | In cert_VerifyCertChain, make sure that subjectCert and issuerCert never point to the same cert to prevent from destroying that cert twice. r=jpierre,nelsonb. Modified Files: certdb/cert.h certhigh/certvfy.c
| * Fix crashes that occur when optional policyQualifiers are not present.nelsonb%netscape.com2004-01-231-2/+2
| | | | | | | | Bug 230951. r=kinmoz.
* | fixup commit for tag 'MOZILLA_1_7a_RELEASE'MOZILLA_1_7a_RELEASEcvs2hg2004-02-111-2/+2
|/
* When a name attribute's value exceeds the maximum allowed length, displaynelsonb%netscape.com2004-01-221-5/+13
| | | | a truncated version of it, followed by ellipsis. Bug 220855. r=wtc
* Correct NSS's key usage tests for certs with non-RSA public keys.nelsonb%netscape.com2004-01-221-17/+28
| | | | Bug 221638. r=relyea.
* Detect duplicate issuer name and serial number between two temp certs.nelsonb%netscape.com2004-01-221-5/+7
| | | | Bug 230996. r=ian, relyea.
* Fix name constraints code to pass NIST PKITS test 38. r=wtc. Bug 231223.nelsonb%netscape.com2004-01-221-12/+27
|
* Detect absent isCA flags in basic constraints. Detect and reject negativenelsonb%netscape.com2004-01-161-5/+11
| | | | | or too large positive path length constraints in basic constraints. Bug 221644. r=jpierre.
* Fix template for Cert policy extensions. Bug 230951, r=jpierrenelsonb%netscape.com2004-01-161-1/+1
|