a30f8581e7da64e80be210142a508d6639e4554a: Bugzilla Bug 298517: when in FIPS mode, impose minimum password length and
wtchang%redhat.com - Fri, 16 Sep 2005 20:37:58 +0000 - rev 6118
Bugzilla Bug 298517: when in FIPS mode, impose minimum password length and quality to ensure a password guessing probability of less than 1 in 10,000,000, and impose a one second delay after failed login attempt to allow at most 60 login attempts per minute. r=relyea,nelsonb. Modified files: fipstokn.c pkcs11.c pkcs11i.h
03b9b6441a49cee64fb378bf5fb673c7fdfe3874: Fix for bug 127960 . Add SSL force handshake APIs which take a timeout . r=nelson
julien.pierre.bugs%sun.com - Fri, 16 Sep 2005 20:33:09 +0000 - rev 6117
Fix for bug 127960 . Add SSL force handshake APIs which take a timeout . r=nelson
9fd5b6f7c239a8d19397e45c8cf8a9ee75474dba: Enable error message detail for PR_Bind failure NSS_LIBPKIX_BRANCH
richard.freedman%sun.com - Fri, 16 Sep 2005 19:05:09 +0000 - rev 6116
Enable error message detail for PR_Bind failure
4228e8f2663d54913e2deff78c77d1874d414756: Reordered decrefs for easier debugging NSS_LIBPKIX_BRANCH
richard.freedman%sun.com - Fri, 16 Sep 2005 18:55:57 +0000 - rev 6115
Reordered decrefs for easier debugging
2aa16da858129008c43d76c33099bc7a680b66eb: Added decref for uchecker, which was not getting freed. NSS_LIBPKIX_BRANCH
richard.freedman%sun.com - Fri, 16 Sep 2005 18:48:55 +0000 - rev 6114
Added decref for uchecker, which was not getting freed.
626fd98cc00c5f6c4306b97736221e2abe6fe745: Bugzilla Bug 288728: handle invalid values of recipient identifier type.
wtchang%redhat.com - Fri, 16 Sep 2005 17:54:31 +0000 - rev 6113
Bugzilla Bug 288728: handle invalid values of recipient identifier type. r=jpierre,relyea.
c9b43566afe1a777592ea739b80e079fef6d09f5: Bugzilla Bug 288728: use a whitelist instead of a blacklist when checking
wtchang%redhat.com - Fri, 16 Sep 2005 17:52:37 +0000 - rev 6112
Bugzilla Bug 288728: use a whitelist instead of a blacklist when checking for invalid values of "type". r=jpierre,relyea.
60841b5cd524509a9ef0da262328445bff62639d: Bugzilla Bug 303508: removed the underscore from the name of the "single"
wtchang%redhat.com - Fri, 16 Sep 2005 17:17:45 +0000 - rev 6111
Bugzilla Bug 303508: removed the underscore from the name of the "single" freebl shared library (freebl_3.dll -> freebl3.dll). Do the recursive child builds without changing directories. This fixed the BUILD_TREE build problem. r=nelsonb,saul.edwards. Modified files: Makefile freebl.def manifest.mn
f841975ff2cdf9cb6f4128b6c199e1b21949a3dd: Bugzilla Bug 303508: enhanced the makefile rule for $(MAPFILE). Added
wtchang%redhat.com - Fri, 16 Sep 2005 17:09:23 +0000 - rev 6110
Bugzilla Bug 303508: enhanced the makefile rule for $(MAPFILE). Added the new variable MAPFILE_SOURCE instead of the hardcoded $(LIBRARY_NAME).def to represent the "source" mapfile, and use $< to refer to the "source" mapfile (prerequisite of the target) in PROCESS_MAP_FILE. r=nelsonb. Modified Files: AIX.mk BSD_OS.mk Darwin.mk FreeBSD.mk HP-UX.mk IRIX.mk Linux.mk Linux2.1.mk Linux2.2.mk Linux2.4.mk Linux2.5.mk Linux2.6.mk NCR3.0.mk NEC4.2.mk NetBSD.mk OS2.mk OSF1.mk OpenUNIX.mk OpenVMS.mk ReliantUNIX.mk SCO_SV3.2.mk SunOS5.mk UNIXWARE2.1.mk WIN16.mk WIN32.mk WINCE.mk rules.mk ruleset.mk
6437f553c55aafb006c4ce3104933a1c2590337f: Removed an unnecessary -L linker flag. r=nelsonb,saul.edwards.
wtchang%redhat.com - Fri, 16 Sep 2005 17:02:49 +0000 - rev 6109
Removed an unnecessary -L linker flag. r=nelsonb,saul.edwards.
707a21d1250a2f5bb075a5b07c4d3525b26bb99d: Bugzilla Bug 303508: code cleanup. r=nelsonb,jpierre.
wtchang%redhat.com - Fri, 16 Sep 2005 16:59:22 +0000 - rev 6108
Bugzilla Bug 303508: code cleanup. r=nelsonb,jpierre.
b2472e30d5322c3245dbb74a1099fd3972e35ba1: Modified import.pl, jdk.mk and release.pl under coreconf and all.pl under
sandeep.konchady%sun.com - Fri, 16 Sep 2005 00:33:23 +0000 - rev 6107
Modified import.pl, jdk.mk and release.pl under coreconf and all.pl under jss test directory for bug #302550. Attached below is the diff of the changes done to these files. Index: coreconf/import.pl =================================================================== RCS file: /cvsroot/mozilla/security/coreconf/import.pl,v retrieving revision 1.2 diff -u -r1.2 import.pl --- coreconf/import.pl 25 Apr 2004 15:02:17 -0000 1.2 +++ coreconf/import.pl 15 Sep 2005 18:37:51 -0000 @@ -46,7 +46,6 @@ #######-- read in variables on command line into %var -$var{ZIP} = "zip"; $var{UNZIP} = "unzip -o"; &parse_argv; Index: coreconf/jdk.mk =================================================================== RCS file: /cvsroot/mozilla/security/coreconf/jdk.mk,v retrieving revision 1.14 diff -u -r1.14 jdk.mk --- coreconf/jdk.mk 25 Apr 2004 15:02:17 -0000 1.14 +++ coreconf/jdk.mk 15 Sep 2005 18:37:52 -0000 @@ -123,14 +123,14 @@ # set [Sun Solaris] platforms ifeq ($(OS_ARCH), SunOS) - JAVA_CLASSES = $(JAVA_HOME)/lib/classes.zip + JAVA_CLASSES = $(JAVA_HOME)/jre/lib/rt.jar ifeq ($(JRE_HOME),) JRE_HOME = $(JAVA_HOME) JRE_CLASSES = $(JAVA_CLASSES) else ifeq ($(JRE_CLASSES),) - JRE_CLASSES = $(JRE_HOME)/lib/classes.zip + JRE_CLASSES = $(JRE_HOME)/lib/rt.jar endif endif @@ -144,9 +144,13 @@ # (3) specify "linker" information ifeq ($(USE_64), 1) - JAVA_CPU = $(shell uname -p)v9 + ifeq ($(CPU_ARCH), x86_64) + JAVA_CPU = amd64 + else + JAVA_CPU := $(shell uname -p)v9 + endif else - JAVA_CPU = $(shell uname -p) + JAVA_CPU := $(shell uname -p) endif ifeq ($(JDK_VERSION), 1.1) @@ -163,8 +167,6 @@ ifneq ($(JDK_VERSION), 1.1) ifeq ($(USE_64), 1) JAVA_LIBS += -L$(JAVA_HOME)/$(JAVA_LIBDIR)/server -else - JAVA_LIBS += -L$(JAVA_HOME)/$(JAVA_LIBDIR)/classic endif JAVA_LIBS += -L$(JAVA_HOME)/$(JAVA_LIBDIR) JAVA_LIBS += -ljvm -ljava @@ -220,14 +222,14 @@ # set [Redhat Linux] platforms ifeq ($(OS_ARCH), Linux) - JAVA_CLASSES = $(JAVA_HOME)/lib/classes.zip + JAVA_CLASSES = $(JAVA_HOME)/jre/lib/rt.jar ifeq ($(JRE_HOME),) JRE_HOME = $(JAVA_HOME) JRE_CLASSES = $(JAVA_CLASSES) else ifeq ($(JRE_CLASSES),) - JRE_CLASSES = $(JRE_HOME)/lib/classes.zip + JRE_CLASSES = $(JRE_HOME)/jre/lib/rt.jar endif endif @@ -241,16 +243,21 @@ # (3) specify "linker" information JAVA_CPU = i386 - + ifeq ($(CPU_ARCH),x86_64) + ifeq ($(USE_64), 1) + JAVA_CPU = amd64 + else + JAVA_CPU = i386 + endif + endif JAVA_LIBDIR = jre/lib/$(JAVA_CPU) JAVA_CLIBS = ifeq ($(JDK_VERSION), 1.4) - JAVA_LIBS += -L$(JAVA_HOME)/$(JAVA_LIBDIR)/server -ljvm - else - JAVA_LIBS += -L$(JAVA_HOME)/$(JAVA_LIBDIR)/classic -ljvm + JAVA_LIBS += -L$(JAVA_HOME)/$(JAVA_LIBDIR)/server -ljvm endif + JAVA_LIBS += -L$(JAVA_HOME)/$(JAVA_LIBDIR) -ljava JAVA_LIBS += $(JAVA_CLIBS) Index: coreconf/release.pl =================================================================== RCS file: /cvsroot/mozilla/security/coreconf/release.pl,v retrieving revision 1.3 diff -u -r1.3 release.pl --- coreconf/release.pl 25 Apr 2004 15:02:17 -0000 1.3 +++ coreconf/release.pl 15 Sep 2005 18:37:52 -0000 @@ -41,7 +41,14 @@ #######-- read in variables on command line into %var -$var{ZIP} = "zip"; +$use_jar = 1; +$ZIP = "$ENV{JAVA_HOME}/bin/jar"; + +if ( $ENV{JAVA_HOME} eq "" ) { + $ZIP = "zip"; + $use_jar = 0; +} + &parse_argv; @@ -56,11 +63,15 @@ ($jardir,$jaropts) = split(/\|/,$jarinfo); - $zipoptions = "-T"; - if ($jaropts =~ /a/) { - if ($var{OS_ARCH} eq 'WINNT') { - $zipoptions .= ' -ll'; - } + if ( $use_jar ) { + $zipoptions = "-cvf"; + } else { + $zipoptions = "-T -r"; + if ($jaropts =~ /a/) { + if ($var{OS_ARCH} eq 'WINNT') { + $zipoptions .= ' -ll'; + } + } } # just in case the directory ends in a /, remove it @@ -117,8 +128,8 @@ } closedir(DIR); - print STDERR "zip $zipoptions -r $jarfile $filelist\n"; - system("zip $zipoptions -r $jarfile $filelist"); + print STDERR "$ZIP $zipoptions $jarfile $filelist\n"; + system("$ZIP $zipoptions $jarfile $filelist"); rmdir("META-INF"); for $i (1 .. $dirdepth) { chdir(".."); Index: jss/org/mozilla/jss/tests/all.pl =================================================================== RCS file: /cvsroot/mozilla/security/jss/org/mozilla/jss/tests/all.pl,v retrieving revision 1.22 diff -u -r1.22 all.pl --- jss/org/mozilla/jss/tests/all.pl 6 Sep 2005 17:57:40 -0000 1.22 +++ jss/org/mozilla/jss/tests/all.pl 15 Sep 2005 18:37:54 -0000 @@ -136,12 +136,26 @@ exit(1); } + # + # Use 64-bit Java on AMD64. + # + $java = "$ENV{JAVA_HOME}/jre/bin/java$exe_suffix"; + my $java_64bit = 0; + if ($osname eq "SunOS") { + if ($ENV{USE_64}) { + my $cpu = `/usr/bin/isainfo -n`; + if ($cpu == "amd64") { + $java = "$ENV{JAVA_HOME}/jre/bin/amd64/java$exe_suffix"; + $java_64bit = 1; + } + } + } (-f $java) or die "'$java' does not exist\n"; $java = $java . $ENV{NATIVE_FLAG}; - if ($ENV{USE_64}) { - $java = $java . " -d64"; + if ($ENV{USE_64} && !$java_64bit) { + $java = $java . " -d64"; } $pwfile = "passwords";
1ee8890b6cf10dff24bf0fd0057398026dbc382a: Limit ConnectContinue retries and make an error message clearer. NSS_LIBPKIX_BRANCH
richard.freedman%sun.com - Wed, 14 Sep 2005 16:42:14 +0000 - rev 6106
Limit ConnectContinue retries and make an error message clearer.
42b2ef65d2f983572d682f4c914a7ea8ebdcc7b2: Supply null strings instead of expected ascii, to avoid date comparisons NSS_LIBPKIX_BRANCH
richard.freedman%sun.com - Wed, 14 Sep 2005 15:34:37 +0000 - rev 6105
Supply null strings instead of expected ascii, to avoid date comparisons
4409b795395026664ce2e7c7cc49fa1ab71d1b10: Plug leaks in SSL bypass code. Add freeit argument to HMAC_Destroy function.
nelsonb%netscape.com - Wed, 14 Sep 2005 04:12:50 +0000 - rev 6104
Plug leaks in SSL bypass code. Add freeit argument to HMAC_Destroy function. Change existing callers to pass this argument. Call HMAC_Destroy from SSL. Bug 305147. r=Julien.Pierre Modified Files: freebl/alghmac.c freebl/alghmac.h freebl/loader.c freebl/loader.h freebl/tlsprfalg.c softoken/lowpbe.c softoken/pkcs11c.c ssl/ssl3con.c
9bfae9146de69dd4fe32d8edfeccf4a72e7db9da: Bugzilla Bug 301554: Clear the 'present' flag if slot fails to refresh.
wtchang%redhat.com - Wed, 14 Sep 2005 01:35:02 +0000 - rev 6103
Bugzilla Bug 301554: Clear the 'present' flag if slot fails to refresh. relyea wrote the patch. r=wtc,nelsonb.
20fb8f1b986f73a083a0b7a4ad5494a95772c906: Bugzilla Bug 301554: Clear the 'Present' flag if slot fails to refresh. NSS_3_10_BRANCH NSS_3_10_2_BETA1
wtchang%redhat.com - Wed, 14 Sep 2005 01:31:33 +0000 - rev 6102
Bugzilla Bug 301554: Clear the 'Present' flag if slot fails to refresh. relyea wrote the patch. r=wtc,nelsonb. Tag: NSS_3_10_BRANCH
c2cc92d3e3922db54b3dd7f608a4626b50ba7a27: Use ${HOSTADDR} for socket bind address. NSS_LIBPKIX_BRANCH
richard.freedman%sun.com - Tue, 13 Sep 2005 20:40:54 +0000 - rev 6101
Use ${HOSTADDR} for socket bind address.
5cf27fcfd6fc514ab6ee6c914e543e8d01b643bd: Bugzilla Bug 274984: declare 'dirsize' as a size_t. Collapsed the NSS_3_10_BRANCH
wtchang%redhat.com - Tue, 13 Sep 2005 18:30:30 +0000 - rev 6100
Bugzilla Bug 274984: declare 'dirsize' as a size_t. Collapsed the declaration and assignment of 'pathname' into one statement. Tag: NSS_3_10_BRANCH
cd815f15f9d414d0af794d9443ca743a39094e2d: Bug 274984: load freebl using absolute pathname to avoid load failure in NSS_3_10_BRANCH
saul.edwards%sun.com - Tue, 13 Sep 2005 08:12:16 +0000 - rev 6099
Bug 274984: load freebl using absolute pathname to avoid load failure in setuid applications. Solaris only. r=wtc, sr=jp
(0) -3000 -1000 -300 -100 -50 -20 +20 +50 +100 +300 +1000 +3000 tip