d3f188e356fb43f86c612fb4539cdf9d99b12b0e: 391434 - avoid multiple encoding/decoding of PKIX_PL_OID to and from ascii string. r=nelson.
alexei.volkov.bugs%sun.com - Wed, 17 Aug 2011 05:01:56 +0000 - rev 10088
391434 - avoid multiple encoding/decoding of PKIX_PL_OID to and from ascii string. r=nelson.
663c8f8733c2d88990db79401ed9f8ca5ddcfbe0: Bug 403563: implement the TLS session ticket extension (rfc4507bis). The
wtc%google.com - Wed, 17 Aug 2011 05:01:55 +0000 - rev 10087
Bug 403563: implement the TLS session ticket extension (rfc4507bis). The patch is contributed by Nagendra Modadugu <ngm+mozilla@google.com>. A small portion (PKCS #11 code and tests) was written by Wan-Teh Chang <wtc@google.com>. r=nelson,wtc Modified Files: cmd/lib/SSLerrs.h cmd/selfserv/selfserv.c cmd/strsclnt/strsclnt.c cmd/tstclnt/tstclnt.c lib/ssl/manifest.mn lib/ssl/ssl.h lib/ssl/ssl3con.c lib/ssl/ssl3ecc.c lib/ssl/ssl3prot.h lib/ssl/sslerr.h lib/ssl/sslimpl.h lib/ssl/sslnonce.c lib/ssl/sslsnce.c lib/ssl/sslsock.c lib/ssl/sslt.h tests/ssl/sslstress.txt Added Files: lib/ssl/ssl3ext.c
e3d0e9489874496c8a9f54e7dcb63b09dc92a849: Bug 453364: Added three new error codes that are equivalent to the PKCS #11
wtc%google.com - Wed, 17 Aug 2011 05:01:54 +0000 - rev 10086
Bug 453364: Added three new error codes that are equivalent to the PKCS #11 error codes CKR_GENERAL_ERROR, CKR_FUNCTION_FAILED, and CKR_DEVICE_ERROR. r=nelson. Modified Files: cmd/lib/SECerrs.h lib/util/secerr.h
357f3caff5f7813793451773046dfde9ffbdaa98: 417024 - Convert libpkix error code into nss error code. r=nelson
alexei.volkov.bugs%sun.com - Wed, 17 Aug 2011 05:01:53 +0000 - rev 10085
417024 - Convert libpkix error code into nss error code. r=nelson
3d4ebf96dd70f0392e46a23c1fb90f66d16e8a56: Bug 401970 - Correct NSS error string for SEC_ERROR_OCSP_RESPONDER_CERT_INVALID
nelson%bolyard.com - Wed, 17 Aug 2011 05:01:52 +0000 - rev 10084
Bug 401970 - Correct NSS error string for SEC_ERROR_OCSP_RESPONDER_CERT_INVALID r=kengert, alexei.volkov, julien.pierre
3f5672004a870287093919259458975c654bad86: 338986 - Unauthorized OCSP response error from user's default OCSP responder. r=nelson
alexei.volkov.bugs%sun.com - Wed, 17 Aug 2011 05:01:51 +0000 - rev 10083
338986 - Unauthorized OCSP response error from user's default OCSP responder. r=nelson
fcdb8a6156911fb275b8c786d9b37ea27acccc7f: Bug 371024, Typos in NSS' error strings
kaie%kuix.de - Wed, 17 Aug 2011 05:01:50 +0000 - rev 10082
Bug 371024, Typos in NSS' error strings r=rrelyea, r=nelson
541e3bad0f83b709fae6b6491e193ba8828d0973: Bug 359280, fix typo in mozilla/security/nss/cmd/lib/SSLerrs.h
kaie%kuix.de - Wed, 17 Aug 2011 05:01:49 +0000 - rev 10081
Bug 359280, fix typo in mozilla/security/nss/cmd/lib/SSLerrs.h r=nelson
bf46e6821bbcf0980970dfd306dddfb637c86db7: Define alerts and error codes for TLS Hello extensions. Bug 226271.
nelson%bolyard.com - Wed, 17 Aug 2011 05:01:48 +0000 - rev 10080
Define alerts and error codes for TLS Hello extensions. Bug 226271. r=julien.pierre
88a34585ef850f62fab46d3cc4bd617aa85285f5: Do not crash if Server SID cache is uninitialized. Bug 237724 r=Julien
nelsonb%netscape.com - Wed, 17 Aug 2011 05:01:47 +0000 - rev 10079
Do not crash if Server SID cache is uninitialized. Bug 237724 r=Julien Instead, if SSL_NO_CACHE is not set, return an error code.
db2747113a01ba3ddf40f216e2c6fe5ce53849d2: Fix for bug 337789 . PK11_FindKeyByAnyCert doe snot work if softoken is in FIPS140-2 mode. r=wtchang, rrelyea, nelson
julien.pierre.bugs%sun.com - Wed, 17 Aug 2011 05:01:46 +0000 - rev 10078
Fix for bug 337789 . PK11_FindKeyByAnyCert doe snot work if softoken is in FIPS140-2 mode. r=wtchang, rrelyea, nelson
6afa08dbb4594019cdfdfb899a1171269d2710cb: Bugzilla Bug 289819: fixed a typo in the SEC_ERROR_EXTRA_INPUT error
wtchang%redhat.com - Wed, 17 Aug 2011 05:01:45 +0000 - rev 10077
Bugzilla Bug 289819: fixed a typo in the SEC_ERROR_EXTRA_INPUT error message. r=nelsonb.
e4b4d0480e59e012ab5a13ac29c86a0a05f1c948: Error strings for new error codes.
relyea%netscape.com - Wed, 17 Aug 2011 05:01:44 +0000 - rev 10076
Error strings for new error codes.
3cf9d2e7b4d93c15c77ba5978f0ac9776026e435: Bug 236613: change to MPL/LGPL/GPL tri-license.
gerv%gerv.net - Wed, 17 Aug 2011 05:01:43 +0000 - rev 10075
Bug 236613: change to MPL/LGPL/GPL tri-license.
808e93ff62c4c4d187009871769e6a551e95a9e2: Fix for bug 233605 . Check CRL entry extensions after partial decoding. Also add some new CRL decoding errors. r=nelsonb
jpierre%netscape.com - Wed, 17 Aug 2011 05:01:42 +0000 - rev 10074
Fix for bug 233605 . Check CRL entry extensions after partial decoding. Also add some new CRL decoding errors. r=nelsonb
cc6c7191531746118ef5de13231a714fdfa83dde: Fix for bug 94413 - OCSP needs more fine tuned error messages. r=wtc
jpierre%netscape.com - Wed, 17 Aug 2011 05:01:41 +0000 - rev 10073
Fix for bug 94413 - OCSP needs more fine tuned error messages. r=wtc
e0495b6ce02ffc4ba2193c9f8ca2b2b099940ab1: Add support for Elliptic Curve Cryptography. Bug 195135.
nelsonb%netscape.com - Wed, 17 Aug 2011 05:01:40 +0000 - rev 10072
Add support for Elliptic Curve Cryptography. Bug 195135. Modified Files: cmd/lib/SECerrs.h cmd/selfserv/selfserv.c cmd/tstclnt/tstclnt.c lib/cryptohi/keyhi.h lib/cryptohi/keythi.h lib/cryptohi/seckey.c lib/cryptohi/secvfy.c lib/freebl/Makefile lib/freebl/blapi.h lib/freebl/blapit.h lib/freebl/ldvector.c lib/freebl/loader.c lib/freebl/loader.h lib/freebl/manifest.mn lib/nss/nss.def lib/pk11wrap/pk11skey.c lib/pk11wrap/pk11slot.c lib/softoken/lowkeyti.h lib/softoken/manifest.mn lib/softoken/pkcs11.c lib/softoken/pkcs11c.c lib/softoken/pkcs11t.h lib/ssl/ssl3con.c lib/ssl/ssl3prot.h lib/ssl/sslcon.c lib/ssl/sslenum.c lib/ssl/sslimpl.h lib/ssl/sslinfo.c lib/ssl/sslproto.h lib/ssl/sslsecur.c lib/ssl/sslsock.c lib/ssl/sslt.h lib/util/secerr.h lib/util/secoid.c lib/util/secoidt.h Added Files: lib/freebl/GFp_ecl.c lib/freebl/GFp_ecl.h lib/freebl/ec.c lib/freebl/ec.h lib/softoken/ecdecode.c
82c6f1852054655e2c1f16cf4ea0de29fcfec776: bug 172247, don't allow import of duplicate issuer/serial certs
ian.mcgreer%sun.com - Wed, 17 Aug 2011 05:01:39 +0000 - rev 10071
bug 172247, don't allow import of duplicate issuer/serial certs
58be288c61e48841d97212a7a7de7ae2a26caa14: Make grammar, punctuation, capitalization, and content changes suggested by
relyea%netscape.com - Wed, 17 Aug 2011 05:01:38 +0000 - rev 10070
Make grammar, punctuation, capitalization, and content changes suggested by nelson.
7a9135a62699b62a884d11c070034f6537168553: Add missing errors from secerr.h in lib/util
relyea%netscape.com - Wed, 17 Aug 2011 05:01:37 +0000 - rev 10069
Add missing errors from secerr.h in lib/util
(0) -10000 -3000 -1000 -300 -100 -50 -20 +20 +50 +100 +300 +1000 +3000 tip