<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>
<style>img {
max-width: 100%; height: auto;
}
</style>
</head>
<body>
<div class="content">
<h3>
Timo Aaltonen pushed to branch master
at <a href="https://salsa.debian.org/freeipa-team/jss">FreeIPA packaging / jss</a>
</h3>
<h4>
Commits:
</h4>
<ul>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/60ebccbfcaeb378b96c7f681914282fdc89db965">60ebccbf</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-03-01T20:09:17Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add helper methods for referencing Java strings
Adds a JSS_RefJString method to read the UTF8 bytes of a string and a
JSS_DerefJString method to return the reference when we're done with
it. Also fixes a few helper methods to accept `const` arguments where
appropriate.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/40c82a53931fe72b936977fa6354f653c5bd2dca">40c82a53</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-03-01T20:09:17Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Use new JSS_(Ref|Deref)JString methods in ssl/common.c
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/6915cccaec6db331cf7a644fa32a39746bdc5b27">6915ccca</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-03-01T20:09:17Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Use new JSS_(Ref|Deref)JString methods in ssl/callbacks.c
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/ef0870289f0248485f37068c161dfb419e14e8b3">ef087028</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-03-01T20:09:17Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Use new JSS_(Ref|Deref)JString methods in ssl/SSLSocket.c
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/db246cca79082cdc3ca598ecd562fae6467b50b2">db246cca</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-03-01T20:09:17Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Use new JSS_(Ref|Deref)JString methods in ssl/SSLServerSocket.c
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/09d25215ecd17ee09552402465ff07625ebf18c1">09d25215</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-03-01T20:09:17Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Use new JSS_(Ref|Deref)JString methods in provider/java/security/JSSKeyStoreSpi.c
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/10548b95920e65f79b22d152dbc50cdebe44a412">10548b95</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-03-01T20:09:17Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Use new JSS_(Ref|Deref)JString methods in pkcs11/PK11Token.c
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/7119db433b1d55a0358d5933aed64e0811d19ee5">7119db43</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-03-01T20:09:17Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Use new JSS_(Ref|Deref)JString methods in pkcs11/PK11SymKey.c
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/303a1cfba0f649242a58c72dd5de84d475ef5d06">303a1cfb</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-03-01T20:09:17Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Use new JSS_(Ref|Deref)JString methods in pkcs11/PK11Store.c
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/fa51fc4550bc800913f847eedc6df84806244bc9">fa51fc45</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-03-01T20:09:17Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Use new JSS_(Ref|Deref)JString methods in SecretDecoderRing/KeyManager.c
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/5f19a944f4a78171a13d20853fb1e161033a91a0">5f19a944</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-03-01T20:09:17Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Use new JSS_(Ref|Deref)JString methods in PK11Finder.c
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/6bb7207e150f095ab88fa07281ce7084782d9e51">6bb7207e</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-03-01T20:09:17Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Use new JSS_(Ref|Deref)JString methods in CryptoManager.c
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/cae0ed69699e4362cf61e19dae661421c81d53f9">cae0ed69</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-03-01T20:29:47Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bump version to v4.5.3 in CMake
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/31ec720a27dda611035cb03e63641638afc41285">31ec720a</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-03-01T21:28:15Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove needless dependency on hamcrest
jUnit pulls in hamcrest-core for us.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/8be92806ec3a25d374442915d9aa7e210843a1b5">8be92806</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2019-03-05T21:26:37Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added ChainSortingTest
A new ChainSortingTest has been added to validate
Cert.sortCertificateChain().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/fd3e9cbed966ae0f72e837966e4289fa070be068">fd3e9cbe</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2019-03-06T17:20:15Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added .copr/Makefile
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/65d77cf61b9f78adce1dd19fa603aada80c297ae">65d77cf6</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-03-15T16:14:12Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix release procedure in jss.spec
As discovered with the v4.4.6 release, the tarball creation process as
described in the spec file was wrong and/or generated a different
tarball than linked to by the Source URL. Update the procedure to match
the URL.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/1623908feb27e54c8babbf6fecd291b563217971">1623908f</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-03-19T18:22:31Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Branch to v4.6.x
To make packaging easier, branch v4.5.x after the TomcatJSS fixes (in
commit 91870d5b5898dcb1a82c3691449e50baa8fbd9ba). master branch becomes
the new v4.6.x series; marking this as beta.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/acb3bcb4aafcc5a5a3c477e028c29155b3f008f9">acb3bcb4</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-03-20T14:20:03Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix IRC channel name: #dogtag-pki [no-ci]
Credit to @emaldona.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/21fc711d27773a265d29277c9967a4b9a06dcaac">21fc711d</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-03-28T16:28:11Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove 3s sleep from SetupDBs
As far as I can tell, this 3s sleep is extraneous. This test creates the
NSS DB (instead of calling certutil -N) and provides an anchor point in
the test suite. Our alternatives are to use `certutil -N` instead of
SetupDBs, but we might as well keep this, just without the sleep.
It is possible the sleep was used, perhaps to ensure that the DB is
flushed to disk before the test suite continues, but this should be
handled by the JVM and shouldn't be considered as a side-effect of a
Sleep.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/23e176bd6efbb2aaa55041313a372e3fb069db67">23e176bd</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-03-29T15:25:22Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Use --with-timestamp and --with-commit-id for COPR
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/1d618027b59e7517255b656c88804f373c0e6b0f">1d618027</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-04-01T15:33:07Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add dnf install -y git
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/5946034e391650ee981f5b64979239b242c3e5ff">5946034e</a></strong>
<div>
<span>by Dinesh Prasanth M K</span>
<i>at 2019-04-01T18:33:27Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Minor bug fix in COPR autobuild
Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/829a474a7782ff34eef831c4ff7abddbbfc9b6a4">829a474a</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-04-08T14:28:55Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add helper methods for referencing jbyteArrays
Adds a JSS_RefByteArray method to read the jbyte contents of a jbyteArray
and a JSS_DerefByteArray method to release the resources.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/cd5b990eae78caad77f804f737ecaf56e930d1e7">cd5b990e</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-04-08T14:28:55Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JSS_FromByteArray to safely access jbyteArray
One issue with (*env)->GetByteArrayElements is that it does not NULL
terminate the input. Another issue is that forgetting to call
(*env)->ReleaseByteArrayElements results in a stray reference to the
byte array, preventing it from being garbage collected.
JSS_FromByteArray solves this by returning a new copy of the data,
releasing the reference right away.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/d357c5b98d4c2ad3640d0a5c734997a642b4336e">d357c5b9</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-04-08T14:28:55Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor to use JSS_DerefByteArray
This fixes a few instances where byte arrays elements wouldn't be
released if they're not copies; they should always be released.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/f9bb4ef374998c0f6a92dd9f8cd62bfceb36c651">f9bb4ef3</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-04-08T14:28:55Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor to use JSS_RefByteArray
This simplifies some logic to use JSS_RefByteArray instead of separate
calls to GetByteArrayElements and GetArrayLength.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/d980cfb1593904d7305777f7b5f950486473663c">d980cfb1</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-04-08T14:29:02Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Extend SSLVersion to support JDK names
SSLVersion currently only supports a single alias for naming TLS
protocol versions. Keep providing (and defaulting to) the NSS style
names, but also provide the JDK style names. This allows us to map
between the NSS constant and the JDK names.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/26dd32546a10fd2e86d8102385be3df5de198cde">26dd3254</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-04-08T14:29:16Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Return positive BigIntegers
Several of the usages of BigIntegers lead to the potential of negative
numbers, though only positive numbers should be returned.
PK11RSAPublicKey's getModulus() and getPublicExponent() methods can
potentially return negative values, when both the modulus and exponent
should be strictly positive.
PK11PrivKey's getDSAParams() could return negative values depending on
the PQG parameters.
The Key Identifiers printed by tests.CloseDBs should be positive (as
they're UIDs) but could be displayed as negative values; the same
happens in crmf.CertReqMsg.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/d8a9d9972bfe905df1b6152bc026868566f0159a">d8a9d997</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-04-24T17:58:55Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Use JDK8 as the source and target release
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/8a46c60ccafc8f462a5924424ccf98280f00fb03">8a46c60c</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-04-24T17:58:55Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Support JAVACFLAGS
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/15dd22378aae2623395aa0c9200f6abab54bbc27">15dd2237</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-04-24T19:10:33Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add hamcrest-core for Debian
While Debian packages a useful junit4 (that already includes
hamcrest-core in its MANIFEST's Class-Path), we might as well include
the correct path in the auto detection script to silence the incorrect
warning.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/652be0fbf01ff562d14860a9f541520b799d0598">652be0fb</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-04-26T10:43:56Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add netscape.security to javadoc build
I noticed this was missing after a discussion on #dogtag-pki; we're not
building the javadocs for these packages; in part I'm guessing that this
is because there's a number of errors associated with the build (bad
formatting, parameters, etc), so these should be fixed as well.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/ad71d1aaaa673aa355a5b9e7b1457a39156ed766">ad71d1aa</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-04-26T10:43:56Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix javadocs build
Since the current javadocs build process is broken (due to various
non-fatal errors in the build), ignore the error code of make javadocs
when building the RPM for now.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/93cf443154478e0a1dfefdf427b3ab925dc58ba8">93cf4431</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-06T15:53:31Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ring buffer implementation
This buffer will be used as the in-memory buffer for SSLEngine via
BufferPRFD. This provides a common interface to reading/writing to a
fixed location in memory.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/a0026340bd2f1673303d2b83731b713831b76943">a0026340</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-06T15:53:31Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add tests for the ring buffer
This introduces two C language tests for the ring buffer, one of a
buffer of size 1 and one of a buffer of size 4. These exhaustively test
all pairwise combinations of get/put/read/write.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/2a9907db25c870b8296f3de4e04382731093f39d">2a9907db</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-06T15:53:31Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Minimize includes in buffer source
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/17d96e8bb788148320a30a5dc6e89ad7a3afc144">17d96e8b</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-06T15:53:31Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Document the j_buffer members and functions
Adds inline documentation about the structure, methods, and their
guarnatees to buffer.h
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/7d6f55a4c3c654b44148a18d790467e32bd7bcc1">7d6f55a4</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-06T16:29:12Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Define DEBUG and FORCE_PR_ASSERT in debug build
This ensures that all PR_ASSERT(...) calls are processed and executed as
part of the test suite in a debug build. Otherwise, these calls are
ignored and their asserts are not checked by definition of PR_ASSERT in
the NSPR library.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/8d751cce68b31029e7691fe3bc99a46ea6f1abfd">8d751cce</a></strong>
<div>
<span>by Jack Magne</span>
<i>at 2019-05-06T19:37:27Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Resolve Bug 1666872 - CC: Enable AIA OCSP cert checking for entire cert chain.
This fix for jss, solves the one use case where the pki server is configured to perform ocsp checking ONLY with the contents of the AIA extension. Previously, jss could only check the ocsp server for the leaf node cert of the cert being verified. This fix allows the cert chain to be checked over ocsp for each cert in question. This is possible due to the fact that we have made a call in the PKIX library of nss to do the actual cert verfication. This call is made with all the needed flags to tell the PKIX library to make the ocsp verifications remotely over the network using the contents of the AIA extension.
Later on we can use this code to handle the other cases, but for now we want to solve this one particular problem. If the server is configured in any other configuration than the one stated, the original verification code will be called as before. Below is an example of a configuration in server.xml, that will trigger this new code:
< .... enableOCSP="true" ocspCacheSize="10000" ocspMinCacheEntryDuration="7200" .... >
Note that due to ocsp caching, the cert chain verification may only be apparent after a restart of the server. A way to force an ocsp fetch every time is to set the value of ocspCacheSize=-1, which essentially disables the cache.
Added a couple of minor fixes due to review comments. Possibly more to come.
Minor include directive change to compile on branch.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/801279d83a5427d00d683229bbfcff3f7c2025c5">801279d8</a></strong>
<div>
<span>by Jack Magne</span>
<i>at 2019-05-06T19:37:27Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Additional: Resolve Bug 1666872 - CC: Enable AIA OCSP cert checking for entire cert chain.
Simple fix to make sure we are using the correct variant of the NSS cert usage quantity.
It turns out some calls need a SECCertUsage and others need a SECCertificateUsage.
We also need to convert between the two in certain instances.
Found and fixed double certificate object free issue.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/0af945f8ba375a55f367ddd7a03eb727b7c065fb">0af945f8</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-06T20:05:55Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add Fedora 30 Dockerfile
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/bc921c6ebfc0a05a1b7bc59d0d9fb032a01eae83">bc921c6e</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-06T20:05:55Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add F30 to .travis.yml, remove F28
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/ba29171995df9667ef045071597edb14ced76ada">ba291719</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-10T17:47:54Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Declare certList earlier in ssl/common.c:getRoot
This fixes the following compilation warning:
jss/org/mozilla/jss/ssl/common.c: In function ‘getRoot’:
jss/org/mozilla/jss/ssl/common.c:923:5: warning: ‘certList’ may be used uninitialized in this function [-Wmaybe-uninitialized]
CERT_DestroyCertList (certList);
^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/36d988a5897d4dc8cb2c2656ec33e23a33825c82">36d988a5</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-13T17:52:16Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add Buffer PRFileDesc header-only implementation
This implements a NSPR PRFileDesc that utilizes two buffers owned by the
creator for read and write calls. This will eventually enable a
SSLEngine implementation to provide non-blocking SSL connections.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/4a2f6db7940fc8e1837e46fc05add6816442a56a">4a2f6db7</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-13T17:52:16Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test case for Buffer PRFileDesc
This is a C-language test for the new PRFileDesc implementation. If the
implementation is non-blocking, both sides of a TLS connection can be
performed in the same thread/process.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/bdd07488ebbc1f5d4c05b0d893cd80ed75d13641">bdd07488</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-13T19:53:51Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add -Wall -Wextra -Werror to Ubuntu build
We should have at least one build using this to ensure we detect issues
earlier.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/f255de549ef69c3730c4cb59b9991771bb657647">f255de54</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-14T18:16:04Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Set an explicit C standard: C99 with GNU extensions
All platforms we support should support the newer C99 standard.
Explicitly pass it during build to ensure we don't fail to build on
platforms where the default is C89. Note that we need the GNU extensions
for strdup.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/b8436a44429ac0f0e6e784ec9033296f97554eb3">b8436a44</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-14T18:38:40Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix error message generation with OCSP
The next extensions to OCSP use PORT_GetError() instead of
PR_GetError(). Additionally, don't use + for joining a
(const char *) and an int.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/bd3de75e3cb33f945c2b948449a5c22d76e4d6c9">bd3de75e</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-14T18:38:40Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Initialize root sooner in ssl/common.c
The following warnings were detected with Clang:
/home/ascheel/GitHub/cipherboy/jss/org/mozilla/jss/ssl/common.c:999:8: warning: variable 'root' is used uninitialized whenever 'if' condition is true [-Wsometimes-uninitialized]
if(ocspPolicy != OCSP_LEAF_AND_CHAIN_POLICY) {
^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/home/ascheel/GitHub/cipherboy/jss/org/mozilla/jss/ssl/common.c:1083:8: note: uninitialized use occurs here
if(root) {
^~~~
/home/ascheel/GitHub/cipherboy/jss/org/mozilla/jss/ssl/common.c:999:5: note: remove the 'if' if its condition is always false
if(ocspPolicy != OCSP_LEAF_AND_CHAIN_POLICY) {
^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/home/ascheel/GitHub/cipherboy/jss/org/mozilla/jss/ssl/common.c:995:8: warning: variable 'root' is used uninitialized whenever 'if' condition is true [-Wsometimes-uninitialized]
if(cert == NULL) {
^~~~~~~~~~~~
/home/ascheel/GitHub/cipherboy/jss/org/mozilla/jss/ssl/common.c:1083:8: note: uninitialized use occurs here
if(root) {
^~~~
/home/ascheel/GitHub/cipherboy/jss/org/mozilla/jss/ssl/common.c:995:5: note: remove the 'if' if its condition is always false
if(cert == NULL) {
^~~~~~~~~~~~~~~~~~
/home/ascheel/GitHub/cipherboy/jss/org/mozilla/jss/ssl/common.c:1037:5: note: variable 'root' is declared here
CERTCertificate *root = getRoot(cert,certUsage);
^
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/d148c68d8455670218acd6d9b7295f6ff28c9724">d148c68d</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-15T13:29:24Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CMake: Prepend command-line CFLAGS
When building with clang, the last-seen arguments take precedence. This
means that if the user specifies -Wall on the command line,
-Wno-unknown-warning-option gets suppressed. Thus, prepend
PASSED_C_FLAGS instead of appending them.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/dc4664c55c3041be9c6d6296e82123185b768b5b">dc4664c5</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-15T13:29:24Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove extraneous set of parenthesis in comparison
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/e4dcbd64dfac6c6101809230202f60774b2f4544">e4dcbd64</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-15T13:29:24Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Use double {} for subobject assignment
Fixes the following Clang warnings:
/jss/org/mozilla/jss/ssl/common.c:981:34: warning: suggest braces around initialization of subobject [-Wmissing-braces]
CERTValOutParam cvout[20] = {0};
^
{}
/jss/org/mozilla/jss/ssl/common.c:982:32: warning: suggest braces around initialization of subobject [-Wmissing-braces]
CERTValInParam cvin[20] = {0};
^
{}
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/08b35cce7e50250471871222229134cf6c99b450">08b35cce</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-15T13:34:48Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add missing include from jssutil.h
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/fef67ff2b7f4604b1be83c0aac64077f7157cdf7">fef67ff2</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-15T13:34:48Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add proxy for PRFileDesc
PRFDProxy wraps a single NSPR PRFileDesc so it can be used from Java
via JNI.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/075c903f21c4e8394ce00e263824a7d4626cdefe">075c903f</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-15T13:34:48Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add common PRFileDesc functions
Several NSPR methods operate on PRFileDesc objects which are useful to
access from Java:
- Read/Write, Send/Recv -- for IO operations on NSS SSL sockets
- NewTCPSocket -- to hand off a socket to be wrapped by NSS
- Shutdown -- to close a network socket
- Open -- for testing purposes to create files
This adds these methods and their implementations in Java.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/4ec24f0dd272a663f9e33ef5b2cd8b1b8a66e602">4ec24f0d</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-15T13:34:48Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PR.java methods to exported symbols
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/9618202fab4e04a1dec0f6c09f7ea22d3a69dc59">9618202f</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-15T13:34:48Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test cases for PRFDProxy.java and PR.java
These test basic read/write and open/close socket interactions. This
ensures we can handle IO correctly.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/13b276f147071ed210931f0adec902106699f3d7">13b276f1</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-15T13:34:48Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add documentation to jss.nss.PR
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/5ec7945c3ab9f78b39864a60c7ae1d11b151d9f7">5ec7945c</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-15T13:34:48Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add documentation to nss/PRFDProxy.h
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/71b250099b0611d9fc63d51054f12b0ca5e0fc30">71b25009</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-15T15:02:12Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Allow Travis Extras section to succeed quickly
By giving a simple `true` script, the Extras section will have a job
which succeeds quickly. This should make the entire Travis run take
less time, as while the Extras section is fast-finish, it won't finish
until the first job succeeds.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/75918f136092f655951004cccdad2a1ba52ca1d6">75918f13</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-15T17:36:36Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move include after copyright in util/jssutil.h
Also, switch to including all required headers, removing the old
comment.
Reported by @emaldona.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/2d67bd0521f7b918bd254ceff9a96d5a083d25b2">2d67bd05</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2019-05-15T17:49:32Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add HSM support for PKCS#11 AES KeyWrap/Padding (#176)
* Add HSM support for PKCS#11 AES KeyWrap/Padding
This patch adds HSM support for the PKCS#11 standard defined KeyWrap/Padding
mechanism. Prior to this patch, only NSS (CKM_NSS_AES_KEY_WRAP_PAD) was supported.
Note that this is based on Thales's projection of having the following supported
in the next SW version, 12.60: CKM_AES_KEY_WRAP_PAD
For completeness, CKM_AES_KEY_WRAP is also added, although it is not suitable
for private key wrapping.
* Added test case for AES_KEY_WRAP_PAD; also a clarification comment
This would actually test CKM_NSS_AES_KEY_WRAP_PAD if CKM_AES_KEY_WRAP_PAD
is not supported by the crypto module.
also added clarification comment in org/mozilla/jss/crypto/KeyWrapAlgorithm.java
* pulling repeated code into a method getSupportedWrappingMechanism
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/b2848538b11c173c7c16c23de5b1699330103f8e">b2848538</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-16T19:04:21Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add support for NSS's SSL_ calls
Add support for low-level NSS API calls with the SSL_ prefix. This lets
us control a SSL handshake and set it up from an existing PRFileDesc.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/694f93350bc8ce462c79acce0522698f0e1906c6">694f9335</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-16T19:04:21Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add tests for org.mozilla.jss.nss.SSL
This tests some of the new changes which let us call into NSS's SSL_
prefixed API. This doesn't include a full SSL handshake though.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/7de080f3c415f71c9f909fd082cfea8d78732ef1">7de080f3</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-16T19:04:21Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Document jss.nss.SSL methods
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/7c9e2001e24e45e869b0c1de4d1a2d065c2d5181">7c9e2001</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-16T19:04:21Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Document jss.nss.SecurityStatusResult
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/790820a42816dd6c322e2ddc26fb8eaad5b13c31">790820a4</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-16T20:01:51Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add BuferProxy
Adds a proxy for a j_buffer object for later use as a BufferPRFD.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/4bda24114781c1fa40eaa88447d96bda15cf1429">4bda2411</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-16T20:01:51Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Wrap j_buffer calls
Adds the org.mozilla.nss.Buffer class for operating on BufferProxy
objects, performing the associated jb_* calls.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/781094a13c2b95cb68dd512cef30ca46de19c09d">781094a1</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-16T20:01:51Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add tests for BufferProxy and Buffer calls
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/ca60a9eda8ebe5553316763238b0602ddb10aba1">ca60a9ed</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-16T20:01:51Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Document jss.nss.Buffer methods
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/67caf2d75b37850ff8ac80b2866c49473576fe6f">67caf2d7</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-16T20:01:51Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Document BufferProxy native methods
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/0195f9570ad3deb7dad213fb02b73395cabcde83">0195f957</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-17T16:01:28Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add org.mozilla.jss.nss.PR.NewBufferPRFD
This adds support for creating a BufferPRFD from two j_buffers in JNI.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/82792d7b79f0bde758b0eb20691aa4bf033eda4a">82792d7b</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-17T16:01:28Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Test PR.NewBufferPRFD
This adds a basic test for a BufferPRFD, ensuring that Send/Recv work as
expected.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/1537ae58f582c0f2f7c5d3c453b60973b188883a">1537ae58</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-17T16:20:56Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Extend java.security.cert.X509Certificate in PK11Cert
By extending the java.security.cert.X509Certificate class, we can now
use PK11Cert in a variety of Java-standard interface, downcasting to
PK11Cert when applicable. This lets us preserve the NSS pointer to the
certificate so we can make future NSS calls on it.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/1b9ffdd8850a5631b3c6b8d555e665eaee2a49aa">1b9ffdd8</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-17T16:30:56Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add SSL test case for BufferPRFD
Using the new JNI wrappers for NSPR and NSS, perform a singled-threaded
SSL handshake in Java and use it to pass data back and forth, showing
that this new stack works.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/b5c236b05b508791b700a141d5e0e1dfd007083b">b5c236b0</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-20T17:47:42Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PR_SHUTDOWN_{RCV,SEND,BOTH} Constants
These constants are exposed by NSPR and used for the PR_Shutdown call.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/4e94fbe4b8e8b64b3e0c8b71470a4180bfb81493">4e94fbe4</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-20T17:47:42Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add tests for new PR constants
Sanity checks to ensure the new constants are present and working.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/666a2bde62669f8e71387ae57d5027eb5b797b20">666a2bde</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-20T19:49:30Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add SSL.OptionGet
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/410e86d16bba2ff157eaf949ce7c984c89a0f7b5">410e86d1</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-20T19:49:30Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add tests for SSL.OptionGet
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/38286287860b5577024fb07e2443ca2ff877d835">38286287</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-20T23:43:35Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add org.mozilla.jss.nss to javadoc ouput
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/a2334f87af97201402d8499c5751b47d0b0cb053">a2334f87</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-21T00:12:09Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add nss.SSL.{CipherPrefSet,CipherPrefGet}
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/615ed0e18a889ac9c3b6ec84ebccdf49ddaccd3f">615ed0e1</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-21T00:12:09Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add tests for nss.SSL.{CipherPrefSet,CipherPrefGet}
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/47b4711a9b39c5d62b032fce9b02475a82b27097">47b4711a</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-30T13:25:55Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Provide reverse mapping of JSSL_enums values
This is provided for convenience and to avoid rewriting the values
in-place. In certain locations, e.g., ssl/SSLSocket.c this construct is
used and the results are placed back into NSS's SSLVersionRange struct;
this is technically incorrect as the values of the struct are meant to
be NSS's SSL version constants, but are now indices into a struct.
Semantics:
- result is the index <-> the value is found
- result is JSSL_enums_size <-> the value is not found
This results in the possibility of the cast to a size_t if desired, but
several places in Java assume these are a (signed) int.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/22294d1d27c081cb41e8178d2c17bc2534eaf8ed">22294d1d</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-30T13:25:55Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add helper to wrap NSS's SSLVersionRange into Java
Also updates SSLSocket.c to remove its implementation and use the common
wrapper.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/df8b2cd897c4747b810432d1c1ff977333ab7bb9">df8b2cd8</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-30T13:25:55Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add SSL_VersionRange{Get,Set} wrappers
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/94851055a70bfb48312179977b656cfd3cab44b1">94851055</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-30T13:25:55Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add tests for SSL.VersionRange{Get,Set}
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/957d5baf8b37175b4a97b2c1991e107f48ade39b">957d5baf</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-30T18:06:47Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix CHECK_DEPRECATION compatibility
The old build system respected the CHECK_DEPRECATION environment
variable to enforce deprecation checks during (Java) compilation
time. In the new system, this was broken by not using the ENV{}
construct and not adding the flag to the correct variable.
This was reported by @emaldona.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/4cb275b510a828eb4017222b2afe4c1d65f73d04">4cb275b5</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-31T17:41:11Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JSSKeyManager from TomcatJSS
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/c0913c9042b513977ab82efcef14836103a0bf6e">c0913c90</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-31T17:41:11Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix JSSKeyManager build
After migration to JSS, fix JSSKeyManager to have the correct package
and update it to use PK11Cert directly, instead of converting to a
X509Certificate.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/c6fbf64ea426857a8e6532a818846932ffad3285">c6fbf64e</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-31T17:41:11Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JSSTrustManager from TomcatJSS
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/082bf0c226dda5150cbdc404fd5108622737ac29">082bf0c2</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-31T17:41:11Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix JSSTrustManager build
After migration to JSS< fix JSSTrustManager to have the correct package
and update it to use PK11Cert directly, instead of converting to a
X509Certificate.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/1f4fd89ab432cd6febea129b92aea63f2bdb0144">1f4fd89a</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-31T17:41:11Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add a KeyManagerFactory implementation
This returns our JSSKeyManager class, when required.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/7b6a2c18f998568299a734a96ff766d09a02701a">7b6a2c18</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-31T17:41:11Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add KeyManagerFactory to JSSProvider
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/c8fa4a9ddffabc8711de194441218fce360f8ef6">c8fa4a9d</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-31T17:41:11Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add a TrustManagerFactory implementation
Returns our JSSTrustManager when required.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/f8b9e41162a56fa8873c801fdff9db13e29e3aa8">f8b9e411</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-31T17:41:11Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JSSTrustManagerFactory to JSSProvider
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/df85c7fd2776fe45710e9165b0df713ef7ceb117">df85c7fd</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-31T19:57:16Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Return PK11Cert in JSSKeyStoreSpi
Now that PK11Certs implement the java.security.cert.X509Certificate
class, we can return PK11Certs directly from the JSSKeyStoreSpi
interface, rather than encoding and decoding the certificate contents.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/277cfc97e63a480fa7aee62f0033306eb410a975">277cfc97</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-31T20:04:45Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Implement jb_read_capacity and jb_write_capacity
This lets us expose the remaining capacity of a j_buffer, making it
easier to know how large to size buffers for reading and writing.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/bf128d84d6ebb2ec851911613801f90b75e0dff0">bf128d84</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-31T20:04:45Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Expose Buffer.{Read,Write}Capacity
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/227e4296c9992d7838bd945b128596891064bd8f">227e4296</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-05-31T20:04:45Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add Buffer.{Read,Write}Capacity tests
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/ad584dbb4c3278d0eca7baa1600f7b89d1e5e241">ad584dbb</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-06-03T14:27:00Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JSSProvider test case
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/a065347ebb38fc48d43da9b809cac44bca424cb8">a065347e</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-06-05T19:15:09Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Expose SSL_{REQUEST,REQUIRE}_CERTIFICATE constants
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/44066eb114e156ffc48261850c4c792200115f68">44066eb1</a></strong>
<div>
<span>by Elio Maldonado</span>
<i>at 2019-06-06T16:19:53Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix some trivial depercation warnings #33
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/5f2c9b68ee61f6c26a5cb8673d66e9a579301373">5f2c9b68</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-06-07T16:35:52Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ssl.javax.JSSParameters
This class extends SSLParameters to provide convenience wrappers for
interacting with NSS classes in a standard Java environment. In
particular, they allow for the parsing of cipher suites into and out of
ssl.SSLCipher enum values, and for handling the differences between the
Java standard form of TLS versions as a String, ssl.SSLVersion enum
values, and ssl.SSLVersionRange instances.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/3f1b7f99583ab73f843771c1a434d450cd80c256">3f1b7f99</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2019-06-07T17:38:33Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fixed exception handling in X509CertImpl
The X509CertImpl has been modified to chain the original
exception whenever possible.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/1e618b3c960dbdd7472d40c6057e45be7ae7c2e5">1e618b3c</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-06-10T14:19:37Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Store cert alias in JSSParameters
This lets us find the certificate in the NSS DB by alias; none of the
existing SSLParameters are sufficient for this task.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/dc5df0fbc57d165a35b457d6704bd02f5b21942f">dc5df0fb</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-06-10T14:42:37Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add org.mozilla.jss.ssl.javax to javadoc generation
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/a422380b8a2be44c1d531f155b90c5c57d75720c">a422380b</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-06-10T14:43:09Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update PKCS11Constants
This includes the new ChaCha20 constant, CKM_NSS_CHACHA20_CTR,
introduced in upstream commit e9fdd32dc33febcd0a3fcd46de1b223781b6960a.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/cec6c905ffd5afa5050c3d06e8754cb6fd631860">cec6c905</a></strong>
<div>
<span>by Elio Maldonado</span>
<i>at 2019-06-10T14:44:09Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix additional trivial deprecation warnings #34
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/4f0dfaddb35e80e8e0aa42d2e349ccf1cc21b733">4f0dfadd</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-06-10T18:47:58Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Test SSL handshake without TCP model
The NSS documentation allows SSL_ImportFD to take a null first
parameter; in this case, NSS defaults will be used instead of defaults
from the model. Since we're creating the model *with* default parameters
(and not really saving a global model with updated parameters), don't
bother creating a model PRFileDesc.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/9be5795efcf551157eed31219815bfc6703ef522">9be5795e</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-06-10T18:48:08Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">[nss.PR] Create BufferPRFD when peer_info is null
Unlike read_buf or write_buf, peer_info can reasonably be null; handle
this gracefully and create the BufferPRFD instead of returning a null
PRFDProxy reference.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/68f4f3515258dca7c51069abde2b07f40ce79cdf">68f4f351</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-06-11T00:56:50Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add SECStatus constants to nss.SSL
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/07d3175e41cc78b58566e0ad584851bc268a6f48">07d3175e</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-06-11T00:56:50Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Use new SECStatus constants in test cases
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/6338edfa850861d3a2fa8d6b3675428ba3575b89">6338edfa</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-06-11T00:56:50Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PRStatus constants to nss.PR
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/9552abc27cf6b4d7123b440477ab950502783e47">9552abc2</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-06-11T00:56:50Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Use new PRStatus constants in test cases
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/dff79626ecc23eb122db0683d478efa2f226280a">dff79626</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-06-11T00:56:50Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PR Error constants
Some org.mozilla.jss.nss.PR methods return errors as ints; add
org.mozilla.jss.nss.PRErrors which contains constants for common errors.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/3fff8fdf28fd413143d0b74193e27abab124bdde">3fff8fdf</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-06-11T00:56:50Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update TestBufferPRFD to use PR Errors constants
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/4761cfdc341a47b23e0dcfc39be88a6209c6e99d">4761cfdc</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-06-12T10:55:33Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Track server hostname in JSSParameters
When using NSS as a client, SSL_SetURL must be called with the remote
host for certificate verification. Store the hostname in JSSParameters
so we can set it later in the JSSEngine.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/58c8fb81ca48153ec144a0742e146e56301ab835">58c8fb81</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2019-06-12T19:26:30Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Release v4.6.0
This version of JSS features many enhancements.
- HSM KeyWrap support
- An extended JSS Provider
- OCSP support in SSLSocket and SSLServerSocket
- Internal improvements to JNI handling
- Various small bugfixes and enhancements
A special thanks to external contributor @emaldona for his contributions
around JDK9+ deprecations.
Signed-off-by: Alexander Scheel <alexander.m.scheel@gmail.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/60c313591ba52d23eca7fa71ec4a89a12766f9bc">60c31359</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2019-07-10T07:33:28Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge tag 'v4.5.3' into m
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/7a58f86b0a4b00759084aa4ff1c4d24521640878">7a58f86b</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2019-07-10T07:33:34Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge branch 'master' into m
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/ef1f9a4515be6eb781fbb2b9c958bffe73bfb0d7">ef1f9a45</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2019-07-10T07:35:25Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">bump the version
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/77bb58f310e987531123813aed54ce8127135448">77bb58f3</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2019-07-10T07:35:50Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">control: Bump policy to 4.4.0.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/02aaa2ecae4f4fed219779b38531f39d2dc2fc03">02aaa2ec</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2019-07-10T07:36:40Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">control, compat: Bump debhelper to 12.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/406ebfc9d59fc47b575270ff34b27631c9ba03c9">406ebfc9</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2019-07-10T07:37:27Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">support-jdk8.diff: Dropped, upstream.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/jss/commit/02ef7a82a02fb667653e75ee78e83d45f2943937">02ef7a82</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2019-07-10T07:43:16Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">releasing package jss version 4.6.0-1
</pre>
</li>
</ul>
<h4>30 changed files:</h4>
<ul>
<li class="file-stats">
<a href="#eae40b507f9c3502accc6d7f8a39c9a7d9936b6f">
.copr/Makefile
</a>
</li>
<li class="file-stats">
<a href="#dea01dd89a3b602828e630677fde5d77c06441c8">
.travis.yml
</a>
</li>
<li class="file-stats">
<a href="#9a2aa4db38d3115ed60da621e012c0efc0172aae">
CMakeLists.txt
</a>
</li>
<li class="file-stats">
<a href="#8ec9a00bfd09b3190ac6b22251dbb1aa95a0579d">
README.md
</a>
</li>
<li class="file-stats">
<a href="#9f3af9fef0e3976107ab469d0eb1c9684c9aa796">
cmake/JSSConfig.cmake
</a>
</li>
<li class="file-stats">
<a href="#a8a567af8ceb46f449dc0e7aaaf4ce0465d01d9e">
cmake/JSSTests.cmake
</a>
</li>
<li class="file-stats">
<a href="#9c96da0e9f91d7d8937b69b524702c106258f0d1">
debian/changelog
</a>
</li>
<li class="file-stats">
<a href="#78fd675df1cf8c2d4c62ae1a9a912d15c8c50ba4">
debian/compat
</a>
</li>
<li class="file-stats">
<a href="#58ef006ab62b83b4bec5d81fe5b32c3b4c2d1cc2">
debian/control
</a>
</li>
<li class="file-stats">
<a href="#bc34014ab4b9a49dd7a27bdd8d352912607c3a96">
debian/patches/series
</a>
</li>
<li class="file-stats">
<a href="#08d11dfa93b6c224685b830dfc5e2d2a63dd8b88">
<span class="deleted-file">
−
debian/patches/support-jdk8.diff
</span>
</a>
</li>
<li class="file-stats">
<a href="#169bd8d967f61642ae102ae69d7070bcb2d86740">
docs/contributing.md
</a>
</li>
<li class="file-stats">
<a href="#8ef6e954989f98623a7c599f036efdd555ced6b3">
docs/dependencies.md
</a>
</li>
<li class="file-stats">
<a href="#063bf4b6263fbc45f86d361246396c742b514a97">
jss.spec
</a>
</li>
<li class="file-stats">
<a href="#b12d4bb39e2227abf2936f0537fc380e566dcdc9">
lib/jss.map
</a>
</li>
<li class="file-stats">
<a href="#d060b1b57a3488a669e60d6168b7b90edb50e1ae">
org/mozilla/jss/CryptoManager.c
</a>
</li>
<li class="file-stats">
<a href="#6722cbd0f8d28e4aaa6caeeef3d82a2704da7b07">
org/mozilla/jss/CryptoManager.java
</a>
</li>
<li class="file-stats">
<a href="#203cdf732fbb9205397f279bd7e42f3af0fb737d">
org/mozilla/jss/JSSProvider.java
</a>
</li>
<li class="file-stats">
<a href="#5f1bccd4a780c345403b16c2eeed0f2cc3d3f74a">
org/mozilla/jss/PK11Finder.c
</a>
</li>
<li class="file-stats">
<a href="#ece3fb412a9cd0cc91f20ccc42bbf8987a33028c">
org/mozilla/jss/SecretDecoderRing/KeyManager.c
</a>
</li>
<li class="file-stats">
<a href="#39acb3cb914f252a018e60c6fa5efec0a212d904">
org/mozilla/jss/asn1/ASN1Header.java
</a>
</li>
<li class="file-stats">
<a href="#290167fd7630c5959f48ca8e03645d6b9705ff16">
org/mozilla/jss/asn1/OBJECT_IDENTIFIER.java
</a>
</li>
<li class="file-stats">
<a href="#e007b0cb05af435805c5af7356c27c1169f29279">
org/mozilla/jss/asn1/SET.java
</a>
</li>
<li class="file-stats">
<a href="#8833ba33d533b57513711e07f2773adb0f9f409f">
org/mozilla/jss/crypto/Algorithm.c
</a>
</li>
<li class="file-stats">
<a href="#84d9750968259e68434fbcc99aa64720b205d6c1">
org/mozilla/jss/crypto/Algorithm.h
</a>
</li>
<li class="file-stats">
<a href="#1e55069c6ae4c00f75c6de6a53a6e2ddca7cde12">
org/mozilla/jss/crypto/Algorithm.java
</a>
</li>
<li class="file-stats">
<a href="#0d3536de58abf906b7f6b391e0c1628decfbecbe">
org/mozilla/jss/crypto/EncryptionAlgorithm.java
</a>
</li>
<li class="file-stats">
<a href="#22ef89faa6c2d80e69bf29aa85a64e21b1bbbb31">
org/mozilla/jss/crypto/KeyWrapAlgorithm.java
</a>
</li>
<li class="file-stats">
<a href="#96ea42a58db3e6f0768317fb53076038475de9c0">
org/mozilla/jss/netscape/security/pkcs/PKCS8Key.java
</a>
</li>
<li class="file-stats">
<a href="#5f11445c6f5bdd87f52ebb9ffbe3aa107759a695">
org/mozilla/jss/netscape/security/util/ObjectIdentifier.java
</a>
</li>
</ul>
<h5>The diff was not included because it is too large.</h5>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #777;">
—
<br>
<a href="https://salsa.debian.org/freeipa-team/jss/compare/c7bdeabbdd0e4056be9777482b9e95799240b840...02ef7a82a02fb667653e75ee78e83d45f2943937">View it on GitLab</a>.
<br>
You're receiving this email because of your account on salsa.debian.org.
If you'd like to receive fewer emails, you can
adjust your notification settings.
</p>
</div>
</body>
</html>