Skip to content
GitLab
  1. 11 Jan, 2013 1 commit
    • Kamil Dudka's avatar
      nss: clear session cache if a client cert from file is used · b36f1d26
      Kamil Dudka authored 
      This commit fixes a regression introduced in 052a08ff.

NSS caches certs/keys returned by the SSL_GetClientAuthDataHook callback
and if we connect second time to the same server, the cached cert/key
pair is used.  If we use multiple client certificates for different
paths on the same server, we need to clear the session cache to force
NSS to call the hook again.  The commit 052a08ff prevented the session
cache from being cleared if a client certificate from file was used.

The condition is now fixed to cover both cases: consssl->client_nickname
is not NULL if a client certificate from the NSS database is used and
connssl->obj_clicert is not NULL if a client certificate from file is
used.

Review by: Kai Engert
      b36f1d26
  3. 27 Dec, 2012 1 commit
  5. 03 Dec, 2012 1 commit
    • Kamil Dudka's avatar
      nss: prevent NSS from crashing on client auth hook failure · 68d2830e
      Kamil Dudka authored 
      Although it is not explicitly stated in the documentation, NSS uses
*pRetCert and *pRetKey even if the client authentication hook returns
a failure.  Namely, if we destroy *pRetCert without clearing *pRetCert
afterwards, NSS destroys the certificate once again, which causes a
double free.

Reported by: Bob Relyea
      68d2830e
  7. 20 Nov, 2012 2 commits
  9. 19 Nov, 2012 2 commits
  11. 17 Nov, 2012 1 commit
  13. 14 Nov, 2012 1 commit
  15. 13 Nov, 2012 1 commit
  17. 09 Nov, 2012 1 commit
  19. 07 Nov, 2012 1 commit
  21. 06 Nov, 2012 1 commit
  23. 10 Oct, 2012 2 commits
  25. 02 Oct, 2012 1 commit
  27. 12 Sep, 2012 1 commit
  29. 09 Sep, 2012 1 commit
  31. 03 Sep, 2012 1 commit
  33. 09 Aug, 2012 1 commit
  35. 08 Aug, 2012 2 commits
  37. 07 Aug, 2012 1 commit
  39. 27 Jul, 2012 1 commit
  41. 26 Jul, 2012 2 commits
  43. 22 Jul, 2012 1 commit
  45. 20 Jul, 2012 1 commit
  47. 15 Jul, 2012 1 commit
  49. 09 Jul, 2012 2 commits
  51. 07 Jul, 2012 1 commit
  53. 25 Jun, 2012 2 commits
  55. 13 Jun, 2012 1 commit
    • Yang Tse's avatar
      schannel: remove version number and identify its use with 'schannel' literal · 819afe46
      Yang Tse authored 
      Version number is removed in order to make this info consistent with
how we do it with other MS and Linux system libraries for which we don't
provide this info.

Identifier changed from 'WinSSPI' to 'schannel' given that this is the
actual provider of the SSL/TLS support. libcurl can still be built with
SSPI and without SCHANNEL support.
      819afe46
  57. 11 Jun, 2012 1 commit
  59. 09 Jun, 2012 1 commit
  61. 08 Jun, 2012 1 commit
  63. 04 Jun, 2012 1 commit
  65. 03 Jun, 2012 1 commit