nss/lib/pk11wrap/pk11pars.c - Issue 2078763002: Delete bundled copy of NSS and replace with README.

Unified Diff: nss/lib/pk11wrap/pk11pars.c

Issue 2078763002: Delete bundled copy of NSS and replace with README. (Closed) Base URL: https://chromium.googlesource.com/chromium/deps/nss@master

Patch Set: Delete bundled copy of NSS and replace with README. Created 4 years, 6 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View side-by-side diff with in-line comments

Download patch

Index: nss/lib/pk11wrap/pk11pars.c

diff --git a/nss/lib/pk11wrap/pk11pars.c b/nss/lib/pk11wrap/pk11pars.c

deleted file mode 100644

index 8dd07e7e5e41785a9281d302b2981ec240729f5b..0000000000000000000000000000000000000000

--- a/nss/lib/pk11wrap/pk11pars.c

+++ /dev/null

@@ -1,1661 +0,0 @@

-/* This Source Code Form is subject to the terms of the Mozilla Public

- * License, v. 2.0. If a copy of the MPL was not distributed with this

- * file, You can obtain one at http://mozilla.org/MPL/2.0/. */

-/*

- * The following handles the loading, unloading and management of

- * various PCKS #11 modules

- */

-#include <ctype.h>

-#include <assert.h>

-#include "pkcs11.h"

-#include "seccomon.h"

-#include "secmod.h"

-#include "secmodi.h"

-#include "secmodti.h"

-#include "pki3hack.h"

-#include "secerr.h"

-#include "nss.h"

-#include "utilpars.h"

-/* create a new module */

-static SECMODModule *

-secmod_NewModule(void)

- SECMODModule *newMod;

- PLArenaPool *arena;

- /* create an arena in which dllName and commonName can be

- * allocated.

- */

- arena = PORT_NewArena(512);

- if (arena == NULL) {

- return NULL;

- }

- newMod = (SECMODModule *)PORT_ArenaAlloc(arena,sizeof (SECMODModule));

- if (newMod == NULL) {

- PORT_FreeArena(arena,PR_FALSE);

- return NULL;

- }

- /*

- * initialize of the fields of the module

- */

- newMod->arena = arena;

- newMod->internal = PR_FALSE;

- newMod->loaded = PR_FALSE;

- newMod->isFIPS = PR_FALSE;

- newMod->dllName = NULL;

- newMod->commonName = NULL;

- newMod->library = NULL;

- newMod->functionList = NULL;

- newMod->slotCount = 0;

- newMod->slots = NULL;

- newMod->slotInfo = NULL;

- newMod->slotInfoCount = 0;

- newMod->refCount = 1;

- newMod->ssl[0] = 0;

- newMod->ssl[1] = 0;

- newMod->libraryParams = NULL;

- newMod->moduleDBFunc = NULL;

- newMod->parent = NULL;

- newMod->isCritical = PR_FALSE;

- newMod->isModuleDB = PR_FALSE;

- newMod->moduleDBOnly = PR_FALSE;

- newMod->trustOrder = 0;

- newMod->cipherOrder = 0;

- newMod->evControlMask = 0;

- newMod->refLock = PZ_NewLock(nssILockRefLock);

- if (newMod->refLock == NULL) {

- PORT_FreeArena(arena,PR_FALSE);

- return NULL;

- }

- return newMod;

-/* private flags for isModuleDB (field in SECMODModule). */

-/* The meaing of these flags is as follows:

- *

- * SECMOD_FLAG_MODULE_DB_IS_MODULE_DB - This is a module that accesses the

- * database of other modules to load. Module DBs are loadable modules that

- * tells NSS which PKCS #11 modules to load and when. These module DBs are

- * chainable. That is, one module DB can load another one. NSS system init

- * design takes advantage of this feature. In system NSS, a fixed system

- * module DB loads the system defined libraries, then chains out to the

- * traditional module DBs to load any system or user configured modules

- * (like smart cards). This bit is the same as the already existing meaning

- * of isModuleDB = PR_TRUE. None of the other module db flags should be set

- * if this flag isn't on.

- *

- * SECMOD_FLAG_MODULE_DB_SKIP_FIRST - This flag tells NSS to skip the first

- * PKCS #11 module presented by a module DB. This allows the OS to load a

- * softoken from the system module, then ask the existing module DB code to

- * load the other PKCS #11 modules in that module DB (skipping it's request

- * to load softoken). This gives the system init finer control over the

- * configuration of that softoken module.

- *

- * SECMOD_FLAG_MODULE_DB_DEFAULT_MODDB - This flag allows system init to mark a

- * different module DB as the 'default' module DB (the one in which

- * 'Add module' changes will go). Without this flag NSS takes the first

- * module as the default Module DB, but in system NSS, that first module

- * is the system module, which is likely read only (at least to the user).

- * This allows system NSS to delegate those changes to the user's module DB,

- * preserving the user's ability to load new PKCS #11 modules (which only

- * affect him), from existing applications like Firefox.

- */

-#define SECMOD_FLAG_MODULE_DB_IS_MODULE_DB 0x01 /* must be set if any of the

- *other flags are set */

-#define SECMOD_FLAG_MODULE_DB_SKIP_FIRST 0x02

-#define SECMOD_FLAG_MODULE_DB_DEFAULT_MODDB 0x04

-/* private flags for internal (field in SECMODModule). */

-/* The meaing of these flags is as follows:

- *

- * SECMOD_FLAG_INTERNAL_IS_INTERNAL - This is a marks the the module is

- * the internal module (that is, softoken). This bit is the same as the

- * already existing meaning of internal = PR_TRUE. None of the other

- * internal flags should be set if this flag isn't on.

- *

- * SECMOD_FLAG_MODULE_INTERNAL_KEY_SLOT - This flag allows system init to mark

- * a different slot returned byt PK11_GetInternalKeySlot(). The 'primary'

- * slot defined by this module will be the new internal key slot.

- */

-#define SECMOD_FLAG_INTERNAL_IS_INTERNAL 0x01 /* must be set if any of

- *the other flags are set */

-#define SECMOD_FLAG_INTERNAL_KEY_SLOT 0x02

-/*

- * for 3.4 we continue to use the old SECMODModule structure

- */

-SECMODModule *

-SECMOD_CreateModule(const char *library, const char *moduleName,

- const char *parameters, const char *nss)

- return SECMOD_CreateModuleEx(library, moduleName, parameters, nss, NULL);

-/*

- * NSS config options format:

- *

- * The specified ciphers will be allowed by policy, but an application

- * may allow more by policy explicitly:

- * config="allow=curve1:curve2:hash1:hash2:rsa-1024..."

- *

- * Only the specified hashes and curves will be allowed:

- * config="disallow=all allow=sha1:sha256:secp256r1:secp384r1"

- *

- * Only the specified hashes and curves will be allowed, and

- * RSA keys of 2048 or more will be accepted, and DH key exchange

- * with 1024-bit primes or more:

- * config="disallow=all allow=sha1:sha256:secp256r1:secp384r1:min-rsa=2048:min-dh=1024"

- *

- * A policy that enables the AES ciphersuites and the SECP256/384 curves:

- * config="allow=aes128-cbc:aes128-gcm:TLS1.0:TLS1.2:TLS1.1:HMAC-SHA1:SHA1:SHA256:SHA384:RSA:ECDHE-RSA:SECP256R1:SECP384R1"

- *

- * Disallow values are parsed first, then allow values, independent of the

- * order they appear.

- *

- * Future key words (not yet implemented):

- * enable: turn on ciphersuites by default.

- * disable: turn off ciphersuites by default without disallowing them by policy.

- * flags: turn on the following flags:

- * ssl-lock: turn off the ability for applications to change policy with

- * the SSL_SetCipherPolicy (or SSL_SetPolicy).

- * policy-lock: turn off the ability for applications to change policy with

- * the call NSS_SetAlgorithmPolicy.

- * ssl-default-lock: turn off the ability for applications to change cipher

- * suite states with SSL_EnableCipher, SSL_DisableCipher.

- *

- */

-typedef struct {

- const char *name;

- unsigned name_size;

- SECOidTag oid;

- PRUint32 val;

-} oidValDef;

-typedef struct {

- const char *name;

- unsigned name_size;

- PRInt32 option;

-} optionFreeDef;

-typedef struct {

- const char *name;

- unsigned name_size;

- PRUint32 flag;

-} policyFlagDef;

-/*

- * This table should be merged with the SECOID table.

- */

-#define CIPHER_NAME(x) x,(sizeof(x)-1)

-static const oidValDef algOptList[] = {

- /* Curves */

- {CIPHER_NAME("PRIME192V1"),SEC_OID_ANSIX962_EC_PRIME192V1,