NameLast modifiedSizeDescription
Parent Directory  -  
0136-we-don-t-need-to-explicitly-include-this-either.patch2011-09-08 20:30 733  
0029-secret-key-lists-take-ownership-too.patch2010-09-30 17:31 809  
0084-clear-the-file-buffer-at-the-start.patch2010-10-29 20:09 832  
0105-strictly-speaking.patch2010-11-02 22:36 854  
0015-these-don-t-include-any-commonly-used-KDC-EKUs.patch2010-09-28 19:48 886  
0063-unbreak-client-the-DH-derivation.patch2010-10-21 01:41 909  
0091-don-t-leak-our-cert.patch2010-11-01 19:22 915  
0122-handle-being-cleaned-up-during-a-failed-initializati.patch2011-06-03 14:48 917  
0119-yeah-that-actually-is-all-there-is.patch2011-06-01 14:40 931  
0023-copy-name-components-correctly.patch2010-09-29 20:17 950  
0112-debug-log-what-happened-with-the-CRLs.patch2010-11-09 05:05 1.0K 
0034-ensure-that-when-we-encode-a-bit-string-the-length-i.patch2010-09-30 20:50 1.0K 
0099-fix-scanning-of-pkcs11-slots.patch2010-11-01 23:07 1.0K 
0094-minor-memory-leak.patch2010-11-01 20:00 1.0K 
0050-check-for-and-warn-about-empty-encapsulated-content.patch2010-10-12 22:34 1.0K 
0146-hedge-against-self-signed-not-trusted-roots-being-re.patch2011-09-28 21:02 1.1K 
0033-add-get_oid_from_tag-shorthand.patch2010-09-30 19:55 1.1K 
0128-handle-PEM-encoded-files-where-the-PEM-item-is-prece.patch2011-09-02 03:12 1.1K 
0026-stub-out-load_ca-and-free_cert_info.patch2010-09-29 21:02 1.2K 
0149-make-some-guesses-about-the-PEM-reader-module-s-name.patch2011-10-10 21:02 1.2K 
0125-handle-cases-where-we-re-not-told-the-nickname.patch2011-06-27 20:24 1.2K 
0129-load-NSS-anchors-correctly.patch2011-09-06 18:36 1.2K 
0124-update-the-comment-about-keyUsagePresent.patch2011-06-10 18:25 1.2K 
0020-first-pass-at-selecting-the-default-cert.patch2010-09-29 16:02 1.2K 
0120-don-t-call-tempnam-more-than-TMP_MAX-times.patch2011-06-01 14:41 1.3K 
0069-log-when-we-fail-to-load-a-pkcs11-module.patch2010-10-26 04:45 1.3K 
0116-log-a-better-error-when-signed-then-enveloped-doesn-.patch2010-12-02 20:41 1.3K 
0093-remove-some-unused-references-to-the-default-certdb.patch2010-11-01 19:40 1.3K 
0066-don-t-need-to-keep-a-slot-list-around.patch2010-10-26 03:39 1.3K 
0073-don-t-forget-to-log-in-to-pkcs11-modules.patch2010-10-27 13:02 1.3K 
0082-more-of-trying-to-fix-reinitialize.patch2010-10-28 05:02 1.3K 
0024-fix-decoding-of-UPN-values-in-certs.patch2010-09-29 20:20 1.3K 
0145-tell-NSS-not-to-load-any-certs-or-modules-by-default.patch2011-09-26 22:43 1.4K 
0064-tweak-docs-just-a-bit.patch2010-10-21 01:50 1.4K 
0139-use-k5_path_join-instead-of-constructing-pathnames-f.patch2011-09-12 19:45 1.4K 
0005-a-couple-of-ordering-tweaks.patch2010-09-27 23:21 1.4K 
0132-map-a-few-more-error-codes.patch2011-09-06 19:54 1.4K 
0081-try-to-do-a-clean-unload.patch2010-10-28 05:01 1.4K 
0003-import-structure-definition-and-encoding-template-fo.patch2010-09-27 23:13 1.4K 
0004-assuming-we-end-up-with-the-KDC-s-cert-in-id-cert-im.patch2010-09-27 23:18 1.5K 
0087-try-to-clean-up-the-duplicate-detection-here-stop-tr.patch2010-11-01 16:30 1.7K 
0074-bail-on-loading-files-if-we-failed-to-load-nsspem.patch2010-10-27 13:08 1.7K 
0065-we-don-t-embed-the-signed-data-here-use-the-right-OI.patch2010-10-21 18:42 1.7K 
0030-some-more-debug-logging.patch2010-09-30 19:12 1.8K 
0085-try-to-print-a-debug-error-before-bailing.patch2010-10-29 21:53 1.8K 
0072-nickname-a-pkcs11-module-with-a-namespace.patch2010-10-26 22:13 1.9K 
0113-correct-some-whitespace.patch2010-11-16 22:02 2.0K 
0032-NSS-won-t-accept-a-requested-DH-prime-size-8-1024-bi.patch2010-09-30 19:32 2.0K 
0133-check-the-error-code-rather-than-status-don-t-dump-t.patch2011-09-06 20:20 2.0K 
0080-don-t-fail-to-init-the-context-the-first-time-or-lat.patch2010-10-28 04:57 2.1K 
0046-notes-for-later.patch2010-10-05 02:37 2.1K 
0092-note-the-error-when-we-fail-to-load-a-key-or-cert-fr.patch2010-11-01 19:32 2.2K 
0006-first-cut-at-create_krb5_supportedCMSTypes.patch2010-09-28 00:05 2.2K 
0115-get-the-server-half-of-anonymous-going-now.patch2010-12-02 20:37 2.2K 
0121-turn-on-OCSP-checking-and-try-to-use-the-require_crl.patch2011-06-03 14:46 2.3K 
0045-more-template-consolidation.patch2010-10-05 02:31 2.3K 
0041-first-cut-at-implementing-pkinit_create_td_invalid_c.patch2010-10-05 00:02 2.3K 
0062-tweak-cert-selection-a-bit-more.patch2010-10-21 01:37 2.4K 
0021-implement-pkinit_check_kdc_pkid.patch2010-09-29 18:05 2.5K 
0061-if-we-have-more-than-one-potential-kdc-cert-at-least.patch2010-10-21 01:17 2.7K 
0148-try-to-use-DYNOBJEXT-to-pass-the-right-variation-on-.patch2011-10-10 18:49 2.7K 
0141-zap-some-things-we-were-just-clearing-before.patch2011-09-12 20:12 2.8K 
0140-finish-switching-to-k5_path_join-don-t-try-to-remove.patch2011-09-12 20:05 2.8K 
0111-first-cut-at-caching-CRLs.patch2010-11-09 04:23 2.8K 
0044-move-more-templates-together.patch2010-10-05 02:27 2.9K 
0025-allow-a-cert-handle-to-live-longer-than-the-iteratio.patch2010-09-29 20:59 2.9K 
0083-this-should-add-file-based-creds-to-the-candidate-li.patch2010-10-29 18:57 3.0K 
0101-start-using-a-unique-slot-for-pkcs12-imports.patch2010-11-02 03:07 3.0K 
0098-correct-some-comments-fix-quoting-of-configDirs-i-th.patch2010-11-01 22:55 3.0K 
0097-tweak-logging.patch2010-11-01 21:13 3.0K 
0058-pass-in-the-password-callback-when-decoding-CMS-mess.patch2010-10-20 20:08 3.1K 
0002-also-check-the-algorithm-identifier-of-the-client-s-.patch2010-09-27 23:06 3.3K 
0040-try-to-check-the-encapsulated-type-when-verifying-si.patch2010-10-04 21:53 3.3K 
0096-revert-that-last-change-wasn-t-needed-after-all.patch2010-11-01 21:10 3.3K 
0012-refactor-a-bit.patch2010-09-28 03:49 3.4K 
0100-load-the-pem-slot-as-needed.patch2010-11-02 02:48 3.4K 
0052-move-turning-off-streaming-and-setting-signeddata-co.patch2010-10-13 19:44 3.4K 
0095-give-the-id-context-and-req-context-pointers-to-each.patch2010-11-01 21:00 3.4K 
0037-first-pass-at-pkinit_create_td_dh_parameters.patch2010-09-30 23:32 3.5K 
0126-fix-handling-of-pkcs12-bundles-that-don-t-have-frien.patch2011-06-28 14:26 3.6K 
0036-fill-out-OID-registrations-correctly-try-to-use-NSS_.patch2010-09-30 22:23 3.6K 
0123-try-to-unwrap-pkcs12-and-crl-blobs-while-reading-the.patch2011-06-10 16:12 3.7K 
0075-give-up-on-pkcs11-and-pkcs12-for-CAs-and-CRLs.patch2010-10-27 14:59 3.8K 
0027-clear-buffers-before-encoding-stuff-into-them.patch2010-09-29 21:15 3.8K 
0049-add-some-debug-messages-temporarily-lift-the-error-w.patch2010-10-12 22:00 3.8K 
0008-factor-out-a-little-cleanup-code.patch2010-09-28 01:29 3.9K 
0009-CA-and-CRLs-get-loaded-every-time-we-process-identit.patch2010-09-28 01:50 3.9K 
0054-don-t-wrap-the-dh-param-integer-into-a-bit-string-ha.patch2010-10-20 00:37 4.0K 
0130-handle-ws2003-style-signed-then-enveloped-OIDs.patch2011-09-06 18:36 4.1K 
0143-don-t-need-to-define-KRB5KDC_ERR_NO_ACCEPTABLE_KDF-a.patch2011-09-22 17:31 4.2K 
0055-hang-on-to-the-dh-public-key-because-we-can-t-recove.patch2010-10-20 00:50 4.3K 
0014-take-a-stab-at-verifying-signed-data.patch2010-09-28 19:17 4.3K 
0053-temporarily-disable-the-disabling-of-streaming-build.patch2010-10-13 23:41 4.3K 
0110-looks-like-we-can-remove-the-directory-before-we-imp.patch2010-11-09 04:00 4.3K 
0131-clean-up-a-diagnostic-message.patch2011-09-06 19:13 4.3K 
0068-clean-up-header-inclusion-start-on-loading-user-spec.patch2010-10-26 04:43 4.4K 
0051-encapsulate-the-raw-oid-data-just-a-bit.patch2010-10-12 22:39 4.4K 
0118-use-get-wrappers-when-we-use-templates-provided-by-N.patch2011-06-01 14:40 4.5K 
0109-password-locked-pkcs12-works-now-though-cleanup-does.patch2010-11-09 03:38 4.6K 
0018-first-pass-at-enveloped-data-decode-first-pass-at-dh.patch2010-09-28 23:21 4.6K 
0007-first-pass-at-create_krb5_trustedCertifiers.patch2010-09-28 01:14 4.7K 
0071-fix-module-initialization-oops.patch2010-10-26 21:32 4.7K 
0042-take-a-stab-at-pkinit_create_td_trusted_certifiers.patch2010-10-05 00:47 5.2K 
0056-fix-client-dh-processing-fix-octetstring2key-client-.patch2010-10-20 01:49 5.2K 
0108-clean-up-slot-token-and-cert-by-label-cert-by-id-log.patch2010-11-09 00:13 5.2K 
0089-track-generic-objects-and-clean-them-up-properly.patch2010-11-01 19:03 5.3K 
0016-implement-the-EKU-check.patch2010-09-28 19:49 5.4K 
0031-fix-encapsulated-content-info-with-a-might-not-be-su.patch2010-09-30 19:12 5.8K 
0117-count-CRLs-correctly-handle-signerInfo-less-signedDa.patch2011-06-01 14:39 5.8K 
0114-go-ahead-and-encode-the-content-info-ourselves-to-ge.patch2010-12-02 18:38 5.9K 
0067-stop-disabling-pkcs11-completely.patch2010-10-26 04:22 6.0K 
0106-initialize-a-userdb-in-a-temporary-directory-and-use.patch2010-11-08 20:37 6.2K 
0127-try-to-handle-signed-data-inside-data-inside-envelop.patch2011-06-29 22:25 6.2K 
0102-turn-on-support-for-all-of-the-pkcs12-ciphers-we-cou.patch2010-11-02 05:46 6.3K 
0028-add-some-OID-info-for-the-various-types-of-data-we-s.patch2010-09-29 22:29 6.4K 
0011-pull-some-of-the-matching-data.patch2010-09-28 03:41 6.6K 
0057-try-to-return-more-meaningful-error-codes.patch2010-10-20 02:02 6.6K 
0077-if-we-re-loading-both-a-key-and-a-cert-skip-the-cert.patch2010-10-28 02:40 6.8K 
0138-take-a-stab-at-the-algorithm-agility-KDF-refactoring.patch2011-09-12 19:44 6.8K 
0010-start-on-cert-iteration.patch2010-09-28 02:52 6.8K 
0147-return-typed-data-as-a-preauth-data-array-rather-tha.patch2011-10-05 22:20 6.8K 
0059-move-some-debug-bits-around-decode-client-supplied-d.patch2010-10-20 23:49 7.0K 
0013-first-cut-at-signing-enveloping-wrapping-for-senders.patch2010-09-28 15:34 7.1K 
0038-move-the-OID-registrations-and-data-to-be-near-the-t.patch2010-10-04 18:41 7.2K 
0076-load-pkcs11-modules-correctly-add-files-and-certs-to.patch2010-10-27 18:20 7.2K 
0088-load-CA-certs-from-slots-so-that-we-can-tell-clients.patch2010-11-01 18:34 7.3K 
0060-cache-the-client-s-domain-parameters-in-server_check.patch2010-10-21 00:23 8.0K 
0103-move-most-of-the-structure-and-template-definitions-.patch2010-11-02 21:33 8.1K 
0090-clean-up-cms-messages-that-we-create-drop-some-debug.patch2010-11-01 19:16 8.8K 
0022-allocate-contexts-of-the-right-size-correctly-check-.patch2010-09-29 20:15 9.2K 
0039-first-cut-at-pkinit_process_td_dh_params-add-initial.patch2010-10-04 21:30 9.4K 
0086-if-we-fail-to-load-the-pem-module-don-t-try-to-refre.patch2010-11-01 16:24 9.7K 
0107-screen-slot-and-certificate-names-start-working-on-p.patch2010-11-08 23:03 10K 
0150-stop-guessing-about-library-names-and-just-use-PR_Ge.patch2011-10-12 21:16 11K 
0019-note-the-places-where-we-ll-have-to-carry-a-callback.patch2010-09-29 15:39 11K 
0142-define-KRB5KDC_ERR_NO_ACCEPTABLE_KDF-if-it-isn-t-def.patch2011-09-19 18:07 11K 
0078-also-open-a-certdb-when-we-look-at-a-directory-stop-.patch2010-10-28 04:42 11K 
0144-do-a-precheck-to-make-require_crl_checking-work-as-e.patch2011-09-26 22:23 11K 
0017-give-cert_select-a-body-fill-in-bits-that-parse-and-.patch2010-09-28 22:03 11K 
0070-rework-part-of-the-logic-for-loading-external-keys-a.patch2010-10-26 21:20 12K 
0079-use-a-helper-to-load-keys-from-a-certdb-or-a-pkcs11-.patch2010-10-28 04:49 12K 
0104-comments.patch2010-11-02 22:24 14K 
0035-use-pre-built-dh-parameter-sets.patch2010-09-30 22:07 15K 
0048-the-enveloped-data-routines-actually-need-to-process.patch2010-10-12 21:20 16K 
0047-thread-password-prompts-through-the-places-they-need.patch2010-10-06 01:30 21K 
0043-try-to-group-the-encoding-templates-in-one-area-don-.patch2010-10-05 02:21 22K 
0001-rough-mostly-returns-ENOSYS-NSS-version.patch2010-09-27 22:52 29K 
0135-whitespace-cleanups.patch2011-09-08 20:23 40K 
0137-remove-most-of-the-braces-that-aren-t-strictly-neces.patch2011-09-08 21:57 62K 
patches.tar.gz2011-10-12 21:25 195K 
0134-the-big-reformat.patch2011-09-08 00:58 303K