77662 - change secvfy to take signature at the beginning

Status: RESOLVED FIXED

(NSS :: Libraries, enhancement, P1)

Description

[Jamie Nicolson]

JSS hacked secvfy to take the signature when creating the context, instead of
at  the end of the operation. This requires changing the context struct to
include the signature. The code to do this already exists and works in
mozilla/security/jss/org/mozilla/jss/hclhacks/secvfy.c.

Comment 1

[Robert Relyea]

OK I've made the following changes:
1) VFY_CreateContext now accepts a NULL value for the sig argument. If you
specify a NULL sig, you must specify the signature at the VFY_End time.
2) a new function was added called VFY_EndWithSignature() which takes both a
context and a signature argument. Again, you can pass NULL, but if you pass NULL
to both VFY_CreateContext and VFY_EndWithSignature() then the latter will fail
with 'INVALID PARAMETERS'. VFY_End() simply calls VFY_EndWithSignature() passing
a NULL signature.

bob

Comment 2

[Wan-Teh Chang]

Is this fixed?

Comment 3

[Robert Relyea]

yes, I remember fixing this one specifically.

bob