Fix nsssysinit to enable applications to use the system database (#546221)
This commit is contained in:
parent
a98531146e
commit
cb110c36cc
|
@ -0,0 +1,92 @@
|
|||
diff -up nss-3.12.5/mozilla/security/nss/lib/sysinit/nsssysinit.c.546221 nss-3.12.5/mozilla/security/nss/lib/sysinit/nsssysinit.c
|
||||
--- nss-3.12.5/mozilla/security/nss/lib/sysinit/nsssysinit.c.546221 2009-12-18 10:48:35.969726219 -0800
|
||||
+++ nss-3.12.5/mozilla/security/nss/lib/sysinit/nsssysinit.c 2009-12-18 10:51:05.866851066 -0800
|
||||
@@ -54,6 +54,8 @@
|
||||
#ifdef XP_UNIX
|
||||
#include <sys/stat.h>
|
||||
#include <sys/types.h>
|
||||
+#include <stdio.h>
|
||||
+#include <stdarg.h>
|
||||
|
||||
static int
|
||||
testdir(char *dir)
|
||||
@@ -208,8 +210,8 @@ askpw=any timeout=30 ] } ";
|
||||
static char **
|
||||
get_list(char *filename, char *stripped_parameters)
|
||||
{
|
||||
- char **module_list = PORT_ZNewArray(char *, 4);
|
||||
- char *userdb;
|
||||
+ char **module_list = PORT_ZNewArray(char *, 5);
|
||||
+ char *userdb, *sysdb;
|
||||
int isFIPS = getFIPSMode();
|
||||
const char *nssflags = isFIPS ? nssDefaultFIPSFlags : nssDefaultFlags;
|
||||
int next = 0;
|
||||
@@ -219,17 +221,25 @@ get_list(char *filename, char *stripped_
|
||||
return NULL;
|
||||
}
|
||||
|
||||
- userdb = getUserDB();
|
||||
+ userdb = getSystemDB();
|
||||
+ userdb = getUserDB();
|
||||
+
|
||||
+ if (sysdb && !strcmp(filename, sysdb))
|
||||
+ filename = NULL;
|
||||
+ if (userdb && !strcmp(filename, userdb))
|
||||
+ filename = NULL;
|
||||
+
|
||||
if (userdb != NULL) {
|
||||
/* return a list of databases to open. First the user Database */
|
||||
module_list[next++] = PR_smprintf(
|
||||
"library= "
|
||||
"module=\"NSS User database\" "
|
||||
- "parameters=\"configdir='sql:%s' %s\" "
|
||||
+ "parameters=\"configdir='sql:%s' %s tokenDescription='NSS user database'\" "
|
||||
"NSS=\"%sflags=internal%s\"",
|
||||
userdb, stripped_parameters, nssflags,
|
||||
isFIPS ? ",FIPS" : "");
|
||||
|
||||
+/* fprintf(stderr, "%s\n\n", module_list[next-1]); */
|
||||
/* now open the user's defined PKCS #11 modules */
|
||||
/* skip the local user DB entry */
|
||||
module_list[next++] = PR_smprintf(
|
||||
@@ -238,19 +248,35 @@ get_list(char *filename, char *stripped_
|
||||
"parameters=\"configdir='sql:%s' %s\" "
|
||||
"NSS=\"flags=internal,moduleDBOnly,defaultModDB,skipFirst\"",
|
||||
userdb, stripped_parameters);
|
||||
+/* fprintf(stderr, "%s\n\n", module_list[next-1]); */
|
||||
}
|
||||
|
||||
+ if (filename && 0 /* This doesn't actually work. If we register
|
||||
+ both this and the sysdb (in either order)
|
||||
+ then only one of them actually shows up */) {
|
||||
+ module_list[next++] = PR_smprintf(
|
||||
+ "library= "
|
||||
+ "module=\"NSS database\" "
|
||||
+ "parameters=\"configdir='sql:%s' tokenDescription='NSS database sql:%s'\" "
|
||||
+ "NSS=\"%sflags=internal\"",filename, filename, nssflags);
|
||||
+ fprintf(stderr, "%s\n\n", module_list[next-1]);
|
||||
+ }
|
||||
+
|
||||
/* now the system database (always read only) */
|
||||
- module_list[next++] = PR_smprintf(
|
||||
- "library= "
|
||||
- "module=\"NSS system database\" "
|
||||
- "parameters=\"configdir='sql:%s' tokenDescription='NSS system database' flags=readonly\" "
|
||||
- "NSS=\"%sflags=internal,critical\"",filename, nssDefaultFlags);
|
||||
+ if (sysdb) {
|
||||
+ module_list[next++] = PR_smprintf(
|
||||
+ "library= "
|
||||
+ "module=\"NSS system database\" "
|
||||
+ "parameters=\"configdir='sql:%s' tokenDescription='NSS system database' flags=readonly\" "
|
||||
+ "NSS=\"%sflags=internal,critical\"",sysdb, nssflags);
|
||||
+ fprintf(stderr, "%s\n\n", module_list[next-1]);
|
||||
+ }
|
||||
|
||||
/* that was the last module */
|
||||
module_list[next] = 0;
|
||||
|
||||
PORT_Free(userdb);
|
||||
+ PORT_Free(sysdb);
|
||||
|
||||
return module_list;
|
||||
}
|
Loading…
Reference in New Issue