From: Martin Cermak <mcermak@redhat.com>
Date: Fri, 9 Aug 2024 05:40:43 +0000 (+0200)
Subject: RHEL-52491: NSS 3.101.0 compatibility
X-Git-Url: https://sourceware.org/git/?a=commitdiff_plain;h=470da664cc0afd4aac982806622dbb5d700a7904;p=systemtap.git

RHEL-52491: NSS 3.101.0 compatibility

After NSS rebased to 3.101.0, systemtap stopped being able to grant
trust to stap-server: https://issues.redhat.com/browse/RHEL-52491 .
This patch fixes it.
---

diff --git a/client-nss.cxx b/client-nss.cxx
index 55266feb7..c09f99ca9 100644
--- a/client-nss.cxx
+++ b/client-nss.cxx
@@ -184,6 +184,7 @@ badCertHandler(void *arg, PRFileDesc *sslSocket)
 
       break;
 
+    case SEC_ERROR_UNKNOWN_ISSUER:
     case SEC_ERROR_CA_CERT_INVALID:
       /* The server's certificate is not trusted. Should we trust it? */
       secStatus = SECFailure; /* Do not trust by default. */