Fix for bug 391721 . GetBestCRL does not set error code when CRL is not found or invalid. r=nelson

1 files changed, 2 insertions, 0 deletions

diff --git a/security/nss/lib/certdb/crl.c b/security/nss/lib/certdb/crl.c
index c076b070b..4ae233b18 100644
--- a/security/nss/lib/certdb/crl.c
+++ b/security/nss/lib/certdb/crl.c
@@ -2320,6 +2320,7 @@ static CERTSignedCrl* GetBestCRL(CRLDPCache* cache, PRBool entries)
     if (0 == cache->ncrls)
     {
         /* empty cache*/
+        PORT_SetError(SEC_ERROR_CRL_NOT_FOUND);
         return NULL;
     }    
 
@@ -2345,6 +2346,7 @@ static CERTSignedCrl* GetBestCRL(CRLDPCache* cache, PRBool entries)
         }
     }
 
+    PORT_SetError(SEC_ERROR_CRL_NOT_FOUND);
     return NULL;
 }