Merge NSS_3_14_2_RTM.

mozilla/security/nss/lib/certhigh/certvfypkix.c

 /* This Source Code Form is subject to the terms of the Mozilla Public
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 /*
  * nss_pkix_proxy.h
  *
  * PKIX - NSS proxy functions
  *
  * NOTE: All structures, functions, data types are parts of library private
  * api and are subjects to change in any following releases.
@@ skipping 1693 matching lines @@
             if (!chainVerifyCallback || !chainVerifyCallback->isChainValid) {
                 PORT_SetError(errCode);
                 r = SECFailure;
                 break;
             }
 
             nssContext->chainVerifyCallback = *chainVerifyCallback;
         }
         break;
 
+        case cert_pi_useOnlyTrustAnchors:
+            error =
+                PKIX_ProcessingParams_SetUseOnlyTrustAnchors(procParams,
+                                      (PRBool)(param->value.scalar.b != 0),
+                                                             plContext);
+            break;
+
         default:
             PORT_SetError(errCode);
             r = SECFailure;
             break;
     }
 
     if (policyOIDList != NULL)
         PKIX_PL_Object_DecRef((PKIX_PL_Object *)policyOIDList, plContext);
 
     if (date != NULL) 
@@ skipping 585 matching lines @@
     
 } while (errorGenerated);
 
     runningLeakTest = PKIX_FALSE; 
     PR_ATOMIC_DECREMENT(&parallelFnInvocationCount);
     usePKIXValidationEngine = savedUsePkixEngFlag;
 #endif /* PKIX_OBJECT_LEAK_TEST */
 
     return r;
 }