Index: mozilla/security/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_cert.c |
=================================================================== |
--- mozilla/security/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_cert.c (revision 180567) |
+++ mozilla/security/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_cert.c (working copy) |
@@ -3315,7 +3315,7 @@ |
PKIX_ERROR(PKIX_CERTISCERTTRUSTEDFAILED); |
} |
- if (trustOnlyUserAnchors) { |
+ if (trustOnlyUserAnchors || cert->isUserTrustAnchor) { |
/* discard our |trusted| value since we are using the anchors */ |
*pTrusted = cert->isUserTrustAnchor; |
goto cleanup; |