If the server's CertificateRequest message contains an empty certificate_authorities list, it means client certificates issued by any CA are acceptable.  NSS_CmpCertChainWCANames returns SECFailure in that case, so we need to test for that case.
If the server's CertificateRequest message contains an empty
certificate_authorities list, it means client certificates issued by
any CA are acceptable.  NSS_CmpCertChainWCANames returns SECFailure
in that case, so we need to test for that case.

Improve error code mapping.

Add a comment to note new NSS functions we can use in the future, and
add a missing LeaveFunction call.

R=agl
BUG=16830
TEST=Visit a server that sends a CertificateRequest message with an
empty certificate_authorities list.  The client certificate selection
dialog should pop up with all client certificates shown as eligible.
Review URL: http://codereview.chromium.org/1589034

git-svn-id: dd90618784b6a4b323ea0c23a071cb1c9e6f2ac7@44442 4ff67af0-8c30-449e-8e8b-ad334ec8d88c

wistoch/meego-app-browser,wistoch/meego-app-browser,wistoch/meego-app-browser,wistoch/meego-app-browser,wistoch/meego-app-browser,wistoch/meego-app-browser,wistoch/meego-app-browser,wistoch/meego-app-browser,wistoch/meego-app-browser,wistoch/meego-app-browser