If the server's CertificateRequest message contains an empty certificate_authorities list, it means client certificates issued by any CA are acceptable.  NSS_CmpCertChainWCANames returns SECFailure in that case, so we need to test for that case.
If the server's CertificateRequest message contains an empty
certificate_authorities list, it means client certificates issued by
any CA are acceptable.  NSS_CmpCertChainWCANames returns SECFailure
in that case, so we need to test for that case.

Improve error code mapping.

Add a comment to note new NSS functions we can use in the future, and
add a missing LeaveFunction call.

R=agl
BUG=16830
TEST=Visit a server that sends a CertificateRequest message with an
empty certificate_authorities list.  The client certificate selection
dialog should pop up with all client certificates shown as eligible.
Review URL: http://codereview.chromium.org/1589034

git-svn-id: de016e52bd170d2d4f2344f9bf92d50478b649e0@44442 0039d316-1c4b-4281-b951-d872f2087c98

gavinp/chromium,gavinp/chromium,gavinp/chromium,yitian134/chromium,gavinp/chromium,gavinp/chromium,yitian134/chromium,yitian134/chromium,gavinp/chromium,gavinp/chromium,adobe/chromium,ropik/chromium,Crystalnix/house-of-life-chromium,yitian134/chromium,yitian134/chromium,Crystalnix/house-of-life-chromium,Crystalnix/house-of-life-chromium,Crystalnix/house-of-life-chromium,ropik/chromium,ropik/chromium,adobe/chromium,ropik/chromium,Crystalnix/house-of-life-chromium,adobe/chromium,yitian134/chromium,ropik/chromium,ropik/chromium,adobe/chromium,Crystalnix/house-of-life-chromium,adobe/chromium,gavinp/chromium,Crystalnix/house-of-life-chromium,adobe/chromium,gavinp/chromium,yitian134/chromium,Crystalnix/house-of-life-chromium,adobe/chromium,ropik/chromium,yitian134/chromium,gavinp/chromium,ropik/chromium,ropik/chromium,Crystalnix/house-of-life-chromium,adobe/chromium,yitian134/chromium,yitian134/chromium,Crystalnix/house-of-life-chromium,Crystalnix/house-of-life-chromium,adobe/chromium,adobe/chromium,adobe/chromium