concerned about certificate policy (i.e., the user-initial-policy-set
contains the special value any-policy as defined in RFC 5280 Sec. 6.1.1).
Map PKIX_FUNCTIONMUSTNOTBEUSED to SEC_ERROR_LIBPKIX_INTERNAL instead of
SEC_ERROR_INVALID_ARGS. Add PKIX_PRECONDITIONFAILED, and add a
precondition check to pkix_PolicyChecker_CalculateIntersection. Fix an
input argument check in pkix_PolicyChecker_PolicyMapProcessing. Add three
new test cases. r=alexei.
Modified Files:
lib/certdb/certt.h lib/certhigh/certvfypkix.c
lib/libpkix/include/pkix_errorstrings.h
lib/libpkix/pkix/checker/pkix_policychecker.c
tests/chains/scenarios/anypolicywithlevel.cfg
git-svn-id: svn://10.0.0.236/trunk@260480 18797224-902f-48f8-a5cc-f745e15eee43