diff --git a/security/manager/ssl/src/SSLServerCertVerification.cpp b/security/manager/ssl/src/SSLServerCertVerification.cpp index b6a21fcc40a7..9a0153517362 100644 --- a/security/manager/ssl/src/SSLServerCertVerification.cpp +++ b/security/manager/ssl/src/SSLServerCertVerification.cpp @@ -737,9 +737,9 @@ AuthCertificate(CertVerifier& certVerifier, TransportSecurityInfo* infoObject, CERTCertificate* cert, SECItem* stapledOCSPResponse, uint32_t providerFlags, PRTime time) { - MOZ_ASSERT(infoObject); - MOZ_ASSERT(cert); - + MOZ_ASSERT(infoObject); + MOZ_ASSERT(cert); + SECStatus rv; if (stapledOCSPResponse) { @@ -789,9 +789,9 @@ AuthCertificate(CertVerifier& certVerifier, TransportSecurityInfo* infoObject, reasonsForNotFetching); } - // We want to avoid storing any intermediate cert information when browsing - // in private, transient contexts. - bool saveIntermediates = + // We want to avoid storing any intermediate cert information when browsing + // in private, transient contexts. + bool saveIntermediates = !(providerFlags & nsISocketProvider::NO_PERMANENT_STORAGE); insanity::pkix::ScopedCERTCertList certList;