Fix 169798: Failed to install ca signing certificate with NS3.6beta.

r=wtc

security/nss/lib/certhigh/certhigh.c

@@ -890,14 +890,19 @@ cert_ImportCAChain(SECItem *certs, int numcerts, SECCertUsage certUsage, PRBool
 	    goto loser;
 	}
 	
-	/* get a default nickname for it */
+	/* if the cert is temp, make it perm; otherwise we're done */
-	nickname = CERT_MakeCANickname(cert);
+	if (cert->istemp) {
+	    /* get a default nickname for it */
+	    nickname = CERT_MakeCANickname(cert);
 
-	rv = CERT_AddTempCertToPerm(cert, nickname, &trust);
+	    rv = CERT_AddTempCertToPerm(cert, nickname, &trust);
 
-	/* free the nickname */
+	    /* free the nickname */
-	if ( nickname ) {
+	    if ( nickname ) {
-	    PORT_Free(nickname);
+		PORT_Free(nickname);
+	    }
+	} else {
+	    rv = SECSuccess;
 	}
 
 	CERT_DestroyCertificate(cert);