Fix for bug 385946 . Can't import certificate into cert database in FIPS mode (certutil) . r=rrelyea

security/nss/cmd/certutil/certutil.c

@@ -177,7 +177,7 @@ AddCert(PK11SlotInfo *slot, CERTCertDBHandle *handle, char *name, char *trusts,
 	    GEN_BREAK(SECFailure);
 	}
 
-	if (!PK11_IsFriendly(slot)) {
+	if (PK11_IsFIPS() || !PK11_IsInternal(slot)) {
 	    rv = PK11_Authenticate(slot, PR_TRUE, pwdata);
 	    if (rv != SECSuccess) {
 		SECU_PrintError(progName, "could not authenticate to token or database");