New commits: commit 647821a3eeb40db25811fd8409817334668cbd2c Author: Matt Rogers <mrogers at redhat.com> Date: Mon Mar 16 14:28:34 2015 -0400 Return -1 for a CERT_GetCertTimes() failure in get_nss_cert_notafter() (this would be a time decoding error, and check_expiry considers < 0 as an invalid pubkey entry)