commit 470da664cc0afd4aac982806622dbb5d700a7904
Author: Martin Cermak <mcermak@redhat.com>
Date:   Fri Aug 9 07:40:43 2024 +0200

    RHEL-52491: NSS 3.101.0 compatibility
    
    After NSS rebased to 3.101.0, systemtap stopped being able to grant
    trust to stap-server: https://issues.redhat.com/browse/RHEL-52491 .
    This patch fixes it.

diff --git a/client-nss.cxx b/client-nss.cxx
index 55266feb7..c09f99ca9 100644
--- a/client-nss.cxx
+++ b/client-nss.cxx
@@ -184,6 +184,7 @@ badCertHandler(void *arg, PRFileDesc *sslSocket)
 
       break;
 
+    case SEC_ERROR_UNKNOWN_ISSUER:
     case SEC_ERROR_CA_CERT_INVALID:
       /* The server's certificate is not trusted. Should we trust it? */
       secStatus = SECFailure; /* Do not trust by default. */