b29c7e504c
The PSM client certificate PKCS#11 modules can take some time to return from function calls like C_FindObjects* (because they involve synchronous dispatch to another thread or process). When determining the trust for a certificate, NSS will query all modules. Querying the PSM modules for trust is just a waste of time, so this patch makes them return early if NSS is looking for attributes that are irrelevant to their functionality. Differential Revision: https://phabricator.services.mozilla.com/D218582