Bug 1030204 - 2/2 Tests for Name constraints for ANSSI(DCISS) Root cert in psm. r=keeler

--HG--
extra : rebase_source : 0b64f7206446a8c414df5b0f4a9653f0180b8b44

security/manager/ssl/tests/unit/test_name_constraints.js

@@ -269,4 +269,11 @@ function run_test() {
     check_cert_err_generic(cert, SEC_ERROR_CERT_NOT_IN_NAME_SPACE, certificateUsageSSLServer);
     check_cert_err_generic(cert, 0, certificateUsageSSLClient);
   }
+
+  // DCISS tests
+  // The certs used here were generated by the NSS test suite and are
+  // originally located as security/nss/tests/libpkix/cert/
+  load_cert("dcisscopy", "C,C,C");
+  check_ok(certFromFile('NameConstraints.dcissallowed.cert'));
+  check_fail(certFromFile('NameConstraints.dcissblocked.cert'));
 }