if (ss->useSecurity && ss->firstHsDone) {
if (ss->opt.useSecurity && ss->firstHsDone) {
SSL_SecurityStatus(PRFileDesc *fd, int *op, char **cp, int *kp0, int *kp1,		   char **ip, char **sp){    sslSocket *ss;    const char *cipherName;    PRBool isDes = PR_FALSE;    ss = ssl_FindSocket(fd);    if (!ss) {	SSL_DBG(("%d: SSL[%d]: bad socket in SecurityStatus",		 SSL_GETPID(), fd));	return SECFailure;    }    if (cp) *cp = 0;    if (kp0) *kp0 = 0;    if (kp1) *kp1 = 0;    if (ip) *ip = 0;    if (sp) *sp = 0;    if (op) {	*op = SSL_SECURITY_STATUS_OFF;    }    if (ss->useSecurity && ss->firstHsDone) {	if (ss->version < SSL_LIBRARY_VERSION_3_0) {	    cipherName = ssl_cipherName[ss->sec.cipherType];	} else {	    cipherName = ssl3_cipherName[ss->sec.cipherType];	}	if (cipherName && PORT_Strstr(cipherName, "DES")) isDes = PR_TRUE;	if (cp) {	    *cp = PORT_Strdup(cipherName);	}	if (kp0) {	    *kp0 = ss->sec.keyBits;	    if (isDes) *kp0 = (*kp0 * 7) / 8;	}	if (kp1) {	    *kp1 = ss->sec.secretKeyBits;	    if (isDes) *kp1 = (*kp1 * 7) / 8;	}	if (op) {	    if (ss->sec.keyBits == 0) {		*op = SSL_SECURITY_STATUS_OFF;	    } else if (ss->sec.secretKeyBits < 90) {		*op = SSL_SECURITY_STATUS_ON_LOW;	    } else {		*op = SSL_SECURITY_STATUS_ON_HIGH;	    }	}	if (ip || sp) {	    CERTCertificate *cert;	    cert = ss->sec.peerCert;	    if (cert) {		if (ip) {		    *ip = CERT_NameToAscii(&cert->issuer);		}		if (sp) {		    *sp = CERT_NameToAscii(&cert->subject);		}	    } else {		if (ip) {		    *ip = PORT_Strdup("no certificate");		}		if (sp) {		    *sp = PORT_Strdup("no certificate");		}	    }	}    }    return SECSuccess;}