if (cert == NULL) { cert = PK11_FindCertFromNickname(statusContext->defaultResponderNickname, NULL); }
CERT_EnableOCSPDefaultResponder(CERTCertDBHandle *handle){    ocspCheckingContext *statusContext;    CERTCertificate *cert;    if (handle == NULL) {	PORT_SetError(SEC_ERROR_INVALID_ARGS);	return SECFailure;    }    statusContext = ocsp_GetCheckingContext(handle);    if (statusContext == NULL) {	/*	 * Strictly speaking, the error already set is "correct",	 * but cover over it with one more helpful in this context.	 */	PORT_SetError(SEC_ERROR_OCSP_NO_DEFAULT_RESPONDER);	return SECFailure;    }    if (statusContext->defaultResponderURI == NULL) {	PORT_SetError(SEC_ERROR_OCSP_NO_DEFAULT_RESPONDER);	return SECFailure;    }    if (statusContext->defaultResponderNickname == NULL) {	PORT_SetError(SEC_ERROR_OCSP_NO_DEFAULT_RESPONDER);	return SECFailure;    }    /*     * Find the cert for the nickname.     */    cert = CERT_FindCertByNickname(handle,				   statusContext->defaultResponderNickname);    /*     * We should never have trouble finding the cert, because its     * existence should have been proven by SetOCSPDefaultResponder.     */    PORT_Assert(cert != NULL);    if (cert == NULL)	return SECFailure;    /*     * And hang onto it.     */    statusContext->defaultResponderCert = cert;    /*     * Finally, record the fact that we now have a default responder enabled.     */    statusContext->useDefaultResponder = PR_TRUE;    return SECSuccess;}