Fix crash in unit tests.

Only test pinning for self-signed certs.

Fix sanity check for cupsSaveCredentials (copy/paste error)

Author: michaelrsweet

cups/request.c

@@ -902,14 +902,14 @@ _cupsSetHTTPError(http_t        *http,	// I - HTTP connection
 {
   switch (status)
   {
+    case HTTP_STATUS_NOT_MODIFIED :
+        _cupsSetError(IPP_STATUS_OK_EVENTS_COMPLETE, httpStatusString(status), false);
+        break;
+
     case HTTP_STATUS_NOT_FOUND :
 	_cupsSetError(IPP_STATUS_ERROR_NOT_FOUND, httpStatusString(status), false);
 	break;
 
-    case HTTP_STATUS_NOT_MODIFIED :
-	_cupsSetError(IPP_STATUS_OK_EVENTS_COMPLETE, httpStatusString(status), false);
-	break;
-
     case HTTP_STATUS_UNAUTHORIZED :
 	_cupsSetError(IPP_STATUS_ERROR_NOT_AUTHENTICATED, httpStatusString(status), false);
 	break;

cups/tls-gnutls.c

@@ -829,7 +829,7 @@ cupsGetCredentialsTrust(
   }
 
   // Look this common name up in the default keychains...
-  if ((tcreds = cupsCopyCredentials(path, common_name)) != NULL)
+  if (num_certs == 1 && (tcreds = cupsCopyCredentials(path, common_name)) != NULL)
   {
     char	credentials_str[1024],	// String for incoming credentials
 		tcreds_str[1024];	// String for saved credentials

cups/tls-openssl.c

@@ -890,7 +890,7 @@ cupsGetCredentialsTrust(
   }
 
   // Look this common name up in the default keychains...
-  if ((tcreds = cupsCopyCredentials(path, common_name)) != NULL)
+  if (sk_X509_num(certs) == 1 && (tcreds = cupsCopyCredentials(path, common_name)) != NULL)
   {
     char	credentials_str[1024],	// String for incoming credentials
 		tcreds_str[1024];	// String for saved credentials

cups/tls.c

@@ -140,7 +140,7 @@ cupsSaveCredentials(
   if (credentials)
   {
     // Make sure it looks like a PEM-encoded cert...
-    if (strncmp(credentials, "-----BEGIN CERTIFICATE-----", 27) || strstr(key, "-----END CERTIFICATE-----") == NULL)
+    if (strncmp(credentials, "-----BEGIN CERTIFICATE-----", 27) || strstr(credentials, "-----END CERTIFICATE-----") == NULL)
       return (false);
   }