All "Stan" functions call nss_SetError to set their Stan-style error codes into Stan's error "stack". But nss_SetError never sets the NSPR-style error code. It never calls PORT_SetError or PR_SetError. Consequently, in present NSS programs, whenever a failure occurs in any of the Stan functions, the program reports some NSPR-style error code that is unrelated to the real problem. I propose that nss_SetError should have a table to translate from Stan-style NSS error codes to the older NSPR-style error codes, and that nss_SetError should do that translation and call PORT_SetError with the translated error code.