1. Find out where error messages can be clarified or enhanced with additional details.
2. Fix incorrectly narrow error messages.
3. Where returning too many details through the API is undesired, print error details through the Chrome's logging.
As an example for #1, we should probably replace errors like "net::ERR_CERT_INVALID" with more readable messages.
Example for #2 and #3: chrome.enterprise.platformKeys.importCertificate() currently fails with unclear "net::ERR_CERT_INVALID" when a cert with the same issuer and serial number already exists. As there are concerns about returning such details through API errors, we should make the API error more generic, but print the specific NSS error code to the console.
Comment 1 by zalcorn@chromium.org
, Sep 28