tdf#84881: Call NSS_CMSSignerInfo_AddSigningTime() only if not using a TSA

Something is still wrong, Adobe Reader still says the PDF is signed with the
local machine's timestamp, though.

Change-Id: Ic9ed3190901025be48e1de191df976e1aa454822

vcl/source/gdi/pdfwriter_impl.cxx

@@ -6987,16 +6987,15 @@ bool PDFWriterImpl::finalizeSignature()
             return false;
         }
     }
-
-    if (NSS_CMSSignerInfo_IncludeCerts(cms_signer, NSSCMSCM_CertChain, certUsageEmailSigner) != SECSuccess)
+    else if (NSS_CMSSignerInfo_AddSigningTime(cms_signer, PR_Now()) != SECSuccess)
     {
-        SAL_WARN("vcl.pdfwriter", "PDF signing: can't include cert chain.");
+        SAL_WARN("vcl.pdfwriter", "PDF signing: can't add signing time.");
         return false;
     }
 
-    if (NSS_CMSSignerInfo_AddSigningTime(cms_signer, PR_Now()) != SECSuccess)
+    if (NSS_CMSSignerInfo_IncludeCerts(cms_signer, NSSCMSCM_CertChain, certUsageEmailSigner) != SECSuccess)
     {
-        SAL_WARN("vcl.pdfwriter", "PDF signing: can't add signing time.");
+        SAL_WARN("vcl.pdfwriter", "PDF signing: can't include cert chain.");
         return false;
     }