Add client-side support for the origin bound certificate TLS extension.

net/third_party/nss/ssl/sslt.h

Index: net/third_party/nss/ssl/sslt.h
===================================================================
--- net/third_party/nss/ssl/sslt.h	(revision 91902)
+++ net/third_party/nss/ssl/sslt.h	(working copy)
@@ -206,9 +206,10 @@
     ssl_session_ticket_xtn           = 35,
     ssl_next_proto_neg_xtn           = 13172,
     ssl_cached_info_xtn              = 13173,
-    ssl_renegotiation_info_xtn       = 0xff01	/* experimental number */
+    ssl_renegotiation_info_xtn       = 0xff01,	/* experimental number */
+    ssl_ob_cert_xtn                  = 0xff0f	/* experimental number */

[agl, 2011/07/13 21:48:29]

There are no specifically reserved extension numbers so I'd be tempted to carry
on allocating around 13172, as we have done before. 13175 is the next one.

[rkn, 2011/07/13 21:57:24]

The number 0xff0f was specified here
<http://balfanz.github.com/tls-obc-spec/draft-balfanz-tls-obc-00.html>, though
I'm not sure what the rationale was.

[agl, 2011/07/13 22:01:38]

Probably picked out of the air, but then so was 13172 :)

Fine to go with 0xff0f since it's in the draft spec.

 } SSLExtensionType;
 
-#define SSL_MAX_EXTENSIONS             8
+#define SSL_MAX_EXTENSIONS             9
 
 #endif /* __sslt_h_ */