Added CreateOriginBound method to x509_certificate.h.

net/base/origin_bound_cert_service.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/origin_bound_cert_service.h"
 
 #include <limits>
 
 #include "base/compiler_specific.h"
 #include "base/logging.h"
@@ skipping 298 matching lines @@
   job->AddRequest(request);
   *out_req = request;
   return ERR_IO_PENDING;
 }
 
 // static
 int OriginBoundCertService::GenerateCert(const std::string& origin,
                                          uint32 serial_number,
                                          std::string* private_key,
                                          std::string* cert) {
-  std::string subject = "CN=OBC";
   scoped_ptr<crypto::RSAPrivateKey> key(
       crypto::RSAPrivateKey::Create(kKeySizeInBits));
   if (!key.get()) {
     LOG(WARNING) << "Unable to create key pair for client";
     return ERR_KEY_GENERATION_FAILED;
   }
 
-  scoped_refptr<X509Certificate> x509_cert = X509Certificate::CreateSelfSigned(
+  scoped_refptr<X509Certificate> x509_cert = X509Certificate::CreateOriginBound(
       key.get(),
-      subject,
+      origin,
       serial_number,
       base::TimeDelta::FromDays(kValidityPeriodInDays));

[wtc, 2011/08/24 01:39:42]

This fails on Windows, etc. because X509Certificate::CreateOriginBound()
is not implemented.

For now, we need to use ifdef:

#if defined(USE_NSS)
  scoped_refptr<X509Certificate> x509_cert = X509Certificate::CreateOriginBound(
      key.get(),
      origin,
      serial_number,
      base::TimeDelta::FromDays(kValidityPeriodInDays));
#else
  scoped_refptr<X509Certificate> x509_cert = X509Certificate::CreateSelfSigned(
      key.get(),
      "CN=anonymous.invalid",
      serial_number,
      base::TimeDelta::FromDays(kValidityPeriodInDays));
#endif

Alternatively, the stub implementations of CreateOriginBound
can call CreateSelfSigned("CN=anonymous.invalid") instead of
returning NULL.

   if (!x509_cert) {
     LOG(WARNING) << "Unable to create x509 cert for client";
     return ERR_ORIGIN_BOUND_CERT_GENERATION_FAILED;
   }
 
   std::vector<uint8> private_key_info;
   if (!key->ExportPrivateKey(&private_key_info)) {
     LOG(WARNING) << "Unable to export private key";
     return ERR_PRIVATE_KEY_EXPORT_FAILED;
   }
@@ skipping 42 matching lines @@
   delete job;
 }
 
 int OriginBoundCertService::cert_count() {
   return origin_bound_cert_store_->GetCertCount();
 }
 
 }  // namespace net
 
 DISABLE_RUNNABLE_METHOD_REFCOUNT(net::OriginBoundCertServiceWorker);