Added CreateOriginBound method to x509_certificate.h.

net/base/x509_certificate_mac.cc

Index: net/base/x509_certificate_mac.cc
diff --git a/net/base/x509_certificate_mac.cc b/net/base/x509_certificate_mac.cc
index 9b39de677f25526261e8fd898362246c0d4d75c9..014d51acbcb1d6b27a9129c4b66713d168abc8e3 100644
--- a/net/base/x509_certificate_mac.cc
+++ b/net/base/x509_certificate_mac.cc
@@ -695,6 +695,25 @@ X509Certificate* X509Certificate::CreateSelfSigned(
   return CreateFromHandle(scoped_cert, X509Certificate::OSCertHandles());
 }
 
+// static
+X509Certificate* X509Certificate::CreateOriginBound(
+    crypto::RSAPrivateKey* key,
+    const std::string& origin,
+    uint32 serial_number,
+    base::TimeDelta valid_duration) {
+  // TODO(wtc): this cannot be implemented by creating a CE_DataAndType for
+  // the origin-bound extension and adding it to certReq.extensions because
+  // it is not one of the supported extensions in the CE_DataType enum type.
+  // Using the DT_Other enum constant does not work.
+  //
+  // The relevant Apple headers are:
+  // - CSSM_APPLE_TP_CERT_REQUEST is defined in cssmapple.h.
+  // - CE_DataAndType, CE_DataType, and CE_Data are defined in
+  //   certextensions.h.
+  NOTIMPLEMENTED();
+  return NULL;
+}
+
 void X509Certificate::GetSubjectAltName(
     std::vector<std::string>* dns_names,
     std::vector<std::string>* ip_addrs) const {