Use NSS to generate Origin-Bound Certs on Win and Mac.

net/base/x509_certificate_mac.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/x509_certificate.h"
 
 #include <CommonCrypto/CommonDigest.h>
 #include <CoreServices/CoreServices.h>
 #include <Security/Security.h>
 #include <time.h>
@@ skipping 677 matching lines @@
                                    encCert->CertEncoding, &certificate_ref);
   if (os_status != 0) {
     DLOG(ERROR) << "SecCertificateCreateFromData failed: " << os_status;
     return NULL;
   }
   scoped_cert.reset(certificate_ref);
 
   return CreateFromHandle(scoped_cert, X509Certificate::OSCertHandles());
 }
 
-// static
-X509Certificate* X509Certificate::CreateOriginBound(
-    crypto::RSAPrivateKey* key,
-    const std::string& origin,
-    uint32 serial_number,
-    base::TimeDelta valid_duration) {
-  // TODO(wtc): this cannot be implemented by creating a CE_DataAndType for
-  // the origin-bound extension and adding it to certReq.extensions because
-  // it is not one of the supported extensions in the CE_DataType enum type.
-  // Using the DT_Other enum constant does not work.
-  //
-  // The relevant Apple headers are:
-  // - CSSM_APPLE_TP_CERT_REQUEST is defined in cssmapple.h.
-  // - CE_DataAndType, CE_DataType, and CE_Data are defined in
-  //   certextensions.h.
-  NOTIMPLEMENTED();
-  return NULL;
-}
-
 void X509Certificate::GetSubjectAltName(
     std::vector<std::string>* dns_names,
     std::vector<std::string>* ip_addrs) const {
   if (dns_names)
     dns_names->clear();
   if (ip_addrs)
     ip_addrs->clear();
 
   CSSMFields fields;
   OSStatus status = GetCertFields(cert_handle_, &fields);
@@ skipping 631 matching lines @@
   CSSM_DATA cert_data;
   OSStatus status = SecCertificateGetData(cert_handle, &cert_data);
   if (status)
     return false;
 
   return pickle->WriteData(reinterpret_cast<char*>(cert_data.Data),
                            cert_data.Length);
 }
 
 }  // namespace net