Use NSS to generate Origin-Bound Certs on Win and Mac.

net/base/net_error_list.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file intentionally does not have header guards, it's included
 // inside a macro to generate enum.
 
 // This file contains the list of network errors.
 
 //
@@ skipping 595 matching lines @@
 
 // Key generation failed.
 NET_ERROR(KEY_GENERATION_FAILED, -710)
 
 // Origin-bound certificate generation failed.
 NET_ERROR(ORIGIN_BOUND_CERT_GENERATION_FAILED, -711)
 
 // Failure to export private key.
 NET_ERROR(PRIVATE_KEY_EXPORT_FAILED, -712)
 
-// Failure to get certificate bytes.
-NET_ERROR(GET_CERT_BYTES_FAILED, -713)

[wtc, 2011/10/17 23:14:31]

In general we can't remove an error code without reserving
the code value (to avoid confusion in bug reports, for example).

Since this was only used by code disabled by default, this
is OK.

-
 // DNS error codes.
 
 // DNS resolver received a malformed response.
 NET_ERROR(DNS_MALFORMED_RESPONSE, -800)
 
 // DNS server requires TCP
 NET_ERROR(DNS_SERVER_REQUIRES_TCP, -801)
 
 // DNS server failed.  This error is returned for all of the following
 // error conditions:
 // 1 - Format error - The name server was unable to interpret the query.
 // 2 - Server failure - The name server was unable to process this query
 //     due to a problem with the name server.
 // 4 - Not Implemented - The name server does not support the requested
 //     kind of query.
 // 5 - Refused - The name server refuses to perform the specified
 //     operation for policy reasons.
 NET_ERROR(DNS_SERVER_FAILED, -802)
 
 // DNS transaction timed out.
 NET_ERROR(DNS_TIMED_OUT, -803)
 
 // The entry was not found in cache, for cache-only lookups.
 NET_ERROR(DNS_CACHE_MISS, -804)