Use NSS to generate Origin-Bound Certs on Win and Mac.

net/base/x509_util_nss.h

Index: net/base/x509_util_nss.h
diff --git a/net/base/x509_util_nss.h b/net/base/x509_util_nss.h
new file mode 100644
index 0000000000000000000000000000000000000000..ca78ba6147d8cf2822bf64e99b59ab6cff915470
--- /dev/null
+++ b/net/base/x509_util_nss.h
@@ -0,0 +1,32 @@
+// Copyright (c) 2011 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef NET_BASE_X509_UTIL_NSS_H_
+#define NET_BASE_X509_UTIL_NSS_H_
+#pragma once
+
+#include <string>
+
+#include "base/time.h"
+
+typedef struct CERTCertificateStr CERTCertificate;
+struct SECKEYPrivateKeyStr;
+struct SECKEYPublicKeyStr;

[wtc, 2011/10/17 19:09:27]

Please replace these two lines with
typedef struct SECKEYPrivateKeyStr SECKEYPrivateKey;
typedef struct SECKEYPublicKeyStr SECKEYPublicKey;

so that you can use SECKEYPublicKey and SECKEYPrivateKey
on lines 22-23 below.

[mattm, 2011/10/17 22:54:19]

Done.

+
+namespace net {
+
+namespace x509_util {
+
+CERTCertificate* CreateSelfSignedCert(
+    SECKEYPublicKeyStr* public_key,
+    SECKEYPrivateKeyStr* key,

[wtc, 2011/10/17 19:09:27]

Document this function.

Nit: this parameter should be renamed private_key.

[mattm, 2011/10/17 22:54:19]

Done.

+    const std::string& subject,
+    uint32 serial_number,
+    base::TimeDelta valid_duration);
+
+} // namespace x509_util
+
+} // namespace net
+
+#endif  // NET_BASE_X509_UTIL_NSS_H_