Use NSS to generate Origin-Bound Certs on Win and Mac.

net/base/x509_util_openssl.cc

Index: net/base/x509_util_openssl.cc
diff --git a/net/base/x509_util_openssl.cc b/net/base/x509_util_openssl.cc
index 1631d6fb1f593f4c445e534da3e27f1739dbc7a1..1283f686f3631f97af43414bd7972403a48ec44d 100644
--- a/net/base/x509_util_openssl.cc
+++ b/net/base/x509_util_openssl.cc
@@ -2,6 +2,7 @@
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
+#include "net/base/x509_util.h"
 #include "net/base/x509_util_openssl.h"
 
 #include <algorithm>
@@ -69,6 +70,16 @@ bool ParseDate(ASN1_TIME* x509_time, base::Time* time) {
   return ParseCertificateDate(str_date, format, time);
 }
 
+bool CreateOriginBoundCert(

[wtc, 2011/10/17 19:09:27]

Nit: list this function first, if we consider x509_util.h
as being before x509_util_openssl.h.

[mattm, 2011/10/17 22:54:19]

Done.

+    crypto::RSAPrivateKey* key,
+    const std::string& origin,
+    uint32 serial_number,
+    base::TimeDelta valid_duration,
+    std::string* der_cert) {
+  NOTIMPLEMENTED();
+  return false;
+}
+
 }  // namespace x509_util
 
 }  // namespace net