Allow signing EC certs and creating EC origin-bound certs.

crypto/third_party/nss/chromium-nss.h

  /* ***** BEGIN LICENSE BLOCK *****
   * Version: MPL 1.1/GPL 2.0/LGPL 2.1
   *
   * The contents of this file are subject to the Mozilla Public License Version
   * 1.1 (the "License"); you may not use this file except in compliance with
   * the License. You may obtain a copy of the License at
   * http://www.mozilla.org/MPL/
   *
   * Software distributed under the License is distributed on an "AS IS" basis,
   * WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
@@ skipping 25 matching lines @@
 
 #ifndef CRYPTO_THIRD_PARTY_NSS_CHROMIUM_NSS_H_
 #define CRYPTO_THIRD_PARTY_NSS_CHROMIUM_NSS_H_
 #pragma once
 
 // This file contains some functions we borrowed from NSS.
 
 #include <keyhi.h>
 #include <secmod.h>
 
+#include "crypto/crypto_export.h"
+
 // Like PK11_ImportEncryptedPrivateKeyInfo, but hardcoded for EC, and returns
 // the SECKEYPrivateKey.
 // See https://bugzilla.mozilla.org/show_bug.cgi?id=211546
 // When we use NSS 3.13.2 or later,
 // PK11_ImportEncryptedPrivateKeyInfoAndReturnKey can be used instead.
 SECStatus ImportEncryptedECPrivateKeyInfoAndReturnKey(
     PK11SlotInfo* slot,
     SECKEYEncryptedPrivateKeyInfo* epki,
     SECItem* password,
     SECItem* nickname,
     SECItem* public_value,
     PRBool permanent,
     PRBool sensitive,
     SECKEYPrivateKey** private_key,
     void* wincx);
 
+// Like SEC_DerSignData.
+CRYPTO_EXPORT SECStatus DerSignData(PLArenaPool *arena,
+                                    SECItem *result,
+                                    SECItem *input,
+                                    SECKEYPrivateKey *key,
+                                    SECOidTag algo_id);
+
 #endif  // CRYPTO_THIRD_PARTY_NSS_CHROMIUM_NSS_H_