Allow signing EC certs and creating EC origin-bound certs.

crypto/third_party/nss/chromium-nss.h

Index: crypto/third_party/nss/chromium-nss.h
diff --git a/crypto/third_party/nss/chromium-nss.h b/crypto/third_party/nss/chromium-nss.h
index af85e36db8ccd00487b47aa05ba2c7f94d2f6c95..ab4726ac7026e4e64b2576f7ac4da6484fec66b9 100644
--- a/crypto/third_party/nss/chromium-nss.h
+++ b/crypto/third_party/nss/chromium-nss.h
@@ -43,6 +43,8 @@
 #include <keyhi.h>
 #include <secmod.h>
 
+#include "crypto/crypto_export.h"
+
 // Like PK11_ImportEncryptedPrivateKeyInfo, but hardcoded for EC, and returns
 // the SECKEYPrivateKey.
 // See https://bugzilla.mozilla.org/show_bug.cgi?id=211546
@@ -59,4 +61,11 @@ SECStatus ImportEncryptedECPrivateKeyInfoAndReturnKey(
     SECKEYPrivateKey** private_key,
     void* wincx);
 
+// Like SEC_DerSignData.
+CRYPTO_EXPORT SECStatus DerSignData(PLArenaPool *arena,
+                                    SECItem *result,
+                                    SECItem *input,
+                                    SECKEYPrivateKey *key,
+                                    SECOidTag algo_id);
+
 #endif  // CRYPTO_THIRD_PARTY_NSS_CHROMIUM_NSS_H_