Support EC certs in OriginBoundCertService and OriginBoundCertStore.

net/base/net_error_list.h

Index: net/base/net_error_list.h
diff --git a/net/base/net_error_list.h b/net/base/net_error_list.h
index 430d7ae0b58d9cb220d9f2fb809ebda64d6c6602..bf07ef25234abdb6099f7806b56f231baf8b6d70 100644
--- a/net/base/net_error_list.h
+++ b/net/base/net_error_list.h
@@ -514,6 +514,13 @@ NET_ERROR(SPDY_PING_FAILED, -352)
 // Content-Length does not match the number of bytes received.
 NET_ERROR(CONTENT_LENGTH_MISMATCH, -353)
 
+// Server request for Origin Bound Cert did not contain any types we support.
+NET_ERROR(ORIGIN_BOUND_CERT_TYPE_UNSUPPORTED, -354)

[wtc, 2011/12/06 00:18:05]

This error code does not need to be specific to origin-bound
certs because it also applies to regular client certificates.

So, I suggest the following:
  // Server request for client certificate did not contain any types we support.
  NET_ERROR(CLIENT_AUTH_CERT_TYPE_UNSUPPORTED, -354)

Note: we've used "CLIENT_AUTH_CERT" instead of just "CLIENT_CERT"
in other error codes, so I'm trying to be consistent here.

[mattm, 2011/12/06 00:54:01]

Done.

+
+// Server requested one type of cert, then requested a different type while the
+// first was still being generated.
+NET_ERROR(ORIGIN_BOUND_CERT_GENERATION_TYPE_MISMATCH, -355)

[wtc, 2011/12/06 00:18:05]

The 300-399 range is the HTTP errors.  Since these are not
HTTP errors, we should add them to a different range.  I
suggest adding them to either the 700-799 range (which has
two origin-bound cert errors) or the 100-199 range (which
has several SSL client certificate errors).

[mattm, 2011/12/06 00:54:01]

oops.  Moved to the 1xx range since that seemed appropriate for errors caused by
the server rather than locally.

+
 // The cache does not have the requested entry.
 NET_ERROR(CACHE_MISS, -400)