Add NSS function to retrieve TLS client cert types requested by server.

net/third_party/nss/ssl/ssl.h

 /*
  * This file contains prototypes for the public SSL functions.
  *
  * ***** BEGIN LICENSE BLOCK *****
  * Version: MPL 1.1/GPL 2.0/LGPL 2.1
  *
  * The contents of this file are subject to the Mozilla Public License Version
  * 1.1 (the "License"); you may not use this file except in compliance with
  * the License. You may obtain a copy of the License at
  * http://www.mozilla.org/MPL/
@@ skipping 780 matching lines @@
 ** Did the handshake with the peer negotiate the given extension?
 ** Output parameter valid only if function returns SECSuccess
 */
 SSL_IMPORT SECStatus SSL_HandshakeNegotiatedExtension(PRFileDesc * socket,
                                                       SSLExtensionType extId,
                                                       PRBool *yes);
 
 SSL_IMPORT SECStatus SSL_HandshakeResumedSession(PRFileDesc *fd,
                                                  PRBool *last_handshake_resumed);
 
+/* Returns a SECItem containing the certificate_types field of the
+** CertificateRequest message.  This function should only be called from the
+** SSL_GetClientAuthDataHook callback.  The returned value is valid only until
+** the callback returns, and should not be freed.

[wtc, 2011/12/02 22:31:46]

Document that this function returns NULL if called at the
wrong time.

[mattm, 2011/12/06 00:32:01]

Done.

+*/
+SSL_IMPORT SECItem *SSL_CertificateRequestCertTypes(PRFileDesc *fd);
 
 SEC_END_PROTOS
 
 #endif /* __ssl_h_ */