Add NSS function to retrieve TLS client cert types requested by server.

net/third_party/nss/ssl/ssl3con.c

 /*
  * SSL3 Protocol
  *
  * ***** BEGIN LICENSE BLOCK *****
  * Version: MPL 1.1/GPL 2.0/LGPL 2.1
  *
  * The contents of this file are subject to the Mozilla Public License Version
  * 1.1 (the "License"); you may not use this file except in compliance with
  * the License. You may obtain a copy of the License at
  * http://www.mozilla.org/MPL/
@@ skipping 5533 matching lines @@
     PORT_Assert(ss->ssl3.clientCertChain == NULL);
     PORT_Assert(ss->ssl3.clientCertificate == NULL);
     PORT_Assert(ss->ssl3.clientPrivateKey == NULL);
     PORT_Assert(ss->ssl3.platformClientKey == (PlatformKey)NULL);
 
     isTLS = (PRBool)(ss->ssl3.prSpec->version > SSL_LIBRARY_VERSION_3_0);
     rv = ssl3_ConsumeHandshakeVariable(ss, &cert_types, 1, &b, &length);
     if (rv != SECSuccess)
         goto loser;             /* malformed, alert has been sent */
 
+    ss->requestedCertTypes = &cert_types;

[wtc, 2011/12/02 22:31:46]

Add
    PORT_Assert(!ss->requestedCertTypes);
before this line.

[mattm, 2011/12/06 00:32:01]

Done.

+
     arena = ca_list.arena = PORT_NewArena(DER_DEFAULT_CHUNKSIZE);
     if (arena == NULL)
         goto no_mem;
 
     remaining = ssl3_ConsumeHandshakeNumber(ss, 2, &b, &length);
     if (remaining < 0)
         goto loser;             /* malformed, alert has been sent */
 
     if ((PRUint32)remaining > length)
         goto alert_loser;
@@ skipping 169 matching lines @@
     goto done;
 
 alert_loser:
     if (isTLS && desc == illegal_parameter)
         desc = decode_error;
     (void)SSL3_SendAlert(ss, alert_fatal, desc);
 loser:
     PORT_SetError(errCode);
     rv = SECFailure;
 done:
+    ss->requestedCertTypes = NULL;
     if (arena != NULL)
         PORT_FreeArena(arena, PR_FALSE);
 #ifdef NSS_PLATFORM_CLIENT_AUTH
     if (platform_cert_list)
         CERT_DestroyCertList(platform_cert_list);
 #endif
     return rv;
 }
 
 /*
@@ skipping 4273 matching lines @@
 
     ss->ssl3.initialized = PR_FALSE;
 
     if (ss->ssl3.nextProto.data) {
         PORT_Free(ss->ssl3.nextProto.data);
         ss->ssl3.nextProto.data = NULL;
     }
 }
 
 /* End of ssl3con.c */