Add NSS function to retrieve TLS client cert types requested by server.

net/third_party/nss/ssl/ssl.h

Index: net/third_party/nss/ssl/ssl.h
diff --git a/net/third_party/nss/ssl/ssl.h b/net/third_party/nss/ssl/ssl.h
index 18193e2672f0577376ff0ec79118f821b99219b5..f5b04b857800a89ddbb16a06d2407c091b0283b8 100644
--- a/net/third_party/nss/ssl/ssl.h
+++ b/net/third_party/nss/ssl/ssl.h
@@ -798,6 +798,12 @@ SSL_IMPORT SECStatus SSL_HandshakeNegotiatedExtension(PRFileDesc * socket,
 SSL_IMPORT SECStatus SSL_HandshakeResumedSession(PRFileDesc *fd,
                                                  PRBool *last_handshake_resumed);
 
+/* Returns a SECItem containing the certificate_types field of the
+** CertificateRequest message.  This function should only be called from the
+** SSL_GetClientAuthDataHook callback.  The returned value is valid only until
+** the callback returns, and should not be freed.

[wtc, 2011/12/02 22:31:46]

Document that this function returns NULL if called at the
wrong time.

[mattm, 2011/12/06 00:32:01]

Done.

+*/
+SSL_IMPORT SECItem *SSL_CertificateRequestCertTypes(PRFileDesc *fd);
 
 SEC_END_PROTOS