This adds support for encrypted ONC import

crypto/symmetric_key_nss.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "crypto/symmetric_key.h"
 
 #include <nss.h>
 #include <pk11pub.h>
 
 #include "base/logging.h"
@@ skipping 89 matching lines @@
   // it's not PK11_OriginFortezzaHack, so we pass PK11_OriginUnwrap as a
   // placeholder.
   PK11SymKey* sym_key = PK11_ImportSymKey(slot.get(), cipher, PK11_OriginUnwrap,
                                           CKA_ENCRYPT, &key_item, NULL);
   if (!sym_key)
     return NULL;
 
   return new SymmetricKey(sym_key);
 }
 
-bool SymmetricKey::GetRawKey(std::string* raw_key) {
+bool SymmetricKey::GetRawKey(std::string* raw_key) const {
   SECStatus rv = PK11_ExtractKeyValue(key_.get());
   if (SECSuccess != rv)
     return false;
 
   SECItem* key_item = PK11_GetKeyData(key_.get());
   if (!key_item)
     return false;
 
   raw_key->assign(reinterpret_cast<char*>(key_item->data), key_item->len);
   return true;
 }
 
 #if defined(OS_CHROMEOS)
 // static
 SymmetricKey* SymmetricKey::CreateFromKey(PK11SymKey* key) {
   return new SymmetricKey(key);
 }
 #endif
 
 SymmetricKey::SymmetricKey(PK11SymKey* key) : key_(key) {
   DCHECK(key);
 }
 
 }  // namespace crypto