Export the functions needed by the libSSL in NSS 3.15.

nss/exports_win.def

Index: nss/exports_win.def
===================================================================
--- nss/exports_win.def	(revision 196262)
+++ nss/exports_win.def	(working copy)
@@ -20,6 +20,7 @@
 CERT_AddCertToListTail
 CERT_AddExtension
 CERT_AsciiToName
+CERT_CacheOCSPResponseFromSideChannel
 CERT_CertChainFromCert
 CERT_CertTimesValid
 CERT_CheckCertValidTimes
@@ -50,6 +51,7 @@
 CERT_NewCertList
 CERT_NewTempCertificate
 CERT_StartCertExtensions
+CERT_VerifyCert

[Ryan Sleevi, 2013/04/29 21:49:27]

Do you have linker output for where this is being called?

I looked through your diffs for NSS 3.15, and I don't see any new calls - only
the updated signature.

[wtc, 2013/04/29 22:10:32]

The calls to CERT_VerifyCert and CERT_CacheOCSPResponseFromSideChannel
are in the SSL_AuthCertificate function. You can see them
in my CL for the NSS libSSL (as opposed to NSS proper):
https://chromiumcodereview.appspot.com/14522022/diff/30001/net/third_party/ns...

These calls are added in this upstream changeset:
https://hg.mozilla.org/projects/nss/rev/0b2ac9faa533

That changeset seems to contain two independent changes.
Just look at the change to sslauth.c.

 CERT_VerifyCertName
 CERT_VerifyCertNow
 DER_Lengths_Util
@@ -192,10 +194,13 @@
 RC4_DestroyContext
 RC4_Encrypt
 RC4_InitContext
+SECITEM_AllocArray

[Ryan Sleevi, 2013/04/29 21:49:27]

BUG: This makes me think it's a bug in upstream NSS 3.15 that these are not
mapped through _Util wrappers, as all of SECUtil is. This ends up forcing a
direct dependency from libssl onto secutil, where today it tries to be done
dynamically.

[wtc, 2013/04/29 22:10:32]

It is OK for libssl3.so to depend on libnssutil3.so.

The _Util wrappers are only needed for functions that used
to be in libnss3.so.  When we added libnssutil3.so, we moved
those functions from libnss3.so to libnssutil3.so, but for
backward compatibility, wrappers for those functions still need
to be in libnss3.so. So we ended up with, for example,

libnss3.so: SECITEM_AllocItem (a wrapper)
libnssutil3.so: SECITEM_AllocItem_Util (the real function)

New functions in libnssutil3.so don't need the _Util wrappers.

 SECITEM_AllocItem_Util
 SECITEM_CompareItem_Util
 SECITEM_CopyItem_Util
+SECITEM_DupArray
 SECITEM_DupItem_Util
+SECITEM_FreeArray
 SECITEM_FreeItem_Util
 SECITEM_Hash
 SECITEM_ItemsAreEqual_Util