Generate unique certificate nicknames on Linux/CrOS.

net/cert/x509_util_nss.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_CERT_X509_UTIL_NSS_H_
 #define NET_CERT_X509_UTIL_NSS_H_
 
 #include <string>
 #include <vector>
 
 #include "base/time.h"
 #include "net/base/net_export.h"
 #include "net/cert/x509_certificate.h"
 
 class PickleIterator;
 
 typedef struct CERTCertificateStr CERTCertificate;
 typedef struct CERTNameStr CERTName;
+typedef struct PK11SlotInfoStr PK11SlotInfo;
 typedef struct PLArenaPool PLArenaPool;
+typedef struct SECItemStr SECItem;
 typedef struct SECKEYPrivateKeyStr SECKEYPrivateKey;
-typedef struct SECItemStr SECItem;
 typedef struct SECKEYPublicKeyStr SECKEYPublicKey;
 
 namespace net {
 
 namespace x509_util {
 
 // Creates a self-signed certificate containing |public_key|.  Subject, serial
 // number and validity period are given as parameters.  The certificate is
 // signed by |private_key|. The hashing algorithm for the signature is SHA-1.
 // |subject| is a distinguished name defined in RFC4514.
@@ skipping 54 matching lines @@
     std::vector<CERTName*>* out);
 
 // Returns true iff a certificate is issued by any of the issuers listed
 // by name in |valid_issuers|.
 // |cert_chain| is the certificate's chain.
 // |valid_issuers| is a list of strings, where each string contains
 // a DER-encoded X.509 Distinguished Name.
 bool IsCertificateIssuedBy(const std::vector<CERTCertificate*>& cert_chain,
                            const std::vector<CERTName*>& valid_issuers);
 
+// Generates a unique nickname for |slot|, returning |nickname| if it is
+// already unique.
+//
+// Note: The nickname returned will NOT include the token name, thus the
+// token name must be prepended if calling an NSS function that expects
+// <token>:<nickname>.
+// TODO(gspencer): Internationalize this: it's wrong to hard-code English.
+std::string GetUniqueNicknameForSlot(const std::string& nickname,
+                                     const SECItem* subject,
+                                     PK11SlotInfo* slot);
 #endif  // defined(USE_NSS) || defined(OS_IOS)
 
 } // namespace x509_util
 
 } // namespace net
 
 #endif  // NET_CERT_X509_UTIL_NSS_H_