Enable Chrome OS to load the user's nssdb later.

net/base/keygen_handler_nss.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/keygen_handler.h"
 
 #include <pk11pub.h>
 #include <secmod.h>
 #include <ssl.h>
 #include <secder.h>    // DER_Encode()
 #include <cryptohi.h>  // SEC_DerSignData()
 #include <keyhi.h>     // SECKEY_CreateSubjectPublicKeyInfo()
 
 #include "base/base64.h"
+#include "base/nss_util_internal.h"
 #include "base/nss_util.h"
 #include "base/logging.h"
 
 namespace net {
 
 const int64 DEFAULT_RSA_PUBLIC_EXPONENT = 0x10001;
 
 // Template for creating the signed public key structure to be sent to the CA.
 DERTemplate SECAlgorithmIDTemplate[] = {
   { DER_SEQUENCE,
@@ skipping 65 matching lines @@
   CERTPublicKeyAndChallenge pkac;
   void *keyGenParams;
   pkac.challenge.data = NULL;
   bool isSuccess = true;  // Set to false as soon as a step fails.
 
   std::string result_blob;  // the result.
 
   // Ensure NSS is initialized.
   base::EnsureNSSInit();
 
-  slot = PK11_GetInternalKeySlot();
+  slot = base::GetDefaultNSSKeySlot();
   if (!slot) {
     LOG(ERROR) << "Couldn't get Internal key slot!";
     isSuccess = false;
     goto failure;
   }
 
   switch (keyGenMechanism) {
     case CKM_RSA_PKCS_KEY_PAIR_GEN:
       rsaKeyGenParams.keySizeInBits = key_size_in_bits_;
       rsaKeyGenParams.pe = DEFAULT_RSA_PUBLIC_EXPONENT;
@@ skipping 133 matching lines @@
     PK11_FreeSlot(slot);
   }
   if (pkac.challenge.data) {
     free(pkac.challenge.data);
   }
 
   return (isSuccess ? result_blob : std::string());
 }
 
 }  // namespace net