*WIP* Store NSS slots per profile. Move keygen to chrome.

crypto/nss_util_internal.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CRYPTO_NSS_UTIL_INTERNAL_H_
 #define CRYPTO_NSS_UTIL_INTERNAL_H_
 
 #include <secmodt.h>
 
 #include "crypto/crypto_export.h"
 
+namespace base {
+class FilePath;
+}
+
 // These functions return a type defined in an NSS header, and so cannot be
 // declared in nss_util.h.  Hence, they are declared here.
 
 namespace crypto {
 
 // Returns a reference to the default NSS key slot for storing
 // public-key data only (e.g. server certs). Caller must release
 // returned reference with PK11_FreeSlot.
 CRYPTO_EXPORT PK11SlotInfo* GetPublicNSSKeySlot();
 
 // Returns a reference to the default slot for storing private-key and
 // mixed private-key/public-key data.  Returns a hardware (TPM) NSS
 // key slot if on ChromeOS and EnableTPMForNSS() has been called
 // successfully. Caller must release returned reference with
 // PK11_FreeSlot.
 CRYPTO_EXPORT PK11SlotInfo* GetPrivateNSSKeySlot();
 
 // A helper class that acquires the SECMOD list read lock while the
 // AutoSECMODListReadLock is in scope.
 class AutoSECMODListReadLock {
  public:
   AutoSECMODListReadLock();
   ~AutoSECMODListReadLock();
 
  private:
   SECMODListLock* lock_;
   DISALLOW_COPY_AND_ASSIGN(AutoSECMODListReadLock);
 };
 
+#if defined(OS_CHROMEOS)
+// Open the r/w nssdb that's stored inside secondary user's encrypted home
+// directory. Caller is responsible for closing the DB and releasing the slot.
+CRYPTO_EXPORT PK11SlotInfo* OpenPersistentNSSDBForPath(
+    const base::FilePath& path);
+
+// Returns a reference to the ChromeOS TPM key slot for slot id. Caller must
+// release returned reference with PK11_FreeSlot.
+CRYPTO_EXPORT PK11SlotInfo* GetTPMSlotForId(CK_SLOT_ID slot_id);
+#endif
+
 }  // namespace crypto
 
 #endif  // CRYPTO_NSS_UTIL_INTERNAL_H_