*WIP* Store NSS slots per profile. Move keygen to chrome.

crypto/nss_util_internal.h

Index: crypto/nss_util_internal.h
diff --git a/crypto/nss_util_internal.h b/crypto/nss_util_internal.h
index 056ec28c165d19b39a8c6a5643172216e587793e..7bfbe98adabb41e7e0aec47fe358e6127810734b 100644
--- a/crypto/nss_util_internal.h
+++ b/crypto/nss_util_internal.h
@@ -9,6 +9,10 @@
 
 #include "crypto/crypto_export.h"
 
+namespace base {
+class FilePath;
+}
+
 // These functions return a type defined in an NSS header, and so cannot be
 // declared in nss_util.h.  Hence, they are declared here.
 
@@ -38,6 +42,17 @@ class AutoSECMODListReadLock {
   DISALLOW_COPY_AND_ASSIGN(AutoSECMODListReadLock);
 };
 
+#if defined(OS_CHROMEOS)
+// Open the r/w nssdb that's stored inside secondary user's encrypted home
+// directory. Caller is responsible for closing the DB and releasing the slot.
+CRYPTO_EXPORT PK11SlotInfo* OpenPersistentNSSDBForPath(
+    const base::FilePath& path);
+
+// Returns a reference to the ChromeOS TPM key slot for slot id. Caller must
+// release returned reference with PK11_FreeSlot.
+CRYPTO_EXPORT PK11SlotInfo* GetTPMSlotForId(CK_SLOT_ID slot_id);
+#endif
+
 }  // namespace crypto
 
 #endif  // CRYPTO_NSS_UTIL_INTERNAL_H_