crypto: Enable overriding NSS DB location.

crypto/nss_util.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "crypto/nss_util.h"
 
 #include <nss.h>
 #include <pk11pub.h>
 #include <plarena.h>
 #include <prerror.h>
@@ skipping 71 matching lines @@
   } else {
     result = base::StringPrintf("NSS error code: %d", PR_GetError());
   }
   return result;
 }
 
 #if defined(USE_NSS_CERTS)
 #if !defined(OS_CHROMEOS)
 base::FilePath GetDefaultConfigDirectory() {
   base::FilePath dir;
-  PathService::Get(base::DIR_HOME, &dir);
-  if (dir.empty()) {
-    LOG(ERROR) << "Failed to get home directory.";
-    return dir;
+
+  std::unique_ptr<base::Environment> env(base::Environment::Create());
+  static const char kUseCacheEnvVar[] = "NSS_DEFAULT_DB_DIR";
+  std::string default_db_file;
+  if (env->GetVar(kUseCacheEnvVar, &default_db_file) &&
+      default_db_file.length() > 0) {
+    dir = base::FilePath(default_db_file);
+  } else {
+    PathService::Get(base::DIR_HOME, &dir);
+    if (dir.empty()) {
+      LOG(ERROR) << "Failed to get home directory.";
+      return dir;
+    }
+    dir = dir.AppendASCII(".pki").AppendASCII("nssdb");
   }
-  dir = dir.AppendASCII(".pki").AppendASCII("nssdb");
+
   if (!base::CreateDirectory(dir)) {
     LOG(ERROR) << "Failed to create " << dir.value() << " directory.";
     dir.clear();
   }
   DVLOG(2) << "DefaultConfigDirectory: " << dir.value();
   return dir;
 }
 #endif  // !defined(IS_CHROMEOS)
 
 // On non-Chrome OS platforms, return the default config directory. On Chrome OS
@@ skipping 914 matching lines @@
   return time.ToInternalValue() - base::Time::UnixEpoch().ToInternalValue();
 }
 
 #if !defined(OS_CHROMEOS)
 PK11SlotInfo* GetPersistentNSSKeySlot() {
   return g_nss_singleton.Get().GetPersistentNSSKeySlot();
 }
 #endif
 
 }  // namespace crypto