Support for using OS-native certificates for SSL client auth....

net/third_party/nss/ssl/sslsnce.c

 /* This file implements the SERVER Session ID cache. 
  * NOTE:  The contents of this file are NOT used by the client.
  *
  * ***** BEGIN LICENSE BLOCK *****
  * Version: MPL 1.1/GPL 2.0/LGPL 2.1
  *
  * The contents of this file are subject to the Mozilla Public License Version
  * 1.1 (the "License"); you may not use this file except in compliance with
  * the License. You may obtain a copy of the License at
  * http://www.mozilla.org/MPL/
@@ skipping 620 matching lines @@
         to->u.ssl3.masterSlotID     = (CK_SLOT_ID)-1;     /* invalid value */
         to->u.ssl3.masterWrapIndex  = 0;
         to->u.ssl3.masterWrapSeries = 0;
         to->u.ssl3.masterValid      = PR_FALSE;
 
         to->u.ssl3.clAuthModuleID   = (SECMODModuleID)-1; /* invalid value */
         to->u.ssl3.clAuthSlotID     = (CK_SLOT_ID)-1;     /* invalid value */
         to->u.ssl3.clAuthSeries     = 0;
         to->u.ssl3.clAuthValid      = PR_FALSE;
 
+#ifdef NSS_PLATFORM_CLIENT_AUTH
+        ssl_InitPlatformAuthInfo(&to->u.ssl3.clPlatformAuthInfo);
+        to->u.ssl3.clPlatformAuthValid = PR_FALSE;
+#endif   /* NSS_PLATFORM_CLIENT_AUTH */
+
         if (from->u.ssl3.certIndex != -1 && pcce) {
             SECItem          derCert;
 
             derCert.len  = pcce->certLength;
             derCert.data = pcce->cert;
 
             to->peerCert = CERT_NewTempCertificate(dbHandle, &derCert, NULL,
                                                    PR_FALSE, PR_TRUE);
             if (to->peerCert == NULL)
                 goto loser;
@@ skipping 1502 matching lines @@
 }
 
 SECStatus 
 SSL_SetMaxServerCacheLocks(PRUint32 maxLocks)
 {
     PR_ASSERT(!"SSL servers are not supported on this platform. (SSL_SetMaxServerCacheLocks)");
     return SECFailure;
 }
 
 #endif /* XP_UNIX || XP_WIN32 */