*wip* NSS: handle chromeos system slot.

chromeos/network/client_cert_util.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chromeos/network/client_cert_util.h"
 
 #include <cert.h>
 #include <pk11pub.h>
 
 #include <list>
@@ skipping 181 matching lines @@
   for (CertificateStlList::iterator iter = matching_certs.begin();
        iter != matching_certs.end(); ++iter) {
     if (!latest.get() || (*iter)->valid_start() > latest->valid_start())
       latest = *iter;
   }
 
   return latest;
 }
 
 void SetShillProperties(const client_cert::ConfigType cert_config_type,
+                        // XXX: should tmp_slot arg be removed if slot id is now
+                        // included in the GetPkcs11IdForCert output?

[pneubeck (no reviews), 2014/06/13 12:40:42]

This has to be discussed with the Shill team (pstew@, quiche@)
If Shill doesn't expect a slot id in the PKCS11Id, and if we don't want to
change their API, then we should just continue sending these properties
separately.

                         const std::string& tpm_slot,
                         const std::string& tpm_pin,
                         const std::string* pkcs11_id,
                         base::DictionaryValue* properties) {
   const char* tpm_pin_property = NULL;
   switch (cert_config_type) {
     case CONFIG_TYPE_NONE: {
       return;
     }
     case CONFIG_TYPE_OPENVPN: {
@@ skipping 66 matching lines @@
       return !cert_id.empty() && !key_id.empty() && !identity.empty();
     }
   }
   NOTREACHED();
   return false;
 }
 
 }  // namespace client_cert
 
 }  // namespace chromeos