Support for using OS-native certificates for SSL client auth....

net/third_party/nss/ssl/sslnonce.c

 /* 
  * This file implements the CLIENT Session ID cache.  
  *
  * ***** BEGIN LICENSE BLOCK *****
  * Version: MPL 1.1/GPL 2.0/LGPL 2.1
  *
  * The contents of this file are subject to the Mozilla Public License Version
  * 1.1 (the "License"); you may not use this file except in compliance with
  * the License. You may obtain a copy of the License at
  * http://www.mozilla.org/MPL/
@@ skipping 208 matching lines @@
     }
     for (i = 0; i < MAX_PEER_CERT_CHAIN_SIZE && sid->peerCertChain[i]; i++) {
         CERT_DestroyCertificate(sid->peerCertChain[i]);
     }
     if ( sid->localCert ) {
         CERT_DestroyCertificate(sid->localCert);
     }
     if (sid->u.ssl3.sessionTicket.ticket.data) {
         SECITEM_FreeItem(&sid->u.ssl3.sessionTicket.ticket, PR_FALSE);
     }
+#ifdef NSS_PLATFORM_CLIENT_AUTH
+    if (sid->u.ssl3.clPlatformAuthValid) {
+        ssl_FreePlatformAuthInfo(&sid->u.ssl3.clPlatformAuthInfo);
+    }
+#endif   /* NSS_PLATFORM_CLIENT_AUTH */
     
     PORT_ZFree(sid, sizeof(sslSessionID));
 }
 
 /* BEWARE: This function gets called for both client and server SIDs !!
  * Decrement reference count, and 
  *    free sid if ref count is zero, and sid is not in the cache. 
  * Does NOT remove from the cache first.  
  * If the sid is still in the cache, it is left there until next time
  * the cache list is traversed.
@@ skipping 286 matching lines @@
         sid->u.ssl3.sessionTicket.ticket.len = 0;
     }
     sid->u.ssl3.sessionTicket.received_timestamp =
         session_ticket->received_timestamp;
     sid->u.ssl3.sessionTicket.ticket_lifetime_hint =
         session_ticket->ticket_lifetime_hint;
 
     UNLOCK_CACHE;
     return SECSuccess;
 }