This change loads opencryptoki and uses the TPM for keygen tags.

net/base/cert_database_nss_unittest.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <cert.h>
 #include <pk11pub.h>
 
 #include <algorithm>
 
 #include "base/crypto/scoped_nss_types.h"
@@ skipping 94 matching lines @@
 class CertDatabaseNSSTest : public testing::Test {
  public:
   virtual void SetUp() {
     if (!temp_db_initialized_) {
       ASSERT_TRUE(temp_db_dir_.Get().CreateUniqueTempDir());
       ASSERT_TRUE(
           base::OpenTestNSSDB(temp_db_dir_.Get().path(),
                               "CertDatabaseNSSTest db"));
       temp_db_initialized_ = true;
     }
-    slot_ = cert_db_.GetDefaultModule();
+    slot_ = cert_db_.GetPublicModule();
 
     // Test db should be empty at start of test.
     EXPECT_EQ(0U, ListCertsInSlot(slot_->os_module_handle()).size());
   }
   virtual void TearDown() {
     // Don't try to cleanup if the setup failed.
     ASSERT_TRUE(slot_->os_module_handle());
 
     EXPECT_TRUE(CleanupSlotContents(slot_->os_module_handle()));
     EXPECT_EQ(0U, ListCertsInSlot(slot_->os_module_handle()).size());
@@ skipping 370 matching lines @@
       puny_cert.get(), CA_CERT,
       CertDatabase::TRUSTED_SSL | CertDatabase::TRUSTED_EMAIL));
 
   verify_result.Reset();
   error = puny_cert->Verify("xn--wgv71a119e.com", flags, &verify_result);
   EXPECT_EQ(OK, error);
   EXPECT_EQ(0, verify_result.cert_status);
 }
 
 }  // namespace net