Support TLS Channel IDs in NSS

net/third_party/nss/ssl/sslimpl.h

 /*
  * This file is PRIVATE to SSL and should be the first thing included by
  * any SSL implementation file.
  *
  * ***** BEGIN LICENSE BLOCK *****
  * Version: MPL 1.1/GPL 2.0/LGPL 2.1
  *
  * The contents of this file are subject to the Mozilla Public License Version
  * 1.1 (the "License"); you may not use this file except in compliance with
  * the License. You may obtain a copy of the License at
@@ skipping 931 matching lines @@
                             /* used by server.  trusted CAs for this socket. */
     PRBool               initialized;
     SSL3HandshakeState   hs;
     ssl3CipherSpec       specs[2];      /* one is current, one is pending. */
 
     /* In a client: if the server supports Next Protocol Negotiation, then
      * this is the protocol that was negotiated.
      */
     SECItem              nextProto;
     SSLNextProtoState    nextProtoState;
+    SECKEYPrivateKey *   channelID;     /* ECC private key. Used by client. */
+    SECKEYPublicKey *    channelIDPub;  /* ECC public key. Used by client. */

[wtc, 2012/05/24 23:10:03]

Since these are closely related to client certificates, I
suggest adding them right below the "sendEmptyCert" member.

[agl, 2012/05/30 15:28:33]

Done.

 
     PRUint16             mtu;   /* Our estimate of the MTU */
 };
 
 #define DTLS_MAX_MTU  1500      /* Ethernet MTU but without subtracting the
                                  * headers, so slightly larger than expected */
 #define IS_DTLS(ss) (ss->protocolVariant == ssl_variant_datagram)
 
 typedef struct {
     SSL3ContentType      type;
@@ skipping 934 matching lines @@
 #elif defined(_WIN32_WCE)
 #define SSL_GETPID GetCurrentProcessId
 #elif defined(WIN32)
 extern int __cdecl _getpid(void);
 #define SSL_GETPID _getpid
 #else
 #define SSL_GETPID() 0
 #endif
 
 #endif /* __sslimpl_h_ */