Support TLS Channel IDs in NSS

net/third_party/nss/ssl/sslsock.c

 /*
  * vtables (and methods that call through them) for the 4 types of 
  * SSLSockets supported.  Only one type is still supported.
  * Various other functions.
  *
  * ***** BEGIN LICENSE BLOCK *****
  * Version: MPL 1.1/GPL 2.0/LGPL 2.1
  *
  * The contents of this file are subject to the Mozilla Public License Version
  * 1.1 (the "License"); you may not use this file except in compliance with
@@ skipping 1860 matching lines @@
     if (!ss) {
         SSL_DBG(("%d: SSL[%d]: bad socket in SSL_HandshakeResumedSession",
                  SSL_GETPID(), fd));
         return SECFailure;
     }
 
     *handshake_resumed = ss->ssl3.hs.isResuming;
     return SECSuccess;
 }
 
+SECStatus
+SSL_SetChannelID(PRFileDesc *fd, SECKEYPrivateKey *id,
+                 SECKEYPublicKey *pub) {
+    sslSocket *ss = ssl_FindSocket(fd);
+
+    if (!ss) {
+        SSL_DBG(("%d: SSL[%d]: bad socket in SSL_SetChannelID",
+                 SSL_GETPID(), fd));
+        return SECFailure;
+    }
+
+    if (SECKEY_GetPrivateKeyType(id) != ecKey) {
+        PORT_SetError(SSL_ERROR_INVALID_CHANNEL_ID_KEY);
+        return SECFailure;
+    }
+
+    if (ss->ssl3.channelID)
+        SECKEY_DestroyPrivateKey(ss->ssl3.channelID);
+    if (ss->ssl3.channelIDPub)
+        SECKEY_DestroyPublicKey(ss->ssl3.channelIDPub);
+
+    ss->ssl3.channelID = id;
+    ss->ssl3.channelIDPub = pub;
+
+    return SECSuccess;
+}
+
 const SECItem *
 SSL_GetRequestedClientCertificateTypes(PRFileDesc *fd)
 {
   sslSocket *ss = ssl_FindSocket(fd);
 
   if (!ss) {
       SSL_DBG(("%d: SSL[%d]: bad socket in "
                "SSL_GetRequestedClientCertificateTypes", SSL_GETPID(), fd));
       return NULL;
   }
@@ skipping 1066 matching lines @@
             ssl_DestroySocketContents(ss);
             ssl_DestroyLocks(ss);
             PORT_Free(ss);
             ss = NULL;
         }
         ss->protocolVariant = protocolVariant;
     }
     return ss;
 }