Use CERT_GetCertKeyType to get KeyType for ssl3_PlatformSignHashes.

net/third_party/nss/ssl/ssl3con.c

Index: net/third_party/nss/ssl/ssl3con.c
diff --git a/net/third_party/nss/ssl/ssl3con.c b/net/third_party/nss/ssl/ssl3con.c
index 18ed5395c8ff674d4d1a92f3cf87fe865f85a56e..20d14833890ccdaf32e3dda94e3e21bbdbe32364 100644
--- a/net/third_party/nss/ssl/ssl3con.c
+++ b/net/third_party/nss/ssl/ssl3con.c
@@ -5365,8 +5365,9 @@ ssl3_SendCertificateVerify(sslSocket *ss)
     isTLS = (PRBool)(ss->ssl3.pwSpec->version > SSL_LIBRARY_VERSION_3_0);
     if (ss->ssl3.platformClientKey) {
 #ifdef NSS_PLATFORM_CLIENT_AUTH
-	rv = ssl3_PlatformSignHashes(&hashes, ss->ssl3.platformClientKey,
-				     &buf, isTLS);
+	rv = ssl3_PlatformSignHashes(
+	    &hashes, ss->ssl3.platformClientKey, &buf, isTLS, 
+	    CERT_GetCertKeyType(&ss->ssl3.clientCertificate->subjectPublicKeyInfo));

[mef, 2013/04/26 16:08:05]

With 8 chars tab size this function call didn't fit into 80 chars otherwise.

[wtc, 2013/04/26 17:38:03]

We can use a local variable:
        CERTSubjectPublicKeyInfo *spki =
            &ss->ssl3.clientCertificate->subjectPublicKeyInfo;
        rv = ssl3_PlatformSignHashes(&hashes, ss->ssl3.platformClientKey,
            &hashes, ss->ssl3.platformClientKey, &buf, isTLS,
            CERT_GetCertKeyType(spki));

Or you can fold the CERT_GetCertKeyType call:
            CERT_GetCertKeyType(
                &ss->ssl3.clientCertificate->subjectPublicKeyInfo));

 	ssl_FreePlatformKey(ss->ssl3.platformClientKey);
 	ss->ssl3.platformClientKey = (PlatformKey)NULL;
 #endif /* NSS_PLATFORM_CLIENT_AUTH */