1 files changed, 42 insertions, 0 deletions
diff --git a/third_party/rust/pkcs11-bindings/src/lib.rs b/third_party/rust/pkcs11-bindings/src/lib.rs
new file mode 100644
index 0000000000..d4e526e238
--- /dev/null
+++ b/third_party/rust/pkcs11-bindings/src/lib.rs
@@ -0,0 +1,42 @@
+/* -*- Mode: rust; rust-indent-offset: 4 -*- */
+
+#![allow(non_camel_case_types)]
+#![allow(non_snake_case)]
+#![allow(overflowing_literals)]
+include!(concat!(env!("OUT_DIR"), "/bindings.rs"));
+
+/// Constants from NSS [pkcs11n.h](https://hg.mozilla.org/projects/nss/file/tip/lib/util/pkcs11n.h)
+pub mod nss {
+    use crate::{CKA_VENDOR_DEFINED, CKO_VENDOR_DEFINED, CK_ULONG};
+
+    pub const NSSCK_VENDOR_NSS: CK_ULONG = 0x4E534350;
+
+    pub const CKT_VENDOR_DEFINED: CK_ULONG = 0x80000000;
+    pub const CKT_NSS: CK_ULONG = CKT_VENDOR_DEFINED | NSSCK_VENDOR_NSS;
+
+    pub const CKT_NSS_TRUSTED: CK_ULONG = CKT_NSS + 1;
+    pub const CKT_NSS_TRUSTED_DELEGATOR: CK_ULONG = CKT_NSS + 2;
+    pub const CKT_NSS_MUST_VERIFY_TRUST: CK_ULONG = CKT_NSS + 3;
+    pub const CKT_NSS_NOT_TRUSTED: CK_ULONG = CKT_NSS + 10;
+    pub const CKT_NSS_TRUST_UNKNOWN: CK_ULONG = CKT_NSS + 5;
+
+    pub const CKA_NSS: CK_ULONG = CKA_VENDOR_DEFINED | NSSCK_VENDOR_NSS;
+
+    pub const CKA_TRUST: CK_ULONG = CKA_NSS + 0x2000;
+    pub const CKA_TRUST_SERVER_AUTH: CK_ULONG = CKA_TRUST + 8;
+    pub const CKA_TRUST_CLIENT_AUTH: CK_ULONG = CKA_TRUST + 9;
+    pub const CKA_TRUST_CODE_SIGNING: CK_ULONG = CKA_TRUST + 10;
+    pub const CKA_TRUST_EMAIL_PROTECTION: CK_ULONG = CKA_TRUST + 11;
+    pub const CKA_TRUST_STEP_UP_APPROVED: CK_ULONG = CKA_TRUST + 16;
+
+    pub const CKA_CERT_SHA1_HASH: CK_ULONG = CKA_TRUST + 100;
+    pub const CKA_CERT_MD5_HASH: CK_ULONG = CKA_TRUST + 101;
+
+    pub const CKA_NSS_MOZILLA_CA_POLICY: CK_ULONG = CKA_NSS + 34;
+    pub const CKA_NSS_SERVER_DISTRUST_AFTER: CK_ULONG = CKA_NSS + 35;
+    pub const CKA_NSS_EMAIL_DISTRUST_AFTER: CK_ULONG = CKA_NSS + 36;
+
+    pub const CKO_NSS: CK_ULONG = CKO_VENDOR_DEFINED | NSSCK_VENDOR_NSS;
+    pub const CKO_NSS_TRUST: CK_ULONG = CKO_NSS + 3;
+    pub const CKO_NSS_BUILTIN_ROOT_LIST: CK_ULONG = CKO_NSS + 4;
+}