WifiCertService.cpp calls CERT_AddTempCertToPerm: http://mxr.mozilla.org/mozilla-central/source/dom/wifi/WifiCertService.cpp#153 which isn't really exported from NSS: http://mxr.mozilla.org/mozilla-central/source/security/nss/lib/nss/nss.def#545 http://mxr.mozilla.org/mozilla-central/source/security/manager/ssl/src/nsNSSCertificateDB.cpp#5 But since we don't use linker scripts to limit visibility to what nss.def specifies on B2G, CERT_AddTempCertToPerm is merrily exported alongside __CERT_AddTempCertToPerm. ...at least, until things like bug 1018375 want to enforce what nss.def specifies on B2G. I guess the way forward here it to add the same #define bit that nsNSSCertificateDB.cpp uses to WifiCertService.cpp, so we are at least consistently using the same symbol in PSM and dom/wifi/? Does that sound right?

Yes, that sounds right to me.

This is a hack, but it is a hack with precedent, at least...

Is there some reason we can't export CERT_AddTempCertToPerm from NSS?

Comment on attachment 8440103 [details] [diff] [review] use the correct symbol for CERT_AddTempCertToPerm in WifiCertService.cpp r=me if we can't get this symbol actually exported.