Source release 17.1.2

core/include/cdm_engine.h

@@ -391,6 +391,13 @@ class CdmEngine {
   virtual void SetDefaultOtaKeyboxFallbackDurationRules();
   virtual void SetFastOtaKeyboxFallbackDurationRules();
 
+  // A signing method specifically used by Cast.
+  // This method should not be used otherwise.
+  virtual CdmResponseType SignRsa(const std::string& wrapped_key,
+                                  const std::string& message,
+                                  std::string* signature,
+                                  RSA_Padding_Scheme padding_scheme);
+
  protected:
   friend class CdmEngineFactory;
 
@@ -438,6 +445,8 @@ class CdmEngine {
   CdmSessionMap session_map_;
   CdmReleaseKeySetMap release_key_sets_;
   std::unique_ptr<CertificateProvisioning> cert_provisioning_;
+  // Lock must be acquired before using |cert_provisioning_|.
+  std::mutex cert_provisioning_mutex_;
   wvutil::FileSystem* file_system_;
   wvutil::Clock clock_;
   std::string spoid_;