diff -Nru nss-3.35/debian/changelog nss-3.35/debian/changelog
--- nss-3.35/debian/changelog	2018-02-05 12:43:19.000000000 +0200
+++ nss-3.35/debian/changelog	2018-02-22 23:08:44.000000000 +0200
@@ -1,3 +1,10 @@
+nss (2:3.35-2ubuntu3) bionic; urgency=medium
+
+  * Add libnss3-pkcs11-dev package with headers and static libs for nss-
+    pem. (LP: #1751140)
+
+ -- Timo Aaltonen <tjaalton@debian.org>  Thu, 22 Feb 2018 23:08:44 +0200
+
 nss (2:3.35-2ubuntu2) bionic; urgency=medium
 
   * d/p/lp1746947-revert-switch-default-to-sql.patch: the switch of the
diff -Nru nss-3.35/debian/control nss-3.35/debian/control
--- nss-3.35/debian/control	2018-02-05 09:25:45.000000000 +0200
+++ nss-3.35/debian/control	2018-02-22 12:18:17.000000000 +0200
@@ -64,6 +64,20 @@
  Install this package if you wish to develop your own programs using the
  Network Security Service Libraries.
 
+Package: libnss3-pkcs11-dev
+Section: libdevel
+Architecture: any
+Depends: ${misc:Depends},
+ libnss3 (= ${binary:Version}),
+Multi-Arch: ${misc:Multi-Arch}
+Description: Development files for the Network Security Service libraries -- PKCS #11 support
+ This is a set of libraries designed to support cross-platform development
+ of security-enabled client and server applications. It can support SSLv2
+ and  v4, TLS, PKCS #5, #7, #11, #12, S/MIME, X.509 v3 certificates and
+ other security standards.
+ .
+ This package is needed for building PKCS #11 modules that use NSS.
+
 Package: libnss3-dbg
 Section: debug
 Priority: extra
diff -Nru nss-3.35/debian/rules nss-3.35/debian/rules
--- nss-3.35/debian/rules	2018-02-05 09:25:45.000000000 +0200
+++ nss-3.35/debian/rules	2018-02-22 23:08:44.000000000 +0200
@@ -153,6 +153,15 @@
 	install -m 644 -t debian/libnss3-dev/usr/lib/$(DEB_HOST_MULTIARCH)/pkgconfig debian/nss.pc
 	install -m 755 -t debian/libnss3-dev/usr/bin debian/nss-config
 
+	install -m 755 -d debian/libnss3-pkcs11-dev/usr/include/nss/private debian/libnss3-pkcs11-dev/usr/lib/$(DEB_HOST_MULTIARCH)
+	install -m 644 -t debian/libnss3-pkcs11-dev/usr/include/nss/private \
+		$(DISTDIR)/private/nss/alghmac.h \
+		$(DISTDIR)/private/nss/blapi.h
+	install -m 644 -t debian/libnss3-pkcs11-dev/usr/lib/$(DEB_HOST_MULTIARCH) \
+		$(DISTDIR)/lib/libfreebl.a \
+		$(DISTDIR)/lib/libnssb.a \
+		$(DISTDIR)/lib/libnssckfw.a
+
 	install -m 755 -t debian/libnss3-tools/usr/bin $(addprefix $(DISTDIR)/bin/,$(NSS_TOOLS))
 	install -m 755 -d $(DISTDIR)/man
 	install -m 644 -t $(DISTDIR)/man $(wildcard $(call manpage,$(NSS_TOOLS)))