Mac: Generate valid <keygen> data if challenge string is empty

net/base/keygen_handler_mac.cc

Index: net/base/keygen_handler_mac.cc
diff --git a/net/base/keygen_handler_mac.cc b/net/base/keygen_handler_mac.cc
index 35e47144cb79c12b71e08091e7c410add6bd2c2f..4882f1da0538b282d8905e67317c7dd78e522d04 100644
--- a/net/base/keygen_handler_mac.cc
+++ b/net/base/keygen_handler_mac.cc
@@ -25,6 +25,10 @@ struct PublicKeyAndChallenge {
   CSSM_DATA challenge_string;
 };
 
+const SecAsn1Template kIA5StringTemplate[] = {

[wtc, 2010/04/19 22:43:45]

Nit: add a comment to explain why we can't use
kSecAsn1IA5StringTemplate from the Security Framework.

+    { SEC_ASN1_IA5_STRING, 0, NULL, sizeof(CSSM_DATA) }
+};
+
 static const SecAsn1Template kPublicKeyAndChallengeTemplate[] = {
   {
     SEC_ASN1_SEQUENCE,
@@ -40,7 +44,7 @@ static const SecAsn1Template kPublicKeyAndChallengeTemplate[] = {
   {
     SEC_ASN1_INLINE,
     offsetof(PublicKeyAndChallenge, challenge_string),
-    kSecAsn1IA5StringTemplate
+    kIA5StringTemplate
   },
   {
     0