Mac: implement <keygen> support, including adding generated cert to the Keychain.

chrome/browser/renderer_host/x509_user_cert_resource_handler.cc

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/renderer_host/x509_user_cert_resource_handler.h"
 
 #include "base/string_util.h"
 #include "chrome/browser/browser_process.h"
 #include "chrome/browser/chrome_thread.h"
 #include "chrome/browser/download/download_file.h"
 #include "chrome/browser/renderer_host/resource_dispatcher_host.h"
 #include "chrome/browser/renderer_host/resource_dispatcher_host_request_info.h"
 #include "chrome/common/resource_response.h"
 #include "chrome/common/url_constants.h"
-#include "net/base/cert_database.h"
 #include "net/base/io_buffer.h"
 #include "net/base/mime_sniffer.h"
 #include "net/base/mime_util.h"
 #include "net/http/http_response_headers.h"
 
 X509UserCertResourceHandler::X509UserCertResourceHandler(
     ResourceDispatcherHost* host, URLRequest* request)
     : host_(host),
       request_(request),
       content_length_(0),
@@ skipping 46 matching lines @@
   // TODO(gauravsh): Should this be handled by a separate thread?
   buffer_->contents.push_back(std::make_pair(buffer, *bytes_read));
 
   return true;
 }
 
 bool X509UserCertResourceHandler::OnResponseCompleted(
     int request_id,
     const URLRequestStatus& urs,
     const std::string& sec_info) {
+  if (urs.status() != URLRequestStatus::SUCCESS)
+    return false;
+
   // TODO(gauravsh): Verify that 'request_id' was actually a keygen form post
   // and only then import the certificate.
-  scoped_ptr<net::CertDatabase> cert_db(new net::CertDatabase());
   AssembleResource();
-
-  return cert_db->AddUserCert(resource_buffer_->data(), content_length_);
+  scoped_refptr<net::X509Certificate> cert =
+      net::X509Certificate::CreateFromBytes(resource_buffer_->data(),
+                                            content_length_);
+  request_->delegate()->OnClientCertificateGenerated(request_, cert);
+  return true;
 }
 
 void X509UserCertResourceHandler::AssembleResource() {
   size_t bytes_copied = 0;
   resource_buffer_ = new net::IOBuffer(content_length_);
 
   for (size_t i = 0; i < buffer_->contents.size(); ++i) {
     net::IOBuffer* data = buffer_->contents[i].first;
     const int data_len = buffer_->contents[i].second;
     DCHECK(bytes_copied + data_len <= content_length_);
     memcpy(resource_buffer_->data() + bytes_copied, data->data(), data_len);
     bytes_copied += data_len;
   }
 }