Mac: implement <keygen> support, including adding generated cert to the Keychain.

net/base/net_error_list.h

Index: net/base/net_error_list.h
diff --git a/net/base/net_error_list.h b/net/base/net_error_list.h
index b79658c437030dd98c0a57c5c2a5e5f35536801f..2e4e114320a49695f13e59812de1ecf09f41de65 100644
--- a/net/base/net_error_list.h
+++ b/net/base/net_error_list.h
@@ -191,6 +191,8 @@ NET_ERROR(CERT_AUTHORITY_INVALID, -202)
 //
 // MSDN describes this error as follows:
 //   "The SSL certificate contains errors."
+// NOTE: It's unclear how this differs from CERT_INVALID. For consistency,

[wtc, 2010/03/01 23:05:40]

Nit: CERT_INVALID => ERR_CERT_INVALID

+// use that code instead of this one from now on.
 //
 NET_ERROR(CERT_CONTAINS_ERRORS, -203)
 
@@ -226,13 +228,17 @@ NET_ERROR(CERT_INVALID, -207)
 // signature algorithm.
 NET_ERROR(CERT_WEAK_SIGNATURE_ALGORITHM, -208)
 
+// The server responded to a <keygen> with a generated client cert that we
+// don't have the matching private key for.
+NET_ERROR(CERT_NO_PRIVATE_KEY, -209)

[wtc, 2010/03/01 23:05:40]

This is not a certificate error (the certificate itself is
good).  So we need to add this error code elsewhere.
(The error code ranges are documented at line 8.)

Let's add it to the -5xx range, and name it
NO_PRIVATE_KEY_FOR_CERT.

Please remember to change CERT_END back to -209.

+
 // Add new certificate error codes here.
 //
 // Update the value of CERT_END whenever you add a new certificate error
 // code.
 
 // The value immediately past the last certificate error code.
-NET_ERROR(CERT_END, -209)
+NET_ERROR(CERT_END, -210)
 
 // The URL is invalid.
 NET_ERROR(INVALID_URL, -300)