Initial support for HSTS certificate locking. This isn't a finished work, but

chrome/common/net/x509_certificate_model_nss.cc

-// Copyright (c) 2010 The Chromium Authors. All rights reserved.
+// Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/net/x509_certificate_model.h"
 
 #include <cert.h>
 #include <cms.h>
 #include <hasht.h>
 #include <pk11pub.h>
 #include <sechash.h>
@@ skipping 254 matching lines @@
 }
 
 string HashCertSHA256(X509Certificate::OSCertHandle cert_handle) {
   return HashCert(cert_handle, HASH_AlgSHA256, SHA256_LENGTH);
 }
 
 string HashCertSHA1(X509Certificate::OSCertHandle cert_handle) {
   return HashCert(cert_handle, HASH_AlgSHA1, SHA1_LENGTH);
 }
 
-void GetCertChainFromCert(X509Certificate::OSCertHandle cert_handle,
-                          X509Certificate::OSCertHandles* cert_handles) {
-  CERTCertList* cert_list =
-      CERT_GetCertChainFromCert(cert_handle, PR_Now(), certUsageSSLServer);
-  CERTCertListNode* node;
-  for (node = CERT_LIST_HEAD(cert_list);
-       !CERT_LIST_END(node, cert_list);
-       node = CERT_LIST_NEXT(node)) {
-    cert_handles->push_back(CERT_DupCertificate(node->cert));
-  }
-  CERT_DestroyCertList(cert_list);
-}
-
-void DestroyCertChain(X509Certificate::OSCertHandles* cert_handles) {
-  for (X509Certificate::OSCertHandles::iterator i(cert_handles->begin());
-       i != cert_handles->end(); ++i)
-    CERT_DestroyCertificate(*i);
-  cert_handles->clear();
-}
-
 string GetDerString(X509Certificate::OSCertHandle cert_handle) {
   return string(reinterpret_cast<const char*>(cert_handle->derCert.data),
                 cert_handle->derCert.len);
 }
 
 string GetCMSString(const X509Certificate::OSCertHandles& cert_chain,
                     size_t start, size_t end) {
   ScopedPRArenaPool arena(PORT_NewArena(1024));
   CHECK(arena.get());
 
@@ skipping 65 matching lines @@
 
 string ProcessRawBitsSignatureWrap(X509Certificate::OSCertHandle cert_handle) {
   return ProcessRawBits(cert_handle->signatureWrap.signature.data,
                         cert_handle->signatureWrap.signature.len);
 }
 
 void RegisterDynamicOids() {
 }
 
 }  // namespace x509_certificate_model