Ensure X509Certificate::OSCertHandles are safe to be used on both UI and IO threads on Win

net/base/x509_util_mac.h

Index: net/base/x509_util_mac.h
diff --git a/net/base/x509_util_mac.h b/net/base/x509_util_mac.h
new file mode 100644
index 0000000000000000000000000000000000000000..639ca6e4640977ac1ccb30e59349a544157c56d0
--- /dev/null
+++ b/net/base/x509_util_mac.h
@@ -0,0 +1,28 @@
+// Copyright (c) 2011 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef NET_BASE_X509_UTIL_MAC_H_
+#define NET_BASE_X509_UTIL_MAC_H_
+#pragma once
+
+#include <CoreFoundation/CFArray.h>
+
+namespace net {
+
+class X509Certificate;
+
+namespace x509_util {
+
+// Returns a new CFArrayRef containing the certificate chain represented by
+// |cert| in the form expected by Security.framework and Keychain Services, or
+// NULL on failure. The first item in the array will be the primary
+// certificate of |cert|, followed by any additional certificates contained as
+// optional intermediates.

[wtc, 2011/10/16 14:55:49]

Nit: any additional certificates contained as optional intermediates
=> intermediate certificates

You can add "any" to indicate that intermediate certificates
may not exist.

I.e., make this more concise, and use "intermediate CA certificates" or
"intermediate certificates" instead of
just "intermediates".

+CFArrayRef CreateOSCertChainForCert(const X509Certificate* cert);
+
+} // namespace x509_util
+
+} // namespace net
+
+#endif  // NET_BASE_X509_UTIL_MAC_H_