Don't use X509Certificate in SSLConfig.

net/base/ssl_config_service.h

Index: net/base/ssl_config_service.h
diff --git a/net/base/ssl_config_service.h b/net/base/ssl_config_service.h
index 2b2e28a70cf331cf8748820c6c3d5a359426fef8..ab84aad09ebfd81c324c7f3dc10c6252981cfb0f 100644
--- a/net/base/ssl_config_service.h
+++ b/net/base/ssl_config_service.h
@@ -11,6 +11,7 @@
 #include "base/basictypes.h"
 #include "base/memory/ref_counted.h"
 #include "base/observer_list.h"
+#include "base/string_piece.h"
 #include "net/base/net_api.h"
 #include "net/base/x509_certificate.h"
 
@@ -28,6 +29,11 @@ struct NET_API SSLConfig {
   // be NULL if user doesn't care about the cert status.
   bool IsAllowedBadCert(X509Certificate* cert, int* cert_status) const;
 
+  // Same as above except works with DER encoded certificates instead
+  // of X509Certificate.
+  bool IsAllowedBadCert(const base::StringPiece& der_cert,
+                        int* cert_status) const;
+
   bool rev_checking_enabled;  // True if server certificate revocation
                               // checking is enabled.
   // SSL 2.0 is not supported.
@@ -67,7 +73,7 @@ struct NET_API SSLConfig {
     CertAndStatus();
     ~CertAndStatus();
 
-    scoped_refptr<X509Certificate> cert;
+    std::string der_cert;
     int cert_status;
   };