Gave the GetOriginBoundCertificate an asynchronous interface because certificate

net/base/net_error_list.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file intentionally does not have header guards, it's included
 // inside a macro to generate enum.
 
 // This file contains the list of network errors.
 
 //
@@ skipping 556 matching lines @@
 
 // PKCS #12 import failed due to invalid MAC.
 NET_ERROR(PKCS12_IMPORT_INVALID_MAC, -707)
 
 // PKCS #12 import failed due to invalid/corrupt file.
 NET_ERROR(PKCS12_IMPORT_INVALID_FILE, -708)
 
 // PKCS #12 import failed due to unsupported features.
 NET_ERROR(PKCS12_IMPORT_UNSUPPORTED, -709)
 
+// Origin-bound certificate generation failed.

[wtc, 2011/08/09 00:43:34]

This comment should say:
  Key pair generation failed.

Consider naming this error KEY_GENERATION_FAILED so that it
can also be used for symmetric key generation failure.

+NET_ERROR(KEY_PAIR_GENERATION_FAILED, -710)
+
+// Origin-bound certificate generation failed.
+NET_ERROR(ORIGIN_BOUND_CERT_GENERATION_FAILED, -711)
+
+// Failure to export private key.
+NET_ERROR(PRIVATE_KEY_EXPORT_FAILED, -712)
+
+// Failure to get DER-encoded cert.

[wtc, 2011/08/09 00:43:34]

The comments in this file are the default error messages
for these error codes, so they should be clearly written
and avoid abbreviations.

I wonder if we should name this error code
GET_CERT_BYTES_FAILED, or GET_ENCODED_CERT_FAILED, to avoid
mentioning "DER".

+NET_ERROR(GET_DER_CERT_FAILED, -713)
+
 // DNS error codes.
 
 // DNS resolver received a malformed response.
 NET_ERROR(DNS_MALFORMED_RESPONSE, -800)
 
 // DNS server requires TCP
 NET_ERROR(DNS_SERVER_REQUIRES_TCP, -801)
 
 // DNS server failed.  This error is returned for all of the following
 // error conditions:
 // 1 - Format error - The name server was unable to interpret the query.
 // 2 - Server failure - The name server was unable to process this query
 //     due to a problem with the name server.
 // 4 - Not Implemented - The name server does not support the requested
 //     kind of query.
 // 5 - Refused - The name server refuses to perform the specified
 //     operation for policy reasons.
 NET_ERROR(DNS_SERVER_FAILED, -802)
 
 // DNS transaction timed out.
 NET_ERROR(DNS_TIMED_OUT, -803)