Parse an application/x-x509-user-cert response with

content/browser/renderer_host/x509_user_cert_resource_handler.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/renderer_host/x509_user_cert_resource_handler.h"
 
 #include "base/string_util.h"
 #include "content/browser/renderer_host/resource_request_info_impl.h"
 #include "content/public/browser/content_browser_client.h"
 #include "content/public/common/resource_response.h"
@@ skipping 83 matching lines @@
 bool X509UserCertResourceHandler::OnResponseCompleted(
     int request_id,
     const net::URLRequestStatus& urs,
     const std::string& sec_info) {
   if (urs.status() != net::URLRequestStatus::SUCCESS)
     return false;
 
   AssembleResource();
   scoped_refptr<net::X509Certificate> cert;
   if (resource_buffer_) {
-      cert = net::X509Certificate::CreateFromBytes(resource_buffer_->data(),
-                                                   content_length_);
+      FILE* file = fopen("keygen-response", "w");
+      fwrite(resource_buffer_->data(), 1, content_length_, file);
+      fclose(file);
+      net::CertificateList cert_list =
+          net::X509Certificate::CreateCertificateListFromBytes(
+              resource_buffer_->data(), content_length_,
+              net::X509Certificate::FORMAT_AUTO);
+      if (cert_list.size()) {
+        fprintf(stderr, "cert_list.size()=%d\n", (int)cert_list.size());
+        net::X509Certificate::OSCertHandle cert_handle =
+            cert_list[0]->os_cert_handle();
+        net::X509Certificate::OSCertHandles intermediate_certs;
+        for (size_t i = 1; i < cert_list.size(); ++i)
+          intermediate_certs.push_back(cert_list[i]->os_cert_handle());
+        cert = net::X509Certificate::CreateFromHandle(cert_handle,
+                                                      intermediate_certs);
+      }
   }
+  // TODO(wtc): change ContentBrowserClient::AddNewCertificate() to take
+  // a net::CertificateList instead of a net::X509Certificate?
   content::GetContentClient()->browser()->AddNewCertificate(
       request_, cert, render_process_host_id_, render_view_id_);
   return true;
 }
 
 void X509UserCertResourceHandler::OnRequestClosed() {
 }
 
 X509UserCertResourceHandler::~X509UserCertResourceHandler() {
 }
 
 void X509UserCertResourceHandler::AssembleResource() {
   size_t assembled_bytes = 0;
   resource_buffer_ = content::AssembleData(buffer_, &assembled_bytes);
   DCHECK_EQ(content_length_, assembled_bytes);
 }