Don't use RSAPrivateKey in NSS integration code.

net/test/cert_test_util.h

Index: net/test/cert_test_util.h
diff --git a/net/test/cert_test_util.h b/net/test/cert_test_util.h
index 8ad566451dc945e45488db0a08a79fbed669c23b..219ccd872572dc3af65daac31edecebdd54f3f09 100644
--- a/net/test/cert_test_util.h
+++ b/net/test/cert_test_util.h
@@ -12,8 +12,6 @@
 #include "net/cert/x509_certificate.h"
 
 #if defined(USE_NSS_CERTS)
-#include "base/memory/scoped_ptr.h"
-
 // From <pk11pub.h>
 typedef struct PK11SlotInfoStr PK11SlotInfo;
 #endif
@@ -31,13 +29,12 @@ namespace net {
 class EVRootCAMetadata;
 
 #if defined(USE_NSS_CERTS)
-// Imports a private key from file |key_filename| in |dir|. The file must
-// contain a PKCS#8 PrivateKeyInfo in DER encoding. The key is imported to
-// |slot|.
-scoped_ptr<crypto::RSAPrivateKey> ImportSensitiveKeyFromFile(
-    const base::FilePath& dir,
-    const std::string& key_filename,
-    PK11SlotInfo* slot);
+// Imports a private key from file |key_filename| in |dir| into |slot|. The file
+// must contain a PKCS#8 PrivateKeyInfo in DER encoding. Returns true on success
+// and false on failure.
+bool ImportSensitiveKeyFromFile(const base::FilePath& dir,

[davidben, 2015/04/27 18:07:22]

Nothing ever uses this output except as a boolean. I could make it return a
crypto::ScopedSECKEYPrivateKey, but then net needs to add NSS to
export_dependent_settings/public_deps which seemed unnecessary here.

[Ryan Sleevi, 2015/04/27 19:11:27]

I don't follow this.

[davidben, 2015/04/27 19:53:44]

The only caller of this function just casts the output to a boolean and cares
about the side effect on |slot|. So bool is sufficient for that caller.

If this were to return a crypto::ScopedSECKEYPrivateKey, that means that a
public header file in //net depends on header files from NSS. That means that
targets which depend on //net must also pull in NSS headers. The way one
expresses this is for NSS to be in net's export_dependent_settings (gyp) or
public_deps (gn).

Given that we have no need for the return value anyway, it seemed better to just
not expose that dependency. (Though, honestly, we're pretty bad at exporting
dependencies when we should. If our buildsystem had better control over our
includes, we'd probably have to declare a lot more stuff.)

+                                const std::string& key_filename,
+                                PK11SlotInfo* slot);
 
 bool ImportClientCertToSlot(const scoped_refptr<X509Certificate>& cert,
                             PK11SlotInfo* slot);