Reland "Don't use RSAPrivateKey in NSS integration code."

chrome/browser/chromeos/ownership/owner_settings_service_chromeos.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_CHROMEOS_OWNERSHIP_OWNER_SETTINGS_SERVICE_CHROMEOS_H_
 #define CHROME_BROWSER_CHROMEOS_OWNERSHIP_OWNER_SETTINGS_SERVICE_CHROMEOS_H_
 
 #include <string>
 #include <vector>
 
@@ skipping 117 matching lines @@
 
   // Perform fixups required to ensure sensical local-owner device policy:
   //  1) user whitelisting must be explicitly allowed or disallowed, and
   //  2) the owner user must be on the whitelist, if it's enforced.
   static void FixupLocalOwnerPolicy(
       const std::string& user_id,
       enterprise_management::ChromeDeviceSettingsProto* settings);
 
   // OwnerSettingsService protected interface overrides:
 
-  // Reloads private key from profile's NSS slots, responds via |callback|.
+  // Reloads private key from profile's NSS slots, responds via |callback|. On
+  // success, |private_key| is non-null, but if the private key doesn't exist,
+  // |private_key->key()| may be null.
   void ReloadKeypairImpl(const base::Callback<
       void(const scoped_refptr<ownership::PublicKey>& public_key,
            const scoped_refptr<ownership::PrivateKey>& private_key)>& callback)
       override;
 
   // Possibly notifies DeviceSettingsService that owner's keypair is loaded.
   void OnPostKeypairLoadedActions() override;
 
   // Tries to apply recent changes to device settings proto, sign it and store.
   void StorePendingChanges();
@@ skipping 51 matching lines @@
   base::WeakPtrFactory<OwnerSettingsServiceChromeOS> weak_factory_;
 
   base::WeakPtrFactory<OwnerSettingsServiceChromeOS> store_settings_factory_;
 
   DISALLOW_COPY_AND_ASSIGN(OwnerSettingsServiceChromeOS);
 };
 
 }  // namespace chromeos
 
 #endif  // CHROME_BROWSER_CHROMEOS_OWNERSHIP_OWNER_SETTINGS_SERVICE_CHROMEOS_H_