Sign CertificateVerify messages on a background thread.

net/ssl/ssl_platform_key.h

+// Copyright 2014 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef NET_SSL_SSL_PLATFORM_KEY_H_
+#define NET_SSL_SSL_PLATFORM_KEY_H_
+
+#include "base/memory/ref_counted.h"
+#include "base/memory/scoped_ptr.h"
+#include "net/ssl/ssl_private_key.h"
+
+namespace base {
+class TaskRunner;
+}
+
+namespace net {
+
+class X509Certificate;
+
+// Looks up the private key from the platform key store corresponding
+// to |certificate|'s public key and returns an SSLPrivateKey which offloads
+// signing operations to |task_runner|.
+scoped_ptr<SSLPrivateKey> FetchClientCertPrivateKey(
+    const X509Certificate* certificate,

[Ryan Sleevi, 2015/06/15 22:55:23]

Don't make this const. That's not the API contract afforded by Windows (for
example). That is, even if it's logically const, it's not physically const, so
better to express that via the API.

[davidben, 2015/06/17 20:47:02]

(That just came from openssl_platform_key.h.) Fixed.

+    const scoped_refptr<base::TaskRunner>& task_runner);
+
+}  // namespace net
+
+#endif  // NET_SSL_SSL_PLATFORM_KEY_H_