Sign CertificateVerify messages on a background thread.

net/ssl/ssl_platform_key.h

Index: net/ssl/ssl_platform_key.h
diff --git a/net/ssl/ssl_platform_key.h b/net/ssl/ssl_platform_key.h
new file mode 100644
index 0000000000000000000000000000000000000000..262f0953cfdd9789bd418d8330c49c71092e8407
--- /dev/null
+++ b/net/ssl/ssl_platform_key.h
@@ -0,0 +1,29 @@
+// Copyright 2014 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef NET_SSL_SSL_PLATFORM_KEY_H_
+#define NET_SSL_SSL_PLATFORM_KEY_H_

[davidben, 2015/06/12 21:39:01]

I renamed these from openssl_foo because there's nothing OpenSSL-specific about
the interface anymore. The implementations on Mac and Windows (slightly) depend
on BoringSSL, but that's fine because we can assume those ports use OpenSSL at
this point. (I can easily make the NSS implementation not depend on BoringSSL.)

I was a little sloppy about not including threaded_ssl_private_key.cc and
ssl_platform_key_nss.cc on build configurations that don't need it, but things
should build and the static linker will drop it all. I can put the exclusions
back if it really matters.

[Ryan Sleevi, 2015/06/15 22:35:27]

Yes, please do.

+
+#include "base/memory/ref_counted.h"
+#include "base/memory/scoped_ptr.h"
+#include "net/ssl/ssl_private_key.h"
+
+namespace base {
+class TaskRunner;
+}
+
+namespace net {
+
+class X509Certificate;
+
+// Looks up the private key from the platform key store corresponding
+// to |certificate|'s public key and returns an SSLPrivateKey which offloads
+// signing operations to |task_runner|.
+scoped_ptr<SSLPrivateKey> FetchClientCertPrivateKey(
+    const X509Certificate* certificate,
+    const scoped_refptr<base::TaskRunner>& task_runner);
+
+}  // namespace net
+
+#endif  // NET_SSL_SSL_PLATFORM_KEY_H_