Move client certificates retrieval logic out of the SSL sockets.

net/base/x509_certificate.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_BASE_X509_CERTIFICATE_H_
 #define NET_BASE_X509_CERTIFICATE_H_
 
 #include <string.h>
 
 #include <string>
@@ skipping 261 matching lines @@
   // Ownership follows the "get" rule: it is the caller's responsibility to
   // retain the elements of the result.
   const OSCertHandles& GetIntermediateCertificates() const {
     return intermediate_ca_certs_;
   }
 
 #if defined(OS_MACOSX)
   // Does this certificate's usage allow SSL client authentication?
   bool SupportsSSLClientAuth() const;
 
-  // Do any of the given issuer names appear in this cert's chain of trust?
-  bool IsIssuedBy(const std::vector<CertPrincipal>& valid_issuers);
-
-  // Adds all available SSL client identity certs to the given vector.
-  // |server_domain| is a hint for which domain the cert is to be sent to
-  // (a cert previously specified as the default for that domain will be given
-  // precedence and returned first in the output vector.)
-  // If valid_issuers is non-empty, only certs that were transitively issued
-  // by one of the given names will be included in the list.
-  static bool GetSSLClientCertificates(
-      const std::string& server_domain,
-      const std::vector<CertPrincipal>& valid_issuers,
-      CertificateList* certs);
-
   // Creates the chain of certs to use for this client identity cert.
   CFArrayRef CreateClientCertificateChain() const;
 
   // Returns a new CFArrayRef containing this certificate and its intermediate
   // certificates in the form expected by Security.framework and Keychain
   // Services, or NULL on failure.
   // The first item in the array will be this certificate, followed by its
   // intermediates, if any.
   CFArrayRef CreateOSCertChainForCert() const;
 #endif
@@ skipping 209 matching lines @@
   // based on the type of the certificate.
   std::string default_nickname_;
 #endif
 
   DISALLOW_COPY_AND_ASSIGN(X509Certificate);
 };
 
 }  // namespace net
 
 #endif  // NET_BASE_X509_CERTIFICATE_H_