Move client certificates retrieval logic out of the SSL sockets.

content/browser/loader/resource_loader.h

Index: content/browser/loader/resource_loader.h
diff --git a/content/browser/loader/resource_loader.h b/content/browser/loader/resource_loader.h
index 14a67ec9e9c3587f047882a40b0ea27682dfc5c2..12f3b81e7fcefc11a8c7c59230bf1092da7ce614 100644
--- a/content/browser/loader/resource_loader.h
+++ b/content/browser/loader/resource_loader.h
@@ -12,6 +12,10 @@
 #include "content/public/browser/resource_controller.h"
 #include "net/url_request/url_request.h"
 
+namespace net {
+class ClientCertStore;
+}
+
 namespace content {
 class ResourceDispatcherHostLoginDelegate;
 class ResourceLoaderDelegate;
@@ -114,6 +118,8 @@ class ResourceLoader : public net::URLRequest::Delegate,
   // which point we'll receive a new ResourceHandler.
   bool is_transferring_;
 
+  scoped_ptr<net::ClientCertStore> client_cert_store_;
+
   base::WeakPtrFactory<ResourceLoader> weak_ptr_factory_;
 
   DISALLOW_COPY_AND_ASSIGN(ResourceLoader);