ClientCertStoreChromeOS: support additional non-platform certs.

net/ssl/client_cert_store_nss.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/ssl/client_cert_store_nss.h"
 
 #include <nss.h>
 #include <ssl.h>
 
 #include "base/bind.h"
@@ skipping 105 matching lines @@
 void ClientCertStoreNSS::GetClientCertsOnWorkerThread(
     scoped_ptr<crypto::CryptoModuleBlockingPasswordDelegate> password_delegate,
     const SSLCertRequestInfo* request,
     CertificateList* selected_certs) {
   CERTCertList* client_certs = CERT_FindUserCertsByUsage(
       CERT_GetDefaultCertDB(),
       certUsageSSLClient,
       PR_FALSE,
       PR_FALSE,
       password_delegate.get());
-  // It is ok for a user not to have any client certs.
   if (!client_certs) {
     DVLOG(2) << "No client certs found.";
-    selected_certs->clear();
-    return;
+    client_certs = CERT_NewCertList();
   }
 
   GetClientCertsImpl(client_certs, *request, true, selected_certs);
   CERT_DestroyCertList(client_certs);
 }
 
 bool ClientCertStoreNSS::SelectClientCertsForTesting(
     const CertificateList& input_certs,
     const SSLCertRequestInfo& request,
     CertificateList* selected_certs) {
   CERTCertList* cert_list = CERT_NewCertList();
   if (!cert_list)
     return false;
   for (size_t i = 0; i < input_certs.size(); ++i) {
     CERT_AddCertToListTail(
         cert_list, CERT_DupCertificate(input_certs[i]->os_cert_handle()));
   }
 
   GetClientCertsImpl(cert_list, request, false, selected_certs);
   CERT_DestroyCertList(cert_list);
   return true;
 }
 
 }  // namespace net