Plumbing SSLPrivateKey (//net)

net/ssl/ssl_platform_key.h

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_SSL_SSL_PLATFORM_KEY_H_
 #define NET_SSL_SSL_PLATFORM_KEY_H_
 
+#include "base/lazy_instance.h"
 #include "base/memory/ref_counted.h"
 #include "base/memory/scoped_ptr.h"
+#include "net/base/net_export.h"
+
+#if defined(OS_ANDROID)
+#include "crypto/scoped_openssl_types.h"
+#endif
 
 namespace base {
 class SequencedTaskRunner;
 }
 
 namespace net {
 
 class SSLPrivateKey;
 class X509Certificate;
 
+#if defined(OS_ANDROID)
+// Wraps a ScopedEVP_PKEY into an SSLPrivateKey.
+NET_EXPORT scoped_refptr<SSLPrivateKey> WrapOpenSSLPrivateKey(
+    crypto::ScopedEVP_PKEY key);

[davidben, 2015/11/04 00:17:38]

Does this need to be exported? Everything's just calling
FetchClientCertPrivateKey for now. (Except for
ssl_client_socket_openssl_unittest.cc, but you can keep that as a Record call
for the moment.)

Saves you having to add third_party/boringssl dependencies everywhere just yet.

[svaldez, 2015/11/04 16:55:52]

Done.

+#endif
 // Looks up the private key from the platform key store corresponding to
-// |certificate|'s public key and returns an SSLPrivateKey which offloads
-// signing operations to |task_runner|. |task_runner| is a SequencedTaskRunner
-// to allow for buggy third-party smartcard drivers.
-scoped_ptr<SSLPrivateKey> FetchClientCertPrivateKey(
-    X509Certificate* certificate,
-    scoped_refptr<base::SequencedTaskRunner> task_runner);
+// |certificate|'s public key and returns an SSLPrivateKey backed by the
+// playform key.
+NET_EXPORT scoped_refptr<SSLPrivateKey> FetchClientCertPrivateKey(
+    X509Certificate* certificate);
 
 }  // namespace net
 
 #endif  // NET_SSL_SSL_PLATFORM_KEY_H_