*WIP* Store NSS slots per profile. Move keygen to chrome.

content/browser/loader/resource_loader.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/loader/resource_loader.h"
 
 #include "base/command_line.h"
 #include "base/message_loop/message_loop.h"
 #include "base/metrics/histogram.h"
 #include "base/time/time.h"
@@ skipping 288 matching lines @@
     net::URLRequest* unused,
     net::SSLCertRequestInfo* cert_info) {
   DCHECK_EQ(request_.get(), unused);
 
   if (!delegate_->AcceptSSLClientCertificateRequest(this, cert_info)) {
     request_->Cancel();
     return;
   }
 
 #if !defined(USE_OPENSSL)
+  // XXX
+  //ResourceRequestInfoImpl* info = GetRequestInfo();
+  //ResourceContext* context = info->context;
+  //XXX: needs to go through chrome:
+  //ProfileIOData* io_data = ProfileIOData::FromResourceContext(context);
+  //crypto::ScopedPK11Slot slot(io_data->GetFooNSSKeySlot())
+  //XX maybe:
+  //ClientCertStore should be a content interface, implemneted by chrome/, and
+  //takes resourceContext argument. Chrome impl can get proper slot and call
+  //into per-platform net implementation of clientcertstore, similar to keygen.
+  // XXX how would we get the chrome impl of ClientCertStore into this class?
   client_cert_store_->GetClientCerts(*cert_info, &cert_info->client_certs);
   if (cert_info->client_certs.empty()) {
     // No need to query the user if there are no certs to choose from.
     request_->ContinueWithCertificate(NULL);
     return;
   }
 #endif
 
   DCHECK(!ssl_client_auth_handler_.get())
       << "OnCertificateRequested called with ssl_client_auth_handler pending";
@@ skipping 347 matching lines @@
     // we resume.
     deferred_stage_ = DEFERRED_FINISH;
   }
 }
 
 void ResourceLoader::CallDidFinishLoading() {
   delegate_->DidFinishLoading(this);
 }
 
 }  // namespace content