Remove the fingerprint and ca_fingerprint from X509Certificate

net/ssl/client_cert_store_mac.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/ssl/client_cert_store_mac.h"
 
 #include <CommonCrypto/CommonDigest.h>
 #include <CoreFoundation/CFArray.h>
 #include <CoreServices/CoreServices.h>
 #include <Security/SecBase.h>
@@ skipping 128 matching lines @@
   preliminary_list.insert(preliminary_list.end(), regular_certs.begin(),
                           regular_certs.end());
 
   selected_certs->clear();
   for (size_t i = 0; i < preliminary_list.size(); ++i) {
     scoped_refptr<X509Certificate>& cert = preliminary_list[i];
     if (cert->HasExpired() || !cert->SupportsSSLClientAuth())
       continue;
 
     // Skip duplicates (a cert may be in multiple keychains).
-    const SHA1HashValue& fingerprint = cert->fingerprint();
     auto cert_iter = std::find_if(
         selected_certs->begin(), selected_certs->end(),
-        [&fingerprint](const scoped_refptr<X509Certificate>& cert) {
-          return cert->fingerprint() == fingerprint;

[Ryan Sleevi, 2016/05/20 06:02:32]

Fixed this to do what it should have done :)

+        [&cert](const scoped_refptr<X509Certificate>& other_cert) {
+          return X509Certificate::IsSameOSCert(cert->os_cert_handle(),
+                                               other_cert->os_cert_handle());
         });
     if (cert_iter != selected_certs->end())
       continue;
 
     // Check if the certificate issuer is allowed by the server.
     if (request.cert_authorities.empty() ||
         cert->IsIssuedByEncoded(request.cert_authorities) ||
         (query_keychain &&
          IsIssuedByInKeychain(request.cert_authorities, &cert))) {
       selected_certs->push_back(cert);
@@ skipping 111 matching lines @@
     const SSLCertRequestInfo& request,
     CertificateList* selected_certs) {
   GetClientCertsImpl(
       preferred_cert, regular_certs, request, false, selected_certs);
   return true;
 }
 
 #pragma clang diagnostic pop  // "-Wdeprecated-declarations"
 
 }  // namespace net