Send certificates to devtools when it's open instead of using certId

net/cert/x509_util.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_CERT_X509_UTIL_H_
 #define NET_CERT_X509_UTIL_H_
 
 #include <stdint.h>
 
 #include <memory>
 #include <string>
+#include <vector>
 
 #include "base/memory/ref_counted.h"
+#include "base/strings/string_piece.h"
 #include "base/time/time.h"
 #include "net/base/net_export.h"
 
 namespace crypto {
 class ECPrivateKey;
 class RSAPrivateKey;
 }
 
 namespace net {
 
@@ skipping 42 matching lines @@
 // hash algorithm.  You should not re-use a key for signing data with multiple
 // signature algorithms or parameters.
 NET_EXPORT bool CreateSelfSignedCert(crypto::RSAPrivateKey* key,
                                      DigestAlgorithm alg,
                                      const std::string& subject,
                                      uint32_t serial_number,
                                      base::Time not_valid_before,
                                      base::Time not_valid_after,
                                      std::string* der_cert);
 
+// Provides a method to parse a DER-encoded X509 certificate without calling any

[davidben, 2016/09/06 17:21:46]

Nit: X509 -> X.509, also I think we usually write these like "Parses a
DER-encoded X.509 certificate [...]".

+// OS primitives. This is useful in sandboxed processes.
+NET_EXPORT bool ParseCertificateSandboxed(
+    const base::StringPiece& certificate,
+    std::string* subject,
+    std::string* issuer,
+    base::Time* not_before,
+    base::Time* not_after,
+    std::vector<std::string>* dns_names,
+    std::vector<std::string>* ip_addresses);
+
 // Comparator for use in STL algorithms that will sort client certificates by
 // order of preference.
 // Returns true if |a| is more preferable than |b|, allowing it to be used
 // with any algorithm that compares according to strict weak ordering.
 //
 // Criteria include:
 // - Prefer certificates that have a longer validity period (later
 //   expiration dates)
 // - If equal, prefer certificates that were issued more recently
 // - If equal, prefer shorter chains (if available)
 class NET_EXPORT_PRIVATE ClientCertSorter {
  public:
   ClientCertSorter();
 
   bool operator()(
       const scoped_refptr<X509Certificate>& a,
       const scoped_refptr<X509Certificate>& b) const;
 
  private:
   base::Time now_;
 };
 
 } // namespace x509_util
 
 } // namespace net
 
 #endif  // NET_CERT_X509_UTIL_H_