Use SecKeyCreateSignature on macOS 10.12 and later.

net/ssl/ssl_platform_key_nss.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <cert.h>
 #include <keyhi.h>
 #include <pk11pub.h>
 #include <prerror.h>
 
 #include <utility>
@@ skipping 141 matching lines @@
   SSLPrivateKey::Type type_;
   size_t max_length_;
   crypto::ScopedSECKEYPrivateKey key_;
 
   DISALLOW_COPY_AND_ASSIGN(SSLPlatformKeyNSS);
 };
 
 }  // namespace
 
 scoped_refptr<SSLPrivateKey> FetchClientCertPrivateKey(
-    X509Certificate* certificate) {
+    const X509Certificate* certificate) {
   crypto::ScopedSECKEYPrivateKey key(
       PK11_FindKeyByAnyCert(certificate->os_cert_handle(), nullptr));
   if (!key) {
     return ClientKeyStore::GetInstance()->FetchClientCertPrivateKey(
         *certificate);
   }
 
   SSLPrivateKey::Type type;
   size_t max_length;
   if (!GetClientCertInfo(certificate, &type, &max_length))
     return nullptr;
 
   return make_scoped_refptr(new ThreadedSSLPrivateKey(
       base::MakeUnique<SSLPlatformKeyNSS>(type, max_length, std::move(key)),
       GetSSLPlatformKeyTaskRunner()));
 }
 
 }  // namespace net