Don't use crypto/x509 in SSLClientSocketImpl.

net/socket/ssl_client_socket_impl.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_SOCKET_SSL_CLIENT_SOCKET_IMPL_H_
 #define NET_SOCKET_SSL_CLIENT_SOCKET_IMPL_H_
 
 #include <stddef.h>
 #include <stdint.h>
 
@@ skipping 157 matching lines @@
   // pending Connect, Read or Write calls, if any. Retries all state machines
   // and, if complete, runs the respective callbacks.
   void RetryAllOperations();
 
   int VerifyCT();
 
   // Callback from the SSL layer that indicates the remote server is requesting
   // a certificate for this client.
   int ClientCertRequestCallback(SSL* ssl);
 
-  // CertVerifyCallback is called to verify the server's certificates. We do
-  // verification after the handshake so this function only enforces that the
-  // certificates don't change during renegotiation.
-  int CertVerifyCallback(X509_STORE_CTX* store_ctx);
-
   // Called after the initial handshake completes and after the server
   // certificate has been verified. The order of handshake completion and
   // certificate verification depends on whether the connection was false
   // started. After both have happened (thus calling this twice), the session is
   // safe to cache and will be cached.
   void MaybeCacheSession();
 
   // Called from the SSL layer whenever a new session is established.
   int NewSessionCallback(SSL_SESSION* session);
 
@@ skipping 160 matching lines @@
   // True if PKP is bypassed due to a local trust anchor.
   bool pkp_bypassed_;
 
   NetLogWithSource net_log_;
   base::WeakPtrFactory<SSLClientSocketImpl> weak_factory_;
 };
 
 }  // namespace net
 
 #endif  // NET_SOCKET_SSL_CLIENT_SOCKET_IMPL_H_