Add X509CertificateBytes which uses CRYPTO_BUFFER instead of macOS-native certificate types.

net/ssl/ssl_platform_key_mac.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/ssl/ssl_platform_key_mac.h"
 
 #include <dlfcn.h>
 #include <CoreFoundation/CoreFoundation.h>
 #include <Security/cssm.h>
 #include <Security/SecBase.h>
@@ skipping 12 matching lines @@
 #include "base/mac/scoped_cftyperef.h"
 #include "base/macros.h"
 #include "base/memory/ptr_util.h"
 #include "base/memory/scoped_policy.h"
 #include "base/numerics/safe_conversions.h"
 #include "base/synchronization/lock.h"
 #include "crypto/mac_security_services_lock.h"
 #include "crypto/openssl_util.h"
 #include "net/base/net_errors.h"
 #include "net/cert/x509_certificate.h"
+#include "net/cert/x509_util_mac.h"
 #include "net/ssl/ssl_platform_key.h"
 #include "net/ssl/ssl_platform_key_util.h"
 #include "net/ssl/ssl_private_key.h"
 #include "net/ssl/threaded_ssl_private_key.h"
 #include "third_party/boringssl/src/include/openssl/ecdsa.h"
 #include "third_party/boringssl/src/include/openssl/mem.h"
 #include "third_party/boringssl/src/include/openssl/nid.h"
 #include "third_party/boringssl/src/include/openssl/rsa.h"
 
 #if !defined(MAC_OS_X_VERSION_10_12) || \
@@ skipping 34 matching lines @@
 };
 
 // Looks up the private key for |certificate| in |keychain| and returns
 // a SecKeyRef or nullptr on failure. The caller takes ownership of the
 // result.
 SecKeyRef FetchSecKeyRefForCertificate(const X509Certificate* certificate,
                                        SecKeychainRef keychain) {
   OSStatus status;
   base::ScopedCFTypeRef<SecIdentityRef> identity;
   {
+    base::ScopedCFTypeRef<SecCertificateRef> os_cert(
+        x509_util::CreateSecCertificateFromX509Certificate(certificate));
+    if (!os_cert)
+      return nullptr;
     base::AutoLock lock(crypto::GetMacSecurityServicesLock());
-    status = SecIdentityCreateWithCertificate(
-        keychain, certificate->os_cert_handle(), identity.InitializeInto());
+    status = SecIdentityCreateWithCertificate(keychain, os_cert.get(),
+                                              identity.InitializeInto());
   }
   if (status != noErr) {
     OSSTATUS_LOG(WARNING, status);
     return nullptr;
   }
 
   base::ScopedCFTypeRef<SecKeyRef> private_key;
   status = SecIdentityCopyPrivateKey(identity, private_key.InitializeInto());
   if (status != noErr) {
     OSSTATUS_LOG(WARNING, status);
@@ skipping 322 matching lines @@
 }
 
 scoped_refptr<SSLPrivateKey> FetchClientCertPrivateKey(
     const X509Certificate* certificate) {
   return FetchClientCertPrivateKeyFromKeychain(certificate, nullptr);
 }
 
 #pragma clang diagnostic pop  // "-Wdeprecated-declarations"
 
 }  // namespace net