Refactor client cert private key handling.

net/cert/x509_util.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_CERT_X509_UTIL_H_
 #define NET_CERT_X509_UTIL_H_
 
 #include <stdint.h>
 
 #include <memory>
@@ skipping 68 matching lines @@
 // OS primitives. This is useful in sandboxed processes.
 NET_EXPORT bool ParseCertificateSandboxed(
     const base::StringPiece& certificate,
     std::string* subject,
     std::string* issuer,
     base::Time* not_before,
     base::Time* not_after,
     std::vector<std::string>* dns_names,
     std::vector<std::string>* ip_addresses);
 
-// Comparator for use in STL algorithms that will sort client certificates by
-// order of preference.
-// Returns true if |a| is more preferable than |b|, allowing it to be used
-// with any algorithm that compares according to strict weak ordering.
-//
-// Criteria include:
-// - Prefer certificates that have a longer validity period (later
-//   expiration dates)
-// - If equal, prefer certificates that were issued more recently
-// - If equal, prefer shorter chains (if available)
-class NET_EXPORT_PRIVATE ClientCertSorter {
- public:
-  ClientCertSorter();
-
-  bool operator()(
-      const scoped_refptr<X509Certificate>& a,
-      const scoped_refptr<X509Certificate>& b) const;
-
- private:
-  base::Time now_;
-};
-
 // Returns a CRYPTO_BUFFER_POOL for deduplicating certificates.
 NET_EXPORT CRYPTO_BUFFER_POOL* GetBufferPool();
 
 // Creates a CRYPTO_BUFFER in the same pool returned by GetBufferPool.
 NET_EXPORT bssl::UniquePtr<CRYPTO_BUFFER> CreateCryptoBuffer(
     const uint8_t* data,
     size_t length);
 
 // Creates a CRYPTO_BUFFER in the same pool returned by GetBufferPool.
 NET_EXPORT bssl::UniquePtr<CRYPTO_BUFFER> CreateCryptoBuffer(
     const base::StringPiece& data);
 
 // Overload with no definition, to disallow creating a CRYPTO_BUFFER from a
 // char* due to StringPiece implicit ctor.
 NET_EXPORT bssl::UniquePtr<CRYPTO_BUFFER> CreateCryptoBuffer(
     const char* invalid_data);
 
 } // namespace x509_util
 
 } // namespace net
 
 #endif  // NET_CERT_X509_UTIL_H_