Refactor client cert private key handling.

net/ssl/ssl_client_auth_cache.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_SSL_SSL_CLIENT_AUTH_CACHE_H_
 #define NET_SSL_SSL_CLIENT_AUTH_CACHE_H_
 
 #include <map>
 #include <string>
 #include <utility>
@@ skipping 28 matching lines @@
   // If a certificate preference is not found, returns false.
   bool Lookup(const HostPortPair& server,
               scoped_refptr<X509Certificate>* certificate,
               scoped_refptr<SSLPrivateKey>* private_key);
 
   // Add a client certificate and private key for |server| to the cache. If
   // there is already a client certificate for |server|, it will be
   // overwritten. A NULL |client_cert| indicates a preference that no client
   // certificate should be sent to |server|.
   void Add(const HostPortPair& server,
-           X509Certificate* client_cert,
-           SSLPrivateKey* private_key);
+           scoped_refptr<X509Certificate> client_cert,
+           scoped_refptr<SSLPrivateKey> private_key);
 
   // Remove the client certificate for |server| from the cache, if one exists.
   void Remove(const HostPortPair& server);
 
   // CertDatabase::Observer methods:
   void OnCertDBChanged() override;
 
  private:
   typedef HostPortPair AuthCacheKey;
   typedef std::pair<scoped_refptr<X509Certificate>,
                     scoped_refptr<SSLPrivateKey>> AuthCacheValue;
   typedef std::map<AuthCacheKey, AuthCacheValue> AuthCacheMap;
 
   // internal representation of cache, an STL map.
   AuthCacheMap cache_;
 };
 
 }  // namespace net
 
 #endif  // NET_SSL_SSL_CLIENT_AUTH_CACHE_H_