Refactor client cert private key handling.

net/cert/x509_util.h

Index: net/cert/x509_util.h
diff --git a/net/cert/x509_util.h b/net/cert/x509_util.h
index 1773fddce4b029ba4eb55f39f0b861bd4325894b..ba07d53eafae59c076db15ad7faecdce79e973a9 100644
--- a/net/cert/x509_util.h
+++ b/net/cert/x509_util.h
@@ -86,28 +86,6 @@ NET_EXPORT bool ParseCertificateSandboxed(
     std::vector<std::string>* dns_names,
     std::vector<std::string>* ip_addresses);
 
-// Comparator for use in STL algorithms that will sort client certificates by
-// order of preference.
-// Returns true if |a| is more preferable than |b|, allowing it to be used
-// with any algorithm that compares according to strict weak ordering.
-//
-// Criteria include:
-// - Prefer certificates that have a longer validity period (later
-//   expiration dates)
-// - If equal, prefer certificates that were issued more recently
-// - If equal, prefer shorter chains (if available)
-class NET_EXPORT_PRIVATE ClientCertSorter {
- public:
-  ClientCertSorter();
-
-  bool operator()(
-      const scoped_refptr<X509Certificate>& a,
-      const scoped_refptr<X509Certificate>& b) const;
-
- private:
-  base::Time now_;
-};
-
 // Returns a CRYPTO_BUFFER_POOL for deduplicating certificates.
 NET_EXPORT CRYPTO_BUFFER_POOL* GetBufferPool();