Improved support for loading client certificates on smart cards on macOS

net/ssl/client_cert_store_mac.h

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_SSL_CLIENT_CERT_STORE_MAC_H_
 #define NET_SSL_CLIENT_CERT_STORE_MAC_H_
 
+#include <Security/Security.h>
+
 #include "base/callback.h"
 #include "base/macros.h"
 #include "net/base/net_export.h"
 #include "net/ssl/client_cert_store.h"
 #include "net/ssl/ssl_cert_request_info.h"
 
 namespace net {
 
 class NET_EXPORT ClientCertStoreMac : public ClientCertStore {
  public:
@@ skipping 20 matching lines @@
   // Testing hook specific to Mac, where the internal logic recognizes preferred
   // certificates for particular domains. If the preferred certificate is
   // present in the output list (i.e. it doesn't get filtered out), it should
   // always come first.
   bool SelectClientCertsGivenPreferredForTesting(
       const scoped_refptr<X509Certificate>& preferred_cert,
       const CertificateList& regular_certs,
       const SSLCertRequestInfo& request,
       CertificateList* selected_certs);
 
+  // Given an |identity| identifies its corresponding certificate, and either
+  // adds it to |regular_certs| or assigns it to |preferred_cert|, if the
+  // |identity| matches the |preferred_identity|.
+  void AddIdentity(CertificateList& regular_certs,
+                   scoped_refptr<X509Certificate>& preferred_cert,
+                   SecIdentityRef preferred_identity,
+                   SecIdentityRef identity);
+
   DISALLOW_COPY_AND_ASSIGN(ClientCertStoreMac);
 };
 
 }  // namespace net
 
 #endif  // NET_SSL_CLIENT_CERT_STORE_MAC_H_