Make CertificateProviderService vend ClientCertIdentities directly.

net/BUILD.gn

 # Copyright (c) 2013 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/buildflag_header.gni")
 import("//build/config/chromecast_build.gni")
 import("//build/config/compiler/compiler.gni")
 import("//build/config/crypto.gni")
 import("//build/config/features.gni")
 import("//build/config/ui.gni")
@@ skipping 309 matching lines @@
     "socket/ssl_client_socket_impl.h",
     "socket/ssl_socket.h",
     "ssl/channel_id_service.cc",
     "ssl/channel_id_service.h",
     "ssl/channel_id_store.cc",
     "ssl/channel_id_store.h",
     "ssl/client_cert_identity.cc",
     "ssl/client_cert_identity.h",
     "ssl/client_cert_identity_mac.cc",
     "ssl/client_cert_identity_mac.h",
-    "ssl/client_key_store.cc",
-    "ssl/client_key_store.h",
     "ssl/default_channel_id_store.cc",
     "ssl/default_channel_id_store.h",
     "ssl/openssl_ssl_util.cc",
     "ssl/openssl_ssl_util.h",
     "ssl/ssl_cert_request_info.cc",
     "ssl/ssl_cert_request_info.h",
     "ssl/ssl_cipher_suite_names.cc",
     "ssl/ssl_cipher_suite_names.h",
     "ssl/ssl_client_auth_cache.cc",
     "ssl/ssl_client_auth_cache.h",
@@ skipping 1488 matching lines @@
       ]
       if (is_chromeos) {
         # These were already removed on non-ChromeOS.
         sources -= [
           "cert/nss_cert_database_chromeos.cc",
           "cert/nss_cert_database_chromeos.h",
           "cert/nss_profile_filter_chromeos.cc",
           "cert/nss_profile_filter_chromeos.h",
         ]
       }
-      sources -= [
-        "ssl/client_key_store.cc",
-        "ssl/client_key_store.h",
-        "ssl/ssl_platform_key_nss.cc",
-      ]
+      sources -= [ "ssl/ssl_platform_key_nss.cc" ]
     } else {
       sources += [
         "third_party/nss/ssl/cmpcert.cc",
         "third_party/nss/ssl/cmpcert.h",
       ]
     }
 
     if (!use_nss_certs) {
       # These files are part of the partial implementation of NSS for
       # cert verification, so keep them in that case.
@@ skipping 4200 matching lines @@
   ]
   deps = [
     ":net_fuzzer_test_support",
     ":test_support",
     "//base",
     "//net",
   ]
   dict = "data/fuzzer_dictionaries/net_spdy_session_fuzzer.dict"
   seed_corpus = "data/fuzzer_data/net_spdy_session_fuzzer/"
 }