Insulate the legacy Android client auth code from OpenSSL ABI changes.

net/android/keystore.h

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_ANDROID_KEYSTORE_H
 #define NET_ANDROID_KEYSTORE_H
 
 #include <jni.h>
 
 #include <string>
 #include <vector>
 
+#include "base/android/scoped_java_ref.h"
 #include "base/basictypes.h"
 #include "base/strings/string_piece.h"
 #include "net/base/net_export.h"
 #include "net/ssl/ssl_client_cert_type.h"
 
-// Avoid including <openssl/evp.h> here.
-typedef struct evp_pkey_st EVP_PKEY;
-
 // Misc functions to access the Android platform KeyStore.
 
 namespace net {
 namespace android {
 
+struct AndroidEVP_PKEY;
+
 // Define a list of constants describing private key types. The
 // values are shared with Java through org.chromium.net.PrivateKeyType.
 // Example: PRIVATE_KEY_TYPE_RSA.
 enum PrivateKeyType {
 #define DEFINE_PRIVATE_KEY_TYPE(name,value)  PRIVATE_KEY_TYPE_ ## name = value,
 #include "net/android/private_key_type_list.h"
 #undef DEFINE_PRIVATE_KEY_TYPE
 };
 
 // Returns the modulus of a given RSAPrivateKey platform object,
@@ skipping 50 matching lines @@
     const base::StringPiece& digest,
     std::vector<uint8>* signature);
 
 
 // Return the PrivateKeyType of a given private key.
 // |private_key| is a JNI reference for the private key.
 // Returns a PrivateKeyType, while will be CLIENT_CERT_INVALID_TYPE
 // on error.
 NET_EXPORT PrivateKeyType GetPrivateKeyType(jobject private_key);
 
-// Returns a handle to the system EVP_PKEY object used to back a given
-// private_key object. This must *only* be used for RSA private keys
-// on Android < 4.2. Technically, this is only guaranteed to work if
-// the system image contains a vanilla implementation of the Java
-// API frameworks based on Harmony + OpenSSL.
+// Returns a handle to the system AndroidEVP_PKEY object used to back a given
+// private_key object. This must *only* be used for RSA private keys on Android
+// < 4.2. Technically, this is only guaranteed to work if the system image
+// contains a vanilla implementation of the Java API frameworks based on Harmony
+// + OpenSSL.
 //
 // |private_key| is a JNI reference for the private key.
-// Returns an EVP_PKEY* handle, or NULL in case of error.
+// Returns an AndroidEVP_PKEY* handle, or NULL in case of error.
 //
 // Note: Despite its name and return type, this function doesn't know
 //       anything about OpenSSL, it just type-casts a system pointer that
 //       is passed as an int through JNI. As such, it never increments
 //       the returned key's reference count.
-EVP_PKEY* GetOpenSSLSystemHandleForPrivateKey(jobject private_key);
+AndroidEVP_PKEY* GetOpenSSLSystemHandleForPrivateKey(jobject private_key);
+
+// Returns a JNI reference to the OpenSSLEngine object which used to back a

[agl, 2014/07/10 16:33:44]

verb needed after "which".

[davidben, 2014/07/10 21:47:07]

Done.

+// given private_key object. This must *only* be used for RSA private keys
+// on Android < 4.2. Technically, this is only guaranteed to work if
+// the system image contains a vanilla implementation of the Java
+// API frameworks based on Harmony + OpenSSL.
+base::android::ScopedJavaLocalRef<jobject> GetOpenSSLEngineForPrivateKey(
+    jobject private_key);
 
 NET_EXPORT void ReleaseKey(jobject private_key);
 
 // Register JNI methods
 NET_EXPORT bool RegisterKeyStore(JNIEnv* env);
 
 }  // namespace android
 }  // namespace net
 
 #endif  // NET_ANDROID_KEYSTORE_H