Fix webui cert viewer showing wrong cert chain on NSS and no chain on OpenSSL.

net/socket/ssl_client_socket_nss.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file includes code SSLClientSocketNSS::DoVerifyCertComplete() derived
 // from AuthCertificateCallback() in
 // mozilla/security/manager/ssl/src/nsNSSCallbacks.cpp.
 
 /* ***** BEGIN LICENSE BLOCK *****
  * Version: MPL 1.1/GPL 2.0/LGPL 2.1
@@ skipping 1408 matching lines @@
       if (os_error == noErr) {
         os_error = SecIdentityCopyPrivateKey(identity, &private_key);
         CFRelease(identity);
       }
 
       if (os_error == noErr) {
         // TODO(rsleevi): Error checking for NSS allocation errors.
         *result_certs = CERT_NewCertList();
         *result_private_key = private_key;
 
-        chain.push_back(core->ssl_config_.client_cert->os_cert_handle());
-        const X509Certificate::OSCertHandles& intermediates =
-            core->ssl_config_.client_cert->GetIntermediateCertificates();
-        if (!intermediates.empty())
-          chain.insert(chain.end(), intermediates.begin(), intermediates.end());
-
+        core->ssl_config_.client_cert->GetCertificateChain(&chain);
         for (size_t i = 0, chain_count = chain.size(); i < chain_count; ++i) {
           CSSM_DATA cert_data;
           SecCertificateRef cert_ref = chain[i];
           os_error = SecCertificateGetData(cert_ref, &cert_data);
           if (os_error != noErr)
             break;
 
           SECItem der_cert;
           der_cert.type = siDERCertBuffer;
           der_cert.data = cert_data.Data;
@@ skipping 2144 matching lines @@
 scoped_refptr<X509Certificate>
 SSLClientSocketNSS::GetUnverifiedServerCertificateChain() const {
   return core_->state().server_cert.get();
 }
 
 ServerBoundCertService* SSLClientSocketNSS::GetServerBoundCertService() const {
   return server_bound_cert_service_;
 }
 
 }  // namespace net