Get ClientCertStore through ResourceContext.

net/ssl/client_cert_store.h

Index: net/ssl/client_cert_store.h
diff --git a/net/ssl/client_cert_store.h b/net/ssl/client_cert_store.h
index 46ef3362b3bbcc6aa4c67fa88fcd85bc04a22eeb..d7da62fc3545e01b3bf6ba123acd9c2a3f39c7a3 100644
--- a/net/ssl/client_cert_store.h
+++ b/net/ssl/client_cert_store.h
@@ -6,6 +6,7 @@
 #define NET_SSL_CLIENT_CERT_STORE_H_
 
 #include "base/basictypes.h"
+#include "base/callback_forward.h"
 #include "net/base/net_export.h"
 #include "net/cert/x509_certificate.h"
 
@@ -13,12 +14,17 @@ namespace net {
 
 class SSLCertRequestInfo;
 
+// The caller is expected to keep the ClientCertStore alive until the callback
+// supplied to GetClientCerts has been run.
 class NET_EXPORT ClientCertStore {
  public:
   virtual ~ClientCertStore() {}
 
-  virtual bool GetClientCerts(const SSLCertRequestInfo& cert_request_info,
-                              CertificateList* selected_certs) = 0;
+  // Get client certs matching the |cert_request_info|.  The |callback| may be
+  // called sychronously.
+  virtual void GetClientCerts(const SSLCertRequestInfo& cert_request_info,
+                              CertificateList* selected_certs,
+                              const base::Closure& callback) = 0;

[wtc, 2013/10/28 19:41:12]

Nit: If I only look at this interface and its comments, I won't know how the
method works in synchronous and asynchronous modes.

Two things are unclear to me.

1. What happens to selected_certs. In particular, what happens to selected_certs
in asynchronous mode.

2. When will |callback| be called.

[mattm, 2013/10/28 23:56:16]

Expanded the comment

  protected:
   ClientCertStore() {}