Map the client certificate related SSL alerts to

net/socket/nss_ssl_util.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/socket/nss_ssl_util.h"
 
 #include <nss.h>
 #include <secerr.h>
 #include <ssl.h>
 #include <sslerr.h>
@@ skipping 147 matching lines @@
       return ERR_CONNECTION_CLOSED;
     case PR_NOT_IMPLEMENTED_ERROR:
       return ERR_NOT_IMPLEMENTED;
 
     case SEC_ERROR_LIBRARY_FAILURE:
       return ERR_UNEXPECTED;
     case SEC_ERROR_INVALID_ARGS:
       return ERR_INVALID_ARGUMENT;
     case SEC_ERROR_NO_MEMORY:
       return ERR_OUT_OF_MEMORY;
+    case SSL_ERROR_BAD_CERT_ALERT:
+    case SSL_ERROR_UNSUPPORTED_CERT_ALERT:
+    case SSL_ERROR_REVOKED_CERT_ALERT:
+    case SSL_ERROR_EXPIRED_CERT_ALERT:
+    case SSL_ERROR_CERTIFICATE_UNKNOWN_ALERT:
+    case SSL_ERROR_UNKNOWN_CA_ALERT:
+    case SSL_ERROR_ACCESS_DENIED_ALERT:
+      return ERR_BAD_SSL_CLIENT_AUTH_CERT;

[Ryan Sleevi, 2012/05/22 19:14:11]

The interpretation of these are dependent upon whether we're in client mode or
server mode.

Otherwise, this mapping LGTM, as it matches SSLClientSocketMac.

     case SEC_ERROR_NO_KEY:
       return ERR_SSL_CLIENT_AUTH_CERT_NO_PRIVATE_KEY;
     case SEC_ERROR_INVALID_KEY:
     case SSL_ERROR_SIGN_HASHES_FAILURE:
       return ERR_SSL_CLIENT_AUTH_SIGNATURE_FAILED;
     // A handshake (initial or renegotiation) may fail because some signature
     // (for example, the signature in the ServerKeyExchange message for an
     // ephemeral Diffie-Hellman cipher suite) is invalid.
     case SEC_ERROR_BAD_SIGNATURE:
       return ERR_SSL_PROTOCOL_ERROR;
@@ skipping 84 matching lines @@
 
 void LogFailedNSSFunction(const BoundNetLog& net_log,
                           const char* function,
                           const char* param) {
   net_log.AddEvent(
       NetLog::TYPE_SSL_NSS_ERROR,
       make_scoped_refptr(new SSLFailedNSSFunctionParams(function, param)));
 }
 
 }  // namespace net