certificate manager: Disable export option for TPM-backed certs.

chrome/browser/ui/webui/options2/certificate_manager_handler2.cc

Index: chrome/browser/ui/webui/options2/certificate_manager_handler2.cc
diff --git a/chrome/browser/ui/webui/options2/certificate_manager_handler2.cc b/chrome/browser/ui/webui/options2/certificate_manager_handler2.cc
index af91ea5ada9a421762fbdee04efefbfb1812adf8..ea1c9c5aa7a894b46d5d7973e2b3e05ff4dbc4e0 100644
--- a/chrome/browser/ui/webui/options2/certificate_manager_handler2.cc
+++ b/chrome/browser/ui/webui/options2/certificate_manager_handler2.cc
@@ -39,6 +39,7 @@ static const char kSubNodesId[] = "subnodes";
 static const char kNameId[] = "name";
 static const char kReadOnlyId[] = "readonly";
 static const char kUntrustedId[] = "untrusted";
+static const char kExtractableId[] = "extractable";
 static const char kSecurityDeviceId[] = "device";
 static const char kErrorId[] = "error";
 
@@ -975,6 +976,9 @@ void CertificateManagerHandler::PopulateTree(const std::string& tab_name,
         cert_dict->SetBoolean(
             kUntrustedId,
             certificate_manager_model_->cert_db().IsUntrusted(cert));
+        cert_dict->SetBoolean(
+            kExtractableId,
+            !certificate_manager_model_->IsHardwareBacked(cert));

[wtc, 2012/05/22 23:43:46]

Please add a TODO comment to note that this should be
determined by testing for the PKCS #11 CKA_EXTRACTABLE
attribute.  We may need to use the NSS function
PK11_ReadRawAttribute to do that.

[hshi1, 2012/05/23 00:03:29]

Done.

         // TODO(mattm): Other columns.
         subnodes->Append(cert_dict);
       }