SSLCertRequestInfo: Add |valid_cas| and |valid_key_types|

net/base/x509_certificate.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_BASE_X509_CERTIFICATE_H_
 #define NET_BASE_X509_CERTIFICATE_H_
 
 #include <string.h>
 
 #include <string>
@@ skipping 27 matching lines @@
 class PickleIterator;
 
 namespace crypto {
 class RSAPrivateKey;
 }  // namespace crypto
 
 namespace net {
 
 class CRLSet;
 class CertVerifyResult;
+class SSLCertRequestInfo;
 
 typedef std::vector<scoped_refptr<X509Certificate> > CertificateList;
 
 // X509Certificate represents a X.509 certificate, which is comprised a
 // particular identity or end-entity certificate, such as an SSL server
 // identity or an SSL client certificate, and zero or more intermediate
 // certificates that may be used to build a path to a root certificate.
 class NET_EXPORT X509Certificate
     : public base::RefCountedThreadSafe<X509Certificate> {
  public:
@@ skipping 239 matching lines @@
   CFArrayRef CreateClientCertificateChain() const;
 
   // Returns a new CFArrayRef containing this certificate and its intermediate
   // certificates in the form expected by Security.framework and Keychain
   // Services, or NULL on failure.
   // The first item in the array will be this certificate, followed by its
   // intermediates, if any.
   CFArrayRef CreateOSCertChainForCert() const;
 #endif
 
+  // Does this certificate matches the SSL CertificateRequest parameters

[wtc1, 2012/12/15 00:56:18]

Typo: matches => match

+  // stored in |cert_info|.
+  bool IsValidClientCertificate(const SSLCertRequestInfo& cert_info);

[wtc1, 2012/12/15 00:56:18]

"Valid" is ambiguous. How about "Acceptable"?

Alternatively, this method can be named MatchesClientCertRequest.

+
 #if defined(OS_WIN)
   // Returns a new PCCERT_CONTEXT containing this certificate and its
   // intermediate certificates, or NULL on failure. The returned
   // PCCERT_CONTEXT *MUST NOT* be stored in an X509Certificate, as this will
   // cause os_cert_handle() to return incorrect results. This function is only
   // necessary if the CERT_CONTEXT.hCertStore member will be accessed or
   // enumerated, which is generally true for any CryptoAPI functions involving
   // certificate chains, including validation or certificate display.
   //
   // Remarks:
@@ skipping 194 matching lines @@
   // based on the type of the certificate.
   std::string default_nickname_;
 #endif
 
   DISALLOW_COPY_AND_ASSIGN(X509Certificate);
 };
 
 }  // namespace net
 
 #endif  // NET_BASE_X509_CERTIFICATE_H_