Add server certificate request parameters to be stored in SSLCertRequestInfo.

net/socket/ssl_client_socket_win.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/socket/ssl_client_socket_win.h"
 
 #include <schnlsp.h>
 
 #include <algorithm>
 #include <map>
@@ skipping 438 matching lines @@
 
   if (ssl_config_.version_fallback)
     ssl_info->connection_status |= SSL_CONNECTION_VERSION_FALLBACK;
 
   return true;
 }
 
 void SSLClientSocketWin::GetSSLCertRequestInfo(
     SSLCertRequestInfo* cert_request_info) {
   cert_request_info->host_and_port = host_and_port_.ToString();
+  cert_request_info->cert_authorities.clear();
+  cert_request_info->cert_key_types.clear();
   cert_request_info->client_certs.clear();
 
-  // Get the certificate_authorities field of the CertificateRequest message.
-  // Schannel doesn't return the certificate_types field of the
-  // CertificateRequest message to us, so we can't filter the client
-  // certificates properly. :-(
+  // Get the server criteria for client certificates. Schannel doesn't return
+  // the certificate_types field of the CertificateRequest message to us, so we
+  // can't fill the |cert_key_types| field.
   SecPkgContext_IssuerListInfoEx issuer_list;
   SECURITY_STATUS status = QueryContextAttributes(
       &ctxt_, SECPKG_ATTR_ISSUER_LIST_EX, &issuer_list);
   if (status != SEC_E_OK) {
     DLOG(ERROR) << "QueryContextAttributes (issuer list) failed: " << status;
     return;
   }
 
+  for (size_t i = 0; i < issuer_list.cIssuers; i++) {
+    cert_request_info->cert_authorities.push_back(std::string(
+        reinterpret_cast<const char*>(issuer_list.aIssuers[i].pbData),
+        static_cast<size_t>(issuer_list.aIssuers[i].cbData)));
+  }
+
+  // Retrieve the list of matching client certificates. This is to be moved out
+  // of here as a part of refactoring effort being tracked in
+  // http://crbug.com/166642.
+
   // Client certificates of the user are in the "MY" system certificate store.
   HCERTSTORE my_cert_store = CertOpenSystemStore(NULL, L"MY");
   if (!my_cert_store) {
     LOG(ERROR) << "Could not open the \"MY\" system certificate store: "
                << GetLastError();
     FreeContextBuffer(issuer_list.aIssuers);
     return;
   }
 
   // Enumerate the client certificates.
@@ skipping 1132 matching lines @@
     UpdateConnectionTypeHistograms(CONNECTION_SSL_MD2_CA);
 }
 
 void SSLClientSocketWin::FreeSendBuffer() {
   SECURITY_STATUS status = FreeContextBuffer(send_buffer_.pvBuffer);
   DCHECK(status == SEC_E_OK);
   memset(&send_buffer_, 0, sizeof(send_buffer_));
 }
 
 }  // namespace net