Move client certificates retrieval logic out of the SSL sockets.

net/socket_stream/socket_stream.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 //
 // TODO(ukai): code is similar with http_network_transaction.cc.  We should
 //   think about ways to share code, if possible.
 
 #include "net/socket_stream/socket_stream.h"
 
 #include <set>
@@ skipping 1150 matching lines @@
     return result;
 
   scoped_refptr<X509Certificate> client_cert;
   bool found_cached_cert = session->ssl_client_auth_cache()->Lookup(
       cert_request_info->host_and_port, &client_cert);
   if (!found_cached_cert)
     return result;
   if (!client_cert)
     return result;
 
-  const std::vector<scoped_refptr<X509Certificate> >& client_certs =
-      cert_request_info->client_certs;
-  bool cert_still_valid = false;
-  for (size_t i = 0; i < client_certs.size(); ++i) {
-    if (client_cert->Equals(client_certs[i])) {
-      cert_still_valid = true;
-      break;
-    }
-  }
+  const std::vector<std::string>& cert_authorities =
+      cert_request_info->cert_authorities;
+  bool cert_still_valid = cert_authorities.empty() ||
+      client_cert->IsIssuedByEncoded(cert_authorities);
   if (!cert_still_valid)
     return result;
 
   ssl_config->send_client_cert = true;
   ssl_config->client_cert = client_cert;
   next_state_ = STATE_TCP_CONNECT;
   return OK;
 }
 
 int SocketStream::AllowCertErrorForReconnection(SSLConfig* ssl_config) {
@@ skipping 82 matching lines @@
 
 SSLConfigService* SocketStream::ssl_config_service() const {
   return context_->ssl_config_service();
 }
 
 ProxyService* SocketStream::proxy_service() const {
   return context_->proxy_service();
 }
 
 }  // namespace net