Add the PPAPI X509 Certificate interface and implementation.

content/browser/renderer_host/pepper_message_filter.cc

Index: content/browser/renderer_host/pepper_message_filter.cc
diff --git a/content/browser/renderer_host/pepper_message_filter.cc b/content/browser/renderer_host/pepper_message_filter.cc
index 283dfd7c06d13654ed4ba954031c90013459d1ed..e509f843dae4da57ee4df29cb0bc9778d7175458 100644
--- a/content/browser/renderer_host/pepper_message_filter.cc
+++ b/content/browser/renderer_host/pepper_message_filter.cc
@@ -151,7 +151,11 @@ bool PepperMessageFilter::OnMessageReceived(const IPC::Message& msg,
     IPC_MESSAGE_HANDLER(PpapiHostMsg_PPBNetworkMonitor_Stop,
                         OnNetworkMonitorStop)
 
-    IPC_MESSAGE_UNHANDLED(handled = false)
+    // X509 certificate messages.
+    IPC_MESSAGE_HANDLER(PpapiHostMsg_PPBX509Certificate_ParseDER,
+                        OnX509CertificateParseDER);
+
+  IPC_MESSAGE_UNHANDLED(handled = false)
   IPC_END_MESSAGE_MAP_EX()
   return handled;
 }
@@ -767,6 +771,17 @@ void PepperMessageFilter::OnNetworkMonitorStop(uint32 plugin_dispatcher_id) {
     net::NetworkChangeNotifier::RemoveIPAddressObserver(this);
 }
 
+void PepperMessageFilter::OnX509CertificateParseDER(
+    const std::vector<char>& der,
+    bool* succeeded,
+    ppapi::PPB_X509Certificate_Fields* result) {
+  if (der.size() == 0) {
+    *succeeded = false;
+  }
+  *succeeded = PepperTCPSocket::GetCertificateFields(&der[0], der.size(),
+                                                     result);
+}
+
 void PepperMessageFilter::GetFontFamiliesComplete(
     IPC::Message* reply_msg,
     scoped_ptr<base::ListValue> result) {