Add support for restricting the cipher suites that SSLClientSocket(Mac,NSS) use

net/base/ssl_config_service_mac.cc

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/ssl_config_service_mac.h"
 
 #include <CoreFoundation/CoreFoundation.h>
 
 #include "base/mac/scoped_cftyperef.h"
 
@@ skipping 79 matching lines @@
                                   RevocationStyleIsEnabled(kCRLStyleKey));
 
   config->ssl2_enabled = SSLVersionIsEnabled(kSSL2EnabledKey,
                                              kSSL2EnabledDefaultValue);
   config->ssl3_enabled = SSLVersionIsEnabled(kSSL3EnabledKey,
                                              kSSL3EnabledDefaultValue);
   config->tls1_enabled = SSLVersionIsEnabled(kTLS1EnabledKey,
                                              kTLS1EnabledDefaultValue);
   SSLConfigService::SetSSLConfigFlags(config);
 
+  // TODO(rsleevi): http://crbug.com/58831 - Implement preferences for
+  // disabling cipher suites.
   return true;
 }
 
 // static
 void SSLConfigServiceMac::SetSSL2Enabled(bool enabled) {
   CFPreferencesSetAppValue(kSSL2EnabledKey,
                            enabled ? kCFBooleanTrue : kCFBooleanFalse,
                            kCFPreferencesCurrentApplication);
   CFPreferencesAppSynchronize(kCFPreferencesCurrentApplication);
 }
@@ skipping 32 matching lines @@
 void SSLConfigServiceMac::UpdateConfig(TimeTicks now) {
   SSLConfig orig_config = config_info_;
   GetSSLConfigNow(&config_info_);
   if (ever_updated_)
     ProcessConfigUpdate(orig_config, config_info_);
   config_time_ = now;
   ever_updated_ = true;
 }
 
 }  // namespace net