Add support for restricting the cipher suites that SSLClientSocket(Mac,NSS) use

net/base/ssl_config_service_win.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/ssl_config_service_win.h"
 
 #include "base/thread_restrictions.h"
 #include "base/win/registry.h"
 
 using base::TimeDelta;
@@ skipping 64 matching lines @@
   DWORD protocols;
   if (!internet_settings.ReadValueDW(kProtocolsValueName, &protocols))
     protocols = PROTOCOLS_DEFAULT;
 
   config->rev_checking_enabled = (revocation != 0);
   config->ssl2_enabled = ((protocols & SSL2) != 0);
   config->ssl3_enabled = ((protocols & SSL3) != 0);
   config->tls1_enabled = ((protocols & TLS1) != 0);
   SSLConfigService::SetSSLConfigFlags(config);
 
+  // TODO(rsleevi): Possibly respect the registry keys defined in
+  // http://support.microsoft.com/kb/245030 (pre-Vista) or
+  // http://msdn.microsoft.com/en-us/library/bb870930(VS.85).aspx (post-Vista).
+  // Currently, these values are respected implicitly when using
+  // SSLClientSocketWin, but they do not propogate to SSLClientSocketNSS
+  // because we're not currently translating the keys.
+
   return true;
 }
 
 // static
 void SSLConfigServiceWin::SetRevCheckingEnabled(bool enabled) {
   // This registry access goes to disk and will slow down the IO thread.
   // http://crbug.com/61455
   DWORD value = enabled;
   RegKey internet_settings(HKEY_CURRENT_USER, kInternetSettingsSubKeyName,
                            KEY_WRITE);
@@ skipping 38 matching lines @@
 void SSLConfigServiceWin::UpdateConfig(TimeTicks now) {
   SSLConfig orig_config = config_info_;
   GetSSLConfigNow(&config_info_);
   if (ever_updated_)
     ProcessConfigUpdate(orig_config, config_info_);
   config_time_ = now;
   ever_updated_ = true;
 }
 
 }  // namespace net