Remove SSL 2.0 support.

net/base/ssl_config_service_mac.cc

-// Copyright (c) 2009 The Chromium Authors. All rights reserved.
+// Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/ssl_config_service_mac.h"
 
 #include <CoreFoundation/CoreFoundation.h>
 
 #include "base/mac/scoped_cftyperef.h"
 
 using base::TimeDelta;
 using base::TimeTicks;
 
 namespace net {
 
 namespace {
 
 static const int kConfigUpdateInterval = 10;  // seconds
 
-static const bool kSSL2EnabledDefaultValue = false;
 static const bool kSSL3EnabledDefaultValue = true;
 static const bool kTLS1EnabledDefaultValue = true;
 
 static CFStringRef kRevocationPreferencesIdentifier =
     CFSTR("com.apple.security.revocation");
 static CFStringRef kOCSPStyleKey = CFSTR("OCSPStyle");
 static CFStringRef kCRLStyleKey = CFSTR("CRLStyle");
 static CFStringRef kNoneRevocationValue = CFSTR("None");
 static CFStringRef kBestAttemptRevocationValue = CFSTR("BestAttempt");
-static CFStringRef kSSL2EnabledKey = CFSTR("org.chromium.ssl.ssl2");
 static CFStringRef kSSL3EnabledKey = CFSTR("org.chromium.ssl.ssl3");
 static CFStringRef kTLS1EnabledKey = CFSTR("org.chromium.ssl.tls1");
 
 bool RevocationStyleIsEnabled(CFStringRef key) {
   CFPropertyListRef plist_ref = CFPreferencesCopyValue(key,
       kRevocationPreferencesIdentifier, kCFPreferencesCurrentUser,
       kCFPreferencesAnyHost);
   if (plist_ref) {
     base::mac::ScopedCFTypeRef<CFPropertyListRef> scoped_plist_ref(plist_ref);
     if (CFGetTypeID(plist_ref) == CFStringGetTypeID()) {
@@ skipping 41 matching lines @@
   //   - None (i.e., disabled, the default)
   //   - BestAttempt
   //   - RequireIfPresent
   //   - RequireForall
   // Mac OS X also breaks down revocation check for both CRLs and OCSP. We
   // set our revocation flag if the system-wide settings for either OCSP
   // or CRLs is anything other than None.
   config->rev_checking_enabled = (RevocationStyleIsEnabled(kOCSPStyleKey) ||
                                   RevocationStyleIsEnabled(kCRLStyleKey));
 
-  config->ssl2_enabled = SSLVersionIsEnabled(kSSL2EnabledKey,
-                                             kSSL2EnabledDefaultValue);
   config->ssl3_enabled = SSLVersionIsEnabled(kSSL3EnabledKey,
                                              kSSL3EnabledDefaultValue);
   config->tls1_enabled = SSLVersionIsEnabled(kTLS1EnabledKey,
                                              kTLS1EnabledDefaultValue);
   SSLConfigService::SetSSLConfigFlags(config);
 
   // TODO(rsleevi): http://crbug.com/58831 - Implement preferences for
   // disabling cipher suites.
   return true;
 }
 
 // static
-void SSLConfigServiceMac::SetSSL2Enabled(bool enabled) {
-  CFPreferencesSetAppValue(kSSL2EnabledKey,
-                           enabled ? kCFBooleanTrue : kCFBooleanFalse,
-                           kCFPreferencesCurrentApplication);
-  CFPreferencesAppSynchronize(kCFPreferencesCurrentApplication);
-}
-
-// static
 void SSLConfigServiceMac::SetSSL3Enabled(bool enabled) {
   CFPreferencesSetAppValue(kSSL3EnabledKey,
                            enabled ? kCFBooleanTrue : kCFBooleanFalse,
                            kCFPreferencesCurrentApplication);
   CFPreferencesAppSynchronize(kCFPreferencesCurrentApplication);
 }
 
 // static
 void SSLConfigServiceMac::SetTLS1Enabled(bool enabled) {
   CFPreferencesSetAppValue(kTLS1EnabledKey,
@@ skipping 20 matching lines @@
 void SSLConfigServiceMac::UpdateConfig(TimeTicks now) {
   SSLConfig orig_config = config_info_;
   GetSSLConfigNow(&config_info_);
   if (ever_updated_)
     ProcessConfigUpdate(orig_config, config_info_);
   config_time_ = now;
   ever_updated_ = true;
 }
 
 }  // namespace net