Ensure that when using False Start + client auth, bad client certificates are not cached

net/base/ssl_cert_request_info.h

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_BASE_SSL_CERT_REQUEST_INFO_H_
 #define NET_BASE_SSL_CERT_REQUEST_INFO_H_
 #pragma once
 
 #include <string>
 #include <vector>
 
 #include "base/ref_counted.h"
 
 namespace net {
 
 class X509Certificate;
 
 // The SSLCertRequestInfo class contains the info that allows a user to
 // select a certificate to send to the SSL server for client authentication.
 class SSLCertRequestInfo
     : public base::RefCountedThreadSafe<SSLCertRequestInfo> {
  public:
   SSLCertRequestInfo();
 
+  // Resets the SSLCertRequestInfo as if no certificate had been requested.

[wtc, 2011/01/12 00:21:09]

You just need to say "to zero/null/empty values".  Actually
the Reset method doesn't need documenting...

+  void Reset();
+
   // The host and port of the SSL server that requested client authentication.
   std::string host_and_port;
 
   // A list of client certificates that match the server's criteria in the
   // SSL CertificateRequest message.  In TLS 1.0, the CertificateRequest
   // message is defined as:
   //   enum {
   //     rsa_sign(1), dss_sign(2), rsa_fixed_dh(3), dss_fixed_dh(4),
   //     (255)
   //   } ClientCertificateType;
   //
   //   opaque DistinguishedName<1..2^16-1>;
   //
   //   struct {
   //       ClientCertificateType certificate_types<1..2^8-1>;
   //       DistinguishedName certificate_authorities<3..2^16-1>;
   //   } CertificateRequest;
   std::vector<scoped_refptr<X509Certificate> > client_certs;
 
  private:
   friend class base::RefCountedThreadSafe<SSLCertRequestInfo>;
 
   ~SSLCertRequestInfo();
 };
 
 }  // namespace net
 
 #endif  // NET_BASE_SSL_CERT_REQUEST_INFO_H_