Use separate SSL session caches per profile

net/base/ssl_config_service.h

Index: net/base/ssl_config_service.h
diff --git a/net/base/ssl_config_service.h b/net/base/ssl_config_service.h
index de2ebef7e904d49656cbec3b5dbb77510e858e8a..d8cf1aa5f081986a7c9961746e34f6a3920a72fb 100644
--- a/net/base/ssl_config_service.h
+++ b/net/base/ssl_config_service.h
@@ -15,6 +15,11 @@
 
 namespace net {
 
+// TODO(davidben): Make this a more interesting ref-counted object if
+// we move to an SSL library which allows creating and deleting "ssl
+// session cache" objects or so.
+typedef int SSLSessionCacheId;
+
 // A collection of SSL-related configuration settings.
 struct SSLConfig {
   // Default to revocation checking.
@@ -68,6 +73,10 @@ struct SSLConfig {
 
   bool false_start_enabled;  // True if we'll use TLS False Start.
 
+  // A uniquifier to be incorporated into the session cache entry; NSS
+  // provides only a global session cache.
+  SSLSessionCacheId session_cache_id;
+
   // TODO(wtc): move the following members to a new SSLParams structure.  They
   // are not SSL configuration settings.
 
@@ -185,10 +194,12 @@ class SSLConfigService : public base::RefCountedThreadSafe<SSLConfigService> {
  protected:
   friend class base::RefCountedThreadSafe<SSLConfigService>;
 
+  SSLSessionCacheId session_cache_id_;
+
   virtual ~SSLConfigService();
 
   // SetFlags sets the values of several flags based on global configuration.
-  static void SetSSLConfigFlags(SSLConfig* ssl_config);
+  void SetSSLConfigFlags(SSLConfig* ssl_config);
 
   // Process before/after config update.
   void ProcessConfigUpdate(const SSLConfig& orig_config,