Clear the SSL Client Auth cache when a new SSL Client Certificate is...

net/base/ssl_client_auth_cache_unittest.cc

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/ssl_client_auth_cache.h"
 
 #include "base/time.h"
 #include "net/base/x509_certificate.h"
 #include "testing/gtest/include/gtest/gtest.h"
 
@@ skipping 119 matching lines @@
   EXPECT_TRUE(cache.Lookup(server1, &cached_cert));
   EXPECT_EQ(cert1, cached_cert);
 
   // Replace the specific preference with a NULL certificate.
   cache.Add(server1, NULL);
   cached_cert = NULL;
   EXPECT_TRUE(cache.Lookup(server1, &cached_cert));
   EXPECT_EQ(NULL, cached_cert.get());
 }
 
+// Check that the Clear() method removes all mappings.

[wtc, 2011/02/15 20:50:40]

Nit: mappings => cache entries
             or  cached client certificates

Make the same change to line 166 below.

[Ryan Hamilton, 2011/02/16 17:44:40]

Done.

+TEST(SSLClientAuthCacheTest, Clear) {
+  SSLClientAuthCache cache;
+  base::Time start_date = base::Time::Now();
+  base::Time expiration_date = start_date + base::TimeDelta::FromDays(1);
+
+  std::string server1("foo:443");
+  scoped_refptr<X509Certificate> cert1(
+      new X509Certificate("foo", "CA", start_date, expiration_date));
+
+  cache.Add(server1, cert1);
+
+  std::string server2("foo2:443");
+  cache.Add(server2, NULL);
+
+  scoped_refptr<X509Certificate> cached_cert(cert1);
+
+  // Demonstrate the set up is correct.
+  EXPECT_TRUE(cache.Lookup(server1, &cached_cert));
+  EXPECT_EQ(cert1, cached_cert);
+
+  EXPECT_TRUE(cache.Lookup(server2, &cached_cert));
+  EXPECT_EQ(NULL, cached_cert.get());
+
+  cache.Clear();
+
+  // Check that we no longer have mappings for
+  // either server.
+  EXPECT_FALSE(cache.Lookup(server1, &cached_cert));
+  EXPECT_FALSE(cache.Lookup(server2, &cached_cert));
+}
+
 }  // namespace net