Clear the SSL Client Auth cache when a new SSL Client Certificate is...

net/socket/ssl_client_socket.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/socket/ssl_client_socket.h"
 
+#if defined(OS_WIN)
+#include "net/socket/ssl_client_socket_nss.h"
+#elif defined(USE_OPENSSL)
+#include "net/socket/ssl_client_socket_openssl.h"
+#elif defined(USE_NSS)
+#include "net/socket/ssl_client_socket_nss.h"
+#elif defined(OS_MACOSX)
+#include "net/socket/ssl_client_socket_nss.h"
+#endif
+
 namespace net {
 
 SSLClientSocket::SSLClientSocket()
     : was_npn_negotiated_(false),
       was_spdy_negotiated_(false) {
 }
 
 SSLClientSocket::NextProto SSLClientSocket::NextProtoFromString(
     const std::string& proto_string) {
   if (proto_string == "http1.1" || proto_string == "http/1.1") {
@@ skipping 35 matching lines @@
 }
 
 bool SSLClientSocket::was_spdy_negotiated() const {
   return was_spdy_negotiated_;
 }
 
 bool SSLClientSocket::set_was_spdy_negotiated(bool negotiated) {
   return was_spdy_negotiated_ = negotiated;
 }
 
+// Default mechanism for clearing the SSL session cache, which is
+// to use the NSS function.
+void DefaultClearSSLSessionCache() {
+#if defined(OS_WIN)
+  return SSLClientSocketNSS::ClearSessionCache();
+#elif defined(USE_OPENSSL)
+  // no-op
+#elif defined(USE_NSS)
+  return SSLClientSocketNSS::ClearSessionCache();
+#elif defined(OS_MACOSX)
+  return SSLClientSocketNSS::ClearSessionCache();
+#else
+  NOTIMPLEMENTED();
+#endif
+}
+
+// Default mechanism for clearing the SSL session cache, which is not actually
+// definted on mac/windows.
+void SystemClearSSLSessionCache() {
+#if defined(OS_WIN)
+  // no-op
+#elif defined(OS_MACOSX)
+  // no-op
+#else
+  NOTIMPLEMENTED();
+#endif
+}
+
+void (*g_clear_ssl_session_cache)() =
+    DefaultClearSSLSessionCache;
+
+void SSLClientSocket::ClearSSLSessionCache() {
+  g_clear_ssl_session_cache();
+}
+
+void SSLClientSocket::UseSystemClearSSLSessionCache() {
+  g_clear_ssl_session_cache = SystemClearSSLSessionCache;
+}
+
 }  // namespace net