Clear the SSL Client Auth cache when a new SSL Client Certificate is...

net/socket/ssl_client_socket.h

 // Copyright (c) 2006-2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_SOCKET_SSL_CLIENT_SOCKET_H_
 #define NET_SOCKET_SSL_CLIENT_SOCKET_H_
 #pragma once
 
 #include <string>
 
@@ skipping 82 matching lines @@
   virtual bool was_npn_negotiated() const;
 
   virtual bool set_was_npn_negotiated(bool negotiated);
 
   virtual void UseDNSSEC(DNSSECProvider*) { }
 
   virtual bool was_spdy_negotiated() const;
 
   virtual bool set_was_spdy_negotiated(bool negotiated);
 
+  // Clears cache used for SSL session resumption.
+  static void ClearSSLSessionCache();
+
+  // To use the System specific SSL libraries for clearning the SSL
+  // session cache.
+  static void UseSystemClearSSLSessionCache();

[wtc, 2011/02/23 00:38:38]

These two static methods should be combined into one.

The ClearSSLSessionCache() method should test the
g_use_system_ssl boolean flag.  Alternatively,
ClearSSLSessionCache() should be a non-static member of the
ClientSocketFactory class.  I believe this is your original
design.  I'm sorry to have made you change that.

+
  private:
   // True if NPN was responded to, independent of selecting SPDY or HTTP.
   bool was_npn_negotiated_;
   // True if NPN successfully negotiated SPDY.
   bool was_spdy_negotiated_;
 };
 
 }  // namespace net
 
 #endif  // NET_SOCKET_SSL_CLIENT_SOCKET_H_