Clear the SSL Client Auth cache when a new SSL Client Certificate is...

net/socket/client_socket_factory.cc

Index: net/socket/client_socket_factory.cc
===================================================================
--- net/socket/client_socket_factory.cc	(revision 75583)
+++ net/socket/client_socket_factory.cc	(working copy)
@@ -8,12 +8,14 @@
 #include "build/build_config.h"
 #include "net/socket/client_socket_handle.h"
 #if defined(OS_WIN)
-#include "net/socket/ssl_client_socket_win.h"
+#include "net/socket/ssl_client_socket_nss.h"
+#include "net/socket/ssl_client_socket_win_factory.h"
 #elif defined(USE_OPENSSL)
 #include "net/socket/ssl_client_socket_openssl.h"
 #elif defined(USE_NSS)
 #include "net/socket/ssl_client_socket_nss.h"
 #elif defined(OS_MACOSX)
+#include "net/socket/ssl_client_socket_mac_factory.h"
 #include "net/socket/ssl_client_socket_nss.h"
 #endif
 #include "net/socket/ssl_host_info.h"
@@ -34,8 +36,8 @@
     DnsCertProvenanceChecker* dns_cert_checker) {
   scoped_ptr<SSLHostInfo> shi(ssl_host_info);
 #if defined(OS_WIN)
-  return new SSLClientSocketWin(transport_socket, host_and_port, ssl_config,
-                                cert_verifier);
+  return new SSLClientSocketNSS(transport_socket, host_and_port, ssl_config,
+                                shi.release(), cert_verifier, dns_cert_checker);
 #elif defined(USE_OPENSSL)
   return new SSLClientSocketOpenSSL(transport_socket, host_and_port,
                                     ssl_config, cert_verifier);
@@ -98,10 +100,13 @@
   return g_default_client_socket_factory.Pointer();
 }
 
-// static
-void ClientSocketFactory::SetSSLClientSocketFactory(
-    SSLClientSocketFactory factory) {
-  g_ssl_factory = factory;
+void ClientSocketFactory::UseSystemSSL() {

[wtc, 2011/02/23 00:38:38]

This function can just set a global boolean flag:
  bool g_use_system_ssl;

and DefaultClientSocketFactory::CreateSSLClientSocket
can do either new SSLClientSocketNSS or
new SSLClientSocket{Mac,Win} depending on the value of
g_use_system_ssl.

IMPORTANT: the reason I had to use g_ssl_factory for
Windows was that I had doubly-defined symbol linker errors
when linking some ChromeFrame test programs because
those test programs were also linked with NSPR (a dependency
of NSS).  It's possible that this build problem has been
fixed, so we can just use the simpler g_use_system_ssl
method.

Please watch out for ChromeFrame test program build failures
when you check in this CL.

+#if defined(OS_WIN)
+  g_ssl_factory = net::SSLClientSocketWinFactory;
+#elif defined(OS_MACOSX)
+  g_ssl_factory = net::SSLClientSocketMacFactory;

[wtc, 2011/02/23 00:38:38]

Nit: remove the net:: prefix because this file is in the
'net' namespace.

+#endif
+  SSLClientSocket::UseSystemClearSSLSessionCache();
 }
 
 }  // namespace net