Clear the SSL Client Auth cache when a new SSL Client Certificate is...

net/socket/ssl_client_socket.h

Index: net/socket/ssl_client_socket.h
===================================================================
--- net/socket/ssl_client_socket.h	(revision 75583)
+++ net/socket/ssl_client_socket.h	(working copy)
@@ -100,6 +100,13 @@
 
   virtual bool set_was_spdy_negotiated(bool negotiated);
 
+  // Clears cache used for SSL session resumption.
+  static void ClearSSLSessionCache();
+
+  // To use the System specific SSL libraries for clearning the SSL
+  // session cache.
+  static void UseSystemClearSSLSessionCache();

[wtc, 2011/02/23 00:38:38]

These two static methods should be combined into one.

The ClearSSLSessionCache() method should test the
g_use_system_ssl boolean flag.  Alternatively,
ClearSSLSessionCache() should be a non-static member of the
ClientSocketFactory class.  I believe this is your original
design.  I'm sorry to have made you change that.

+
  private:
   // True if NPN was responded to, independent of selecting SPDY or HTTP.
   bool was_npn_negotiated_;