Add a preference and command-line option to disable SSL/TLS cipher suites

chrome/browser/prefs/command_line_pref_store.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/prefs/command_line_pref_store.h"
 
 #include "base/logging.h"
+#include "base/string_split.h"
 #include "base/values.h"
 #include "chrome/browser/prefs/proxy_config_dictionary.h"
 #include "chrome/common/chrome_switches.h"
 #include "chrome/common/pref_names.h"
 #include "ui/base/ui_base_switches.h"
 
 const CommandLinePrefStore::StringSwitchToPreferenceMapEntry
     CommandLinePrefStore::string_switch_map_[] = {
       { switches::kLang, prefs::kApplicationLocale },
       { switches::kAuthSchemes, prefs::kAuthSchemes },
@@ skipping 23 matching lines @@
         prefs::kWebKitAllowDisplayingInsecureContent, false },
       { switches::kAllowCrossOriginAuthPrompt,
         prefs::kAllowCrossOriginAuthPrompt, true },
 };
 
 CommandLinePrefStore::CommandLinePrefStore(const CommandLine* command_line)
     : command_line_(command_line) {
   ApplySimpleSwitches();
   ApplyProxyMode();
   ValidateProxySwitches();
+  ApplySSLSwitches();
 }
 
 CommandLinePrefStore::~CommandLinePrefStore() {}
 
 void CommandLinePrefStore::ApplySimpleSwitches() {
   // Look for each switch we know about and set its preference accordingly.
   for (size_t i = 0; i < arraysize(string_switch_map_); ++i) {
     if (command_line_->HasSwitch(string_switch_map_[i].switch_name)) {
       Value* value = Value::CreateStringValue(command_line_->
           GetSwitchValueASCII(string_switch_map_[i].switch_name));
@@ skipping 38 matching lines @@
   } else if (command_line_->HasSwitch(switches::kProxyServer)) {
     std::string proxy_server =
         command_line_->GetSwitchValueASCII(switches::kProxyServer);
     std::string bypass_list =
         command_line_->GetSwitchValueASCII(switches::kProxyBypassList);
     SetValue(prefs::kProxy,
              ProxyConfigDictionary::CreateFixedServers(proxy_server,
                                                        bypass_list));
   }
 }
+
+void CommandLinePrefStore::ApplySSLSwitches() {
+  if (command_line_->HasSwitch(switches::kCipherSuiteBlacklist)) {
+    std::string cipher_suites =
+        command_line_->GetSwitchValueASCII(switches::kCipherSuiteBlacklist);
+    std::vector<std::string> cipher_strings;
+    base::SplitString(cipher_suites, ',', &cipher_strings);
+    base::ListValue* list_value = new base::ListValue();
+    for (std::vector<std::string>::const_iterator it = cipher_strings.begin();
+         it != cipher_strings.end(); ++it) {
+      list_value->Append(base::Value::CreateStringValue(*it));
+    }
+    SetValue(prefs::kCipherSuiteBlacklist, list_value);
+  }
+}