Disable SPDY IP pooling for SSL connections with client authentication.

net/spdy/spdy_session.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/spdy/spdy_session.h"
 
 #include "base/basictypes.h"
 #include "base/logging.h"
 #include "base/memory/linked_ptr.h"
 #include "base/message_loop.h"
@@ skipping 324 matching lines @@
   certificate_error_code_ = certificate_error_code;
 
   // Write out any data that we might have to send, such as the settings frame.
   WriteSocketLater();
   net::Error error = ReadSocket();
   if (error == ERR_IO_PENDING)
     return OK;
   return error;
 }
 
 bool SpdySession::VerifyDomainAuthentication(const std::string& domain) {

[wtc, 2011/10/27 01:13:58]

We may want to rename this method because it does more than
verifying domain name now.

[ramant (doing other things), 2011/10/27 16:20:33]

+1

   if (!verify_domain_authentication_)
     return true;
 
   if (state_ != CONNECTED)
     return false;
 
   SSLInfo ssl_info;
   bool was_npn_negotiated;
   if (!GetSSLInfo(&ssl_info, &was_npn_negotiated))
     return true;   // This is not a secure session, so all domains are okay.
 
-  return ssl_info.cert->VerifyNameMatch(domain);
+  return !ssl_info.client_cert_sent && ssl_info.cert->VerifyNameMatch(domain);
 }
 
 int SpdySession::GetPushStream(
     const GURL& url,
     scoped_refptr<SpdyStream>* stream,
     const BoundNetLog& stream_net_log) {
   CHECK_NE(state_, CLOSED);
 
   *stream = NULL;
 
@@ skipping 1352 matching lines @@
   if (it == pending_callback_map_.end())
     return;
 
   OldCompletionCallback* callback = it->second.callback;
   int result = it->second.result;
   pending_callback_map_.erase(it);
   callback->Run(result);
 }
 
 }  // namespace net