Upgrade chrome's OpenSSL to same version Android ships with.

patches/x509_hash_name_algorithm_change.patch

+--- openssl-1.0.0f-origin/crypto/x509/by_dir.c  2012-01-19 02:20:24.821550944 +0800
++++ openssl-1.0.0f/crypto/x509/by_dir.c 2012-01-19 23:36:53.597870429 +0800
+@@ -287,6 +287,8 @@
+        int ok=0;
+        int i,j,k;
+        unsigned long h;
++       unsigned long hash_array[2];
++       int hash_index;
+        BUF_MEM *b=NULL;
+        X509_OBJECT stmp,*tmp;
+        const char *postfix="";
+@@ -323,6 +325,11 @@
+        ctx=(BY_DIR *)xl->method_data;
+ 
+        h=X509_NAME_hash(name);
++       hash_array[0]=h;
++       hash_array[1]=X509_NAME_hash_old(name);
++       for (hash_index=0; hash_index < 2; hash_index++)
++               {
++               h=hash_array[hash_index];

[joth, 2012/01/20 11:01:08]

ouch. again a unfortunate side effect but this time because we're relying on the
system-wide SSL install to provide root certs. (in a certain format).

one alternative may be to re-configure our code to not use /etc/ssl/certs.. but
instead use a copy of the root certs we bundle up here in svn.
again, lets raise a new.crbug.com for that unless it's very easy to do.

[Johnny(Jianning) Ding, 2012/01/23 14:20:57]

Done.

+        for (i=0; i < sk_BY_DIR_ENTRY_num(ctx->dirs); i++)
+                {
+                BY_DIR_ENTRY *ent;
+@@ -476,6 +483,7 @@
+                        goto finish;
+                        }
+                }
++               }
+ finish:
+        if (b != NULL) BUF_MEM_free(b);
+        return(ok);