Do not roll back to SSL 3.0 for Google properties.

net/ssl/ssl_config_service_unittest.cc

Index: net/ssl/ssl_config_service_unittest.cc
diff --git a/net/ssl/ssl_config_service_unittest.cc b/net/ssl/ssl_config_service_unittest.cc
index e8a4c33394a0b18325fb3904e4a8cf63be6c840d..c76b2946a2d1528c008b6a8735a3e0175b71c9df 100644
--- a/net/ssl/ssl_config_service_unittest.cc
+++ b/net/ssl/ssl_config_service_unittest.cc
@@ -71,6 +71,7 @@ TEST(SSLConfigServiceTest, ConfigUpdatesNotifyObservers) {
   initial_config.false_start_enabled = false;
   initial_config.version_min = SSL_PROTOCOL_VERSION_SSL3;
   initial_config.version_max = SSL_PROTOCOL_VERSION_TLS1_1;
+  initial_config.ssl3_fallback_enabled = false;

[wtc, 2013/04/18 18:15:34]

Set this after line 71 (initial_config.false_start_enabled = false).

 
   scoped_refptr<MockSSLConfigService> mock_service(
       new MockSSLConfigService(initial_config));
@@ -95,6 +96,10 @@ TEST(SSLConfigServiceTest, ConfigUpdatesNotifyObservers) {
   EXPECT_CALL(observer, OnSSLConfigChanged()).Times(1);
   mock_service->SetSSLConfig(initial_config);
 
+  initial_config.ssl3_fallback_enabled = true;
+  EXPECT_CALL(observer, OnSSLConfigChanged()).Times(1);
+  mock_service->SetSSLConfig(initial_config);

[wtc, 2013/04/18 18:15:34]

Do this after lines 86-88 (which deals with false_start_enabled).

+
   // Test that disabling certain cipher suites triggers an update.
   std::vector<uint16> disabled_ciphers;
   disabled_ciphers.push_back(0x0004u);