Prefer to generate SHA-1 signatures for TLS 1.2 client authentication if

net/socket/ssl_client_socket_nss.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file includes code SSLClientSocketNSS::DoVerifyCertComplete() derived
 // from AuthCertificateCallback() in
 // mozilla/security/manager/ssl/src/nsNSSCallbacks.cpp.
 
 /* ***** BEGIN LICENSE BLOCK *****
  * Version: MPL 1.1/GPL 2.0/LGPL 2.1
@@ skipping 1308 matching lines @@
 #if defined(OS_WIN)
   if (core->ssl_config_.send_client_cert) {
     if (core->ssl_config_.client_cert) {
       PCCERT_CONTEXT cert_context =
           core->ssl_config_.client_cert->os_cert_handle();
 
       HCRYPTPROV_OR_NCRYPT_KEY_HANDLE crypt_prov = 0;
       DWORD key_spec = 0;
       BOOL must_free = FALSE;
       DWORD flags = 0;
+#if 0
       if (base::win::GetVersion() >= base::win::VERSION_VISTA)
         flags |= CRYPT_ACQUIRE_PREFER_NCRYPT_KEY_FLAG;
+#endif
 
       BOOL acquired_key = CryptAcquireCertificatePrivateKey(
           cert_context, flags, NULL, &crypt_prov, &key_spec, &must_free);
 
       if (acquired_key) {
         // Should never get a cached handle back - ownership must always be
         // transferred.
         CHECK_EQ(must_free, TRUE);
 
         SECItem der_cert;
@@ skipping 2154 matching lines @@
   EnsureThreadIdAssigned();
   base::AutoLock auto_lock(lock_);
   return valid_thread_id_ == base::PlatformThread::CurrentId();
 }
 
 ServerBoundCertService* SSLClientSocketNSS::GetServerBoundCertService() const {
   return server_bound_cert_service_;
 }
 
 }  // namespace net