Drop buffers in idle SSLClientSockets (and SSLServerSockets).

net/socket/ssl_server_socket_unittest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This test suite uses SSLClientSocket to test the implementation of
 // SSLServerSocket. In order to establish connections between the sockets
 // we need two additional classes:
 // 1. FakeSocket
 //    Connects SSL socket to FakeDataChannel. This class is just a stub.
 //
@@ skipping 767 matching lines @@
 
   // Check that the authority name that arrived in the CertificateRequest
   // handshake message is as expected.
   scoped_refptr<X509Certificate> client_cert =
       ImportCertFromFile(GetTestCertsDirectory(), kClientCertFileName);
   ASSERT_TRUE(client_cert);
   EXPECT_TRUE(client_cert->IsIssuedByEncoded(request_info->cert_authorities));
 
   client_socket_->Disconnect();
 
-  EXPECT_THAT(handshake_callback.GetResult(server_ret), IsError(ERR_FAILED));
+  EXPECT_THAT(handshake_callback.GetResult(server_ret),
+              IsError(ERR_CONNECTION_CLOSED));
 }
 
 TEST_F(SSLServerSocketTest, HandshakeWithClientCertRequiredNotSuppliedCached) {
   ASSERT_NO_FATAL_FAILURE(ConfigureClientCertsForServer());
   ASSERT_NO_FATAL_FAILURE(CreateContext());
   ASSERT_NO_FATAL_FAILURE(CreateSockets());
   // Use the default setting for the client socket, which is to not send
   // a client certificate. This will cause the client to receive an
   // ERR_SSL_CLIENT_AUTH_CERT_NEEDED error, and allow for inspecting the
   // requested cert_authorities from the CertificateRequest sent by the
@@ skipping 12 matching lines @@
 
   // Check that the authority name that arrived in the CertificateRequest
   // handshake message is as expected.
   scoped_refptr<X509Certificate> client_cert =
       ImportCertFromFile(GetTestCertsDirectory(), kClientCertFileName);
   ASSERT_TRUE(client_cert);
   EXPECT_TRUE(client_cert->IsIssuedByEncoded(request_info->cert_authorities));
 
   client_socket_->Disconnect();
 
-  EXPECT_THAT(handshake_callback.GetResult(server_ret), IsError(ERR_FAILED));
+  EXPECT_THAT(handshake_callback.GetResult(server_ret),
+              IsError(ERR_CONNECTION_CLOSED));
   server_socket_->Disconnect();
 
   // Below, check that the cache didn't store the result of a failed handshake.
   ASSERT_NO_FATAL_FAILURE(CreateSockets());
   TestCompletionCallback handshake_callback2;
   int server_ret2 = server_socket_->Handshake(handshake_callback2.callback());
 
   TestCompletionCallback connect_callback2;
   EXPECT_EQ(ERR_SSL_CLIENT_AUTH_CERT_NEEDED,
             connect_callback2.GetResult(
                 client_socket_->Connect(connect_callback2.callback())));
 
   scoped_refptr<SSLCertRequestInfo> request_info2 = new SSLCertRequestInfo();
   client_socket_->GetSSLCertRequestInfo(request_info2.get());
 
   // Check that the authority name that arrived in the CertificateRequest
   // handshake message is as expected.
   EXPECT_TRUE(client_cert->IsIssuedByEncoded(request_info2->cert_authorities));
 
   client_socket_->Disconnect();
 
-  EXPECT_THAT(handshake_callback2.GetResult(server_ret2), IsError(ERR_FAILED));
+  EXPECT_THAT(handshake_callback2.GetResult(server_ret2),
+              IsError(ERR_CONNECTION_CLOSED));
 }
 
 TEST_F(SSLServerSocketTest, HandshakeWithWrongClientCertSupplied) {
   scoped_refptr<X509Certificate> client_cert =
       ImportCertFromFile(GetTestCertsDirectory(), kClientCertFileName);
   ASSERT_TRUE(client_cert);
 
   ASSERT_NO_FATAL_FAILURE(ConfigureClientCertsForClient(
       kWrongClientCertFileName, kWrongClientPrivateKeyFileName));
   ASSERT_NO_FATAL_FAILURE(ConfigureClientCertsForServer());
@@ skipping 258 matching lines @@
   int server_ret = server_socket_->Handshake(handshake_callback.callback());
 
   client_ret = connect_callback.GetResult(client_ret);
   server_ret = handshake_callback.GetResult(server_ret);
 
   ASSERT_THAT(client_ret, IsError(ERR_SSL_VERSION_OR_CIPHER_MISMATCH));
   ASSERT_THAT(server_ret, IsError(ERR_SSL_VERSION_OR_CIPHER_MISMATCH));
 }
 
 }  // namespace net