This CL changes the lifespan of SSLConnectJobMessengers so that they are created only when needed,

net/socket/ssl_client_socket_nss.cc

Index: net/socket/ssl_client_socket_nss.cc
diff --git a/net/socket/ssl_client_socket_nss.cc b/net/socket/ssl_client_socket_nss.cc
index 92af627b7f871e3edc19ae201c9da6919fc0a5ee..c3e35310abb664ecb4d38dcbe3d9047d9c28ed88 100644
--- a/net/socket/ssl_client_socket_nss.cc
+++ b/net/socket/ssl_client_socket_nss.cc
@@ -2834,6 +2834,11 @@ bool SSLClientSocketNSS::GetSSLInfo(SSLInfo* ssl_info) {
   return true;
 }
 
+std::string SSLClientSocketNSS::GetSessionCacheKey() const {

[wtc, 2014/08/14 00:46:45]

IMPORTANT: add a declaration of this method (with "OVERRIDE") to
ssl_client_socket_nss.h.

[mshelley, 2014/08/14 20:01:36]

Done.

+  NOTIMPLEMENTED();
+  return std::string();

[wtc, 2014/08/14 00:46:45]

Note: you can actually implement this function -- just use the same code as
SSLClientSocketOpenSSL.

Just wanted to the reason you didn't implement this method is that it is
unneeded.

[mshelley, 2014/08/14 20:01:36]

OK -- does the session cache used by NSS use the same session cache key as the
one used by OpenSSL? I didn't think that it did, and thus thought that
implementing this method would be misleading.

+}
+
 bool SSLClientSocketNSS::InSessionCache() const {
   // For now, always return true so that SSLConnectJobs are never held back.
   return true;