When an SSL connect is completed, we need to call...

net/http/http_network_transaction.cc

 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/http/http_network_transaction.h"
 
 #include "base/scoped_ptr.h"
 #include "base/compiler_specific.h"
 #include "base/string_util.h"
 #include "base/trace_event.h"
@@ skipping 471 matching lines @@
   // If we are using a direct SSL connection, then go ahead and create the SSL
   // wrapper socket now.  Otherwise, we need to first issue a CONNECT request.
   if (using_ssl_ && !using_tunnel_)
     s = socket_factory_->CreateSSLClientSocket(s, request_->url.host());
 
   connection_.set_socket(s);
   return connection_.socket()->Connect(&io_callback_);
 }
 
 int HttpNetworkTransaction::DoConnectComplete(int result) {
+  if (IsCertificateError(result))
+    result = HandleCertificateError(result);
+
   if (result == OK) {
     next_state_ = STATE_WRITE_HEADERS;
     if (using_tunnel_)
       establishing_tunnel_ = true;
-  } else if (IsCertificateError(result)) {
-    result = HandleCertificateError(result);
   }
   return result;
 }
 
 int HttpNetworkTransaction::DoSSLConnectOverTunnel() {
   next_state_ = STATE_SSL_CONNECT_OVER_TUNNEL_COMPLETE;
 
   ClientSocket* s = connection_.release_socket();
   s = socket_factory_->CreateSSLClientSocket(s, request_->url.host());
   connection_.set_socket(s);
   return connection_.socket()->Connect(&io_callback_);
 }
 
 int HttpNetworkTransaction::DoSSLConnectOverTunnelComplete(int result) {
-  if (result == OK) {
+  if (IsCertificateError(result))
+    result = HandleCertificateError(result);
+
+  if (result == OK)
     next_state_ = STATE_WRITE_HEADERS;
-  } else if (IsCertificateError(result)) {
-    result = HandleCertificateError(result);
-  }
   return result;
 }
 
 int HttpNetworkTransaction::DoWriteHeaders() {
   next_state_ = STATE_WRITE_HEADERS_COMPLETE;
 
   // This is constructed lazily (instead of within our Start method), so that
   // we have proxy info available.
   if (request_headers_.empty()) {
     if (establishing_tunnel_) {
@@ skipping 480 matching lines @@
     auth_data_[target]->state = AUTH_STATE_NEED_AUTH;
   }
 
   response_.auth_challenge.swap(auth_info);
   auth_handler_[target].reset(auth_handler.release());
 
   return OK;
 }
 
 }  // namespace net