Index: net/socket/nss_ssl_util.cc |
diff --git a/net/socket/nss_ssl_util.cc b/net/socket/nss_ssl_util.cc |
index 7e3aee430c4417353bca38270ea2f4564e90a0e0..8547d4dc1cf493f167c4a2ebb731c809029870dc 100644 |
--- a/net/socket/nss_ssl_util.cc |
+++ b/net/socket/nss_ssl_util.cc |
@@ -70,6 +70,11 @@ class NSSSSLInitSingleton { |
enabled = false; |
} |
+ // We also disable ChaCha20 based cipher suites for now because we |
+ // aren't quite ready to use them in M32. |
+ if (info.symCipher == ssl_calg_chacha20) |
+ enabled = false; |
+ |
if (ssl_ciphers[i] == TLS_DHE_DSS_WITH_AES_128_CBC_SHA) { |
// Enabled to allow servers with only a DSA certificate to function. |
enabled = true; |