The Schannel considers some cipher suites (e.g., the...

The Schannel considers some cipher suites (e.g., the
AES cipher suites) to be TLS only, and won't allow
them to be used in SSL 3.0.  If an SSL 3.0 server
picks such a cipher suite, we need to handle it as
if it were TLS intolerant by turning off TLS and
retrying.

R=darin
BUG=3203, 3001
Committed: http://src.chromium.org/viewvc/chrome?view=rev&revision=3295

[wtc, 2008-10-10 22:24:38]

http://codereview.chromium.org/7242/diff/7/215
File net/base/net_error_list.h (right):

http://codereview.chromium.org/7242/diff/7/215#newcode85
Line 85: NET_ERROR(SSL_VERSION_OR_CIPHER_MISMATCH, -113)
This error code is a mouthful, but that's because the
Schannel uses the same error code, SEC_E_ALGORITHM_MISMATCH,
for these two error conditions.

[darin (slow to review), 2008-10-11 07:43:17]

LGTM

Should find a way to write some unit tests for these interesting SSL cases :-)