The Schannel considers some cipher suites (e.g., the...

net/base/ssl_client_socket.cc

 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/ssl_client_socket.h"
 
 #include <schnlsp.h>
 
 #include "base/singleton.h"
 #include "base/string_util.h"
@@ skipping 24 matching lines @@
     case CRYPT_E_NO_REVOCATION_CHECK:
       return ERR_CERT_NO_REVOCATION_MECHANISM;
     case CRYPT_E_REVOKED:  // Schannel and CryptoAPI
       return ERR_CERT_REVOKED;
     case SEC_E_CERT_UNKNOWN:
       return ERR_CERT_INVALID;
     // We received an unexpected_message or illegal_parameter alert message
     // from the server.
     case SEC_E_ILLEGAL_MESSAGE:
       return ERR_SSL_PROTOCOL_ERROR;
+    case SEC_E_ALGORITHM_MISMATCH:
+      return ERR_SSL_VERSION_OR_CIPHER_MISMATCH;
     case SEC_E_OK:
       return OK;
     default:
       LOG(WARNING) << "Unknown error " << err << " mapped to net::ERR_FAILED";
       return ERR_FAILED;
   }
 }
 
 // Map a network error code to the equivalent certificate status flag.  If
 // the error code is not a certificate error, it is mapped to 0.
@@ skipping 830 matching lines @@
   if (policy_status.dwError)
     return MapSecurityError(policy_status.dwError);
 
   CertFreeCertificateChain(chain_context);
 
   return OK;
 }
 
 }  // namespace net