net: boost AES-GCM ciphers if the machine has AES-NI.

net/socket/ssl_client_socket_nss.cc

Index: net/socket/ssl_client_socket_nss.cc
diff --git a/net/socket/ssl_client_socket_nss.cc b/net/socket/ssl_client_socket_nss.cc
index 6f1910c9f530a12761038276bd6aedc7d649e8e7..dad1481df15a69e6f7e69f55bdc61891e56f81e8 100644
--- a/net/socket/ssl_client_socket_nss.cc
+++ b/net/socket/ssl_client_socket_nss.cc
@@ -3144,6 +3144,15 @@ int SSLClientSocketNSS::InitializeSSLOptions() {
     SSL_CipherPrefSet(nss_fd_, *it, PR_FALSE);
   }
 
+  size_t cipher_order_len;
+  const uint16* cipher_order = GetNSSCipherOrder(&cipher_order_len);
+  if (cipher_order) {
+    rv = SSL_CipherOrderSet(nss_fd_, cipher_order, cipher_order_len);
+    if (rv != SECSuccess) {
+      LogFailedNSSFunction(net_log_, "SSL_CipherOrderSet", "");
+    }
+  }
+
   // Support RFC 5077
   rv = SSL_OptionSet(nss_fd_, SSL_ENABLE_SESSION_TICKETS, PR_TRUE);
   if (rv != SECSuccess) {