net: boost AES-GCM ciphers if the machine has AES-NI.

net/third_party/nss/ssl/ssl.h

Index: net/third_party/nss/ssl/ssl.h
diff --git a/net/third_party/nss/ssl/ssl.h b/net/third_party/nss/ssl/ssl.h
index 47468a0a289a1b712b2a7acde2a28c73dad4c31b..bd93bc547171ed97310cbddcf1897b1d96ad61b0 100644
--- a/net/third_party/nss/ssl/ssl.h
+++ b/net/third_party/nss/ssl/ssl.h
@@ -267,6 +267,12 @@ SSL_IMPORT SECStatus SSL_CipherPrefSetDefault(PRInt32 cipher, PRBool enabled);
 SSL_IMPORT SECStatus SSL_CipherPrefGetDefault(PRInt32 cipher, PRBool *enabled);
 SSL_IMPORT SECStatus SSL_CipherPolicySet(PRInt32 cipher, PRInt32 policy);
 SSL_IMPORT SECStatus SSL_CipherPolicyGet(PRInt32 cipher, PRInt32 *policy);
+/* SSL_CipherOrderSet sets the cipher suite preference order from |ciphers|,

[wtc, 2013/11/19 23:00:44]

Nit: Add a blank line before this line.

[agl, 2013/11/20 18:21:07]

Done.

+ * which must be an array of cipher suite ids of length |len|. All the given
+ * cipher suite ids must appear in the array that is returned by
+ * |SSL_GetImplementedCiphers| and may only appear once, at most. */
+SSL_IMPORT SECStatus SSL_CipherOrderSet(PRFileDesc *fd, const PRUint16 *ciphers,
+                                        size_t len);

[wtc, 2013/11/19 23:00:44]

Nit: use unsigned int, which is the commonly used type for lengths in NSS. (Note
that SSL_GetNumImplementedCiphers on line 38 even returns a PRUint64.)

[agl, 2013/11/20 18:21:07]

Done.

 
 /* SSLChannelBindingType enumerates the types of supported channel binding
  * values. See RFC 5929. */