net: boost AES-GCM ciphers if the machine has AES-NI.

net/socket/ssl_client_socket_nss.cc

Index: net/socket/ssl_client_socket_nss.cc
diff --git a/net/socket/ssl_client_socket_nss.cc b/net/socket/ssl_client_socket_nss.cc
index 89eab143140f5aadadd7e5cf8678d9692499f8a8..d46922d02212e41281ebc995c0eb1e27b0e32cba 100644
--- a/net/socket/ssl_client_socket_nss.cc
+++ b/net/socket/ssl_client_socket_nss.cc
@@ -3136,6 +3136,14 @@ int SSLClientSocketNSS::InitializeSSLOptions() {
     SSL_CipherPrefSet(nss_fd_, *it, PR_FALSE);
   }
 
+  size_t cipher_order_len;
+  const uint16* cipher_order = GetNSSCipherOrder(&cipher_order_len);
+  if (cipher_order) {
+    rv = SSL_CipherOrderSet(nss_fd_, cipher_order, cipher_order_len);
+    if (rv != SECSuccess)
+      LogFailedNSSFunction(net_log_, "SSL_CipherOrderSet", "");
+  }
+
   // Support RFC 5077
   rv = SSL_OptionSet(nss_fd_, SSL_ENABLE_SESSION_TICKETS, PR_TRUE);
   if (rv != SECSuccess) {