Upgrade chrome's OpenSSL to same version Android ships with.

patches/x509_hash_name_algorithm_change.patch

Index: patches/x509_hash_name_algorithm_change.patch
===================================================================
--- patches/x509_hash_name_algorithm_change.patch	(revision 0)
+++ patches/x509_hash_name_algorithm_change.patch	(revision 0)
@@ -0,0 +1,31 @@
+--- openssl-1.0.0f-origin/crypto/x509/by_dir.c	2012-01-19 02:20:24.821550944 +0800
++++ openssl-1.0.0f/crypto/x509/by_dir.c	2012-01-19 23:36:53.597870429 +0800
+@@ -287,6 +287,8 @@
+ 	int ok=0;
+ 	int i,j,k;
+ 	unsigned long h;
++	unsigned long hash_array[2];
++	int hash_index;
+ 	BUF_MEM *b=NULL;
+ 	X509_OBJECT stmp,*tmp;
+ 	const char *postfix="";
+@@ -323,6 +325,11 @@
+ 	ctx=(BY_DIR *)xl->method_data;
+ 
+ 	h=X509_NAME_hash(name);
++	hash_array[0]=h;
++	hash_array[1]=X509_NAME_hash_old(name);
++	for (hash_index=0; hash_index < 2; hash_index++)
++		{
++		h=hash_array[hash_index];

[joth, 2012/01/20 11:01:08]

ouch. again a unfortunate side effect but this time because we're relying on the
system-wide SSL install to provide root certs. (in a certain format).

one alternative may be to re-configure our code to not use /etc/ssl/certs.. but
instead use a copy of the root certs we bundle up here in svn.
again, lets raise a new.crbug.com for that unless it's very easy to do.

[Johnny(Jianning) Ding, 2012/01/23 14:20:57]

Done.

+ 	for (i=0; i < sk_BY_DIR_ENTRY_num(ctx->dirs); i++)
+ 		{
+ 		BY_DIR_ENTRY *ent;
+@@ -476,6 +483,7 @@
+ 			goto finish;
+ 			}
+ 		}
++		}
+ finish:
+ 	if (b != NULL) BUF_MEM_free(b);
+ 	return(ok);