Disable TLS 1.2 if USE_OPENSSL is defined (such as on Android) to

Disable TLS 1.2 if USE_OPENSSL is defined (such as on Android) to
prevent ClientHello from being larger than 256 bytes. Some broken
servers can't handle a large ClientHello.

R=agl@chromium.org,rsleevi@chromium.org
BUG=90392, 245500, 247691
TEST=none

Committed: https://src.chromium.org/viewvc/chrome?view=rev&revision=207759

[wtc, 2013-06-20 21:58:06]

I'd like to get a pre-approval for this CL. I won't check
this in before I have debugged the problem with
https://www.wellsfargo.com/ (http://crbug.com/247691).

[agl, 2013-06-20 21:59:39]

lgtm

[Ryan Sleevi, 2013-06-20 22:04:00]

lgtm

[wtc, 2013-06-21 01:39:34]

I can reproduce the problem with https://www.wellsfargo.com/.
Pruning the cipher suite list (as done in
https://codereview.chromium.org/17427003 ) is not enough.
It is also necessary to prune the elliptic_curves list,
which requires patching OpenSSL.

I couldn't figure out how to generate a Chromium patch for
OpenSSL properly (my attempt is at
https://codereview.chromium.org/17408011 ), so I am going
to commit this CL.

[commit-bot: I haz the power, 2013-06-21 01:41:26]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/wtc@chromium.org/17094016/1

[commit-bot: I haz the power, 2013-06-21 08:58:43]

Change committed as 207759