Do not perform online revocation checking when the user has explicitly disabled it, except for when…

chrome/browser/ui/cocoa/certificate_viewer_mac.mm

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/certificate_viewer.h"
 
 #include <Security/Security.h>
 #include <SecurityInterface/SFCertificatePanel.h>
 
 #include <vector>
@@ skipping 34 matching lines @@
   // SFCertificatePanel when no policies are specified.
   SecPolicyRef basic_policy = NULL;
   OSStatus status = net::x509_util::CreateBasicX509Policy(&basic_policy);
   if (status != noErr) {
     NOTREACHED();
     return;
   }
   CFArrayAppendValue(policies, basic_policy);
   CFRelease(basic_policy);
 
-  status = net::x509_util::CreateRevocationPolicies(false, policies);
+  status = net::x509_util::CreateRevocationPolicies(false, false, policies);
   if (status != noErr) {
     NOTREACHED();
     return;
   }
 
   SFCertificatePanel* panel = [[SFCertificatePanel alloc] init];
   [panel setPolicies:(id)policies.get()];
   [panel beginSheetForWindow:parent
                modalDelegate:nil
               didEndSelector:NULL
                  contextInfo:NULL
                 certificates:certificates
                    showGroup:YES];
   // The SFCertificatePanel releases itself when the sheet is dismissed.
 }