Don't block the UI thread for OCSP/CRLs when viewing a cert on Mac.

chrome/browser/ui/cocoa/ssl_client_certificate_selector.mm

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ssl_client_certificate_selector.h"
 
 #import <SecurityInterface/SFChooseIdentityPanel.h>
 
 #include <vector>
 
@@ skipping 159 matching lines @@
   NSString* message = l10n_util::GetNSStringF(
       IDS_CLIENT_CERT_DIALOG_TEXT,
       ASCIIToUTF16(certRequestInfo_->host_and_port));
 
   // Create and set up a system choose-identity panel.
   SFChooseIdentityPanel* panel = [[SFChooseIdentityPanel alloc] init];
   [panel setInformativeText:message];
   [panel setDefaultButtonTitle:l10n_util::GetNSString(IDS_OK)];
   [panel setAlternateButtonTitle:l10n_util::GetNSString(IDS_CANCEL)];
   SecPolicyRef sslPolicy;
-  if (net::X509Certificate::CreateSSLClientPolicy(&sslPolicy) == noErr) {
+  if (net::X509Certificate::CreateSSLPolicy(false, std::string(),
+                                            &sslPolicy) == noErr) {
     [panel setPolicies:(id)sslPolicy];
     CFRelease(sslPolicy);
   }
 
   window_ =
       parent->CreateConstrainedDialog(new ConstrainedSFChooseIdentityPanel(
           panel, self,
           @selector(sheetDidEnd:returnCode:context:),
           identities_, title));
   // Note: SFChooseIdentityPanel does not take a reference to itself while the
   // sheet is open. Don't release the ownership claim until the sheet has ended
   // in |-sheetDidEnd:returnCode:context:|.
 }
 
 @end