Index: chrome/renderer/chrome_render_process_observer.cc |
diff --git a/chrome/renderer/chrome_render_process_observer.cc b/chrome/renderer/chrome_render_process_observer.cc |
index 87ecba40f78c908950f4c918c43488b5ab65ef06..0b69092e43989760e943ec51dd5dd9bd817894a1 100644 |
--- a/chrome/renderer/chrome_render_process_observer.cc |
+++ b/chrome/renderer/chrome_render_process_observer.cc |
@@ -31,7 +31,6 @@ |
#include "media/base/media_switches.h" |
#include "net/base/net_errors.h" |
#include "net/base/net_module.h" |
-#include "net/ocsp/nss_ocsp.h" |
#include "third_party/sqlite/sqlite3.h" |
#include "third_party/tcmalloc/chromium/src/google/malloc_extension.h" |
#include "third_party/tcmalloc/chromium/src/google/heap-profiler.h" |
@@ -377,12 +376,6 @@ ChromeRenderProcessObserver::ChromeRenderProcessObserver( |
crypto::DisableNSSForkCheck(); |
crypto::ForceNSSNoDBInit(); |
crypto::EnsureNSSInit(); |
- |
- // Disable OCSP. OCSP needs to make HTTP requests, and currently |
- // it doesn't work in sandbox. SSL is used in renderer process |
- // only for peer-to-peer connections with self-signed certs. OCSP |
- // is not useful in this case, thus it is safe to disable it. |
- net::DisableOCSP(); |
} |
#elif defined(OS_WIN) |
// crypt32.dll is used to decode X509 certificates for Chromoting. |