Only initialize NSS in PpapiPluginMain on !USE_OPENSSL builds.

content/ppapi_plugin/ppapi_plugin_main.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "base/base_paths.h"
 #include "base/command_line.h"
 #include "base/debug/debugger.h"
 #include "base/files/file_path.h"
 #include "base/i18n/rtl.h"
 #include "base/message_loop/message_loop.h"
@@ skipping 97 matching lines @@
   PathService::Get(base::DIR_HOME, &homedir);
   setenv("HOME", homedir.value().c_str(), 1);
 #endif
 
   base::MessageLoop main_message_loop;
   base::PlatformThread::SetName("CrPPAPIMain");
   base::trace_event::TraceLog::GetInstance()->SetProcessName("PPAPI Process");
   base::trace_event::TraceLog::GetInstance()->SetProcessSortIndex(
       kTraceEventPpapiProcessSortIndex);
 
-#if defined(OS_LINUX) && defined(USE_NSS_CERTS)
+#if defined(OS_LINUX) && !defined(USE_OPENSSL)
   // Some out-of-process PPAPI plugins use NSS.
   // NSS must be initialized before enabling the sandbox below.
   crypto::InitNSSSafely();
 #endif
 
   // Allow the embedder to perform any necessary per-process initialization
   // before the sandbox is initialized.
   if (GetContentClient()->plugin())
     GetContentClient()->plugin()->PreSandboxInitialization();
 
 #if defined(OS_LINUX)
   LinuxSandbox::InitializeSandbox();
 #endif
 
   ChildProcess ppapi_process;
   ppapi_process.set_main_thread(
       new PpapiThread(parameters.command_line, false));  // Not a broker.
 
 #if defined(OS_WIN)
   SkTypeface_SetEnsureLOGFONTAccessibleProc(SkiaPreCacheFont);
 #endif
 
   main_message_loop.Run();
   return 0;
 }
 
 }  // namespace content