| Index: net/socket/client_socket_factory.cc
 | 
| diff --git a/net/socket/client_socket_factory.cc b/net/socket/client_socket_factory.cc
 | 
| index 172903ad2ec557baeab809636e502de89eda9ccd..6ea8dc5f110033a8ba4c1f5a32bec83b52417370 100644
 | 
| --- a/net/socket/client_socket_factory.cc
 | 
| +++ b/net/socket/client_socket_factory.cc
 | 
| @@ -33,14 +33,8 @@ class DefaultClientSocketFactory : public ClientSocketFactory,
 | 
|      CertDatabase::GetInstance()->RemoveObserver(this);
 | 
|    }
 | 
|  
 | 
| -  void OnCertAdded(const X509Certificate* cert) override {
 | 
| -    ClearSSLSessionCache();
 | 
| -  }
 | 
| -
 | 
| -  void OnCACertChanged(const X509Certificate* cert) override {
 | 
| -    // Per wtc, we actually only need to flush when trust is reduced.
 | 
| -    // Always flush now because OnCACertChanged does not tell us this.
 | 
| -    // See comments in ClientSocketPoolManager::OnCACertChanged.
 | 
| +  void OnCertDBChanged(const X509Certificate* cert) override {
 | 
| +    // Flush sockets whenever CA trust changes.
 | 
|      ClearSSLSessionCache();
 | 
|    }
 | 
|  
 | 
| 
 |