| Index: net/cert/x509_util_mac.cc
|
| diff --git a/net/cert/x509_util_mac.cc b/net/cert/x509_util_mac.cc
|
| index 10dc4364e998f67202d7d5ddc2fd07f59906cc1b..7971a733af07cbc3855ac9e1e649911f47a552bb 100644
|
| --- a/net/cert/x509_util_mac.cc
|
| +++ b/net/cert/x509_util_mac.cc
|
| @@ -5,7 +5,6 @@
|
| #include "net/cert/x509_util_mac.h"
|
|
|
| #include "base/logging.h"
|
| -#include "base/mac/mac_util.h"
|
| #include "third_party/apple_apsl/cssmapplePriv.h"
|
|
|
| namespace net {
|
| @@ -101,9 +100,7 @@
|
| // online revocation checking. Note that, as of OS X 10.7.2, the system
|
| // will set force this flag on according to system policies, so
|
| // online revocation checks cannot be completely disabled.
|
| - // Starting with OS X 10.12, if a CRL policy is added without the
|
| - // FETCH_CRL_FROM_NET flag, AIA fetching is disabled.
|
| - if (enable_revocation_checking || base::mac::IsAtLeastOS10_12())
|
| + if (enable_revocation_checking)
|
| tp_crl_options.CrlFlags = CSSM_TP_ACTION_FETCH_CRL_FROM_NET;
|
|
|
| SecPolicyRef crl_policy;
|
|
|