net: always enable NSS's HTTP fetches

net/socket/ssl_client_socket_nss.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file includes code SSLClientSocketNSS::DoVerifyCertComplete() derived
 // from AuthCertificateCallback() in
 // mozilla/security/manager/ssl/src/nsNSSCallbacks.cpp.
 
 /* ***** BEGIN LICENSE BLOCK *****
  * Version: MPL 1.1/GPL 2.0/LGPL 2.1
@@ skipping 802 matching lines @@
 }
 
 int SSLClientSocketNSS::Init() {
   EnterFunction("");
   // Initialize the NSS SSL library in a threadsafe way.  This also
   // initializes the NSS base library.
   EnsureNSSSSLInit();
   if (!NSS_IsInitialized())
     return ERR_UNEXPECTED;
 #if !defined(OS_MACOSX) && !defined(OS_WIN)
-  if (ssl_config_.rev_checking_enabled) {

[wtc, 2012/03/12 22:38:11]

Just to confirm: the removal of this "if" is the bug fix,
right?

[agl, 2012/03/13 15:14:05]

Yep.

-    // We must call EnsureOCSPInit() here, on the IO thread, to get the IO loop
-    // by MessageLoopForIO::current().
-    // X509Certificate::Verify() runs on a worker thread of CertVerifier.
-    EnsureOCSPInit();
-  }
+  // We must call EnsureNssPkixIOInit() here, on the IO thread, to get the IO
+  // loop by MessageLoopForIO::current().
+  // X509Certificate::Verify() runs on a worker thread of CertVerifier.
+  EnsureNssPkixIOInit();
 #endif
 
   LeaveFunction("");
   return OK;
 }
 
 int SSLClientSocketNSS::InitializeSSLOptions() {
   // Transport connected, now hook it up to nss
   // TODO(port): specify rx and tx buffer sizes separately
   nss_fd_ = memio_CreateIOLayer(kRecvBufferSize);
@@ skipping 1867 matching lines @@
   EnsureThreadIdAssigned();
   base::AutoLock auto_lock(lock_);
   return valid_thread_id_ == base::PlatformThread::CurrentId();
 }
 
 OriginBoundCertService* SSLClientSocketNSS::GetOriginBoundCertService() const {
   return origin_bound_cert_service_;
 }
 
 }  // namespace net