$OpenBSD$

index 59b341f..ad24aac 100644
--- security/nss/lib/certhigh/ocsp.c.orig	Fri Feb 20 15:40:39 2015
+++ security/nss/lib/certhigh/ocsp.c	Fri Feb 20 15:40:39 2015
@@ -2933,6 +2933,14 @@ ocsp_ConnectToHost(const char *host, PRUint16 port)
     PRNetAddr addr;
     char *netdbbuf = NULL;
 
+    // XXX: Do we need a unittest ifdef here? We don't want to break the tests, but
+    // we want to ensure nothing can ever hit this code in production.
+#if 1
+    printf("Tor Browser BUG: Attempted OSCP direct connect to %s, port %u\n", host,
+            port);
+    goto loser;
+#endif
+
     sock = PR_NewTCPSocket();
     if (sock == NULL)
 	goto loser;