Move chain building/verification out of X509Certificate

net/socket/ssl_client_socket_nss.cc

Index: net/socket/ssl_client_socket_nss.cc
diff --git a/net/socket/ssl_client_socket_nss.cc b/net/socket/ssl_client_socket_nss.cc
index 69874324921c53ba2cbd1dc4b60a427d228cc51f..aae5d732f1af06aaaf3a4cb5230ac10f6e637a0c 100644
--- a/net/socket/ssl_client_socket_nss.cc
+++ b/net/socket/ssl_client_socket_nss.cc
@@ -86,6 +86,7 @@
 #include "net/base/ssl_info.h"
 #include "net/base/ssl_non_sensitive_host_info.h"
 #include "net/base/sys_addrinfo.h"
+#include "net/base/x509_chain.h"
 #include "net/ocsp/nss_ocsp.h"
 #include "net/socket/client_socket_handle.h"
 
@@ -2290,9 +2291,9 @@ int SSLClientSocketNSS::DoVerifyCert(int result) {
   int flags = 0;
 
   if (ssl_config_.rev_checking_enabled)
-    flags |= X509Certificate::VERIFY_REV_CHECKING_ENABLED;
+    flags |= x509_chain::VERIFY_REV_CHECKING_ENABLED;
   if (ssl_config_.verify_ev_cert)
-    flags |= X509Certificate::VERIFY_EV_CERT;
+    flags |= x509_chain::VERIFY_EV_CERT;
   verifier_.reset(new CertVerifier);
   return verifier_->Verify(server_cert_, hostname_, flags,
                            &server_cert_verify_result_,