Move the NSS functions out of CertDatabase into a new NSSCertDatabase class.

net/base/ssl_client_auth_cache_unittest.cc

Index: net/base/ssl_client_auth_cache_unittest.cc
diff --git a/net/base/ssl_client_auth_cache_unittest.cc b/net/base/ssl_client_auth_cache_unittest.cc
index 640888722f25ba814562c4217d958fca9fb9c476..29ede5be23da45d68fd6bdcf6d2448267966647b 100644
--- a/net/base/ssl_client_auth_cache_unittest.cc
+++ b/net/base/ssl_client_auth_cache_unittest.cc
@@ -137,8 +137,8 @@ TEST(SSLClientAuthCacheTest, LookupNullPreference) {
   EXPECT_EQ(NULL, cached_cert.get());
 }
 
-// Check that the OnUserCertAdded() method removes all cache entries.
-TEST(SSLClientAuthCacheTest, OnUserCertAdded) {
+// Check that the OnCertAdded() method removes all cache entries.
+TEST(SSLClientAuthCacheTest, OnCertAdded) {
   SSLClientAuthCache cache;
   base::Time start_date = base::Time::Now();
   base::Time expiration_date = start_date + base::TimeDelta::FromDays(1);
@@ -161,7 +161,7 @@ TEST(SSLClientAuthCacheTest, OnUserCertAdded) {
   EXPECT_TRUE(cache.Lookup(server2, &cached_cert));
   EXPECT_EQ(NULL, cached_cert.get());
 
-  cache.OnUserCertAdded(NULL);
+  cache.OnCertAdded(NULL);
 
   // Check that we no longer have entries for either server.
   EXPECT_FALSE(cache.Lookup(server1, &cached_cert));