Move the NSS functions out of CertDatabase into a new NSSCertDatabase class.

net/spdy/spdy_session_pool.cc

Index: net/spdy/spdy_session_pool.cc
diff --git a/net/spdy/spdy_session_pool.cc b/net/spdy/spdy_session_pool.cc
index 0a8eb7f5055dcd07a683d1c2ca786ff84d9bf4d3..170138d7670c7567d2b6ac1356e765521337bc23 100644
--- a/net/spdy/spdy_session_pool.cc
+++ b/net/spdy/spdy_session_pool.cc
@@ -55,7 +55,8 @@ SpdySessionPool::SpdySessionPool(
   NetworkChangeNotifier::AddIPAddressObserver(this);
   if (ssl_config_service_)
     ssl_config_service_->AddObserver(this);
-  CertDatabase::AddObserver(this);
+  CertDatabase cert_db;
+  cert_db.AddObserver(this);
 }
 
 SpdySessionPool::~SpdySessionPool() {
@@ -64,7 +65,8 @@ SpdySessionPool::~SpdySessionPool() {
   if (ssl_config_service_)
     ssl_config_service_->RemoveObserver(this);
   NetworkChangeNotifier::RemoveIPAddressObserver(this);
-  CertDatabase::RemoveObserver(this);
+  CertDatabase cert_db;
+  cert_db.RemoveObserver(this);
 }
 
 scoped_refptr<SpdySession> SpdySessionPool::Get(
@@ -309,7 +311,7 @@ scoped_refptr<SpdySession> SpdySessionPool::GetFromAlias(
   return NULL;
 }
 
-void SpdySessionPool::OnUserCertAdded(const X509Certificate* cert) {
+void SpdySessionPool::OnCertAdded(const X509Certificate* cert) {
   CloseCurrentSessions();
 }