Move the NSS functions out of CertDatabase into a new NSSCertDatabase class.

chrome/browser/ssl/ssl_add_cert_handler.cc

Index: chrome/browser/ssl/ssl_add_cert_handler.cc
diff --git a/chrome/browser/ssl/ssl_add_cert_handler.cc b/chrome/browser/ssl/ssl_add_cert_handler.cc
index 4cae2d45e4385ccd19ab7c03e884e0d34567ce19..07ce962597d09f505f20ecab2ac105145031e8c4 100644
--- a/chrome/browser/ssl/ssl_add_cert_handler.cc
+++ b/chrome/browser/ssl/ssl_add_cert_handler.cc
@@ -39,11 +39,7 @@ SSLAddCertHandler::SSLAddCertHandler(net::URLRequest* request,
 SSLAddCertHandler::~SSLAddCertHandler() {}
 
 void SSLAddCertHandler::Run() {
-  int cert_error;
-  {
-    net::CertDatabase db;
-    cert_error = db.CheckUserCert(cert_);
-  }
+  int cert_error = net::CertDatabase::GetInstance()->CheckUserCert(cert_);
   if (cert_error != net::OK) {
     LOG_IF(ERROR, cert_error == net::ERR_NO_PRIVATE_KEY_FOR_CERT)
         << "No corresponding private key in store for cert: "
@@ -74,10 +70,8 @@ void SSLAddCertHandler::AskToAddCert() {
 
 void SSLAddCertHandler::Finished(bool add_cert) {
   int cert_error = net::OK;
-  if (add_cert) {
-    net::CertDatabase db;
-    cert_error = db.AddUserCert(cert_);
-  }
+  if (add_cert)
+    cert_error = net::CertDatabase::GetInstance()->AddUserCert(cert_);
 
   BrowserThread::PostTask(
       BrowserThread::UI, FROM_HERE,