Use user specific NSSDatabase in CertLoader.

chrome/browser/chromeos/net/nss_cert_database_factory.h

+// Copyright 2014 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef CHROME_BROWSER_CHROMEOS_NET_NSS_CERT_DATABASE_FACTORY_H_
+#define CHROME_BROWSER_CHROMEOS_NET_NSS_CERT_DATABASE_FACTORY_H_
+
+#include <string>
+
+#include "base/callback.h"
+
+class Profile;
+
+namespace net {
+class NSSCertDatabase;
+}
+
+namespace chromeos {

[pneubeck (no reviews), 2014/01/24 13:18:02]

Is this really chromeos only?
If not, could we move it to nss_context.h, so that people find it more easily?

[tbarzic, 2014/01/25 00:26:27]

hm, not really, it's more nss specific :)
moving it to nss_context.

+
+// Utility function that gets the NSSCertDatabase instance for a profile.
+// It makes sure that the NSSCertDatabase is fetched from the right thread
+// (IO thread) and run callback on the calling thread. The callback will always

[pneubeck (no reviews), 2014/01/24 13:18:02]

s/run callback/the callback is run/ ?

[tbarzic, 2014/01/25 00:26:27]

Done.

+// be called asynchronously.
+void GetNSSCertDatabaseForProfile(

[pneubeck (no reviews), 2014/01/24 13:18:02]

It might be helpful to add a comment to GetNSSCertDatabaseForResourceContext in
nss_context.h how to get an NSSCertDatabase instance. I.e. explain that for
profiles they should use this factory function.

[tbarzic, 2014/01/25 00:26:27]

moved the method there

+    Profile* profile,
+    const base::Callback<void(net::NSSCertDatabase*)>& callback);
+
+}  // namespace chromeos
+
+#endif  // CHROME_BROWSER_CHROMEOS_NET_NSS_CERT_DATABASE_FACTORY_H_