Use user specific NSSDatabase in CertLoader.

chrome/browser/net/nss_context.h

Index: chrome/browser/net/nss_context.h
diff --git a/chrome/browser/net/nss_context.h b/chrome/browser/net/nss_context.h
index 53eab54cc7dc3980395d1d1aa374ba4858c5696a..feb178ca7c8a1de8e17a6fbb905f18d4603ff56b 100644
--- a/chrome/browser/net/nss_context.h
+++ b/chrome/browser/net/nss_context.h
@@ -11,6 +11,8 @@
 #include "base/compiler_specific.h"
 #include "crypto/scoped_nss_types.h"
 
+class Profile;
+
 namespace net {
 class NSSCertDatabase;
 }
@@ -44,4 +46,13 @@ net::NSSCertDatabase* GetNSSCertDatabaseForResourceContext(
     const base::Callback<void(net::NSSCertDatabase*)>& callback)
     WARN_UNUSED_RESULT;
 
+// Gets a pointer to the NSSCertDatabase for the user associated with |context|.
+// It's a wrapper around |GetNSSCertDatabaseForResourceContext| which makes
+// sure it's called on IO thread (with |profile|'s resource context). The
+// callback will be called on the originating message loop.
+// It's accessing profile, so it should be called on the UI thread.
+void GetNSSCertDatabaseForProfile(
+    Profile* profile,
+    const base::Callback<void(net::NSSCertDatabase*)>& callback);
+
 #endif  // CHROME_BROWSER_NET_NSS_CONTEXT_H_