Make NSSCertDatabase::ListCerts work async on a worker thread.

net/cert/nss_cert_database_chromeos.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/nss_cert_database_chromeos.h"
 
 #include <cert.h>
 #include <pk11pub.h>
 
 #include "net/base/crypto_module.h"
 #include "net/cert/x509_certificate.h"
 
 namespace net {
 
 NSSCertDatabaseChromeOS::NSSCertDatabaseChromeOS(
     crypto::ScopedPK11Slot public_slot,
     crypto::ScopedPK11Slot private_slot)
     : public_slot_(public_slot.Pass()),
-      private_slot_(private_slot.Pass()) {
-  profile_filter_.Init(GetPublicSlot(), GetPrivateSlot());
+      private_slot_(private_slot.Pass()),
+      profile_filter_(new NSSProfileFilterChromeOS) {
+  profile_filter_->Init(GetPublicSlot(), GetPrivateSlot());
 }
 
 NSSCertDatabaseChromeOS::~NSSCertDatabaseChromeOS() {}
 
-void NSSCertDatabaseChromeOS::ListCerts(CertificateList* certs) {
-  NSSCertDatabase::ListCerts(certs);
+void NSSCertDatabaseChromeOS::ListCertsSync(CertificateList* certs) {
+  NSSCertDatabase::ListCertsSync(certs);
 
   size_t pre_size = certs->size();
   certs->erase(std::remove_if(
                    certs->begin(),
                    certs->end(),
-                   NSSProfileFilterChromeOS::CertNotAllowedForProfilePredicate(
-                       profile_filter_)),
+                   NSSDatabaseFilter::CertNotAllowedPredicate(profile_filter_)),
                certs->end());
   DVLOG(1) << "filtered " << pre_size - certs->size() << " of " << pre_size
            << " certs";
 }
 
+scoped_refptr<NSSDatabaseFilter>
+NSSCertDatabaseChromeOS::GetDatabaseFilter() const {
+  return profile_filter_;
+}
+
 crypto::ScopedPK11Slot NSSCertDatabaseChromeOS::GetPublicSlot() const {
   return crypto::ScopedPK11Slot(
       public_slot_ ? PK11_ReferenceSlot(public_slot_.get()) : NULL);
 }
 
 crypto::ScopedPK11Slot NSSCertDatabaseChromeOS::GetPrivateSlot() const {
   return crypto::ScopedPK11Slot(
       private_slot_ ? PK11_ReferenceSlot(private_slot_.get()) : NULL);
 }
 
-void NSSCertDatabaseChromeOS::ListModules(CryptoModuleList* modules,
-                                          bool need_rw) const {
-  NSSCertDatabase::ListModules(modules, need_rw);
+void NSSCertDatabaseChromeOS::ListModulesSync(CryptoModuleList* modules,
+                                              bool need_rw) const {
+  NSSCertDatabase::ListModulesSync(modules, need_rw);
 
   size_t pre_size = modules->size();
   modules->erase(
       std::remove_if(
           modules->begin(),
           modules->end(),
-          NSSProfileFilterChromeOS::ModuleNotAllowedForProfilePredicate(
-              profile_filter_)),
+          NSSDatabaseFilter::ModuleNotAllowedPredicate(profile_filter_)),
       modules->end());
   DVLOG(1) << "filtered " << pre_size - modules->size() << " of " << pre_size
            << " modules";
 }
 
 }  // namespace net