Add TrustStoreNSS and TrustStoreCollection

net/cert/internal/trust_store.h

Index: net/cert/internal/trust_store.h
diff --git a/net/cert/internal/trust_store.h b/net/cert/internal/trust_store.h
index 2d02ac17c99cba356f4221fe94ccf43511226910..073a509076259d4b094a3f011333f46303df9ff9 100644
--- a/net/cert/internal/trust_store.h
+++ b/net/cert/internal/trust_store.h
@@ -140,7 +140,7 @@ class NET_EXPORT TrustStore {
   // when results are available. The Request may be destroyed to cancel
   // the callback if it has not occurred yet.
   virtual void FindTrustAnchorsForCert(
-      const ParsedCertificate* cert,
+      scoped_refptr<ParsedCertificate> cert,

[eroman, 2016/08/27 01:53:38]

Should we make this a const-reference in case implementations don't need to hold
a reference? (i.e. synchronous-only ones).

[mattm, 2016/08/29 20:38:16]

Done.

       const TrustAnchorsCallback& callback,
       TrustAnchors* synchronous_matches,
       std::unique_ptr<Request>* out_req) const = 0;