Listen for new system certificates.

net/socket/client_socket_factory.cc

Index: net/socket/client_socket_factory.cc
diff --git a/net/socket/client_socket_factory.cc b/net/socket/client_socket_factory.cc
index a86688e33332959d09c520c92dc3d13641177e44..179e7a4a589cf85dcfc8fb2929a78657c542cfe1 100644
--- a/net/socket/client_socket_factory.cc
+++ b/net/socket/client_socket_factory.cc
@@ -67,6 +67,13 @@ class DefaultClientSocketFactory : public ClientSocketFactory,
     ClearSSLSessionCache();
   }
 
+  virtual void OnDatabaseChanged() OVERRIDE {
+    // Per wtc, we actually only need to flush when trust is reduced.
+    // Always flush now because OnDatabaseChanged does not tell us this.
+    // See comments in ClientSocketPoolManager::OnDatabaseChanged.
+    ClearSSLSessionCache();
+  }
+
   virtual scoped_ptr<DatagramClientSocket> CreateDatagramClientSocket(
       DatagramSocket::BindType bind_type,
       const RandIntCallback& rand_int_cb,