Listen for new system certificates.

net/socket/client_socket_factory.cc

Index: net/socket/client_socket_factory.cc
diff --git a/net/socket/client_socket_factory.cc b/net/socket/client_socket_factory.cc
index a86688e33332959d09c520c92dc3d13641177e44..e163a6939afcd5fd513dde6ed8e8c22ac6416595 100644
--- a/net/socket/client_socket_factory.cc
+++ b/net/socket/client_socket_factory.cc
@@ -67,6 +67,13 @@ class DefaultClientSocketFactory : public ClientSocketFactory,
     ClearSSLSessionCache();
   }
 
+  virtual void OnDatabaseUpdated() OVERRIDE {
+    // Per wtc, we actually only need to flush when trust is reduced.
+    // Always flush now because OnDatabaseUpdated does not tell us this.
+    // See comments in ClientSocketPoolManager::OnDatabaseUpdated.
+    ClearSSLSessionCache();
+  }
+
   virtual scoped_ptr<DatagramClientSocket> CreateDatagramClientSocket(
       DatagramSocket::BindType bind_type,
       const RandIntCallback& rand_int_cb,