Add a preference for enabling the TLS origin-bound certificates extension.

chrome/app/policy/policy_templates.json

 {
 # policy_templates.json - Metafile for policy templates
 #
 # The content of this file is evaluated as a Python expression.
 #
 # This file is used as input to generate the following policy templates:
 # ADM, ADMX+ADML, MCX/plist and html documentation.
 #
 # Policy templates are user interface definitions or documents about the
 # policies that can be used to configure Chrome. Each policy is a name-value
@@ skipping 82 matching lines @@
 #   policy configuration files. 'dynamic_refresh' controls if the generated
 #   documentation should state that the policy supports dynamic refresh or not.
 #   Supporting dynamic refresh means that Chrome respects the changes to the
 #   policy immediately, without the need for restart.
 #
 # IDs:
 #   Since a Protocol Buffer definition is generated from this file, unique and
 #   persistent IDs for all fields (but not for groups!) are needed. These are
 #   specified by the 'id' keys of each policy. NEVER CHANGE EXISTING IDs,
 #   because doing so would break the deployed wire format!
-#   For your editing convenience: highest ID currently used: 113
+#   For your editing convenience: highest ID currently used: 114
 #
 # Placeholders:
 #   The following placeholder strings are automatically substituted:
 #     $1 -> Google Chrome / Chromium
 #     $2 -> Google Chrome OS / Chromium OS
 #     $3 -> Google Chrome Frame / Chromium Frame
 #     $6 is reserved for doc_writer
 #
 # Device Policy:
 #   An additional flag device_only (optional, defaults to False) indicates
@@ skipping 308 matching lines @@
       If this policy is left not set, this will be enabled but the user will be able to change it.''',
     },
     {
       'name': 'CloudPrintProxyEnabled',
       'type': 'main',
       'supported_on': ['chrome.*:17-'],
       'features': {'dynamic_refresh': 1},
       'example_value': True,
       'id': 13,
       'caption': '''Enable <ph name="CLOUD_PRINT_NAME">Google Cloud Print</ph> proxy''',
-      'desc': '''      Enables <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> to act as a proxy between <ph name="CLOUD_PRINT_NAME">Google Cloud Print</ph> and legacy printers connected to the machine.
+      'desc': '''Enables <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> to act as a proxy between <ph name="CLOUD_PRINT_NAME">Google Cloud Print</ph> and legacy printers connected to the machine.
 
       If this setting is enabled or not configured, users can enable the cloud print proxy by authentication with their Google account.
 
       If this setting is disabled, users cannot enable the proxy, and the machine will not be allowed to share it's printers with <ph name="CLOUD_PRINT_NAME">Google Cloud Print</ph>.
 
       If this policy is left not set, this will be enabled but the user will be able to change it.''',
     },
     {
       'name': 'SafeBrowsingEnabled',
       'type': 'main',
@@ skipping 1647 matching lines @@
     },
     {
       'name': 'CloudPrintSubmitEnabled',
       'type': 'main',
       'supported_on': ['chrome.*:17-'],
       'features': {'dynamic_refresh': 1},
       'future': False,
       'example_value': True,
       'id': 109,
       'caption': '''Enable submission of documents to <ph name="CLOUD_PRINT_NAME">Google Cloud Print</ph>''',
-      'desc': '''      Enables <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> to submit documents to <ph name="CLOUD_PRINT_NAME">Google Cloud Print</ph> for printing.  NOTE: This only affects <ph name="CLOUD_PRINT_NAME">Google Cloud Print</ph> support in <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>.  It does not prevent users from submitting print jobs on web sites.
+      'desc': '''Enables <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> to submit documents to <ph name="CLOUD_PRINT_NAME">Google Cloud Print</ph> for printing.  NOTE: This only affects <ph name="CLOUD_PRINT_NAME">Google Cloud Print</ph> support in <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>.  It does not prevent users from submitting print jobs on web sites.
 
       If this setting is enabled or not configured, users can print to <ph name="CLOUD_PRINT_NAME">Google Cloud Print</ph> from the <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> print dialog.
 
       If this setting is disabled, users cannot print to <ph name="CLOUD_PRINT_NAME">Google Cloud Print</ph> from the <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> print dialog''',
     },
     {
       'name': 'EnterpriseWebStoreURL',
       'type': 'string',
       'supported_on': ['chrome.*:17-','chrome_os:0.17-'],
       'features': {'dynamic_refresh': 1},
@@ skipping 11 matching lines @@
       'supported_on': ['chrome.*:17-','chrome_os:0.17-'],
       'features': {'dynamic_refresh': 1},
       'future': False,
       'example_value': 'WidgCo Chrome Apps',
       'id': 113,
       'caption': '''Enterprise web store name''',
       'desc': '''The name of the enterprise web store, which will appear underneath the app icon on the new tab page. This setting has no effect if EnterpriseWebStoreURL is not set.
 
       If this setting is disabled, the enterprise web store app (if it exists) will be labeled with its URL.''',
     },
+    {
+      'name': 'EnableOriginBoundCerts',
+      'type': 'main',
+      'supported_on': ['chrome.*:17-'],
+      'features': {'dynamic_refresh': 0},
+      'future': False,
+      'example_value': True,
+      'id': 114,
+      'caption': '''Enable TLS origin-bound certificates extension''',
+      'desc': '''Specifies whether the TLS origin-bound certificates extension should be enabled.
+
+      This setting is used to enable the TLS origin-bound certificates extension for a group of Google employees for testing.  This setting will be deleted in the future.''',

[Mattias Nissler (ping if slow), 2011/12/02 12:40:08]

Oh, so this is Google only? You can then put 'future': True. Doing so, the
policy is still enabled and can be configured manually, but it won't show up in
documentation and we won't generate group policy templates and example files.
Also, I'd just mention here that this is experimental and may be removed in the
future, the reference to Google is not necessary.

+    },
   ],
   'messages': {
     # Messages that are not associated to any policies.
     'win_supported_winxpsp2': {
       'desc': '''A label specifying the oldest possible compatible version of Windows. This text will appear right next to a label containing the text 'Supported on:'.''',
       'text': '''Microsoft Windows XP SP2 or later'''
     },
     'mac_chrome_preferences': {
       'desc': '''A text indicating in Mac OS X Workgroup Manager, that currently the preferences of Chrome are being edited''',
       'text': '''<ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> preferences'''
@@ skipping 70 matching lines @@
       'desc': '''The name of the feature that indicates for a given policy that changes to it are respected by Chrome without a browser restart''',
       'text': '''Dynamic Policy Refresh'''
     },
     'doc_deprecated': {
       'desc': '''Text appended in parentheses to the policy name to indicate t hat it has been deprecated''',
       'text': 'deprecated',
     }
   },
   'placeholders': [],
 }