This adds support for encrypted ONC import

chrome/browser/policy/configuration_policy_handler_chromeos.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/policy/configuration_policy_handler_chromeos.h"
 
 #include <string>
 
 #include "base/json/json_reader.h"
 #include "base/json/json_writer.h"
@@ skipping 17 matching lines @@
 bool NetworkConfigurationPolicyHandler::CheckPolicySettings(
     const PolicyMap& policies,
     PolicyErrorMap* errors) {
   const Value* value;
   if (!CheckAndGetValue(policies, errors, &value))
     return false;
 
   if (value) {
     std::string onc_blob;
     value->GetAsString(&onc_blob);
-    chromeos::OncNetworkParser parser(onc_blob, onc_source_);
+    // Policy-based ONC blobs cannot have a passphrase.
+    chromeos::OncNetworkParser parser(onc_blob, "", onc_source_);
     if (!parser.parse_error().empty()) {
       errors->AddError(policy_type(),
                        IDS_POLICY_NETWORK_CONFIG_PARSE_ERROR,
                        parser.parse_error());
       return false;
     }
   }
 
   return true;
 }
@@ skipping 68 matching lines @@
 
   for (size_t i = 0; i < arraysize(kFilteredSettings); ++i) {
     if (network_dict->Remove(kFilteredSettings[i], NULL)) {
       network_dict->Set(kFilteredSettings[i],
                         Value::CreateStringValue(kPlaceholder));
     }
   }
 }
 
 }  // namespace policy