Added support for signed policy blobs on desktop.

chrome/browser/chromeos/settings/session_manager_operation_unittest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chromeos/settings/session_manager_operation.h"
 
 #include "base/basictypes.h"
 #include "base/bind.h"
 #include "base/bind_helpers.h"
 #include "base/memory/ref_counted.h"
@@ skipping 245 matching lines @@
           policy_response.Pass(), message_loop_.message_loop_proxy());
   validator->ValidateUsername(policy_.policy_data().username());
   validator->ValidateTimestamp(
       before,
       after,
       policy::CloudPolicyValidatorBase::TIMESTAMP_REQUIRED);
   validator->ValidatePolicyType(policy::dm_protocol::kChromeDevicePolicyType);
   validator->ValidatePayload();
   std::vector<uint8> public_key;
   policy_.GetSigningKey()->ExportPublicKey(&public_key);
-  validator->ValidateSignature(public_key, false);
+  // Convert from bytes to string format (which is what ValidateSignature()
+  // takes).
+  std::string public_key_as_string = std::string(
+      reinterpret_cast<const char*>(vector_as_array(&public_key)),
+      public_key.size());
+

[Mattias Nissler (ping if slow), 2014/01/27 13:52:13]

nit: remove newline?

[Andrew T Wilson (Slow), 2014/01/30 17:10:31]

Done.

+  validator->ValidateSignature(
+      public_key_as_string,
+      policy::GetPolicyVerificationKey(),
+      policy::PolicyBuilder::CreateTestSigningKeySignature(),
+      false);
   validator->StartValidation(
       base::Bind(&SessionManagerOperationTest::CheckSuccessfulValidation,
                  base::Unretained(this)));
 
   message_loop_.RunUntilIdle();
   EXPECT_TRUE(validated_);
 
   // Check that the loaded policy_data contains the expected values.
   EXPECT_EQ(policy::dm_protocol::kChromeDevicePolicyType,
             op.policy_data()->policy_type());
   EXPECT_LE((before - base::Time::UnixEpoch()).InMilliseconds(),
             op.policy_data()->timestamp());
   EXPECT_GE((after - base::Time::UnixEpoch()).InMilliseconds(),
             op.policy_data()->timestamp());
   EXPECT_FALSE(op.policy_data()->has_request_token());
   EXPECT_EQ(policy_.policy_data().username(), op.policy_data()->username());
 
   // Loaded device settings should match what the operation received.
   ASSERT_TRUE(op.device_settings().get());
   EXPECT_EQ(policy_.payload().SerializeAsString(),
             op.device_settings()->SerializeAsString());
 }
 
 }  // namespace chromeos