Added support for signed policy blobs on desktop.

components/policy/core/common/cloud/policy_builder.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef COMPONENTS_POLICY_CORE_COMMON_CLOUD_POLICY_BUILDER_H_
 #define COMPONENTS_POLICY_CORE_COMMON_CLOUD_POLICY_BUILDER_H_
 
 #include <string>
 
 #include "base/basictypes.h"
@@ skipping 41 matching lines @@
     policy_data_.reset();
   }
 
   enterprise_management::PolicyFetchResponse& policy() {
     return policy_;
   }
 
   scoped_ptr<crypto::RSAPrivateKey> GetSigningKey();
   void SetSigningKey(const crypto::RSAPrivateKey& key);
   void SetDefaultSigningKey();
   void UnsetSigningKey();

[Mattias Nissler (ping if slow), 2014/01/27 13:52:13]

nit: blank line before comment.

[Andrew T Wilson (Slow), 2014/01/30 17:10:31]

Done.

+  // Sets the default initial signing key - the resulting policy will be signed
+  // by the default signing key, and will have that key set as the
+  // new_public_key field, as if it were an initial key provision.
+  void SetDefaultInitialSigningKey();
 
   scoped_ptr<crypto::RSAPrivateKey> GetNewSigningKey();
   void SetDefaultNewSigningKey();
   void UnsetNewSigningKey();
 
   // Assembles the policy components. The resulting policy protobuf is available
   // through policy() after this call.
   virtual void Build();
 
   // Returns a copy of policy().
   scoped_ptr<enterprise_management::PolicyFetchResponse> GetCopy();
 
   // Returns a binary policy blob, i.e. an encoded PolicyFetchResponse.
   std::string GetBlob();
 
   // These return hard-coded testing keys. Don't use in production!
   static scoped_ptr<crypto::RSAPrivateKey> CreateTestSigningKey();
   static scoped_ptr<crypto::RSAPrivateKey> CreateTestOtherSigningKey();
 
+  // Verification signatures for the two hard-coded testing keys above. These
+  // signatures are valid only for the kFakeDomain domain.
+  static std::string CreateTestSigningKeySignature();
+  static std::string CreateTestOtherSigningKeySignature();
+
  private:
   // Produces |key|'s signature over |data| and stores it in |signature|.
   void SignData(const std::string& data,
                 crypto::RSAPrivateKey* key,
                 std::string* signature);
 
   enterprise_management::PolicyFetchResponse policy_;
   scoped_ptr<enterprise_management::PolicyData> policy_data_;
   std::string payload_data_;
 
@@ skipping 45 matching lines @@
     UserPolicyBuilder;
 
 #if !defined(OS_ANDROID) && !defined(OS_IOS)
 typedef TypedPolicyBuilder<enterprise_management::ExternalPolicyData>
     ComponentPolicyBuilder;
 #endif
 
 }  // namespace policy
 
 #endif  // COMPONENTS_POLICY_CORE_COMMON_CLOUD_POLICY_BUILDER_H_