Added support for signed policy blobs on desktop.

components/policy/core/common/cloud/cloud_policy_manager.h

Index: components/policy/core/common/cloud/cloud_policy_manager.h
diff --git a/components/policy/core/common/cloud/cloud_policy_manager.h b/components/policy/core/common/cloud/cloud_policy_manager.h
index 0a044147627b7a4edb1f09e4ee7328652906884e..a392bf0def1f64a163c3ce9e64ae24b98313b60d 100644
--- a/components/policy/core/common/cloud/cloud_policy_manager.h
+++ b/components/policy/core/common/cloud/cloud_policy_manager.h
@@ -49,6 +49,7 @@ class POLICY_EXPORT CloudPolicyManager
   // BrowserThread.
   CloudPolicyManager(
       const PolicyNamespaceKey& policy_ns_key,
+      const std::string& verification_key_hash,

[Mattias Nissler (ping if slow), 2014/01/27 13:52:13]

Does this make sense here? The class itself doesn't use the value at all.

[Andrew T Wilson (Slow), 2014/01/30 17:10:31]

Yeah, I had this idea that CPM would be the holder for the verification key hash
(so you could inject it into classes and classes could fetch it directly from
CPM). I think now that it's in CloudPolicyConstants this doesn't make much
sense, so I'll remove this and change the callers to fetch it from
CloudPolicyConstants.

       CloudPolicyStore* cloud_policy_store,
       const scoped_refptr<base::SequencedTaskRunner>& task_runner,
       const scoped_refptr<base::SequencedTaskRunner>& file_task_runner,
@@ -70,6 +71,9 @@ class POLICY_EXPORT CloudPolicyManager
   // ComponentCloudPolicyService::Delegate:
   virtual void OnComponentCloudPolicyUpdated() OVERRIDE;
 
+  // Identifier for which verification key this chrome instance uses.
+  const std::string& verification_key_hash() { return verification_key_hash_; }
+
  protected:
   // Check whether fully initialized and if so, publish policy by calling
   // ConfigurationPolicyStore::UpdatePolicy().
@@ -103,6 +107,9 @@ class POLICY_EXPORT CloudPolicyManager
   // policy update notifications are deferred until after it completes.
   bool waiting_for_policy_refresh_;
 
+  // Identifier for which signing key is supported by this instance of Chrome.
+  std::string verification_key_hash_;
+
   scoped_refptr<base::SequencedTaskRunner> file_task_runner_;
   scoped_refptr<base::SequencedTaskRunner> io_task_runner_;