Add a check for server and CA certificates in device policies to the ONC validator.

chromeos/network/onc/onc_certificate_importer_unittest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chromeos/network/onc/onc_certificate_importer.h"
 
 #include <cert.h>
 #include <certdb.h>
 #include <keyhi.h>
 #include <pk11pub.h>
@@ skipping 72 matching lines @@
     scoped_ptr<base::DictionaryValue> onc =
         test_utils::ReadTestDictionary(filename);
     base::ListValue* certificates;
     onc->GetListWithoutPathExpansion(toplevel_config::kCertificates,
                                      &certificates);
 
     base::DictionaryValue* certificate;
     certificates->GetDictionary(0, &certificate);
     certificate->GetStringWithoutPathExpansion(certificate::kGUID, guid);
 
-    CertificateImporter importer(ONC_SOURCE_USER_IMPORT,
-                                 false /* don't allow web trust */);
+    CertificateImporter importer(true /* allow web trust */);
     EXPECT_EQ(CertificateImporter::IMPORT_OK,
               importer.ParseAndStoreCertificates(*certificates));
 
     net::CertificateList result_list;
     CertificateImporter::ListCertsWithNickname(*guid, &result_list);
     ASSERT_EQ(1ul, result_list.size());
     EXPECT_EQ(expected_type, GetCertType(result_list[0]->os_cert_handle()));
   }
 
   scoped_refptr<net::CryptoModule> slot_;
@@ skipping 148 matching lines @@
         std::make_pair(net::SERVER_CERT,
                        std::make_pair("certificate-server.onc",
                                       "certificate-server-update.onc")),
         std::make_pair(
             net::CA_CERT,
             std::make_pair("certificate-web-authority.onc",
                            "certificate-web-authority-update.onc"))));
 
 }  // namespace onc
 }  // namespace chromeos