Add a check for server and CA certificates in device policies to the ONC validator.

chromeos/test/data/network/invalid_settings_with_repairs.json

Index: chromeos/test/data/network/invalid_settings_with_repairs.json
diff --git a/chromeos/test/data/network/invalid_settings_with_repairs.json b/chromeos/test/data/network/invalid_settings_with_repairs.json
index e1ab1d46c05da3cf8f7e0929b189bdfc6fb1d8ad..c639d8254351670143fc919363170c289ffe2e2f 100644
--- a/chromeos/test/data/network/invalid_settings_with_repairs.json
+++ b/chromeos/test/data/network/invalid_settings_with_repairs.json
@@ -135,6 +135,28 @@
             "Authentication": "None"
         }
     },
+    "network-with-client-cert-pattern": {
+        "GUID": "guid",
+        "Type": "WiFi",
+        "Name": "name",
+        "WiFi": {
+            "SSID": "ssid",
+            "Security": "WPA-EAP",
+            "EAP": {
+                "Outer": "EAP-TLS",
+                "Identity": "abc ${LOGIN_ID}@my.domain.com",
+                "ClientCertType": "Pattern",
+                "ClientCertPattern": {
+                    "IssuerCARef": [
+                        "{58ac1967-a0e7-49e9-be68-123abc}"
+                    ],
+                    "EnrollmentURI": [
+                        "chrome-extension://delkjfjibodjclmdijflfnimdmgdagfk/generate-cert.html" 
+                    ]
+                }
+            }
+        }
+    },
     "toplevel-empty": {
         "Type": "UnencryptedConfiguration",
         "NetworkConfigurations": [ ]
@@ -151,6 +173,22 @@
           }
         ]
     },
+    "toplevel-with-vpn": {
+        "Type": "UnencryptedConfiguration",
+        "NetworkConfigurations":
+        [ { "GUID": "guid",
+            "Type": "VPN",
+            "Name": "name",
+            "VPN": {
+                "Host": "host",
+                "Type": "OpenVPN",
+                "OpenVPN": {
+                  "ClientCertType": "None"
+                }
+            }
+          }
+        ]
+    },
     "toplevel-with-nested-warning": {
         "Type": "UnencryptedConfiguration",
         "NetworkConfigurations":
@@ -183,4 +221,25 @@
           }
         ]
     },
+    "toplevel-server-and-ca-cert-dropped": {
+      "Type": "UnencryptedConfiguration",
+      "Certificates":
+      [ { "GUID": "3",
+          "PKCS12": "abc" ,
+          "Type": "Client" } ]
+    },
+    "toplevel-with-server-and-ca-cert": {
+      "Type": "UnencryptedConfiguration",
+      "Certificates":
+      [ { "Trust": ["Web"],
+          "GUID": "1",
+          "Type": "Authority",
+          "X509": "abc" },
+        { "GUID": "2",
+          "Type": "Server",
+          "X509": "abc" },
+        { "GUID": "3",
+          "PKCS12": "abc" ,
+          "Type": "Client" } ]
+    }
 }