Added a PolicyCertVerifier that uses the trust anchors from the ONC policies.

chrome/browser/policy/browser_policy_connector.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_POLICY_BROWSER_POLICY_CONNECTOR_H_
 #define CHROME_BROWSER_POLICY_BROWSER_POLICY_CONNECTOR_H_
 
 #include <string>
 
 #include "base/basictypes.h"
 #include "base/memory/ref_counted.h"
 #include "base/memory/scoped_ptr.h"
 #include "base/memory/weak_ptr.h"
 #include "chrome/browser/policy/cloud/cloud_policy_constants.h"
 #include "chrome/browser/policy/configuration_policy_handler_list.h"
 
 #if defined(OS_CHROMEOS)
 #include "chrome/browser/chromeos/policy/proxy_policy_provider.h"
 #endif
 
 class PrefRegistrySimple;
+class PrefRegistrySyncable;
 class PrefService;
 class Profile;
 
 namespace net {
+class CertTrustAnchorProvider;
 class URLRequestContextGetter;
 }
 
 namespace policy {
 
 class ConfigurationPolicyProvider;
 class DeviceManagementService;
 class PolicyService;
 class PolicyStatisticsCollector;
 
@@ skipping 76 matching lines @@
 
   DeviceManagementService* device_management_service() {
     return device_management_service_.get();
   }
 
 #if defined(OS_CHROMEOS)
   AppPackUpdater* GetAppPackUpdater();
 
   NetworkConfigurationUpdater* GetNetworkConfigurationUpdater();
 
+  net::CertTrustAnchorProvider* GetCertTrustAnchorProvider();
+
   DeviceCloudPolicyManagerChromeOS* GetDeviceCloudPolicyManager() {
     return device_cloud_policy_manager_.get();
   }
   UserCloudPolicyManagerChromeOS* GetUserCloudPolicyManager() {
     return user_cloud_policy_manager_.get();
   }
   DeviceLocalAccountPolicyService* GetDeviceLocalAccountPolicyService() {
     return device_local_account_policy_service_.get();
   }
   EnterpriseInstallAttributes* GetInstallAttributes() {
@@ skipping 17 matching lines @@
 
   // Gets the URL of the DM server (either the default or a URL provided via the
   // command line).
   static std::string GetDeviceManagementUrl();
 
   // Check whether a user is known to be non-enterprise. Domains such as
   // gmail.com and googlemail.com are known to not be managed. Also returns
   // false if the username is empty.
   static bool IsNonEnterpriseUser(const std::string& username);
 
+  // Returns true if |profile| has used certificates installed via policy
+  // to establish a secure connection before. This means that it may have
+  // cached content from an untrusted source.
+  static bool UsedPolicyCertificates(Profile* profile);
+
   // Registers refresh rate prefs.
   static void RegisterPrefs(PrefRegistrySimple* registry);
 
+  // Registers Profile prefs related to policy features.
+  static void RegisterUserPrefs(PrefRegistrySyncable* registry);
+
  private:
   // Set the timezone as soon as the policies are available.
   void SetTimezoneIfPolicyAvailable();
 
   // Creates a new PolicyService with the shared policy providers and the given
   // |user_cloud_policy_provider| and |managed_mode_policy_provider|, which are
   // optional.
   scoped_ptr<PolicyService> CreatePolicyServiceWithProviders(
       ConfigurationPolicyProvider* user_cloud_policy_provider,
       ConfigurationPolicyProvider* managed_mode_policy_provider);
@@ skipping 48 matching lines @@
   scoped_ptr<AppPackUpdater> app_pack_updater_;
   scoped_ptr<NetworkConfigurationUpdater> network_configuration_updater_;
 #endif
 
   DISALLOW_COPY_AND_ASSIGN(BrowserPolicyConnector);
 };
 
 }  // namespace policy
 
 #endif  // CHROME_BROWSER_POLICY_BROWSER_POLICY_CONNECTOR_H_