Added a PolicyCertVerifier that uses the trust anchors from the ONC policies.

chrome/browser/profiles/profile_io_data.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_PROFILES_PROFILE_IO_DATA_H_
 #define CHROME_BROWSER_PROFILES_PROFILE_IO_DATA_H_
 
 #include <string>
 
 #include "base/basictypes.h"
@@ skipping 25 matching lines @@
 class ProtocolHandlerRegistry;
 class SigninNamesOnIOThread;
 class TransportSecurityPersister;
 
 namespace chrome_browser_net {
 class LoadTimeStats;
 class ResourcePrefetchPredictorObserver;
 }
 
 namespace net {
+class CertTrustAnchorProvider;
+class CertVerifier;
 class CookieStore;
 class FraudulentCertificateReporter;
 class HttpServerProperties;
 class HttpTransactionFactory;
 class ServerBoundCertService;
 class ProxyConfigService;
 class ProxyService;
 class SSLConfigService;
 class TransportSecurityState;
 class URLRequestJobFactoryImpl;
@@ skipping 205 matching lines @@
 
     // We need to initialize the ProxyConfigService from the UI thread
     // because on linux it relies on initializing things through gconf,
     // and needs to be on the main thread.
     scoped_ptr<net::ProxyConfigService> proxy_config_service;
 
 #if defined(ENABLE_MANAGED_USERS)
     scoped_refptr<const ManagedModeURLFilter> managed_mode_url_filter;
 #endif
 
+#if defined(OS_CHROMEOS)
+    // This is used to build the CertVerifier on the IO thread, and is a shared
+    // provider used by all profiles for now.
+    net::CertTrustAnchorProvider* trust_anchor_provider;
+#endif
+
     // The profile this struct was populated from. It's passed as a void* to
     // ensure it's not accidently used on the IO thread. Before using it on the
     // UI thread, call ProfileManager::IsValidProfile to ensure it's alive.
     void* profile;
   };
 
   explicit ProfileIOData(bool is_incognito);
 
   static std::string GetSSLSessionCacheShard();
 
@@ skipping 193 matching lines @@
   // Pointed to by URLRequestContext.
   mutable scoped_refptr<ExtensionInfoMap> extension_info_map_;
   mutable scoped_ptr<net::ServerBoundCertService> server_bound_cert_service_;
   mutable scoped_ptr<ChromeNetworkDelegate> network_delegate_;
   mutable scoped_ptr<net::FraudulentCertificateReporter>
       fraudulent_certificate_reporter_;
   mutable scoped_ptr<net::ProxyService> proxy_service_;
   mutable scoped_ptr<net::TransportSecurityState> transport_security_state_;
   mutable scoped_ptr<net::HttpServerProperties>
       http_server_properties_;
+#if defined(OS_CHROMEOS)
+  mutable scoped_ptr<net::CertVerifier> cert_verifier_;
+#endif
 
 #if defined(ENABLE_NOTIFICATIONS)
   mutable DesktopNotificationService* notification_service_;
 #endif
 
   mutable scoped_ptr<TransportSecurityPersister>
       transport_security_persister_;
 
   // These are only valid in between LazyInitialize() and their accessor being
   // called.
@@ skipping 21 matching lines @@
 
   // TODO(jhawkins): Remove once crbug.com/102004 is fixed.
   bool initialized_on_UI_thread_;
 
   bool is_incognito_;
 
   DISALLOW_COPY_AND_ASSIGN(ProfileIOData);
 };
 
 #endif  // CHROME_BROWSER_PROFILES_PROFILE_IO_DATA_H_