Added a PolicyCertVerifier that uses the trust anchors from the ONC policies.

chrome/common/chrome_switches.cc

Index: chrome/common/chrome_switches.cc
diff --git a/chrome/common/chrome_switches.cc b/chrome/common/chrome_switches.cc
index b0c5e12bcb99543acffdf2e10d5b40c2589ae4c0..f44a11a7491912d3c1d186341bd62a2d4b07ada7 100644
--- a/chrome/common/chrome_switches.cc
+++ b/chrome/common/chrome_switches.cc
@@ -1498,6 +1498,9 @@ const char kDisableDrive[]                  = "disable-drive";
 // Enables file prefetching in Google Drive Client for Chrome OS.
 const char kEnableDrivePrefetch[]           = "enable-drive-prefetch";
 
+// Disable policy-configured local accounts.
+const char kDisableLocalAccounts[]          = "disable-local-accounts";
+
 // Avoid doing expensive animations upon login.
 const char kDisableLoginAnimations[]        = "disable-login-animations";
 
@@ -1527,9 +1530,6 @@ const char kEnableTouchpadThreeFingerSwipe[]
 // Enable Kiosk mode for ChromeOS.
 const char kEnableKioskMode[]               = "enable-kiosk-mode";
 
-// Disable policy-configured local accounts.
-const char kDisableLocalAccounts[]          = "disable-local-accounts";
-
 // Enables request of tablet site (via user agent override).
 const char kEnableRequestTabletSite[]       = "enable-request-tablet-site";
 
@@ -1537,6 +1537,11 @@ const char kEnableRequestTabletSite[]       = "enable-request-tablet-site";
 // default.
 const char kEnableStaticIPConfig[]          = "enable-static-ip-config";
 
+// Enables setting TRUST_SSL for server and CA certificates imported from user
+// ONC policy. This flag will be removed once the feature can be turned on by
+// default, which needs additional UI work.
+const char kEnableWebTrustCerts[]           = "enable-web-trust-certs";
+
 // Passed to Chrome on first boot. Not passed on restart after sign out.
 const char kFirstBoot[]                     = "first-boot";