Added a PolicyCertVerifier that uses the trust anchors from the ONC policies.

chrome/browser/chromeos/policy/policy_cert_verifier.h

Index: chrome/browser/chromeos/policy/policy_cert_verifier.h
diff --git a/chrome/browser/chromeos/policy/policy_cert_verifier.h b/chrome/browser/chromeos/policy/policy_cert_verifier.h
new file mode 100644
index 0000000000000000000000000000000000000000..884bb009f87a450f594e15684704178671062abe
--- /dev/null
+++ b/chrome/browser/chromeos/policy/policy_cert_verifier.h
@@ -0,0 +1,42 @@
+// Copyright (c) 2013 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef CHROME_BROWSER_CHROMEOS_POLICY_POLICY_CERT_VERIFIER_H_
+#define CHROME_BROWSER_CHROMEOS_POLICY_POLICY_CERT_VERIFIER_H_
+
+#include "base/memory/scoped_ptr.h"
+#include "net/base/cert_verifier.h"
+
+namespace net {
+class CertTrustAnchorProvider;
+}
+
+namespace policy {
+
+class PolicyCertVerifier : public net::CertVerifier {
+ public:
+  PolicyCertVerifier(void* profile,
+                     net::CertTrustAnchorProvider* trust_anchor_provider);
+  virtual ~PolicyCertVerifier();
+
+  // CertVerifier:
+  virtual int Verify(net::X509Certificate* cert,

[pneubeck (no reviews), 2013/03/26 11:04:50]

mention that |callback| may be null, in contrast to net::CertVerifier's
callback.

[Joao da Silva, 2013/03/31 19:22:14]

Done.

+                     const std::string& hostname,
+                     int flags,
+                     net::CRLSet* crl_set,
+                     net::CertVerifyResult* verify_result,
+                     const net::CompletionCallback& callback,
+                     RequestHandle* out_req,
+                     const net::BoundNetLog& net_log) OVERRIDE;
+
+  virtual void CancelRequest(RequestHandle req) OVERRIDE;
+
+ private:
+  void* profile_;
+  scoped_ptr<CertVerifier> delegate_;
+};
+
+}  // namespace policy
+
+#endif  // CHROME_BROWSER_CHROMEOS_POLICY_POLICY_CERT_VERIFIER_H_