Added a PolicyCertVerifier that uses the trust anchors from the ONC policies.

chrome/common/chrome_switches.cc

Index: chrome/common/chrome_switches.cc
diff --git a/chrome/common/chrome_switches.cc b/chrome/common/chrome_switches.cc
index b2db6c7d139e518c60b7f82edcaf4d831e6357bb..81ae43e8ba30a9955e8a299740487001c975f8bf 100644
--- a/chrome/common/chrome_switches.cc
+++ b/chrome/common/chrome_switches.cc
@@ -1484,6 +1484,9 @@ const char kDisableDrive[]                  = "disable-drive";
 // Enables file prefetching in Google Drive Client for Chrome OS.
 const char kEnableDrivePrefetch[]           = "enable-drive-prefetch";
 
+// Disable policy-configured local accounts.
+const char kDisableLocalAccounts[]          = "disable-local-accounts";
+
 // Avoid doing expensive animations upon login.
 const char kDisableLoginAnimations[]        = "disable-login-animations";
 
@@ -1513,9 +1516,6 @@ const char kEnableTouchpadThreeFingerSwipe[]
 // Enable Kiosk mode for ChromeOS.
 const char kEnableKioskMode[]               = "enable-kiosk-mode";
 
-// Disable policy-configured local accounts.
-const char kDisableLocalAccounts[]          = "disable-local-accounts";
-
 // Enables request of tablet site (via user agent override).
 const char kEnableRequestTabletSite[]       = "enable-request-tablet-site";
 
@@ -1523,6 +1523,11 @@ const char kEnableRequestTabletSite[]       = "enable-request-tablet-site";
 // default.
 const char kEnableStaticIPConfig[]          = "enable-static-ip-config";
 
+// Enables setting TRUST_SSL for server and CA certificates imported from user
+// ONC policy. This flag will be removed once the feature can be turned on by
+// default, which needs additional UI work.
+const char kEnableWebTrustCerts[]           = "enable-web-trust-certs";

[pneubeck (no reviews), 2013/03/26 10:01:25]

btw. terrible indentation :-)

[Joao da Silva, 2013/03/31 19:22:14]

Following the file structure. Looks alright with syntax highlight :-)

+
 // Passed to Chrome on first boot. Not passed on restart after sign out.
 const char kFirstBoot[] = "first-boot";