Added a PolicyCertVerifier that uses the trust anchors from the ONC policies.

chrome/common/chrome_switches.cc

Index: chrome/common/chrome_switches.cc
diff --git a/chrome/common/chrome_switches.cc b/chrome/common/chrome_switches.cc
index fe58994d6f292d8bbe32c64e475850b3f52a2c32..ce8ecda6f67e1716fdffd8068c95d3120113dbdb 100644
--- a/chrome/common/chrome_switches.cc
+++ b/chrome/common/chrome_switches.cc
@@ -1506,6 +1506,9 @@ const char kDisableDrive[]                  = "disable-drive";
 // Enables file prefetching in Google Drive Client for Chrome OS.
 const char kEnableDrivePrefetch[]           = "enable-drive-prefetch";
 
+// Disable policy-configured local accounts.
+const char kDisableLocalAccounts[]          = "disable-local-accounts";
+
 // Avoid doing expensive animations upon login.
 const char kDisableLoginAnimations[]        = "disable-login-animations";
 
@@ -1535,9 +1538,6 @@ const char kEnableTouchpadThreeFingerSwipe[]
 // Enable Kiosk mode for ChromeOS.
 const char kEnableKioskMode[]               = "enable-kiosk-mode";
 
-// Disable policy-configured local accounts.
-const char kDisableLocalAccounts[]          = "disable-local-accounts";
-
 // Enables request of tablet site (via user agent override).
 const char kEnableRequestTabletSite[]       = "enable-request-tablet-site";
 
@@ -1545,6 +1545,11 @@ const char kEnableRequestTabletSite[]       = "enable-request-tablet-site";
 // default.
 const char kEnableStaticIPConfig[]          = "enable-static-ip-config";
 
+// Enables setting TRUST_SSL for server and CA certificates imported from user
+// ONC policy. This flag will be removed once the feature can be turned on by
+// default, which needs additional UI work.
+const char kEnableWebTrustCerts[]           = "enable-web-trust-certs";
+
 // Passed to Chrome on first boot. Not passed on restart after sign out.
 const char kFirstBoot[]                     = "first-boot";