Added a PolicyCertVerifier that uses the trust anchors from the ONC policies.

chrome/common/chrome_switches.cc

Index: chrome/common/chrome_switches.cc
diff --git a/chrome/common/chrome_switches.cc b/chrome/common/chrome_switches.cc
index d3ec7272ffa19c5727d6d421deda1684c382e135..69680b1524bee1d827bf7b46c4c6bc23274e0ff0 100644
--- a/chrome/common/chrome_switches.cc
+++ b/chrome/common/chrome_switches.cc
@@ -1503,6 +1503,9 @@ const char kDisableDrive[]                  = "disable-drive";
 // Enables file prefetching in Google Drive Client for Chrome OS.
 const char kEnableDrivePrefetch[]           = "enable-drive-prefetch";
 
+// Disable policy-configured local accounts.
+const char kDisableLocalAccounts[]          = "disable-local-accounts";
+
 // Avoid doing expensive animations upon login.
 const char kDisableLoginAnimations[]        = "disable-login-animations";
 
@@ -1532,9 +1535,6 @@ const char kEnableTouchpadThreeFingerSwipe[]
 // Enable Kiosk mode for ChromeOS.
 const char kEnableKioskMode[]               = "enable-kiosk-mode";
 
-// Disable policy-configured local accounts.
-const char kDisableLocalAccounts[]          = "disable-local-accounts";
-
 // Enables request of tablet site (via user agent override).
 const char kEnableRequestTabletSite[]       = "enable-request-tablet-site";
 
@@ -1542,6 +1542,11 @@ const char kEnableRequestTabletSite[]       = "enable-request-tablet-site";
 // default.
 const char kEnableStaticIPConfig[]          = "enable-static-ip-config";
 
+// Enables setting TRUST_SSL for server and CA certificates imported from user
+// ONC policy. This flag will be removed once the feature can be turned on by
+// default, which needs additional UI work.
+const char kEnableWebTrustCerts[]           = "enable-web-trust-certs";
+
 // Passed to Chrome on first boot. Not passed on restart after sign out.
 const char kFirstBoot[]                     = "first-boot";