NSS Cros multiprofile: trust roots added by a profile shouldn't apply to other profiles.

chrome/browser/chromeos/policy/policy_cert_verifier.cc

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chromeos/policy/policy_cert_verifier.h"
 
 #include "base/logging.h"
 #include "chrome/browser/browser_process.h"
 #include "content/public/browser/browser_thread.h"
 #include "net/base/net_errors.h"
@@ skipping 31 matching lines @@
 PolicyCertVerifier::PolicyCertVerifier(
     const base::Closure& anchor_used_callback)
     : anchor_used_callback_(anchor_used_callback) {
   DCHECK(content::BrowserThread::CurrentlyOn(content::BrowserThread::UI));
 }
 
 PolicyCertVerifier::~PolicyCertVerifier() {
   DCHECK(content::BrowserThread::CurrentlyOn(content::BrowserThread::IO));
 }
 
-void PolicyCertVerifier::InitializeOnIOThread() {
+void PolicyCertVerifier::InitializeOnIOThread(
+    const scoped_refptr<net::CertVerifyProc>& verify_proc) {
   DCHECK(content::BrowserThread::CurrentlyOn(content::BrowserThread::IO));
-  scoped_refptr<net::CertVerifyProc> verify_proc =
-      net::CertVerifyProc::CreateDefault();
   if (!verify_proc->SupportsAdditionalTrustAnchors()) {
     LOG(WARNING)
         << "Additional trust anchors not supported on the current platform!";
   }
   net::MultiThreadedCertVerifier* verifier =
-      new net::MultiThreadedCertVerifier(verify_proc.get());
+      new net::MultiThreadedCertVerifier(verify_proc);
   verifier->SetCertTrustAnchorProvider(this);
   delegate_.reset(verifier);
 }
 
 void PolicyCertVerifier::SetTrustAnchors(
     const net::CertificateList& trust_anchors) {
   DCHECK(content::BrowserThread::CurrentlyOn(content::BrowserThread::IO));
   trust_anchors_ = trust_anchors;
 }
 
@@ skipping 23 matching lines @@
   DCHECK(content::BrowserThread::CurrentlyOn(content::BrowserThread::IO));
   delegate_->CancelRequest(req);
 }
 
 const net::CertificateList& PolicyCertVerifier::GetAdditionalTrustAnchors() {
   DCHECK(content::BrowserThread::CurrentlyOn(content::BrowserThread::IO));
   return trust_anchors_;
 }
 
 }  // namespace policy