NSS Cros multiprofile: trust roots added by a profile shouldn't apply to other profiles.

chrome/browser/chromeos/policy/policy_cert_verifier.cc

Index: chrome/browser/chromeos/policy/policy_cert_verifier.cc
diff --git a/chrome/browser/chromeos/policy/policy_cert_verifier.cc b/chrome/browser/chromeos/policy/policy_cert_verifier.cc
index 947f4dcca5bd22a740986eaeaa474097ed1c05bf..4a6b4438514a36a115afb9bb3e93ebafdf453ba4 100644
--- a/chrome/browser/chromeos/policy/policy_cert_verifier.cc
+++ b/chrome/browser/chromeos/policy/policy_cert_verifier.cc
@@ -49,16 +49,15 @@ PolicyCertVerifier::~PolicyCertVerifier() {
   DCHECK(content::BrowserThread::CurrentlyOn(content::BrowserThread::IO));
 }
 
-void PolicyCertVerifier::InitializeOnIOThread() {
+void PolicyCertVerifier::InitializeOnIOThread(
+    net::CertVerifyProc* verify_proc) {
   DCHECK(content::BrowserThread::CurrentlyOn(content::BrowserThread::IO));
-  scoped_refptr<net::CertVerifyProc> verify_proc =
-      net::CertVerifyProc::CreateDefault();
   if (!verify_proc->SupportsAdditionalTrustAnchors()) {
     LOG(WARNING)
         << "Additional trust anchors not supported on the current platform!";
   }
   net::MultiThreadedCertVerifier* verifier =
-      new net::MultiThreadedCertVerifier(verify_proc.get());
+      new net::MultiThreadedCertVerifier(verify_proc);
   verifier->SetCertTrustAnchorProvider(this);
   delegate_.reset(verifier);
 }