NSS Cros multiprofile: trust roots added by a profile shouldn't apply to other profiles.

chrome/browser/chromeos/policy/policy_cert_verifier.h

Index: chrome/browser/chromeos/policy/policy_cert_verifier.h
diff --git a/chrome/browser/chromeos/policy/policy_cert_verifier.h b/chrome/browser/chromeos/policy/policy_cert_verifier.h
index 07b1679cac2642b1149de9731efd86498b0ae82b..85fc310c00a41990c8ca959facfbbe23340c22c6 100644
--- a/chrome/browser/chromeos/policy/policy_cert_verifier.h
+++ b/chrome/browser/chromeos/policy/policy_cert_verifier.h
@@ -17,6 +17,7 @@
 #include "net/cert/cert_verifier.h"
 
 namespace net {
+class CertVerifyProc;
 class CertVerifyResult;
 class X509Certificate;
 typedef std::vector<scoped_refptr<X509Certificate> > CertificateList;
@@ -38,7 +39,7 @@ class PolicyCertVerifier : public net::CertVerifier,
   explicit PolicyCertVerifier(const base::Closure& anchor_used_callback);
   virtual ~PolicyCertVerifier();
 
-  void InitializeOnIOThread();
+  void InitializeOnIOThread(net::CertVerifyProc* verify_proc);

[Ryan Sleevi, 2014/01/22 00:43:48]

At the risk of extra typing, can you pass this as

"const scoped_refptr<net::CertVerifyProc>& verify_proc"

[mattm, 2014/01/24 04:47:31]

Done.

 
   // Sets the additional trust anchors.
   void SetTrustAnchors(const net::CertificateList& trust_anchors);