Use per-user nssdb in onc certificate importer

chrome/browser/chromeos/policy/device_network_configuration_updater.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chromeos/policy/device_network_configuration_updater.h"
 
 #include "base/bind.h"
 #include "base/bind_helpers.h"
 #include "chrome/browser/chromeos/settings/cros_settings.h"
 #include "chromeos/network/managed_network_configuration_handler.h"
@@ skipping 48 matching lines @@
 }
 
 void DeviceNetworkConfigurationUpdater::Init() {
   NetworkConfigurationUpdater::Init();
 
   // Apply the roaming setting initially.
   OnDataRoamingSettingChanged();
 }
 
 void DeviceNetworkConfigurationUpdater::ImportCertificates(
-    const base::ListValue& certificates_onc) {
-  certificate_importer_->ImportCertificates(
-      certificates_onc, onc_source_, NULL);
+    const base::ListValue& certificates_onc,
+    net::NSSCertDatabase* target_nssdb) {
+  // Importing CA and server certs from device policy is not  allowed, while
+  // importing client is not yet supported (as a system-wide PKCS#11 token to
+  // which they should be imported is not yet available).
+  NOTREACHED();
 }
 
 void DeviceNetworkConfigurationUpdater::ApplyNetworkPolicy(
     base::ListValue* network_configs_onc,
     base::DictionaryValue* global_network_config) {
   network_config_handler_->SetPolicy(onc_source_,
                                      std::string() /* no username hash */,
                                      *network_configs_onc,
                                      *global_network_config);
 }
@@ skipping 21 matching lines @@
   } else {
     DCHECK_EQ(trusted_status,
               chromeos::CrosSettingsProvider::PERMANENTLY_UNTRUSTED);
     // Roaming is disabled as we can't determine the correct setting.
   }
 
   network_device_handler_->SetCellularAllowRoaming(data_roaming_setting);
 }
 
 }  // namespace policy