Configure networks requiring a certificate.

ash/system/chromeos/network/network_state_notifier.cc

Index: ash/system/chromeos/network/network_state_notifier.cc
diff --git a/ash/system/chromeos/network/network_state_notifier.cc b/ash/system/chromeos/network/network_state_notifier.cc
index a00f7bc0502bfb965d5efe9d4ddc1d8cbf9e1b01..46bb071a2f846638400f0abd402d0d1b86c464d2 100644
--- a/ash/system/chromeos/network/network_state_notifier.cc
+++ b/ash/system/chromeos/network/network_state_notifier.cc
@@ -88,6 +88,13 @@ string16 GetErrorString(const NetworkState* network_state) {
     return l10n_util::GetStringUTF16(
         IDS_CHROMEOS_NETWORK_ERROR_PPP_AUTH_FAILED);
   }
+  if (error == shill::kErrorEapAuthenticationFailed ||
+      error == shill::kErrorEapLocalTlsFailed ||
+      error == shill::kErrorEapRemoteTlsFailed) {
+    return l10n_util::GetStringUTF16(
+        IDS_CHROMEOS_NETWORK_ERROR_IPSEC_CERT_AUTH_FAILED);

[pneubeck (no reviews), 2013/06/06 20:41:20]

These errors are not related to IPsec only.
Currently more the opposite is the case, WiFi with EAP can lead to these errors.

[stevenjb, 2013/06/07 03:44:58]

The message is "Failed to authenticate with provided certificate".
I renamed the ID to IDS_CHROMEOS_NETWORK_ERROR_CERT_AUTH_FAILED and combined the
ifs.
If Local/RemoteTlsFailed should have a different message, let me know what it
should (roughly) say.

[pneubeck (no reviews), 2013/06/07 12:05:47]

Could be put into a follow-up CL:

Looking at the shill code,
EapLocalTlsFailed coulde be "EAP-TLS authentication failed locally." and
EapRemoteTlsFailed coulde be "EAP-TLS authentication failed remotely."

Alternatively, we could fallback to a generic error message like "EAP(-TLS)
authentication failed."

To be completely certain about the errors' meaning, we could contact Paul
Stewart.

+  }
+
   if (StringToLowerASCII(error) ==
       StringToLowerASCII(std::string(flimflam::kUnknownString))) {
     return l10n_util::GetStringUTF16(IDS_CHROMEOS_NETWORK_ERROR_UNKNOWN);