Add migration from CaCert NSS nicknames to PEM.

chromeos/network/network_state.h

Index: chromeos/network/network_state.h
diff --git a/chromeos/network/network_state.h b/chromeos/network/network_state.h
index fa011c9a3ad52aeddf8ba92c8e37981c07196439..7960ba9d741422cea2e96c2d7d1bc91f3e750de7 100644
--- a/chromeos/network/network_state.h
+++ b/chromeos/network/network_state.h
@@ -78,6 +78,11 @@ class CHROMEOS_EXPORT NetworkState : public ManagedState {
   const std::string& post_method() const { return post_method_; }
   const std::string& post_data() const { return post_data_; }
 
+  bool HasCACertNSS() const {
+    return has_eap_ca_cert_nss_ || has_openvpn_ca_cert_nss_ ||
+           has_ipsec_ca_cert_nss_;
+  }
+
   bool IsConnectedState() const;
   bool IsConnectingState() const;
 
@@ -156,6 +161,12 @@ class CHROMEOS_EXPORT NetworkState : public ManagedState {
   std::string post_method_;
   std::string post_data_;
 
+  // Whether a deprecated CaCertNSS property of this network is set. Required
+  // for migration to PEM.
+  bool has_eap_ca_cert_nss_;
+  bool has_ipsec_ca_cert_nss_;
+  bool has_openvpn_ca_cert_nss_;
+
   DISALLOW_COPY_AND_ASSIGN(NetworkState);
 };