Add enterprise policy to allow locally issued SHA-1 certificates.

net/cert/cert_verifier.h

Index: net/cert/cert_verifier.h
diff --git a/net/cert/cert_verifier.h b/net/cert/cert_verifier.h
index 2b5ef1f70bdd23f09eb23b278550dc34e9e05cdf..f60efddc6b7bced159042751c9388c7d280583f4 100644
--- a/net/cert/cert_verifier.h
+++ b/net/cert/cert_verifier.h
@@ -75,6 +75,10 @@ class NET_EXPORT CertVerifier {
     // can only provide information for the leaf, and not for any
     // intermediates.
     VERIFY_REV_CHECKING_REQUIRED_LOCAL_ANCHORS = 1 << 4,
+
+    // If set, certificates with SHA-1 signatures will be allowed, but only if
+    // they are issued by non-public trust anchors.
+    VERIFY_ENABLE_SHA1_LOCAL_ANCHORS = 1 << 5,
   };
 
   // Parameters to verify |certificate| against the supplied