Enable client certificate patterns in device ONC policy

chromeos/network/client_cert_util.h

Index: chromeos/network/client_cert_util.h
diff --git a/chromeos/network/client_cert_util.h b/chromeos/network/client_cert_util.h
index e687e060a1c6b0bc496f20e65eafb94a5c335504..baef5a09c4f81e89b03d5b740a02a66ee443c199 100644
--- a/chromeos/network/client_cert_util.h
+++ b/chromeos/network/client_cert_util.h
@@ -11,6 +11,7 @@
 #include "base/memory/ref_counted.h"
 #include "chromeos/chromeos_export.h"
 #include "chromeos/network/certificate_pattern.h"
+#include "components/onc/onc_constants.h"
 
 namespace base {
 class DictionaryValue;
@@ -50,6 +51,9 @@ struct CHROMEOS_EXPORT ClientCertConfig {
 
   // The value of kIdentity, to enable substitutions.
   std::string policy_identity;
+
+  // source of this ClientCertConfig.
+  ::onc::ONCSource onc_source;
 };
 
 // Returns true only if any fields set in this pattern match exactly with
@@ -99,6 +103,7 @@ bool IsCertificateConfigured(const client_cert::ConfigType cert_config_type,
 // Determines the type of the CertificatePattern configuration, i.e. is it a
 // pattern within an EAP, IPsec or OpenVPN configuration.
 CHROMEOS_EXPORT void OncToClientCertConfig(
+    ::onc::ONCSource onc_source,
     const base::DictionaryValue& network_config,
     ClientCertConfig* cert_config);