Enable device-wide EAP-TLS networks

chrome/browser/browser_process_platform_part_chromeos.h

Index: chrome/browser/browser_process_platform_part_chromeos.h
diff --git a/chrome/browser/browser_process_platform_part_chromeos.h b/chrome/browser/browser_process_platform_part_chromeos.h
index 675e57c95c91677755acb36c1c5612fd9efd2f63..0d949e160e10c4417f6fa6220989eb83c1e058cc 100644
--- a/chrome/browser/browser_process_platform_part_chromeos.h
+++ b/chrome/browser/browser_process_platform_part_chromeos.h
@@ -6,11 +6,13 @@
 #define CHROME_BROWSER_BROWSER_PROCESS_PLATFORM_PART_CHROMEOS_H_
 
 #include <memory>
+#include <vector>
 
 #include "base/compiler_specific.h"
 #include "base/macros.h"
 #include "base/threading/non_thread_safe.h"
 #include "chrome/browser/browser_process_platform_part_base.h"
+#include "crypto/scoped_nss_types.h"
 
 namespace chromeos {
 class ChromeSessionManager;
@@ -29,6 +31,10 @@ class TimeZoneResolverManager;
 }
 }
 
+namespace net {
+class NSSCertDatabase;
+}
+
 namespace policy {
 class BrowserPolicyConnector;
 class BrowserPolicyConnectorChromeOS;
@@ -54,6 +60,16 @@ class BrowserProcessPlatformPart : public BrowserProcessPlatformPartBase,
   void InitializeSessionManager();
   void ShutdownSessionManager();
 
+  // Initializes the system slot backed NSS certificate database using
+  // |system_slot|.
+  void InitializeSystemSlotCertDatabase(crypto::ScopedPK11Slot system_slot);
+  void ShutdownSystemSlotCertDatabase();
+
+  // Retrieves the system slot backed certificate database. |callback| can be
+  // called synchronously or asynchronously.
+  void GetSystemSlotCertDatabase(
+      base::Callback<void(net::NSSCertDatabase*)> callback);
+
   // Disable the offline interstitial easter egg if the device is enterprise
   // enrolled.
   void DisableDinoEasterEggIfEnrolled();
@@ -124,6 +140,11 @@ class BrowserProcessPlatformPart : public BrowserProcessPlatformPartBase,
 
   std::unique_ptr<ScopedKeepAlive> keep_alive_;
 
+  // Global NSSCertDatabase which sees the system token.
+  std::unique_ptr<net::NSSCertDatabase> system_token_cert_database_;
+  std::vector<base::Callback<void(net::NSSCertDatabase*)>>
+      system_token_ready_callbacks_;
+
   DISALLOW_COPY_AND_ASSIGN(BrowserProcessPlatformPart);
 };