Remove the check for the obsolete CERT_TRUST_IS_NOT_TIME_NESTED...

net/base/x509_certificate_win.cc

Index: net/base/x509_certificate_win.cc
===================================================================
--- net/base/x509_certificate_win.cc	(revision 69550)
+++ net/base/x509_certificate_win.cc	(working copy)
@@ -93,10 +93,9 @@
 int MapCertChainErrorStatusToCertStatus(DWORD error_status) {
   int cert_status = 0;
 
-  // CERT_TRUST_IS_NOT_TIME_NESTED means a subject certificate's time validity
-  // does not nest correctly within its issuer's time validity.
+  // CERT_TRUST_IS_NOT_TIME_NESTED is obsolete, but we don't consider it an

[agl, 2011/01/21 16:47:47]

This would make me look for it in the code. Maybe

"We don't include CERT_TRUST_IS_NOT_TIME_NESTED because it's obsolete and we
wouldn't consider it an error anyway".

+  // error anyway.
   const DWORD kDateInvalidErrors = CERT_TRUST_IS_NOT_TIME_VALID |
-                                   CERT_TRUST_IS_NOT_TIME_NESTED |
                                    CERT_TRUST_CTL_IS_NOT_TIME_VALID;
   if (error_status & kDateInvalidErrors)
     cert_status |= CERT_STATUS_DATE_INVALID;