Fix the "certificate is not yet valid" error for server certificates

net/base/x509_certificate_win.cc

Index: net/base/x509_certificate_win.cc
===================================================================
--- net/base/x509_certificate_win.cc	(revision 107789)
+++ net/base/x509_certificate_win.cc	(working copy)
@@ -541,6 +541,7 @@
   valid_expiry_ = Time::FromFileTime(cert_handle_->pCertInfo->NotAfter);
 
   fingerprint_ = CalculateFingerprint(cert_handle_);
+  chain_fingerprint_ = CalculateChainFingerprint();
 
   const CRYPT_INTEGER_BLOB* serial = &cert_handle_->pCertInfo->SerialNumber;
   scoped_array<uint8> serial_bytes(new uint8[serial->cbData]);
@@ -1018,6 +1019,11 @@
   return sha1;
 }
 
+SHA1Fingerprint X509Certificate::CalculateChainFingerprint() const {
+  // TODO(wtc): implement this.

[agl, 2011/10/28 23:45:47]

It's not clear how this can be a TODO if the change is to fix the bug. Will this
not result in the current behaviour? Are you assuming that it's not urgent to
fix on Windows because we don't have any reports of problems on Windows? Ok if
so.

[Ryan Sleevi, 2011/10/28 23:55:03]

I fear once http://codereview.chromium.org/7324039/ lands that this will become
an issue, which is why I'm holding on to it for now.

It would be good if you could implement it here on Windows, as I think it is
potentially a concern there as well. Two reasons why I think it's possible on
Windows:
1) The cert may not have AIA info, preventing CryptoAPI from network fetching
2) Because of the thread-safety concerns with cert_store(), the newly added
(from the network) cert may be skipped when the CryptoAPI verification routines
are enumerating the PCCERT_CONTEXT->hCertStore, thus not picking them up and
using them.

[wtc, 2011/10/29 01:32:03]

Sorry about the confusion.  I have implemented this function
now.

I didn't use CryptoAPI because it was considered too slow
before.  I use NSS to implement this function.

+  return CalculateFingerprint(cert_handle_);
+}
+
 // static
 X509Certificate::OSCertHandle
 X509Certificate::ReadOSCertHandleFromPickle(const Pickle& pickle,