net: make pinning enforcement timeout after ten weeks.

net/url_request/url_request_http_job.cc

Index: net/url_request/url_request_http_job.cc
diff --git a/net/url_request/url_request_http_job.cc b/net/url_request/url_request_http_job.cc
index 889fba86c36e2b6715937de8c5a758218ec8fa30..9bf8e9d4a48eec671e1b0b62c22833f335ff1feb 100644
--- a/net/url_request/url_request_http_job.cc
+++ b/net/url_request/url_request_http_job.cc
@@ -16,6 +16,7 @@
 #include "base/rand_util.h"
 #include "base/string_util.h"
 #include "base/time.h"
+#include "net/base/build_time.h"
 #include "net/base/cert_status_flags.h"
 #include "net/base/cookie_monster.h"
 #include "net/base/filter.h"
@@ -682,7 +683,8 @@ void URLRequestHttpJob::OnStartCompleted(int result) {
     if (context_->transport_security_state()->HasPinsForHost(
             &domain_state, host, sni_available)) {
       if (!domain_state.IsChainOfPublicKeysPermitted(
-              ssl_info.public_key_hashes)) {
+              ssl_info.public_key_hashes) &&
+          GetDaysSinceBuild() < 70 /* 10 weeks */) {
         result = ERR_SSL_PINNED_KEY_NOT_IN_CERT_CHAIN;
         UMA_HISTOGRAM_BOOLEAN("Net.PublicKeyPinSuccess", false);
         TransportSecurityState::ReportUMAOnPinFailure(host);