Handle Origin Bound Certificate expiration.

net/base/x509_util_nss_unittest.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/x509_util.h"
 #include "net/base/x509_util_nss.h"
 
 #include <cert.h>
 #include <secoid.h>
 
@@ skipping 127 matching lines @@
   PORT_FreeArena(arena, PR_FALSE);
 }
 
 }  // namespace
 
 // This test creates an origin-bound cert from a RSA private key and
 // then verifies the content of the certificate.
 TEST(X509UtilNSSTest, CreateOriginBoundCertRSA) {
   // Create a sample ASCII weborigin.
   std::string origin = "http://weborigin.com:443";
+  base::Time now = base::Time::Now();
 
   scoped_ptr<crypto::RSAPrivateKey> private_key(
       crypto::RSAPrivateKey::Create(1024));
   std::string der_cert;
-  ASSERT_TRUE(x509_util::CreateOriginBoundCertRSA(private_key.get(),
-                                                  origin, 1,
-                                                  base::TimeDelta::FromDays(1),
-                                                  &der_cert));
+  ASSERT_TRUE(x509_util::CreateOriginBoundCertRSA(
+      private_key.get(),
+      origin, 1,
+      now,
+      now + base::TimeDelta::FromDays(1),
+      &der_cert));
 
   VerifyOriginBoundCert(origin, der_cert);
 
   std::vector<uint8> spki;
   ASSERT_TRUE(private_key->ExportPublicKey(&spki));
   VerifyCertificateSignature(der_cert, spki);
 }
 
 // This test creates an origin-bound cert from an EC private key and
 // then verifies the content of the certificate.
 TEST(X509UtilNSSTest, CreateOriginBoundCertEC) {
   // Create a sample ASCII weborigin.
   std::string origin = "http://weborigin.com:443";
+  base::Time now = base::Time::Now();
 
   scoped_ptr<crypto::ECPrivateKey> private_key(
       crypto::ECPrivateKey::Create());
   std::string der_cert;
-  ASSERT_TRUE(x509_util::CreateOriginBoundCertEC(private_key.get(),
-                                                 origin, 1,
-                                                 base::TimeDelta::FromDays(1),
-                                                 &der_cert));
+  ASSERT_TRUE(x509_util::CreateOriginBoundCertEC(
+      private_key.get(),
+      origin, 1,
+      now,
+      now + base::TimeDelta::FromDays(1),
+      &der_cert));
 
   VerifyOriginBoundCert(origin, der_cert);
 
 #if !defined(OS_WIN) && !defined(OS_MACOSX)
   // signature_verifier_win and signature_verifier_mac can't handle EC certs.
   std::vector<uint8> spki;
   ASSERT_TRUE(private_key->ExportPublicKey(&spki));
   VerifyCertificateSignature(der_cert, spki);
 #endif
 }
 
 }  // namespace net