Increase tolerance for receiver's certificate expiry

Increase tolerance for receiver's certificate expiry

Increase the maximum allowed remaining lifetime for the
receiver's self-signed cert to 4 days.

This is being increased from 2 days because errors are
being seen in the field because of sender clocks being off.

In the future, we might find a way to warn the user that
their clock might be off, but for now just changing the
tolerance seems the right approach.

BUG=467736
R=mfoltz@chromium.org

Committed: https://crrev.com/7018ce63853e5e7464e6604015a76fe82886133e
Cr-Commit-Position: refs/heads/master@{#322497}

[mark a. foltz, 2015-03-26 20:58:00]

lgtm

Please add a unit test for cert lifetime checking at some point.  Not sure how
that got missed in the initial patch.

[dougsteed, 2015-03-26 22:24:30]

The CQ bit was checked by dougsteed@chromium.org

[commit-bot: I haz the power, 2015-03-26 22:25:04]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/1011133005/1

[dougsteed, 2015-03-26 22:31:13]

On 2015/03/26 20:58:00, mark a. foltz wrote:
> lgtm
> 
> Please add a unit test for cert lifetime checking at some point.  Not sure how
> that got missed in the initial patch.

Thanks.
Regarding unit test question, see discussion in
https://codereview.chromium.org/694123002 (especially my comments in #6, #11).
Happy to pick this up again if you still don't buy my argument !

[commit-bot: I haz the power, 2015-03-26 23:32:47]

Committed patchset #1 (id:1)

[commit-bot: I haz the power, 2015-03-26 23:34:05]

Patchset 1 (id:??) landed as
https://crrev.com/7018ce63853e5e7464e6604015a76fe82886133e
Cr-Commit-Position: refs/heads/master@{#322497}