Increase tolerance for receiver's certificate expiry

extensions/browser/api/cast_channel/cast_socket.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "extensions/browser/api/cast_channel/cast_socket.h"
 
 #include <stdlib.h>
 #include <string.h>
 
 #include "base/bind.h"
@@ skipping 27 matching lines @@
 #include "net/ssl/ssl_config_service.h"
 #include "net/ssl/ssl_info.h"
 
 // Assumes |ip_endpoint_| of type net::IPEndPoint and |channel_auth_| of enum
 // type ChannelAuthType are available in the current scope.
 #define VLOG_WITH_CONNECTION(level) VLOG(level) << "[" << \
     ip_endpoint_.ToString() << ", auth=" << channel_auth_ << "] "
 
 namespace {
 
-const int kMaxSelfSignedCertLifetimeInDays = 2;
+const int kMaxSelfSignedCertLifetimeInDays = 4;
 
 std::string FormatTimeForLogging(base::Time time) {
   base::Time::Exploded exploded_time;
   time.UTCExplode(&exploded_time);
   return base::StringPrintf(
       "%04d-%02d-%02d %02d:%02d:%02d.%03d UTC", exploded_time.year,
       exploded_time.month, exploded_time.day_of_month, exploded_time.hour,
       exploded_time.minute, exploded_time.second, exploded_time.millisecond);
 }
 
@@ skipping 131 matching lines @@
   DCHECK(cert);
   DCHECK(peer_cert_.empty());
   net::SSLInfo ssl_info;
   if (!socket_->GetSSLInfo(&ssl_info) || !ssl_info.cert.get()) {
     return false;
   }
 
   logger_->LogSocketEvent(channel_id_, proto::SSL_INFO_OBTAINED);
 
   // Ensure that the peer cert (which is self-signed) doesn't have an excessive
-  // life-time (i.e. no more than 2 days).
+  // remaining life-time.
   base::Time expiry = ssl_info.cert->valid_expiry();
   base::Time lifetimeLimit =
       base::Time::Now() +
       base::TimeDelta::FromDays(kMaxSelfSignedCertLifetimeInDays);
   if (expiry.is_null() || expiry > lifetimeLimit) {
     std::string details = FormatTimeForLogging(expiry);
     details += " " + ip_endpoint().ToString();
     LOG(ERROR) << "Peer cert has excessive lifetime. details=" << details;
     logger_->LogSocketEventWithDetails(
         channel_id_, proto::SSL_CERT_EXCESSIVE_LIFETIME, details);
@@ skipping 371 matching lines @@
 void CastSocketImpl::SetErrorState(ChannelError error_state) {
   VLOG_WITH_CONNECTION(1) << "SetErrorState " << error_state;
   DCHECK_EQ(CHANNEL_ERROR_NONE, error_state_);
   error_state_ = error_state;
   logger_->LogSocketErrorState(channel_id_, ErrorStateToProto(error_state_));
 }
 }  // namespace cast_channel
 }  // namespace core_api
 }  // namespace extensions
 #undef VLOG_WITH_CONNECTION