Whitelist CNNIC certs

Whitelist CNNIC certs

BUG=473408
TBR=davidben

Committed: https://crrev.com/ad0863803901e6c477f976de0e6218b154fee6d5
Cr-Commit-Position: refs/heads/master@{#324119}

[Ryan Sleevi, 2015-04-06 23:22:46]

rsleevi@chromium.org changed reviewers:
+ davidben@chromium.org

[Ryan Sleevi, 2015-04-06 23:22:46]

David: This is based on the CNNIC whitelist. I'm now cross-referencing with the
CT databases to see if I missed anything

[davidben, 2015-04-07 00:06:55]

https://codereview.chromium.org/1067723002/diff/20001/net/cert/cert_verify_pr...
File net/cert/cert_verify_proc_whitelist.cc (right):

https://codereview.chromium.org/1067723002/diff/20001/net/cert/cert_verify_pr...
net/cert/cert_verify_proc_whitelist.cc:1461: { 0x44, 0xe5, 0x20, 0x99, 0x22,
0x26, 0x8a, 0x4b,
This one (44e5) is the expired one.

[Ryan Sleevi, 2015-04-07 19:33:25]

Landing TBR; leaving the expired one in because it's close enough to the date
window that users with clock fudge can get by.

[Ryan Sleevi, 2015-04-07 19:33:28]

The CQ bit was checked by rsleevi@chromium.org

[commit-bot: I haz the power, 2015-04-07 19:33:39]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/1067723002/20001

[davidben, 2015-04-07 19:52:09]

lgtm. Verified that my tool independently gives the same results for both leafs
and roots (apart from the one that's just barely expired).

[commit-bot: I haz the power, 2015-04-07 21:09:29]

Committed patchset #2 (id:20001)

[commit-bot: I haz the power, 2015-04-07 21:10:15]

Patchset 2 (id:??) landed as
https://crrev.com/ad0863803901e6c477f976de0e6218b154fee6d5
Cr-Commit-Position: refs/heads/master@{#324119}