Reject certificates that are valid for too long.

chrome/browser/ssl/ssl_error_info.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_SSL_SSL_ERROR_INFO_H_
 #define CHROME_BROWSER_SSL_SSL_ERROR_INFO_H_
 
 #include <string>
 #include <vector>
 
@@ skipping 15 matching lines @@
     CERT_DATE_INVALID,
     CERT_AUTHORITY_INVALID,
     CERT_CONTAINS_ERRORS,
     CERT_NO_REVOCATION_MECHANISM,
     CERT_UNABLE_TO_CHECK_REVOCATION,
     CERT_REVOKED,
     CERT_INVALID,
     CERT_WEAK_SIGNATURE_ALGORITHM,
     CERT_WEAK_KEY,
     CERT_NAME_CONSTRAINT_VIOLATION,
+    CERT_TOO_LONG_VALIDITY,
     UNKNOWN,
     CERT_WEAK_KEY_DH,
     CERT_PINNED_KEY_MISSING,
     END_OF_ENUM
   };
 
   virtual ~SSLErrorInfo();
 
   // Converts a network error code to an ErrorType.
   static ErrorType NetErrorToErrorType(int net_error);
@@ skipping 34 matching lines @@
 
   base::string16 title_;
   base::string16 details_;
   base::string16 short_description_;
   // Extra-informations contains paragraphs of text explaining in details what
   // the error is and what the risks are.
   std::vector<base::string16> extra_information_;
 };
 
 #endif  // CHROME_BROWSER_SSL_SSL_ERROR_INFO_H_