Reject certificates that are valid for too long.

chrome/browser/ssl/ssl_error_info.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_SSL_SSL_ERROR_INFO_H_
 #define CHROME_BROWSER_SSL_SSL_ERROR_INFO_H_
 
 #include <string>
 #include <vector>
 
@@ skipping 15 matching lines @@
     CERT_DATE_INVALID,
     CERT_AUTHORITY_INVALID,
     CERT_CONTAINS_ERRORS,
     CERT_NO_REVOCATION_MECHANISM,
     CERT_UNABLE_TO_CHECK_REVOCATION,
     CERT_REVOKED,
     CERT_INVALID,
     CERT_WEAK_SIGNATURE_ALGORITHM,
     CERT_WEAK_KEY,
     CERT_NAME_CONSTRAINT_VIOLATION,
+    CERT_VALIDITY_TOO_LONG,
     UNKNOWN,
     CERT_WEAK_KEY_DH,
     CERT_PINNED_KEY_MISSING,
     END_OF_ENUM
   };
 
   virtual ~SSLErrorInfo();
 
   // Converts a network error code to an ErrorType.
   static ErrorType NetErrorToErrorType(int net_error);
@@ skipping 19 matching lines @@
 
  private:
   SSLErrorInfo(const base::string16& details,
                const base::string16& short_description);
 
   base::string16 details_;
   base::string16 short_description_;
 };
 
 #endif  // CHROME_BROWSER_SSL_SSL_ERROR_INFO_H_