Add CheckOCSPDateValid() to net/cert/internal

net/cert/internal/parse_ocsp.cc

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <algorithm>
 
 #include "base/sha1.h"
 #include "crypto/sha2.h"
 #include "net/cert/internal/parse_ocsp.h"
+#include "net/der/encode_values.h"
 
 namespace net {
 
 OCSPCertID::OCSPCertID() {}
 OCSPCertID::~OCSPCertID() {}
 
 OCSPSingleResponse::OCSPSingleResponse() {}
 OCSPSingleResponse::~OCSPSingleResponse() {}
 
 OCSPResponseData::OCSPResponseData() {}
@@ skipping 502 matching lines @@
       }
     }
   }
 
   if (!found)
     out->status = OCSPCertStatus::Status::UNKNOWN;
 
   return found;
 }
 
+bool CheckOCSPDateValid(const OCSPSingleResponse& response,
+                        const base::Time& verify_time,
+                        const base::TimeDelta& max_age) {
+  der::GeneralizedTime verify_time_der =
+      der::EncodeTimeAsGeneralizedTime(verify_time);
+
+  if (response.this_update > verify_time_der)
+    return false;  // Response is not yet valid.
+
+  if (response.has_next_update && (response.next_update <= verify_time_der))
+    return false;  // Response is no longer valid.
+
+  der::GeneralizedTime earliest_this_update =
+      der::EncodeTimeAsGeneralizedTime(verify_time - max_age);
+  if (response.this_update < earliest_this_update)
+    return false;  // Response is too old.
+
+  return true;
+}
+
 }  // namespace net