Add CheckOCSPDateValid() to net/cert/internal

net/cert/internal/parse_ocsp.h

Index: net/cert/internal/parse_ocsp.h
diff --git a/net/cert/internal/parse_ocsp.h b/net/cert/internal/parse_ocsp.h
index b9052aee9f6df9c4e4797a928b5c7024a917ba4e..d157c5458bc6b25c5c114a480fafd68442cfce88 100644
--- a/net/cert/internal/parse_ocsp.h
+++ b/net/cert/internal/parse_ocsp.h
@@ -9,6 +9,7 @@
 #include <string>
 #include <vector>
 
+#include "base/time/time.h"

[estark, 2016/06/24 00:27:35]

should be able to forward-declare this

[dadrian, 2016/06/24 01:41:51]

Done.

 #include "net/base/hash_value.h"
 #include "net/cert/internal/parse_certificate.h"
 #include "net/cert/internal/signature_algorithm.h"
@@ -278,6 +279,12 @@ NET_EXPORT_PRIVATE bool GetOCSPCertStatus(
     const der::Input& cert_tbs_certificate_tlv,
     OCSPCertStatus* out);
 
+// Checks that thisUpdate <= verify_time < nextUpdate, and that verify_time <=
+// thisUpdate + max_age.

[estark, 2016/06/24 00:27:35]

Maybe also document what happens if there is no |nextUpdate|.

[dadrian, 2016/06/24 01:41:51]

Done.

+NET_EXPORT_PRIVATE bool CheckOCSPDateValid(const OCSPSingleResponse& response,
+                                           const base::Time& verify_time,
+                                           const base::TimeDelta& max_age);
+
 }  // namespace net
 
 #endif  // NET_CERT_INTERNAL_PARSE_OCSP_H_