Turn off future-timestamp cloud policy checks on desktop

chrome/browser/policy/cloud/cloud_policy_validator.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/policy/cloud/cloud_policy_validator.h"
 
 #include "base/bind_helpers.h"
 #include "base/message_loop/message_loop.h"
 #include "base/stl_util.h"
 #include "chrome/browser/policy/cloud/cloud_policy_constants.h"
@@ skipping 260 matching lines @@
     } else {
       LOG(ERROR) << "Policy timestamp missing";
       return VALIDATION_BAD_TIMESTAMP;
     }
   }
 
   if (policy_data_->timestamp() < timestamp_not_before_) {
     LOG(ERROR) << "Policy too old: " << policy_data_->timestamp();
     return VALIDATION_BAD_TIMESTAMP;
   }
-  if (policy_data_->timestamp() > timestamp_not_after_) {
+  if (timestamp_option_ != TIMESTAMP_REQUIRED_BUT_SYSTEM_TIME_UNRELIABLE &&
+      policy_data_->timestamp() > timestamp_not_after_) {
     LOG(ERROR) << "Policy from the future: " << policy_data_->timestamp();
     return VALIDATION_BAD_TIMESTAMP;
   }
 
   return VALIDATION_OK;
 }
 
 CloudPolicyValidatorBase::Status CloudPolicyValidatorBase::CheckToken() {
   // Make sure the token matches the expected token (if any) and also
   // make sure the token itself is valid (non-empty if DM_TOKEN_REQUIRED).
@@ skipping 75 matching lines @@
   }
   verifier.VerifyUpdate(reinterpret_cast<const uint8*>(data.c_str()),
                         data.size());
   return verifier.VerifyFinal();
 }
 
 template class CloudPolicyValidator<em::CloudPolicySettings>;
 template class CloudPolicyValidator<em::ExternalPolicyData>;
 
 }  // namespace policy