Suggest upgrading to SP3 or later for invalid certificate errors.

chrome/browser/ssl/ssl_error_classification.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ssl/ssl_error_classification.h"
 
 #include "base/build_time.h"
 #include "base/metrics/field_trial.h"
 #include "base/metrics/histogram.h"
 #include "base/time/time.h"
 #include "chrome/browser/browser_process.h"
 #include "components/network_time/network_time_tracker.h"
 #include "net/cert/x509_certificate.h"
 
 using base::Time;
 using base::TimeTicks;
 using base::TimeDelta;
 
+#if defined(OS_WIN)
+#include "base/win/windows_version.h"
+#endif
+
 namespace {
 
 // Events for UMA. Do not reorder or change!
 enum SSLInterstitialCause {
   CLOCK_PAST,
   CLOCK_FUTURE,
   UNUSED_INTERSTITIAL_CAUSE_ENTRY,
 };
 
 void RecordSSLInterstitialCause(bool overridable, SSLInterstitialCause event) {
@@ skipping 80 matching lines @@
   return false;
 }
 
 bool SSLErrorClassification::IsUserClockInTheFuture(base::Time time_now) {
   base::Time build_time = base::GetBuildTime();
   if (time_now > build_time + base::TimeDelta::FromDays(365))
     return true;
   return false;
 }
 
+bool SSLErrorClassification::IsWindowsVersionSP3OrLower() {
+#if defined(OS_WIN)
+  const base::win::OSInfo* os_info = base::win::OSInfo::GetInstance();
+  base::win::OSInfo::ServicePack service_pack = os_info->service_pack();
+  if (os_info->version() < base::win::VERSION_VISTA && service_pack.major < 3)
+    return true;
+#endif
+  return false;
+}
+
 void SSLErrorClassification::RecordUMAStatistics(bool overridable) {
   if (IsUserClockInThePast(base::Time::NowFromSystemTime()))
     RecordSSLInterstitialCause(overridable, CLOCK_PAST);
   if (IsUserClockInTheFuture(base::Time::NowFromSystemTime()))
     RecordSSLInterstitialCause(overridable, CLOCK_FUTURE);
 }