Suggest upgrading to SP3 or later for invalid certificate errors.

chrome/browser/ssl/ssl_blocking_page.h

Index: chrome/browser/ssl/ssl_blocking_page.h
diff --git a/chrome/browser/ssl/ssl_blocking_page.h b/chrome/browser/ssl/ssl_blocking_page.h
index 605115854af52bd05e0c62adbebd1dbd44160c1d..b56d598e3398dd84dc983ea0e21c282bc882dff3 100644
--- a/chrome/browser/ssl/ssl_blocking_page.h
+++ b/chrome/browser/ssl/ssl_blocking_page.h
@@ -14,6 +14,7 @@
 #include "chrome/browser/history/history_service.h"
 #include "content/public/browser/interstitial_page_delegate.h"
 #include "net/ssl/ssl_info.h"
+#include "ssl_error_info.h"

[felt, 2014/06/30 18:36:15]

do you need this in the .h file?

 #include "url/gurl.h"
 
 namespace base {
@@ -64,6 +65,9 @@ class SSLBlockingPage : public content::InterstitialPageDelegate,
   static void SetExtraInfo(base::DictionaryValue* strings,
                            const std::vector<base::string16>& extra_info);
 
+  // Used to find if the version of Windows XP is SP3 or lower.
+  static bool WindowsVersionSP3Lower();

[felt, 2014/06/30 18:16:07]

This only needs to be invoked outside of the class by the unit test, right? It
would be better to make it a private method, and then friend the unit test using
FRIEND_TEST_ALL_PREFIXES.

Here's an example that does this:
https://code.google.com/p/chromium/codesearch#chromium/src/chrome/browser/ext...

+
  protected:
   // InterstitialPageDelegate implementation.
   virtual std::string GetHTMLContents() OVERRIDE;