Suggest upgrading to SP3 or later for invalid certificate errors.

chrome/browser/ssl/ssl_blocking_page.h

Index: chrome/browser/ssl/ssl_blocking_page.h
diff --git a/chrome/browser/ssl/ssl_blocking_page.h b/chrome/browser/ssl/ssl_blocking_page.h
index 605115854af52bd05e0c62adbebd1dbd44160c1d..4f42e2387318ae371ed7e02393ecf07c5b17105c 100644
--- a/chrome/browser/ssl/ssl_blocking_page.h
+++ b/chrome/browser/ssl/ssl_blocking_page.h
@@ -14,6 +14,7 @@
 #include "chrome/browser/history/history_service.h"
 #include "content/public/browser/interstitial_page_delegate.h"
 #include "net/ssl/ssl_info.h"
+#include "ssl_error_info.h"
 #include "url/gurl.h"
 
 namespace base {
@@ -120,12 +121,17 @@ class SSLBlockingPage : public content::InterstitialPageDelegate,
   bool captive_portal_no_response_;
   // Was a captive portal detected?
   bool captive_portal_detected_;
+  // Used to find if the version of Windows XP is SP3 or lower.
+  static bool WindowsVersionSP3Lower();

[palmer, 2014/07/07 18:10:03]

I wonder if this function should go elsewhere, like somewhere in chrome/common,
and then we could also use it on application launch, and use an infobar (or
other) to warn users that they are using a prehistoric platform. But, that would
be a separate bug to be fixed in a later CL. Just an idea; maybe not a good one.
For now this is fine.

 
   // For the FieldTrial: this contains the name of the condition.
   std::string trial_condition_;
 
   content::NotificationRegistrar registrar_;
 
+  FRIEND_TEST_ALL_PREFIXES(SSLBlockingPageTest,
+                           SSLBlockingPageWindowsVersionTest);
+
   DISALLOW_COPY_AND_ASSIGN(SSLBlockingPage);
 };