Reject certificates that are valid for too long.

net/data/ssl/certificates/pre_br_validity_ok.pem

Index: net/data/ssl/certificates/pre_br_validity_ok.pem
diff --git a/net/data/ssl/certificates/pre_br_validity_ok.pem b/net/data/ssl/certificates/pre_br_validity_ok.pem
new file mode 100644
index 0000000000000000000000000000000000000000..5d082ee3c6b4334d006f27fd2bfdbb16f7677f88
--- /dev/null
+++ b/net/data/ssl/certificates/pre_br_validity_ok.pem
@@ -0,0 +1,82 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 9 (0x9)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Test Root CA
+        Validity
+            Not Before: Jan  1 00:00:00 2008 GMT
+            Not After : Jan  1 00:00:00 2015 GMT
+        Subject: C=US, ST=California, L=Mountain View, O=Test CA, CN=127.0.0.1
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:bc:a2:44:c7:c5:c4:bb:e2:fd:d2:1f:17:f4:3d:
+                    87:62:65:37:f8:87:78:97:75:04:b3:28:ca:1c:03:
+                    f8:76:9c:07:36:0c:67:35:fa:90:cc:31:73:d3:ec:
+                    b6:d9:a2:38:7b:94:00:59:23:2e:c4:f7:fd:ea:6d:
+                    67:ce:fe:7b:87:40:d3:14:74:71:3e:94:50:0e:3f:
+                    24:e5:83:fc:6a:c4:35:56:b9:a4:22:f0:84:6d:c7:
+                    ce:f1:19:ad:89:51:c7:c8:d4:c0:97:1b:86:64:d2:
+                    c7:04:cf:a3:9e:5d:6f:ed:ea:2e:08:ad:26:39:c7:
+                    1d:bb:29:4a:c0:4e:50:e7:8f:25:65:e2:fb:fe:4f:
+                    ea:62:3f:b4:70:91:1b:f3:cc:24:83:12:c2:38:5b:
+                    5e:ef:bc:c4:23:b8:d5:35:14:63:5f:b3:c1:f1:ad:
+                    35:ea:4d:0f:14:b8:a4:b1:19:c1:31:81:b0:8f:4a:
+                    b3:a9:60:c1:2b:f1:2c:0c:d6:a0:52:d9:e8:a5:78:
+                    d3:0b:b2:6e:88:bb:8d:36:07:2f:2d:d3:71:9d:87:
+                    ca:58:41:18:e9:06:17:ee:a5:bf:35:31:81:b2:2b:
+                    ee:af:92:10:64:22:88:38:3d:1b:08:80:59:ce:97:
+                    62:5e:cb:d1:fa:59:d7:b9:fd:40:42:41:b1:14:47:
+                    c4:0b
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                E4:F4:EF:17:AA:96:3F:12:62:E0:E2:FA:98:88:AF:B4:E5:74:4E:4C
+            X509v3 Authority Key Identifier: 
+                keyid:EE:54:52:3A:28:73:20:9D:56:2D:2A:98:F4:9C:B1:7D:FB:C5:22:47
+
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+            X509v3 Subject Alternative Name: 
+                IP Address:127.0.0.1
+    Signature Algorithm: sha256WithRSAEncryption
+         79:7d:93:8b:4b:3f:7f:02:9b:5c:c2:6e:a6:0c:2a:16:75:79:
+         ee:a6:15:e4:54:e0:3a:20:b7:62:52:1c:85:ae:03:5a:bb:9a:
+         3d:1f:f4:19:af:79:92:c2:e0:78:38:6d:42:39:75:07:ba:07:
+         6f:7c:5a:50:32:10:3b:68:f9:da:c4:a8:07:56:3f:71:ec:6e:
+         65:dc:20:0f:ab:c3:0b:4f:55:15:9e:94:4e:98:c9:f9:d7:6a:
+         f5:e4:49:5d:1d:ba:1f:b9:16:26:b5:6f:2b:e7:52:39:b9:aa:
+         60:58:c3:b9:eb:c5:20:92:a1:cb:a7:06:8f:1f:41:35:b6:c9:
+         a5:7e:9c:ba:77:f6:b3:92:47:ba:57:e2:b3:e5:02:6a:d1:e3:
+         52:d6:35:8b:8c:47:d0:f9:2e:ad:9b:14:43:11:81:f1:c7:38:
+         b0:3e:cc:3b:ca:39:e8:83:01:e4:fb:c9:ff:bb:6b:96:3a:22:
+         e0:4d:d8:06:b8:56:8a:b5:f8:84:12:68:ae:c7:05:00:d3:d7:
+         1f:3d:89:f4:c9:27:68:be:d0:07:cc:c7:d3:eb:d5:60:e3:c2:
+         2a:85:4b:cb:53:5c:d2:92:f6:ef:63:34:f0:a0:1e:40:9b:78:
+         0d:2a:2c:df:36:9c:26:3a:16:82:39:36:5f:d3:5b:ba:24:8c:
+         b0:18:a7:d1
+-----BEGIN CERTIFICATE-----
+MIIDczCCAlugAwIBAgIBCTANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxUZXN0
+IFJvb3QgQ0EwHhcNMDgwMTAxMDAwMDAwWhcNMTUwMTAxMDAwMDAwWjBgMQswCQYD
+VQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNTW91bnRhaW4g
+VmlldzEQMA4GA1UECgwHVGVzdCBDQTESMBAGA1UEAwwJMTI3LjAuMC4xMIIBIjAN
+BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKJEx8XEu+L90h8X9D2HYmU3+Id4
+l3UEsyjKHAP4dpwHNgxnNfqQzDFz0+y22aI4e5QAWSMuxPf96m1nzv57h0DTFHRx
+PpRQDj8k5YP8asQ1VrmkIvCEbcfO8RmtiVHHyNTAlxuGZNLHBM+jnl1v7eouCK0m
+OccduylKwE5Q548lZeL7/k/qYj+0cJEb88wkgxLCOFte77zEI7jVNRRjX7PB8a01
+6k0PFLiksRnBMYGwj0qzqWDBK/EsDNagUtnopXjTC7JuiLuNNgcvLdNxnYfKWEEY
+6QYX7qW/NTGBsivur5IQZCKIOD0bCIBZzpdiXsvR+lnXuf1AQkGxFEfECwIDAQAB
+o4GAMH4wDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU5PTvF6qWPxJi4OL6mIivtOV0
+TkwwHwYDVR0jBBgwFoAU7lRSOihzIJ1WLSqY9JyxffvFIkcwHQYDVR0lBBYwFAYI
+KwYBBQUHAwEGCCsGAQUFBwMCMA8GA1UdEQQIMAaHBH8AAAEwDQYJKoZIhvcNAQEL
+BQADggEBAHl9k4tLP38Cm1zCbqYMKhZ1ee6mFeRU4Dogt2JSHIWuA1q7mj0f9Bmv
+eZLC4Hg4bUI5dQe6B298WlAyEDto+drEqAdWP3HsbmXcIA+rwwtPVRWelE6YyfnX
+avXkSV0duh+5Fia1byvnUjm5qmBYw7nrxSCSocunBo8fQTW2yaV+nLp39rOSR7pX
+4rPlAmrR41LWNYuMR9D5Lq2bFEMRgfHHOLA+zDvKOeiDAeT7yf+7a5Y6IuBN2Aa4
+Voq1+IQSaK7HBQDT1x89ifTJJ2i+0AfMx9Pr1WDjwiqFS8tTXNKS9u9jNPCgHkCb
+eA0qLN82nCY6FoI5Nl/TW7okjLAYp9E=
+-----END CERTIFICATE-----