Implement x509_util::IsSupportedValidityRange() for Android / openssl.

The previous UNIMPLEMENTED() appears a lot is warnings/errors during
net_unittests otherwise.

BUG=


Review URL: https://chromiumcodereview.appspot.com/11348128

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@169279 0039d316-1c4b-4281-b951-d872f2087c98

1 files changed, 25 insertions, 0 deletions

diff --git a/net/base/x509_util_openssl_unittest.cc b/net/base/x509_util_openssl_unittest.cc
index 2067505..eea3984 100644
--- a/net/base/x509_util_openssl_unittest.cc
+++ b/net/base/x509_util_openssl_unittest.cc
@@ -10,6 +10,31 @@
 
 namespace net {
 
+TEST(X509UtilOpenSSLTest, IsSupportedValidityRange) {
+  base::Time now = base::Time::Now();
+  EXPECT_TRUE(x509_util::IsSupportedValidityRange(now, now));
+  EXPECT_FALSE(x509_util::IsSupportedValidityRange(
+      now, now - base::TimeDelta::FromSeconds(1)));
+
+  // See x509_util_openssl.cc to see how these were computed.
+  const int64 kDaysFromYear0001ToUnixEpoch = 719162;
+  const int64 kDaysFromUnixEpochToYear10000 = 2932896 + 1;
+
+  // When computing too_old / too_late, add one day to account for
+  // possible leap seconds.
+  base::Time too_old = base::Time::UnixEpoch() -
+      base::TimeDelta::FromDays(kDaysFromYear0001ToUnixEpoch + 1);
+
+  base::Time too_late = base::Time::UnixEpoch() +
+      base::TimeDelta::FromDays(kDaysFromUnixEpochToYear10000 + 1);
+
+  EXPECT_FALSE(x509_util::IsSupportedValidityRange(too_old, too_old));
+  EXPECT_FALSE(x509_util::IsSupportedValidityRange(too_old, now));
+
+  EXPECT_FALSE(x509_util::IsSupportedValidityRange(now, too_late));
+  EXPECT_FALSE(x509_util::IsSupportedValidityRange(too_late, too_late));
+}
+
 // For OpenSSL, x509_util::CreateDomainBoundCertEC() is not yet implemented
 // and should return false.  This unit test ensures that a stub implementation
 // is present.