commit fb6f866450dcb4623c08ca3bdf7ab08e4e992f57
author Ryan Sleevi <rsleevi@chromium.org> Sat Apr 07 03:55:38 2018
committer Commit Bot <commit-bot@chromium.org> Sat Apr 07 03:55:38 2018
tree 520b3bc69fba4b3ee512c85b5c99044511aa4c9d
parent 7e81a51a43e40fc00987e6494f3487ce361f404e

Simplify the certificate validity month calculations

Previously, the date calculation for determining if a certificate
had a too long validity was based on calculating a rounded difference
on the day portion of the date and the difference in months. This would
result in "rounding up" when calculating how many months were between
two dates.

With this change, the determination for whether a certificate has a
validity greater than the maximum permitted is based on the difference
in the number of days (accounting for leap years). Strictly speaking,
this loosens the strictness of enforcement, which means that additional
certificates may now be accepted that might otherwise not, but it
simplifies the computations and makes it less likely that an otherwise
valid certificate would be rejected due to rounding.

BUG=713362

Change-Id: I9577169588f285bd9e2afeee882838de404b1a56
Reviewed-on: https://chromium-review.googlesource.com/1000353
Commit-Queue: Ryan Sleevi <rsleevi@chromium.org>
Reviewed-by: Eric Roman <eroman@chromium.org>
Cr-Commit-Position: refs/heads/master@{#549031}