Based on the provided code snippet and context, it appears that Google Chrome enforces strict validity periods for SSL/TLS certificates as part of its certificate verification process. The function HasTooLongValidity checks if a given certificate's validity period exceeds allowed limits according to different time frames defined by the Certificate Authority/Browser (CA/B) Forum Baseline Requirements and Chrome-specific policies.
Here are key points from the code:
- Certificate Validity Periods:
- Certificates issued before July 1, 2012: Maximum of ten years validity.
- Certificates issued on or after July 1, 2012: Initial limit was 60 months (5 years).
- Updated limits for certificates issued later:
- March 15, 2018 and onwards: 825 days (approximately 2.3 years).
- September 1, 2020 and onwards: 398 days.
- March 15, 2026 and onwards: 200 days.
- March 15, 2027 and onwards: 100 days.
- March 15
Read the full article at NVISO Labs
Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.
2
Ali NematiWritten by Ali
