tree a13415c9c1adb3b962f7a652585d5cdfeed48553
parent 92e332501a71bf40129f1866bcb06ee3ed30d180
author Matthew Braithwaite <mab@google.com> 1515171933 -0800
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1515195640 +0000

Map NOT_YET_VALID errors to |certificate_expired|.

The language of RFC 5246 is "A certificate has expired or is not
currently valid", which sounds to me like |certificate_expired| should
pertain to any case where the current time is outside the
certificate's validity period.

Along the way, group the |unknown_ca| errors together.

Change-Id: I92c1fe3fc898283d0c7207625de36662cd0f784e
Reviewed-on: https://boringssl-review.googlesource.com/24624
Reviewed-by: Adam Langley <agl@google.com>
Commit-Queue: Adam Langley <agl@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>