Make it a fatal SSL error when encountering certs signed with md[2,4], and interstitial md5

net/base/cert_status_flags.cc

Index: net/base/cert_status_flags.cc
diff --git a/net/base/cert_status_flags.cc b/net/base/cert_status_flags.cc
index d897df52653505160c48d191160d2059a6cc19ca..9b6ed6ef6343049cef13154b1db1be0fec8dfc7b 100644
--- a/net/base/cert_status_flags.cc
+++ b/net/base/cert_status_flags.cc
@@ -57,14 +57,14 @@ int MapCertStatusToNetError(CertStatus cert_status) {
     return ERR_CERT_REVOKED;
   if (cert_status & CERT_STATUS_INVALID)
     return ERR_CERT_INVALID;
+  if (cert_status & CERT_STATUS_WEAK_SIGNATURE_ALGORITHM)
+    return ERR_CERT_WEAK_SIGNATURE_ALGORITHM;
 
   // Recoverable errors
   if (cert_status & CERT_STATUS_AUTHORITY_INVALID)
     return ERR_CERT_AUTHORITY_INVALID;
   if (cert_status & CERT_STATUS_COMMON_NAME_INVALID)
     return ERR_CERT_COMMON_NAME_INVALID;
-  if (cert_status & CERT_STATUS_WEAK_SIGNATURE_ALGORITHM)
-    return ERR_CERT_WEAK_SIGNATURE_ALGORITHM;
   if (cert_status & CERT_STATUS_DATE_INVALID)
     return ERR_CERT_DATE_INVALID;