Remove residual support for SHA-1 public key pins.

net/cert/cert_verify_proc_builtin.cc

 // Copyright (c) 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/cert_verify_proc_builtin.h"
 
 #include <string>
 #include <vector>
 
 #include "base/logging.h"
@@ skipping 71 matching lines @@
   CertErrors errors;
   for (auto it = cert_handles.begin(); it != cert_handles.end(); ++it) {
     scoped_refptr<ParsedCertificate> cert =
         ParseCertificateFromOSHandle(*it, &errors);
     if (cert)
       intermediates->AddCert(std::move(cert));
     // TODO(crbug.com/634443): Surface these parsing errors?
   }
 }
 
-// Appends the SHA1 and SHA256 hashes of |spki_bytes| to |*hashes|.
+// Appends the SHA256 hashes of |spki_bytes| to |*hashes|.
 void AppendPublicKeyHashes(const der::Input& spki_bytes,
                            HashValueVector* hashes) {
-  HashValue sha1(HASH_VALUE_SHA1);
-  base::SHA1HashBytes(spki_bytes.UnsafeData(), spki_bytes.Length(),
-                      sha1.data());
-  hashes->push_back(sha1);
-
   HashValue sha256(HASH_VALUE_SHA256);
   crypto::SHA256HashString(spki_bytes.AsStringPiece(), sha256.data(),
                            crypto::kSHA256Length);
   hashes->push_back(sha256);
 }
 
 // Appends the SubjectPublicKeyInfo hashes for all certificates in
 // |partial_path| to |*hashes|.
 void AppendPublicKeyHashes(const CertPathBuilder::ResultPath& partial_path,
                            HashValueVector* hashes) {
@@ skipping 185 matching lines @@
              : OK;
 }
 
 }  // namespace
 
 scoped_refptr<CertVerifyProc> CreateCertVerifyProcBuiltin() {
   return scoped_refptr<CertVerifyProc>(new CertVerifyProcBuiltin());
 }
 
 }  // namespace net