Remove residual support for SHA-1 public key pins.

net/data/ssl/blacklist/README.md

Index: net/data/ssl/blacklist/README.md
diff --git a/net/data/ssl/blacklist/README.md b/net/data/ssl/blacklist/README.md
index 713d300cffd16bf758c1f0b0a19da624672f3134..a1ee87cfcfcb1624a6290f99adc572ede2f3a874 100644
--- a/net/data/ssl/blacklist/README.md
+++ b/net/data/ssl/blacklist/README.md
@@ -71,6 +71,10 @@ ccTLD namespace.
   * [67ed4b703d15dc555f8c444b3a05a32579cb7599bd19c9babe10c584ea327ae0.pem](67ed4b703d15dc555f8c444b3a05a32579cb7599bd19c9babe10c584ea327ae0.pem)
   * [a8e1dfd9cd8e470aa2f443914f931cfd61c323e94d75827affee985241c35ce5.pem](a8e1dfd9cd8e470aa2f443914f931cfd61c323e94d75827affee985241c35ce5.pem)
   * [e4f9a3235df7330255f36412bc849fb630f8519961ec3538301deb896c953da5.pem](e4f9a3235df7330255f36412bc849fb630f8519961ec3538301deb896c953da5.pem)
+  * [2d66a702ae81ba03af8cff55ab318afa919039d9f31b4d64388680f81311b65a.pem](2d66a702ae81ba03af8cff55ab318afa919039d9f31b4d64388680f81311b65a.pem)
+  * [60109bc6c38328598a112c7a25e38b0f23e5a7511cb815fb64e0c4ff05db7df7.pem](60109bc6c38328598a112c7a25e38b0f23e5a7511cb815fb64e0c4ff05db7df7.pem)
+  * [b9bea7860a962ea3611dab97ab6da3e21c1068b97d55575ed0e11279c11c8932.pem](b9bea7860a962ea3611dab97ab6da3e21c1068b97d55575ed0e11279c11c8932.pem)
+  * [f375e2f77a108bacc4234894a9af308edeca1acd8fbde0e7aaa9634e9daf7e1c.pem](f375e2f77a108bacc4234894a9af308edeca1acd8fbde0e7aaa9634e9daf7e1c.pem)

[davidben, 2017/06/26 20:15:56]

So currently everything in this directory corresponds to an entry in
cert_verify_proc_blacklist.inc (although I don't see a script to generate it
anywhere...). These aren't blacklisted but name-constrained. Previously the
wosign certs were in a separate net/data/ssl/wosign directory and then folded in
here when they converted to a straight-up blacklist.

Perhaps move these to net/data/ssl/name_constrained/?

[palmer, 2017/06/26 21:32:59]

Done.

 
 ### Trustwave