Mark SHA-1 as deprecated

net/spdy/spdy_session.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/spdy/spdy_session.h"
 
 #include <algorithm>
 #include <map>
 
 #include "base/basictypes.h"
@@ skipping 541 matching lines @@
 SpdySession::PushedStreamInfo::~PushedStreamInfo() {}
 
 // static
 bool SpdySession::CanPool(TransportSecurityState* transport_security_state,
                           const SSLInfo& ssl_info,
                           const std::string& old_hostname,
                           const std::string& new_hostname) {
   // Pooling is prohibited if the server cert is not valid for the new domain,
   // and for connections on which client certs were sent. It is also prohibited
   // when channel ID was sent if the hosts are from different eTLDs+1.
-  if (IsCertStatusError(ssl_info.cert_status))
+  if (IsCertStatusError(ssl_info.cert_status) &&
+      !IsCertStatusMinorError(ssl_info.cert_status)) {
     return false;
+  }
 
   if (ssl_info.client_cert_sent)
     return false;
 
   if (ssl_info.channel_id_sent &&
       ChannelIDService::GetDomainForHost(new_hostname) !=
       ChannelIDService::GetDomainForHost(old_hostname)) {
     return false;
   }
 
@@ skipping 2679 matching lines @@
     if (!queue->empty()) {
       SpdyStreamId stream_id = queue->front();
       queue->pop_front();
       return stream_id;
     }
   }
   return 0;
 }
 
 }  // namespace net