Index: net/cert/cert_status_flags_list.h |
diff --git a/net/cert/cert_status_flags_list.h b/net/cert/cert_status_flags_list.h |
index 869f95d30430edf06d6faa8aeb8e3b471fcf5a06..305b58533373a143c868f801ab813ce0cdcc0aec 100644 |
--- a/net/cert/cert_status_flags_list.h |
+++ b/net/cert/cert_status_flags_list.h |
@@ -25,6 +25,9 @@ CERT_STATUS_FLAG(WEAK_KEY, 1 << 11); |
// 1 << 12 was used for CERT_STATUS_WEAK_DH_KEY |
CERT_STATUS_FLAG(PINNED_KEY_MISSING, 1 << 13); |
CERT_STATUS_FLAG(NAME_CONSTRAINT_VIOLATION, 1 << 14); |
+// Deprecated means "Valid beyond the deprecation period" (e.g. SHA-1 in 2017) |
palmer
2014/08/28 21:23:13
Nit: Punctuation
|
+// If used after the deprecation period, it becomes WEAK_SIGNATURE_ALGORITHM |
+CERT_STATUS_FLAG(DEPRECATED_SIGNATURE_ALGORITHM, 1 << 15); |
// Bits 16 to 31 are for non-error statuses. |
CERT_STATUS_FLAG(IS_EV, 1 << 16); |