Mark SHA-1 as deprecated

net/url_request/url_request_http_job.cc

Index: net/url_request/url_request_http_job.cc
diff --git a/net/url_request/url_request_http_job.cc b/net/url_request/url_request_http_job.cc
index 3c777a3b9a7371aa2bbcdf713237aa281678ea07..63190f5c1492b3a5c78c583d6c52497a1f9e216b 100644
--- a/net/url_request/url_request_http_job.cc
+++ b/net/url_request/url_request_http_job.cc
@@ -744,7 +744,8 @@ void URLRequestHttpJob::ProcessStrictTransportSecurityHeader() {
 
   // Only accept HSTS headers on HTTPS connections that have no
   // certificate errors.
-  if (!ssl_info.is_valid() || IsCertStatusError(ssl_info.cert_status) ||
+  if (!ssl_info.is_valid() || (IsCertStatusError(ssl_info.cert_status) &&
+                               !IsCertStatusMinorError(ssl_info.cert_status)) ||
       !security_state)
     return;
 
@@ -767,7 +768,8 @@ void URLRequestHttpJob::ProcessPublicKeyPinsHeader() {
 
   // Only accept HPKP headers on HTTPS connections that have no
   // certificate errors.
-  if (!ssl_info.is_valid() || IsCertStatusError(ssl_info.cert_status) ||
+  if (!ssl_info.is_valid() || (IsCertStatusError(ssl_info.cert_status) &&
+                               !IsCertStatusMinorError(ssl_info.cert_status)) ||
       !security_state)
     return;