Detect SHA-1 when it appears in certificate chains

net/cert/cert_verify_proc_mac.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/cert_verify_proc_mac.h"
 
 #include <CommonCrypto/CommonDigest.h>
 #include <CoreServices/CoreServices.h>
 #include <Security/Security.h>
 
@@ skipping 209 matching lines @@
     if (!sig_algorithm)
       continue;
 
     const CSSM_OID* alg_oid = &sig_algorithm->algorithm;
     if (CSSMOIDEqual(alg_oid, &CSSMOID_MD2WithRSA)) {
       verify_result->has_md2 = true;
     } else if (CSSMOIDEqual(alg_oid, &CSSMOID_MD4WithRSA)) {
       verify_result->has_md4 = true;
     } else if (CSSMOIDEqual(alg_oid, &CSSMOID_MD5WithRSA)) {
       verify_result->has_md5 = true;
+    } else if (CSSMOIDEqual(alg_oid, &CSSMOID_SHA1WithRSA) ||
+               CSSMOIDEqual(alg_oid, &CSSMOID_SHA1WithRSA_OIW) ||
+               CSSMOIDEqual(alg_oid, &CSSMOID_SHA1WithDSA) ||
+               CSSMOIDEqual(alg_oid, &CSSMOID_SHA1WithDSA_CMS) ||
+               CSSMOIDEqual(alg_oid, &CSSMOID_SHA1WithDSA_JDK) ||
+               CSSMOIDEqual(alg_oid, &CSSMOID_ECDSA_WithSHA1)) {
+      verify_result->has_sha1 = true;
     }
   }
   if (!verified_cert)
     return;
 
   verify_result->verified_cert =
       X509Certificate::CreateFromHandle(verified_cert, verified_chain);
 }
 
 void AppendPublicKeyHashes(CFArrayRef chain,
@@ skipping 483 matching lines @@
           }
         }
       }
     }
   }
 
   return OK;
 }
 
 }  // namespace net