net::CertVerifyProcBuiltin: map kDistrustedByTrustStore to CERT_STATUS_AUTHORITY_INVALID

Change-Id: Ic44c20f5dcb25ab86b90ad2df75b8a91dfa253b1
Reviewed-on: https://chromium-review.googlesource.com/933704
Commit-Queue: Matt Mueller <mattm@chromium.org>
Reviewed-by: Eric Roman <eroman@chromium.org>
Cr-Commit-Position: refs/heads/master@{#538949}

net/cert/cert_verify_proc_builtin.cc

@@ -360,6 +360,9 @@ void MapPathBuilderErrorsToCertStatus(const CertPathErrors& errors,
     *cert_status |= CERT_STATUS_DATE_INVALID;
   }
 
+  if (errors.ContainsError(cert_errors::kDistrustedByTrustStore))
+    *cert_status |= CERT_STATUS_AUTHORITY_INVALID;
+
   // IMPORTANT: If the path was invalid for a reason that was not
   // explicity checked above, set a general error. This is important as
   // |cert_status| is what ultimately indicates whether verification was