)]}'
{
  "commit": "6e32825631bea414c3fc70d16bbb413dac221722",
  "tree": "5e304a86ef42e3c2b9bcb7c36ae03997a705d56b",
  "parents": [
    "bd5192b1013b68373c47bdca8d68229906171695"
  ],
  "author": {
    "name": "Viktor Dukhovni",
    "email": "openssl-users@dukhovni.org",
    "time": "Sun Jan 17 16:50:52 2016 -0500"
  },
  "committer": {
    "name": "Viktor Dukhovni",
    "email": "openssl-users@dukhovni.org",
    "time": "Wed Jan 20 18:59:46 2016 -0500"
  },
  "message": "Check Suite-B constraints with EE DANE records\n\nWhen DANE-EE(3) matches or either of DANE-EE/PKIX-EE fails, we don\u0027t\nbuild a chain at all, but rather succeed or fail with just the leaf\ncertificate.  In either case also check for Suite-B violations.\n\nAs unlikely as it may seem that anyone would enable both DANE and\nSuite-B, we should do what the application asks.\n\nTook the opportunity to eliminate the \"cb\" variables in x509_vfy.c,\njust call ctx-\u003everify_cb(ok, ctx)\n\nReviewed-by: Dr. Stephen Henson \u003csteve@openssl.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "2521e77b2abd94d3d32cd5e12b58ac2e4fa15a9b",
      "old_mode": 33188,
      "old_path": "crypto/x509/x509_cmp.c",
      "new_id": "2641d2e1334cdab61871a07acf927a48d890d0f8",
      "new_mode": 33188,
      "new_path": "crypto/x509/x509_cmp.c"
    },
    {
      "type": "modify",
      "old_id": "ec9c3211cc80b7f2a43e3cef0fb2f7b3df67970b",
      "old_mode": 33188,
      "old_path": "crypto/x509/x509_vfy.c",
      "new_id": "c9dd6fa60cbd1aa31e00509a6eca1702b5e2a380",
      "new_mode": 33188,
      "new_path": "crypto/x509/x509_vfy.c"
    }
  ]
}