)]}'
{
  "commit": "7646610b6a2c53ae50ed453c88291c23630e7850",
  "tree": "f7654090fa435eddd3bbc9bf06d772cc621cab29",
  "parents": [
    "78215852066d214ded6695a27c997eb0d651c31f"
  ],
  "author": {
    "name": "Hubert Kario",
    "email": "hkario@redhat.com",
    "time": "Fri Jun 05 20:21:55 2020 +0200"
  },
  "committer": {
    "name": "Tomas Mraz",
    "email": "tmraz@fedoraproject.org",
    "time": "Tue Jun 09 12:15:48 2020 +0200"
  },
  "message": "use safe primes in ssl_get_auto_dh()\n\nDH_get_1024_160() and DH_get_2048_224() return parameters from\nRFC5114. Those parameters include primes with known small subgroups,\nmaking them unsafe. Change the code to use parameters from\nRFC 2409 and RFC 3526 instead (group 2 and 14 respectively).\n\nThis patch also adds automatic selection of 4096 bit params for 4096 bit\nRSA keys\n\nSigned-off-by: Hubert Kario \u003chkario@redhat.com\u003e\n\nReviewed-by: Kurt Roeckx \u003ckurt@roeckx.be\u003e\nReviewed-by: Tomas Mraz \u003ctmraz@fedoraproject.org\u003e\n(Merged from https://github.com/openssl/openssl/pull/12061)\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "68bd5f2611e23df81fcb5c9c7aa669bee55dad04",
      "old_mode": 33188,
      "old_path": "ssl/t1_lib.c",
      "new_id": "89450943d1ae30509398a70df5a0261a3db1a3aa",
      "new_mode": 33188,
      "new_path": "ssl/t1_lib.c"
    }
  ]
}