)]}'
{
  "commit": "5c4271f7cb17edd8c6be1c841cd99991deaecd4b",
  "tree": "db9b3b41c4ebafadeedf41b59d52f7b8c3345d9e",
  "parents": [
    "5ef40c60f67e9060b33f02f49b366f508c0d09fa"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Wed Aug 23 22:09:41 2017 -0700"
  },
  "committer": {
    "name": "CQ bot account: commit-bot@chromium.org",
    "email": "commit-bot@chromium.org",
    "time": "Thu Aug 24 16:14:22 2017 +0000"
  },
  "message": "Don\u0027t reauthenticate on renegotiation.\n\nWe currently forbid the server certificate from changing on\nrenegotiation. This means re-verifying the certificate is pointless and\nindeed the callback being called again seems to surprise consumers more\nthan anything else.\n\nCarry over the initial handshake\u0027s SCT lists and OCSP responses (don\u0027t\nenforce they don\u0027t change since the server may have, say, picked up new\nOCSP responses in the meantime), ignore new ones received on\nrenegotiation, and don\u0027t bother redoing verification.\n\nFor our purposes, TLS 1.2 renegotiation is an overcomplicated TLS 1.3\nKeyUpdate + post-handshake auth. The server is not allowed to change\nidentity.\n\nBug: 126\nChange-Id: I0dae85bcf243943b1a5a97fa4f30f100c9e6e41e\nReviewed-on: https://boringssl-review.googlesource.com/19665\nCommit-Queue: Adam Langley \u003cagl@google.com\u003e\nReviewed-by: Adam Langley \u003cagl@google.com\u003e\nCQ-Verified: CQ bot account: commit-bot@chromium.org \u003ccommit-bot@chromium.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "eca7194e36f8b7e04eb2784ab5fee6cc13110fde",
      "old_mode": 33188,
      "old_path": "PORTING.md",
      "new_id": "e2fdb3a598c125b6b9404081ac7906c220723a93",
      "new_mode": 33188,
      "new_path": "PORTING.md"
    },
    {
      "type": "modify",
      "old_id": "6afd00b1b94a8ecc652ef3aa7b1ed9fedc745e3a",
      "old_mode": 33188,
      "old_path": "ssl/handshake_client.cc",
      "new_id": "f018c0ec1ca39069ea8311a84b95df560e717fcc",
      "new_mode": 33188,
      "new_path": "ssl/handshake_client.cc"
    },
    {
      "type": "modify",
      "old_id": "80e6f7b05ebf0a91cabcb9f7554f11b9871b3a91",
      "old_mode": 33188,
      "old_path": "ssl/s3_both.cc",
      "new_id": "f51af697aa34b274a42b7b9a651e27bff349ef54",
      "new_mode": 33188,
      "new_path": "ssl/s3_both.cc"
    },
    {
      "type": "modify",
      "old_id": "d7d2efaceb3ed45d9803962ea4362aec67a31f77",
      "old_mode": 33188,
      "old_path": "ssl/test/bssl_shim.cc",
      "new_id": "ce09060ab922bca34f2590bb1795322c1b6d01c6",
      "new_mode": 33188,
      "new_path": "ssl/test/bssl_shim.cc"
    },
    {
      "type": "modify",
      "old_id": "bf56ca21b53c303d87bf0754d2d4d4907061e35d",
      "old_mode": 33188,
      "old_path": "ssl/test/runner/common.go",
      "new_id": "b2f5277ed61d95b1f11123d77e0c26a32210a432",
      "new_mode": 33188,
      "new_path": "ssl/test/runner/common.go"
    },
    {
      "type": "modify",
      "old_id": "194244d697ea35c0e8ac06f058038c602222497a",
      "old_mode": 33188,
      "old_path": "ssl/test/runner/handshake_server.go",
      "new_id": "5dee5fbe55624472a203847541c77f1bc321fc0b",
      "new_mode": 33188,
      "new_path": "ssl/test/runner/handshake_server.go"
    },
    {
      "type": "modify",
      "old_id": "a0f5a9c712f126f3ca7f9c3e5cbd3fd0313f059c",
      "old_mode": 33188,
      "old_path": "ssl/test/runner/runner.go",
      "new_id": "9f548fc5686fa47afc43f4e27408136bfba73c89",
      "new_mode": 33188,
      "new_path": "ssl/test/runner/runner.go"
    }
  ]
}