)]}' { "commit": "66e61c577d39e757bf491468f651461fa79fd5e1", "tree": "c38c7ad802db387ae28ba5bb5e818a14e2706480", "parents": [ "f958727f75b8636d48beb4e4014eb3ed3b514443" ], "author": { "name": "Adam Langley", "email": "alangley@gmail.com", "time": "Tue Sep 21 15:43:06 2021 -0700" }, "committer": { "name": "Boringssl LUCI CQ", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Sep 22 22:23:12 2021 +0000" }, "message": "Allow PKCS7_sign to work for signing kernel modules.\n\nLinux module signing uses PKCS#7 / CMS because everything is awful and\nbroken. In order to make the lives of kernel developers easier, support\nthe calling pattern that the kernel uses to sign modules.\n\nThe kernel utility was written at a time when PKCS#7 was hard coded to\nuse SHA-1 for signing in OpenSSL and it reflects this: you can only\nspecify “sha1” on the command line, for example. As of OpenSSL 1.1.1, at\nleast, OpenSSL uses SHA-256 and thus so does this change.\n\nChange-Id: I32b036123a0d8b272ec9e1c0130c45bf3ed0d2c7\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/49545\nCommit-Queue: Adam Langley \u003cagl@google.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n", "tree_diff": [ { "type": "modify", "old_id": "9541bea8e3f6a4c24ce52408c1016547755ec2d2", "old_mode": 33188, "old_path": "crypto/pkcs7/internal.h", "new_id": "5ee8e8a1c33d458ae9aae0f3b695d1213e3f9863", "new_mode": 33188, "new_path": "crypto/pkcs7/internal.h" }, { "type": "modify", "old_id": "1d0b139029183e475eb194f480ca436dcf3f2f29", "old_mode": 33188, "old_path": "crypto/pkcs7/pkcs7.c", "new_id": "6be5a071dd2d6af7ef0b1768e9e4b19011a8c8c7", "new_mode": 33188, "new_path": "crypto/pkcs7/pkcs7.c" }, { "type": "modify", "old_id": "8e146036c6ed066b1b8a51a520c93c8b6725efe7", "old_mode": 33188, "old_path": "crypto/pkcs7/pkcs7_test.cc", "new_id": "9cca17554313111922d086576252c970a9c068dc", "new_mode": 33188, "new_path": "crypto/pkcs7/pkcs7_test.cc" }, { "type": "modify", "old_id": "3f1526c27360b3231d98ebdb65c469f0d15bdee4", "old_mode": 33188, "old_path": "crypto/pkcs7/pkcs7_x509.c", "new_id": "773c5923d482d44a39d3c6e9435a118611eff65c", "new_mode": 33188, "new_path": "crypto/pkcs7/pkcs7_x509.c" }, { "type": "modify", "old_id": "8f2a885927fae282b38a2a083b3c30083f18cfdd", "old_mode": 33188, "old_path": "include/openssl/pkcs7.h", "new_id": "77e13d7c707f683aeebcb93ba1ffb5e8a965f498", "new_mode": 33188, "new_path": "include/openssl/pkcs7.h" } ] }