)]}'
{
  "commit": "8bd1d07535508fcb267e3656763f19cb9cff3e6f",
  "tree": "691ed00221126bfe07b1baa83b55ac21cdec9462",
  "parents": [
    "0224a3294af5bcabcf3802d5ecbf954934f7922e"
  ],
  "author": {
    "name": "Adam Langley",
    "email": "agl@google.com",
    "time": "Tue Jul 31 16:42:31 2018 -0700"
  },
  "committer": {
    "name": "Adam Langley",
    "email": "agl@google.com",
    "time": "Wed Aug 01 19:10:19 2018 +0000"
  },
  "message": "Require basicConstraints cA flag in intermediate certs.\n\nOpenSSL 1.0.2 (and thus BoringSSL) accepts keyUsage certSign or a\nNetscape CA certificate-type in lieu of basicConstraints in an\nintermediate certificate (unless X509_V_FLAG_X509_STRICT) is set.\n\nUpdate-Note: This change tightens the code so that basicConstraints is required for intermediate certificates when verifying chains. This was previously only enabled if X509_V_FLAG_X509_STRICT was set, but that flag also has other effects.\n\nChange-Id: I9e41f4c567084cf30ed08f015a744959982940af\nReviewed-on: https://boringssl-review.googlesource.com/30185\nReviewed-by: Matt Braithwaite \u003cmab@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "df236aeb637f95b6013c813a0613ae5b9b6709c9",
      "old_mode": 33188,
      "old_path": "crypto/x509/x509_test.cc",
      "new_id": "551bd8ca703aa2dd087aad91e5b6bf844ad6f285",
      "new_mode": 33188,
      "new_path": "crypto/x509/x509_test.cc"
    },
    {
      "type": "modify",
      "old_id": "fdce251026b6d2c870eb95c0451440ff9f2dd094",
      "old_mode": 33188,
      "old_path": "crypto/x509/x509_vfy.c",
      "new_id": "a76eda4e83c0990fe07bf6641f3cc51f6f93bad6",
      "new_mode": 33188,
      "new_path": "crypto/x509/x509_vfy.c"
    },
    {
      "type": "modify",
      "old_id": "f70a804cd6e4b670f1eb7afbdd5760994fe1094d",
      "old_mode": 33188,
      "old_path": "crypto/x509v3/v3_purp.c",
      "new_id": "0275b1bb166984cfc343077369f1375df86fd905",
      "new_mode": 33188,
      "new_path": "crypto/x509v3/v3_purp.c"
    },
    {
      "type": "modify",
      "old_id": "6a7c554c124ef20370fa8cdd908b94ed9e4e9184",
      "old_mode": 33188,
      "old_path": "include/openssl/x509_vfy.h",
      "new_id": "1d4ea5a7c2d2ca1ba0f7323d2000f5d87499532e",
      "new_mode": 33188,
      "new_path": "include/openssl/x509_vfy.h"
    }
  ]
}