)]}'
{
  "commit": "d2ed382e647bfe6148bdc192d77b48406af85a94",
  "tree": "d0b6e0aafa203bb7a50b38e4caed131450cba3c1",
  "parents": [
    "e62bf02a131a14b6ec6ebea3590342a6c8265bbf"
  ],
  "author": {
    "name": "Matthew Braithwaite",
    "email": "mab@google.com",
    "time": "Tue Jul 10 16:27:22 2018 -0700"
  },
  "committer": {
    "name": "Matt Braithwaite",
    "email": "mab@google.com",
    "time": "Fri Nov 02 19:45:42 2018 +0000"
  },
  "message": "Serialize SSL configuration in handoff and check it on application.\n\nA split SSL handshake may involve 2 binaries, potentially built at\ndifferent versions: call them the \"handoff/handback\" binary and the\n\"handshake\" binary.  We would like to guarantee that the\nhandoff/handback binary does not make any promises that the handshake\nbinary cannot keep.\n\nAs a start, this commit serializes |kCiphers| to the handoff message.\nWhen the handoff message is applied to an |SSL|, any configured\nciphers not listed in the handoff message will be removed, in order to\nprevent them from being negotiated.\n\nSubsequent commits will apply the same approach to other lists of features.\n\nChange-Id: Idf6dbeadb750c076ab0509c09b9d3f22eb162b9c\nReviewed-on: https://boringssl-review.googlesource.com/c/29264\nReviewed-by: Matt Braithwaite \u003cmab@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "a47b7c15b5012fcc2ee38ceddf1eb874a3b6f070",
      "old_mode": 33188,
      "old_path": "ssl/handoff.cc",
      "new_id": "a49d28943c47ea1909f35cfb76ee0aa6fdb8ca40",
      "new_mode": 33188,
      "new_path": "ssl/handoff.cc"
    },
    {
      "type": "modify",
      "old_id": "a036a17ffb537cd9f7012a0f1972f6411ea0a447",
      "old_mode": 33188,
      "old_path": "ssl/internal.h",
      "new_id": "2e05ee034306c7115ee08ae76fd7ac950fad78f6",
      "new_mode": 33188,
      "new_path": "ssl/internal.h"
    },
    {
      "type": "modify",
      "old_id": "0ed91d606647eb291ff4ee20f91b57c9aeb759ed",
      "old_mode": 33188,
      "old_path": "ssl/ssl_cipher.cc",
      "new_id": "a420f4dd92b8ccddab513d1ddb71fd02df586db4",
      "new_mode": 33188,
      "new_path": "ssl/ssl_cipher.cc"
    },
    {
      "type": "modify",
      "old_id": "4792560759bc5f694f5924f0106ce08fa25b2ae9",
      "old_mode": 33188,
      "old_path": "ssl/ssl_test.cc",
      "new_id": "f7b299ab2ac59b002b2cb42eaed84805928bfada",
      "new_mode": 33188,
      "new_path": "ssl/ssl_test.cc"
    }
  ]
}
