)]}'
{
  "commit": "d4864a6c405d820628719535ebfa3de8d8afac51",
  "tree": "2511d417b81f10594cc16cee9a3521dd89263b55",
  "parents": [
    "43c18e2d71b67487c1f6121d5ea72cc3e4826a6a"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Thu Jul 09 16:52:16 2026 -0400"
  },
  "committer": {
    "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Thu Jul 09 16:55:31 2026 -0700"
  },
  "message": "Handle serial numbers permissively in OCSP\n\nSince libpki\u0027s serial number parser is itself sometimes permissive, it\nwould be prudent for us to ensure all accepted serial numbers are\nrepresentable in OCSP and CRL. This isn\u0027t critical because the real\nfactor is whether the caller treats revocation as hardfail or not.\n\nThis also fixes a bug where OCSPParseCertificate forgot to pass\nparse_options anywhere.\n\nIn reality, this is all just just downstream of libpki handling serial\nnumbers badly. https://crbug.com/533048005 tracks fixing this.\n\nFixed: 518241439\nChange-Id: Id73102bfc56d8c27ec08b1f76c411bdee3ab0551\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/98647\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Matt Mueller \u003cmattm@google.com\u003e\nCommit-Queue: Matt Mueller \u003cmattm@google.com\u003e\nAuto-Submit: David Benjamin \u003cdavidben@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "cac07987252b695f6c0373f453f5a3718d237916",
      "old_mode": 33188,
      "old_path": "gen/sources.bzl",
      "new_id": "e85d7a747b81d329be11352ccabe5e7fa48ee497",
      "new_mode": 33188,
      "new_path": "gen/sources.bzl"
    },
    {
      "type": "modify",
      "old_id": "0211d67eaafe7c56758246cbccc939c15d09af24",
      "old_mode": 33188,
      "old_path": "gen/sources.cmake",
      "new_id": "117ba3ffbe9b705fcac077ddf7df88dccf2edd36",
      "new_mode": 33188,
      "new_path": "gen/sources.cmake"
    },
    {
      "type": "modify",
      "old_id": "5f136b4fd139f95d70cc1b7883e1d39b94529780",
      "old_mode": 33188,
      "old_path": "gen/sources.gni",
      "new_id": "5777c09a038b2b192cb05ede5d74c5e42914ad79",
      "new_mode": 33188,
      "new_path": "gen/sources.gni"
    },
    {
      "type": "modify",
      "old_id": "f70f1bea20440d4ccdaaa1059f2b98a579d108f8",
      "old_mode": 33188,
      "old_path": "gen/sources.json",
      "new_id": "97b70e5544be67fb6ebdf2c5a9737458953eb62d",
      "new_mode": 33188,
      "new_path": "gen/sources.json"
    },
    {
      "type": "modify",
      "old_id": "b646bae0c14fe400175a54f42578299e353cc11c",
      "old_mode": 33188,
      "old_path": "gen/sources.mk",
      "new_id": "b7cb8ad00498ab902e1db799baac91d8278c7d0b",
      "new_mode": 33188,
      "new_path": "gen/sources.mk"
    },
    {
      "type": "modify",
      "old_id": "f64a14025c5023a3b2aa5edd470eae06475b9493",
      "old_mode": 33188,
      "old_path": "pki/crl.cc",
      "new_id": "3144531b543e684f75bb3211c3dda013d5d9d2d5",
      "new_mode": 33188,
      "new_path": "pki/crl.cc"
    },
    {
      "type": "modify",
      "old_id": "e968e4dd4b36a7937309aebd060a212053dcd988",
      "old_mode": 33188,
      "old_path": "pki/ocsp.cc",
      "new_id": "2f496ddd4aa1f4d98fb57046381b004bab969334",
      "new_mode": 33188,
      "new_path": "pki/ocsp.cc"
    },
    {
      "type": "modify",
      "old_id": "13ab78fc6e323748c1450d3908de742ec551f4ac",
      "old_mode": 33188,
      "old_path": "pki/ocsp_unittest.cc",
      "new_id": "5ec11ab758ac6f0f1a10a80b24d64560d7e209a6",
      "new_mode": 33188,
      "new_path": "pki/ocsp_unittest.cc"
    },
    {
      "type": "add",
      "old_id": "0000000000000000000000000000000000000000",
      "old_mode": 0,
      "old_path": "/dev/null",
      "new_id": "b414b2ae31ab8da127335ab6abecfb7288b589b5",
      "new_mode": 33188,
      "new_path": "pki/testdata/ocsp_unittest/good_response_invalid_serial.pem"
    }
  ]
}