)]}'
{
  "commit": "1ca572304a8e3c7da7e7d20a36f81d4337e8f8a6",
  "tree": "a561843eea16ed6c97f706975f3f7e4d9544c433",
  "parents": [
    "556a973f9b10ea11f1ce7751721f2f7a64e09632"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Thu Jun 08 13:06:20 2023 -0400"
  },
  "committer": {
    "name": "Boringssl LUCI CQ",
    "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Thu Jun 08 17:48:48 2023 +0000"
  },
  "message": "Don\u0027t allow timezone offsets in ASN1_UTCTIME_set_string\n\nWe had to allow this when parsing certs to remain compatible with some\nmisissued certificates, but there\u0027s no reason to allow it when making\nnew values.\n\nUpdate-Note: ASN1_UTCTIME_set_string and ASN1_TIME_set_string will no\nlonger accept times with timezone offsets, which is forbidden by RFC\n5280. These functions are used when minting new certificates, rather\nthan parsing them. The parsing behavior is unchanged by this CL.\n\nChange-Id: I0860deb44a49e99ce477f8cde847d20edfd29ed9\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/60608\nAuto-Submit: David Benjamin \u003cdavidben@google.com\u003e\nCommit-Queue: Bob Beck \u003cbbe@google.com\u003e\nReviewed-by: Bob Beck \u003cbbe@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "45c4081ec55b1144fb0cdd97dfc1a2a1e28d9fa3",
      "old_mode": 33188,
      "old_path": "crypto/asn1/a_utctm.c",
      "new_id": "82f2df63115c90a64d77c0aadd47048bc6097458",
      "new_mode": 33188,
      "new_path": "crypto/asn1/a_utctm.c"
    },
    {
      "type": "modify",
      "old_id": "849cfe90c499d4cdb21415f35c00518e03278a88",
      "old_mode": 33188,
      "old_path": "crypto/asn1/asn1_test.cc",
      "new_id": "c7e0bf059170886d68eab42fc8b0ad50386cb977",
      "new_mode": 33188,
      "new_path": "crypto/asn1/asn1_test.cc"
    }
  ]
}