)]}'
{
  "commit": "54eaf6ba8c88ac4ce8847e7fd5cb33c6c59e92bc",
  "tree": "a85c000d71576083f26aa2051eaf5fd34fd1e44e",
  "parents": [
    "9bed3737639dfaf1394cf0518e3de896a0390f0e"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Sun Nov 12 15:00:31 2023 -0500"
  },
  "committer": {
    "name": "Boringssl LUCI CQ",
    "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Mon Nov 20 22:15:34 2023 +0000"
  },
  "message": "Remove some remnants of indirect CRLs in CRL matching\n\nWe\u0027ll never accept CRLs where the issuers don\u0027t match. That means\nCRL_SCORE_ISSUER_NAME is always set, so we can remove code that\nconditions on it.\n\nUpdate-Note: This also makes a corresponding distribution point change\nto ignore distribution points with a CRLissuer field. Before, we would\ncheck for it to match the CRL issuer, but this field is only meant to be\nused with indirect CRLs (RFC 5280, section 6.3.3, step b.1). The old\ncode didn\u0027t include this, so I think it isn\u0027t *quite* a no-op on some\ninvalid DP/CRL pairs, but it matches the new verifier from Chromium.\n\nBug: 601\nChange-Id: Ibe409b88cae1c2b78b3924e61270884d6e0eb436\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/63938\nReviewed-by: Bob Beck \u003cbbe@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "c750db2dcf0279dd5b7cd74efa7943f3e624d4c6",
      "old_mode": 33188,
      "old_path": "crypto/x509/x509_vfy.c",
      "new_id": "78ba18cbabd1a9d5643e78a56a04d353588dff22",
      "new_mode": 33188,
      "new_path": "crypto/x509/x509_vfy.c"
    }
  ]
}