)]}'
{
  "commit": "580c04109e8a63d08582b3d948cf54849371a73e",
  "tree": "5bf0125149aa5893196dbc3b5a9361c8e867af00",
  "parents": [
    "39cc892c73d6c3faf2e604c44509f132c232f24c"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Sun Nov 12 14:28:51 2023 -0500"
  },
  "committer": {
    "name": "Boringssl LUCI CQ",
    "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Mon Nov 20 20:38:21 2023 +0000"
  },
  "message": "Don\u0027t process DistributionPoints with a reasons field\n\nThis isn\u0027t *quite* a no-op, but it\u0027s the other half of removing support\nfor partitioned CRLs. The distribution point\u0027s reasons field and the\nCRL\u0027s onlySomeReasons field are masked together to determine which\nreasons we have covered so far. This is used in some complex logic from\nRFC 5280, section 6.3.3 to loop through a bunch of CRLs before\ndetermining that we\u0027ve covered evertything.\n\nOpenSSL\u0027s \"extended CRL\" feature skipped all CRLs with an\nonlySomeReasons field, but did not condition on the distribution point,\nso the loop was still active in some cases.\n\nThe new verifier from Chromium doesn\u0027t support either. If the\ndistribution point has a reasons field, we ignore it. Align with\nChromium. Now the reasons field is always the special all-reasons value.\n\nAs part of this, this removed the dp_reasons field from DIST_POINT. This\nis a public struct, but was unused outside of cl/581761514, so we can\nstop computing it.\n\nUpdate-Note: See above.\n\nBug: 601\nChange-Id: I9b0a9766b281d3486874e1b6d4d415a51e50ba59\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/63935\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Bob Beck \u003cbbe@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "c83de7d1e1ed4e500129ca7f0a0066e0f2d010e1",
      "old_mode": 33188,
      "old_path": "crypto/x509/x509_vfy.c",
      "new_id": "1c6529d825b2f88072e87a7489eabfab7c42fd7d",
      "new_mode": 33188,
      "new_path": "crypto/x509/x509_vfy.c"
    },
    {
      "type": "modify",
      "old_id": "2952d2aa5ab906b4f807c3335df36a940413cd27",
      "old_mode": 33188,
      "old_path": "crypto/x509v3/v3_purp.c",
      "new_id": "51a8a7acef1b2fa141e8b6a5af9076eceb9ddaab",
      "new_mode": 33188,
      "new_path": "crypto/x509v3/v3_purp.c"
    },
    {
      "type": "modify",
      "old_id": "7db61c5580ab9ddde555aa5bc2de511064d5df4f",
      "old_mode": 33188,
      "old_path": "include/openssl/x509v3.h",
      "new_id": "d7b9e8bb0798938cd4efa395d75e59b3440a9fe2",
      "new_mode": 33188,
      "new_path": "include/openssl/x509v3.h"
    }
  ]
}