)]}'
{
  "commit": "74bab4cf7b9c7c2fd9c37b3eecfa059f1ffc218a",
  "tree": "eacac60b8276442ebcc25f0b649ce42b85e032ae",
  "parents": [
    "0beff26c59e67e2e19d173f1bd23241a0e946fd9"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Mon Dec 25 16:51:37 2023 -0500"
  },
  "committer": {
    "name": "Boringssl LUCI CQ",
    "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Wed Jan 10 20:49:23 2024 +0000"
  },
  "message": "Remove X509_TRUST_OCSP_SIGN and X509_TRUST_OCSP_REQUEST\n\nThese are unused and are the only options that remove the \"compat\"\nself-signed fallback.\n\nX509_TRUST_OCSP_REQUEST was intended for checking signed OCSP requests.\nWhile OpenSSL\u0027s OCSP implementation (which we\u0027ve dropped) does attempt\nto configure it, it actually does nothing. They call\nX509_STORE_CTX_set_trust after X509_STORE_CTX_set_purpose, but\nX509_STORE_CTX_set_purpose already sets the trust parameter and\nX509_STORE_CTX_set_trust only acts when trust is not configured.\n\nX509_TRUST_OCSP_SIGN was briefly used in upstream\u0027s\n30c278aa6bb614f4cfc5a26c7cbe66ad090f6896, by way of\nX509_PURPOSE_OCSP_HELPER, but then immediately undone in\ne9754726d236b74476cd0be5fa60acfef0c7024f.\n\nChange-Id: I6d2cf9b88a6b013e74fe95cd88f94051111086df\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/65151\nReviewed-by: Bob Beck \u003cbbe@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "9db4beecf8e4f43c689670d5152bd9322058eac9",
      "old_mode": 33188,
      "old_path": "crypto/x509/x509_trs.c",
      "new_id": "38dc96b0dd1feb9d35cb15bc9e4e6f45702201d1",
      "new_mode": 33188,
      "new_path": "crypto/x509/x509_trs.c"
    },
    {
      "type": "modify",
      "old_id": "1757e8e8da97d0e3107a24962463f3d33f1ea6a6",
      "old_mode": 33188,
      "old_path": "include/openssl/x509.h",
      "new_id": "099d5ef8219a898bf4605fdaa00e39e70898bdfa",
      "new_mode": 33188,
      "new_path": "include/openssl/x509.h"
    }
  ]
}