)]}'
{
  "commit": "b12ddd7ab155d73a1fd20daf5ce82a106d06b785",
  "tree": "f9ac5e51a0a27156e50ca409cc22281e076facf7",
  "parents": [
    "d03dbc3e5d7de44183ff17018af22323af650fbc"
  ],
  "author": {
    "name": "Lily Chen",
    "email": "chlily@google.com",
    "time": "Wed Apr 08 15:10:05 2026 +0000"
  },
  "committer": {
    "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Wed May 13 08:53:33 2026 -0700"
  },
  "message": "Alert on ClientHello with only one of key_share and supported_groups\n\nRFC 8446 section 9.2 states that a ClientHello supporting TLS 1.3 must\nalways contain both or neither of \"key_share\" and \"supported_groups\",\nand a violation should result in a \"missing extension\" alert.\n\nPreviously a ClientHello that violated this would fail to negotiate a\ngroup and result in a \"handshake failure\" alert. This CL aligns with the\nspec to send a \"missing extension\" alert instead.\n\nUpdate-Note: This CL changes the value of the TLS alert sent by the\nserver when receiving a TLS 1.3 ClientHello erroneously containing only\none of the key_share and supported_groups extensions. It does not alter\nthe success or failure of the handshake.\n\nBug: 500638473\nChange-Id: Iebaddc73bdd3a4f2eaf464119fdae8906a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/95168\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nAuto-Submit: Lily Chen \u003cchlily@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nCommit-Queue: Lily Chen \u003cchlily@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "9bc13115e447894f6c5b7f29f8be46d3aa1d125d",
      "old_mode": 33188,
      "old_path": "ssl/test/runner/curve_tests.go",
      "new_id": "b0e75ca0b8c6cb922cafd7ca9c968e397d247ef6",
      "new_mode": 33188,
      "new_path": "ssl/test/runner/curve_tests.go"
    },
    {
      "type": "modify",
      "old_id": "5853d6451066854e9664d8d5d12f90ba9db83e94",
      "old_mode": 33188,
      "old_path": "ssl/test/runner/tls13_tests.go",
      "new_id": "f66ebbf656ca2c73d75acad10cb0c724dcbb337f",
      "new_mode": 33188,
      "new_path": "ssl/test/runner/tls13_tests.go"
    },
    {
      "type": "modify",
      "old_id": "376e1a3468f77b72bb20cf0dcecd359fbc7ac457",
      "old_mode": 33188,
      "old_path": "ssl/tls13_server.cc",
      "new_id": "4dabd573848f24706d5fbdb13d5dbf8d44c37d64",
      "new_mode": 33188,
      "new_path": "ssl/tls13_server.cc"
    }
  ]
}