)]}'
{
  "commit": "cd8f3d36fe294b4896f26bf3add6a6a954218bfd",
  "tree": "938ba126e2c3dde7e6d7f4ef6a41e64fbb37c87b",
  "parents": [
    "72b095d0d483e6b9df002427054a0b150ee76f49"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Mon Jun 15 11:16:06 2020 -0400"
  },
  "committer": {
    "name": "CQ bot account: commit-bot@chromium.org",
    "email": "commit-bot@chromium.org",
    "time": "Mon Jun 15 16:34:03 2020 +0000"
  },
  "message": "Enforce the keyUsage extension in TLS 1.2 client certs.\n\nI\u0027ve left this independent of SSL_set_enforce_rsa_key_usage because\nclient certificates in TLS always use the digitalSignature bit, RSA or\notherwise, so it\u0027s less likely that someone has messed it up, unlike\nTLS 1.2 RSA server certificates.\n\nUpdate-Note: Client certificates which do not support the\ndigitalSignature key usage will be rejected. They should either include\nthat bit or omit the keyUsage extension.\n\nBug: 349\nChange-Id: I97bbf0c8e394f219ff75b686e0c14019f6d8c9a8\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/41664\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Adam Langley \u003cagl@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "9625b8e8d04239260c7a3ab6f1c613fa35272963",
      "old_mode": 33188,
      "old_path": "ssl/handshake_client.cc",
      "new_id": "670e476434d22f939ddc21b774fc81ed94d5acd7",
      "new_mode": 33188,
      "new_path": "ssl/handshake_client.cc"
    },
    {
      "type": "modify",
      "old_id": "924701f68f2b57bdb013ab32e6edca3ccebbf97c",
      "old_mode": 33188,
      "old_path": "ssl/handshake_server.cc",
      "new_id": "24894289539d6f1fcd2c519531f60c9204e18e0e",
      "new_mode": 33188,
      "new_path": "ssl/handshake_server.cc"
    },
    {
      "type": "modify",
      "old_id": "ae9b40d109226e7701ded5fd8c4f28a2f72cf6d8",
      "old_mode": 33188,
      "old_path": "ssl/test/runner/runner.go",
      "new_id": "deddb0342bffd18239118606dfa314e3db6e29d4",
      "new_mode": 33188,
      "new_path": "ssl/test/runner/runner.go"
    }
  ]
}