)]}'
{
  "commit": "71488c48c2dfecf900e52caa55f88ef4fef62d54",
  "tree": "348dc59b902d4157562f31067889674b9e0376b9",
  "parents": [
    "82adefa711cb8d9a1f12c7ea91b491007d21819f"
  ],
  "author": {
    "name": "Nicola Murino",
    "email": "nicola.murino@gmail.com",
    "time": "Tue Aug 18 10:23:25 2026 +0200"
  },
  "committer": {
    "name": "Nicola Murino",
    "email": "nicola.murino@gmail.com",
    "time": "Sun Aug 23 06:53:19 2026 -0700"
  },
  "message": "ssh/knownhosts: compare only public key portions for revocation\n\nRevocation matching compared full marshaled key blobs, so a @revoked\nline containing a plain host key did not revoke a certificate\ncertifying that key: when the server presented such a certificate,\nIsRevoked only matched the whole certificate blob or the CA key, and\nverification succeeded even though the underlying host key was revoked.\n\nOpenSSH\u0027s check_key_not_revoked compares keys with sshkey_equal_public,\nwhich considers only the public portions and explicitly allows\ncomparisons between certificates and plain keys. Match that behavior by\nnormalizing both @revoked entries and lookups to the underlying public\nkey: for a certificate, the certified key rather than the certificate\nblob. This also makes a @revoked line containing a certificate revoke\nthe plain key it certifies\n\nChange-Id: I3029d59e68fb01f2340763e2eae25cac23c6193d\nReviewed-on: https://go-review.googlesource.com/c/crypto/+/816841\nReviewed-by: Filippo Valsorda \u003cfilippo@golang.org\u003e\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "cf520ad9cc2ea67b713bfdefb6a6a75608be44ca",
      "old_mode": 33188,
      "old_path": "ssh/knownhosts/knownhosts.go",
      "new_id": "017c696a42726d461bf7b16b902b4ee85a76230f",
      "new_mode": 33188,
      "new_path": "ssh/knownhosts/knownhosts.go"
    },
    {
      "type": "modify",
      "old_id": "5e514478c0b6b003939e09941c2d9be018deff69",
      "old_mode": 33188,
      "old_path": "ssh/knownhosts/knownhosts_test.go",
      "new_id": "947cf7027eb6c328496d89b126c44d11e565001b",
      "new_mode": 33188,
      "new_path": "ssh/knownhosts/knownhosts_test.go"
    }
  ]
}