)]}'
{
  "commit": "82175e699a2e2cd83d3aa34949e9b922d66d52f5",
  "tree": "5c2940f0a090c2bcec38b0755c6ca2ed288f3a44",
  "parents": [
    "efbe47b1625422f21bb2f130f916ce040756dbe3"
  ],
  "author": {
    "name": "Filippo Valsorda",
    "email": "filippo@golang.org",
    "time": "Thu Jun 18 22:45:52 2020 -0400"
  },
  "committer": {
    "name": "Katie Hockman",
    "email": "katie@golang.org",
    "time": "Tue Jul 14 17:12:22 2020 +0000"
  },
  "message": "crypto/x509: respect VerifyOptions.KeyUsages on Windows\n\nWhen using the platform verifier on Windows (because Roots is nil) we\nwere always enforcing server auth EKUs if DNSName was set, and none\notherwise. If an application was setting KeyUsages, they were not being\nrespected.\n\nStarted correctly surfacing IncompatibleUsage errors from the system\nverifier, as those are the ones applications will see if they are\naffected by this change.\n\nAlso refactored verify_test.go to make it easier to add tests for this,\nand replaced the EKULeaf chain with a new one that doesn\u0027t have a SHA-1\nsignature.\n\nThanks to Niall Newman for reporting this.\n\nFixes #39360\nFixes CVE-2020-14039\n\nChange-Id: If5c00d615f2944f7d57007891aae1307f9571c32\nReviewed-on: https://team-review.git.corp.google.com/c/golang/go-private/+/774414\nReviewed-by: Katie Hockman \u003ckatiehockman@google.com\u003e\nReviewed-on: https://go-review.googlesource.com/c/go/+/242597\nRun-TryBot: Katie Hockman \u003ckatie@golang.org\u003e\nReviewed-by: Filippo Valsorda \u003cfilippo@golang.org\u003e\nTryBot-Result: Gobot Gobot \u003cgobot@golang.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "34d585318d480f83096203807c556cbea565ae87",
      "old_mode": 33188,
      "old_path": "src/crypto/x509/root_windows.go",
      "new_id": "1e0f3acb6700e66d9167a2e056983a4335e23abf",
      "new_mode": 33188,
      "new_path": "src/crypto/x509/root_windows.go"
    },
    {
      "type": "modify",
      "old_id": "be11e730e52c2c68dcdba4d6253585226fcf942f",
      "old_mode": 33188,
      "old_path": "src/crypto/x509/verify.go",
      "new_id": "cb8d8f872dd4d79b520491b4e01d7519815920e7",
      "new_mode": 33188,
      "new_path": "src/crypto/x509/verify.go"
    },
    {
      "type": "modify",
      "old_id": "650b2d2fc6e9ecc898a2f59a3a6a9ce7befb7d25",
      "old_mode": 33188,
      "old_path": "src/crypto/x509/verify_test.go",
      "new_id": "76d1ab9a4749fd815b74d659e8af1d76accddd6e",
      "new_mode": 33188,
      "new_path": "src/crypto/x509/verify_test.go"
    }
  ]
}