)]}'
{
  "commit": "0876b921b28bb14e3fa61b188e52fc9b4c77cb1a",
  "tree": "62bc49024ede52d872ea9a270390bb338709b653",
  "parents": [
    "ea1803e608a7aaf9cf2c07e510d8540d46d3b9ad"
  ],
  "author": {
    "name": "William Woodruff",
    "email": "william@yossarian.net",
    "time": "Wed Mar 06 21:44:58 2024"
  },
  "committer": {
    "name": "GitHub",
    "email": "noreply@github.com",
    "time": "Wed Mar 06 21:44:58 2024"
  },
  "message": "gh-107361: strengthen default SSL context flags (#112389)\n\nThis adds `VERIFY_X509_STRICT` to make the default\r\nSSL context perform stricter (per RFC 5280) validation, as well\r\nas `VERIFY_X509_PARTIAL_CHAIN` to enforce more standards-compliant\r\npath-building behavior.\r\n\r\nAs part of this changeset, I had to tweak `make_ssl_certs.py`\r\nslightly to emit 5280-conforming CA certs. This changeset includes\r\nthe regenerated certificates after that change.\r\n\r\nSigned-off-by: William Woodruff \u003cwilliam@yossarian.net\u003e\r\nCo-authored-by: Victor Stinner \u003cvstinner@python.org\u003e",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "4f82cea7480cfe86a899dcd4694a7917caea53b4",
      "old_mode": 33188,
      "old_path": ".gitattributes",
      "new_id": "5b81d2cb3c90e9ca463303cbd37dcacdea4567c0",
      "new_mode": 33188,
      "new_path": ".gitattributes"
    },
    {
      "type": "modify",
      "old_id": "84b3c258e91949983246e7ccf39eaa4361519041",
      "old_mode": 33188,
      "old_path": "Doc/library/ssl.rst",
      "new_id": "3564855594c32d416efd903d48d115ea66ad7c74",
      "new_mode": 33188,
      "new_path": "Doc/library/ssl.rst"
    },
    {
      "type": "modify",
      "old_id": "137dbe6ff1dbeda20a53a91d5f68bbed0de343de",
      "old_mode": 33188,
      "old_path": "Doc/whatsnew/3.13.rst",
      "new_id": "dc7dce969a695a4ab9257e3bda371edef532b84d",
      "new_mode": 33188,
      "new_path": "Doc/whatsnew/3.13.rst"
    },
    {
      "type": "modify",
      "old_id": "03d0121891ff4cb4a636ded561fc1b6177860af0",
      "old_mode": 33188,
      "old_path": "Lib/ssl.py",
      "new_id": "cc685c2cc405abbe10ec35dcd7854e42a3cc4204",
      "new_mode": 33188,
      "new_path": "Lib/ssl.py"
    },
    {
      "type": "modify",
      "old_id": "e400e178a1f59944f70b6aae3e9e21398aaf76fe",
      "old_mode": 33188,
      "old_path": "Lib/test/certdata/allsans.pem",
      "new_id": "02f2c2e6346ef88f980290c6fc50cf19fc0f181a",
      "new_mode": 33188,
      "new_path": "Lib/test/certdata/allsans.pem"
    },
    {
      "type": "modify",
      "old_id": "941d7919f8033e1b27477061a7c0a2d60e5f66fd",
      "old_mode": 33188,
      "old_path": "Lib/test/certdata/capath/b1930218.0",
      "new_id": "aa9dbbe294f829de16f5524e9b4e2f804e1faa6d",
      "new_mode": 33188,
      "new_path": "Lib/test/certdata/capath/b1930218.0"
    },
    {
      "type": "modify",
      "old_id": "941d7919f8033e1b27477061a7c0a2d60e5f66fd",
      "old_mode": 33188,
      "old_path": "Lib/test/certdata/capath/ceff1710.0",
      "new_id": "aa9dbbe294f829de16f5524e9b4e2f804e1faa6d",
      "new_mode": 33188,
      "new_path": "Lib/test/certdata/capath/ceff1710.0"
    },
    {
      "type": "modify",
      "old_id": "cbcac7818ddc67a56e886c27e95c8b5d69188b65",
      "old_mode": 33188,
      "old_path": "Lib/test/certdata/idnsans.pem",
      "new_id": "07a42422af1fd3459600b752c8071e38b37ac657",
      "new_mode": 33188,
      "new_path": "Lib/test/certdata/idnsans.pem"
    },
    {
      "type": "modify",
      "old_id": "c330c36d8f9fde0d9d7235dc7069e75b6b4c84d5",
      "old_mode": 33188,
      "old_path": "Lib/test/certdata/keycert.passwd.pem",
      "new_id": "187021b8eeb9fa49b51c329480add7e3915319b7",
      "new_mode": 33188,
      "new_path": "Lib/test/certdata/keycert.passwd.pem"
    },
    {
      "type": "modify",
      "old_id": "0d398633739a51e750d705bc6410fa243a3f5384",
      "old_mode": 33188,
      "old_path": "Lib/test/certdata/keycert.pem",
      "new_id": "a30d15ca4d61a62b6d76738a724fe8d357b9338c",
      "new_mode": 33188,
      "new_path": "Lib/test/certdata/keycert.pem"
    },
    {
      "type": "modify",
      "old_id": "e59d45439d4b6dfee4f4759827977db596195bc2",
      "old_mode": 33188,
      "old_path": "Lib/test/certdata/keycert2.pem",
      "new_id": "c7c4aa74583c8ab12fc05b32f03ab48ad120a02b",
      "new_mode": 33188,
      "new_path": "Lib/test/certdata/keycert2.pem"
    },
    {
      "type": "modify",
      "old_id": "f6887ba7a84e1a7a0712102b0105028cc271ae13",
      "old_mode": 33188,
      "old_path": "Lib/test/certdata/keycert3.pem",
      "new_id": "20d9bd14e9678f2127f6b4a0c112b14c4daf635a",
      "new_mode": 33188,
      "new_path": "Lib/test/certdata/keycert3.pem"
    },
    {
      "type": "modify",
      "old_id": "1003d67fd075ec58bd1f5bc8fc92bc7fdefbe1a8",
      "old_mode": 33188,
      "old_path": "Lib/test/certdata/keycert4.pem",
      "new_id": "ff4dceac7907c57261bc8e7c8c199e4d3e550b08",
      "new_mode": 33188,
      "new_path": "Lib/test/certdata/keycert4.pem"
    },
    {
      "type": "modify",
      "old_id": "81daa4ccb94217b9d49c6f9162c1efe294d9ecab",
      "old_mode": 33188,
      "old_path": "Lib/test/certdata/keycertecc.pem",
      "new_id": "bd1099218980440577160ec5322a44a0b05c0308",
      "new_mode": 33188,
      "new_path": "Lib/test/certdata/keycertecc.pem"
    },
    {
      "type": "add",
      "old_id": "0000000000000000000000000000000000000000",
      "old_mode": 0,
      "old_path": "/dev/null",
      "new_id": "36b202ae02ee54de7197c54ddc3887a35e968f21",
      "new_mode": 33188,
      "new_path": "Lib/test/certdata/leaf-missing-aki.ca.pem"
    },
    {
      "type": "add",
      "old_id": "0000000000000000000000000000000000000000",
      "old_mode": 0,
      "old_path": "/dev/null",
      "new_id": "0fd2ab39bf2c706d131032839a49f29c64bba897",
      "new_mode": 33188,
      "new_path": "Lib/test/certdata/leaf-missing-aki.keycert.pem"
    },
    {
      "type": "modify",
      "old_id": "94a35a64ab1abe340f4138b71ab9fa2563561765",
      "old_mode": 33188,
      "old_path": "Lib/test/certdata/make_ssl_certs.py",
      "new_id": "6626b93976a585c0169b8d513c1a037f81074edd",
      "new_mode": 33188,
      "new_path": "Lib/test/certdata/make_ssl_certs.py"
    },
    {
      "type": "modify",
      "old_id": "ec10cdcabb9e3558a95b3e60c135e341af73019c",
      "old_mode": 33188,
      "old_path": "Lib/test/certdata/nosan.pem",
      "new_id": "c6ff8ea31bfa2ec6e74e62f69ff0ab639acb03a5",
      "new_mode": 33188,
      "new_path": "Lib/test/certdata/nosan.pem"
    },
    {
      "type": "modify",
      "old_id": "360cd57426a5a873f9cbb51df4bedd1ca90637a0",
      "old_mode": 33188,
      "old_path": "Lib/test/certdata/pycacert.pem",
      "new_id": "0a48bf7d23539cf26baab22f95244a911485bc91",
      "new_mode": 33188,
      "new_path": "Lib/test/certdata/pycacert.pem"
    },
    {
      "type": "modify",
      "old_id": "819bdef1ff9bfc77ee08a6b31a3aa37c1684c484",
      "old_mode": 33188,
      "old_path": "Lib/test/certdata/pycakey.pem",
      "new_id": "a6bf7356f4f6849939f619cde4f0d04c058d1ae1",
      "new_mode": 33188,
      "new_path": "Lib/test/certdata/pycakey.pem"
    },
    {
      "type": "modify",
      "old_id": "621675eb5c183dc0f9890930badf059b5b197d4c",
      "old_mode": 33188,
      "old_path": "Lib/test/certdata/revocation.crl",
      "new_id": "431a831c4f196a1e749466b52d88d0eb7b9373d8",
      "new_mode": 33188,
      "new_path": "Lib/test/certdata/revocation.crl"
    },
    {
      "type": "modify",
      "old_id": "de596717bd855f0eff27140d799747ea776ac294",
      "old_mode": 33188,
      "old_path": "Lib/test/certdata/ssl_cert.pem",
      "new_id": "427948252b786e0d5938969ad63ccda9cae70566",
      "new_mode": 33188,
      "new_path": "Lib/test/certdata/ssl_cert.pem"
    },
    {
      "type": "modify",
      "old_id": "46de61ab85b1369394d240a20c8449430acdc373",
      "old_mode": 33188,
      "old_path": "Lib/test/certdata/ssl_key.passwd.pem",
      "new_id": "6ab7d57d003a35c3261e62cce6714cdb10baf836",
      "new_mode": 33188,
      "new_path": "Lib/test/certdata/ssl_key.passwd.pem"
    },
    {
      "type": "modify",
      "old_id": "1ea4578d81ecc4c73bf83bd98fc2b03ce5477f0b",
      "old_mode": 33188,
      "old_path": "Lib/test/certdata/ssl_key.pem",
      "new_id": "ee927210511dfc5672246e6a49f07e9ef6b315c4",
      "new_mode": 33188,
      "new_path": "Lib/test/certdata/ssl_key.pem"
    },
    {
      "type": "modify",
      "old_id": "1b18230d83577dc218747d02d521146cbe229004",
      "old_mode": 33188,
      "old_path": "Lib/test/test_ssl.py",
      "new_id": "cdf96c808b86ac299a29c2e618163244f94e834e",
      "new_mode": 33188,
      "new_path": "Lib/test/test_ssl.py"
    },
    {
      "type": "add",
      "old_id": "0000000000000000000000000000000000000000",
      "old_mode": 0,
      "old_path": "/dev/null",
      "new_id": "731c5d998854d728f4f45b4a018d708f1c4fd786",
      "new_mode": 33188,
      "new_path": "Misc/NEWS.d/next/Library/2023-11-24-23-40-00.gh-issue-107361.v54gh46.rst"
    }
  ]
}