)]}'
{
  "commit": "1b2ffc3206acd4d6f49450b3abfbe3444fdd51f5",
  "tree": "3cf7fcf23556b14a7c351ed9bc62d70e9742ec0c",
  "parents": [
    "333dde4831b26f2376799ca942cb945079a2e1cb"
  ],
  "author": {
    "name": "Maxim Dounin",
    "email": "mdounin@mdounin.ru",
    "time": "Mon Apr 15 19:13:09 2019 +0300"
  },
  "committer": {
    "name": "Maxim Dounin",
    "email": "mdounin@mdounin.ru",
    "time": "Mon Apr 15 19:13:09 2019 +0300"
  },
  "message": "OCSP stapling: fixed segfault with dynamic certificate loading.\n\nIf OCSP stapling was enabled with dynamic certificate loading, with some\nOpenSSL versions (1.0.2o and older, 1.1.0h and older; fixed in 1.0.2p,\n1.1.0i, 1.1.1) a segmentation fault might happen.\n\nThe reason is that during an abbreviated handshake the certificate\ncallback is not called, but the certificate status callback was called\n(https://github.com/openssl/openssl/issues/1662), leading to NULL being\nreturned from SSL_get_certificate().\n\nFix is to explicitly check SSL_get_certificate() result.\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "7d0a1701f22c90a4e540c81ef48a16f8adc04b12",
      "old_mode": 33188,
      "old_path": "src/event/ngx_event_openssl_stapling.c",
      "new_id": "c832aa0a2cbb045a55f2057d074c3101db86d011",
      "new_mode": 33188,
      "new_path": "src/event/ngx_event_openssl_stapling.c"
    }
  ]
}