)]}'
{
  "commit": "6158bf197ee23dc08f2ca152ca39ad25cbc9207c",
  "tree": "b77058be83384318d3cbb80721f80e3b02b3b289",
  "parents": [
    "cb50a14729cbea32e3513c94fe221b178831dd1b"
  ],
  "author": {
    "name": "Maxim Dounin",
    "email": "mdounin@mdounin.ru",
    "time": "Thu May 19 14:46:32 2016 +0300"
  },
  "committer": {
    "name": "Maxim Dounin",
    "email": "mdounin@mdounin.ru",
    "time": "Thu May 19 14:46:32 2016 +0300"
  },
  "message": "SSL: support for multiple curves (ticket #885).\n\nOpenSSL 1.0.2+ allows configuring a curve list instead of a single curve\npreviously supported.  This allows use of different curves depending on\nwhat client supports (as available via the elliptic_curves extension),\nand also allows use of different curves in an ECDHE key exchange and\nin the ECDSA certificate.\n\nThe special value \"auto\" was introduced (now the default for ssl_ecdh_curve),\nwhich means \"use an internal list of curves as available in the OpenSSL\nlibrary used\".  For versions prior to OpenSSL 1.0.2 it maps to \"prime256v1\"\nas previously used.  The default in 1.0.2b+ prefers prime256v1 as well\n(and X25519 in OpenSSL 1.1.0+).\n\nAs client vs. server preference of curves is controlled by the\nsame option as used for ciphers (SSL_OP_CIPHER_SERVER_PREFERENCE),\nthe ssl_prefer_server_ciphers directive now controls both.\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "39d3b5bdccd0a36d9be906b07e8a248456e217b4",
      "old_mode": 33188,
      "old_path": "src/event/ngx_event_openssl.c",
      "new_id": "96c059be90772d230b4928983b2775493c3a1d71",
      "new_mode": 33188,
      "new_path": "src/event/ngx_event_openssl.c"
    },
    {
      "type": "modify",
      "old_id": "26d7b00029042a922a1250f2e09c919a352a106a",
      "old_mode": 33188,
      "old_path": "src/http/modules/ngx_http_ssl_module.c",
      "new_id": "7f23c86e317b255067f886463bf42c68793e2bc5",
      "new_mode": 33188,
      "new_path": "src/http/modules/ngx_http_ssl_module.c"
    },
    {
      "type": "modify",
      "old_id": "833c3e446e01854794e29c45946b34f7f3546a1a",
      "old_mode": 33188,
      "old_path": "src/mail/ngx_mail_ssl_module.c",
      "new_id": "83cffb83273869266c77ecb2919128ab97d67f78",
      "new_mode": 33188,
      "new_path": "src/mail/ngx_mail_ssl_module.c"
    },
    {
      "type": "modify",
      "old_id": "677c393254d2fb888c971d3b57311cc98759f095",
      "old_mode": 33188,
      "old_path": "src/stream/ngx_stream_ssl_module.c",
      "new_id": "2d2f3ca020f87ae2c41691c9531af04db191ee56",
      "new_mode": 33188,
      "new_path": "src/stream/ngx_stream_ssl_module.c"
    }
  ]
}
