)]}'
{
  "commit": "bec2cc5286e5888eb1de9462f7c64b922967b47b",
  "tree": "f51608be0c1ae2306ec75a99190398b47b360807",
  "parents": [
    "3ebbb7d521e9faeebdfdbba0a98a7a029e56c0a2"
  ],
  "author": {
    "name": "Maxim Dounin",
    "email": "mdounin@mdounin.ru",
    "time": "Mon Oct 01 12:53:11 2012 +0000"
  },
  "committer": {
    "name": "Maxim Dounin",
    "email": "mdounin@mdounin.ru",
    "time": "Mon Oct 01 12:53:11 2012 +0000"
  },
  "message": "OCSP stapling: ssl_stapling_verify directive.\n\nOCSP response verification is now switched off by default to simplify\nconfiguration, and the ssl_stapling_verify allows to switch it on.\n\nNote that for stapling OCSP response verification isn\u0027t something required\nas it will be done by a client anyway.  But doing verification on a server\nallows to mitigate some attack vectors, most notably stop an attacker from\npresenting some specially crafted data to all site clients.\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "fc098da87dbbdcaff654375da335f85c5d303e61",
      "old_mode": 33188,
      "old_path": "src/event/ngx_event_openssl.h",
      "new_id": "d1fb5739fe50564bcd4ca7aabbd8a80cf3f417ad",
      "new_mode": 33188,
      "new_path": "src/event/ngx_event_openssl.h"
    },
    {
      "type": "modify",
      "old_id": "c09b9f7ecc4a404eb6b61bbefaf7040250c81841",
      "old_mode": 33188,
      "old_path": "src/event/ngx_event_openssl_stapling.c",
      "new_id": "51caea6f0eeca1045cfb427fbd2e758bee6ccfe2",
      "new_mode": 33188,
      "new_path": "src/event/ngx_event_openssl_stapling.c"
    },
    {
      "type": "modify",
      "old_id": "e49c3edb7569af5c5b4b13ef671da86b2f00884e",
      "old_mode": 33188,
      "old_path": "src/http/modules/ngx_http_ssl_module.c",
      "new_id": "0073dba3c222308cf4b44b5418010068aed1a0f3",
      "new_mode": 33188,
      "new_path": "src/http/modules/ngx_http_ssl_module.c"
    },
    {
      "type": "modify",
      "old_id": "b9037589f037a3534cfabe2c43033fcf9acecb04",
      "old_mode": 33188,
      "old_path": "src/http/modules/ngx_http_ssl_module.h",
      "new_id": "c4c576ef63be9c51f4af06faa4c38890e8cd78fd",
      "new_mode": 33188,
      "new_path": "src/http/modules/ngx_http_ssl_module.h"
    }
  ]
}