)]}'
{
  "commit": "ad3043fda39db0361d9601685356db4512e914be",
  "tree": "3c3d8c2db36424117fca5561d27b170fd83e44bf",
  "parents": [
    "6c2dc5ae4ab719a61d19e8cef082226410b04ff8"
  ],
  "author": {
    "name": "David Howells",
    "email": "dhowells@redhat.com",
    "time": "Wed Apr 06 16:13:34 2016 +0100"
  },
  "committer": {
    "name": "David Howells",
    "email": "dhowells@redhat.com",
    "time": "Wed Apr 06 16:13:34 2016 +0100"
  },
  "message": "X.509: Fix self-signed determination\n\nThere\u0027s a bug in the code determining whether a certificate is self-signed\nor not: if they have neither AKID nor SKID then we just assume that the\ncert is self-signed, which may not be true.\n\nFix this by checking that the raw subject name matches the raw issuer name\nand that the public key algorithm for the key and signature are both the\nsame in addition to requiring that the AKID bits match.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "752d8d5b48fa441df96eb9c5abc44e275a077dfe",
      "old_mode": 33188,
      "old_path": "crypto/asymmetric_keys/x509_public_key.c",
      "new_id": "fc77a2bd70ba1bc66038ccac6caef001b0f9081b",
      "new_mode": 33188,
      "new_path": "crypto/asymmetric_keys/x509_public_key.c"
    }
  ]
}
