)]}'
{
  "commit": "05e6256ceadd9c5608456cb0543fa6e53ee830a8",
  "tree": "b673c64a75fb2b92a9810dc44b5228be8222d566",
  "parents": [
    "9d6b3600ce025943c5c46f6dddabaca09d6f5df1"
  ],
  "author": {
    "name": "Michael Brown",
    "email": "mcb30@ipxe.org",
    "time": "Sun Jul 19 15:08:57 2026 +0100"
  },
  "committer": {
    "name": "Michael Brown",
    "email": "mcb30@ipxe.org",
    "time": "Sun Jul 19 15:30:10 2026 +0100"
  },
  "message": "[tls] Parse ServerKeyExchange record immediately\n\nAs of commit 433a8f5 (\"[tls] Retain a reference in the key schedule to\nthe bound identity\"), the act of binding the server identity is\nlogically separated from the act of validating the server identity.\nWe may therefore bind the server identity (by verifying the signature\nover the Diffie-Hellman parameters) and agree the ephemeral shared\nsecret immediately upon receiving the ServerKeyExchange record, rather\nthan deferring the verification until we have a validated identity.\n\nThis provides a closer match to the flow required for TLS version 1.3,\nwhere the ephemeral shared secret is used for all messages after\nServerHello, and so must always be agreed prior to validation.\n\nSigned-off-by: Michael Brown \u003cmcb30@ipxe.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "d9da163930382fcd0b9f15e1cdd0172557b45ae9",
      "old_mode": 33188,
      "old_path": "src/include/ipxe/tls.h",
      "new_id": "4cd322d6226a2074ad4a8ab4e6fc589e2e95cfdf",
      "new_mode": 33188,
      "new_path": "src/include/ipxe/tls.h"
    },
    {
      "type": "modify",
      "old_id": "b06d5b64836e62ef2d0270b9a6eb17174107f7b6",
      "old_mode": 33188,
      "old_path": "src/net/tls.c",
      "new_id": "106a8d5a1ee096635c5e6872e42f0baa9215c4c5",
      "new_mode": 33188,
      "new_path": "src/net/tls.c"
    }
  ]
}