)]}'
{
  "commit": "86f9b7fc6e7724d540adb5c84c0b3618a7283dfd",
  "tree": "c591f39164d0468bdac919a3be19c53b50a1e1a6",
  "parents": [
    "9033c3f697809a73e97df159e74115877e2162e8"
  ],
  "author": {
    "name": "Michael Brown",
    "email": "mcb30@ipxe.org",
    "time": "Wed Nov 04 14:36:38 2026 +0000"
  },
  "committer": {
    "name": "Michael Brown",
    "email": "mcb30@ipxe.org",
    "time": "Thu Nov 05 12:32:25 2026 +0000"
  },
  "message": "[tls] Generate signatures using an explicitly supported algorithm\n\nGenerate the CertificateVerify signature using a signature hash\nalgorithm from the list provided by the server, rather than inferring\nan algorithm that is likely to be supported based on the certificate\u0027s\npublic-key algorithm and the key schedule\u0027s digest algorithm.\n\nThis adds support for the within-handshake variant of client\nauthentication as used by TLS version 1.3, which requires the use of\nRSA-PSS for certificates with an RSA public key.\n\nIt is also likely to change the algorithm selected for TLS version 1.2\nclient authentication: if the server advertises (and prefers) the\nRSA-PSS signature algorithms then we will now use RSA-PSS rather than\nRSA-PKCS#1.\n\nSigned-off-by: Michael Brown \u003cmcb30@ipxe.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "c84c3185351f300875eebeabb098fc531e14a8c6",
      "old_mode": 33188,
      "old_path": "src/net/tls.c",
      "new_id": "c4341d3e8e37992cc30ecdbdd612cae32a5ae0f5",
      "new_mode": 33188,
      "new_path": "src/net/tls.c"
    }
  ]
}