)]}'
{
  "commit": "cbdb57278df01e2410ffe7ec0ca78f238342fe2c",
  "tree": "61c728d243aa94a25d6861fa0e355c858e254171",
  "parents": [
    "cff60d28d6908ff0b8e350472e0842596a6391b2"
  ],
  "author": {
    "name": "Michael Brown",
    "email": "mcb30@ipxe.org",
    "time": "Sun Sep 20 14:24:32 2026 +0100"
  },
  "committer": {
    "name": "Michael Brown",
    "email": "mcb30@ipxe.org",
    "time": "Sun Sep 20 14:39:41 2026 +0100"
  },
  "message": "[crypto] Use certificate\u0027s own public key algorithm for key matching\n\nWhen finding the certificate corresponding to a private key, the match\nis currently performed using the certificate\u0027s signature algorithm\n(i.e. the public key algorithm of the issuer\u0027s key) rather than the\ncertificate\u0027s own public key algorithm.  This breaks key matching for\nheterogenous certificate chains (e.g. an ECDSA client certificate\nissued by an RSA intermediate certificate).\n\nFix by using the certificate\u0027s own public key algorithm.\n\nSigned-off-by: Michael Brown \u003cmcb30@ipxe.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "111c747753a68ed18302c3aabb4cab4f285f1bfa",
      "old_mode": 33188,
      "old_path": "src/crypto/x509.c",
      "new_id": "a35fc3acdad7ed232ec76475f53e5fc3ff79bfb4",
      "new_mode": 33188,
      "new_path": "src/crypto/x509.c"
    }
  ]
}