)]}'
{
  "commit": "e9c692eabbbb7f395347605a6ef33a32d398ea25",
  "tree": "703e40b705890281ecd806a653ee530776e8a68a",
  "parents": [
    "7ae004869aff46fc3195d280b25dc9b94a447be7",
    "2aaca8c6d22b18786ceff51189704113d0639590"
  ],
  "author": {
    "name": "Richard Henderson",
    "email": "richard.henderson@linaro.org",
    "time": "Tue Nov 04 15:17:31 2025 +0100"
  },
  "committer": {
    "name": "Richard Henderson",
    "email": "richard.henderson@linaro.org",
    "time": "Tue Nov 04 15:17:31 2025 +0100"
  },
  "message": "Merge tag \u0027next-pr-pull-request\u0027 of https://gitlab.com/berrange/qemu into staging\n\nMerge crypto and other misc fixes / features\n\n * Increase minimum gnutls to 3.7.5\n * Increase minimum libgcrypt to 1.9.4\n * Increase minimum nettle to 3.7.3\n * Drop obsolete in-tree XTS impl\n * Fix memory leak when loading certificates\n * Remove/reduce duplication when loading certifcates\n * Fix possible crash when certificates are unloaded\n   while an active TLS connection is using when in a\n   TLS handshake operation\n * Deprecate use of dh-params.pem file\n * Document how to create certificates with Post-Quantum\n   Cryptography compliant algorithms.\n * Support loading multiple certificate identities to\n   allow support for Post-Quantum crypto in parallel\n   with traditional RSA/ECC\n * Add \"-run-with exit-with-parent\u003don\" parameter\n * Flush pending errors when seeing ENOBUFS with\n   a zero-copy send attempt\n * Fix data buffer parameters in hash \u0026 IO channel APIs\n   to use \u0027void *\u0027\n\n# -----BEGIN PGP SIGNATURE-----\n#\n# iQIzBAABCAAdFiEE2vOm/bJrYpEtDo4/vobrtBUQT98FAmkIr/8ACgkQvobrtBUQ\n# T9+2RhAAhEak/krdlTJw8OlJonUop7G5mlLU2TEoX0duRORcFhScsdSwb2pyc/wM\n# tnwfWXsnsKFItJx1y3STkOICtdNqizGoU3+c7wl4anQBurydu+XTs4ESBtVJtMYr\n# 1lTYvp0HFyKvaXwDWKE+ztltlJiog51tHPDLUIBCnyJysLVqxCHMHmkbG46IPBZo\n# A2XXxp3j/VBPmhls0JHpbAD4iVE3PChdK7zhyeGe/rld9+0JA12EPCvZ5Uokdj41\n# aYP/okvnVH1atucoygPdDE3P5GYBKaSXZUWqzfkKhU7FgaF2863Td7ff1ip+WyWN\n# FFPNEU1hVg+T5hfsZVQmmIFDdSJWqoZaZM/WJVYdrRY4dKUCPnJ9OINbbnhuWz5E\n# JFmZOPibRZKQ44XcHX49JRfJEBvoq1z9OT1r7HkEP4D9/O7V/riIunbAESMk0sgi\n# 0/fatvdhNKMN6YBQM3mtN3yNOcfRSWFtSy9XS9zDjdpEKT7ui2t9FC0ZNSP0FRkS\n# aTY31FyacjHwU3zaoh6NoqqpxV9wwHrgsJwNbA/IztjmX/jvGG0Gb/sXVEqM59tR\n# e3VWTmlmZ1T8OLImh1hG4t+nY+XzI64QpVX8H9RCGm21o28DyTcOnTFK4OyIfWe5\n# ttnNfEJN8WCVCsA8tcM8yAbZ/0qXrYfiZSO7hq79wE7LvyholAQ\u003d\n# \u003d9ESG\n# -----END PGP SIGNATURE-----\n# gpg: Signature made Mon 03 Nov 2025 02:37:03 PM CET\n# gpg:                using RSA key DAF3A6FDB26B62912D0E8E3FBE86EBB415104FDF\n# gpg: Good signature from \"Daniel P. Berrange \u003cdan@berrange.com\u003e\" [unknown]\n# gpg:                 aka \"Daniel P. Berrange \u003cberrange@redhat.com\u003e\" [unknown]\n# gpg: WARNING: This key is not certified with a trusted signature!\n# gpg:          There is no indication that the signature belongs to the owner.\n# Primary key fingerprint: DAF3 A6FD B26B 6291 2D0E  8E3F BE86 EBB4 1510 4FDF\n\n* tag \u0027next-pr-pull-request\u0027 of https://gitlab.com/berrange/qemu: (32 commits)\n  docs: creation of x509 certs compliant with post-quantum crypto\n  crypto: support upto 5 parallel certificate identities\n  crypto: expand logic to cope with multiple certificate identities\n  crypto: avoid loading the identity certs twice\n  crypto: avoid loading the CA certs twice\n  crypto: deprecate use of external dh-params.pem file\n  crypto: make TLS credentials structs private\n  crypto: fix lifecycle handling of gnutls credentials objects\n  crypto: introduce a wrapper around gnutls credentials\n  crypto: introduce method for reloading TLS creds\n  crypto: reduce duplication in handling TLS priority strings\n  crypto: remove duplication loading x509 CA cert\n  crypto: shorten the endpoint \u003d\u003d server check in TLS creds\n  crypto: move release of DH parameters into TLS creds parent\n  crypto: remove needless indirection via parent_obj field\n  crypto: use g_autofree when loading x509 credentials\n  crypto: move check for TLS creds \u0027dir\u0027 property\n  crypto: remove redundant access() checks before loading certs\n  crypto: replace stat() with access() for credential checks\n  crypto: add missing free of certs array\n  ...\n\nSigned-off-by: Richard Henderson \u003crichard.henderson@linaro.org\u003e\n",
  "tree_diff": []
}