{"push_id":1103996516,"size":4,"distinct_size":4,"ref":"refs/heads/master","head":"9f9c5cbee52aa6d9fdc4e953d7999652c8a4b845","before":"c2a6a128a6d2cdbad3a8be663d027152ca9d63bc","commits":[{"sha":"37a27655ad60d38eacfc7e76c9f3f76a4504710b","author":{"email":"ef88cdf223e82d966d05894857ed10061f9c24e7@microsoft.com","name":"bartonjs"},"message":"Remove the friendly name attribute from PFX private keys.\n\n    Windows, when creating a PFX, uses the friendly name attribute on a private key to record\n    the key name at the time of export. On import this same name is used, if available.\n    However, during a parallel load of the PFX there's a race condition where it has been determined\n    that the key name is not in use but the key file has not yet been written. This allows parallel\n    readers (same process or different) to collide on the key container name, and later cleanup can\n    cause unpredictable results.\n\n    The friendly name stripping was done with OpenSSL, using the following algorithm:\n    * Validate MAC (check existing password)\n    * Unpack the PKCS#7 authsafes from the PKCS#12 structure\n    * Foreach authsafe\n        * If the authtype is other than data, copy it as-is to the new authsafes list.\n        * Otherwise (aka if pkcs7-data)\n            * Unpack the PKCS#12 safebag from the PKCS#7 data blob\n            * If the safebag's attribute collection contains 1.2.840.113549.1.9.20 then remove it.\n            * Pack the safebag (modified or no) into a PKCS#7 data blob, append it to the new authsafes list.\n    * Regenerate the MAC using the same password (since the encrypted materials are still using the same key)\n\n    This approach was chosen over doing an ephemeral import followed by an export in Windows because OpenSSL\n    exposes enough primitives to do the surgery without re-interpretation of the metadata, so it's a more\n    minimal change to the datafiles than using Windows would be. The before and after can be diffed under ASN.1\n    rules to determine that only two changes happened: 1) removal of any friendly name attributes,\n    2) MAC regeneration.","distinct":true,"url":"https://api.github.com/repos/stephentoub/corefx/commits/37a27655ad60d38eacfc7e76c9f3f76a4504710b"},{"sha":"51ec48e272b990fa8eea33d194eecd71340b51b3","author":{"email":"9518c27edfe756b605a4b7b04a393c29bbe5eb1e@users.noreply.github.com","name":"Matt Galbraith"},"message":"Update BuildToolsVersion.txt\n\nPick up tools version with fix needed for .NET Helix runs on OSX","distinct":true,"url":"https://api.github.com/repos/stephentoub/corefx/commits/51ec48e272b990fa8eea33d194eecd71340b51b3"},{"sha":"85de67eddedf9a2daced43fa7b16cbb3c8291068","author":{"email":"94274d0b635748ad8df96c0fc4f19e1ecd3f67e2@microsoft.com","name":"Stephen Toub"},"message":"Merge pull request #8417 from dotnet/MattGal-patch-1\n\nUpdate BuildToolsVersion.txt","distinct":true,"url":"https://api.github.com/repos/stephentoub/corefx/commits/85de67eddedf9a2daced43fa7b16cbb3c8291068"},{"sha":"9f9c5cbee52aa6d9fdc4e953d7999652c8a4b845","author":{"email":"94274d0b635748ad8df96c0fc4f19e1ecd3f67e2@microsoft.com","name":"Stephen Toub"},"message":"Merge pull request #8408 from bartonjs/pfx_no_privkey_name\n\nRemove the friendly name attribute from PFX private keys.","distinct":true,"url":"https://api.github.com/repos/stephentoub/corefx/commits/9f9c5cbee52aa6d9fdc4e953d7999652c8a4b845"}]}