{"push_id":1052334988,"size":2,"distinct_size":2,"ref":"refs/heads/suppress-ct-as-needed","head":"705b88024df646be74476d4930c831b60d696958","before":"3f9147a2a019ec2d88dc3477b8cae5eaefca41d7","commits":[{"sha":"d0194ed9791985815ad26838738a81d6f4210eaf","author":{"email":"390481576fb1f818e2982a64321a2afc7309fb14@dukhovni.org","name":"Viktor Dukhovni"},"message":"Suppress CT callback as appropriate\n\nSuppress CT callbacks with aNULL or PSK ciphersuites that involve\nno certificates.  Ditto when the certificate chain is validated via\nDANE-TA(2) or DANE-EE(3) TLSA records.  Also skip SCT processing\nwhen the chain is fails verification.\n\nMove and consolidate CT callbacks from libcrypto to libssl.  We\nalso simplify the interface to SSL_{,CTX_}_enable_ct() which can\nspecify either a permissive mode that just collects information or\na strict mode that requires at least one valid SCT or else asks to\nabort the connection.\n\nSimplified SCT processing and options in s_client(1) which now has\njust a simple pair of \"-noct\" vs. \"-ct\" options, the latter enables\nthe permissive callback so that we can complete the handshake and\nreport all relevant information.  When printing SCTs, print the\nvalidation status if set and not valid.","distinct":true,"url":"https://api.github.com/repos/vdukhovni/openssl/commits/d0194ed9791985815ad26838738a81d6f4210eaf"},{"sha":"705b88024df646be74476d4930c831b60d696958","author":{"email":"390481576fb1f818e2982a64321a2afc7309fb14@dukhovni.org","name":"Viktor Dukhovni"},"message":"make update","distinct":true,"url":"https://api.github.com/repos/vdukhovni/openssl/commits/705b88024df646be74476d4930c831b60d696958"}]}