)]}'
{
  "commit": "624fc2e0de8e28f687cb3de0ebfb3f830db02ee9",
  "tree": "075905074696635551af1b4281c803915230603a",
  "parents": [
    "37e3dcf00d84f4783282d197549e85399a3ad7c7"
  ],
  "author": {
    "name": "David Horstmann",
    "email": "david.horstmann@arm.com",
    "time": "Tue Mar 10 15:08:04 2026 +0000"
  },
  "committer": {
    "name": "David Horstmann",
    "email": "david.horstmann@arm.com",
    "time": "Tue Mar 10 15:12:47 2026 +0000"
  },
  "message": "Move TLS 1.3 verify-result setting for PSK\n\nWhen we are doing PSK, we\u0027d like to set verify_result to\nMBEDTLS_X509_BADCERT_SKIP_VERIFY. Previously this was done in\nmbedtls_ssl_set_hs_psk() but this is inadequate since this function may\nbe called for early data (where certificate verification happens later\nin the handshake.\n\nInstead, set this value after writing / processing the encrypted\nextensions on the server / client respectively, so that we know whether\nwe are doing certificate verification or not for sure. This change is\neffective only for TLS 1.3 as TLS 1.2 sets verify_result for PSK in\nssl_parse_certificate_coordinate().\n\nSigned-off-by: David Horstmann \u003cdavid.horstmann@arm.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "09e1ebf574d424a97220ed13c53148f0976755c4",
      "old_mode": 33188,
      "old_path": "library/ssl_tls.c",
      "new_id": "bf459b473e3e7ce5d7a3fabd3afecad068133b55",
      "new_mode": 33188,
      "new_path": "library/ssl_tls.c"
    },
    {
      "type": "modify",
      "old_id": "b7b075cc97f7ee70d4d4aa2ceda983fc0270b216",
      "old_mode": 33188,
      "old_path": "library/ssl_tls13_client.c",
      "new_id": "9b7ca82f918e7efe32ba7b2678364f88e33a4f8f",
      "new_mode": 33188,
      "new_path": "library/ssl_tls13_client.c"
    },
    {
      "type": "modify",
      "old_id": "982e6f8c3b8588bf00403f30a40f90baf5924d53",
      "old_mode": 33188,
      "old_path": "library/ssl_tls13_server.c",
      "new_id": "270dcd0e6e20115817667c81414c5d8990ee9624",
      "new_mode": 33188,
      "new_path": "library/ssl_tls13_server.c"
    }
  ]
}