{"push_id":844140069,"size":4,"distinct_size":4,"ref":"refs/heads/master","head":"bd5ff4476937dc236585e9f7eef703f7dcd74979","before":"3ca3f46872d5d90f8f66d5a2d86a75d1bd6fe571","commits":[{"sha":"2d2324bd8179c3fe7e597eefc356836da35ed8bf","author":{"email":"ef88cdf223e82d966d05894857ed10061f9c24e7@microsoft.com","name":"bartonjs"},"message":"Extract X509Stack and X509StoreCtx methods for better sharing","distinct":true,"url":"https://api.github.com/repos/dotnet/corefx/commits/2d2324bd8179c3fe7e597eefc356836da35ed8bf"},{"sha":"f3197d731d66b14cf2c87ebb643dd2bde44220e5","author":{"email":"ef88cdf223e82d966d05894857ed10061f9c24e7@microsoft.com","name":"bartonjs"},"message":"Extract SslCtx methods for better sharing","distinct":true,"url":"https://api.github.com/repos/dotnet/corefx/commits/f3197d731d66b14cf2c87ebb643dd2bde44220e5"},{"sha":"0ac85cd61e98ab684278dc3fe7a882623e207828","author":{"email":"ef88cdf223e82d966d05894857ed10061f9c24e7@microsoft.com","name":"bartonjs"},"message":"Make CurlHandler use X509Chain to validate the chain.\n\nlibcurl+openssl defaults to just using X509_verify_cert, and the chain that came with the TLS handshake.\n\nThe X509Chain class has support for a user-defined trust list, downloading intermediate CA certs, and downloading CRLs (which isn't utilized in this change).\n\nThe existing approach was not doing CRL checking, and since the Unix X509Chain implementation does not support opportunistic CRL checking, this change leaves that functionality disabled.","distinct":true,"url":"https://api.github.com/repos/dotnet/corefx/commits/0ac85cd61e98ab684278dc3fe7a882623e207828"},{"sha":"bd5ff4476937dc236585e9f7eef703f7dcd74979","author":{"email":"94274d0b635748ad8df96c0fc4f19e1ecd3f67e2@microsoft.com","name":"Stephen Toub"},"message":"Merge pull request #4121 from bartonjs/unix_https_validation\n\nMake Unix HttpClient use X509Chain instead of the default chain validator","distinct":true,"url":"https://api.github.com/repos/dotnet/corefx/commits/bd5ff4476937dc236585e9f7eef703f7dcd74979"}]}