)]}'
{
  "commit": "6e5f475c8281aace1be3785fa625e331e510537f",
  "tree": "0f53f34b0e72575c00d8159d6106d92307f5ee8e",
  "parents": [
    "5a705e69924ac97afb0c260462b969bd68ea1855"
  ],
  "author": {
    "name": "Ben Collins",
    "email": "bcollins@libjwt.io",
    "time": "Mon Jun 15 16:18:14 2026 -0400"
  },
  "committer": {
    "name": "Ben Collins",
    "email": "bcollins@libjwt.io",
    "time": "Mon Jun 15 16:18:14 2026 -0400"
  },
  "message": "gnutls: drop the RSA-OAEP (SHA-1) OpenSSL fallback; just fail\n\nGnuTLS/nettle cannot perform RSA-OAEP with SHA-1. The GnuTLS backend used to\ndelegate that case to OpenSSL when it was compiled in; now it simply rejects\nplain RSA-OAEP (RSA-OAEP-256 remains native). This makes the GnuTLS backend\u0027s\nbehavior independent of whether OpenSSL is also built.\n\n- gnutls/jwe.c: RSA-OAEP (SHA-1) encrypt/decrypt return failure instead of\n  calling openssl_*_cek_rsa_pem.\n- Remove the now-dead openssl_encrypt_cek_rsa_pem / openssl_decrypt_cek_rsa_pem\n  helpers (and their declarations); they existed solely for this fallback. The\n  shared rsa_oaep_{encrypt,decrypt}_pkey helpers stay (used by the OpenSSL ops);\n  their comments are updated.\n- tests/jwe_rsa.c: the GnuTLS backend never supports plain RSA-OAEP now,\n  regardless of OpenSSL.\n- README and doxygen/mainpage.dox: mark RSA-OAEP (SHA-1) unsupported under\n  GnuTLS, drop the now-unused \"OpenSSL fallback\" legend entry, and update the\n  note.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) \u003cnoreply@anthropic.com\u003e\nSigned-off-by: Ben Collins \u003cbcollins@libjwt.io\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "a0f2a13fd784e572880ef611e3e63aa87fdd8b57",
      "old_mode": 33188,
      "old_path": "README.md",
      "new_id": "aeb2d3d78843a89aa495792db857b3d47d962704",
      "new_mode": 33188,
      "new_path": "README.md"
    },
    {
      "type": "modify",
      "old_id": "c3ff2e9146bce08d4941cbfa1c1c9d7ed78e52da",
      "old_mode": 33188,
      "old_path": "doxygen/mainpage.dox",
      "new_id": "82b92e71251cc69fc089b76f052220d00656df63",
      "new_mode": 33188,
      "new_path": "doxygen/mainpage.dox"
    },
    {
      "type": "modify",
      "old_id": "37e681eb8447dadf043b3b3e6700d66b8db4c492",
      "old_mode": 33188,
      "old_path": "libjwt/gnutls/jwe.c",
      "new_id": "a9f79c70fc55768c530b9fe6eb83fa51e6a503e5",
      "new_mode": 33188,
      "new_path": "libjwt/gnutls/jwe.c"
    },
    {
      "type": "modify",
      "old_id": "2ea69ad22fd20c371ea17fb5f292e874f2e7f6e1",
      "old_mode": 33188,
      "old_path": "libjwt/gnutls/jwt-gnutls.h",
      "new_id": "5fe00231beffac0696537b69215c6f10edb89ec9",
      "new_mode": 33188,
      "new_path": "libjwt/gnutls/jwt-gnutls.h"
    },
    {
      "type": "modify",
      "old_id": "a2e9847f18654bec4cab4e00fe316210d5a393c5",
      "old_mode": 33188,
      "old_path": "libjwt/openssl/jwe.c",
      "new_id": "e6e86d001dfd4c87db72f20168588c7ade151c22",
      "new_mode": 33188,
      "new_path": "libjwt/openssl/jwe.c"
    },
    {
      "type": "modify",
      "old_id": "4c6070a025550120e675163bd59544d67026a629",
      "old_mode": 33188,
      "old_path": "libjwt/openssl/jwt-openssl.h",
      "new_id": "e493624a7dcf2200285d04e99a772de3cbdc91ca",
      "new_mode": 33188,
      "new_path": "libjwt/openssl/jwt-openssl.h"
    },
    {
      "type": "modify",
      "old_id": "d03c1f60eca224a917ab952e7543dece9194f22e",
      "old_mode": 33188,
      "old_path": "tests/jwe_rsa.c",
      "new_id": "ba6f789aa8d92a1450970425e544ad3157172e0a",
      "new_mode": 33188,
      "new_path": "tests/jwe_rsa.c"
    }
  ]
}