)]}'
{"id":"openvpn~1595","triplet_id":"openvpn~master~I6c2eda0e5bbb3a70b404f821e25ded81f0f5ddd5","project":"openvpn","branch":"master","topic":"ossl40","attention_set":{},"removed_from_attention_set":{"1000003":{"account":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"last_update":"2026-04-04 18:35:51.000000000","reason":"removed on reply"},"1000001":{"account":{"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"last_update":"2026-04-04 16:51:32.000000000","reason":"\u003cGERRIT_ACCOUNT_1000001\u003e replied on the change","reason_account":{"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."}}},"hashtags":[],"change_id":"I6c2eda0e5bbb3a70b404f821e25ded81f0f5ddd5","subject":"OpenSSL 4.0: Use X509_check_certificate_times instead of X509_cmp_time","status":"NEW","created":"2026-03-31 16:24:02.000000000","updated":"2026-04-04 18:35:51.000000000","submit_type":"CHERRY_PICK","submittable":false,"total_comment_count":5,"unresolved_comment_count":1,"has_review_started":true,"meta_rev_id":"7a7023da9f06806ea888bbd0cb1a12b0a523a202","_number":1595,"virtual_id_number":1595,"owner":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"actions":{},"labels":{"Code-Review":{"all":[{"value":0,"permitted_voting_range":{"min":-2,"max":2},"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."}],"values":{"-2":"This shall not be submitted","-1":"I would prefer this is not submitted as is"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me, approved"},"default_value":0}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."}],"CC":[{"_account_id":1000026,"name":"openvpn-devel","email":"openvpn-devel@lists.sourceforge.net","username":"openvpn-devel"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-03-31 16:24:05.000000000","updated_by":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"reviewer":{"_account_id":1000026,"name":"openvpn-devel","email":"openvpn-devel@lists.sourceforge.net","username":"openvpn-devel"},"state":"CC"},{"updated":"2026-04-01 10:34:38.000000000","updated_by":{"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"reviewer":{"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"state":"REVIEWER"}],"messages":[{"id":"359b5d723d51778da6337f1ab4ae86057728e81c","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"date":"2026-03-31 16:24:02.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"477e79a4dd894c2efbd536e8ca89c592c95baa12","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"date":"2026-03-31 22:49:56.000000000","message":"Uploaded patch set 2: Patch Set 1 was rebased.","accounts_in_message":[],"_revision_number":2},{"id":"1140488e3ea1af942fce40fdd43e13e997eb8c21","author":{"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"date":"2026-04-01 10:34:38.000000000","message":"Patch Set 2: Code-Review-1\n\n(2 comments)","accounts_in_message":[],"_revision_number":2},{"id":"42093d5c4f12ba87524bf22928b14f9645b3a073","author":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"date":"2026-04-01 11:34:25.000000000","message":"Patch Set 2:\n\n(2 comments)","accounts_in_message":[],"_revision_number":2},{"id":"c0869b00523eb0ad05e8b4aa02d1785d4a8d4552","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"date":"2026-04-01 11:56:52.000000000","message":"Uploaded patch set 3.\n\nOutdated Votes:\n* Code-Review-1 (copy condition: \"changekind:NO_CHANGE OR changekind:TRIVIAL_REBASE OR is:MIN\")\n","accounts_in_message":[],"_revision_number":3},{"id":"03a5d55010a8bc6e06ec5423d753ac94fa382738","author":{"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"date":"2026-04-04 16:51:32.000000000","message":"Patch Set 3:\n\n(1 comment)","accounts_in_message":[],"_revision_number":3},{"id":"344b4088aac0440c32eb2a3c75f1cad1ee8138e2","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"date":"2026-04-04 18:35:49.000000000","message":"Uploaded patch set 4: Patch Set 3 was rebased.","accounts_in_message":[],"_revision_number":4}],"current_revision_number":4,"current_revision":"8452125a387d17e6a7312592476011a75035a76c","revisions":{"555aeb1d047559c70b0d4c6a546618aafa085345":{"kind":"REWORK","_number":1,"created":"2026-03-31 16:24:02.000000000","uploader":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"ref":"refs/changes/95/1595/1","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/95/1595/1","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/95/1595/1 \u0026\u0026 git checkout -b change-1595 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/95/1595/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/95/1595/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/95/1595/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/95/1595/1","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/95/1595/1 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"9438baa6be79a4661b118b028639d5e951575649","subject":"ssl_openssl: Fix some CRL mixups"}],"author":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2026-03-31 11:37:14.000000000","tz":120},"committer":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2026-03-31 15:23:30.000000000","tz":120},"subject":"OpenSSL 4.0: Use X509_check_certificate_times instead of X509_cmp_time","message":"OpenSSL 4.0: Use X509_check_certificate_times instead of X509_cmp_time\n\nThe X509_cmp_time function is deprecated in OpenSSL 4.0. So we avoid it and\nuse the new API.\n\nChange-Id: I6c2eda0e5bbb3a70b404f821e25ded81f0f5ddd5\nSigned-off-by: Arne Schwabe \u003carne@rfc2549.org\u003e\n"},"branch":"refs/heads/master"},"9fc2372c9bc05a7db18f2ee4bfe2d3856345159e":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2026-03-31 22:49:56.000000000","uploader":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"ref":"refs/changes/95/1595/2","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/95/1595/2","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/95/1595/2 \u0026\u0026 git checkout -b change-1595 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/95/1595/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/95/1595/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/95/1595/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/95/1595/2","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/95/1595/2 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"f890b726f40bbec2f84a4c5f4bbb464fa0092011","subject":"ssl_openssl: Fix some CRL mixups"}],"author":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2026-03-31 11:37:14.000000000","tz":120},"committer":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2026-03-31 22:03:50.000000000","tz":120},"subject":"OpenSSL 4.0: Use X509_check_certificate_times instead of X509_cmp_time","message":"OpenSSL 4.0: Use X509_check_certificate_times instead of X509_cmp_time\n\nThe X509_cmp_time function is deprecated in OpenSSL 4.0. So we avoid it and\nuse the new API.\n\nChange-Id: I6c2eda0e5bbb3a70b404f821e25ded81f0f5ddd5\nSigned-off-by: Arne Schwabe \u003carne@rfc2549.org\u003e\n"},"branch":"refs/heads/master"},"eb5c944ddaab5c9b3240c7853b93863b2180dd55":{"kind":"REWORK","_number":3,"created":"2026-04-01 11:56:52.000000000","uploader":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"ref":"refs/changes/95/1595/3","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/95/1595/3","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/95/1595/3 \u0026\u0026 git checkout -b change-1595 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/95/1595/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/95/1595/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/95/1595/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/95/1595/3","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/95/1595/3 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"01a5e3908b0c8fe44105c7ab866c2eb729a35604","subject":"Use ASN1_BIT_STRING_get_bit to check for netscape certificate usage"}],"author":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2026-03-31 11:37:14.000000000","tz":120},"committer":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2026-04-01 11:33:55.000000000","tz":120},"subject":"OpenSSL 4.0: Use X509_check_certificate_times instead of X509_cmp_time","message":"OpenSSL 4.0: Use X509_check_certificate_times instead of X509_cmp_time\n\nThe X509_cmp_time function is deprecated in OpenSSL 4.0. So we avoid it and\nuse the new API.\n\nChange-Id: I6c2eda0e5bbb3a70b404f821e25ded81f0f5ddd5\nSigned-off-by: Arne Schwabe \u003carne@rfc2549.org\u003e\n"},"branch":"refs/heads/master"},"8452125a387d17e6a7312592476011a75035a76c":{"kind":"TRIVIAL_REBASE","_number":4,"created":"2026-04-04 18:35:49.000000000","uploader":{"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"ref":"refs/changes/95/1595/4","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/95/1595/4","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/95/1595/4 \u0026\u0026 git checkout -b change-1595 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/95/1595/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/95/1595/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/95/1595/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/95/1595/4","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/95/1595/4 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"ecda555404d39de180317b1eaa2944b40869ff46","subject":"doc: Remove some explanations for pre-2.3 configurations"}],"author":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2026-03-31 11:37:14.000000000","tz":120},"committer":{"name":"Frank Lichtenheld","email":"frank@lichtenheld.com","date":"2026-04-04 18:35:02.000000000","tz":120},"subject":"OpenSSL 4.0: Use X509_check_certificate_times instead of X509_cmp_time","message":"OpenSSL 4.0: Use X509_check_certificate_times instead of X509_cmp_time\n\nThe X509_cmp_time function is deprecated in OpenSSL 4.0. So we avoid it and\nuse the new API.\n\nChange-Id: I6c2eda0e5bbb3a70b404f821e25ded81f0f5ddd5\nSigned-off-by: Arne Schwabe \u003carne@rfc2549.org\u003e\n"},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"NOT_READY","labels":[{"label":"Code-Review","status":"NEED"}]},{"rule_name":"checks~ChecksSubmitRule","status":"OK"}],"submit_requirements":[{"name":"Code-Review","status":"UNSATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX -label:Code-Review\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Code-Review\u003dMAX","-label:Code-Review\u003dMIN"]}},{"name":"checks~ChecksSubmitRule","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"rule:checks~ChecksSubmitRule","fulfilled":true,"status":"PASS","passing_atoms":["checks~ChecksSubmitRule"],"failing_atoms":[]}}]}