grpc-flamingo 1.11.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (1318) hide show
  1. checksums.yaml +7 -0
  2. data/.yardopts +1 -0
  3. data/Makefile +23896 -0
  4. data/etc/roots.pem +4475 -0
  5. data/include/grpc/byte_buffer.h +27 -0
  6. data/include/grpc/byte_buffer_reader.h +26 -0
  7. data/include/grpc/census.h +40 -0
  8. data/include/grpc/compression.h +75 -0
  9. data/include/grpc/fork.h +26 -0
  10. data/include/grpc/grpc.h +469 -0
  11. data/include/grpc/grpc_cronet.h +38 -0
  12. data/include/grpc/grpc_posix.h +67 -0
  13. data/include/grpc/grpc_security.h +495 -0
  14. data/include/grpc/grpc_security_constants.h +107 -0
  15. data/include/grpc/impl/codegen/atm.h +95 -0
  16. data/include/grpc/impl/codegen/atm_gcc_atomic.h +91 -0
  17. data/include/grpc/impl/codegen/atm_gcc_sync.h +83 -0
  18. data/include/grpc/impl/codegen/atm_windows.h +126 -0
  19. data/include/grpc/impl/codegen/byte_buffer.h +88 -0
  20. data/include/grpc/impl/codegen/byte_buffer_reader.h +42 -0
  21. data/include/grpc/impl/codegen/compression_types.h +107 -0
  22. data/include/grpc/impl/codegen/connectivity_state.h +44 -0
  23. data/include/grpc/impl/codegen/fork.h +48 -0
  24. data/include/grpc/impl/codegen/gpr_slice.h +69 -0
  25. data/include/grpc/impl/codegen/gpr_types.h +59 -0
  26. data/include/grpc/impl/codegen/grpc_types.h +669 -0
  27. data/include/grpc/impl/codegen/port_platform.h +507 -0
  28. data/include/grpc/impl/codegen/propagation_bits.h +52 -0
  29. data/include/grpc/impl/codegen/slice.h +147 -0
  30. data/include/grpc/impl/codegen/status.h +153 -0
  31. data/include/grpc/impl/codegen/sync.h +63 -0
  32. data/include/grpc/impl/codegen/sync_custom.h +38 -0
  33. data/include/grpc/impl/codegen/sync_generic.h +48 -0
  34. data/include/grpc/impl/codegen/sync_posix.h +34 -0
  35. data/include/grpc/impl/codegen/sync_windows.h +36 -0
  36. data/include/grpc/load_reporting.h +48 -0
  37. data/include/grpc/module.modulemap +74 -0
  38. data/include/grpc/slice.h +172 -0
  39. data/include/grpc/slice_buffer.h +84 -0
  40. data/include/grpc/status.h +26 -0
  41. data/include/grpc/support/alloc.h +68 -0
  42. data/include/grpc/support/atm.h +26 -0
  43. data/include/grpc/support/atm_gcc_atomic.h +26 -0
  44. data/include/grpc/support/atm_gcc_sync.h +26 -0
  45. data/include/grpc/support/atm_windows.h +26 -0
  46. data/include/grpc/support/cpu.h +44 -0
  47. data/include/grpc/support/log.h +104 -0
  48. data/include/grpc/support/log_windows.h +38 -0
  49. data/include/grpc/support/port_platform.h +24 -0
  50. data/include/grpc/support/string_util.h +49 -0
  51. data/include/grpc/support/sync.h +298 -0
  52. data/include/grpc/support/sync_custom.h +26 -0
  53. data/include/grpc/support/sync_generic.h +26 -0
  54. data/include/grpc/support/sync_posix.h +26 -0
  55. data/include/grpc/support/sync_windows.h +26 -0
  56. data/include/grpc/support/thd_id.h +44 -0
  57. data/include/grpc/support/time.h +92 -0
  58. data/include/grpc/support/workaround_list.h +31 -0
  59. data/src/boringssl/err_data.c +1348 -0
  60. data/src/core/ext/census/grpc_context.cc +38 -0
  61. data/src/core/ext/filters/client_channel/backup_poller.cc +174 -0
  62. data/src/core/ext/filters/client_channel/backup_poller.h +35 -0
  63. data/src/core/ext/filters/client_channel/channel_connectivity.cc +248 -0
  64. data/src/core/ext/filters/client_channel/client_channel.cc +3209 -0
  65. data/src/core/ext/filters/client_channel/client_channel.h +57 -0
  66. data/src/core/ext/filters/client_channel/client_channel_factory.cc +67 -0
  67. data/src/core/ext/filters/client_channel/client_channel_factory.h +74 -0
  68. data/src/core/ext/filters/client_channel/client_channel_plugin.cc +62 -0
  69. data/src/core/ext/filters/client_channel/connector.cc +41 -0
  70. data/src/core/ext/filters/client_channel/connector.h +73 -0
  71. data/src/core/ext/filters/client_channel/http_connect_handshaker.cc +370 -0
  72. data/src/core/ext/filters/client_channel/http_connect_handshaker.h +34 -0
  73. data/src/core/ext/filters/client_channel/http_proxy.cc +195 -0
  74. data/src/core/ext/filters/client_channel/http_proxy.h +24 -0
  75. data/src/core/ext/filters/client_channel/lb_policy/grpclb/client_load_reporting_filter.cc +138 -0
  76. data/src/core/ext/filters/client_channel/lb_policy/grpclb/client_load_reporting_filter.h +29 -0
  77. data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb.cc +1906 -0
  78. data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_channel.h +36 -0
  79. data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_channel_secure.cc +108 -0
  80. data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_client_stats.cc +152 -0
  81. data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_client_stats.h +67 -0
  82. data/src/core/ext/filters/client_channel/lb_policy/grpclb/load_balancer_api.cc +304 -0
  83. data/src/core/ext/filters/client_channel/lb_policy/grpclb/load_balancer_api.h +88 -0
  84. data/src/core/ext/filters/client_channel/lb_policy/grpclb/proto/grpc/lb/v1/load_balancer.pb.c +102 -0
  85. data/src/core/ext/filters/client_channel/lb_policy/grpclb/proto/grpc/lb/v1/load_balancer.pb.h +190 -0
  86. data/src/core/ext/filters/client_channel/lb_policy/pick_first/pick_first.cc +591 -0
  87. data/src/core/ext/filters/client_channel/lb_policy/round_robin/round_robin.cc +687 -0
  88. data/src/core/ext/filters/client_channel/lb_policy/subchannel_list.cc +253 -0
  89. data/src/core/ext/filters/client_channel/lb_policy/subchannel_list.h +136 -0
  90. data/src/core/ext/filters/client_channel/lb_policy.cc +59 -0
  91. data/src/core/ext/filters/client_channel/lb_policy.h +201 -0
  92. data/src/core/ext/filters/client_channel/lb_policy_factory.cc +155 -0
  93. data/src/core/ext/filters/client_channel/lb_policy_factory.h +127 -0
  94. data/src/core/ext/filters/client_channel/lb_policy_registry.cc +97 -0
  95. data/src/core/ext/filters/client_channel/lb_policy_registry.h +54 -0
  96. data/src/core/ext/filters/client_channel/method_params.cc +178 -0
  97. data/src/core/ext/filters/client_channel/method_params.h +74 -0
  98. data/src/core/ext/filters/client_channel/parse_address.cc +192 -0
  99. data/src/core/ext/filters/client_channel/parse_address.h +50 -0
  100. data/src/core/ext/filters/client_channel/proxy_mapper.cc +48 -0
  101. data/src/core/ext/filters/client_channel/proxy_mapper.h +74 -0
  102. data/src/core/ext/filters/client_channel/proxy_mapper_registry.cc +122 -0
  103. data/src/core/ext/filters/client_channel/proxy_mapper_registry.h +44 -0
  104. data/src/core/ext/filters/client_channel/resolver/dns/c_ares/dns_resolver_ares.cc +493 -0
  105. data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver.h +53 -0
  106. data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver_posix.cc +351 -0
  107. data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper.cc +593 -0
  108. data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper.h +74 -0
  109. data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper_fallback.cc +59 -0
  110. data/src/core/ext/filters/client_channel/resolver/dns/native/dns_resolver.cc +340 -0
  111. data/src/core/ext/filters/client_channel/resolver/fake/fake_resolver.cc +297 -0
  112. data/src/core/ext/filters/client_channel/resolver/fake/fake_resolver.h +83 -0
  113. data/src/core/ext/filters/client_channel/resolver/sockaddr/sockaddr_resolver.cc +214 -0
  114. data/src/core/ext/filters/client_channel/resolver.cc +35 -0
  115. data/src/core/ext/filters/client_channel/resolver.h +134 -0
  116. data/src/core/ext/filters/client_channel/resolver_factory.h +71 -0
  117. data/src/core/ext/filters/client_channel/resolver_registry.cc +178 -0
  118. data/src/core/ext/filters/client_channel/resolver_registry.h +83 -0
  119. data/src/core/ext/filters/client_channel/retry_throttle.cc +191 -0
  120. data/src/core/ext/filters/client_channel/retry_throttle.h +77 -0
  121. data/src/core/ext/filters/client_channel/subchannel.cc +815 -0
  122. data/src/core/ext/filters/client_channel/subchannel.h +183 -0
  123. data/src/core/ext/filters/client_channel/subchannel_index.cc +254 -0
  124. data/src/core/ext/filters/client_channel/subchannel_index.h +79 -0
  125. data/src/core/ext/filters/client_channel/uri_parser.cc +314 -0
  126. data/src/core/ext/filters/client_channel/uri_parser.h +50 -0
  127. data/src/core/ext/filters/deadline/deadline_filter.cc +386 -0
  128. data/src/core/ext/filters/deadline/deadline_filter.h +93 -0
  129. data/src/core/ext/filters/http/client/http_client_filter.cc +558 -0
  130. data/src/core/ext/filters/http/client/http_client_filter.h +31 -0
  131. data/src/core/ext/filters/http/client_authority_filter.cc +156 -0
  132. data/src/core/ext/filters/http/client_authority_filter.h +34 -0
  133. data/src/core/ext/filters/http/http_filters_plugin.cc +89 -0
  134. data/src/core/ext/filters/http/message_compress/message_compress_filter.cc +499 -0
  135. data/src/core/ext/filters/http/message_compress/message_compress_filter.h +53 -0
  136. data/src/core/ext/filters/http/server/http_server_filter.cc +434 -0
  137. data/src/core/ext/filters/http/server/http_server_filter.h +29 -0
  138. data/src/core/ext/filters/load_reporting/server_load_reporting_filter.cc +222 -0
  139. data/src/core/ext/filters/load_reporting/server_load_reporting_filter.h +30 -0
  140. data/src/core/ext/filters/load_reporting/server_load_reporting_plugin.cc +71 -0
  141. data/src/core/ext/filters/load_reporting/server_load_reporting_plugin.h +61 -0
  142. data/src/core/ext/filters/max_age/max_age_filter.cc +543 -0
  143. data/src/core/ext/filters/max_age/max_age_filter.h +26 -0
  144. data/src/core/ext/filters/message_size/message_size_filter.cc +324 -0
  145. data/src/core/ext/filters/message_size/message_size_filter.h +26 -0
  146. data/src/core/ext/filters/workarounds/workaround_cronet_compression_filter.cc +208 -0
  147. data/src/core/ext/filters/workarounds/workaround_cronet_compression_filter.h +27 -0
  148. data/src/core/ext/filters/workarounds/workaround_utils.cc +53 -0
  149. data/src/core/ext/filters/workarounds/workaround_utils.h +39 -0
  150. data/src/core/ext/transport/chttp2/alpn/alpn.cc +44 -0
  151. data/src/core/ext/transport/chttp2/alpn/alpn.h +36 -0
  152. data/src/core/ext/transport/chttp2/client/authority.cc +42 -0
  153. data/src/core/ext/transport/chttp2/client/authority.h +36 -0
  154. data/src/core/ext/transport/chttp2/client/chttp2_connector.cc +229 -0
  155. data/src/core/ext/transport/chttp2/client/chttp2_connector.h +28 -0
  156. data/src/core/ext/transport/chttp2/client/insecure/channel_create.cc +110 -0
  157. data/src/core/ext/transport/chttp2/client/insecure/channel_create_posix.cc +79 -0
  158. data/src/core/ext/transport/chttp2/client/secure/secure_channel_create.cc +230 -0
  159. data/src/core/ext/transport/chttp2/server/chttp2_server.cc +353 -0
  160. data/src/core/ext/transport/chttp2/server/chttp2_server.h +33 -0
  161. data/src/core/ext/transport/chttp2/server/insecure/server_chttp2.cc +45 -0
  162. data/src/core/ext/transport/chttp2/server/insecure/server_chttp2_posix.cc +74 -0
  163. data/src/core/ext/transport/chttp2/server/secure/server_secure_chttp2.cc +89 -0
  164. data/src/core/ext/transport/chttp2/transport/bin_decoder.cc +249 -0
  165. data/src/core/ext/transport/chttp2/transport/bin_decoder.h +56 -0
  166. data/src/core/ext/transport/chttp2/transport/bin_encoder.cc +231 -0
  167. data/src/core/ext/transport/chttp2/transport/bin_encoder.h +41 -0
  168. data/src/core/ext/transport/chttp2/transport/chttp2_plugin.cc +35 -0
  169. data/src/core/ext/transport/chttp2/transport/chttp2_transport.cc +3102 -0
  170. data/src/core/ext/transport/chttp2/transport/chttp2_transport.h +45 -0
  171. data/src/core/ext/transport/chttp2/transport/flow_control.cc +405 -0
  172. data/src/core/ext/transport/chttp2/transport/flow_control.h +482 -0
  173. data/src/core/ext/transport/chttp2/transport/frame.h +47 -0
  174. data/src/core/ext/transport/chttp2/transport/frame_data.cc +314 -0
  175. data/src/core/ext/transport/chttp2/transport/frame_data.h +84 -0
  176. data/src/core/ext/transport/chttp2/transport/frame_goaway.cc +186 -0
  177. data/src/core/ext/transport/chttp2/transport/frame_goaway.h +62 -0
  178. data/src/core/ext/transport/chttp2/transport/frame_ping.cc +131 -0
  179. data/src/core/ext/transport/chttp2/transport/frame_ping.h +45 -0
  180. data/src/core/ext/transport/chttp2/transport/frame_rst_stream.cc +112 -0
  181. data/src/core/ext/transport/chttp2/transport/frame_rst_stream.h +43 -0
  182. data/src/core/ext/transport/chttp2/transport/frame_settings.cc +238 -0
  183. data/src/core/ext/transport/chttp2/transport/frame_settings.h +60 -0
  184. data/src/core/ext/transport/chttp2/transport/frame_window_update.cc +122 -0
  185. data/src/core/ext/transport/chttp2/transport/frame_window_update.h +45 -0
  186. data/src/core/ext/transport/chttp2/transport/hpack_encoder.cc +699 -0
  187. data/src/core/ext/transport/chttp2/transport/hpack_encoder.h +95 -0
  188. data/src/core/ext/transport/chttp2/transport/hpack_parser.cc +1680 -0
  189. data/src/core/ext/transport/chttp2/transport/hpack_parser.h +109 -0
  190. data/src/core/ext/transport/chttp2/transport/hpack_table.cc +368 -0
  191. data/src/core/ext/transport/chttp2/transport/hpack_table.h +95 -0
  192. data/src/core/ext/transport/chttp2/transport/http2_settings.cc +62 -0
  193. data/src/core/ext/transport/chttp2/transport/http2_settings.h +62 -0
  194. data/src/core/ext/transport/chttp2/transport/huffsyms.cc +92 -0
  195. data/src/core/ext/transport/chttp2/transport/huffsyms.h +33 -0
  196. data/src/core/ext/transport/chttp2/transport/incoming_metadata.cc +73 -0
  197. data/src/core/ext/transport/chttp2/transport/incoming_metadata.h +49 -0
  198. data/src/core/ext/transport/chttp2/transport/internal.h +799 -0
  199. data/src/core/ext/transport/chttp2/transport/parsing.cc +745 -0
  200. data/src/core/ext/transport/chttp2/transport/stream_lists.cc +216 -0
  201. data/src/core/ext/transport/chttp2/transport/stream_map.cc +167 -0
  202. data/src/core/ext/transport/chttp2/transport/stream_map.h +68 -0
  203. data/src/core/ext/transport/chttp2/transport/varint.cc +56 -0
  204. data/src/core/ext/transport/chttp2/transport/varint.h +60 -0
  205. data/src/core/ext/transport/chttp2/transport/writing.cc +641 -0
  206. data/src/core/ext/transport/inproc/inproc_plugin.cc +28 -0
  207. data/src/core/ext/transport/inproc/inproc_transport.cc +1240 -0
  208. data/src/core/ext/transport/inproc/inproc_transport.h +35 -0
  209. data/src/core/lib/avl/avl.cc +306 -0
  210. data/src/core/lib/avl/avl.h +94 -0
  211. data/src/core/lib/backoff/backoff.cc +78 -0
  212. data/src/core/lib/backoff/backoff.h +89 -0
  213. data/src/core/lib/channel/channel_args.cc +413 -0
  214. data/src/core/lib/channel/channel_args.h +127 -0
  215. data/src/core/lib/channel/channel_stack.cc +258 -0
  216. data/src/core/lib/channel/channel_stack.h +280 -0
  217. data/src/core/lib/channel/channel_stack_builder.cc +314 -0
  218. data/src/core/lib/channel/channel_stack_builder.h +160 -0
  219. data/src/core/lib/channel/channel_trace.cc +239 -0
  220. data/src/core/lib/channel/channel_trace.h +133 -0
  221. data/src/core/lib/channel/channel_trace_registry.cc +80 -0
  222. data/src/core/lib/channel/channel_trace_registry.h +43 -0
  223. data/src/core/lib/channel/connected_channel.cc +236 -0
  224. data/src/core/lib/channel/connected_channel.h +34 -0
  225. data/src/core/lib/channel/context.h +49 -0
  226. data/src/core/lib/channel/handshaker.cc +259 -0
  227. data/src/core/lib/channel/handshaker.h +166 -0
  228. data/src/core/lib/channel/handshaker_factory.cc +41 -0
  229. data/src/core/lib/channel/handshaker_factory.h +50 -0
  230. data/src/core/lib/channel/handshaker_registry.cc +97 -0
  231. data/src/core/lib/channel/handshaker_registry.h +48 -0
  232. data/src/core/lib/channel/status_util.cc +100 -0
  233. data/src/core/lib/channel/status_util.h +58 -0
  234. data/src/core/lib/compression/algorithm_metadata.h +61 -0
  235. data/src/core/lib/compression/compression.cc +174 -0
  236. data/src/core/lib/compression/compression_internal.cc +276 -0
  237. data/src/core/lib/compression/compression_internal.h +88 -0
  238. data/src/core/lib/compression/message_compress.cc +187 -0
  239. data/src/core/lib/compression/message_compress.h +40 -0
  240. data/src/core/lib/compression/stream_compression.cc +79 -0
  241. data/src/core/lib/compression/stream_compression.h +116 -0
  242. data/src/core/lib/compression/stream_compression_gzip.cc +230 -0
  243. data/src/core/lib/compression/stream_compression_gzip.h +28 -0
  244. data/src/core/lib/compression/stream_compression_identity.cc +94 -0
  245. data/src/core/lib/compression/stream_compression_identity.h +29 -0
  246. data/src/core/lib/debug/stats.cc +178 -0
  247. data/src/core/lib/debug/stats.h +61 -0
  248. data/src/core/lib/debug/stats_data.cc +682 -0
  249. data/src/core/lib/debug/stats_data.h +435 -0
  250. data/src/core/lib/debug/trace.cc +144 -0
  251. data/src/core/lib/debug/trace.h +104 -0
  252. data/src/core/lib/gpr/alloc.cc +99 -0
  253. data/src/core/lib/gpr/arena.cc +152 -0
  254. data/src/core/lib/gpr/arena.h +41 -0
  255. data/src/core/lib/gpr/atm.cc +35 -0
  256. data/src/core/lib/gpr/cpu_iphone.cc +36 -0
  257. data/src/core/lib/gpr/cpu_linux.cc +82 -0
  258. data/src/core/lib/gpr/cpu_posix.cc +81 -0
  259. data/src/core/lib/gpr/cpu_windows.cc +33 -0
  260. data/src/core/lib/gpr/env.h +43 -0
  261. data/src/core/lib/gpr/env_linux.cc +82 -0
  262. data/src/core/lib/gpr/env_posix.cc +47 -0
  263. data/src/core/lib/gpr/env_windows.cc +72 -0
  264. data/src/core/lib/gpr/fork.cc +78 -0
  265. data/src/core/lib/gpr/fork.h +35 -0
  266. data/src/core/lib/gpr/host_port.cc +98 -0
  267. data/src/core/lib/gpr/host_port.h +43 -0
  268. data/src/core/lib/gpr/log.cc +96 -0
  269. data/src/core/lib/gpr/log_android.cc +72 -0
  270. data/src/core/lib/gpr/log_linux.cc +93 -0
  271. data/src/core/lib/gpr/log_posix.cc +90 -0
  272. data/src/core/lib/gpr/log_windows.cc +97 -0
  273. data/src/core/lib/gpr/mpscq.cc +117 -0
  274. data/src/core/lib/gpr/mpscq.h +86 -0
  275. data/src/core/lib/gpr/murmur_hash.cc +80 -0
  276. data/src/core/lib/gpr/murmur_hash.h +29 -0
  277. data/src/core/lib/gpr/spinlock.h +46 -0
  278. data/src/core/lib/gpr/string.cc +319 -0
  279. data/src/core/lib/gpr/string.h +109 -0
  280. data/src/core/lib/gpr/string_posix.cc +72 -0
  281. data/src/core/lib/gpr/string_util_windows.cc +82 -0
  282. data/src/core/lib/gpr/string_windows.cc +69 -0
  283. data/src/core/lib/gpr/string_windows.h +32 -0
  284. data/src/core/lib/gpr/sync.cc +124 -0
  285. data/src/core/lib/gpr/sync_posix.cc +107 -0
  286. data/src/core/lib/gpr/sync_windows.cc +118 -0
  287. data/src/core/lib/gpr/time.cc +251 -0
  288. data/src/core/lib/gpr/time_posix.cc +167 -0
  289. data/src/core/lib/gpr/time_precise.cc +78 -0
  290. data/src/core/lib/gpr/time_precise.h +29 -0
  291. data/src/core/lib/gpr/time_windows.cc +98 -0
  292. data/src/core/lib/gpr/tls.h +68 -0
  293. data/src/core/lib/gpr/tls_gcc.h +52 -0
  294. data/src/core/lib/gpr/tls_msvc.h +52 -0
  295. data/src/core/lib/gpr/tls_pthread.cc +30 -0
  296. data/src/core/lib/gpr/tls_pthread.h +56 -0
  297. data/src/core/lib/gpr/tmpfile.h +32 -0
  298. data/src/core/lib/gpr/tmpfile_msys.cc +58 -0
  299. data/src/core/lib/gpr/tmpfile_posix.cc +70 -0
  300. data/src/core/lib/gpr/tmpfile_windows.cc +69 -0
  301. data/src/core/lib/gpr/useful.h +65 -0
  302. data/src/core/lib/gpr/wrap_memcpy.cc +42 -0
  303. data/src/core/lib/gprpp/abstract.h +34 -0
  304. data/src/core/lib/gprpp/atomic.h +30 -0
  305. data/src/core/lib/gprpp/atomic_with_atm.h +57 -0
  306. data/src/core/lib/gprpp/atomic_with_std.h +35 -0
  307. data/src/core/lib/gprpp/debug_location.h +52 -0
  308. data/src/core/lib/gprpp/inlined_vector.h +136 -0
  309. data/src/core/lib/gprpp/manual_constructor.h +213 -0
  310. data/src/core/lib/gprpp/memory.h +111 -0
  311. data/src/core/lib/gprpp/orphanable.h +199 -0
  312. data/src/core/lib/gprpp/ref_counted.h +169 -0
  313. data/src/core/lib/gprpp/ref_counted_ptr.h +112 -0
  314. data/src/core/lib/gprpp/thd.h +135 -0
  315. data/src/core/lib/gprpp/thd_posix.cc +209 -0
  316. data/src/core/lib/gprpp/thd_windows.cc +162 -0
  317. data/src/core/lib/http/format_request.cc +122 -0
  318. data/src/core/lib/http/format_request.h +34 -0
  319. data/src/core/lib/http/httpcli.cc +303 -0
  320. data/src/core/lib/http/httpcli.h +127 -0
  321. data/src/core/lib/http/httpcli_security_connector.cc +202 -0
  322. data/src/core/lib/http/parser.cc +371 -0
  323. data/src/core/lib/http/parser.h +113 -0
  324. data/src/core/lib/iomgr/block_annotate.h +57 -0
  325. data/src/core/lib/iomgr/call_combiner.cc +212 -0
  326. data/src/core/lib/iomgr/call_combiner.h +112 -0
  327. data/src/core/lib/iomgr/closure.h +351 -0
  328. data/src/core/lib/iomgr/combiner.cc +358 -0
  329. data/src/core/lib/iomgr/combiner.h +66 -0
  330. data/src/core/lib/iomgr/endpoint.cc +63 -0
  331. data/src/core/lib/iomgr/endpoint.h +98 -0
  332. data/src/core/lib/iomgr/endpoint_pair.h +34 -0
  333. data/src/core/lib/iomgr/endpoint_pair_posix.cc +73 -0
  334. data/src/core/lib/iomgr/endpoint_pair_uv.cc +40 -0
  335. data/src/core/lib/iomgr/endpoint_pair_windows.cc +87 -0
  336. data/src/core/lib/iomgr/error.cc +793 -0
  337. data/src/core/lib/iomgr/error.h +207 -0
  338. data/src/core/lib/iomgr/error_internal.h +63 -0
  339. data/src/core/lib/iomgr/ev_epoll1_linux.cc +1248 -0
  340. data/src/core/lib/iomgr/ev_epoll1_linux.h +31 -0
  341. data/src/core/lib/iomgr/ev_epollex_linux.cc +1494 -0
  342. data/src/core/lib/iomgr/ev_epollex_linux.h +30 -0
  343. data/src/core/lib/iomgr/ev_epollsig_linux.cc +1735 -0
  344. data/src/core/lib/iomgr/ev_epollsig_linux.h +35 -0
  345. data/src/core/lib/iomgr/ev_poll_posix.cc +1758 -0
  346. data/src/core/lib/iomgr/ev_poll_posix.h +29 -0
  347. data/src/core/lib/iomgr/ev_posix.cc +330 -0
  348. data/src/core/lib/iomgr/ev_posix.h +145 -0
  349. data/src/core/lib/iomgr/ev_windows.cc +30 -0
  350. data/src/core/lib/iomgr/exec_ctx.cc +147 -0
  351. data/src/core/lib/iomgr/exec_ctx.h +210 -0
  352. data/src/core/lib/iomgr/executor.cc +301 -0
  353. data/src/core/lib/iomgr/executor.h +50 -0
  354. data/src/core/lib/iomgr/fork_posix.cc +89 -0
  355. data/src/core/lib/iomgr/fork_windows.cc +41 -0
  356. data/src/core/lib/iomgr/gethostname.h +26 -0
  357. data/src/core/lib/iomgr/gethostname_fallback.cc +30 -0
  358. data/src/core/lib/iomgr/gethostname_host_name_max.cc +40 -0
  359. data/src/core/lib/iomgr/gethostname_sysconf.cc +40 -0
  360. data/src/core/lib/iomgr/iocp_windows.cc +152 -0
  361. data/src/core/lib/iomgr/iocp_windows.h +48 -0
  362. data/src/core/lib/iomgr/iomgr.cc +178 -0
  363. data/src/core/lib/iomgr/iomgr.h +36 -0
  364. data/src/core/lib/iomgr/iomgr_custom.cc +63 -0
  365. data/src/core/lib/iomgr/iomgr_custom.h +47 -0
  366. data/src/core/lib/iomgr/iomgr_internal.cc +43 -0
  367. data/src/core/lib/iomgr/iomgr_internal.h +57 -0
  368. data/src/core/lib/iomgr/iomgr_posix.cc +67 -0
  369. data/src/core/lib/iomgr/iomgr_posix.h +26 -0
  370. data/src/core/lib/iomgr/iomgr_uv.cc +40 -0
  371. data/src/core/lib/iomgr/iomgr_windows.cc +87 -0
  372. data/src/core/lib/iomgr/is_epollexclusive_available.cc +104 -0
  373. data/src/core/lib/iomgr/is_epollexclusive_available.h +36 -0
  374. data/src/core/lib/iomgr/load_file.cc +80 -0
  375. data/src/core/lib/iomgr/load_file.h +35 -0
  376. data/src/core/lib/iomgr/lockfree_event.cc +250 -0
  377. data/src/core/lib/iomgr/lockfree_event.h +72 -0
  378. data/src/core/lib/iomgr/nameser.h +106 -0
  379. data/src/core/lib/iomgr/network_status_tracker.cc +36 -0
  380. data/src/core/lib/iomgr/network_status_tracker.h +32 -0
  381. data/src/core/lib/iomgr/polling_entity.cc +87 -0
  382. data/src/core/lib/iomgr/polling_entity.h +68 -0
  383. data/src/core/lib/iomgr/pollset.cc +56 -0
  384. data/src/core/lib/iomgr/pollset.h +99 -0
  385. data/src/core/lib/iomgr/pollset_custom.cc +106 -0
  386. data/src/core/lib/iomgr/pollset_custom.h +35 -0
  387. data/src/core/lib/iomgr/pollset_set.cc +55 -0
  388. data/src/core/lib/iomgr/pollset_set.h +55 -0
  389. data/src/core/lib/iomgr/pollset_set_custom.cc +48 -0
  390. data/src/core/lib/iomgr/pollset_set_custom.h +26 -0
  391. data/src/core/lib/iomgr/pollset_set_windows.cc +51 -0
  392. data/src/core/lib/iomgr/pollset_set_windows.h +26 -0
  393. data/src/core/lib/iomgr/pollset_uv.cc +93 -0
  394. data/src/core/lib/iomgr/pollset_windows.cc +229 -0
  395. data/src/core/lib/iomgr/pollset_windows.h +70 -0
  396. data/src/core/lib/iomgr/port.h +147 -0
  397. data/src/core/lib/iomgr/resolve_address.cc +50 -0
  398. data/src/core/lib/iomgr/resolve_address.h +83 -0
  399. data/src/core/lib/iomgr/resolve_address_custom.cc +187 -0
  400. data/src/core/lib/iomgr/resolve_address_custom.h +43 -0
  401. data/src/core/lib/iomgr/resolve_address_posix.cc +180 -0
  402. data/src/core/lib/iomgr/resolve_address_windows.cc +165 -0
  403. data/src/core/lib/iomgr/resource_quota.cc +871 -0
  404. data/src/core/lib/iomgr/resource_quota.h +142 -0
  405. data/src/core/lib/iomgr/sockaddr.h +32 -0
  406. data/src/core/lib/iomgr/sockaddr_custom.h +54 -0
  407. data/src/core/lib/iomgr/sockaddr_posix.h +55 -0
  408. data/src/core/lib/iomgr/sockaddr_utils.cc +298 -0
  409. data/src/core/lib/iomgr/sockaddr_utils.h +84 -0
  410. data/src/core/lib/iomgr/sockaddr_windows.h +55 -0
  411. data/src/core/lib/iomgr/socket_factory_posix.cc +94 -0
  412. data/src/core/lib/iomgr/socket_factory_posix.h +69 -0
  413. data/src/core/lib/iomgr/socket_mutator.cc +83 -0
  414. data/src/core/lib/iomgr/socket_mutator.h +61 -0
  415. data/src/core/lib/iomgr/socket_utils.h +38 -0
  416. data/src/core/lib/iomgr/socket_utils_common_posix.cc +327 -0
  417. data/src/core/lib/iomgr/socket_utils_linux.cc +43 -0
  418. data/src/core/lib/iomgr/socket_utils_posix.cc +59 -0
  419. data/src/core/lib/iomgr/socket_utils_posix.h +134 -0
  420. data/src/core/lib/iomgr/socket_utils_uv.cc +45 -0
  421. data/src/core/lib/iomgr/socket_utils_windows.cc +43 -0
  422. data/src/core/lib/iomgr/socket_windows.cc +151 -0
  423. data/src/core/lib/iomgr/socket_windows.h +113 -0
  424. data/src/core/lib/iomgr/sys_epoll_wrapper.h +30 -0
  425. data/src/core/lib/iomgr/tcp_client.cc +36 -0
  426. data/src/core/lib/iomgr/tcp_client.h +52 -0
  427. data/src/core/lib/iomgr/tcp_client_custom.cc +151 -0
  428. data/src/core/lib/iomgr/tcp_client_posix.cc +359 -0
  429. data/src/core/lib/iomgr/tcp_client_posix.h +68 -0
  430. data/src/core/lib/iomgr/tcp_client_windows.cc +231 -0
  431. data/src/core/lib/iomgr/tcp_custom.cc +365 -0
  432. data/src/core/lib/iomgr/tcp_custom.h +81 -0
  433. data/src/core/lib/iomgr/tcp_posix.cc +814 -0
  434. data/src/core/lib/iomgr/tcp_posix.h +57 -0
  435. data/src/core/lib/iomgr/tcp_server.cc +73 -0
  436. data/src/core/lib/iomgr/tcp_server.h +122 -0
  437. data/src/core/lib/iomgr/tcp_server_custom.cc +472 -0
  438. data/src/core/lib/iomgr/tcp_server_posix.cc +582 -0
  439. data/src/core/lib/iomgr/tcp_server_utils_posix.h +122 -0
  440. data/src/core/lib/iomgr/tcp_server_utils_posix_common.cc +208 -0
  441. data/src/core/lib/iomgr/tcp_server_utils_posix_ifaddrs.cc +184 -0
  442. data/src/core/lib/iomgr/tcp_server_utils_posix_noifaddrs.cc +36 -0
  443. data/src/core/lib/iomgr/tcp_server_windows.cc +559 -0
  444. data/src/core/lib/iomgr/tcp_uv.cc +417 -0
  445. data/src/core/lib/iomgr/tcp_windows.cc +455 -0
  446. data/src/core/lib/iomgr/tcp_windows.h +51 -0
  447. data/src/core/lib/iomgr/time_averaged_stats.cc +64 -0
  448. data/src/core/lib/iomgr/time_averaged_stats.h +73 -0
  449. data/src/core/lib/iomgr/timer.cc +45 -0
  450. data/src/core/lib/iomgr/timer.h +125 -0
  451. data/src/core/lib/iomgr/timer_custom.cc +93 -0
  452. data/src/core/lib/iomgr/timer_custom.h +43 -0
  453. data/src/core/lib/iomgr/timer_generic.cc +663 -0
  454. data/src/core/lib/iomgr/timer_heap.cc +135 -0
  455. data/src/core/lib/iomgr/timer_heap.h +44 -0
  456. data/src/core/lib/iomgr/timer_manager.cc +347 -0
  457. data/src/core/lib/iomgr/timer_manager.h +39 -0
  458. data/src/core/lib/iomgr/timer_uv.cc +63 -0
  459. data/src/core/lib/iomgr/udp_server.cc +692 -0
  460. data/src/core/lib/iomgr/udp_server.h +103 -0
  461. data/src/core/lib/iomgr/unix_sockets_posix.cc +104 -0
  462. data/src/core/lib/iomgr/unix_sockets_posix.h +43 -0
  463. data/src/core/lib/iomgr/unix_sockets_posix_noop.cc +49 -0
  464. data/src/core/lib/iomgr/wakeup_fd_cv.cc +107 -0
  465. data/src/core/lib/iomgr/wakeup_fd_cv.h +69 -0
  466. data/src/core/lib/iomgr/wakeup_fd_eventfd.cc +83 -0
  467. data/src/core/lib/iomgr/wakeup_fd_nospecial.cc +38 -0
  468. data/src/core/lib/iomgr/wakeup_fd_pipe.cc +100 -0
  469. data/src/core/lib/iomgr/wakeup_fd_pipe.h +28 -0
  470. data/src/core/lib/iomgr/wakeup_fd_posix.cc +87 -0
  471. data/src/core/lib/iomgr/wakeup_fd_posix.h +96 -0
  472. data/src/core/lib/json/json.cc +86 -0
  473. data/src/core/lib/json/json.h +94 -0
  474. data/src/core/lib/json/json_common.h +34 -0
  475. data/src/core/lib/json/json_reader.cc +663 -0
  476. data/src/core/lib/json/json_reader.h +146 -0
  477. data/src/core/lib/json/json_string.cc +367 -0
  478. data/src/core/lib/json/json_writer.cc +245 -0
  479. data/src/core/lib/json/json_writer.h +84 -0
  480. data/src/core/lib/profiling/basic_timers.cc +286 -0
  481. data/src/core/lib/profiling/stap_timers.cc +50 -0
  482. data/src/core/lib/profiling/timers.h +94 -0
  483. data/src/core/lib/security/context/security_context.cc +348 -0
  484. data/src/core/lib/security/context/security_context.h +115 -0
  485. data/src/core/lib/security/credentials/alts/alts_credentials.cc +119 -0
  486. data/src/core/lib/security/credentials/alts/alts_credentials.h +102 -0
  487. data/src/core/lib/security/credentials/alts/check_gcp_environment.cc +72 -0
  488. data/src/core/lib/security/credentials/alts/check_gcp_environment.h +57 -0
  489. data/src/core/lib/security/credentials/alts/check_gcp_environment_linux.cc +67 -0
  490. data/src/core/lib/security/credentials/alts/check_gcp_environment_no_op.cc +33 -0
  491. data/src/core/lib/security/credentials/alts/check_gcp_environment_windows.cc +114 -0
  492. data/src/core/lib/security/credentials/alts/grpc_alts_credentials_client_options.cc +126 -0
  493. data/src/core/lib/security/credentials/alts/grpc_alts_credentials_options.cc +46 -0
  494. data/src/core/lib/security/credentials/alts/grpc_alts_credentials_options.h +112 -0
  495. data/src/core/lib/security/credentials/alts/grpc_alts_credentials_server_options.cc +58 -0
  496. data/src/core/lib/security/credentials/composite/composite_credentials.cc +269 -0
  497. data/src/core/lib/security/credentials/composite/composite_credentials.h +59 -0
  498. data/src/core/lib/security/credentials/credentials.cc +286 -0
  499. data/src/core/lib/security/credentials/credentials.h +246 -0
  500. data/src/core/lib/security/credentials/credentials_metadata.cc +62 -0
  501. data/src/core/lib/security/credentials/fake/fake_credentials.cc +136 -0
  502. data/src/core/lib/security/credentials/fake/fake_credentials.h +64 -0
  503. data/src/core/lib/security/credentials/google_default/credentials_generic.cc +41 -0
  504. data/src/core/lib/security/credentials/google_default/google_default_credentials.cc +322 -0
  505. data/src/core/lib/security/credentials/google_default/google_default_credentials.h +45 -0
  506. data/src/core/lib/security/credentials/iam/iam_credentials.cc +86 -0
  507. data/src/core/lib/security/credentials/iam/iam_credentials.h +31 -0
  508. data/src/core/lib/security/credentials/jwt/json_token.cc +314 -0
  509. data/src/core/lib/security/credentials/jwt/json_token.h +75 -0
  510. data/src/core/lib/security/credentials/jwt/jwt_credentials.cc +190 -0
  511. data/src/core/lib/security/credentials/jwt/jwt_credentials.h +49 -0
  512. data/src/core/lib/security/credentials/jwt/jwt_verifier.cc +934 -0
  513. data/src/core/lib/security/credentials/jwt/jwt_verifier.h +123 -0
  514. data/src/core/lib/security/credentials/oauth2/oauth2_credentials.cc +532 -0
  515. data/src/core/lib/security/credentials/oauth2/oauth2_credentials.h +106 -0
  516. data/src/core/lib/security/credentials/plugin/plugin_credentials.cc +271 -0
  517. data/src/core/lib/security/credentials/plugin/plugin_credentials.h +46 -0
  518. data/src/core/lib/security/credentials/ssl/ssl_credentials.cc +349 -0
  519. data/src/core/lib/security/credentials/ssl/ssl_credentials.h +54 -0
  520. data/src/core/lib/security/security_connector/alts_security_connector.cc +287 -0
  521. data/src/core/lib/security/security_connector/alts_security_connector.h +69 -0
  522. data/src/core/lib/security/security_connector/security_connector.cc +1200 -0
  523. data/src/core/lib/security/security_connector/security_connector.h +283 -0
  524. data/src/core/lib/security/transport/auth_filters.h +37 -0
  525. data/src/core/lib/security/transport/client_auth_filter.cc +418 -0
  526. data/src/core/lib/security/transport/secure_endpoint.cc +429 -0
  527. data/src/core/lib/security/transport/secure_endpoint.h +41 -0
  528. data/src/core/lib/security/transport/security_handshaker.cc +526 -0
  529. data/src/core/lib/security/transport/security_handshaker.h +34 -0
  530. data/src/core/lib/security/transport/server_auth_filter.cc +269 -0
  531. data/src/core/lib/security/transport/target_authority_table.cc +75 -0
  532. data/src/core/lib/security/transport/target_authority_table.h +40 -0
  533. data/src/core/lib/security/transport/tsi_error.cc +29 -0
  534. data/src/core/lib/security/transport/tsi_error.h +29 -0
  535. data/src/core/lib/security/util/json_util.cc +48 -0
  536. data/src/core/lib/security/util/json_util.h +42 -0
  537. data/src/core/lib/slice/b64.cc +240 -0
  538. data/src/core/lib/slice/b64.h +51 -0
  539. data/src/core/lib/slice/percent_encoding.cc +169 -0
  540. data/src/core/lib/slice/percent_encoding.h +65 -0
  541. data/src/core/lib/slice/slice.cc +489 -0
  542. data/src/core/lib/slice/slice_buffer.cc +359 -0
  543. data/src/core/lib/slice/slice_hash_table.h +201 -0
  544. data/src/core/lib/slice/slice_intern.cc +332 -0
  545. data/src/core/lib/slice/slice_internal.h +49 -0
  546. data/src/core/lib/slice/slice_string_helpers.cc +118 -0
  547. data/src/core/lib/slice/slice_string_helpers.h +47 -0
  548. data/src/core/lib/slice/slice_weak_hash_table.h +105 -0
  549. data/src/core/lib/surface/api_trace.cc +24 -0
  550. data/src/core/lib/surface/api_trace.h +52 -0
  551. data/src/core/lib/surface/byte_buffer.cc +92 -0
  552. data/src/core/lib/surface/byte_buffer_reader.cc +129 -0
  553. data/src/core/lib/surface/call.cc +2002 -0
  554. data/src/core/lib/surface/call.h +109 -0
  555. data/src/core/lib/surface/call_details.cc +42 -0
  556. data/src/core/lib/surface/call_log_batch.cc +120 -0
  557. data/src/core/lib/surface/call_test_only.h +43 -0
  558. data/src/core/lib/surface/channel.cc +450 -0
  559. data/src/core/lib/surface/channel.h +83 -0
  560. data/src/core/lib/surface/channel_init.cc +109 -0
  561. data/src/core/lib/surface/channel_init.h +73 -0
  562. data/src/core/lib/surface/channel_ping.cc +65 -0
  563. data/src/core/lib/surface/channel_stack_type.cc +58 -0
  564. data/src/core/lib/surface/channel_stack_type.h +47 -0
  565. data/src/core/lib/surface/completion_queue.cc +1262 -0
  566. data/src/core/lib/surface/completion_queue.h +93 -0
  567. data/src/core/lib/surface/completion_queue_factory.cc +79 -0
  568. data/src/core/lib/surface/completion_queue_factory.h +38 -0
  569. data/src/core/lib/surface/event_string.cc +68 -0
  570. data/src/core/lib/surface/event_string.h +29 -0
  571. data/src/core/lib/surface/init.cc +196 -0
  572. data/src/core/lib/surface/init.h +27 -0
  573. data/src/core/lib/surface/init_secure.cc +81 -0
  574. data/src/core/lib/surface/lame_client.cc +180 -0
  575. data/src/core/lib/surface/lame_client.h +28 -0
  576. data/src/core/lib/surface/metadata_array.cc +36 -0
  577. data/src/core/lib/surface/server.cc +1445 -0
  578. data/src/core/lib/surface/server.h +58 -0
  579. data/src/core/lib/surface/validate_metadata.cc +95 -0
  580. data/src/core/lib/surface/validate_metadata.h +30 -0
  581. data/src/core/lib/surface/version.cc +28 -0
  582. data/src/core/lib/transport/bdp_estimator.cc +87 -0
  583. data/src/core/lib/transport/bdp_estimator.h +94 -0
  584. data/src/core/lib/transport/byte_stream.cc +160 -0
  585. data/src/core/lib/transport/byte_stream.h +164 -0
  586. data/src/core/lib/transport/connectivity_state.cc +196 -0
  587. data/src/core/lib/transport/connectivity_state.h +87 -0
  588. data/src/core/lib/transport/error_utils.cc +118 -0
  589. data/src/core/lib/transport/error_utils.h +46 -0
  590. data/src/core/lib/transport/http2_errors.h +41 -0
  591. data/src/core/lib/transport/metadata.cc +539 -0
  592. data/src/core/lib/transport/metadata.h +165 -0
  593. data/src/core/lib/transport/metadata_batch.cc +329 -0
  594. data/src/core/lib/transport/metadata_batch.h +150 -0
  595. data/src/core/lib/transport/pid_controller.cc +51 -0
  596. data/src/core/lib/transport/pid_controller.h +116 -0
  597. data/src/core/lib/transport/service_config.cc +106 -0
  598. data/src/core/lib/transport/service_config.h +249 -0
  599. data/src/core/lib/transport/static_metadata.cc +601 -0
  600. data/src/core/lib/transport/static_metadata.h +603 -0
  601. data/src/core/lib/transport/status_conversion.cc +100 -0
  602. data/src/core/lib/transport/status_conversion.h +38 -0
  603. data/src/core/lib/transport/status_metadata.cc +54 -0
  604. data/src/core/lib/transport/status_metadata.h +30 -0
  605. data/src/core/lib/transport/timeout_encoding.cc +144 -0
  606. data/src/core/lib/transport/timeout_encoding.h +37 -0
  607. data/src/core/lib/transport/transport.cc +278 -0
  608. data/src/core/lib/transport/transport.h +378 -0
  609. data/src/core/lib/transport/transport_impl.h +71 -0
  610. data/src/core/lib/transport/transport_op_string.cc +214 -0
  611. data/src/core/plugin_registry/grpc_plugin_registry.cc +97 -0
  612. data/src/core/tsi/alts/crypt/aes_gcm.cc +687 -0
  613. data/src/core/tsi/alts/crypt/gsec.cc +189 -0
  614. data/src/core/tsi/alts/crypt/gsec.h +454 -0
  615. data/src/core/tsi/alts/frame_protector/alts_counter.cc +118 -0
  616. data/src/core/tsi/alts/frame_protector/alts_counter.h +98 -0
  617. data/src/core/tsi/alts/frame_protector/alts_crypter.cc +66 -0
  618. data/src/core/tsi/alts/frame_protector/alts_crypter.h +255 -0
  619. data/src/core/tsi/alts/frame_protector/alts_frame_protector.cc +407 -0
  620. data/src/core/tsi/alts/frame_protector/alts_frame_protector.h +55 -0
  621. data/src/core/tsi/alts/frame_protector/alts_record_protocol_crypter_common.cc +114 -0
  622. data/src/core/tsi/alts/frame_protector/alts_record_protocol_crypter_common.h +114 -0
  623. data/src/core/tsi/alts/frame_protector/alts_seal_privacy_integrity_crypter.cc +105 -0
  624. data/src/core/tsi/alts/frame_protector/alts_unseal_privacy_integrity_crypter.cc +103 -0
  625. data/src/core/tsi/alts/frame_protector/frame_handler.cc +218 -0
  626. data/src/core/tsi/alts/frame_protector/frame_handler.h +236 -0
  627. data/src/core/tsi/alts/handshaker/alts_handshaker_client.cc +316 -0
  628. data/src/core/tsi/alts/handshaker/alts_handshaker_client.h +137 -0
  629. data/src/core/tsi/alts/handshaker/alts_handshaker_service_api.cc +520 -0
  630. data/src/core/tsi/alts/handshaker/alts_handshaker_service_api.h +323 -0
  631. data/src/core/tsi/alts/handshaker/alts_handshaker_service_api_util.cc +143 -0
  632. data/src/core/tsi/alts/handshaker/alts_handshaker_service_api_util.h +149 -0
  633. data/src/core/tsi/alts/handshaker/alts_tsi_event.cc +73 -0
  634. data/src/core/tsi/alts/handshaker/alts_tsi_event.h +93 -0
  635. data/src/core/tsi/alts/handshaker/alts_tsi_handshaker.cc +483 -0
  636. data/src/core/tsi/alts/handshaker/alts_tsi_handshaker.h +83 -0
  637. data/src/core/tsi/alts/handshaker/alts_tsi_handshaker_private.h +52 -0
  638. data/src/core/tsi/alts/handshaker/alts_tsi_utils.cc +58 -0
  639. data/src/core/tsi/alts/handshaker/alts_tsi_utils.h +52 -0
  640. data/src/core/tsi/alts/handshaker/altscontext.pb.c +48 -0
  641. data/src/core/tsi/alts/handshaker/altscontext.pb.h +64 -0
  642. data/src/core/tsi/alts/handshaker/handshaker.pb.c +123 -0
  643. data/src/core/tsi/alts/handshaker/handshaker.pb.h +255 -0
  644. data/src/core/tsi/alts/handshaker/transport_security_common.pb.c +50 -0
  645. data/src/core/tsi/alts/handshaker/transport_security_common.pb.h +78 -0
  646. data/src/core/tsi/alts/handshaker/transport_security_common_api.cc +196 -0
  647. data/src/core/tsi/alts/handshaker/transport_security_common_api.h +163 -0
  648. data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_integrity_only_record_protocol.cc +180 -0
  649. data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_integrity_only_record_protocol.h +52 -0
  650. data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_privacy_integrity_record_protocol.cc +144 -0
  651. data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_privacy_integrity_record_protocol.h +49 -0
  652. data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_record_protocol.h +91 -0
  653. data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_record_protocol_common.cc +174 -0
  654. data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_record_protocol_common.h +100 -0
  655. data/src/core/tsi/alts/zero_copy_frame_protector/alts_iovec_record_protocol.cc +476 -0
  656. data/src/core/tsi/alts/zero_copy_frame_protector/alts_iovec_record_protocol.h +199 -0
  657. data/src/core/tsi/alts/zero_copy_frame_protector/alts_zero_copy_grpc_protector.cc +296 -0
  658. data/src/core/tsi/alts/zero_copy_frame_protector/alts_zero_copy_grpc_protector.h +52 -0
  659. data/src/core/tsi/alts_transport_security.cc +63 -0
  660. data/src/core/tsi/alts_transport_security.h +47 -0
  661. data/src/core/tsi/fake_transport_security.cc +787 -0
  662. data/src/core/tsi/fake_transport_security.h +45 -0
  663. data/src/core/tsi/ssl/session_cache/ssl_session.h +73 -0
  664. data/src/core/tsi/ssl/session_cache/ssl_session_boringssl.cc +58 -0
  665. data/src/core/tsi/ssl/session_cache/ssl_session_cache.cc +211 -0
  666. data/src/core/tsi/ssl/session_cache/ssl_session_cache.h +93 -0
  667. data/src/core/tsi/ssl/session_cache/ssl_session_openssl.cc +76 -0
  668. data/src/core/tsi/ssl_transport_security.cc +1831 -0
  669. data/src/core/tsi/ssl_transport_security.h +314 -0
  670. data/src/core/tsi/ssl_types.h +42 -0
  671. data/src/core/tsi/transport_security.cc +326 -0
  672. data/src/core/tsi/transport_security.h +127 -0
  673. data/src/core/tsi/transport_security_adapter.cc +235 -0
  674. data/src/core/tsi/transport_security_adapter.h +41 -0
  675. data/src/core/tsi/transport_security_grpc.cc +66 -0
  676. data/src/core/tsi/transport_security_grpc.h +74 -0
  677. data/src/core/tsi/transport_security_interface.h +454 -0
  678. data/src/ruby/bin/apis/google/protobuf/empty.rb +29 -0
  679. data/src/ruby/bin/apis/pubsub_demo.rb +241 -0
  680. data/src/ruby/bin/apis/tech/pubsub/proto/pubsub.rb +159 -0
  681. data/src/ruby/bin/apis/tech/pubsub/proto/pubsub_services.rb +88 -0
  682. data/src/ruby/bin/math_client.rb +132 -0
  683. data/src/ruby/bin/math_pb.rb +32 -0
  684. data/src/ruby/bin/math_server.rb +191 -0
  685. data/src/ruby/bin/math_services_pb.rb +51 -0
  686. data/src/ruby/bin/noproto_client.rb +93 -0
  687. data/src/ruby/bin/noproto_server.rb +97 -0
  688. data/src/ruby/ext/grpc/extconf.rb +118 -0
  689. data/src/ruby/ext/grpc/rb_byte_buffer.c +64 -0
  690. data/src/ruby/ext/grpc/rb_byte_buffer.h +35 -0
  691. data/src/ruby/ext/grpc/rb_call.c +1041 -0
  692. data/src/ruby/ext/grpc/rb_call.h +53 -0
  693. data/src/ruby/ext/grpc/rb_call_credentials.c +290 -0
  694. data/src/ruby/ext/grpc/rb_call_credentials.h +31 -0
  695. data/src/ruby/ext/grpc/rb_channel.c +828 -0
  696. data/src/ruby/ext/grpc/rb_channel.h +34 -0
  697. data/src/ruby/ext/grpc/rb_channel_args.c +155 -0
  698. data/src/ruby/ext/grpc/rb_channel_args.h +38 -0
  699. data/src/ruby/ext/grpc/rb_channel_credentials.c +263 -0
  700. data/src/ruby/ext/grpc/rb_channel_credentials.h +32 -0
  701. data/src/ruby/ext/grpc/rb_completion_queue.c +100 -0
  702. data/src/ruby/ext/grpc/rb_completion_queue.h +36 -0
  703. data/src/ruby/ext/grpc/rb_compression_options.c +468 -0
  704. data/src/ruby/ext/grpc/rb_compression_options.h +29 -0
  705. data/src/ruby/ext/grpc/rb_event_thread.c +141 -0
  706. data/src/ruby/ext/grpc/rb_event_thread.h +21 -0
  707. data/src/ruby/ext/grpc/rb_grpc.c +340 -0
  708. data/src/ruby/ext/grpc/rb_grpc.h +72 -0
  709. data/src/ruby/ext/grpc/rb_grpc_imports.generated.c +507 -0
  710. data/src/ruby/ext/grpc/rb_grpc_imports.generated.h +766 -0
  711. data/src/ruby/ext/grpc/rb_loader.c +57 -0
  712. data/src/ruby/ext/grpc/rb_loader.h +25 -0
  713. data/src/ruby/ext/grpc/rb_server.c +366 -0
  714. data/src/ruby/ext/grpc/rb_server.h +32 -0
  715. data/src/ruby/ext/grpc/rb_server_credentials.c +243 -0
  716. data/src/ruby/ext/grpc/rb_server_credentials.h +32 -0
  717. data/src/ruby/lib/grpc/core/time_consts.rb +56 -0
  718. data/src/ruby/lib/grpc/errors.rb +201 -0
  719. data/src/ruby/lib/grpc/generic/active_call.rb +674 -0
  720. data/src/ruby/lib/grpc/generic/bidi_call.rb +233 -0
  721. data/src/ruby/lib/grpc/generic/client_stub.rb +501 -0
  722. data/src/ruby/lib/grpc/generic/interceptor_registry.rb +53 -0
  723. data/src/ruby/lib/grpc/generic/interceptors.rb +186 -0
  724. data/src/ruby/lib/grpc/generic/rpc_desc.rb +204 -0
  725. data/src/ruby/lib/grpc/generic/rpc_server.rb +490 -0
  726. data/src/ruby/lib/grpc/generic/service.rb +210 -0
  727. data/src/ruby/lib/grpc/google_rpc_status_utils.rb +35 -0
  728. data/src/ruby/lib/grpc/grpc.rb +24 -0
  729. data/src/ruby/lib/grpc/logconfig.rb +44 -0
  730. data/src/ruby/lib/grpc/notifier.rb +45 -0
  731. data/src/ruby/lib/grpc/version.rb +18 -0
  732. data/src/ruby/lib/grpc.rb +35 -0
  733. data/src/ruby/pb/README.md +42 -0
  734. data/src/ruby/pb/generate_proto_ruby.sh +43 -0
  735. data/src/ruby/pb/grpc/health/checker.rb +76 -0
  736. data/src/ruby/pb/grpc/health/v1/health_pb.rb +28 -0
  737. data/src/ruby/pb/grpc/health/v1/health_services_pb.rb +41 -0
  738. data/src/ruby/pb/grpc/testing/duplicate/echo_duplicate_services_pb.rb +44 -0
  739. data/src/ruby/pb/grpc/testing/metrics_pb.rb +28 -0
  740. data/src/ruby/pb/grpc/testing/metrics_services_pb.rb +49 -0
  741. data/src/ruby/pb/src/proto/grpc/testing/empty_pb.rb +15 -0
  742. data/src/ruby/pb/src/proto/grpc/testing/messages_pb.rb +82 -0
  743. data/src/ruby/pb/src/proto/grpc/testing/test_pb.rb +14 -0
  744. data/src/ruby/pb/src/proto/grpc/testing/test_services_pb.rb +102 -0
  745. data/src/ruby/pb/test/client.rb +764 -0
  746. data/src/ruby/pb/test/server.rb +252 -0
  747. data/src/ruby/spec/call_credentials_spec.rb +42 -0
  748. data/src/ruby/spec/call_spec.rb +180 -0
  749. data/src/ruby/spec/channel_connection_spec.rb +126 -0
  750. data/src/ruby/spec/channel_credentials_spec.rb +82 -0
  751. data/src/ruby/spec/channel_spec.rb +190 -0
  752. data/src/ruby/spec/client_auth_spec.rb +137 -0
  753. data/src/ruby/spec/client_server_spec.rb +664 -0
  754. data/src/ruby/spec/compression_options_spec.rb +149 -0
  755. data/src/ruby/spec/error_sanity_spec.rb +49 -0
  756. data/src/ruby/spec/generic/active_call_spec.rb +672 -0
  757. data/src/ruby/spec/generic/client_interceptors_spec.rb +153 -0
  758. data/src/ruby/spec/generic/client_stub_spec.rb +1067 -0
  759. data/src/ruby/spec/generic/interceptor_registry_spec.rb +65 -0
  760. data/src/ruby/spec/generic/rpc_desc_spec.rb +374 -0
  761. data/src/ruby/spec/generic/rpc_server_pool_spec.rb +127 -0
  762. data/src/ruby/spec/generic/rpc_server_spec.rb +726 -0
  763. data/src/ruby/spec/generic/server_interceptors_spec.rb +218 -0
  764. data/src/ruby/spec/generic/service_spec.rb +261 -0
  765. data/src/ruby/spec/google_rpc_status_utils_spec.rb +293 -0
  766. data/src/ruby/spec/pb/duplicate/codegen_spec.rb +56 -0
  767. data/src/ruby/spec/pb/health/checker_spec.rb +236 -0
  768. data/src/ruby/spec/pb/package_with_underscore/checker_spec.rb +54 -0
  769. data/src/ruby/spec/pb/package_with_underscore/data.proto +23 -0
  770. data/src/ruby/spec/pb/package_with_underscore/service.proto +23 -0
  771. data/src/ruby/spec/server_credentials_spec.rb +79 -0
  772. data/src/ruby/spec/server_spec.rb +209 -0
  773. data/src/ruby/spec/spec_helper.rb +60 -0
  774. data/src/ruby/spec/support/helpers.rb +107 -0
  775. data/src/ruby/spec/support/services.rb +147 -0
  776. data/src/ruby/spec/testdata/README +1 -0
  777. data/src/ruby/spec/testdata/ca.pem +15 -0
  778. data/src/ruby/spec/testdata/client.key +16 -0
  779. data/src/ruby/spec/testdata/client.pem +14 -0
  780. data/src/ruby/spec/testdata/server1.key +16 -0
  781. data/src/ruby/spec/testdata/server1.pem +16 -0
  782. data/src/ruby/spec/time_consts_spec.rb +74 -0
  783. data/third_party/address_sorting/address_sorting.c +369 -0
  784. data/third_party/address_sorting/address_sorting_internal.h +70 -0
  785. data/third_party/address_sorting/address_sorting_posix.c +97 -0
  786. data/third_party/address_sorting/address_sorting_windows.c +55 -0
  787. data/third_party/address_sorting/include/address_sorting/address_sorting.h +110 -0
  788. data/third_party/boringssl/crypto/asn1/a_bitstr.c +271 -0
  789. data/third_party/boringssl/crypto/asn1/a_bool.c +110 -0
  790. data/third_party/boringssl/crypto/asn1/a_d2i_fp.c +297 -0
  791. data/third_party/boringssl/crypto/asn1/a_dup.c +111 -0
  792. data/third_party/boringssl/crypto/asn1/a_enum.c +195 -0
  793. data/third_party/boringssl/crypto/asn1/a_gentm.c +261 -0
  794. data/third_party/boringssl/crypto/asn1/a_i2d_fp.c +150 -0
  795. data/third_party/boringssl/crypto/asn1/a_int.c +474 -0
  796. data/third_party/boringssl/crypto/asn1/a_mbstr.c +409 -0
  797. data/third_party/boringssl/crypto/asn1/a_object.c +275 -0
  798. data/third_party/boringssl/crypto/asn1/a_octet.c +77 -0
  799. data/third_party/boringssl/crypto/asn1/a_print.c +93 -0
  800. data/third_party/boringssl/crypto/asn1/a_strnid.c +312 -0
  801. data/third_party/boringssl/crypto/asn1/a_time.c +213 -0
  802. data/third_party/boringssl/crypto/asn1/a_type.c +151 -0
  803. data/third_party/boringssl/crypto/asn1/a_utctm.c +303 -0
  804. data/third_party/boringssl/crypto/asn1/a_utf8.c +234 -0
  805. data/third_party/boringssl/crypto/asn1/asn1_lib.c +442 -0
  806. data/third_party/boringssl/crypto/asn1/asn1_locl.h +101 -0
  807. data/third_party/boringssl/crypto/asn1/asn1_par.c +80 -0
  808. data/third_party/boringssl/crypto/asn1/asn_pack.c +105 -0
  809. data/third_party/boringssl/crypto/asn1/f_enum.c +93 -0
  810. data/third_party/boringssl/crypto/asn1/f_int.c +97 -0
  811. data/third_party/boringssl/crypto/asn1/f_string.c +91 -0
  812. data/third_party/boringssl/crypto/asn1/tasn_dec.c +1223 -0
  813. data/third_party/boringssl/crypto/asn1/tasn_enc.c +662 -0
  814. data/third_party/boringssl/crypto/asn1/tasn_fre.c +244 -0
  815. data/third_party/boringssl/crypto/asn1/tasn_new.c +387 -0
  816. data/third_party/boringssl/crypto/asn1/tasn_typ.c +131 -0
  817. data/third_party/boringssl/crypto/asn1/tasn_utl.c +280 -0
  818. data/third_party/boringssl/crypto/asn1/time_support.c +206 -0
  819. data/third_party/boringssl/crypto/base64/base64.c +466 -0
  820. data/third_party/boringssl/crypto/bio/bio.c +636 -0
  821. data/third_party/boringssl/crypto/bio/bio_mem.c +330 -0
  822. data/third_party/boringssl/crypto/bio/connect.c +542 -0
  823. data/third_party/boringssl/crypto/bio/fd.c +275 -0
  824. data/third_party/boringssl/crypto/bio/file.c +313 -0
  825. data/third_party/boringssl/crypto/bio/hexdump.c +192 -0
  826. data/third_party/boringssl/crypto/bio/internal.h +111 -0
  827. data/third_party/boringssl/crypto/bio/pair.c +489 -0
  828. data/third_party/boringssl/crypto/bio/printf.c +115 -0
  829. data/third_party/boringssl/crypto/bio/socket.c +202 -0
  830. data/third_party/boringssl/crypto/bio/socket_helper.c +114 -0
  831. data/third_party/boringssl/crypto/bn_extra/bn_asn1.c +64 -0
  832. data/third_party/boringssl/crypto/bn_extra/convert.c +465 -0
  833. data/third_party/boringssl/crypto/buf/buf.c +231 -0
  834. data/third_party/boringssl/crypto/bytestring/asn1_compat.c +52 -0
  835. data/third_party/boringssl/crypto/bytestring/ber.c +264 -0
  836. data/third_party/boringssl/crypto/bytestring/cbb.c +568 -0
  837. data/third_party/boringssl/crypto/bytestring/cbs.c +487 -0
  838. data/third_party/boringssl/crypto/bytestring/internal.h +75 -0
  839. data/third_party/boringssl/crypto/chacha/chacha.c +167 -0
  840. data/third_party/boringssl/crypto/cipher_extra/cipher_extra.c +114 -0
  841. data/third_party/boringssl/crypto/cipher_extra/derive_key.c +152 -0
  842. data/third_party/boringssl/crypto/cipher_extra/e_aesctrhmac.c +281 -0
  843. data/third_party/boringssl/crypto/cipher_extra/e_aesgcmsiv.c +867 -0
  844. data/third_party/boringssl/crypto/cipher_extra/e_chacha20poly1305.c +326 -0
  845. data/third_party/boringssl/crypto/cipher_extra/e_null.c +85 -0
  846. data/third_party/boringssl/crypto/cipher_extra/e_rc2.c +460 -0
  847. data/third_party/boringssl/crypto/cipher_extra/e_rc4.c +87 -0
  848. data/third_party/boringssl/crypto/cipher_extra/e_ssl3.c +460 -0
  849. data/third_party/boringssl/crypto/cipher_extra/e_tls.c +681 -0
  850. data/third_party/boringssl/crypto/cipher_extra/internal.h +128 -0
  851. data/third_party/boringssl/crypto/cipher_extra/tls_cbc.c +482 -0
  852. data/third_party/boringssl/crypto/cmac/cmac.c +241 -0
  853. data/third_party/boringssl/crypto/conf/conf.c +803 -0
  854. data/third_party/boringssl/crypto/conf/conf_def.h +127 -0
  855. data/third_party/boringssl/crypto/conf/internal.h +31 -0
  856. data/third_party/boringssl/crypto/cpu-aarch64-linux.c +61 -0
  857. data/third_party/boringssl/crypto/cpu-arm-linux.c +363 -0
  858. data/third_party/boringssl/crypto/cpu-arm.c +38 -0
  859. data/third_party/boringssl/crypto/cpu-intel.c +288 -0
  860. data/third_party/boringssl/crypto/cpu-ppc64le.c +38 -0
  861. data/third_party/boringssl/crypto/crypto.c +198 -0
  862. data/third_party/boringssl/crypto/curve25519/spake25519.c +539 -0
  863. data/third_party/boringssl/crypto/curve25519/x25519-x86_64.c +247 -0
  864. data/third_party/boringssl/crypto/dh/check.c +217 -0
  865. data/third_party/boringssl/crypto/dh/dh.c +519 -0
  866. data/third_party/boringssl/crypto/dh/dh_asn1.c +160 -0
  867. data/third_party/boringssl/crypto/dh/params.c +93 -0
  868. data/third_party/boringssl/crypto/digest_extra/digest_extra.c +240 -0
  869. data/third_party/boringssl/crypto/dsa/dsa.c +984 -0
  870. data/third_party/boringssl/crypto/dsa/dsa_asn1.c +339 -0
  871. data/third_party/boringssl/crypto/ec_extra/ec_asn1.c +563 -0
  872. data/third_party/boringssl/crypto/ecdh/ecdh.c +161 -0
  873. data/third_party/boringssl/crypto/ecdsa_extra/ecdsa_asn1.c +275 -0
  874. data/third_party/boringssl/crypto/engine/engine.c +98 -0
  875. data/third_party/boringssl/crypto/err/err.c +847 -0
  876. data/third_party/boringssl/crypto/err/internal.h +58 -0
  877. data/third_party/boringssl/crypto/evp/digestsign.c +231 -0
  878. data/third_party/boringssl/crypto/evp/evp.c +362 -0
  879. data/third_party/boringssl/crypto/evp/evp_asn1.c +337 -0
  880. data/third_party/boringssl/crypto/evp/evp_ctx.c +446 -0
  881. data/third_party/boringssl/crypto/evp/internal.h +252 -0
  882. data/third_party/boringssl/crypto/evp/p_dsa_asn1.c +268 -0
  883. data/third_party/boringssl/crypto/evp/p_ec.c +239 -0
  884. data/third_party/boringssl/crypto/evp/p_ec_asn1.c +256 -0
  885. data/third_party/boringssl/crypto/evp/p_ed25519.c +71 -0
  886. data/third_party/boringssl/crypto/evp/p_ed25519_asn1.c +190 -0
  887. data/third_party/boringssl/crypto/evp/p_rsa.c +634 -0
  888. data/third_party/boringssl/crypto/evp/p_rsa_asn1.c +189 -0
  889. data/third_party/boringssl/crypto/evp/pbkdf.c +146 -0
  890. data/third_party/boringssl/crypto/evp/print.c +489 -0
  891. data/third_party/boringssl/crypto/evp/scrypt.c +209 -0
  892. data/third_party/boringssl/crypto/evp/sign.c +151 -0
  893. data/third_party/boringssl/crypto/ex_data.c +261 -0
  894. data/third_party/boringssl/crypto/fipsmodule/aes/aes.c +1100 -0
  895. data/third_party/boringssl/crypto/fipsmodule/aes/internal.h +100 -0
  896. data/third_party/boringssl/crypto/fipsmodule/aes/key_wrap.c +138 -0
  897. data/third_party/boringssl/crypto/fipsmodule/aes/mode_wrappers.c +112 -0
  898. data/third_party/boringssl/crypto/fipsmodule/bcm.c +679 -0
  899. data/third_party/boringssl/crypto/fipsmodule/bn/add.c +371 -0
  900. data/third_party/boringssl/crypto/fipsmodule/bn/asm/x86_64-gcc.c +540 -0
  901. data/third_party/boringssl/crypto/fipsmodule/bn/bn.c +370 -0
  902. data/third_party/boringssl/crypto/fipsmodule/bn/bytes.c +269 -0
  903. data/third_party/boringssl/crypto/fipsmodule/bn/cmp.c +254 -0
  904. data/third_party/boringssl/crypto/fipsmodule/bn/ctx.c +303 -0
  905. data/third_party/boringssl/crypto/fipsmodule/bn/div.c +733 -0
  906. data/third_party/boringssl/crypto/fipsmodule/bn/exponentiation.c +1390 -0
  907. data/third_party/boringssl/crypto/fipsmodule/bn/gcd.c +627 -0
  908. data/third_party/boringssl/crypto/fipsmodule/bn/generic.c +710 -0
  909. data/third_party/boringssl/crypto/fipsmodule/bn/internal.h +413 -0
  910. data/third_party/boringssl/crypto/fipsmodule/bn/jacobi.c +146 -0
  911. data/third_party/boringssl/crypto/fipsmodule/bn/montgomery.c +483 -0
  912. data/third_party/boringssl/crypto/fipsmodule/bn/montgomery_inv.c +207 -0
  913. data/third_party/boringssl/crypto/fipsmodule/bn/mul.c +902 -0
  914. data/third_party/boringssl/crypto/fipsmodule/bn/prime.c +894 -0
  915. data/third_party/boringssl/crypto/fipsmodule/bn/random.c +299 -0
  916. data/third_party/boringssl/crypto/fipsmodule/bn/rsaz_exp.c +254 -0
  917. data/third_party/boringssl/crypto/fipsmodule/bn/rsaz_exp.h +53 -0
  918. data/third_party/boringssl/crypto/fipsmodule/bn/shift.c +305 -0
  919. data/third_party/boringssl/crypto/fipsmodule/bn/sqrt.c +502 -0
  920. data/third_party/boringssl/crypto/fipsmodule/cipher/aead.c +284 -0
  921. data/third_party/boringssl/crypto/fipsmodule/cipher/cipher.c +615 -0
  922. data/third_party/boringssl/crypto/fipsmodule/cipher/e_aes.c +1437 -0
  923. data/third_party/boringssl/crypto/fipsmodule/cipher/e_des.c +233 -0
  924. data/third_party/boringssl/crypto/fipsmodule/cipher/internal.h +129 -0
  925. data/third_party/boringssl/crypto/fipsmodule/delocate.h +88 -0
  926. data/third_party/boringssl/crypto/fipsmodule/des/des.c +785 -0
  927. data/third_party/boringssl/crypto/fipsmodule/des/internal.h +238 -0
  928. data/third_party/boringssl/crypto/fipsmodule/digest/digest.c +256 -0
  929. data/third_party/boringssl/crypto/fipsmodule/digest/digests.c +280 -0
  930. data/third_party/boringssl/crypto/fipsmodule/digest/internal.h +112 -0
  931. data/third_party/boringssl/crypto/fipsmodule/digest/md32_common.h +268 -0
  932. data/third_party/boringssl/crypto/fipsmodule/ec/ec.c +943 -0
  933. data/third_party/boringssl/crypto/fipsmodule/ec/ec_key.c +517 -0
  934. data/third_party/boringssl/crypto/fipsmodule/ec/ec_montgomery.c +277 -0
  935. data/third_party/boringssl/crypto/fipsmodule/ec/internal.h +316 -0
  936. data/third_party/boringssl/crypto/fipsmodule/ec/oct.c +404 -0
  937. data/third_party/boringssl/crypto/fipsmodule/ec/p224-64.c +1131 -0
  938. data/third_party/boringssl/crypto/fipsmodule/ec/p256-64.c +1674 -0
  939. data/third_party/boringssl/crypto/fipsmodule/ec/p256-x86_64-table.h +9543 -0
  940. data/third_party/boringssl/crypto/fipsmodule/ec/p256-x86_64.c +456 -0
  941. data/third_party/boringssl/crypto/fipsmodule/ec/p256-x86_64.h +113 -0
  942. data/third_party/boringssl/crypto/fipsmodule/ec/simple.c +1052 -0
  943. data/third_party/boringssl/crypto/fipsmodule/ec/util-64.c +109 -0
  944. data/third_party/boringssl/crypto/fipsmodule/ec/wnaf.c +474 -0
  945. data/third_party/boringssl/crypto/fipsmodule/ecdsa/ecdsa.c +442 -0
  946. data/third_party/boringssl/crypto/fipsmodule/hmac/hmac.c +228 -0
  947. data/third_party/boringssl/crypto/fipsmodule/is_fips.c +27 -0
  948. data/third_party/boringssl/crypto/fipsmodule/md4/md4.c +254 -0
  949. data/third_party/boringssl/crypto/fipsmodule/md5/md5.c +298 -0
  950. data/third_party/boringssl/crypto/fipsmodule/modes/cbc.c +211 -0
  951. data/third_party/boringssl/crypto/fipsmodule/modes/cfb.c +234 -0
  952. data/third_party/boringssl/crypto/fipsmodule/modes/ctr.c +220 -0
  953. data/third_party/boringssl/crypto/fipsmodule/modes/gcm.c +1063 -0
  954. data/third_party/boringssl/crypto/fipsmodule/modes/internal.h +384 -0
  955. data/third_party/boringssl/crypto/fipsmodule/modes/ofb.c +95 -0
  956. data/third_party/boringssl/crypto/fipsmodule/modes/polyval.c +91 -0
  957. data/third_party/boringssl/crypto/fipsmodule/rand/ctrdrbg.c +200 -0
  958. data/third_party/boringssl/crypto/fipsmodule/rand/internal.h +92 -0
  959. data/third_party/boringssl/crypto/fipsmodule/rand/rand.c +358 -0
  960. data/third_party/boringssl/crypto/fipsmodule/rand/urandom.c +302 -0
  961. data/third_party/boringssl/crypto/fipsmodule/rsa/blinding.c +263 -0
  962. data/third_party/boringssl/crypto/fipsmodule/rsa/internal.h +131 -0
  963. data/third_party/boringssl/crypto/fipsmodule/rsa/padding.c +692 -0
  964. data/third_party/boringssl/crypto/fipsmodule/rsa/rsa.c +857 -0
  965. data/third_party/boringssl/crypto/fipsmodule/rsa/rsa_impl.c +1051 -0
  966. data/third_party/boringssl/crypto/fipsmodule/sha/sha1-altivec.c +361 -0
  967. data/third_party/boringssl/crypto/fipsmodule/sha/sha1.c +375 -0
  968. data/third_party/boringssl/crypto/fipsmodule/sha/sha256.c +337 -0
  969. data/third_party/boringssl/crypto/fipsmodule/sha/sha512.c +608 -0
  970. data/third_party/boringssl/crypto/hkdf/hkdf.c +112 -0
  971. data/third_party/boringssl/crypto/internal.h +676 -0
  972. data/third_party/boringssl/crypto/lhash/lhash.c +336 -0
  973. data/third_party/boringssl/crypto/mem.c +237 -0
  974. data/third_party/boringssl/crypto/obj/obj.c +621 -0
  975. data/third_party/boringssl/crypto/obj/obj_dat.h +6244 -0
  976. data/third_party/boringssl/crypto/obj/obj_xref.c +122 -0
  977. data/third_party/boringssl/crypto/pem/pem_all.c +262 -0
  978. data/third_party/boringssl/crypto/pem/pem_info.c +379 -0
  979. data/third_party/boringssl/crypto/pem/pem_lib.c +776 -0
  980. data/third_party/boringssl/crypto/pem/pem_oth.c +88 -0
  981. data/third_party/boringssl/crypto/pem/pem_pk8.c +258 -0
  982. data/third_party/boringssl/crypto/pem/pem_pkey.c +227 -0
  983. data/third_party/boringssl/crypto/pem/pem_x509.c +65 -0
  984. data/third_party/boringssl/crypto/pem/pem_xaux.c +65 -0
  985. data/third_party/boringssl/crypto/pkcs7/internal.h +49 -0
  986. data/third_party/boringssl/crypto/pkcs7/pkcs7.c +166 -0
  987. data/third_party/boringssl/crypto/pkcs7/pkcs7_x509.c +233 -0
  988. data/third_party/boringssl/crypto/pkcs8/internal.h +120 -0
  989. data/third_party/boringssl/crypto/pkcs8/p5_pbev2.c +307 -0
  990. data/third_party/boringssl/crypto/pkcs8/pkcs8.c +513 -0
  991. data/third_party/boringssl/crypto/pkcs8/pkcs8_x509.c +789 -0
  992. data/third_party/boringssl/crypto/poly1305/internal.h +41 -0
  993. data/third_party/boringssl/crypto/poly1305/poly1305.c +318 -0
  994. data/third_party/boringssl/crypto/poly1305/poly1305_arm.c +304 -0
  995. data/third_party/boringssl/crypto/poly1305/poly1305_vec.c +839 -0
  996. data/third_party/boringssl/crypto/pool/internal.h +45 -0
  997. data/third_party/boringssl/crypto/pool/pool.c +200 -0
  998. data/third_party/boringssl/crypto/rand_extra/deterministic.c +48 -0
  999. data/third_party/boringssl/crypto/rand_extra/forkunsafe.c +46 -0
  1000. data/third_party/boringssl/crypto/rand_extra/fuchsia.c +43 -0
  1001. data/third_party/boringssl/crypto/rand_extra/rand_extra.c +70 -0
  1002. data/third_party/boringssl/crypto/rand_extra/windows.c +53 -0
  1003. data/third_party/boringssl/crypto/rc4/rc4.c +98 -0
  1004. data/third_party/boringssl/crypto/refcount_c11.c +67 -0
  1005. data/third_party/boringssl/crypto/refcount_lock.c +53 -0
  1006. data/third_party/boringssl/crypto/rsa_extra/rsa_asn1.c +325 -0
  1007. data/third_party/boringssl/crypto/stack/stack.c +380 -0
  1008. data/third_party/boringssl/crypto/thread.c +110 -0
  1009. data/third_party/boringssl/crypto/thread_none.c +59 -0
  1010. data/third_party/boringssl/crypto/thread_pthread.c +176 -0
  1011. data/third_party/boringssl/crypto/thread_win.c +237 -0
  1012. data/third_party/boringssl/crypto/x509/a_digest.c +96 -0
  1013. data/third_party/boringssl/crypto/x509/a_sign.c +128 -0
  1014. data/third_party/boringssl/crypto/x509/a_strex.c +633 -0
  1015. data/third_party/boringssl/crypto/x509/a_verify.c +115 -0
  1016. data/third_party/boringssl/crypto/x509/algorithm.c +153 -0
  1017. data/third_party/boringssl/crypto/x509/asn1_gen.c +841 -0
  1018. data/third_party/boringssl/crypto/x509/by_dir.c +451 -0
  1019. data/third_party/boringssl/crypto/x509/by_file.c +274 -0
  1020. data/third_party/boringssl/crypto/x509/charmap.h +15 -0
  1021. data/third_party/boringssl/crypto/x509/i2d_pr.c +83 -0
  1022. data/third_party/boringssl/crypto/x509/internal.h +66 -0
  1023. data/third_party/boringssl/crypto/x509/rsa_pss.c +385 -0
  1024. data/third_party/boringssl/crypto/x509/t_crl.c +128 -0
  1025. data/third_party/boringssl/crypto/x509/t_req.c +246 -0
  1026. data/third_party/boringssl/crypto/x509/t_x509.c +547 -0
  1027. data/third_party/boringssl/crypto/x509/t_x509a.c +111 -0
  1028. data/third_party/boringssl/crypto/x509/vpm_int.h +70 -0
  1029. data/third_party/boringssl/crypto/x509/x509.c +157 -0
  1030. data/third_party/boringssl/crypto/x509/x509_att.c +381 -0
  1031. data/third_party/boringssl/crypto/x509/x509_cmp.c +477 -0
  1032. data/third_party/boringssl/crypto/x509/x509_d2.c +106 -0
  1033. data/third_party/boringssl/crypto/x509/x509_def.c +103 -0
  1034. data/third_party/boringssl/crypto/x509/x509_ext.c +206 -0
  1035. data/third_party/boringssl/crypto/x509/x509_lu.c +725 -0
  1036. data/third_party/boringssl/crypto/x509/x509_obj.c +198 -0
  1037. data/third_party/boringssl/crypto/x509/x509_r2x.c +117 -0
  1038. data/third_party/boringssl/crypto/x509/x509_req.c +322 -0
  1039. data/third_party/boringssl/crypto/x509/x509_set.c +164 -0
  1040. data/third_party/boringssl/crypto/x509/x509_trs.c +326 -0
  1041. data/third_party/boringssl/crypto/x509/x509_txt.c +205 -0
  1042. data/third_party/boringssl/crypto/x509/x509_v3.c +278 -0
  1043. data/third_party/boringssl/crypto/x509/x509_vfy.c +2472 -0
  1044. data/third_party/boringssl/crypto/x509/x509_vpm.c +648 -0
  1045. data/third_party/boringssl/crypto/x509/x509cset.c +170 -0
  1046. data/third_party/boringssl/crypto/x509/x509name.c +389 -0
  1047. data/third_party/boringssl/crypto/x509/x509rset.c +81 -0
  1048. data/third_party/boringssl/crypto/x509/x509spki.c +137 -0
  1049. data/third_party/boringssl/crypto/x509/x_algor.c +151 -0
  1050. data/third_party/boringssl/crypto/x509/x_all.c +501 -0
  1051. data/third_party/boringssl/crypto/x509/x_attrib.c +111 -0
  1052. data/third_party/boringssl/crypto/x509/x_crl.c +541 -0
  1053. data/third_party/boringssl/crypto/x509/x_exten.c +75 -0
  1054. data/third_party/boringssl/crypto/x509/x_info.c +98 -0
  1055. data/third_party/boringssl/crypto/x509/x_name.c +541 -0
  1056. data/third_party/boringssl/crypto/x509/x_pkey.c +106 -0
  1057. data/third_party/boringssl/crypto/x509/x_pubkey.c +368 -0
  1058. data/third_party/boringssl/crypto/x509/x_req.c +109 -0
  1059. data/third_party/boringssl/crypto/x509/x_sig.c +69 -0
  1060. data/third_party/boringssl/crypto/x509/x_spki.c +80 -0
  1061. data/third_party/boringssl/crypto/x509/x_val.c +69 -0
  1062. data/third_party/boringssl/crypto/x509/x_x509.c +328 -0
  1063. data/third_party/boringssl/crypto/x509/x_x509a.c +198 -0
  1064. data/third_party/boringssl/crypto/x509v3/ext_dat.h +143 -0
  1065. data/third_party/boringssl/crypto/x509v3/pcy_cache.c +284 -0
  1066. data/third_party/boringssl/crypto/x509v3/pcy_data.c +130 -0
  1067. data/third_party/boringssl/crypto/x509v3/pcy_int.h +217 -0
  1068. data/third_party/boringssl/crypto/x509v3/pcy_lib.c +155 -0
  1069. data/third_party/boringssl/crypto/x509v3/pcy_map.c +130 -0
  1070. data/third_party/boringssl/crypto/x509v3/pcy_node.c +188 -0
  1071. data/third_party/boringssl/crypto/x509v3/pcy_tree.c +840 -0
  1072. data/third_party/boringssl/crypto/x509v3/v3_akey.c +204 -0
  1073. data/third_party/boringssl/crypto/x509v3/v3_akeya.c +72 -0
  1074. data/third_party/boringssl/crypto/x509v3/v3_alt.c +623 -0
  1075. data/third_party/boringssl/crypto/x509v3/v3_bcons.c +133 -0
  1076. data/third_party/boringssl/crypto/x509v3/v3_bitst.c +141 -0
  1077. data/third_party/boringssl/crypto/x509v3/v3_conf.c +462 -0
  1078. data/third_party/boringssl/crypto/x509v3/v3_cpols.c +502 -0
  1079. data/third_party/boringssl/crypto/x509v3/v3_crld.c +561 -0
  1080. data/third_party/boringssl/crypto/x509v3/v3_enum.c +100 -0
  1081. data/third_party/boringssl/crypto/x509v3/v3_extku.c +148 -0
  1082. data/third_party/boringssl/crypto/x509v3/v3_genn.c +251 -0
  1083. data/third_party/boringssl/crypto/x509v3/v3_ia5.c +122 -0
  1084. data/third_party/boringssl/crypto/x509v3/v3_info.c +219 -0
  1085. data/third_party/boringssl/crypto/x509v3/v3_int.c +91 -0
  1086. data/third_party/boringssl/crypto/x509v3/v3_lib.c +370 -0
  1087. data/third_party/boringssl/crypto/x509v3/v3_ncons.c +501 -0
  1088. data/third_party/boringssl/crypto/x509v3/v3_pci.c +287 -0
  1089. data/third_party/boringssl/crypto/x509v3/v3_pcia.c +57 -0
  1090. data/third_party/boringssl/crypto/x509v3/v3_pcons.c +139 -0
  1091. data/third_party/boringssl/crypto/x509v3/v3_pku.c +110 -0
  1092. data/third_party/boringssl/crypto/x509v3/v3_pmaps.c +154 -0
  1093. data/third_party/boringssl/crypto/x509v3/v3_prn.c +229 -0
  1094. data/third_party/boringssl/crypto/x509v3/v3_purp.c +866 -0
  1095. data/third_party/boringssl/crypto/x509v3/v3_skey.c +152 -0
  1096. data/third_party/boringssl/crypto/x509v3/v3_sxnet.c +274 -0
  1097. data/third_party/boringssl/crypto/x509v3/v3_utl.c +1352 -0
  1098. data/third_party/boringssl/include/openssl/aead.h +423 -0
  1099. data/third_party/boringssl/include/openssl/aes.h +170 -0
  1100. data/third_party/boringssl/include/openssl/arm_arch.h +121 -0
  1101. data/third_party/boringssl/include/openssl/asn1.h +982 -0
  1102. data/third_party/boringssl/include/openssl/asn1_mac.h +18 -0
  1103. data/third_party/boringssl/include/openssl/asn1t.h +892 -0
  1104. data/third_party/boringssl/include/openssl/base.h +468 -0
  1105. data/third_party/boringssl/include/openssl/base64.h +187 -0
  1106. data/third_party/boringssl/include/openssl/bio.h +902 -0
  1107. data/third_party/boringssl/include/openssl/blowfish.h +93 -0
  1108. data/third_party/boringssl/include/openssl/bn.h +975 -0
  1109. data/third_party/boringssl/include/openssl/buf.h +137 -0
  1110. data/third_party/boringssl/include/openssl/buffer.h +18 -0
  1111. data/third_party/boringssl/include/openssl/bytestring.h +480 -0
  1112. data/third_party/boringssl/include/openssl/cast.h +96 -0
  1113. data/third_party/boringssl/include/openssl/chacha.h +41 -0
  1114. data/third_party/boringssl/include/openssl/cipher.h +608 -0
  1115. data/third_party/boringssl/include/openssl/cmac.h +87 -0
  1116. data/third_party/boringssl/include/openssl/conf.h +183 -0
  1117. data/third_party/boringssl/include/openssl/cpu.h +196 -0
  1118. data/third_party/boringssl/include/openssl/crypto.h +118 -0
  1119. data/third_party/boringssl/include/openssl/curve25519.h +201 -0
  1120. data/third_party/boringssl/include/openssl/des.h +177 -0
  1121. data/third_party/boringssl/include/openssl/dh.h +298 -0
  1122. data/third_party/boringssl/include/openssl/digest.h +316 -0
  1123. data/third_party/boringssl/include/openssl/dsa.h +435 -0
  1124. data/third_party/boringssl/include/openssl/dtls1.h +16 -0
  1125. data/third_party/boringssl/include/openssl/ec.h +407 -0
  1126. data/third_party/boringssl/include/openssl/ec_key.h +341 -0
  1127. data/third_party/boringssl/include/openssl/ecdh.h +101 -0
  1128. data/third_party/boringssl/include/openssl/ecdsa.h +199 -0
  1129. data/third_party/boringssl/include/openssl/engine.h +109 -0
  1130. data/third_party/boringssl/include/openssl/err.h +458 -0
  1131. data/third_party/boringssl/include/openssl/evp.h +873 -0
  1132. data/third_party/boringssl/include/openssl/ex_data.h +203 -0
  1133. data/third_party/boringssl/include/openssl/hkdf.h +64 -0
  1134. data/third_party/boringssl/include/openssl/hmac.h +186 -0
  1135. data/third_party/boringssl/include/openssl/is_boringssl.h +16 -0
  1136. data/third_party/boringssl/include/openssl/lhash.h +174 -0
  1137. data/third_party/boringssl/include/openssl/lhash_macros.h +174 -0
  1138. data/third_party/boringssl/include/openssl/md4.h +106 -0
  1139. data/third_party/boringssl/include/openssl/md5.h +107 -0
  1140. data/third_party/boringssl/include/openssl/mem.h +156 -0
  1141. data/third_party/boringssl/include/openssl/nid.h +4242 -0
  1142. data/third_party/boringssl/include/openssl/obj.h +233 -0
  1143. data/third_party/boringssl/include/openssl/obj_mac.h +18 -0
  1144. data/third_party/boringssl/include/openssl/objects.h +18 -0
  1145. data/third_party/boringssl/include/openssl/opensslconf.h +67 -0
  1146. data/third_party/boringssl/include/openssl/opensslv.h +18 -0
  1147. data/third_party/boringssl/include/openssl/ossl_typ.h +18 -0
  1148. data/third_party/boringssl/include/openssl/pem.h +397 -0
  1149. data/third_party/boringssl/include/openssl/pkcs12.h +18 -0
  1150. data/third_party/boringssl/include/openssl/pkcs7.h +82 -0
  1151. data/third_party/boringssl/include/openssl/pkcs8.h +230 -0
  1152. data/third_party/boringssl/include/openssl/poly1305.h +51 -0
  1153. data/third_party/boringssl/include/openssl/pool.h +91 -0
  1154. data/third_party/boringssl/include/openssl/rand.h +125 -0
  1155. data/third_party/boringssl/include/openssl/rc4.h +96 -0
  1156. data/third_party/boringssl/include/openssl/ripemd.h +107 -0
  1157. data/third_party/boringssl/include/openssl/rsa.h +731 -0
  1158. data/third_party/boringssl/include/openssl/safestack.h +16 -0
  1159. data/third_party/boringssl/include/openssl/sha.h +256 -0
  1160. data/third_party/boringssl/include/openssl/span.h +191 -0
  1161. data/third_party/boringssl/include/openssl/srtp.h +18 -0
  1162. data/third_party/boringssl/include/openssl/ssl.h +4592 -0
  1163. data/third_party/boringssl/include/openssl/ssl3.h +333 -0
  1164. data/third_party/boringssl/include/openssl/stack.h +485 -0
  1165. data/third_party/boringssl/include/openssl/thread.h +191 -0
  1166. data/third_party/boringssl/include/openssl/tls1.h +610 -0
  1167. data/third_party/boringssl/include/openssl/type_check.h +91 -0
  1168. data/third_party/boringssl/include/openssl/x509.h +1176 -0
  1169. data/third_party/boringssl/include/openssl/x509_vfy.h +614 -0
  1170. data/third_party/boringssl/include/openssl/x509v3.h +826 -0
  1171. data/third_party/boringssl/ssl/bio_ssl.cc +179 -0
  1172. data/third_party/boringssl/ssl/custom_extensions.cc +265 -0
  1173. data/third_party/boringssl/ssl/d1_both.cc +837 -0
  1174. data/third_party/boringssl/ssl/d1_lib.cc +267 -0
  1175. data/third_party/boringssl/ssl/d1_pkt.cc +274 -0
  1176. data/third_party/boringssl/ssl/d1_srtp.cc +232 -0
  1177. data/third_party/boringssl/ssl/dtls_method.cc +193 -0
  1178. data/third_party/boringssl/ssl/dtls_record.cc +353 -0
  1179. data/third_party/boringssl/ssl/handshake.cc +616 -0
  1180. data/third_party/boringssl/ssl/handshake_client.cc +1836 -0
  1181. data/third_party/boringssl/ssl/handshake_server.cc +1662 -0
  1182. data/third_party/boringssl/ssl/internal.h +3011 -0
  1183. data/third_party/boringssl/ssl/s3_both.cc +585 -0
  1184. data/third_party/boringssl/ssl/s3_lib.cc +224 -0
  1185. data/third_party/boringssl/ssl/s3_pkt.cc +443 -0
  1186. data/third_party/boringssl/ssl/ssl_aead_ctx.cc +415 -0
  1187. data/third_party/boringssl/ssl/ssl_asn1.cc +840 -0
  1188. data/third_party/boringssl/ssl/ssl_buffer.cc +286 -0
  1189. data/third_party/boringssl/ssl/ssl_cert.cc +913 -0
  1190. data/third_party/boringssl/ssl/ssl_cipher.cc +1777 -0
  1191. data/third_party/boringssl/ssl/ssl_file.cc +583 -0
  1192. data/third_party/boringssl/ssl/ssl_key_share.cc +250 -0
  1193. data/third_party/boringssl/ssl/ssl_lib.cc +2650 -0
  1194. data/third_party/boringssl/ssl/ssl_privkey.cc +488 -0
  1195. data/third_party/boringssl/ssl/ssl_session.cc +1221 -0
  1196. data/third_party/boringssl/ssl/ssl_stat.cc +224 -0
  1197. data/third_party/boringssl/ssl/ssl_transcript.cc +398 -0
  1198. data/third_party/boringssl/ssl/ssl_versions.cc +472 -0
  1199. data/third_party/boringssl/ssl/ssl_x509.cc +1299 -0
  1200. data/third_party/boringssl/ssl/t1_enc.cc +503 -0
  1201. data/third_party/boringssl/ssl/t1_lib.cc +3457 -0
  1202. data/third_party/boringssl/ssl/tls13_both.cc +551 -0
  1203. data/third_party/boringssl/ssl/tls13_client.cc +977 -0
  1204. data/third_party/boringssl/ssl/tls13_enc.cc +563 -0
  1205. data/third_party/boringssl/ssl/tls13_server.cc +1068 -0
  1206. data/third_party/boringssl/ssl/tls_method.cc +291 -0
  1207. data/third_party/boringssl/ssl/tls_record.cc +712 -0
  1208. data/third_party/boringssl/third_party/fiat/curve25519.c +5062 -0
  1209. data/third_party/boringssl/third_party/fiat/internal.h +142 -0
  1210. data/third_party/cares/ares_build.h +223 -0
  1211. data/third_party/cares/cares/ares.h +658 -0
  1212. data/third_party/cares/cares/ares__close_sockets.c +61 -0
  1213. data/third_party/cares/cares/ares__get_hostent.c +261 -0
  1214. data/third_party/cares/cares/ares__read_line.c +73 -0
  1215. data/third_party/cares/cares/ares__timeval.c +111 -0
  1216. data/third_party/cares/cares/ares_cancel.c +63 -0
  1217. data/third_party/cares/cares/ares_create_query.c +202 -0
  1218. data/third_party/cares/cares/ares_data.c +221 -0
  1219. data/third_party/cares/cares/ares_data.h +72 -0
  1220. data/third_party/cares/cares/ares_destroy.c +108 -0
  1221. data/third_party/cares/cares/ares_dns.h +103 -0
  1222. data/third_party/cares/cares/ares_expand_name.c +209 -0
  1223. data/third_party/cares/cares/ares_expand_string.c +70 -0
  1224. data/third_party/cares/cares/ares_fds.c +59 -0
  1225. data/third_party/cares/cares/ares_free_hostent.c +41 -0
  1226. data/third_party/cares/cares/ares_free_string.c +25 -0
  1227. data/third_party/cares/cares/ares_getenv.c +30 -0
  1228. data/third_party/cares/cares/ares_getenv.h +26 -0
  1229. data/third_party/cares/cares/ares_gethostbyaddr.c +294 -0
  1230. data/third_party/cares/cares/ares_gethostbyname.c +518 -0
  1231. data/third_party/cares/cares/ares_getnameinfo.c +442 -0
  1232. data/third_party/cares/cares/ares_getopt.c +122 -0
  1233. data/third_party/cares/cares/ares_getopt.h +53 -0
  1234. data/third_party/cares/cares/ares_getsock.c +66 -0
  1235. data/third_party/cares/cares/ares_inet_net_pton.h +25 -0
  1236. data/third_party/cares/cares/ares_init.c +2514 -0
  1237. data/third_party/cares/cares/ares_iphlpapi.h +221 -0
  1238. data/third_party/cares/cares/ares_ipv6.h +78 -0
  1239. data/third_party/cares/cares/ares_library_init.c +177 -0
  1240. data/third_party/cares/cares/ares_library_init.h +43 -0
  1241. data/third_party/cares/cares/ares_llist.c +63 -0
  1242. data/third_party/cares/cares/ares_llist.h +39 -0
  1243. data/third_party/cares/cares/ares_mkquery.c +24 -0
  1244. data/third_party/cares/cares/ares_nowarn.c +260 -0
  1245. data/third_party/cares/cares/ares_nowarn.h +61 -0
  1246. data/third_party/cares/cares/ares_options.c +402 -0
  1247. data/third_party/cares/cares/ares_parse_a_reply.c +264 -0
  1248. data/third_party/cares/cares/ares_parse_aaaa_reply.c +264 -0
  1249. data/third_party/cares/cares/ares_parse_mx_reply.c +170 -0
  1250. data/third_party/cares/cares/ares_parse_naptr_reply.c +193 -0
  1251. data/third_party/cares/cares/ares_parse_ns_reply.c +183 -0
  1252. data/third_party/cares/cares/ares_parse_ptr_reply.c +219 -0
  1253. data/third_party/cares/cares/ares_parse_soa_reply.c +133 -0
  1254. data/third_party/cares/cares/ares_parse_srv_reply.c +179 -0
  1255. data/third_party/cares/cares/ares_parse_txt_reply.c +220 -0
  1256. data/third_party/cares/cares/ares_platform.c +11035 -0
  1257. data/third_party/cares/cares/ares_platform.h +43 -0
  1258. data/third_party/cares/cares/ares_private.h +374 -0
  1259. data/third_party/cares/cares/ares_process.c +1448 -0
  1260. data/third_party/cares/cares/ares_query.c +186 -0
  1261. data/third_party/cares/cares/ares_rules.h +125 -0
  1262. data/third_party/cares/cares/ares_search.c +316 -0
  1263. data/third_party/cares/cares/ares_send.c +131 -0
  1264. data/third_party/cares/cares/ares_setup.h +217 -0
  1265. data/third_party/cares/cares/ares_strcasecmp.c +66 -0
  1266. data/third_party/cares/cares/ares_strcasecmp.h +30 -0
  1267. data/third_party/cares/cares/ares_strdup.c +49 -0
  1268. data/third_party/cares/cares/ares_strdup.h +24 -0
  1269. data/third_party/cares/cares/ares_strerror.c +56 -0
  1270. data/third_party/cares/cares/ares_timeout.c +88 -0
  1271. data/third_party/cares/cares/ares_version.c +11 -0
  1272. data/third_party/cares/cares/ares_version.h +24 -0
  1273. data/third_party/cares/cares/ares_writev.c +79 -0
  1274. data/third_party/cares/cares/bitncmp.c +59 -0
  1275. data/third_party/cares/cares/bitncmp.h +26 -0
  1276. data/third_party/cares/cares/config-win32.h +351 -0
  1277. data/third_party/cares/cares/inet_net_pton.c +450 -0
  1278. data/third_party/cares/cares/inet_ntop.c +208 -0
  1279. data/third_party/cares/cares/setup_once.h +554 -0
  1280. data/third_party/cares/cares/windows_port.c +22 -0
  1281. data/third_party/cares/config_darwin/ares_config.h +425 -0
  1282. data/third_party/cares/config_freebsd/ares_config.h +502 -0
  1283. data/third_party/cares/config_linux/ares_config.h +458 -0
  1284. data/third_party/cares/config_openbsd/ares_config.h +502 -0
  1285. data/third_party/nanopb/pb.h +579 -0
  1286. data/third_party/nanopb/pb_common.c +97 -0
  1287. data/third_party/nanopb/pb_common.h +42 -0
  1288. data/third_party/nanopb/pb_decode.c +1347 -0
  1289. data/third_party/nanopb/pb_decode.h +149 -0
  1290. data/third_party/nanopb/pb_encode.c +696 -0
  1291. data/third_party/nanopb/pb_encode.h +154 -0
  1292. data/third_party/zlib/adler32.c +186 -0
  1293. data/third_party/zlib/compress.c +86 -0
  1294. data/third_party/zlib/crc32.c +442 -0
  1295. data/third_party/zlib/crc32.h +441 -0
  1296. data/third_party/zlib/deflate.c +2163 -0
  1297. data/third_party/zlib/deflate.h +349 -0
  1298. data/third_party/zlib/gzclose.c +25 -0
  1299. data/third_party/zlib/gzguts.h +218 -0
  1300. data/third_party/zlib/gzlib.c +637 -0
  1301. data/third_party/zlib/gzread.c +654 -0
  1302. data/third_party/zlib/gzwrite.c +665 -0
  1303. data/third_party/zlib/infback.c +640 -0
  1304. data/third_party/zlib/inffast.c +323 -0
  1305. data/third_party/zlib/inffast.h +11 -0
  1306. data/third_party/zlib/inffixed.h +94 -0
  1307. data/third_party/zlib/inflate.c +1561 -0
  1308. data/third_party/zlib/inflate.h +125 -0
  1309. data/third_party/zlib/inftrees.c +304 -0
  1310. data/third_party/zlib/inftrees.h +62 -0
  1311. data/third_party/zlib/trees.c +1203 -0
  1312. data/third_party/zlib/trees.h +128 -0
  1313. data/third_party/zlib/uncompr.c +93 -0
  1314. data/third_party/zlib/zconf.h +534 -0
  1315. data/third_party/zlib/zlib.h +1912 -0
  1316. data/third_party/zlib/zutil.c +325 -0
  1317. data/third_party/zlib/zutil.h +271 -0
  1318. metadata +1586 -0
@@ -0,0 +1,1831 @@
1
+ /*
2
+ *
3
+ * Copyright 2015 gRPC authors.
4
+ *
5
+ * Licensed under the Apache License, Version 2.0 (the "License");
6
+ * you may not use this file except in compliance with the License.
7
+ * You may obtain a copy of the License at
8
+ *
9
+ * http://www.apache.org/licenses/LICENSE-2.0
10
+ *
11
+ * Unless required by applicable law or agreed to in writing, software
12
+ * distributed under the License is distributed on an "AS IS" BASIS,
13
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14
+ * See the License for the specific language governing permissions and
15
+ * limitations under the License.
16
+ *
17
+ */
18
+
19
+ #include <grpc/support/port_platform.h>
20
+
21
+ #include "src/core/tsi/ssl_transport_security.h"
22
+
23
+ #include <limits.h>
24
+ #include <string.h>
25
+
26
+ /* TODO(jboeuf): refactor inet_ntop into a portability header. */
27
+ /* Note: for whomever reads this and tries to refactor this, this
28
+ can't be in grpc, it has to be in gpr. */
29
+ #ifdef GPR_WINDOWS
30
+ #include <ws2tcpip.h>
31
+ #else
32
+ #include <arpa/inet.h>
33
+ #include <sys/socket.h>
34
+ #endif
35
+
36
+ #include <grpc/support/alloc.h>
37
+ #include <grpc/support/log.h>
38
+ #include <grpc/support/string_util.h>
39
+ #include <grpc/support/sync.h>
40
+ #include <grpc/support/thd_id.h>
41
+
42
+ extern "C" {
43
+ #include <openssl/bio.h>
44
+ #include <openssl/crypto.h> /* For OPENSSL_free */
45
+ #include <openssl/err.h>
46
+ #include <openssl/ssl.h>
47
+ #include <openssl/x509.h>
48
+ #include <openssl/x509v3.h>
49
+ }
50
+
51
+ #include "src/core/lib/gpr/useful.h"
52
+ #include "src/core/tsi/ssl/session_cache/ssl_session_cache.h"
53
+ #include "src/core/tsi/ssl_types.h"
54
+ #include "src/core/tsi/transport_security.h"
55
+
56
+ /* --- Constants. ---*/
57
+
58
+ #define TSI_SSL_MAX_PROTECTED_FRAME_SIZE_UPPER_BOUND 16384
59
+ #define TSI_SSL_MAX_PROTECTED_FRAME_SIZE_LOWER_BOUND 1024
60
+
61
+ /* Putting a macro like this and littering the source file with #if is really
62
+ bad practice.
63
+ TODO(jboeuf): refactor all the #if / #endif in a separate module. */
64
+ #ifndef TSI_OPENSSL_ALPN_SUPPORT
65
+ #define TSI_OPENSSL_ALPN_SUPPORT 1
66
+ #endif
67
+
68
+ /* TODO(jboeuf): I have not found a way to get this number dynamically from the
69
+ SSL structure. This is what we would ultimately want though... */
70
+ #define TSI_SSL_MAX_PROTECTION_OVERHEAD 100
71
+
72
+ /* --- Structure definitions. ---*/
73
+
74
+ struct tsi_ssl_root_certs_store {
75
+ X509_STORE* store;
76
+ };
77
+
78
+ struct tsi_ssl_handshaker_factory {
79
+ const tsi_ssl_handshaker_factory_vtable* vtable;
80
+ gpr_refcount refcount;
81
+ };
82
+
83
+ struct tsi_ssl_client_handshaker_factory {
84
+ tsi_ssl_handshaker_factory base;
85
+ SSL_CTX* ssl_context;
86
+ unsigned char* alpn_protocol_list;
87
+ size_t alpn_protocol_list_length;
88
+ grpc_core::RefCountedPtr<tsi::SslSessionLRUCache> session_cache;
89
+ };
90
+
91
+ struct tsi_ssl_server_handshaker_factory {
92
+ /* Several contexts to support SNI.
93
+ The tsi_peer array contains the subject names of the server certificates
94
+ associated with the contexts at the same index. */
95
+ tsi_ssl_handshaker_factory base;
96
+ SSL_CTX** ssl_contexts;
97
+ tsi_peer* ssl_context_x509_subject_names;
98
+ size_t ssl_context_count;
99
+ unsigned char* alpn_protocol_list;
100
+ size_t alpn_protocol_list_length;
101
+ };
102
+
103
+ typedef struct {
104
+ tsi_handshaker base;
105
+ SSL* ssl;
106
+ BIO* network_io;
107
+ tsi_result result;
108
+ tsi_ssl_handshaker_factory* factory_ref;
109
+ } tsi_ssl_handshaker;
110
+
111
+ typedef struct {
112
+ tsi_frame_protector base;
113
+ SSL* ssl;
114
+ BIO* network_io;
115
+ unsigned char* buffer;
116
+ size_t buffer_size;
117
+ size_t buffer_offset;
118
+ } tsi_ssl_frame_protector;
119
+
120
+ /* --- Library Initialization. ---*/
121
+
122
+ static gpr_once g_init_openssl_once = GPR_ONCE_INIT;
123
+ static gpr_mu* g_openssl_mutexes = nullptr;
124
+ static int g_ssl_ctx_ex_factory_index = -1;
125
+ static void openssl_locking_cb(int mode, int type, const char* file,
126
+ int line) GRPC_UNUSED;
127
+ static unsigned long openssl_thread_id_cb(void) GRPC_UNUSED;
128
+ static const unsigned char kSslSessionIdContext[] = {'g', 'r', 'p', 'c'};
129
+
130
+ static void openssl_locking_cb(int mode, int type, const char* file, int line) {
131
+ if (mode & CRYPTO_LOCK) {
132
+ gpr_mu_lock(&g_openssl_mutexes[type]);
133
+ } else {
134
+ gpr_mu_unlock(&g_openssl_mutexes[type]);
135
+ }
136
+ }
137
+
138
+ static unsigned long openssl_thread_id_cb(void) {
139
+ return static_cast<unsigned long>(gpr_thd_currentid());
140
+ }
141
+
142
+ static void init_openssl(void) {
143
+ int i;
144
+ int num_locks;
145
+ SSL_library_init();
146
+ SSL_load_error_strings();
147
+ OpenSSL_add_all_algorithms();
148
+ num_locks = CRYPTO_num_locks();
149
+ GPR_ASSERT(num_locks > 0);
150
+ g_openssl_mutexes = static_cast<gpr_mu*>(
151
+ gpr_malloc(static_cast<size_t>(num_locks) * sizeof(gpr_mu)));
152
+ for (i = 0; i < CRYPTO_num_locks(); i++) {
153
+ gpr_mu_init(&g_openssl_mutexes[i]);
154
+ }
155
+ CRYPTO_set_locking_callback(openssl_locking_cb);
156
+ CRYPTO_set_id_callback(openssl_thread_id_cb);
157
+ g_ssl_ctx_ex_factory_index =
158
+ SSL_CTX_get_ex_new_index(0, nullptr, nullptr, nullptr, nullptr);
159
+ GPR_ASSERT(g_ssl_ctx_ex_factory_index != -1);
160
+ }
161
+
162
+ /* --- Ssl utils. ---*/
163
+
164
+ static const char* ssl_error_string(int error) {
165
+ switch (error) {
166
+ case SSL_ERROR_NONE:
167
+ return "SSL_ERROR_NONE";
168
+ case SSL_ERROR_ZERO_RETURN:
169
+ return "SSL_ERROR_ZERO_RETURN";
170
+ case SSL_ERROR_WANT_READ:
171
+ return "SSL_ERROR_WANT_READ";
172
+ case SSL_ERROR_WANT_WRITE:
173
+ return "SSL_ERROR_WANT_WRITE";
174
+ case SSL_ERROR_WANT_CONNECT:
175
+ return "SSL_ERROR_WANT_CONNECT";
176
+ case SSL_ERROR_WANT_ACCEPT:
177
+ return "SSL_ERROR_WANT_ACCEPT";
178
+ case SSL_ERROR_WANT_X509_LOOKUP:
179
+ return "SSL_ERROR_WANT_X509_LOOKUP";
180
+ case SSL_ERROR_SYSCALL:
181
+ return "SSL_ERROR_SYSCALL";
182
+ case SSL_ERROR_SSL:
183
+ return "SSL_ERROR_SSL";
184
+ default:
185
+ return "Unknown error";
186
+ }
187
+ }
188
+
189
+ /* TODO(jboeuf): Remove when we are past the debugging phase with this code. */
190
+ static void ssl_log_where_info(const SSL* ssl, int where, int flag,
191
+ const char* msg) {
192
+ if ((where & flag) && tsi_tracing_enabled.enabled()) {
193
+ gpr_log(GPR_INFO, "%20.20s - %30.30s - %5.10s", msg,
194
+ SSL_state_string_long(ssl), SSL_state_string(ssl));
195
+ }
196
+ }
197
+
198
+ /* Used for debugging. TODO(jboeuf): Remove when code is mature enough. */
199
+ static void ssl_info_callback(const SSL* ssl, int where, int ret) {
200
+ if (ret == 0) {
201
+ gpr_log(GPR_ERROR, "ssl_info_callback: error occured.\n");
202
+ return;
203
+ }
204
+
205
+ ssl_log_where_info(ssl, where, SSL_CB_LOOP, "LOOP");
206
+ ssl_log_where_info(ssl, where, SSL_CB_HANDSHAKE_START, "HANDSHAKE START");
207
+ ssl_log_where_info(ssl, where, SSL_CB_HANDSHAKE_DONE, "HANDSHAKE DONE");
208
+ }
209
+
210
+ /* Returns 1 if name looks like an IP address, 0 otherwise.
211
+ This is a very rough heuristic, and only handles IPv6 in hexadecimal form. */
212
+ static int looks_like_ip_address(const char* name) {
213
+ size_t i;
214
+ size_t dot_count = 0;
215
+ size_t num_size = 0;
216
+ for (i = 0; i < strlen(name); i++) {
217
+ if (name[i] == ':') {
218
+ /* IPv6 Address in hexadecimal form, : is not allowed in DNS names. */
219
+ return 1;
220
+ }
221
+ if (name[i] >= '0' && name[i] <= '9') {
222
+ if (num_size > 3) return 0;
223
+ num_size++;
224
+ } else if (name[i] == '.') {
225
+ if (dot_count > 3 || num_size == 0) return 0;
226
+ dot_count++;
227
+ num_size = 0;
228
+ } else {
229
+ return 0;
230
+ }
231
+ }
232
+ if (dot_count < 3 || num_size == 0) return 0;
233
+ return 1;
234
+ }
235
+
236
+ /* Gets the subject CN from an X509 cert. */
237
+ static tsi_result ssl_get_x509_common_name(X509* cert, unsigned char** utf8,
238
+ size_t* utf8_size) {
239
+ int common_name_index = -1;
240
+ X509_NAME_ENTRY* common_name_entry = nullptr;
241
+ ASN1_STRING* common_name_asn1 = nullptr;
242
+ X509_NAME* subject_name = X509_get_subject_name(cert);
243
+ int utf8_returned_size = 0;
244
+ if (subject_name == nullptr) {
245
+ gpr_log(GPR_ERROR, "Could not get subject name from certificate.");
246
+ return TSI_NOT_FOUND;
247
+ }
248
+ common_name_index =
249
+ X509_NAME_get_index_by_NID(subject_name, NID_commonName, -1);
250
+ if (common_name_index == -1) {
251
+ gpr_log(GPR_ERROR,
252
+ "Could not get common name of subject from certificate.");
253
+ return TSI_NOT_FOUND;
254
+ }
255
+ common_name_entry = X509_NAME_get_entry(subject_name, common_name_index);
256
+ if (common_name_entry == nullptr) {
257
+ gpr_log(GPR_ERROR, "Could not get common name entry from certificate.");
258
+ return TSI_INTERNAL_ERROR;
259
+ }
260
+ common_name_asn1 = X509_NAME_ENTRY_get_data(common_name_entry);
261
+ if (common_name_asn1 == nullptr) {
262
+ gpr_log(GPR_ERROR,
263
+ "Could not get common name entry asn1 from certificate.");
264
+ return TSI_INTERNAL_ERROR;
265
+ }
266
+ utf8_returned_size = ASN1_STRING_to_UTF8(utf8, common_name_asn1);
267
+ if (utf8_returned_size < 0) {
268
+ gpr_log(GPR_ERROR, "Could not extract utf8 from asn1 string.");
269
+ return TSI_OUT_OF_RESOURCES;
270
+ }
271
+ *utf8_size = static_cast<size_t>(utf8_returned_size);
272
+ return TSI_OK;
273
+ }
274
+
275
+ /* Gets the subject CN of an X509 cert as a tsi_peer_property. */
276
+ static tsi_result peer_property_from_x509_common_name(
277
+ X509* cert, tsi_peer_property* property) {
278
+ unsigned char* common_name;
279
+ size_t common_name_size;
280
+ tsi_result result =
281
+ ssl_get_x509_common_name(cert, &common_name, &common_name_size);
282
+ if (result != TSI_OK) {
283
+ if (result == TSI_NOT_FOUND) {
284
+ common_name = nullptr;
285
+ common_name_size = 0;
286
+ } else {
287
+ return result;
288
+ }
289
+ }
290
+ result = tsi_construct_string_peer_property(
291
+ TSI_X509_SUBJECT_COMMON_NAME_PEER_PROPERTY,
292
+ common_name == nullptr ? "" : reinterpret_cast<const char*>(common_name),
293
+ common_name_size, property);
294
+ OPENSSL_free(common_name);
295
+ return result;
296
+ }
297
+
298
+ /* Gets the X509 cert in PEM format as a tsi_peer_property. */
299
+ static tsi_result add_pem_certificate(X509* cert, tsi_peer_property* property) {
300
+ BIO* bio = BIO_new(BIO_s_mem());
301
+ if (!PEM_write_bio_X509(bio, cert)) {
302
+ BIO_free(bio);
303
+ return TSI_INTERNAL_ERROR;
304
+ }
305
+ char* contents;
306
+ long len = BIO_get_mem_data(bio, &contents);
307
+ if (len <= 0) {
308
+ BIO_free(bio);
309
+ return TSI_INTERNAL_ERROR;
310
+ }
311
+ tsi_result result = tsi_construct_string_peer_property(
312
+ TSI_X509_PEM_CERT_PROPERTY, (const char*)contents,
313
+ static_cast<size_t>(len), property);
314
+ BIO_free(bio);
315
+ return result;
316
+ }
317
+
318
+ /* Gets the subject SANs from an X509 cert as a tsi_peer_property. */
319
+ static tsi_result add_subject_alt_names_properties_to_peer(
320
+ tsi_peer* peer, GENERAL_NAMES* subject_alt_names,
321
+ size_t subject_alt_name_count) {
322
+ size_t i;
323
+ tsi_result result = TSI_OK;
324
+
325
+ /* Reset for DNS entries filtering. */
326
+ peer->property_count -= subject_alt_name_count;
327
+
328
+ for (i = 0; i < subject_alt_name_count; i++) {
329
+ GENERAL_NAME* subject_alt_name =
330
+ sk_GENERAL_NAME_value(subject_alt_names, TSI_SIZE_AS_SIZE(i));
331
+ /* Filter out the non-dns entries names. */
332
+ if (subject_alt_name->type == GEN_DNS) {
333
+ unsigned char* name = nullptr;
334
+ int name_size;
335
+ name_size = ASN1_STRING_to_UTF8(&name, subject_alt_name->d.dNSName);
336
+ if (name_size < 0) {
337
+ gpr_log(GPR_ERROR, "Could not get utf8 from asn1 string.");
338
+ result = TSI_INTERNAL_ERROR;
339
+ break;
340
+ }
341
+ result = tsi_construct_string_peer_property(
342
+ TSI_X509_SUBJECT_ALTERNATIVE_NAME_PEER_PROPERTY,
343
+ reinterpret_cast<const char*>(name), static_cast<size_t>(name_size),
344
+ &peer->properties[peer->property_count++]);
345
+ OPENSSL_free(name);
346
+ } else if (subject_alt_name->type == GEN_IPADD) {
347
+ char ntop_buf[INET6_ADDRSTRLEN];
348
+ int af;
349
+
350
+ if (subject_alt_name->d.iPAddress->length == 4) {
351
+ af = AF_INET;
352
+ } else if (subject_alt_name->d.iPAddress->length == 16) {
353
+ af = AF_INET6;
354
+ } else {
355
+ gpr_log(GPR_ERROR, "SAN IP Address contained invalid IP");
356
+ result = TSI_INTERNAL_ERROR;
357
+ break;
358
+ }
359
+ const char* name = inet_ntop(af, subject_alt_name->d.iPAddress->data,
360
+ ntop_buf, INET6_ADDRSTRLEN);
361
+ if (name == nullptr) {
362
+ gpr_log(GPR_ERROR, "Could not get IP string from asn1 octet.");
363
+ result = TSI_INTERNAL_ERROR;
364
+ break;
365
+ }
366
+
367
+ result = tsi_construct_string_peer_property_from_cstring(
368
+ TSI_X509_SUBJECT_ALTERNATIVE_NAME_PEER_PROPERTY, name,
369
+ &peer->properties[peer->property_count++]);
370
+ }
371
+ if (result != TSI_OK) break;
372
+ }
373
+ return result;
374
+ }
375
+
376
+ /* Gets information about the peer's X509 cert as a tsi_peer object. */
377
+ static tsi_result peer_from_x509(X509* cert, int include_certificate_type,
378
+ tsi_peer* peer) {
379
+ /* TODO(jboeuf): Maybe add more properties. */
380
+ GENERAL_NAMES* subject_alt_names = static_cast<GENERAL_NAMES*>(
381
+ X509_get_ext_d2i(cert, NID_subject_alt_name, nullptr, nullptr));
382
+ int subject_alt_name_count =
383
+ (subject_alt_names != nullptr)
384
+ ? static_cast<int>(sk_GENERAL_NAME_num(subject_alt_names))
385
+ : 0;
386
+ size_t property_count;
387
+ tsi_result result;
388
+ GPR_ASSERT(subject_alt_name_count >= 0);
389
+ property_count = (include_certificate_type ? static_cast<size_t>(1) : 0) +
390
+ 2 /* common name, certificate */ +
391
+ static_cast<size_t>(subject_alt_name_count);
392
+ result = tsi_construct_peer(property_count, peer);
393
+ if (result != TSI_OK) return result;
394
+ do {
395
+ if (include_certificate_type) {
396
+ result = tsi_construct_string_peer_property_from_cstring(
397
+ TSI_CERTIFICATE_TYPE_PEER_PROPERTY, TSI_X509_CERTIFICATE_TYPE,
398
+ &peer->properties[0]);
399
+ if (result != TSI_OK) break;
400
+ }
401
+ result = peer_property_from_x509_common_name(
402
+ cert, &peer->properties[include_certificate_type ? 1 : 0]);
403
+ if (result != TSI_OK) break;
404
+
405
+ result = add_pem_certificate(
406
+ cert, &peer->properties[include_certificate_type ? 2 : 1]);
407
+ if (result != TSI_OK) break;
408
+
409
+ if (subject_alt_name_count != 0) {
410
+ result = add_subject_alt_names_properties_to_peer(
411
+ peer, subject_alt_names, static_cast<size_t>(subject_alt_name_count));
412
+ if (result != TSI_OK) break;
413
+ }
414
+ } while (0);
415
+
416
+ if (subject_alt_names != nullptr) {
417
+ sk_GENERAL_NAME_pop_free(subject_alt_names, GENERAL_NAME_free);
418
+ }
419
+ if (result != TSI_OK) tsi_peer_destruct(peer);
420
+ return result;
421
+ }
422
+
423
+ /* Logs the SSL error stack. */
424
+ static void log_ssl_error_stack(void) {
425
+ unsigned long err;
426
+ while ((err = ERR_get_error()) != 0) {
427
+ char details[256];
428
+ ERR_error_string_n(static_cast<uint32_t>(err), details, sizeof(details));
429
+ gpr_log(GPR_ERROR, "%s", details);
430
+ }
431
+ }
432
+
433
+ /* Performs an SSL_read and handle errors. */
434
+ static tsi_result do_ssl_read(SSL* ssl, unsigned char* unprotected_bytes,
435
+ size_t* unprotected_bytes_size) {
436
+ int read_from_ssl;
437
+ GPR_ASSERT(*unprotected_bytes_size <= INT_MAX);
438
+ read_from_ssl = SSL_read(ssl, unprotected_bytes,
439
+ static_cast<int>(*unprotected_bytes_size));
440
+ if (read_from_ssl <= 0) {
441
+ read_from_ssl = SSL_get_error(ssl, read_from_ssl);
442
+ switch (read_from_ssl) {
443
+ case SSL_ERROR_ZERO_RETURN: /* Received a close_notify alert. */
444
+ case SSL_ERROR_WANT_READ: /* We need more data to finish the frame. */
445
+ *unprotected_bytes_size = 0;
446
+ return TSI_OK;
447
+ case SSL_ERROR_WANT_WRITE:
448
+ gpr_log(
449
+ GPR_ERROR,
450
+ "Peer tried to renegotiate SSL connection. This is unsupported.");
451
+ return TSI_UNIMPLEMENTED;
452
+ case SSL_ERROR_SSL:
453
+ gpr_log(GPR_ERROR, "Corruption detected.");
454
+ log_ssl_error_stack();
455
+ return TSI_DATA_CORRUPTED;
456
+ default:
457
+ gpr_log(GPR_ERROR, "SSL_read failed with error %s.",
458
+ ssl_error_string(read_from_ssl));
459
+ return TSI_PROTOCOL_FAILURE;
460
+ }
461
+ }
462
+ *unprotected_bytes_size = static_cast<size_t>(read_from_ssl);
463
+ return TSI_OK;
464
+ }
465
+
466
+ /* Performs an SSL_write and handle errors. */
467
+ static tsi_result do_ssl_write(SSL* ssl, unsigned char* unprotected_bytes,
468
+ size_t unprotected_bytes_size) {
469
+ int ssl_write_result;
470
+ GPR_ASSERT(unprotected_bytes_size <= INT_MAX);
471
+ ssl_write_result = SSL_write(ssl, unprotected_bytes,
472
+ static_cast<int>(unprotected_bytes_size));
473
+ if (ssl_write_result < 0) {
474
+ ssl_write_result = SSL_get_error(ssl, ssl_write_result);
475
+ if (ssl_write_result == SSL_ERROR_WANT_READ) {
476
+ gpr_log(GPR_ERROR,
477
+ "Peer tried to renegotiate SSL connection. This is unsupported.");
478
+ return TSI_UNIMPLEMENTED;
479
+ } else {
480
+ gpr_log(GPR_ERROR, "SSL_write failed with error %s.",
481
+ ssl_error_string(ssl_write_result));
482
+ return TSI_INTERNAL_ERROR;
483
+ }
484
+ }
485
+ return TSI_OK;
486
+ }
487
+
488
+ /* Loads an in-memory PEM certificate chain into the SSL context. */
489
+ static tsi_result ssl_ctx_use_certificate_chain(SSL_CTX* context,
490
+ const char* pem_cert_chain,
491
+ size_t pem_cert_chain_size) {
492
+ tsi_result result = TSI_OK;
493
+ X509* certificate = nullptr;
494
+ BIO* pem;
495
+ GPR_ASSERT(pem_cert_chain_size <= INT_MAX);
496
+ pem = BIO_new_mem_buf((void*)pem_cert_chain,
497
+ static_cast<int>(pem_cert_chain_size));
498
+ if (pem == nullptr) return TSI_OUT_OF_RESOURCES;
499
+
500
+ do {
501
+ certificate = PEM_read_bio_X509_AUX(pem, nullptr, nullptr, (void*)"");
502
+ if (certificate == nullptr) {
503
+ result = TSI_INVALID_ARGUMENT;
504
+ break;
505
+ }
506
+ if (!SSL_CTX_use_certificate(context, certificate)) {
507
+ result = TSI_INVALID_ARGUMENT;
508
+ break;
509
+ }
510
+ while (1) {
511
+ X509* certificate_authority =
512
+ PEM_read_bio_X509(pem, nullptr, nullptr, (void*)"");
513
+ if (certificate_authority == nullptr) {
514
+ ERR_clear_error();
515
+ break; /* Done reading. */
516
+ }
517
+ if (!SSL_CTX_add_extra_chain_cert(context, certificate_authority)) {
518
+ X509_free(certificate_authority);
519
+ result = TSI_INVALID_ARGUMENT;
520
+ break;
521
+ }
522
+ /* We don't need to free certificate_authority as its ownership has been
523
+ transfered to the context. That is not the case for certificate though.
524
+ */
525
+ }
526
+ } while (0);
527
+
528
+ if (certificate != nullptr) X509_free(certificate);
529
+ BIO_free(pem);
530
+ return result;
531
+ }
532
+
533
+ /* Loads an in-memory PEM private key into the SSL context. */
534
+ static tsi_result ssl_ctx_use_private_key(SSL_CTX* context, const char* pem_key,
535
+ size_t pem_key_size) {
536
+ tsi_result result = TSI_OK;
537
+ EVP_PKEY* private_key = nullptr;
538
+ BIO* pem;
539
+ GPR_ASSERT(pem_key_size <= INT_MAX);
540
+ pem = BIO_new_mem_buf((void*)pem_key, static_cast<int>(pem_key_size));
541
+ if (pem == nullptr) return TSI_OUT_OF_RESOURCES;
542
+ do {
543
+ private_key = PEM_read_bio_PrivateKey(pem, nullptr, nullptr, (void*)"");
544
+ if (private_key == nullptr) {
545
+ result = TSI_INVALID_ARGUMENT;
546
+ break;
547
+ }
548
+ if (!SSL_CTX_use_PrivateKey(context, private_key)) {
549
+ result = TSI_INVALID_ARGUMENT;
550
+ break;
551
+ }
552
+ } while (0);
553
+ if (private_key != nullptr) EVP_PKEY_free(private_key);
554
+ BIO_free(pem);
555
+ return result;
556
+ }
557
+
558
+ /* Loads in-memory PEM verification certs into the SSL context and optionally
559
+ returns the verification cert names (root_names can be NULL). */
560
+ static tsi_result x509_store_load_certs(X509_STORE* cert_store,
561
+ const char* pem_roots,
562
+ size_t pem_roots_size,
563
+ STACK_OF(X509_NAME) * *root_names) {
564
+ tsi_result result = TSI_OK;
565
+ size_t num_roots = 0;
566
+ X509* root = nullptr;
567
+ X509_NAME* root_name = nullptr;
568
+ BIO* pem;
569
+ GPR_ASSERT(pem_roots_size <= INT_MAX);
570
+ pem = BIO_new_mem_buf((void*)pem_roots, static_cast<int>(pem_roots_size));
571
+ if (cert_store == nullptr) return TSI_INVALID_ARGUMENT;
572
+ if (pem == nullptr) return TSI_OUT_OF_RESOURCES;
573
+ if (root_names != nullptr) {
574
+ *root_names = sk_X509_NAME_new_null();
575
+ if (*root_names == nullptr) return TSI_OUT_OF_RESOURCES;
576
+ }
577
+
578
+ while (1) {
579
+ root = PEM_read_bio_X509_AUX(pem, nullptr, nullptr, (void*)"");
580
+ if (root == nullptr) {
581
+ ERR_clear_error();
582
+ break; /* We're at the end of stream. */
583
+ }
584
+ if (root_names != nullptr) {
585
+ root_name = X509_get_subject_name(root);
586
+ if (root_name == nullptr) {
587
+ gpr_log(GPR_ERROR, "Could not get name from root certificate.");
588
+ result = TSI_INVALID_ARGUMENT;
589
+ break;
590
+ }
591
+ root_name = X509_NAME_dup(root_name);
592
+ if (root_name == nullptr) {
593
+ result = TSI_OUT_OF_RESOURCES;
594
+ break;
595
+ }
596
+ sk_X509_NAME_push(*root_names, root_name);
597
+ root_name = nullptr;
598
+ }
599
+ if (!X509_STORE_add_cert(cert_store, root)) {
600
+ gpr_log(GPR_ERROR, "Could not add root certificate to ssl context.");
601
+ result = TSI_INTERNAL_ERROR;
602
+ break;
603
+ }
604
+ X509_free(root);
605
+ num_roots++;
606
+ }
607
+
608
+ if (num_roots == 0) {
609
+ gpr_log(GPR_ERROR, "Could not load any root certificate.");
610
+ result = TSI_INVALID_ARGUMENT;
611
+ }
612
+
613
+ if (result != TSI_OK) {
614
+ if (root != nullptr) X509_free(root);
615
+ if (root_names != nullptr) {
616
+ sk_X509_NAME_pop_free(*root_names, X509_NAME_free);
617
+ *root_names = nullptr;
618
+ if (root_name != nullptr) X509_NAME_free(root_name);
619
+ }
620
+ }
621
+ BIO_free(pem);
622
+ return result;
623
+ }
624
+
625
+ static tsi_result ssl_ctx_load_verification_certs(SSL_CTX* context,
626
+ const char* pem_roots,
627
+ size_t pem_roots_size,
628
+ STACK_OF(X509_NAME) *
629
+ *root_name) {
630
+ X509_STORE* cert_store = SSL_CTX_get_cert_store(context);
631
+ return x509_store_load_certs(cert_store, pem_roots, pem_roots_size,
632
+ root_name);
633
+ }
634
+
635
+ /* Populates the SSL context with a private key and a cert chain, and sets the
636
+ cipher list and the ephemeral ECDH key. */
637
+ static tsi_result populate_ssl_context(
638
+ SSL_CTX* context, const tsi_ssl_pem_key_cert_pair* key_cert_pair,
639
+ const char* cipher_list) {
640
+ tsi_result result = TSI_OK;
641
+ if (key_cert_pair != nullptr) {
642
+ if (key_cert_pair->cert_chain != nullptr) {
643
+ result = ssl_ctx_use_certificate_chain(context, key_cert_pair->cert_chain,
644
+ strlen(key_cert_pair->cert_chain));
645
+ if (result != TSI_OK) {
646
+ gpr_log(GPR_ERROR, "Invalid cert chain file.");
647
+ return result;
648
+ }
649
+ }
650
+ if (key_cert_pair->private_key != nullptr) {
651
+ result = ssl_ctx_use_private_key(context, key_cert_pair->private_key,
652
+ strlen(key_cert_pair->private_key));
653
+ if (result != TSI_OK || !SSL_CTX_check_private_key(context)) {
654
+ gpr_log(GPR_ERROR, "Invalid private key.");
655
+ return result != TSI_OK ? result : TSI_INVALID_ARGUMENT;
656
+ }
657
+ }
658
+ }
659
+ if ((cipher_list != nullptr) &&
660
+ !SSL_CTX_set_cipher_list(context, cipher_list)) {
661
+ gpr_log(GPR_ERROR, "Invalid cipher list: %s.", cipher_list);
662
+ return TSI_INVALID_ARGUMENT;
663
+ }
664
+ {
665
+ EC_KEY* ecdh = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1);
666
+ if (!SSL_CTX_set_tmp_ecdh(context, ecdh)) {
667
+ gpr_log(GPR_ERROR, "Could not set ephemeral ECDH key.");
668
+ EC_KEY_free(ecdh);
669
+ return TSI_INTERNAL_ERROR;
670
+ }
671
+ SSL_CTX_set_options(context, SSL_OP_SINGLE_ECDH_USE);
672
+ EC_KEY_free(ecdh);
673
+ }
674
+ return TSI_OK;
675
+ }
676
+
677
+ /* Extracts the CN and the SANs from an X509 cert as a peer object. */
678
+ static tsi_result extract_x509_subject_names_from_pem_cert(const char* pem_cert,
679
+ tsi_peer* peer) {
680
+ tsi_result result = TSI_OK;
681
+ X509* cert = nullptr;
682
+ BIO* pem;
683
+ pem = BIO_new_mem_buf((void*)pem_cert, static_cast<int>(strlen(pem_cert)));
684
+ if (pem == nullptr) return TSI_OUT_OF_RESOURCES;
685
+
686
+ cert = PEM_read_bio_X509(pem, nullptr, nullptr, (void*)"");
687
+ if (cert == nullptr) {
688
+ gpr_log(GPR_ERROR, "Invalid certificate");
689
+ result = TSI_INVALID_ARGUMENT;
690
+ } else {
691
+ result = peer_from_x509(cert, 0, peer);
692
+ }
693
+ if (cert != nullptr) X509_free(cert);
694
+ BIO_free(pem);
695
+ return result;
696
+ }
697
+
698
+ /* Builds the alpn protocol name list according to rfc 7301. */
699
+ static tsi_result build_alpn_protocol_name_list(
700
+ const char** alpn_protocols, uint16_t num_alpn_protocols,
701
+ unsigned char** protocol_name_list, size_t* protocol_name_list_length) {
702
+ uint16_t i;
703
+ unsigned char* current;
704
+ *protocol_name_list = nullptr;
705
+ *protocol_name_list_length = 0;
706
+ if (num_alpn_protocols == 0) return TSI_INVALID_ARGUMENT;
707
+ for (i = 0; i < num_alpn_protocols; i++) {
708
+ size_t length =
709
+ alpn_protocols[i] == nullptr ? 0 : strlen(alpn_protocols[i]);
710
+ if (length == 0 || length > 255) {
711
+ gpr_log(GPR_ERROR, "Invalid protocol name length: %d.",
712
+ static_cast<int>(length));
713
+ return TSI_INVALID_ARGUMENT;
714
+ }
715
+ *protocol_name_list_length += length + 1;
716
+ }
717
+ *protocol_name_list =
718
+ static_cast<unsigned char*>(gpr_malloc(*protocol_name_list_length));
719
+ if (*protocol_name_list == nullptr) return TSI_OUT_OF_RESOURCES;
720
+ current = *protocol_name_list;
721
+ for (i = 0; i < num_alpn_protocols; i++) {
722
+ size_t length = strlen(alpn_protocols[i]);
723
+ *(current++) = static_cast<uint8_t>(length); /* max checked above. */
724
+ memcpy(current, alpn_protocols[i], length);
725
+ current += length;
726
+ }
727
+ /* Safety check. */
728
+ if ((current < *protocol_name_list) ||
729
+ (static_cast<uintptr_t>(current - *protocol_name_list) !=
730
+ *protocol_name_list_length)) {
731
+ return TSI_INTERNAL_ERROR;
732
+ }
733
+ return TSI_OK;
734
+ }
735
+
736
+ // The verification callback is used for clients that don't really care about
737
+ // the server's certificate, but we need to pull it anyway, in case a higher
738
+ // layer wants to look at it. In this case the verification may fail, but
739
+ // we don't really care.
740
+ static int NullVerifyCallback(int preverify_ok, X509_STORE_CTX* ctx) {
741
+ return 1;
742
+ }
743
+
744
+ /* --- tsi_ssl_root_certs_store methods implementation. ---*/
745
+
746
+ tsi_ssl_root_certs_store* tsi_ssl_root_certs_store_create(
747
+ const char* pem_roots) {
748
+ if (pem_roots == nullptr) {
749
+ gpr_log(GPR_ERROR, "The root certificates are empty.");
750
+ return nullptr;
751
+ }
752
+ tsi_ssl_root_certs_store* root_store = static_cast<tsi_ssl_root_certs_store*>(
753
+ gpr_zalloc(sizeof(tsi_ssl_root_certs_store)));
754
+ if (root_store == nullptr) {
755
+ gpr_log(GPR_ERROR, "Could not allocate buffer for ssl_root_certs_store.");
756
+ return nullptr;
757
+ }
758
+ root_store->store = X509_STORE_new();
759
+ if (root_store->store == nullptr) {
760
+ gpr_log(GPR_ERROR, "Could not allocate buffer for X509_STORE.");
761
+ gpr_free(root_store);
762
+ return nullptr;
763
+ }
764
+ tsi_result result = x509_store_load_certs(root_store->store, pem_roots,
765
+ strlen(pem_roots), nullptr);
766
+ if (result != TSI_OK) {
767
+ gpr_log(GPR_ERROR, "Could not load root certificates.");
768
+ X509_STORE_free(root_store->store);
769
+ gpr_free(root_store);
770
+ return nullptr;
771
+ }
772
+ return root_store;
773
+ }
774
+
775
+ void tsi_ssl_root_certs_store_destroy(tsi_ssl_root_certs_store* self) {
776
+ if (self == nullptr) return;
777
+ X509_STORE_free(self->store);
778
+ gpr_free(self);
779
+ }
780
+
781
+ /* --- tsi_ssl_session_cache methods implementation. ---*/
782
+
783
+ tsi_ssl_session_cache* tsi_ssl_session_cache_create_lru(size_t capacity) {
784
+ /* Pointer will be dereferenced by unref call. */
785
+ return reinterpret_cast<tsi_ssl_session_cache*>(
786
+ tsi::SslSessionLRUCache::Create(capacity).release());
787
+ }
788
+
789
+ void tsi_ssl_session_cache_ref(tsi_ssl_session_cache* cache) {
790
+ /* Pointer will be dereferenced by unref call. */
791
+ reinterpret_cast<tsi::SslSessionLRUCache*>(cache)->Ref().release();
792
+ }
793
+
794
+ void tsi_ssl_session_cache_unref(tsi_ssl_session_cache* cache) {
795
+ reinterpret_cast<tsi::SslSessionLRUCache*>(cache)->Unref();
796
+ }
797
+
798
+ /* --- tsi_frame_protector methods implementation. ---*/
799
+
800
+ static tsi_result ssl_protector_protect(tsi_frame_protector* self,
801
+ const unsigned char* unprotected_bytes,
802
+ size_t* unprotected_bytes_size,
803
+ unsigned char* protected_output_frames,
804
+ size_t* protected_output_frames_size) {
805
+ tsi_ssl_frame_protector* impl =
806
+ reinterpret_cast<tsi_ssl_frame_protector*>(self);
807
+ int read_from_ssl;
808
+ size_t available;
809
+ tsi_result result = TSI_OK;
810
+
811
+ /* First see if we have some pending data in the SSL BIO. */
812
+ int pending_in_ssl = static_cast<int>(BIO_pending(impl->network_io));
813
+ if (pending_in_ssl > 0) {
814
+ *unprotected_bytes_size = 0;
815
+ GPR_ASSERT(*protected_output_frames_size <= INT_MAX);
816
+ read_from_ssl = BIO_read(impl->network_io, protected_output_frames,
817
+ static_cast<int>(*protected_output_frames_size));
818
+ if (read_from_ssl < 0) {
819
+ gpr_log(GPR_ERROR,
820
+ "Could not read from BIO even though some data is pending");
821
+ return TSI_INTERNAL_ERROR;
822
+ }
823
+ *protected_output_frames_size = static_cast<size_t>(read_from_ssl);
824
+ return TSI_OK;
825
+ }
826
+
827
+ /* Now see if we can send a complete frame. */
828
+ available = impl->buffer_size - impl->buffer_offset;
829
+ if (available > *unprotected_bytes_size) {
830
+ /* If we cannot, just copy the data in our internal buffer. */
831
+ memcpy(impl->buffer + impl->buffer_offset, unprotected_bytes,
832
+ *unprotected_bytes_size);
833
+ impl->buffer_offset += *unprotected_bytes_size;
834
+ *protected_output_frames_size = 0;
835
+ return TSI_OK;
836
+ }
837
+
838
+ /* If we can, prepare the buffer, send it to SSL_write and read. */
839
+ memcpy(impl->buffer + impl->buffer_offset, unprotected_bytes, available);
840
+ result = do_ssl_write(impl->ssl, impl->buffer, impl->buffer_size);
841
+ if (result != TSI_OK) return result;
842
+
843
+ GPR_ASSERT(*protected_output_frames_size <= INT_MAX);
844
+ read_from_ssl = BIO_read(impl->network_io, protected_output_frames,
845
+ static_cast<int>(*protected_output_frames_size));
846
+ if (read_from_ssl < 0) {
847
+ gpr_log(GPR_ERROR, "Could not read from BIO after SSL_write.");
848
+ return TSI_INTERNAL_ERROR;
849
+ }
850
+ *protected_output_frames_size = static_cast<size_t>(read_from_ssl);
851
+ *unprotected_bytes_size = available;
852
+ impl->buffer_offset = 0;
853
+ return TSI_OK;
854
+ }
855
+
856
+ static tsi_result ssl_protector_protect_flush(
857
+ tsi_frame_protector* self, unsigned char* protected_output_frames,
858
+ size_t* protected_output_frames_size, size_t* still_pending_size) {
859
+ tsi_result result = TSI_OK;
860
+ tsi_ssl_frame_protector* impl =
861
+ reinterpret_cast<tsi_ssl_frame_protector*>(self);
862
+ int read_from_ssl = 0;
863
+ int pending;
864
+
865
+ if (impl->buffer_offset != 0) {
866
+ result = do_ssl_write(impl->ssl, impl->buffer, impl->buffer_offset);
867
+ if (result != TSI_OK) return result;
868
+ impl->buffer_offset = 0;
869
+ }
870
+
871
+ pending = static_cast<int>(BIO_pending(impl->network_io));
872
+ GPR_ASSERT(pending >= 0);
873
+ *still_pending_size = static_cast<size_t>(pending);
874
+ if (*still_pending_size == 0) return TSI_OK;
875
+
876
+ GPR_ASSERT(*protected_output_frames_size <= INT_MAX);
877
+ read_from_ssl = BIO_read(impl->network_io, protected_output_frames,
878
+ static_cast<int>(*protected_output_frames_size));
879
+ if (read_from_ssl <= 0) {
880
+ gpr_log(GPR_ERROR, "Could not read from BIO after SSL_write.");
881
+ return TSI_INTERNAL_ERROR;
882
+ }
883
+ *protected_output_frames_size = static_cast<size_t>(read_from_ssl);
884
+ pending = static_cast<int>(BIO_pending(impl->network_io));
885
+ GPR_ASSERT(pending >= 0);
886
+ *still_pending_size = static_cast<size_t>(pending);
887
+ return TSI_OK;
888
+ }
889
+
890
+ static tsi_result ssl_protector_unprotect(
891
+ tsi_frame_protector* self, const unsigned char* protected_frames_bytes,
892
+ size_t* protected_frames_bytes_size, unsigned char* unprotected_bytes,
893
+ size_t* unprotected_bytes_size) {
894
+ tsi_result result = TSI_OK;
895
+ int written_into_ssl = 0;
896
+ size_t output_bytes_size = *unprotected_bytes_size;
897
+ size_t output_bytes_offset = 0;
898
+ tsi_ssl_frame_protector* impl =
899
+ reinterpret_cast<tsi_ssl_frame_protector*>(self);
900
+
901
+ /* First, try to read remaining data from ssl. */
902
+ result = do_ssl_read(impl->ssl, unprotected_bytes, unprotected_bytes_size);
903
+ if (result != TSI_OK) return result;
904
+ if (*unprotected_bytes_size == output_bytes_size) {
905
+ /* We have read everything we could and cannot process any more input. */
906
+ *protected_frames_bytes_size = 0;
907
+ return TSI_OK;
908
+ }
909
+ output_bytes_offset = *unprotected_bytes_size;
910
+ unprotected_bytes += output_bytes_offset;
911
+ *unprotected_bytes_size = output_bytes_size - output_bytes_offset;
912
+
913
+ /* Then, try to write some data to ssl. */
914
+ GPR_ASSERT(*protected_frames_bytes_size <= INT_MAX);
915
+ written_into_ssl = BIO_write(impl->network_io, protected_frames_bytes,
916
+ static_cast<int>(*protected_frames_bytes_size));
917
+ if (written_into_ssl < 0) {
918
+ gpr_log(GPR_ERROR, "Sending protected frame to ssl failed with %d",
919
+ written_into_ssl);
920
+ return TSI_INTERNAL_ERROR;
921
+ }
922
+ *protected_frames_bytes_size = static_cast<size_t>(written_into_ssl);
923
+
924
+ /* Now try to read some data again. */
925
+ result = do_ssl_read(impl->ssl, unprotected_bytes, unprotected_bytes_size);
926
+ if (result == TSI_OK) {
927
+ /* Don't forget to output the total number of bytes read. */
928
+ *unprotected_bytes_size += output_bytes_offset;
929
+ }
930
+ return result;
931
+ }
932
+
933
+ static void ssl_protector_destroy(tsi_frame_protector* self) {
934
+ tsi_ssl_frame_protector* impl =
935
+ reinterpret_cast<tsi_ssl_frame_protector*>(self);
936
+ if (impl->buffer != nullptr) gpr_free(impl->buffer);
937
+ if (impl->ssl != nullptr) SSL_free(impl->ssl);
938
+ if (impl->network_io != nullptr) BIO_free(impl->network_io);
939
+ gpr_free(self);
940
+ }
941
+
942
+ static const tsi_frame_protector_vtable frame_protector_vtable = {
943
+ ssl_protector_protect,
944
+ ssl_protector_protect_flush,
945
+ ssl_protector_unprotect,
946
+ ssl_protector_destroy,
947
+ };
948
+
949
+ /* --- tsi_server_handshaker_factory methods implementation. --- */
950
+
951
+ static void tsi_ssl_handshaker_factory_destroy(
952
+ tsi_ssl_handshaker_factory* self) {
953
+ if (self == nullptr) return;
954
+
955
+ if (self->vtable != nullptr && self->vtable->destroy != nullptr) {
956
+ self->vtable->destroy(self);
957
+ }
958
+ /* Note, we don't free(self) here because this object is always directly
959
+ * embedded in another object. If tsi_ssl_handshaker_factory_init allocates
960
+ * any memory, it should be free'd here. */
961
+ }
962
+
963
+ static tsi_ssl_handshaker_factory* tsi_ssl_handshaker_factory_ref(
964
+ tsi_ssl_handshaker_factory* self) {
965
+ if (self == nullptr) return nullptr;
966
+ gpr_refn(&self->refcount, 1);
967
+ return self;
968
+ }
969
+
970
+ static void tsi_ssl_handshaker_factory_unref(tsi_ssl_handshaker_factory* self) {
971
+ if (self == nullptr) return;
972
+
973
+ if (gpr_unref(&self->refcount)) {
974
+ tsi_ssl_handshaker_factory_destroy(self);
975
+ }
976
+ }
977
+
978
+ static tsi_ssl_handshaker_factory_vtable handshaker_factory_vtable = {nullptr};
979
+
980
+ /* Initializes a tsi_ssl_handshaker_factory object. Caller is responsible for
981
+ * allocating memory for the factory. */
982
+ static void tsi_ssl_handshaker_factory_init(
983
+ tsi_ssl_handshaker_factory* factory) {
984
+ GPR_ASSERT(factory != nullptr);
985
+
986
+ factory->vtable = &handshaker_factory_vtable;
987
+ gpr_ref_init(&factory->refcount, 1);
988
+ }
989
+
990
+ /* --- tsi_handshaker methods implementation. ---*/
991
+
992
+ static tsi_result ssl_handshaker_get_bytes_to_send_to_peer(tsi_handshaker* self,
993
+ unsigned char* bytes,
994
+ size_t* bytes_size) {
995
+ tsi_ssl_handshaker* impl = reinterpret_cast<tsi_ssl_handshaker*>(self);
996
+ int bytes_read_from_ssl = 0;
997
+ if (bytes == nullptr || bytes_size == nullptr || *bytes_size == 0 ||
998
+ *bytes_size > INT_MAX) {
999
+ return TSI_INVALID_ARGUMENT;
1000
+ }
1001
+ GPR_ASSERT(*bytes_size <= INT_MAX);
1002
+ bytes_read_from_ssl =
1003
+ BIO_read(impl->network_io, bytes, static_cast<int>(*bytes_size));
1004
+ if (bytes_read_from_ssl < 0) {
1005
+ *bytes_size = 0;
1006
+ if (!BIO_should_retry(impl->network_io)) {
1007
+ impl->result = TSI_INTERNAL_ERROR;
1008
+ return impl->result;
1009
+ } else {
1010
+ return TSI_OK;
1011
+ }
1012
+ }
1013
+ *bytes_size = static_cast<size_t>(bytes_read_from_ssl);
1014
+ return BIO_pending(impl->network_io) == 0 ? TSI_OK : TSI_INCOMPLETE_DATA;
1015
+ }
1016
+
1017
+ static tsi_result ssl_handshaker_get_result(tsi_handshaker* self) {
1018
+ tsi_ssl_handshaker* impl = reinterpret_cast<tsi_ssl_handshaker*>(self);
1019
+ if ((impl->result == TSI_HANDSHAKE_IN_PROGRESS) &&
1020
+ SSL_is_init_finished(impl->ssl)) {
1021
+ impl->result = TSI_OK;
1022
+ }
1023
+ return impl->result;
1024
+ }
1025
+
1026
+ static tsi_result ssl_handshaker_process_bytes_from_peer(
1027
+ tsi_handshaker* self, const unsigned char* bytes, size_t* bytes_size) {
1028
+ tsi_ssl_handshaker* impl = reinterpret_cast<tsi_ssl_handshaker*>(self);
1029
+ int bytes_written_into_ssl_size = 0;
1030
+ if (bytes == nullptr || bytes_size == nullptr || *bytes_size > INT_MAX) {
1031
+ return TSI_INVALID_ARGUMENT;
1032
+ }
1033
+ GPR_ASSERT(*bytes_size <= INT_MAX);
1034
+ bytes_written_into_ssl_size =
1035
+ BIO_write(impl->network_io, bytes, static_cast<int>(*bytes_size));
1036
+ if (bytes_written_into_ssl_size < 0) {
1037
+ gpr_log(GPR_ERROR, "Could not write to memory BIO.");
1038
+ impl->result = TSI_INTERNAL_ERROR;
1039
+ return impl->result;
1040
+ }
1041
+ *bytes_size = static_cast<size_t>(bytes_written_into_ssl_size);
1042
+
1043
+ if (!tsi_handshaker_is_in_progress(self)) {
1044
+ impl->result = TSI_OK;
1045
+ return impl->result;
1046
+ } else {
1047
+ /* Get ready to get some bytes from SSL. */
1048
+ int ssl_result = SSL_do_handshake(impl->ssl);
1049
+ ssl_result = SSL_get_error(impl->ssl, ssl_result);
1050
+ switch (ssl_result) {
1051
+ case SSL_ERROR_WANT_READ:
1052
+ if (BIO_pending(impl->network_io) == 0) {
1053
+ /* We need more data. */
1054
+ return TSI_INCOMPLETE_DATA;
1055
+ } else {
1056
+ return TSI_OK;
1057
+ }
1058
+ case SSL_ERROR_NONE:
1059
+ return TSI_OK;
1060
+ default: {
1061
+ char err_str[256];
1062
+ ERR_error_string_n(ERR_get_error(), err_str, sizeof(err_str));
1063
+ gpr_log(GPR_ERROR, "Handshake failed with fatal error %s: %s.",
1064
+ ssl_error_string(ssl_result), err_str);
1065
+ impl->result = TSI_PROTOCOL_FAILURE;
1066
+ return impl->result;
1067
+ }
1068
+ }
1069
+ }
1070
+ }
1071
+
1072
+ static tsi_result ssl_handshaker_extract_peer(tsi_handshaker* self,
1073
+ tsi_peer* peer) {
1074
+ tsi_result result = TSI_OK;
1075
+ const unsigned char* alpn_selected = nullptr;
1076
+ unsigned int alpn_selected_len;
1077
+ tsi_ssl_handshaker* impl = reinterpret_cast<tsi_ssl_handshaker*>(self);
1078
+ X509* peer_cert = SSL_get_peer_certificate(impl->ssl);
1079
+ if (peer_cert != nullptr) {
1080
+ result = peer_from_x509(peer_cert, 1, peer);
1081
+ X509_free(peer_cert);
1082
+ if (result != TSI_OK) return result;
1083
+ }
1084
+ #if TSI_OPENSSL_ALPN_SUPPORT
1085
+ SSL_get0_alpn_selected(impl->ssl, &alpn_selected, &alpn_selected_len);
1086
+ #endif /* TSI_OPENSSL_ALPN_SUPPORT */
1087
+ if (alpn_selected == nullptr) {
1088
+ /* Try npn. */
1089
+ SSL_get0_next_proto_negotiated(impl->ssl, &alpn_selected,
1090
+ &alpn_selected_len);
1091
+ }
1092
+
1093
+ // 1 is for session reused property.
1094
+ size_t new_property_count = peer->property_count + 1;
1095
+ if (alpn_selected != nullptr) new_property_count++;
1096
+ tsi_peer_property* new_properties = static_cast<tsi_peer_property*>(
1097
+ gpr_zalloc(sizeof(*new_properties) * new_property_count));
1098
+ for (size_t i = 0; i < peer->property_count; i++) {
1099
+ new_properties[i] = peer->properties[i];
1100
+ }
1101
+ if (peer->properties != nullptr) gpr_free(peer->properties);
1102
+ peer->properties = new_properties;
1103
+
1104
+ if (alpn_selected != nullptr) {
1105
+ result = tsi_construct_string_peer_property(
1106
+ TSI_SSL_ALPN_SELECTED_PROTOCOL,
1107
+ reinterpret_cast<const char*>(alpn_selected), alpn_selected_len,
1108
+ &peer->properties[peer->property_count]);
1109
+ if (result != TSI_OK) return result;
1110
+ peer->property_count++;
1111
+ }
1112
+
1113
+ const char* session_reused = SSL_session_reused(impl->ssl) ? "true" : "false";
1114
+ result = tsi_construct_string_peer_property(
1115
+ TSI_SSL_SESSION_REUSED_PEER_PROPERTY, session_reused,
1116
+ strlen(session_reused) + 1, &peer->properties[peer->property_count]);
1117
+ if (result != TSI_OK) return result;
1118
+ peer->property_count++;
1119
+
1120
+ return result;
1121
+ }
1122
+
1123
+ static tsi_result ssl_handshaker_create_frame_protector(
1124
+ tsi_handshaker* self, size_t* max_output_protected_frame_size,
1125
+ tsi_frame_protector** protector) {
1126
+ size_t actual_max_output_protected_frame_size =
1127
+ TSI_SSL_MAX_PROTECTED_FRAME_SIZE_UPPER_BOUND;
1128
+ tsi_ssl_handshaker* impl = reinterpret_cast<tsi_ssl_handshaker*>(self);
1129
+ tsi_ssl_frame_protector* protector_impl =
1130
+ static_cast<tsi_ssl_frame_protector*>(
1131
+ gpr_zalloc(sizeof(*protector_impl)));
1132
+
1133
+ if (max_output_protected_frame_size != nullptr) {
1134
+ if (*max_output_protected_frame_size >
1135
+ TSI_SSL_MAX_PROTECTED_FRAME_SIZE_UPPER_BOUND) {
1136
+ *max_output_protected_frame_size =
1137
+ TSI_SSL_MAX_PROTECTED_FRAME_SIZE_UPPER_BOUND;
1138
+ } else if (*max_output_protected_frame_size <
1139
+ TSI_SSL_MAX_PROTECTED_FRAME_SIZE_LOWER_BOUND) {
1140
+ *max_output_protected_frame_size =
1141
+ TSI_SSL_MAX_PROTECTED_FRAME_SIZE_LOWER_BOUND;
1142
+ }
1143
+ actual_max_output_protected_frame_size = *max_output_protected_frame_size;
1144
+ }
1145
+ protector_impl->buffer_size =
1146
+ actual_max_output_protected_frame_size - TSI_SSL_MAX_PROTECTION_OVERHEAD;
1147
+ protector_impl->buffer =
1148
+ static_cast<unsigned char*>(gpr_malloc(protector_impl->buffer_size));
1149
+ if (protector_impl->buffer == nullptr) {
1150
+ gpr_log(GPR_ERROR,
1151
+ "Could not allocated buffer for tsi_ssl_frame_protector.");
1152
+ gpr_free(protector_impl);
1153
+ return TSI_INTERNAL_ERROR;
1154
+ }
1155
+
1156
+ /* Transfer ownership of ssl and network_io to the frame protector. It is OK
1157
+ * as the caller cannot call anything else but destroy on the handshaker
1158
+ * after this call. */
1159
+ protector_impl->ssl = impl->ssl;
1160
+ impl->ssl = nullptr;
1161
+ protector_impl->network_io = impl->network_io;
1162
+ impl->network_io = nullptr;
1163
+
1164
+ protector_impl->base.vtable = &frame_protector_vtable;
1165
+ *protector = &protector_impl->base;
1166
+ return TSI_OK;
1167
+ }
1168
+
1169
+ static void ssl_handshaker_destroy(tsi_handshaker* self) {
1170
+ tsi_ssl_handshaker* impl = reinterpret_cast<tsi_ssl_handshaker*>(self);
1171
+ SSL_free(impl->ssl);
1172
+ BIO_free(impl->network_io);
1173
+ tsi_ssl_handshaker_factory_unref(impl->factory_ref);
1174
+ gpr_free(impl);
1175
+ }
1176
+
1177
+ static const tsi_handshaker_vtable handshaker_vtable = {
1178
+ ssl_handshaker_get_bytes_to_send_to_peer,
1179
+ ssl_handshaker_process_bytes_from_peer,
1180
+ ssl_handshaker_get_result,
1181
+ ssl_handshaker_extract_peer,
1182
+ ssl_handshaker_create_frame_protector,
1183
+ ssl_handshaker_destroy,
1184
+ nullptr,
1185
+ };
1186
+
1187
+ /* --- tsi_ssl_handshaker_factory common methods. --- */
1188
+
1189
+ static void tsi_ssl_handshaker_resume_session(
1190
+ SSL* ssl, tsi::SslSessionLRUCache* session_cache) {
1191
+ const char* server_name = SSL_get_servername(ssl, TLSEXT_NAMETYPE_host_name);
1192
+ if (server_name == nullptr) {
1193
+ return;
1194
+ }
1195
+ tsi::SslSessionPtr session = session_cache->Get(server_name);
1196
+ if (session != nullptr) {
1197
+ // SSL_set_session internally increments reference counter.
1198
+ SSL_set_session(ssl, session.get());
1199
+ }
1200
+ }
1201
+
1202
+ static tsi_result create_tsi_ssl_handshaker(SSL_CTX* ctx, int is_client,
1203
+ const char* server_name_indication,
1204
+ tsi_ssl_handshaker_factory* factory,
1205
+ tsi_handshaker** handshaker) {
1206
+ SSL* ssl = SSL_new(ctx);
1207
+ BIO* network_io = nullptr;
1208
+ BIO* ssl_io = nullptr;
1209
+ tsi_ssl_handshaker* impl = nullptr;
1210
+ *handshaker = nullptr;
1211
+ if (ctx == nullptr) {
1212
+ gpr_log(GPR_ERROR, "SSL Context is null. Should never happen.");
1213
+ return TSI_INTERNAL_ERROR;
1214
+ }
1215
+ if (ssl == nullptr) {
1216
+ return TSI_OUT_OF_RESOURCES;
1217
+ }
1218
+ SSL_set_info_callback(ssl, ssl_info_callback);
1219
+
1220
+ if (!BIO_new_bio_pair(&network_io, 0, &ssl_io, 0)) {
1221
+ gpr_log(GPR_ERROR, "BIO_new_bio_pair failed.");
1222
+ SSL_free(ssl);
1223
+ return TSI_OUT_OF_RESOURCES;
1224
+ }
1225
+ SSL_set_bio(ssl, ssl_io, ssl_io);
1226
+ if (is_client) {
1227
+ int ssl_result;
1228
+ SSL_set_connect_state(ssl);
1229
+ if (server_name_indication != nullptr) {
1230
+ if (!SSL_set_tlsext_host_name(ssl, server_name_indication)) {
1231
+ gpr_log(GPR_ERROR, "Invalid server name indication %s.",
1232
+ server_name_indication);
1233
+ SSL_free(ssl);
1234
+ BIO_free(network_io);
1235
+ return TSI_INTERNAL_ERROR;
1236
+ }
1237
+ }
1238
+ tsi_ssl_client_handshaker_factory* client_factory =
1239
+ reinterpret_cast<tsi_ssl_client_handshaker_factory*>(factory);
1240
+ if (client_factory->session_cache != nullptr) {
1241
+ tsi_ssl_handshaker_resume_session(ssl,
1242
+ client_factory->session_cache.get());
1243
+ }
1244
+ ssl_result = SSL_do_handshake(ssl);
1245
+ ssl_result = SSL_get_error(ssl, ssl_result);
1246
+ if (ssl_result != SSL_ERROR_WANT_READ) {
1247
+ gpr_log(GPR_ERROR,
1248
+ "Unexpected error received from first SSL_do_handshake call: %s",
1249
+ ssl_error_string(ssl_result));
1250
+ SSL_free(ssl);
1251
+ BIO_free(network_io);
1252
+ return TSI_INTERNAL_ERROR;
1253
+ }
1254
+ } else {
1255
+ SSL_set_accept_state(ssl);
1256
+ }
1257
+
1258
+ impl = static_cast<tsi_ssl_handshaker*>(gpr_zalloc(sizeof(*impl)));
1259
+ impl->ssl = ssl;
1260
+ impl->network_io = network_io;
1261
+ impl->result = TSI_HANDSHAKE_IN_PROGRESS;
1262
+ impl->base.vtable = &handshaker_vtable;
1263
+ impl->factory_ref = tsi_ssl_handshaker_factory_ref(factory);
1264
+
1265
+ *handshaker = &impl->base;
1266
+ return TSI_OK;
1267
+ }
1268
+
1269
+ static int select_protocol_list(const unsigned char** out,
1270
+ unsigned char* outlen,
1271
+ const unsigned char* client_list,
1272
+ size_t client_list_len,
1273
+ const unsigned char* server_list,
1274
+ size_t server_list_len) {
1275
+ const unsigned char* client_current = client_list;
1276
+ while (static_cast<unsigned int>(client_current - client_list) <
1277
+ client_list_len) {
1278
+ unsigned char client_current_len = *(client_current++);
1279
+ const unsigned char* server_current = server_list;
1280
+ while ((server_current >= server_list) &&
1281
+ static_cast<uintptr_t>(server_current - server_list) <
1282
+ server_list_len) {
1283
+ unsigned char server_current_len = *(server_current++);
1284
+ if ((client_current_len == server_current_len) &&
1285
+ !memcmp(client_current, server_current, server_current_len)) {
1286
+ *out = server_current;
1287
+ *outlen = server_current_len;
1288
+ return SSL_TLSEXT_ERR_OK;
1289
+ }
1290
+ server_current += server_current_len;
1291
+ }
1292
+ client_current += client_current_len;
1293
+ }
1294
+ return SSL_TLSEXT_ERR_NOACK;
1295
+ }
1296
+
1297
+ /* --- tsi_ssl_client_handshaker_factory methods implementation. --- */
1298
+
1299
+ tsi_result tsi_ssl_client_handshaker_factory_create_handshaker(
1300
+ tsi_ssl_client_handshaker_factory* self, const char* server_name_indication,
1301
+ tsi_handshaker** handshaker) {
1302
+ return create_tsi_ssl_handshaker(self->ssl_context, 1, server_name_indication,
1303
+ &self->base, handshaker);
1304
+ }
1305
+
1306
+ void tsi_ssl_client_handshaker_factory_unref(
1307
+ tsi_ssl_client_handshaker_factory* self) {
1308
+ if (self == nullptr) return;
1309
+ tsi_ssl_handshaker_factory_unref(&self->base);
1310
+ }
1311
+
1312
+ static void tsi_ssl_client_handshaker_factory_destroy(
1313
+ tsi_ssl_handshaker_factory* factory) {
1314
+ if (factory == nullptr) return;
1315
+ tsi_ssl_client_handshaker_factory* self =
1316
+ reinterpret_cast<tsi_ssl_client_handshaker_factory*>(factory);
1317
+ if (self->ssl_context != nullptr) SSL_CTX_free(self->ssl_context);
1318
+ if (self->alpn_protocol_list != nullptr) gpr_free(self->alpn_protocol_list);
1319
+ self->session_cache.reset();
1320
+ gpr_free(self);
1321
+ }
1322
+
1323
+ static int client_handshaker_factory_npn_callback(SSL* ssl, unsigned char** out,
1324
+ unsigned char* outlen,
1325
+ const unsigned char* in,
1326
+ unsigned int inlen,
1327
+ void* arg) {
1328
+ tsi_ssl_client_handshaker_factory* factory =
1329
+ static_cast<tsi_ssl_client_handshaker_factory*>(arg);
1330
+ return select_protocol_list((const unsigned char**)out, outlen,
1331
+ factory->alpn_protocol_list,
1332
+ factory->alpn_protocol_list_length, in, inlen);
1333
+ }
1334
+
1335
+ /* --- tsi_ssl_server_handshaker_factory methods implementation. --- */
1336
+
1337
+ tsi_result tsi_ssl_server_handshaker_factory_create_handshaker(
1338
+ tsi_ssl_server_handshaker_factory* self, tsi_handshaker** handshaker) {
1339
+ if (self->ssl_context_count == 0) return TSI_INVALID_ARGUMENT;
1340
+ /* Create the handshaker with the first context. We will switch if needed
1341
+ because of SNI in ssl_server_handshaker_factory_servername_callback. */
1342
+ return create_tsi_ssl_handshaker(self->ssl_contexts[0], 0, nullptr,
1343
+ &self->base, handshaker);
1344
+ }
1345
+
1346
+ void tsi_ssl_server_handshaker_factory_unref(
1347
+ tsi_ssl_server_handshaker_factory* self) {
1348
+ if (self == nullptr) return;
1349
+ tsi_ssl_handshaker_factory_unref(&self->base);
1350
+ }
1351
+
1352
+ static void tsi_ssl_server_handshaker_factory_destroy(
1353
+ tsi_ssl_handshaker_factory* factory) {
1354
+ if (factory == nullptr) return;
1355
+ tsi_ssl_server_handshaker_factory* self =
1356
+ reinterpret_cast<tsi_ssl_server_handshaker_factory*>(factory);
1357
+ size_t i;
1358
+ for (i = 0; i < self->ssl_context_count; i++) {
1359
+ if (self->ssl_contexts[i] != nullptr) {
1360
+ SSL_CTX_free(self->ssl_contexts[i]);
1361
+ tsi_peer_destruct(&self->ssl_context_x509_subject_names[i]);
1362
+ }
1363
+ }
1364
+ if (self->ssl_contexts != nullptr) gpr_free(self->ssl_contexts);
1365
+ if (self->ssl_context_x509_subject_names != nullptr) {
1366
+ gpr_free(self->ssl_context_x509_subject_names);
1367
+ }
1368
+ if (self->alpn_protocol_list != nullptr) gpr_free(self->alpn_protocol_list);
1369
+ gpr_free(self);
1370
+ }
1371
+
1372
+ static int does_entry_match_name(const char* entry, size_t entry_length,
1373
+ const char* name) {
1374
+ const char* dot;
1375
+ const char* name_subdomain = nullptr;
1376
+ size_t name_length = strlen(name);
1377
+ size_t name_subdomain_length;
1378
+ if (entry_length == 0) return 0;
1379
+
1380
+ /* Take care of '.' terminations. */
1381
+ if (name[name_length - 1] == '.') {
1382
+ name_length--;
1383
+ }
1384
+ if (entry[entry_length - 1] == '.') {
1385
+ entry_length--;
1386
+ if (entry_length == 0) return 0;
1387
+ }
1388
+
1389
+ if ((name_length == entry_length) &&
1390
+ strncmp(name, entry, entry_length) == 0) {
1391
+ return 1; /* Perfect match. */
1392
+ }
1393
+ if (entry[0] != '*') return 0;
1394
+
1395
+ /* Wildchar subdomain matching. */
1396
+ if (entry_length < 3 || entry[1] != '.') { /* At least *.x */
1397
+ gpr_log(GPR_ERROR, "Invalid wildchar entry.");
1398
+ return 0;
1399
+ }
1400
+ name_subdomain = strchr(name, '.');
1401
+ if (name_subdomain == nullptr) return 0;
1402
+ name_subdomain_length = strlen(name_subdomain);
1403
+ if (name_subdomain_length < 2) return 0;
1404
+ name_subdomain++; /* Starts after the dot. */
1405
+ name_subdomain_length--;
1406
+ entry += 2; /* Remove *. */
1407
+ entry_length -= 2;
1408
+ dot = strchr(name_subdomain, '.');
1409
+ if ((dot == nullptr) || (dot == &name_subdomain[name_subdomain_length - 1])) {
1410
+ gpr_log(GPR_ERROR, "Invalid toplevel subdomain: %s", name_subdomain);
1411
+ return 0;
1412
+ }
1413
+ if (name_subdomain[name_subdomain_length - 1] == '.') {
1414
+ name_subdomain_length--;
1415
+ }
1416
+ return ((entry_length > 0) && (name_subdomain_length == entry_length) &&
1417
+ strncmp(entry, name_subdomain, entry_length) == 0);
1418
+ }
1419
+
1420
+ static int ssl_server_handshaker_factory_servername_callback(SSL* ssl, int* ap,
1421
+ void* arg) {
1422
+ tsi_ssl_server_handshaker_factory* impl =
1423
+ static_cast<tsi_ssl_server_handshaker_factory*>(arg);
1424
+ size_t i = 0;
1425
+ const char* servername = SSL_get_servername(ssl, TLSEXT_NAMETYPE_host_name);
1426
+ if (servername == nullptr || strlen(servername) == 0) {
1427
+ return SSL_TLSEXT_ERR_NOACK;
1428
+ }
1429
+
1430
+ for (i = 0; i < impl->ssl_context_count; i++) {
1431
+ if (tsi_ssl_peer_matches_name(&impl->ssl_context_x509_subject_names[i],
1432
+ servername)) {
1433
+ SSL_set_SSL_CTX(ssl, impl->ssl_contexts[i]);
1434
+ return SSL_TLSEXT_ERR_OK;
1435
+ }
1436
+ }
1437
+ gpr_log(GPR_ERROR, "No match found for server name: %s.", servername);
1438
+ return SSL_TLSEXT_ERR_ALERT_WARNING;
1439
+ }
1440
+
1441
+ #if TSI_OPENSSL_ALPN_SUPPORT
1442
+ static int server_handshaker_factory_alpn_callback(
1443
+ SSL* ssl, const unsigned char** out, unsigned char* outlen,
1444
+ const unsigned char* in, unsigned int inlen, void* arg) {
1445
+ tsi_ssl_server_handshaker_factory* factory =
1446
+ static_cast<tsi_ssl_server_handshaker_factory*>(arg);
1447
+ return select_protocol_list(out, outlen, in, inlen,
1448
+ factory->alpn_protocol_list,
1449
+ factory->alpn_protocol_list_length);
1450
+ }
1451
+ #endif /* TSI_OPENSSL_ALPN_SUPPORT */
1452
+
1453
+ static int server_handshaker_factory_npn_advertised_callback(
1454
+ SSL* ssl, const unsigned char** out, unsigned int* outlen, void* arg) {
1455
+ tsi_ssl_server_handshaker_factory* factory =
1456
+ static_cast<tsi_ssl_server_handshaker_factory*>(arg);
1457
+ *out = factory->alpn_protocol_list;
1458
+ GPR_ASSERT(factory->alpn_protocol_list_length <= UINT_MAX);
1459
+ *outlen = static_cast<unsigned int>(factory->alpn_protocol_list_length);
1460
+ return SSL_TLSEXT_ERR_OK;
1461
+ }
1462
+
1463
+ /// This callback is called when new \a session is established and ready to
1464
+ /// be cached. This session can be reused for new connections to similar
1465
+ /// servers at later point of time.
1466
+ /// It's intended to be used with SSL_CTX_sess_set_new_cb function.
1467
+ ///
1468
+ /// It returns 1 if callback takes ownership over \a session and 0 otherwise.
1469
+ static int server_handshaker_factory_new_session_callback(
1470
+ SSL* ssl, SSL_SESSION* session) {
1471
+ SSL_CTX* ssl_context = SSL_get_SSL_CTX(ssl);
1472
+ if (ssl_context == nullptr) {
1473
+ return 0;
1474
+ }
1475
+ void* arg = SSL_CTX_get_ex_data(ssl_context, g_ssl_ctx_ex_factory_index);
1476
+ tsi_ssl_client_handshaker_factory* factory =
1477
+ static_cast<tsi_ssl_client_handshaker_factory*>(arg);
1478
+ const char* server_name = SSL_get_servername(ssl, TLSEXT_NAMETYPE_host_name);
1479
+ if (server_name == nullptr) {
1480
+ return 0;
1481
+ }
1482
+ factory->session_cache->Put(server_name, tsi::SslSessionPtr(session));
1483
+ // Return 1 to indicate transfered ownership over the given session.
1484
+ return 1;
1485
+ }
1486
+
1487
+ /* --- tsi_ssl_handshaker_factory constructors. --- */
1488
+
1489
+ static tsi_ssl_handshaker_factory_vtable client_handshaker_factory_vtable = {
1490
+ tsi_ssl_client_handshaker_factory_destroy};
1491
+
1492
+ tsi_result tsi_create_ssl_client_handshaker_factory(
1493
+ const tsi_ssl_pem_key_cert_pair* pem_key_cert_pair,
1494
+ const char* pem_root_certs, const char* cipher_suites,
1495
+ const char** alpn_protocols, uint16_t num_alpn_protocols,
1496
+ tsi_ssl_client_handshaker_factory** factory) {
1497
+ tsi_ssl_client_handshaker_options options;
1498
+ memset(&options, 0, sizeof(options));
1499
+ options.pem_key_cert_pair = pem_key_cert_pair;
1500
+ options.pem_root_certs = pem_root_certs;
1501
+ options.cipher_suites = cipher_suites;
1502
+ options.alpn_protocols = alpn_protocols;
1503
+ options.num_alpn_protocols = num_alpn_protocols;
1504
+ return tsi_create_ssl_client_handshaker_factory_with_options(&options,
1505
+ factory);
1506
+ }
1507
+
1508
+ tsi_result tsi_create_ssl_client_handshaker_factory_with_options(
1509
+ const tsi_ssl_client_handshaker_options* options,
1510
+ tsi_ssl_client_handshaker_factory** factory) {
1511
+ SSL_CTX* ssl_context = nullptr;
1512
+ tsi_ssl_client_handshaker_factory* impl = nullptr;
1513
+ tsi_result result = TSI_OK;
1514
+
1515
+ gpr_once_init(&g_init_openssl_once, init_openssl);
1516
+
1517
+ if (factory == nullptr) return TSI_INVALID_ARGUMENT;
1518
+ *factory = nullptr;
1519
+ if (options->pem_root_certs == nullptr && options->root_store == nullptr) {
1520
+ return TSI_INVALID_ARGUMENT;
1521
+ }
1522
+
1523
+ ssl_context = SSL_CTX_new(TLSv1_2_method());
1524
+ if (ssl_context == nullptr) {
1525
+ gpr_log(GPR_ERROR, "Could not create ssl context.");
1526
+ return TSI_INVALID_ARGUMENT;
1527
+ }
1528
+
1529
+ impl = static_cast<tsi_ssl_client_handshaker_factory*>(
1530
+ gpr_zalloc(sizeof(*impl)));
1531
+ tsi_ssl_handshaker_factory_init(&impl->base);
1532
+ impl->base.vtable = &client_handshaker_factory_vtable;
1533
+ impl->ssl_context = ssl_context;
1534
+ if (options->session_cache != nullptr) {
1535
+ // Unref is called manually on factory destruction.
1536
+ impl->session_cache =
1537
+ reinterpret_cast<tsi::SslSessionLRUCache*>(options->session_cache)
1538
+ ->Ref();
1539
+ SSL_CTX_set_ex_data(ssl_context, g_ssl_ctx_ex_factory_index, impl);
1540
+ SSL_CTX_sess_set_new_cb(ssl_context,
1541
+ server_handshaker_factory_new_session_callback);
1542
+ SSL_CTX_set_session_cache_mode(ssl_context, SSL_SESS_CACHE_CLIENT);
1543
+ }
1544
+
1545
+ do {
1546
+ result = populate_ssl_context(ssl_context, options->pem_key_cert_pair,
1547
+ options->cipher_suites);
1548
+ if (result != TSI_OK) break;
1549
+
1550
+ #if OPENSSL_VERSION_NUMBER >= 0x10100000
1551
+ // X509_STORE_up_ref is only available since OpenSSL 1.1.
1552
+ if (options->root_store != nullptr) {
1553
+ X509_STORE_up_ref(options->root_store->store);
1554
+ SSL_CTX_set_cert_store(ssl_context, options->root_store->store);
1555
+ }
1556
+ #endif
1557
+ if (OPENSSL_VERSION_NUMBER < 0x10100000 || options->root_store == nullptr) {
1558
+ result = ssl_ctx_load_verification_certs(
1559
+ ssl_context, options->pem_root_certs, strlen(options->pem_root_certs),
1560
+ nullptr);
1561
+ if (result != TSI_OK) {
1562
+ gpr_log(GPR_ERROR, "Cannot load server root certificates.");
1563
+ break;
1564
+ }
1565
+ }
1566
+
1567
+ if (options->num_alpn_protocols != 0) {
1568
+ result = build_alpn_protocol_name_list(
1569
+ options->alpn_protocols, options->num_alpn_protocols,
1570
+ &impl->alpn_protocol_list, &impl->alpn_protocol_list_length);
1571
+ if (result != TSI_OK) {
1572
+ gpr_log(GPR_ERROR, "Building alpn list failed with error %s.",
1573
+ tsi_result_to_string(result));
1574
+ break;
1575
+ }
1576
+ #if TSI_OPENSSL_ALPN_SUPPORT
1577
+ GPR_ASSERT(impl->alpn_protocol_list_length < UINT_MAX);
1578
+ if (SSL_CTX_set_alpn_protos(
1579
+ ssl_context, impl->alpn_protocol_list,
1580
+ static_cast<unsigned int>(impl->alpn_protocol_list_length))) {
1581
+ gpr_log(GPR_ERROR, "Could not set alpn protocol list to context.");
1582
+ result = TSI_INVALID_ARGUMENT;
1583
+ break;
1584
+ }
1585
+ #endif /* TSI_OPENSSL_ALPN_SUPPORT */
1586
+ SSL_CTX_set_next_proto_select_cb(
1587
+ ssl_context, client_handshaker_factory_npn_callback, impl);
1588
+ }
1589
+ } while (0);
1590
+ if (result != TSI_OK) {
1591
+ tsi_ssl_handshaker_factory_unref(&impl->base);
1592
+ return result;
1593
+ }
1594
+ SSL_CTX_set_verify(ssl_context, SSL_VERIFY_PEER, nullptr);
1595
+ /* TODO(jboeuf): Add revocation verification. */
1596
+
1597
+ *factory = impl;
1598
+ return TSI_OK;
1599
+ }
1600
+
1601
+ static tsi_ssl_handshaker_factory_vtable server_handshaker_factory_vtable = {
1602
+ tsi_ssl_server_handshaker_factory_destroy};
1603
+
1604
+ tsi_result tsi_create_ssl_server_handshaker_factory(
1605
+ const tsi_ssl_pem_key_cert_pair* pem_key_cert_pairs,
1606
+ size_t num_key_cert_pairs, const char* pem_client_root_certs,
1607
+ int force_client_auth, const char* cipher_suites,
1608
+ const char** alpn_protocols, uint16_t num_alpn_protocols,
1609
+ tsi_ssl_server_handshaker_factory** factory) {
1610
+ return tsi_create_ssl_server_handshaker_factory_ex(
1611
+ pem_key_cert_pairs, num_key_cert_pairs, pem_client_root_certs,
1612
+ force_client_auth ? TSI_REQUEST_AND_REQUIRE_CLIENT_CERTIFICATE_AND_VERIFY
1613
+ : TSI_DONT_REQUEST_CLIENT_CERTIFICATE,
1614
+ cipher_suites, alpn_protocols, num_alpn_protocols, factory);
1615
+ }
1616
+
1617
+ tsi_result tsi_create_ssl_server_handshaker_factory_ex(
1618
+ const tsi_ssl_pem_key_cert_pair* pem_key_cert_pairs,
1619
+ size_t num_key_cert_pairs, const char* pem_client_root_certs,
1620
+ tsi_client_certificate_request_type client_certificate_request,
1621
+ const char* cipher_suites, const char** alpn_protocols,
1622
+ uint16_t num_alpn_protocols, tsi_ssl_server_handshaker_factory** factory) {
1623
+ tsi_ssl_server_handshaker_options options;
1624
+ memset(&options, 0, sizeof(options));
1625
+ options.pem_key_cert_pairs = pem_key_cert_pairs;
1626
+ options.num_key_cert_pairs = num_key_cert_pairs;
1627
+ options.pem_client_root_certs = pem_client_root_certs;
1628
+ options.client_certificate_request = client_certificate_request;
1629
+ options.cipher_suites = cipher_suites;
1630
+ options.alpn_protocols = alpn_protocols;
1631
+ options.num_alpn_protocols = num_alpn_protocols;
1632
+ return tsi_create_ssl_server_handshaker_factory_with_options(&options,
1633
+ factory);
1634
+ }
1635
+
1636
+ tsi_result tsi_create_ssl_server_handshaker_factory_with_options(
1637
+ const tsi_ssl_server_handshaker_options* options,
1638
+ tsi_ssl_server_handshaker_factory** factory) {
1639
+ tsi_ssl_server_handshaker_factory* impl = nullptr;
1640
+ tsi_result result = TSI_OK;
1641
+ size_t i = 0;
1642
+
1643
+ gpr_once_init(&g_init_openssl_once, init_openssl);
1644
+
1645
+ if (factory == nullptr) return TSI_INVALID_ARGUMENT;
1646
+ *factory = nullptr;
1647
+ if (options->num_key_cert_pairs == 0 ||
1648
+ options->pem_key_cert_pairs == nullptr) {
1649
+ return TSI_INVALID_ARGUMENT;
1650
+ }
1651
+
1652
+ impl = static_cast<tsi_ssl_server_handshaker_factory*>(
1653
+ gpr_zalloc(sizeof(*impl)));
1654
+ tsi_ssl_handshaker_factory_init(&impl->base);
1655
+ impl->base.vtable = &server_handshaker_factory_vtable;
1656
+
1657
+ impl->ssl_contexts = static_cast<SSL_CTX**>(
1658
+ gpr_zalloc(options->num_key_cert_pairs * sizeof(SSL_CTX*)));
1659
+ impl->ssl_context_x509_subject_names = static_cast<tsi_peer*>(
1660
+ gpr_zalloc(options->num_key_cert_pairs * sizeof(tsi_peer)));
1661
+ if (impl->ssl_contexts == nullptr ||
1662
+ impl->ssl_context_x509_subject_names == nullptr) {
1663
+ tsi_ssl_handshaker_factory_unref(&impl->base);
1664
+ return TSI_OUT_OF_RESOURCES;
1665
+ }
1666
+ impl->ssl_context_count = options->num_key_cert_pairs;
1667
+
1668
+ if (options->num_alpn_protocols > 0) {
1669
+ result = build_alpn_protocol_name_list(
1670
+ options->alpn_protocols, options->num_alpn_protocols,
1671
+ &impl->alpn_protocol_list, &impl->alpn_protocol_list_length);
1672
+ if (result != TSI_OK) {
1673
+ tsi_ssl_handshaker_factory_unref(&impl->base);
1674
+ return result;
1675
+ }
1676
+ }
1677
+
1678
+ for (i = 0; i < options->num_key_cert_pairs; i++) {
1679
+ do {
1680
+ impl->ssl_contexts[i] = SSL_CTX_new(TLSv1_2_method());
1681
+ if (impl->ssl_contexts[i] == nullptr) {
1682
+ gpr_log(GPR_ERROR, "Could not create ssl context.");
1683
+ result = TSI_OUT_OF_RESOURCES;
1684
+ break;
1685
+ }
1686
+ result = populate_ssl_context(impl->ssl_contexts[i],
1687
+ &options->pem_key_cert_pairs[i],
1688
+ options->cipher_suites);
1689
+ if (result != TSI_OK) break;
1690
+
1691
+ // TODO(elessar): Provide ability to disable session ticket keys.
1692
+
1693
+ // Allow client cache sessions (it's needed for OpenSSL only).
1694
+ int set_sid_ctx_result = SSL_CTX_set_session_id_context(
1695
+ impl->ssl_contexts[i], kSslSessionIdContext,
1696
+ GPR_ARRAY_SIZE(kSslSessionIdContext));
1697
+ if (set_sid_ctx_result == 0) {
1698
+ gpr_log(GPR_ERROR, "Failed to set session id context.");
1699
+ result = TSI_INTERNAL_ERROR;
1700
+ break;
1701
+ }
1702
+
1703
+ if (options->session_ticket_key != nullptr) {
1704
+ if (SSL_CTX_set_tlsext_ticket_keys(
1705
+ impl->ssl_contexts[i],
1706
+ const_cast<char*>(options->session_ticket_key),
1707
+ options->session_ticket_key_size) == 0) {
1708
+ gpr_log(GPR_ERROR, "Invalid STEK size.");
1709
+ result = TSI_INVALID_ARGUMENT;
1710
+ break;
1711
+ }
1712
+ }
1713
+
1714
+ if (options->pem_client_root_certs != nullptr) {
1715
+ STACK_OF(X509_NAME)* root_names = nullptr;
1716
+ result = ssl_ctx_load_verification_certs(
1717
+ impl->ssl_contexts[i], options->pem_client_root_certs,
1718
+ strlen(options->pem_client_root_certs), &root_names);
1719
+ if (result != TSI_OK) {
1720
+ gpr_log(GPR_ERROR, "Invalid verification certs.");
1721
+ break;
1722
+ }
1723
+ SSL_CTX_set_client_CA_list(impl->ssl_contexts[i], root_names);
1724
+ switch (options->client_certificate_request) {
1725
+ case TSI_DONT_REQUEST_CLIENT_CERTIFICATE:
1726
+ SSL_CTX_set_verify(impl->ssl_contexts[i], SSL_VERIFY_NONE, nullptr);
1727
+ break;
1728
+ case TSI_REQUEST_CLIENT_CERTIFICATE_BUT_DONT_VERIFY:
1729
+ SSL_CTX_set_verify(impl->ssl_contexts[i], SSL_VERIFY_PEER,
1730
+ NullVerifyCallback);
1731
+ break;
1732
+ case TSI_REQUEST_CLIENT_CERTIFICATE_AND_VERIFY:
1733
+ SSL_CTX_set_verify(impl->ssl_contexts[i], SSL_VERIFY_PEER, nullptr);
1734
+ break;
1735
+ case TSI_REQUEST_AND_REQUIRE_CLIENT_CERTIFICATE_BUT_DONT_VERIFY:
1736
+ SSL_CTX_set_verify(
1737
+ impl->ssl_contexts[i],
1738
+ SSL_VERIFY_PEER | SSL_VERIFY_FAIL_IF_NO_PEER_CERT,
1739
+ NullVerifyCallback);
1740
+ break;
1741
+ case TSI_REQUEST_AND_REQUIRE_CLIENT_CERTIFICATE_AND_VERIFY:
1742
+ SSL_CTX_set_verify(
1743
+ impl->ssl_contexts[i],
1744
+ SSL_VERIFY_PEER | SSL_VERIFY_FAIL_IF_NO_PEER_CERT, nullptr);
1745
+ break;
1746
+ }
1747
+ /* TODO(jboeuf): Add revocation verification. */
1748
+ }
1749
+
1750
+ result = extract_x509_subject_names_from_pem_cert(
1751
+ options->pem_key_cert_pairs[i].cert_chain,
1752
+ &impl->ssl_context_x509_subject_names[i]);
1753
+ if (result != TSI_OK) break;
1754
+
1755
+ SSL_CTX_set_tlsext_servername_callback(
1756
+ impl->ssl_contexts[i],
1757
+ ssl_server_handshaker_factory_servername_callback);
1758
+ SSL_CTX_set_tlsext_servername_arg(impl->ssl_contexts[i], impl);
1759
+ #if TSI_OPENSSL_ALPN_SUPPORT
1760
+ SSL_CTX_set_alpn_select_cb(impl->ssl_contexts[i],
1761
+ server_handshaker_factory_alpn_callback, impl);
1762
+ #endif /* TSI_OPENSSL_ALPN_SUPPORT */
1763
+ SSL_CTX_set_next_protos_advertised_cb(
1764
+ impl->ssl_contexts[i],
1765
+ server_handshaker_factory_npn_advertised_callback, impl);
1766
+ } while (0);
1767
+
1768
+ if (result != TSI_OK) {
1769
+ tsi_ssl_handshaker_factory_unref(&impl->base);
1770
+ return result;
1771
+ }
1772
+ }
1773
+
1774
+ *factory = impl;
1775
+ return TSI_OK;
1776
+ }
1777
+
1778
+ /* --- tsi_ssl utils. --- */
1779
+
1780
+ int tsi_ssl_peer_matches_name(const tsi_peer* peer, const char* name) {
1781
+ size_t i = 0;
1782
+ size_t san_count = 0;
1783
+ const tsi_peer_property* cn_property = nullptr;
1784
+ int like_ip = looks_like_ip_address(name);
1785
+
1786
+ /* Check the SAN first. */
1787
+ for (i = 0; i < peer->property_count; i++) {
1788
+ const tsi_peer_property* property = &peer->properties[i];
1789
+ if (property->name == nullptr) continue;
1790
+ if (strcmp(property->name,
1791
+ TSI_X509_SUBJECT_ALTERNATIVE_NAME_PEER_PROPERTY) == 0) {
1792
+ san_count++;
1793
+
1794
+ if (!like_ip && does_entry_match_name(property->value.data,
1795
+ property->value.length, name)) {
1796
+ return 1;
1797
+ } else if (like_ip &&
1798
+ strncmp(name, property->value.data, property->value.length) ==
1799
+ 0 &&
1800
+ strlen(name) == property->value.length) {
1801
+ /* IP Addresses are exact matches only. */
1802
+ return 1;
1803
+ }
1804
+ } else if (strcmp(property->name,
1805
+ TSI_X509_SUBJECT_COMMON_NAME_PEER_PROPERTY) == 0) {
1806
+ cn_property = property;
1807
+ }
1808
+ }
1809
+
1810
+ /* If there's no SAN, try the CN, but only if its not like an IP Address */
1811
+ if (san_count == 0 && cn_property != nullptr && !like_ip) {
1812
+ if (does_entry_match_name(cn_property->value.data,
1813
+ cn_property->value.length, name)) {
1814
+ return 1;
1815
+ }
1816
+ }
1817
+
1818
+ return 0; /* Not found. */
1819
+ }
1820
+
1821
+ /* --- Testing support. --- */
1822
+ const tsi_ssl_handshaker_factory_vtable* tsi_ssl_handshaker_factory_swap_vtable(
1823
+ tsi_ssl_handshaker_factory* factory,
1824
+ tsi_ssl_handshaker_factory_vtable* new_vtable) {
1825
+ GPR_ASSERT(factory != nullptr);
1826
+ GPR_ASSERT(factory->vtable != nullptr);
1827
+
1828
+ const tsi_ssl_handshaker_factory_vtable* orig_vtable = factory->vtable;
1829
+ factory->vtable = new_vtable;
1830
+ return orig_vtable;
1831
+ }