grpc 1.15.0 → 1.30.0
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of grpc might be problematic. Click here for more details.
- checksums.yaml +4 -4
- data/Makefile +8591 -13387
- data/etc/roots.pem +455 -130
- data/include/grpc/grpc.h +39 -9
- data/include/grpc/grpc_posix.h +0 -8
- data/include/grpc/grpc_security.h +409 -14
- data/include/grpc/grpc_security_constants.h +55 -22
- data/include/grpc/impl/codegen/atm_gcc_sync.h +2 -0
- data/include/grpc/impl/codegen/atm_windows.h +2 -0
- data/include/grpc/impl/codegen/byte_buffer.h +13 -0
- data/include/grpc/impl/codegen/compression_types.h +2 -1
- data/include/grpc/impl/codegen/gpr_types.h +1 -1
- data/include/grpc/impl/codegen/grpc_types.h +111 -16
- data/include/grpc/impl/codegen/port_platform.h +171 -9
- data/include/grpc/impl/codegen/slice.h +2 -22
- data/include/grpc/impl/codegen/status.h +2 -1
- data/include/grpc/impl/codegen/sync.h +5 -3
- data/include/grpc/impl/codegen/sync_abseil.h +36 -0
- data/include/grpc/impl/codegen/sync_generic.h +1 -1
- data/include/grpc/impl/codegen/sync_posix.h +18 -0
- data/include/grpc/module.modulemap +25 -37
- data/include/grpc/slice.h +3 -3
- data/include/grpc/support/alloc.h +0 -16
- data/include/grpc/support/sync_abseil.h +26 -0
- data/src/core/ext/filters/client_channel/backend_metric.cc +81 -0
- data/src/core/ext/filters/client_channel/backend_metric.h +36 -0
- data/src/core/ext/filters/client_channel/backup_poller.cc +26 -19
- data/src/core/ext/filters/client_channel/backup_poller.h +8 -2
- data/src/core/ext/filters/client_channel/channel_connectivity.cc +21 -5
- data/src/core/ext/filters/client_channel/client_channel.cc +2888 -2206
- data/src/core/ext/filters/client_channel/client_channel.h +26 -6
- data/src/core/ext/filters/client_channel/client_channel_channelz.cc +54 -72
- data/src/core/ext/filters/client_channel/client_channel_channelz.h +33 -26
- data/src/core/ext/filters/client_channel/client_channel_factory.cc +22 -34
- data/src/core/ext/filters/client_channel/client_channel_factory.h +12 -39
- data/src/core/ext/filters/client_channel/client_channel_plugin.cc +13 -14
- data/src/core/ext/filters/client_channel/connector.h +43 -37
- data/src/core/ext/filters/client_channel/global_subchannel_pool.cc +179 -0
- data/src/core/ext/filters/client_channel/global_subchannel_pool.h +68 -0
- data/src/core/ext/filters/client_channel/health/health_check_client.cc +606 -0
- data/src/core/ext/filters/client_channel/health/health_check_client.h +175 -0
- data/src/core/ext/filters/client_channel/http_connect_handshaker.cc +177 -158
- data/src/core/ext/filters/client_channel/http_connect_handshaker.h +1 -1
- data/src/core/ext/filters/client_channel/http_proxy.cc +125 -121
- data/src/core/ext/filters/client_channel/http_proxy.h +5 -1
- data/src/core/ext/filters/client_channel/lb_policy.cc +105 -26
- data/src/core/ext/filters/client_channel/lb_policy.h +352 -152
- data/src/core/ext/filters/client_channel/lb_policy/address_filtering.cc +83 -0
- data/src/core/ext/filters/client_channel/lb_policy/address_filtering.h +99 -0
- data/src/core/ext/filters/client_channel/lb_policy/child_policy_handler.cc +297 -0
- data/src/core/ext/filters/client_channel/lb_policy/child_policy_handler.h +83 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/client_load_reporting_filter.cc +64 -47
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb.cc +1010 -1155
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb.h +7 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_balancer_addresses.cc +89 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_balancer_addresses.h +40 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_channel.h +12 -3
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_channel_secure.cc +53 -40
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_client_stats.cc +10 -5
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_client_stats.h +19 -16
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/load_balancer_api.cc +157 -271
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/load_balancer_api.h +43 -59
- data/src/core/ext/filters/client_channel/lb_policy/pick_first/pick_first.cc +235 -384
- data/src/core/ext/filters/client_channel/lb_policy/priority/priority.cc +871 -0
- data/src/core/ext/filters/client_channel/lb_policy/round_robin/round_robin.cc +174 -409
- data/src/core/ext/filters/client_channel/lb_policy/subchannel_list.h +157 -285
- data/src/core/ext/filters/client_channel/lb_policy/weighted_target/weighted_target.cc +734 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/cds.cc +417 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/eds.cc +938 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/lrs.cc +528 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds.h +32 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_routing.cc +834 -0
- data/src/core/ext/filters/client_channel/lb_policy_factory.h +7 -91
- data/src/core/ext/filters/client_channel/lb_policy_registry.cc +93 -8
- data/src/core/ext/filters/client_channel/lb_policy_registry.h +13 -2
- data/src/core/ext/filters/client_channel/local_subchannel_pool.cc +96 -0
- data/src/core/ext/filters/client_channel/local_subchannel_pool.h +57 -0
- data/src/core/ext/filters/client_channel/parse_address.cc +76 -30
- data/src/core/ext/filters/client_channel/parse_address.h +4 -1
- data/src/core/ext/filters/client_channel/proxy_mapper.h +14 -34
- data/src/core/ext/filters/client_channel/proxy_mapper_registry.cc +46 -79
- data/src/core/ext/filters/client_channel/proxy_mapper_registry.h +23 -17
- data/src/core/ext/filters/client_channel/resolver.cc +55 -5
- data/src/core/ext/filters/client_channel/resolver.h +61 -61
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/dns_resolver_ares.cc +251 -226
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver.cc +200 -36
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver.h +18 -20
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver_libuv.cc +177 -0
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver_posix.cc +8 -7
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver_windows.cc +491 -131
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper.cc +434 -233
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper.h +20 -12
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper_fallback.cc +15 -7
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper_libuv.cc +38 -0
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper_windows.cc +7 -2
- data/src/core/ext/filters/client_channel/resolver/dns/dns_resolver_selection.cc +28 -0
- data/src/core/ext/filters/client_channel/resolver/dns/dns_resolver_selection.h +29 -0
- data/src/core/ext/filters/client_channel/resolver/dns/native/dns_resolver.cc +92 -131
- data/src/core/ext/filters/client_channel/resolver/fake/fake_resolver.cc +220 -134
- data/src/core/ext/filters/client_channel/resolver/fake/fake_resolver.h +27 -17
- data/src/core/ext/filters/client_channel/resolver/sockaddr/sockaddr_resolver.cc +73 -99
- data/src/core/ext/filters/client_channel/resolver/xds/xds_resolver.cc +184 -0
- data/src/core/ext/filters/client_channel/resolver_factory.h +13 -11
- data/src/core/ext/filters/client_channel/resolver_registry.cc +33 -14
- data/src/core/ext/filters/client_channel/resolver_registry.h +19 -13
- data/src/core/ext/filters/client_channel/resolver_result_parsing.cc +443 -0
- data/src/core/ext/filters/client_channel/resolver_result_parsing.h +127 -0
- data/src/core/ext/filters/client_channel/resolving_lb_policy.cc +348 -0
- data/src/core/ext/filters/client_channel/resolving_lb_policy.h +123 -0
- data/src/core/ext/filters/client_channel/retry_throttle.cc +5 -5
- data/src/core/ext/filters/client_channel/retry_throttle.h +2 -6
- data/src/core/ext/filters/client_channel/server_address.cc +48 -0
- data/src/core/ext/filters/client_channel/server_address.h +90 -0
- data/src/core/ext/filters/client_channel/service_config.cc +221 -0
- data/src/core/ext/filters/client_channel/service_config.h +123 -0
- data/src/core/ext/filters/client_channel/service_config_call_data.h +68 -0
- data/src/core/ext/filters/client_channel/service_config_parser.cc +87 -0
- data/src/core/ext/filters/client_channel/service_config_parser.h +89 -0
- data/src/core/ext/filters/client_channel/subchannel.cc +903 -634
- data/src/core/ext/filters/client_channel/subchannel.h +364 -131
- data/src/core/ext/filters/client_channel/subchannel_interface.h +94 -0
- data/src/core/ext/filters/client_channel/subchannel_pool_interface.cc +97 -0
- data/src/core/ext/filters/client_channel/subchannel_pool_interface.h +91 -0
- data/src/core/ext/filters/client_channel/xds/xds_api.cc +1906 -0
- data/src/core/ext/filters/client_channel/xds/xds_api.h +280 -0
- data/src/core/ext/filters/client_channel/xds/xds_bootstrap.cc +342 -0
- data/src/core/ext/filters/client_channel/xds/xds_bootstrap.h +88 -0
- data/src/core/ext/filters/client_channel/xds/xds_channel.h +46 -0
- data/src/core/ext/filters/client_channel/xds/xds_channel_args.h +26 -0
- data/src/core/ext/filters/client_channel/xds/xds_channel_secure.cc +106 -0
- data/src/core/ext/filters/client_channel/xds/xds_client.cc +2367 -0
- data/src/core/ext/filters/client_channel/xds/xds_client.h +309 -0
- data/src/core/ext/filters/client_channel/xds/xds_client_stats.cc +115 -0
- data/src/core/ext/filters/client_channel/xds/xds_client_stats.h +211 -0
- data/src/core/ext/filters/client_idle/client_idle_filter.cc +440 -0
- data/src/core/ext/filters/deadline/deadline_filter.cc +49 -52
- data/src/core/ext/filters/deadline/deadline_filter.h +11 -14
- data/src/core/ext/filters/http/client/http_client_filter.cc +122 -85
- data/src/core/ext/filters/http/client/http_client_filter.h +1 -1
- data/src/core/ext/filters/http/client_authority_filter.cc +26 -24
- data/src/core/ext/filters/http/http_filters_plugin.cc +27 -12
- data/src/core/ext/filters/http/message_compress/message_compress_filter.cc +342 -295
- data/src/core/ext/filters/http/message_compress/message_decompress_filter.cc +358 -0
- data/src/core/ext/filters/http/message_compress/message_decompress_filter.h +29 -0
- data/src/core/ext/filters/http/server/http_server_filter.cc +156 -54
- data/src/core/ext/filters/max_age/max_age_filter.cc +76 -63
- data/src/core/ext/filters/message_size/message_size_filter.cc +218 -119
- data/src/core/ext/filters/message_size/message_size_filter.h +33 -0
- data/src/core/ext/filters/workarounds/workaround_cronet_compression_filter.cc +19 -17
- data/src/core/ext/transport/chttp2/alpn/alpn.h +1 -1
- data/src/core/ext/transport/chttp2/client/chttp2_connector.cc +141 -164
- data/src/core/ext/transport/chttp2/client/chttp2_connector.h +31 -1
- data/src/core/ext/transport/chttp2/client/insecure/channel_create.cc +36 -34
- data/src/core/ext/transport/chttp2/client/insecure/channel_create_posix.cc +1 -1
- data/src/core/ext/transport/chttp2/client/secure/secure_channel_create.cc +133 -138
- data/src/core/ext/transport/chttp2/server/chttp2_server.cc +128 -30
- data/src/core/ext/transport/chttp2/server/insecure/server_chttp2_posix.cc +2 -2
- data/src/core/ext/transport/chttp2/server/secure/server_secure_chttp2.cc +8 -11
- data/src/core/ext/transport/chttp2/transport/bin_decoder.cc +4 -4
- data/src/core/ext/transport/chttp2/transport/bin_decoder.h +4 -4
- data/src/core/ext/transport/chttp2/transport/bin_encoder.cc +11 -12
- data/src/core/ext/transport/chttp2/transport/bin_encoder.h +4 -3
- data/src/core/ext/transport/chttp2/transport/chttp2_plugin.cc +9 -7
- data/src/core/ext/transport/chttp2/transport/chttp2_transport.cc +911 -716
- data/src/core/ext/transport/chttp2/transport/chttp2_transport.h +8 -1
- data/src/core/ext/transport/chttp2/transport/context_list.cc +69 -0
- data/src/core/ext/transport/chttp2/transport/context_list.h +53 -0
- data/src/core/ext/transport/chttp2/transport/flow_control.cc +5 -5
- data/src/core/ext/transport/chttp2/transport/flow_control.h +22 -30
- data/src/core/ext/transport/chttp2/transport/frame_data.cc +47 -54
- data/src/core/ext/transport/chttp2/transport/frame_data.h +11 -13
- data/src/core/ext/transport/chttp2/transport/frame_goaway.cc +9 -8
- data/src/core/ext/transport/chttp2/transport/frame_goaway.h +5 -5
- data/src/core/ext/transport/chttp2/transport/frame_ping.cc +7 -5
- data/src/core/ext/transport/chttp2/transport/frame_ping.h +3 -4
- data/src/core/ext/transport/chttp2/transport/frame_rst_stream.cc +17 -7
- data/src/core/ext/transport/chttp2/transport/frame_rst_stream.h +11 -4
- data/src/core/ext/transport/chttp2/transport/frame_settings.cc +11 -7
- data/src/core/ext/transport/chttp2/transport/frame_settings.h +4 -4
- data/src/core/ext/transport/chttp2/transport/frame_window_update.cc +7 -6
- data/src/core/ext/transport/chttp2/transport/frame_window_update.h +3 -4
- data/src/core/ext/transport/chttp2/transport/hpack_encoder.cc +548 -351
- data/src/core/ext/transport/chttp2/transport/hpack_encoder.h +26 -15
- data/src/core/ext/transport/chttp2/transport/hpack_parser.cc +201 -120
- data/src/core/ext/transport/chttp2/transport/hpack_parser.h +14 -6
- data/src/core/ext/transport/chttp2/transport/hpack_table.cc +47 -169
- data/src/core/ext/transport/chttp2/transport/hpack_table.h +70 -17
- data/src/core/ext/transport/chttp2/transport/http2_settings.h +4 -5
- data/src/core/ext/transport/chttp2/transport/huffsyms.h +2 -3
- data/src/core/ext/transport/chttp2/transport/incoming_metadata.cc +10 -17
- data/src/core/ext/transport/chttp2/transport/incoming_metadata.h +19 -10
- data/src/core/ext/transport/chttp2/transport/internal.h +226 -161
- data/src/core/ext/transport/chttp2/transport/parsing.cc +166 -110
- data/src/core/ext/transport/chttp2/transport/stream_lists.cc +3 -3
- data/src/core/ext/transport/chttp2/transport/stream_map.cc +28 -18
- data/src/core/ext/transport/chttp2/transport/stream_map.h +2 -3
- data/src/core/ext/transport/chttp2/transport/writing.cc +95 -35
- data/src/core/ext/transport/inproc/inproc_transport.cc +406 -388
- data/src/core/ext/upb-generated/envoy/annotations/deprecation.upb.c +17 -0
- data/src/core/ext/upb-generated/envoy/annotations/deprecation.upb.h +30 -0
- data/src/core/ext/upb-generated/envoy/annotations/resource.upb.c +27 -0
- data/src/core/ext/upb-generated/envoy/annotations/resource.upb.h +54 -0
- data/src/core/ext/upb-generated/envoy/api/v2/auth/cert.upb.c +21 -0
- data/src/core/ext/upb-generated/envoy/api/v2/auth/cert.upb.h +35 -0
- data/src/core/ext/upb-generated/envoy/api/v2/auth/common.upb.c +114 -0
- data/src/core/ext/upb-generated/envoy/api/v2/auth/common.upb.h +418 -0
- data/src/core/ext/upb-generated/envoy/api/v2/auth/secret.upb.c +72 -0
- data/src/core/ext/upb-generated/envoy/api/v2/auth/secret.upb.h +197 -0
- data/src/core/ext/upb-generated/envoy/api/v2/auth/tls.upb.c +105 -0
- data/src/core/ext/upb-generated/envoy/api/v2/auth/tls.upb.h +378 -0
- data/src/core/ext/upb-generated/envoy/api/v2/cds.upb.c +28 -0
- data/src/core/ext/upb-generated/envoy/api/v2/cds.upb.h +53 -0
- data/src/core/ext/upb-generated/envoy/api/v2/cluster.upb.c +403 -0
- data/src/core/ext/upb-generated/envoy/api/v2/cluster.upb.h +1447 -0
- data/src/core/ext/upb-generated/envoy/api/v2/cluster/circuit_breaker.upb.c +74 -0
- data/src/core/ext/upb-generated/envoy/api/v2/cluster/circuit_breaker.upb.h +218 -0
- data/src/core/ext/upb-generated/envoy/api/v2/cluster/filter.upb.c +35 -0
- data/src/core/ext/upb-generated/envoy/api/v2/cluster/filter.upb.h +69 -0
- data/src/core/ext/upb-generated/envoy/api/v2/cluster/outlier_detection.upb.c +55 -0
- data/src/core/ext/upb-generated/envoy/api/v2/cluster/outlier_detection.upb.h +305 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/address.upb.c +112 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/address.upb.h +328 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/backoff.upb.c +35 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/backoff.upb.h +78 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/base.upb.c +313 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/base.upb.h +897 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/config_source.upb.c +96 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/config_source.upb.h +322 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/event_service_config.upb.c +34 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/event_service_config.upb.h +72 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/grpc_service.upb.c +197 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/grpc_service.upb.h +642 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/health_check.upb.c +172 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/health_check.upb.h +673 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/http_uri.upb.c +36 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/http_uri.upb.h +80 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/protocol.upb.c +152 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/protocol.upb.h +518 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/socket_option.upb.c +34 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/socket_option.upb.h +89 -0
- data/src/core/ext/upb-generated/envoy/api/v2/discovery.upb.c +129 -0
- data/src/core/ext/upb-generated/envoy/api/v2/discovery.upb.h +392 -0
- data/src/core/ext/upb-generated/envoy/api/v2/eds.upb.c +31 -0
- data/src/core/ext/upb-generated/envoy/api/v2/eds.upb.h +53 -0
- data/src/core/ext/upb-generated/envoy/api/v2/endpoint.upb.c +92 -0
- data/src/core/ext/upb-generated/envoy/api/v2/endpoint.upb.h +240 -0
- data/src/core/ext/upb-generated/envoy/api/v2/endpoint/endpoint.upb.c +18 -0
- data/src/core/ext/upb-generated/envoy/api/v2/endpoint/endpoint.upb.h +33 -0
- data/src/core/ext/upb-generated/envoy/api/v2/endpoint/endpoint_components.upb.c +91 -0
- data/src/core/ext/upb-generated/envoy/api/v2/endpoint/endpoint_components.upb.h +266 -0
- data/src/core/ext/upb-generated/envoy/api/v2/endpoint/load_report.upb.c +112 -0
- data/src/core/ext/upb-generated/envoy/api/v2/endpoint/load_report.upb.h +324 -0
- data/src/core/ext/upb-generated/envoy/api/v2/lds.upb.c +31 -0
- data/src/core/ext/upb-generated/envoy/api/v2/lds.upb.h +53 -0
- data/src/core/ext/upb-generated/envoy/api/v2/listener.upb.c +109 -0
- data/src/core/ext/upb-generated/envoy/api/v2/listener.upb.h +399 -0
- data/src/core/ext/upb-generated/envoy/api/v2/listener/listener.upb.c +18 -0
- data/src/core/ext/upb-generated/envoy/api/v2/listener/listener.upb.h +33 -0
- data/src/core/ext/upb-generated/envoy/api/v2/listener/listener_components.upb.c +145 -0
- data/src/core/ext/upb-generated/envoy/api/v2/listener/listener_components.upb.h +527 -0
- data/src/core/ext/upb-generated/envoy/api/v2/listener/udp_listener_config.upb.c +43 -0
- data/src/core/ext/upb-generated/envoy/api/v2/listener/udp_listener_config.upb.h +112 -0
- data/src/core/ext/upb-generated/envoy/api/v2/rds.upb.c +30 -0
- data/src/core/ext/upb-generated/envoy/api/v2/rds.upb.h +53 -0
- data/src/core/ext/upb-generated/envoy/api/v2/route.upb.c +63 -0
- data/src/core/ext/upb-generated/envoy/api/v2/route.upb.h +199 -0
- data/src/core/ext/upb-generated/envoy/api/v2/route/route.upb.c +18 -0
- data/src/core/ext/upb-generated/envoy/api/v2/route/route.upb.h +33 -0
- data/src/core/ext/upb-generated/envoy/api/v2/route/route_components.upb.c +815 -0
- data/src/core/ext/upb-generated/envoy/api/v2/route/route_components.upb.h +3032 -0
- data/src/core/ext/upb-generated/envoy/api/v2/scoped_route.upb.c +59 -0
- data/src/core/ext/upb-generated/envoy/api/v2/scoped_route.upb.h +134 -0
- data/src/core/ext/upb-generated/envoy/api/v2/srds.upb.c +28 -0
- data/src/core/ext/upb-generated/envoy/api/v2/srds.upb.h +53 -0
- data/src/core/ext/upb-generated/envoy/config/filter/accesslog/v2/accesslog.upb.c +228 -0
- data/src/core/ext/upb-generated/envoy/config/filter/accesslog/v2/accesslog.upb.h +725 -0
- data/src/core/ext/upb-generated/envoy/config/filter/network/http_connection_manager/v2/http_connection_manager.upb.c +316 -0
- data/src/core/ext/upb-generated/envoy/config/filter/network/http_connection_manager/v2/http_connection_manager.upb.h +1132 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v2/api_listener.upb.c +33 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v2/api_listener.upb.h +65 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v2/http_tracer.upb.c +51 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v2/http_tracer.upb.h +125 -0
- data/src/core/ext/upb-generated/envoy/service/discovery/v2/ads.upb.c +24 -0
- data/src/core/ext/upb-generated/envoy/service/discovery/v2/ads.upb.h +50 -0
- data/src/core/ext/upb-generated/envoy/service/load_stats/v2/lrs.upb.c +54 -0
- data/src/core/ext/upb-generated/envoy/service/load_stats/v2/lrs.upb.h +134 -0
- data/src/core/ext/upb-generated/envoy/type/http.upb.c +17 -0
- data/src/core/ext/upb-generated/envoy/type/http.upb.h +36 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/regex.upb.c +63 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/regex.upb.h +144 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/string.upb.c +53 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/string.upb.h +133 -0
- data/src/core/ext/upb-generated/envoy/type/metadata/v2/metadata.upb.c +88 -0
- data/src/core/ext/upb-generated/envoy/type/metadata/v2/metadata.upb.h +258 -0
- data/src/core/ext/upb-generated/envoy/type/percent.upb.c +39 -0
- data/src/core/ext/upb-generated/envoy/type/percent.upb.h +87 -0
- data/src/core/ext/upb-generated/envoy/type/range.upb.c +50 -0
- data/src/core/ext/upb-generated/envoy/type/range.upb.h +112 -0
- data/src/core/ext/upb-generated/envoy/type/semantic_version.upb.c +29 -0
- data/src/core/ext/upb-generated/envoy/type/semantic_version.upb.h +62 -0
- data/src/core/ext/upb-generated/envoy/type/tracing/v2/custom_tag.upb.c +89 -0
- data/src/core/ext/upb-generated/envoy/type/tracing/v2/custom_tag.upb.h +249 -0
- data/src/core/ext/upb-generated/gogoproto/gogo.upb.c +17 -0
- data/src/core/ext/upb-generated/gogoproto/gogo.upb.h +30 -0
- data/src/core/ext/upb-generated/google/api/annotations.upb.c +18 -0
- data/src/core/ext/upb-generated/google/api/annotations.upb.h +30 -0
- data/src/core/ext/upb-generated/google/api/http.upb.c +66 -0
- data/src/core/ext/upb-generated/google/api/http.upb.h +190 -0
- data/src/core/ext/upb-generated/google/protobuf/any.upb.c +27 -0
- data/src/core/ext/upb-generated/google/protobuf/any.upb.h +58 -0
- data/src/core/ext/upb-generated/google/protobuf/descriptor.upb.c +486 -0
- data/src/core/ext/upb-generated/google/protobuf/descriptor.upb.h +1696 -0
- data/src/core/ext/upb-generated/google/protobuf/duration.upb.c +27 -0
- data/src/core/ext/upb-generated/google/protobuf/duration.upb.h +58 -0
- data/src/core/ext/upb-generated/google/protobuf/empty.upb.c +22 -0
- data/src/core/ext/upb-generated/google/protobuf/empty.upb.h +50 -0
- data/src/core/ext/upb-generated/google/protobuf/struct.upb.c +79 -0
- data/src/core/ext/upb-generated/google/protobuf/struct.upb.h +215 -0
- data/src/core/ext/upb-generated/google/protobuf/timestamp.upb.c +27 -0
- data/src/core/ext/upb-generated/google/protobuf/timestamp.upb.h +58 -0
- data/src/core/ext/upb-generated/google/protobuf/wrappers.upb.c +106 -0
- data/src/core/ext/upb-generated/google/protobuf/wrappers.upb.h +238 -0
- data/src/core/ext/upb-generated/google/rpc/status.upb.c +33 -0
- data/src/core/ext/upb-generated/google/rpc/status.upb.h +74 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/altscontext.upb.c +49 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/altscontext.upb.h +126 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/handshaker.upb.c +212 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/handshaker.upb.h +693 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/transport_security_common.upb.c +42 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/transport_security_common.upb.h +109 -0
- data/src/core/ext/upb-generated/src/proto/grpc/health/v1/health.upb.c +36 -0
- data/src/core/ext/upb-generated/src/proto/grpc/health/v1/health.upb.h +84 -0
- data/src/core/ext/upb-generated/src/proto/grpc/lb/v1/load_balancer.upb.c +141 -0
- data/src/core/ext/upb-generated/src/proto/grpc/lb/v1/load_balancer.upb.h +393 -0
- data/src/core/ext/upb-generated/udpa/annotations/migrate.upb.c +48 -0
- data/src/core/ext/upb-generated/udpa/annotations/migrate.upb.h +104 -0
- data/src/core/ext/upb-generated/udpa/annotations/sensitive.upb.c +17 -0
- data/src/core/ext/upb-generated/udpa/annotations/sensitive.upb.h +30 -0
- data/src/core/ext/upb-generated/udpa/annotations/status.upb.c +28 -0
- data/src/core/ext/upb-generated/udpa/annotations/status.upb.h +65 -0
- data/src/core/ext/upb-generated/udpa/data/orca/v1/orca_load_report.upb.c +58 -0
- data/src/core/ext/upb-generated/udpa/data/orca/v1/orca_load_report.upb.h +144 -0
- data/src/core/ext/upb-generated/validate/validate.upb.c +448 -0
- data/src/core/ext/upb-generated/validate/validate.upb.h +2073 -0
- data/src/core/lib/avl/avl.cc +1 -1
- data/src/core/lib/channel/channel_args.cc +54 -115
- data/src/core/lib/channel/channel_args.h +44 -40
- data/src/core/lib/channel/channel_stack.cc +6 -5
- data/src/core/lib/channel/channel_stack.h +52 -28
- data/src/core/lib/channel/channel_stack_builder.cc +14 -2
- data/src/core/lib/channel/channel_stack_builder.h +8 -0
- data/src/core/lib/channel/channel_trace.cc +75 -85
- data/src/core/lib/channel/channel_trace.h +37 -32
- data/src/core/lib/channel/channelz.cc +496 -106
- data/src/core/lib/channel/channelz.h +262 -61
- data/src/core/lib/channel/channelz_registry.cc +191 -69
- data/src/core/lib/channel/channelz_registry.h +30 -53
- data/src/core/lib/channel/connected_channel.cc +30 -27
- data/src/core/lib/channel/context.h +6 -6
- data/src/core/lib/channel/handshaker.cc +150 -218
- data/src/core/lib/channel/handshaker.h +111 -102
- data/src/core/lib/channel/handshaker_factory.h +9 -17
- data/src/core/lib/channel/handshaker_registry.cc +57 -49
- data/src/core/lib/channel/handshaker_registry.h +21 -15
- data/src/core/lib/channel/status_util.cc +2 -3
- data/src/core/lib/compression/algorithm_metadata.h +3 -3
- data/src/core/lib/compression/compression.cc +17 -12
- data/src/core/lib/compression/compression_args.cc +134 -0
- data/src/core/lib/compression/compression_args.h +56 -0
- data/src/core/lib/compression/compression_internal.cc +17 -13
- data/src/core/lib/compression/compression_internal.h +9 -1
- data/src/core/lib/compression/message_compress.cc +8 -3
- data/src/core/lib/compression/stream_compression.cc +3 -2
- data/src/core/lib/compression/stream_compression.h +2 -2
- data/src/core/lib/compression/stream_compression_gzip.cc +9 -9
- data/src/core/lib/compression/stream_compression_identity.cc +5 -7
- data/src/core/lib/debug/stats.cc +21 -27
- data/src/core/lib/debug/stats.h +3 -1
- data/src/core/lib/debug/trace.cc +16 -7
- data/src/core/lib/debug/trace.h +20 -4
- data/src/core/lib/gpr/alloc.cc +4 -29
- data/src/core/lib/gpr/arena.h +13 -7
- data/src/core/lib/gpr/cpu_linux.cc +1 -1
- data/src/core/lib/gpr/cpu_posix.cc +5 -3
- data/src/core/lib/gpr/env.h +3 -6
- data/src/core/lib/gpr/env_linux.cc +15 -21
- data/src/core/lib/gpr/env_posix.cc +5 -5
- data/src/core/lib/gpr/env_windows.cc +7 -5
- data/src/core/lib/gpr/log.cc +9 -13
- data/src/core/lib/gpr/log_linux.cc +2 -2
- data/src/core/lib/gpr/log_posix.cc +4 -3
- data/src/core/lib/gpr/spinlock.h +2 -3
- data/src/core/lib/gpr/string.cc +29 -35
- data/src/core/lib/gpr/string.h +11 -19
- data/src/core/lib/gpr/sync_abseil.cc +116 -0
- data/src/core/lib/gpr/sync_posix.cc +78 -9
- data/src/core/lib/gpr/sync_windows.cc +4 -2
- data/src/core/lib/gpr/time.cc +12 -0
- data/src/core/lib/gpr/time_posix.cc +22 -3
- data/src/core/lib/gpr/time_precise.cc +123 -36
- data/src/core/lib/gpr/time_precise.h +37 -0
- data/src/core/lib/gprpp/arena.cc +103 -0
- data/src/core/lib/gprpp/arena.h +120 -0
- data/src/core/lib/gprpp/atomic.h +79 -5
- data/src/core/lib/gprpp/debug_location.h +3 -2
- data/src/core/lib/gprpp/fork.cc +30 -56
- data/src/core/lib/gprpp/fork.h +18 -3
- data/src/core/lib/gprpp/global_config.h +96 -0
- data/src/core/lib/gprpp/global_config_custom.h +29 -0
- data/src/core/lib/gprpp/global_config_env.cc +135 -0
- data/src/core/lib/gprpp/global_config_env.h +131 -0
- data/src/core/lib/gprpp/global_config_generic.h +44 -0
- data/src/core/lib/gprpp/host_port.cc +112 -0
- data/src/core/lib/gprpp/host_port.h +56 -0
- data/src/core/lib/gprpp/map.h +53 -0
- data/src/core/lib/gprpp/memory.h +11 -83
- data/src/core/lib/gprpp/mpscq.cc +108 -0
- data/src/core/lib/gprpp/mpscq.h +98 -0
- data/src/core/lib/gprpp/orphanable.h +27 -95
- data/src/core/lib/gprpp/ref_counted.h +228 -83
- data/src/core/lib/gprpp/ref_counted_ptr.h +39 -16
- data/src/core/lib/gprpp/sync.h +135 -0
- data/src/core/lib/gprpp/thd.h +54 -12
- data/src/core/lib/gprpp/thd_posix.cc +57 -13
- data/src/core/lib/gprpp/thd_windows.cc +54 -33
- data/src/core/lib/http/format_request.cc +46 -65
- data/src/core/lib/http/httpcli.cc +11 -11
- data/src/core/lib/http/httpcli.h +2 -3
- data/src/core/lib/http/httpcli_security_connector.cc +121 -107
- data/src/core/lib/http/parser.cc +4 -3
- data/src/core/lib/http/parser.h +9 -9
- data/src/core/lib/iomgr/buffer_list.cc +308 -0
- data/src/core/lib/iomgr/buffer_list.h +165 -0
- data/src/core/lib/iomgr/call_combiner.cc +113 -69
- data/src/core/lib/iomgr/call_combiner.h +96 -74
- data/src/core/lib/iomgr/cfstream_handle.cc +209 -0
- data/src/core/lib/iomgr/cfstream_handle.h +90 -0
- data/src/core/lib/iomgr/closure.h +44 -141
- data/src/core/lib/iomgr/combiner.cc +50 -86
- data/src/core/lib/iomgr/combiner.h +31 -9
- data/src/core/lib/iomgr/dualstack_socket_posix.cc +47 -0
- data/src/core/lib/iomgr/dynamic_annotations.h +67 -0
- data/src/core/lib/iomgr/endpoint.cc +8 -4
- data/src/core/lib/iomgr/endpoint.h +12 -4
- data/src/core/lib/iomgr/endpoint_cfstream.cc +376 -0
- data/src/core/lib/iomgr/endpoint_cfstream.h +49 -0
- data/src/core/lib/iomgr/endpoint_pair.h +2 -3
- data/src/core/lib/iomgr/endpoint_pair_posix.cc +1 -1
- data/src/core/lib/iomgr/endpoint_pair_windows.cc +2 -2
- data/src/core/lib/iomgr/error.cc +71 -64
- data/src/core/lib/iomgr/error.h +74 -10
- data/src/core/lib/iomgr/error_cfstream.cc +52 -0
- data/src/core/lib/iomgr/error_cfstream.h +31 -0
- data/src/core/lib/iomgr/error_internal.h +1 -3
- data/src/core/lib/iomgr/ev_apple.cc +356 -0
- data/src/core/lib/iomgr/ev_apple.h +43 -0
- data/src/core/lib/iomgr/ev_epoll1_linux.cc +99 -69
- data/src/core/lib/iomgr/ev_epollex_linux.cc +238 -259
- data/src/core/lib/iomgr/ev_poll_posix.cc +52 -504
- data/src/core/lib/iomgr/ev_posix.cc +54 -31
- data/src/core/lib/iomgr/ev_posix.h +29 -3
- data/src/core/lib/iomgr/ev_windows.cc +2 -2
- data/src/core/lib/iomgr/exec_ctx.cc +79 -8
- data/src/core/lib/iomgr/exec_ctx.h +163 -21
- data/src/core/lib/iomgr/executor.cc +137 -101
- data/src/core/lib/iomgr/executor.h +54 -48
- data/src/core/lib/iomgr/executor/mpmcqueue.cc +183 -0
- data/src/core/lib/iomgr/executor/mpmcqueue.h +175 -0
- data/src/core/lib/iomgr/executor/threadpool.cc +137 -0
- data/src/core/lib/iomgr/executor/threadpool.h +149 -0
- data/src/core/lib/iomgr/fork_posix.cc +15 -8
- data/src/core/lib/iomgr/grpc_if_nametoindex.h +30 -0
- data/src/core/lib/iomgr/grpc_if_nametoindex_posix.cc +42 -0
- data/src/core/lib/iomgr/grpc_if_nametoindex_unsupported.cc +38 -0
- data/src/core/lib/iomgr/internal_errqueue.cc +67 -0
- data/src/core/lib/iomgr/internal_errqueue.h +191 -0
- data/src/core/lib/iomgr/iocp_windows.cc +2 -2
- data/src/core/lib/iomgr/iomgr.cc +27 -13
- data/src/core/lib/iomgr/iomgr.h +19 -0
- data/src/core/lib/iomgr/iomgr_custom.cc +18 -2
- data/src/core/lib/iomgr/iomgr_custom.h +2 -0
- data/src/core/lib/iomgr/iomgr_internal.cc +14 -0
- data/src/core/lib/iomgr/iomgr_internal.h +16 -0
- data/src/core/lib/iomgr/iomgr_posix.cc +23 -1
- data/src/core/lib/iomgr/iomgr_posix_cfstream.cc +171 -0
- data/src/core/lib/iomgr/iomgr_uv.cc +3 -0
- data/src/core/lib/iomgr/iomgr_windows.cc +20 -1
- data/src/core/lib/iomgr/load_file.cc +1 -0
- data/src/core/lib/iomgr/lockfree_event.cc +16 -15
- data/src/core/lib/iomgr/poller/eventmanager_libuv.cc +87 -0
- data/src/core/lib/iomgr/poller/eventmanager_libuv.h +88 -0
- data/src/core/lib/iomgr/polling_entity.h +4 -4
- data/src/core/lib/iomgr/pollset_custom.cc +5 -5
- data/src/core/lib/iomgr/pollset_set_custom.cc +10 -10
- data/src/core/lib/iomgr/pollset_uv.h +32 -0
- data/src/core/lib/iomgr/pollset_windows.cc +16 -2
- data/src/core/lib/iomgr/port.h +49 -2
- data/src/core/lib/iomgr/python_util.h +46 -0
- data/src/core/lib/iomgr/resolve_address.h +5 -7
- data/src/core/lib/iomgr/resolve_address_custom.cc +36 -50
- data/src/core/lib/iomgr/resolve_address_custom.h +4 -2
- data/src/core/lib/iomgr/resolve_address_posix.cc +22 -25
- data/src/core/lib/iomgr/resolve_address_windows.cc +14 -26
- data/src/core/lib/iomgr/resource_quota.cc +175 -110
- data/src/core/lib/iomgr/resource_quota.h +30 -11
- data/src/core/lib/iomgr/sockaddr_utils.cc +26 -31
- data/src/core/lib/iomgr/sockaddr_utils.h +9 -14
- data/src/core/lib/iomgr/socket_factory_posix.h +2 -3
- data/src/core/lib/iomgr/socket_mutator.h +2 -3
- data/src/core/lib/iomgr/socket_utils_common_posix.cc +145 -27
- data/src/core/lib/iomgr/socket_utils_posix.h +26 -0
- data/src/core/lib/iomgr/socket_windows.cc +21 -2
- data/src/core/lib/iomgr/socket_windows.h +9 -1
- data/src/core/lib/iomgr/tcp_client_cfstream.cc +215 -0
- data/src/core/lib/iomgr/tcp_client_custom.cc +19 -7
- data/src/core/lib/iomgr/tcp_client_posix.cc +40 -38
- data/src/core/lib/iomgr/tcp_client_posix.h +6 -6
- data/src/core/lib/iomgr/tcp_client_windows.cc +11 -10
- data/src/core/lib/iomgr/tcp_custom.cc +37 -32
- data/src/core/lib/iomgr/tcp_custom.h +3 -0
- data/src/core/lib/iomgr/tcp_posix.cc +1196 -168
- data/src/core/lib/iomgr/tcp_posix.h +3 -0
- data/src/core/lib/iomgr/tcp_server.cc +5 -0
- data/src/core/lib/iomgr/tcp_server.h +21 -0
- data/src/core/lib/iomgr/tcp_server_custom.cc +43 -30
- data/src/core/lib/iomgr/tcp_server_posix.cc +97 -21
- data/src/core/lib/iomgr/tcp_server_utils_posix.h +3 -0
- data/src/core/lib/iomgr/tcp_server_utils_posix_common.cc +19 -16
- data/src/core/lib/iomgr/tcp_server_utils_posix_ifaddrs.cc +8 -11
- data/src/core/lib/iomgr/tcp_server_windows.cc +19 -15
- data/src/core/lib/iomgr/tcp_uv.cc +8 -9
- data/src/core/lib/iomgr/tcp_windows.cc +110 -48
- data/src/core/lib/iomgr/time_averaged_stats.h +2 -3
- data/src/core/lib/iomgr/timer.h +2 -1
- data/src/core/lib/iomgr/timer_custom.cc +7 -5
- data/src/core/lib/iomgr/timer_generic.cc +42 -40
- data/src/core/lib/iomgr/timer_generic.h +39 -0
- data/src/core/lib/iomgr/timer_heap.cc +2 -2
- data/src/core/lib/iomgr/timer_heap.h +5 -6
- data/src/core/lib/iomgr/timer_manager.cc +34 -16
- data/src/core/lib/iomgr/timer_manager.h +4 -2
- data/src/core/lib/iomgr/udp_server.cc +31 -30
- data/src/core/lib/iomgr/udp_server.h +6 -12
- data/src/core/lib/iomgr/wakeup_fd_eventfd.cc +3 -4
- data/src/core/lib/iomgr/wakeup_fd_posix.cc +1 -19
- data/src/core/lib/iomgr/work_serializer.cc +155 -0
- data/src/core/lib/iomgr/work_serializer.h +65 -0
- data/src/core/lib/json/json.h +209 -68
- data/src/core/lib/json/json_reader.cc +511 -319
- data/src/core/lib/json/json_writer.cc +202 -110
- data/src/core/lib/profiling/basic_timers.cc +12 -6
- data/src/core/lib/security/context/security_context.cc +92 -119
- data/src/core/lib/security/context/security_context.h +79 -48
- data/src/core/lib/security/credentials/alts/alts_credentials.cc +39 -48
- data/src/core/lib/security/credentials/alts/alts_credentials.h +37 -10
- data/src/core/lib/security/credentials/alts/check_gcp_environment.cc +1 -1
- data/src/core/lib/security/credentials/alts/check_gcp_environment_no_op.cc +2 -2
- data/src/core/lib/security/credentials/alts/check_gcp_environment_windows.cc +45 -57
- data/src/core/lib/security/credentials/alts/grpc_alts_credentials_client_options.cc +2 -1
- data/src/core/lib/security/credentials/alts/grpc_alts_credentials_server_options.cc +3 -2
- data/src/core/lib/security/credentials/composite/composite_credentials.cc +119 -159
- data/src/core/lib/security/credentials/composite/composite_credentials.h +71 -24
- data/src/core/lib/security/credentials/credentials.cc +18 -142
- data/src/core/lib/security/credentials/credentials.h +141 -105
- data/src/core/lib/security/credentials/fake/fake_credentials.cc +48 -72
- data/src/core/lib/security/credentials/fake/fake_credentials.h +28 -5
- data/src/core/lib/security/credentials/google_default/google_default_credentials.cc +186 -99
- data/src/core/lib/security/credentials/google_default/google_default_credentials.h +32 -6
- data/src/core/lib/security/credentials/iam/iam_credentials.cc +33 -39
- data/src/core/lib/security/credentials/iam/iam_credentials.h +22 -4
- data/src/core/lib/security/credentials/jwt/json_token.cc +32 -58
- data/src/core/lib/security/credentials/jwt/json_token.h +5 -7
- data/src/core/lib/security/credentials/jwt/jwt_credentials.cc +70 -88
- data/src/core/lib/security/credentials/jwt/jwt_credentials.h +41 -10
- data/src/core/lib/security/credentials/jwt/jwt_verifier.cc +159 -170
- data/src/core/lib/security/credentials/jwt/jwt_verifier.h +4 -5
- data/src/core/lib/security/credentials/local/local_credentials.cc +21 -34
- data/src/core/lib/security/credentials/local/local_credentials.h +32 -11
- data/src/core/lib/security/credentials/oauth2/oauth2_credentials.cc +438 -203
- data/src/core/lib/security/credentials/oauth2/oauth2_credentials.h +98 -33
- data/src/core/lib/security/credentials/plugin/plugin_credentials.cc +89 -91
- data/src/core/lib/security/credentials/plugin/plugin_credentials.h +43 -17
- data/src/core/lib/security/credentials/ssl/ssl_credentials.cc +84 -83
- data/src/core/lib/security/credentials/ssl/ssl_credentials.h +60 -15
- data/src/core/lib/security/credentials/tls/grpc_tls_credentials_options.cc +245 -0
- data/src/core/lib/security/credentials/tls/grpc_tls_credentials_options.h +313 -0
- data/src/core/lib/security/credentials/tls/tls_credentials.cc +128 -0
- data/src/core/lib/security/credentials/tls/tls_credentials.h +62 -0
- data/src/core/lib/security/security_connector/alts/alts_security_connector.cc +301 -0
- data/src/core/lib/security/security_connector/alts/alts_security_connector.h +76 -0
- data/src/core/lib/security/security_connector/fake/fake_security_connector.cc +324 -0
- data/src/core/lib/security/security_connector/fake/fake_security_connector.h +45 -0
- data/src/core/lib/security/security_connector/load_system_roots_fallback.cc +2 -2
- data/src/core/lib/security/security_connector/load_system_roots_linux.cc +15 -9
- data/src/core/lib/security/security_connector/local/local_security_connector.cc +281 -0
- data/src/core/lib/security/security_connector/local/local_security_connector.h +59 -0
- data/src/core/lib/security/security_connector/security_connector.cc +40 -1158
- data/src/core/lib/security/security_connector/security_connector.h +100 -209
- data/src/core/lib/security/security_connector/ssl/ssl_security_connector.cc +439 -0
- data/src/core/lib/security/security_connector/ssl/ssl_security_connector.h +77 -0
- data/src/core/lib/security/security_connector/ssl_utils.cc +563 -0
- data/src/core/lib/security/security_connector/ssl_utils.h +184 -0
- data/src/core/lib/security/security_connector/ssl_utils_config.cc +32 -0
- data/src/core/lib/security/security_connector/ssl_utils_config.h +30 -0
- data/src/core/lib/security/security_connector/tls/tls_security_connector.cc +603 -0
- data/src/core/lib/security/security_connector/tls/tls_security_connector.h +183 -0
- data/src/core/lib/security/transport/auth_filters.h +5 -2
- data/src/core/lib/security/transport/client_auth_filter.cc +164 -116
- data/src/core/lib/security/transport/secure_endpoint.cc +70 -53
- data/src/core/lib/security/transport/security_handshaker.cc +340 -297
- data/src/core/lib/security/transport/security_handshaker.h +14 -3
- data/src/core/lib/security/transport/server_auth_filter.cc +115 -55
- data/src/core/lib/security/transport/target_authority_table.h +1 -1
- data/src/core/lib/security/util/json_util.cc +34 -13
- data/src/core/lib/security/util/json_util.h +5 -3
- data/src/core/lib/slice/b64.cc +3 -4
- data/src/core/lib/slice/b64.h +3 -4
- data/src/core/lib/slice/percent_encoding.cc +3 -3
- data/src/core/lib/slice/percent_encoding.h +3 -3
- data/src/core/lib/slice/slice.cc +219 -153
- data/src/core/lib/slice/slice_buffer.cc +60 -26
- data/src/core/lib/slice/slice_hash_table.h +9 -15
- data/src/core/lib/slice/slice_intern.cc +186 -143
- data/src/core/lib/slice/slice_internal.h +318 -3
- data/src/core/lib/slice/slice_string_helpers.cc +10 -1
- data/src/core/lib/slice/slice_string_helpers.h +3 -1
- data/src/core/lib/slice/slice_utils.h +200 -0
- data/src/core/lib/slice/slice_weak_hash_table.h +10 -17
- data/src/core/lib/surface/api_trace.h +1 -1
- data/src/core/lib/surface/byte_buffer_reader.cc +15 -43
- data/src/core/lib/surface/call.cc +419 -438
- data/src/core/lib/surface/call.h +14 -5
- data/src/core/lib/surface/call_details.cc +0 -1
- data/src/core/lib/surface/call_log_batch.cc +51 -60
- data/src/core/lib/surface/channel.cc +205 -144
- data/src/core/lib/surface/channel.h +85 -14
- data/src/core/lib/surface/channel_init.h +5 -0
- data/src/core/lib/surface/channel_ping.cc +3 -4
- data/src/core/lib/surface/completion_queue.cc +322 -281
- data/src/core/lib/surface/completion_queue.h +7 -21
- data/src/core/lib/surface/completion_queue_factory.cc +4 -4
- data/src/core/lib/surface/event_string.cc +18 -25
- data/src/core/lib/surface/event_string.h +3 -1
- data/src/core/lib/surface/init.cc +86 -31
- data/src/core/lib/surface/init.h +1 -0
- data/src/core/lib/surface/init_secure.cc +4 -4
- data/src/core/lib/surface/lame_client.cc +46 -35
- data/src/core/lib/surface/server.cc +815 -476
- data/src/core/lib/surface/server.h +50 -9
- data/src/core/lib/surface/validate_metadata.cc +18 -8
- data/src/core/lib/surface/validate_metadata.h +13 -2
- data/src/core/lib/surface/version.cc +2 -2
- data/src/core/lib/transport/bdp_estimator.cc +3 -3
- data/src/core/lib/transport/bdp_estimator.h +2 -2
- data/src/core/lib/transport/byte_stream.cc +5 -7
- data/src/core/lib/transport/byte_stream.h +13 -12
- data/src/core/lib/transport/connectivity_state.cc +114 -129
- data/src/core/lib/transport/connectivity_state.h +102 -58
- data/src/core/lib/transport/error_utils.cc +25 -2
- data/src/core/lib/transport/metadata.cc +428 -288
- data/src/core/lib/transport/metadata.h +307 -26
- data/src/core/lib/transport/metadata_batch.cc +81 -18
- data/src/core/lib/transport/metadata_batch.h +47 -6
- data/src/core/lib/transport/static_metadata.cc +1150 -521
- data/src/core/lib/transport/static_metadata.h +311 -317
- data/src/core/lib/transport/status_conversion.cc +7 -15
- data/src/core/lib/transport/status_metadata.cc +11 -4
- data/src/core/lib/transport/status_metadata.h +18 -0
- data/src/core/lib/transport/timeout_encoding.cc +8 -1
- data/src/core/lib/transport/timeout_encoding.h +4 -3
- data/src/core/lib/transport/transport.cc +49 -80
- data/src/core/lib/transport/transport.h +132 -54
- data/src/core/lib/transport/transport_impl.h +1 -1
- data/src/core/lib/transport/transport_op_string.cc +67 -105
- data/src/core/lib/uri/uri_parser.cc +314 -0
- data/src/core/lib/uri/uri_parser.h +49 -0
- data/src/core/plugin_registry/grpc_plugin_registry.cc +32 -4
- data/src/core/tsi/alts/crypt/aes_gcm.cc +0 -2
- data/src/core/tsi/alts/frame_protector/alts_unseal_privacy_integrity_crypter.cc +1 -1
- data/src/core/tsi/alts/handshaker/alts_handshaker_client.cc +715 -144
- data/src/core/tsi/alts/handshaker/alts_handshaker_client.h +49 -35
- data/src/core/tsi/alts/handshaker/alts_shared_resource.cc +83 -0
- data/src/core/tsi/alts/handshaker/alts_shared_resource.h +73 -0
- data/src/core/tsi/alts/handshaker/alts_tsi_handshaker.cc +373 -217
- data/src/core/tsi/alts/handshaker/alts_tsi_handshaker.h +45 -24
- data/src/core/tsi/alts/handshaker/alts_tsi_handshaker_private.h +43 -10
- data/src/core/tsi/alts/handshaker/alts_tsi_utils.cc +13 -7
- data/src/core/tsi/alts/handshaker/alts_tsi_utils.h +4 -3
- data/src/core/tsi/alts/handshaker/transport_security_common_api.cc +75 -48
- data/src/core/tsi/alts/handshaker/transport_security_common_api.h +35 -27
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_privacy_integrity_record_protocol.cc +2 -2
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_record_protocol_common.h +2 -3
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_zero_copy_grpc_protector.cc +13 -3
- data/src/core/tsi/fake_transport_security.cc +26 -25
- data/src/core/tsi/fake_transport_security.h +2 -0
- data/src/core/tsi/local_transport_security.cc +8 -6
- data/src/core/tsi/ssl/session_cache/ssl_session.h +2 -6
- data/src/core/tsi/ssl/session_cache/ssl_session_boringssl.cc +2 -3
- data/src/core/tsi/ssl/session_cache/ssl_session_cache.cc +14 -11
- data/src/core/tsi/ssl/session_cache/ssl_session_cache.h +4 -13
- data/src/core/tsi/ssl/session_cache/ssl_session_openssl.cc +2 -3
- data/src/core/tsi/ssl_transport_security.cc +289 -125
- data/src/core/tsi/ssl_transport_security.h +52 -13
- data/src/core/tsi/ssl_types.h +0 -2
- data/src/core/tsi/transport_security.cc +31 -1
- data/src/core/tsi/transport_security.h +8 -10
- data/src/core/tsi/transport_security_grpc.cc +7 -0
- data/src/core/tsi/transport_security_grpc.h +8 -3
- data/src/core/tsi/transport_security_interface.h +15 -3
- data/src/ruby/bin/math_pb.rb +23 -21
- data/src/ruby/ext/grpc/ext-export.clang +1 -0
- data/src/ruby/ext/grpc/ext-export.gcc +6 -0
- data/src/ruby/ext/grpc/extconf.rb +18 -4
- data/src/ruby/ext/grpc/rb_call.c +11 -2
- data/src/ruby/ext/grpc/rb_call_credentials.c +12 -6
- data/src/ruby/ext/grpc/rb_channel.c +18 -11
- data/src/ruby/ext/grpc/rb_channel_credentials.c +8 -4
- data/src/ruby/ext/grpc/rb_compression_options.c +9 -7
- data/src/ruby/ext/grpc/rb_enable_cpp.cc +22 -0
- data/src/ruby/ext/grpc/rb_event_thread.c +2 -0
- data/src/ruby/ext/grpc/rb_grpc.c +48 -60
- data/src/ruby/ext/grpc/rb_grpc.h +5 -1
- data/src/ruby/ext/grpc/rb_grpc_imports.generated.c +42 -6
- data/src/ruby/ext/grpc/rb_grpc_imports.generated.h +67 -13
- data/src/ruby/ext/grpc/rb_server.c +10 -4
- data/src/ruby/lib/grpc.rb +2 -0
- data/src/ruby/lib/grpc/core/status_codes.rb +135 -0
- data/src/ruby/lib/grpc/errors.rb +122 -46
- data/src/ruby/lib/grpc/generic/active_call.rb +2 -3
- data/src/ruby/lib/grpc/generic/bidi_call.rb +2 -2
- data/src/ruby/lib/grpc/generic/interceptors.rb +4 -4
- data/src/ruby/lib/grpc/generic/rpc_desc.rb +3 -3
- data/src/ruby/lib/grpc/generic/rpc_server.rb +64 -4
- data/src/ruby/lib/grpc/generic/service.rb +6 -5
- data/src/ruby/lib/grpc/google_rpc_status_utils.rb +9 -4
- data/src/ruby/lib/grpc/grpc.rb +1 -1
- data/src/ruby/lib/grpc/structs.rb +15 -0
- data/src/ruby/lib/grpc/version.rb +1 -1
- data/src/ruby/pb/README.md +1 -1
- data/src/ruby/pb/generate_proto_ruby.sh +5 -3
- data/src/ruby/pb/grpc/health/checker.rb +2 -3
- data/src/ruby/pb/grpc/health/v1/health_pb.rb +16 -13
- data/src/ruby/pb/grpc/health/v1/health_services_pb.rb +18 -0
- data/src/ruby/pb/src/proto/grpc/testing/empty_pb.rb +4 -2
- data/src/ruby/pb/src/proto/grpc/testing/messages_pb.rb +92 -69
- data/src/ruby/pb/src/proto/grpc/testing/test_pb.rb +2 -0
- data/src/ruby/pb/src/proto/grpc/testing/test_services_pb.rb +16 -0
- data/src/ruby/spec/channel_spec.rb +44 -0
- data/src/ruby/spec/client_auth_spec.rb +5 -5
- data/src/ruby/spec/debug_message_spec.rb +134 -0
- data/src/ruby/spec/errors_spec.rb +142 -0
- data/src/ruby/spec/generic/client_stub_spec.rb +13 -9
- data/src/ruby/spec/generic/rpc_server_spec.rb +25 -3
- data/src/ruby/spec/generic/service_spec.rb +2 -0
- data/src/ruby/spec/google_rpc_status_utils_spec.rb +2 -2
- data/src/ruby/spec/pb/codegen/grpc/testing/package_options.proto +28 -0
- data/src/ruby/spec/pb/codegen/grpc/testing/package_options_import.proto +22 -0
- data/src/ruby/spec/pb/codegen/grpc/testing/package_options_ruby_style.proto +39 -0
- data/src/ruby/spec/pb/codegen/package_option_spec.rb +78 -0
- data/src/ruby/spec/support/services.rb +29 -22
- data/src/ruby/spec/testdata/ca.pem +18 -13
- data/src/ruby/spec/testdata/client.key +26 -14
- data/src/ruby/spec/testdata/client.pem +18 -12
- data/src/ruby/spec/testdata/server1.key +26 -14
- data/src/ruby/spec/testdata/server1.pem +20 -14
- data/third_party/abseil-cpp/absl/algorithm/algorithm.h +159 -0
- data/third_party/abseil-cpp/absl/base/attributes.h +621 -0
- data/third_party/abseil-cpp/absl/base/call_once.h +226 -0
- data/third_party/abseil-cpp/absl/base/casts.h +184 -0
- data/third_party/abseil-cpp/absl/base/config.h +671 -0
- data/third_party/abseil-cpp/absl/base/const_init.h +76 -0
- data/third_party/abseil-cpp/absl/base/dynamic_annotations.cc +129 -0
- data/third_party/abseil-cpp/absl/base/dynamic_annotations.h +389 -0
- data/third_party/abseil-cpp/absl/base/internal/atomic_hook.h +200 -0
- data/third_party/abseil-cpp/absl/base/internal/bits.h +218 -0
- data/third_party/abseil-cpp/absl/base/internal/cycleclock.cc +107 -0
- data/third_party/abseil-cpp/absl/base/internal/cycleclock.h +94 -0
- data/third_party/abseil-cpp/absl/base/internal/endian.h +266 -0
- data/third_party/abseil-cpp/absl/base/internal/errno_saver.h +43 -0
- data/third_party/abseil-cpp/absl/base/internal/hide_ptr.h +51 -0
- data/third_party/abseil-cpp/absl/base/internal/identity.h +37 -0
- data/third_party/abseil-cpp/absl/base/internal/inline_variable.h +107 -0
- data/third_party/abseil-cpp/absl/base/internal/invoke.h +187 -0
- data/third_party/abseil-cpp/absl/base/internal/low_level_scheduling.h +107 -0
- data/third_party/abseil-cpp/absl/base/internal/per_thread_tls.h +52 -0
- data/third_party/abseil-cpp/absl/base/internal/raw_logging.cc +240 -0
- data/third_party/abseil-cpp/absl/base/internal/raw_logging.h +183 -0
- data/third_party/abseil-cpp/absl/base/internal/scheduling_mode.h +58 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock.cc +233 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock.h +243 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_akaros.inc +35 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_linux.inc +66 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_posix.inc +46 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_wait.cc +81 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_wait.h +93 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_win32.inc +37 -0
- data/third_party/abseil-cpp/absl/base/internal/sysinfo.cc +416 -0
- data/third_party/abseil-cpp/absl/base/internal/sysinfo.h +66 -0
- data/third_party/abseil-cpp/absl/base/internal/thread_annotations.h +271 -0
- data/third_party/abseil-cpp/absl/base/internal/thread_identity.cc +152 -0
- data/third_party/abseil-cpp/absl/base/internal/thread_identity.h +259 -0
- data/third_party/abseil-cpp/absl/base/internal/throw_delegate.cc +108 -0
- data/third_party/abseil-cpp/absl/base/internal/throw_delegate.h +75 -0
- data/third_party/abseil-cpp/absl/base/internal/tsan_mutex_interface.h +66 -0
- data/third_party/abseil-cpp/absl/base/internal/unaligned_access.h +158 -0
- data/third_party/abseil-cpp/absl/base/internal/unscaledcycleclock.cc +140 -0
- data/third_party/abseil-cpp/absl/base/internal/unscaledcycleclock.h +124 -0
- data/third_party/abseil-cpp/absl/base/log_severity.cc +27 -0
- data/third_party/abseil-cpp/absl/base/log_severity.h +121 -0
- data/third_party/abseil-cpp/absl/base/macros.h +220 -0
- data/third_party/abseil-cpp/absl/base/optimization.h +181 -0
- data/third_party/abseil-cpp/absl/base/options.h +211 -0
- data/third_party/abseil-cpp/absl/base/policy_checks.h +111 -0
- data/third_party/abseil-cpp/absl/base/port.h +26 -0
- data/third_party/abseil-cpp/absl/base/thread_annotations.h +280 -0
- data/third_party/abseil-cpp/absl/container/inlined_vector.h +848 -0
- data/third_party/abseil-cpp/absl/container/internal/compressed_tuple.h +265 -0
- data/third_party/abseil-cpp/absl/container/internal/inlined_vector.h +892 -0
- data/third_party/abseil-cpp/absl/memory/memory.h +695 -0
- data/third_party/abseil-cpp/absl/meta/type_traits.h +759 -0
- data/third_party/abseil-cpp/absl/numeric/int128.cc +404 -0
- data/third_party/abseil-cpp/absl/numeric/int128.h +1091 -0
- data/third_party/abseil-cpp/absl/numeric/int128_have_intrinsic.inc +302 -0
- data/third_party/abseil-cpp/absl/numeric/int128_no_intrinsic.inc +308 -0
- data/third_party/abseil-cpp/absl/strings/ascii.cc +200 -0
- data/third_party/abseil-cpp/absl/strings/ascii.h +242 -0
- data/third_party/abseil-cpp/absl/strings/charconv.cc +984 -0
- data/third_party/abseil-cpp/absl/strings/charconv.h +119 -0
- data/third_party/abseil-cpp/absl/strings/escaping.cc +949 -0
- data/third_party/abseil-cpp/absl/strings/escaping.h +164 -0
- data/third_party/abseil-cpp/absl/strings/internal/char_map.h +156 -0
- data/third_party/abseil-cpp/absl/strings/internal/charconv_bigint.cc +359 -0
- data/third_party/abseil-cpp/absl/strings/internal/charconv_bigint.h +423 -0
- data/third_party/abseil-cpp/absl/strings/internal/charconv_parse.cc +504 -0
- data/third_party/abseil-cpp/absl/strings/internal/charconv_parse.h +99 -0
- data/third_party/abseil-cpp/absl/strings/internal/escaping.cc +180 -0
- data/third_party/abseil-cpp/absl/strings/internal/escaping.h +58 -0
- data/third_party/abseil-cpp/absl/strings/internal/memutil.cc +112 -0
- data/third_party/abseil-cpp/absl/strings/internal/memutil.h +148 -0
- data/third_party/abseil-cpp/absl/strings/internal/ostringstream.cc +36 -0
- data/third_party/abseil-cpp/absl/strings/internal/ostringstream.h +89 -0
- data/third_party/abseil-cpp/absl/strings/internal/resize_uninitialized.h +73 -0
- data/third_party/abseil-cpp/absl/strings/internal/stl_type_traits.h +248 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/arg.cc +388 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/arg.h +432 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/bind.cc +245 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/bind.h +209 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/checker.h +326 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/extension.cc +51 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/extension.h +415 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/float_conversion.cc +493 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/float_conversion.h +23 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/output.cc +72 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/output.h +104 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/parser.cc +334 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/parser.h +333 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_join_internal.h +314 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_split_internal.h +455 -0
- data/third_party/abseil-cpp/absl/strings/internal/utf8.cc +53 -0
- data/third_party/abseil-cpp/absl/strings/internal/utf8.h +50 -0
- data/third_party/abseil-cpp/absl/strings/match.cc +40 -0
- data/third_party/abseil-cpp/absl/strings/match.h +90 -0
- data/third_party/abseil-cpp/absl/strings/numbers.cc +965 -0
- data/third_party/abseil-cpp/absl/strings/numbers.h +266 -0
- data/third_party/abseil-cpp/absl/strings/str_cat.cc +246 -0
- data/third_party/abseil-cpp/absl/strings/str_cat.h +408 -0
- data/third_party/abseil-cpp/absl/strings/str_format.h +537 -0
- data/third_party/abseil-cpp/absl/strings/str_join.h +293 -0
- data/third_party/abseil-cpp/absl/strings/str_replace.cc +82 -0
- data/third_party/abseil-cpp/absl/strings/str_replace.h +219 -0
- data/third_party/abseil-cpp/absl/strings/str_split.cc +139 -0
- data/third_party/abseil-cpp/absl/strings/str_split.h +513 -0
- data/third_party/abseil-cpp/absl/strings/string_view.cc +235 -0
- data/third_party/abseil-cpp/absl/strings/string_view.h +622 -0
- data/third_party/abseil-cpp/absl/strings/strip.h +91 -0
- data/third_party/abseil-cpp/absl/strings/substitute.cc +171 -0
- data/third_party/abseil-cpp/absl/strings/substitute.h +693 -0
- data/third_party/abseil-cpp/absl/time/civil_time.cc +175 -0
- data/third_party/abseil-cpp/absl/time/civil_time.h +538 -0
- data/third_party/abseil-cpp/absl/time/clock.cc +569 -0
- data/third_party/abseil-cpp/absl/time/clock.h +74 -0
- data/third_party/abseil-cpp/absl/time/duration.cc +922 -0
- data/third_party/abseil-cpp/absl/time/format.cc +153 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/civil_time.h +332 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/civil_time_detail.h +622 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/time_zone.h +384 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/zone_info_source.h +102 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/civil_time_detail.cc +94 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_fixed.cc +140 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_fixed.h +52 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_format.cc +922 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_if.cc +45 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_if.h +76 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_impl.cc +121 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_impl.h +93 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_info.cc +958 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_info.h +138 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_libc.cc +308 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_libc.h +55 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_lookup.cc +187 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_posix.cc +159 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_posix.h +132 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/tzfile.h +122 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/zone_info_source.cc +115 -0
- data/third_party/abseil-cpp/absl/time/internal/get_current_time_chrono.inc +31 -0
- data/third_party/abseil-cpp/absl/time/internal/get_current_time_posix.inc +24 -0
- data/third_party/abseil-cpp/absl/time/time.cc +499 -0
- data/third_party/abseil-cpp/absl/time/time.h +1584 -0
- data/third_party/abseil-cpp/absl/types/bad_optional_access.cc +48 -0
- data/third_party/abseil-cpp/absl/types/bad_optional_access.h +78 -0
- data/third_party/abseil-cpp/absl/types/internal/optional.h +396 -0
- data/third_party/abseil-cpp/absl/types/internal/span.h +128 -0
- data/third_party/abseil-cpp/absl/types/optional.h +776 -0
- data/third_party/abseil-cpp/absl/types/span.h +713 -0
- data/third_party/abseil-cpp/absl/utility/utility.h +350 -0
- data/third_party/boringssl-with-bazel/err_data.c +1439 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_bitstr.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_bool.c +123 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_d2i_fp.c +93 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_dup.c +87 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_enum.c +195 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_gentm.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_i2d_fp.c +88 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_int.c +420 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_mbstr.c +305 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_object.c +286 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_octet.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_print.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_strnid.c +313 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_time.c +212 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_type.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_utctm.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_utf8.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/asn1_lib.c +446 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/asn1_locl.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/asn1_par.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/asn_pack.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/f_enum.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/f_int.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/f_string.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/tasn_dec.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_enc.c +664 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/tasn_fre.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/tasn_new.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/tasn_typ.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/tasn_utl.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/time_support.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/base64/base64.c +466 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/bio.c +700 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bio/bio_mem.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/connect.c +545 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/fd.c +279 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/file.c +317 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bio/hexdump.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bio/internal.h +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/pair.c +488 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bio/printf.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/socket.c +206 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/socket_helper.c +118 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bn_extra/bn_asn1.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/bn_extra/convert.c +470 -0
- data/third_party/boringssl-with-bazel/src/crypto/buf/buf.c +172 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bytestring/asn1_compat.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/ber.c +265 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/cbb.c +719 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/cbs.c +688 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/internal.h +96 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/unicode.c +155 -0
- data/third_party/boringssl-with-bazel/src/crypto/chacha/chacha.c +184 -0
- data/third_party/boringssl-with-bazel/src/crypto/chacha/internal.h +45 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/cipher_extra.c +143 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/derive_key.c +152 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_aesccm.c +447 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_aesctrhmac.c +283 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_aesgcmsiv.c +891 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_chacha20poly1305.c +418 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cipher_extra/e_null.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cipher_extra/e_rc2.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cipher_extra/e_rc4.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_tls.c +688 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cipher_extra/internal.h +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/tls_cbc.c +491 -0
- data/third_party/boringssl-with-bazel/src/crypto/cmac/cmac.c +278 -0
- data/third_party/boringssl-with-bazel/src/crypto/conf/conf.c +810 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/conf/conf_def.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/conf/internal.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cpu-aarch64-fuchsia.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cpu-aarch64-linux.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-arm-linux.c +220 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-arm-linux.h +201 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cpu-arm.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-intel.c +291 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cpu-ppc64le.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/crypto.c +226 -0
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/curve25519.c +2159 -0
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/curve25519_tables.h +7872 -0
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/internal.h +146 -0
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/spake25519.c +539 -0
- data/third_party/boringssl-with-bazel/src/crypto/dh/check.c +217 -0
- data/third_party/boringssl-with-bazel/src/crypto/dh/dh.c +533 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/dh/dh_asn1.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/dh/params.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/digest_extra/digest_extra.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/dsa/dsa.c +980 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/dsa/dsa_asn1.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/ec_asn1.c +574 -0
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/ec_derive.c +95 -0
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/hash_to_curve.c +425 -0
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/internal.h +78 -0
- data/third_party/boringssl-with-bazel/src/crypto/ecdh_extra/ecdh_extra.c +124 -0
- data/third_party/boringssl-with-bazel/src/crypto/ecdsa_extra/ecdsa_asn1.c +267 -0
- data/third_party/boringssl-with-bazel/src/crypto/engine/engine.c +99 -0
- data/third_party/boringssl-with-bazel/src/crypto/err/err.c +850 -0
- data/third_party/boringssl-with-bazel/src/crypto/err/internal.h +58 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/evp/digestsign.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/evp.c +443 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/evp_asn1.c +388 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/evp_ctx.c +484 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/internal.h +269 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_dsa_asn1.c +273 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_ec.c +286 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_ec_asn1.c +255 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_ed25519.c +104 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_ed25519_asn1.c +221 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_rsa.c +648 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_rsa_asn1.c +194 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_x25519.c +110 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_x25519_asn1.c +248 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/evp/pbkdf.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/evp/print.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/scrypt.c +213 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/evp/sign.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/ex_data.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/aes.c +108 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/aes_nohw.c +1282 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/internal.h +238 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/key_wrap.c +236 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/mode_wrappers.c +106 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bcm.c +263 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/add.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/asm/x86_64-gcc.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/bn.c +445 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/bytes.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/cmp.c +200 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/ctx.c +236 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/div.c +886 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/div_extra.c +87 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/exponentiation.c +1288 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/gcd.c +378 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/gcd_extra.c +325 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/generic.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/internal.h +694 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/jacobi.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/montgomery.c +502 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/montgomery_inv.c +186 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/mul.c +749 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/prime.c +1068 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/random.c +341 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/rsaz_exp.c +226 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/rsaz_exp.h +104 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/shift.c +364 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/sqrt.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/cipher/aead.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/cipher.c +620 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/e_aes.c +1302 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/e_des.c +237 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/internal.h +128 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/delocate.h +89 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/des/des.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/des/internal.h +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/digest/digest.c +271 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/digest/digests.c +296 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/digest/internal.h +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/digest/md32_common.h +268 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec.c +1252 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec_key.c +465 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec_montgomery.c +524 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/felem.c +100 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/internal.h +775 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/oct.c +328 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p224-64.c +1178 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256-x86_64-table.h +9497 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256-x86_64.c +632 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256-x86_64.h +153 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256.c +736 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256_table.h +297 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/scalar.c +175 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/simple.c +357 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/simple_mul.c +270 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/util.c +255 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/wnaf.c +270 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ecdh/ecdh.c +122 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ecdsa/ecdsa.c +328 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/fips_shared_support.c +32 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/hmac/hmac.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/is_fips.c +29 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/md4/md4.c +256 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/md5/internal.h +37 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/md5/md5.c +301 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/cbc.c +167 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/cfb.c +202 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/ctr.c +200 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/gcm.c +729 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/gcm_nohw.c +304 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/internal.h +441 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/ofb.c +96 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/modes/polyval.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/ctrdrbg.c +202 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/fork_detect.c +137 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/fork_detect.h +49 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/getrandom_fillin.h +64 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/internal.h +163 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/rand.c +378 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/urandom.c +391 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/blinding.c +243 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/internal.h +127 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/padding.c +695 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/rsa.c +898 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/rsa_impl.c +1358 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/self_check/self_check.c +654 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/internal.h +53 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/sha/sha1-altivec.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/sha1.c +371 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/sha256.c +343 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/sha512.c +544 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/tls/internal.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/tls/kdf.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/hkdf/hkdf.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/hrss/hrss.c +2100 -0
- data/third_party/boringssl-with-bazel/src/crypto/hrss/internal.h +61 -0
- data/third_party/boringssl-with-bazel/src/crypto/internal.h +834 -0
- data/third_party/boringssl-with-bazel/src/crypto/lhash/lhash.c +348 -0
- data/third_party/boringssl-with-bazel/src/crypto/mem.c +359 -0
- data/third_party/boringssl-with-bazel/src/crypto/obj/obj.c +549 -0
- data/third_party/boringssl-with-bazel/src/crypto/obj/obj_dat.h +11585 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/obj/obj_xref.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_all.c +261 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_info.c +360 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_lib.c +777 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_oth.c +87 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_pk8.c +257 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_pkey.c +218 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/pem/pem_x509.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/pem/pem_xaux.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/pkcs7/internal.h +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs7/pkcs7.c +159 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs7/pkcs7_x509.c +385 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs8/internal.h +131 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs8/p5_pbev2.c +316 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs8/pkcs8.c +530 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs8/pkcs8_x509.c +1305 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/poly1305/internal.h +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/poly1305/poly1305.c +318 -0
- data/third_party/boringssl-with-bazel/src/crypto/poly1305/poly1305_arm.c +305 -0
- data/third_party/boringssl-with-bazel/src/crypto/poly1305/poly1305_vec.c +856 -0
- data/third_party/boringssl-with-bazel/src/crypto/pool/internal.h +45 -0
- data/third_party/boringssl-with-bazel/src/crypto/pool/pool.c +220 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/deterministic.c +52 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/rand_extra/forkunsafe.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/fuchsia.c +30 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/rand_extra/rand_extra.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/windows.c +69 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/rc4/rc4.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/refcount_c11.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/refcount_lock.c +53 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/rsa_extra/rsa_asn1.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/rsa_extra/rsa_print.c +22 -0
- data/third_party/boringssl-with-bazel/src/crypto/siphash/siphash.c +82 -0
- data/third_party/boringssl-with-bazel/src/crypto/stack/stack.c +431 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/thread.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/thread_none.c +59 -0
- data/third_party/boringssl-with-bazel/src/crypto/thread_pthread.c +210 -0
- data/third_party/boringssl-with-bazel/src/crypto/thread_win.c +260 -0
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/internal.h +278 -0
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/pmbtoken.c +1474 -0
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/trust_token.c +720 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/a_digest.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/a_sign.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/a_strex.c +653 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/a_verify.c +114 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/algorithm.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/asn1_gen.c +842 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/by_dir.c +458 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/by_file.c +275 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/charmap.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/i2d_pr.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/internal.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/rsa_pss.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/t_crl.c +125 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/t_req.c +244 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/t_x509.c +544 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/t_x509a.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/vpm_int.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509_att.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_cmp.c +476 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509_d2.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_def.c +103 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509_ext.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_lu.c +834 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_obj.c +198 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_r2x.c +116 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_req.c +341 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_set.c +185 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_trs.c +326 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_txt.c +204 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509_v3.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_vfy.c +2487 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_vpm.c +671 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509cset.c +210 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509name.c +389 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509rset.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509spki.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_algor.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_all.c +399 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_attrib.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_crl.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_exten.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_info.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_name.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_pkey.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_pubkey.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_req.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_sig.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_spki.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_val.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_x509.c +334 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_x509a.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/ext_dat.h +141 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/internal.h +56 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_cache.c +286 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/pcy_data.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/pcy_int.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/pcy_lib.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/pcy_map.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_node.c +189 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_tree.c +842 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_akey.c +207 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_akeya.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_alt.c +629 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_bcons.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_bitst.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_conf.c +463 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_cpols.c +503 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_crld.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_enum.c +100 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_extku.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_genn.c +246 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_ia5.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_info.c +218 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_int.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_lib.c +371 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_ncons.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_ocsp.c +68 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_pci.c +288 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_pcia.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_pcons.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_pku.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_pmaps.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_prn.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_purp.c +843 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_skey.c +155 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_sxnet.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_utl.c +1395 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/aead.h +459 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/aes.h +195 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/arm_arch.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/asn1.h +911 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/asn1_mac.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/asn1t.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/base.h +575 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/base64.h +190 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/bio.h +933 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/blowfish.h +93 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/bn.h +1057 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/buf.h +137 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/buffer.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/bytestring.h +561 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/cast.h +96 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/chacha.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/cipher.h +638 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/cmac.h +91 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/conf.h +180 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/cpu.h +212 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/crypto.h +149 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/curve25519.h +201 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/des.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/dh.h +319 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/digest.h +331 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/dsa.h +457 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/dtls1.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/e_os2.h +18 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ec.h +424 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ec_key.h +372 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ecdh.h +118 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ecdsa.h +205 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/engine.h +109 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/err.h +465 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/evp.h +1050 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/ex_data.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/hkdf.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/hmac.h +186 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/hrss.h +100 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/is_boringssl.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/lhash.h +282 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/md4.h +108 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/md5.h +109 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/mem.h +175 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/nid.h +4259 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/obj.h +236 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/obj_mac.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/objects.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/opensslconf.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/opensslv.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/ossl_typ.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/pem.h +435 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/pkcs12.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/pkcs7.h +215 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/pkcs8.h +269 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/poly1305.h +49 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/pool.h +102 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/rand.h +111 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/rc4.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ripemd.h +108 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/rsa.h +818 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/safestack.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/sha.h +294 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/siphash.h +37 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/span.h +199 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/srtp.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ssl.h +5198 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ssl3.h +333 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/stack.h +542 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/thread.h +191 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/tls1.h +632 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/trust_token.h +291 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/type_check.h +90 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/x509.h +1207 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/x509_vfy.h +681 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/x509v3.h +831 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/ssl/bio_ssl.cc +0 -0
- data/third_party/boringssl-with-bazel/src/ssl/d1_both.cc +837 -0
- data/third_party/boringssl-with-bazel/src/ssl/d1_lib.cc +268 -0
- data/third_party/boringssl-with-bazel/src/ssl/d1_pkt.cc +273 -0
- data/third_party/boringssl-with-bazel/src/ssl/d1_srtp.cc +232 -0
- data/third_party/boringssl-with-bazel/src/ssl/dtls_method.cc +200 -0
- data/third_party/boringssl-with-bazel/src/ssl/dtls_record.cc +353 -0
- data/third_party/boringssl-with-bazel/src/ssl/handoff.cc +675 -0
- data/third_party/boringssl-with-bazel/src/ssl/handshake.cc +703 -0
- data/third_party/boringssl-with-bazel/src/ssl/handshake_client.cc +1890 -0
- data/third_party/boringssl-with-bazel/src/ssl/handshake_server.cc +1805 -0
- data/third_party/boringssl-with-bazel/src/ssl/internal.h +3572 -0
- data/third_party/boringssl-with-bazel/src/ssl/s3_both.cc +724 -0
- data/third_party/boringssl-with-bazel/src/ssl/s3_lib.cc +221 -0
- data/third_party/boringssl-with-bazel/src/ssl/s3_pkt.cc +458 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_aead_ctx.cc +432 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_asn1.cc +856 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_buffer.cc +306 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_cert.cc +1019 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_cipher.cc +1718 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_file.cc +585 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_key_share.cc +397 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_lib.cc +3015 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_privkey.cc +835 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_session.cc +1333 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_stat.cc +230 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_transcript.cc +277 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_versions.cc +394 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_x509.cc +1358 -0
- data/third_party/boringssl-with-bazel/src/ssl/t1_enc.cc +365 -0
- data/third_party/boringssl-with-bazel/src/ssl/t1_lib.cc +3870 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls13_both.cc +689 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls13_client.cc +1017 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls13_enc.cc +513 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls13_server.cc +1096 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls_method.cc +317 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls_record.cc +703 -0
- data/third_party/boringssl-with-bazel/src/third_party/fiat/curve25519_32.h +981 -0
- data/third_party/boringssl-with-bazel/src/third_party/fiat/curve25519_64.h +619 -0
- data/third_party/boringssl-with-bazel/src/third_party/fiat/p256_32.h +3147 -0
- data/third_party/boringssl-with-bazel/src/third_party/fiat/p256_64.h +1226 -0
- data/third_party/cares/cares/ares.h +12 -0
- data/third_party/cares/cares/ares_create_query.c +5 -1
- data/third_party/cares/cares/ares_data.c +74 -73
- data/third_party/cares/cares/ares_destroy.c +6 -1
- data/third_party/cares/cares/ares_gethostbyaddr.c +5 -5
- data/third_party/cares/cares/ares_gethostbyname.c +15 -4
- data/third_party/cares/cares/ares_getnameinfo.c +11 -0
- data/third_party/cares/cares/ares_init.c +274 -173
- data/third_party/cares/cares/ares_library_init.c +21 -3
- data/third_party/cares/cares/ares_options.c +6 -2
- data/third_party/cares/cares/ares_parse_naptr_reply.c +7 -6
- data/third_party/cares/cares/ares_parse_ptr_reply.c +4 -2
- data/third_party/cares/cares/ares_platform.c +7 -0
- data/third_party/cares/cares/ares_private.h +19 -11
- data/third_party/cares/cares/ares_process.c +27 -2
- data/third_party/cares/cares/ares_rules.h +1 -1
- data/third_party/cares/cares/ares_search.c +7 -0
- data/third_party/cares/cares/ares_send.c +6 -0
- data/third_party/cares/cares/ares_strsplit.c +174 -0
- data/third_party/cares/cares/ares_strsplit.h +43 -0
- data/third_party/cares/cares/ares_version.h +4 -4
- data/third_party/cares/cares/config-win32.h +1 -1
- data/third_party/cares/cares/inet_ntop.c +2 -3
- data/third_party/cares/config_darwin/ares_config.h +3 -0
- data/third_party/cares/config_freebsd/ares_config.h +3 -0
- data/third_party/cares/config_linux/ares_config.h +3 -0
- data/third_party/cares/config_openbsd/ares_config.h +3 -0
- data/third_party/upb/upb/decode.c +609 -0
- data/third_party/upb/upb/decode.h +21 -0
- data/third_party/upb/upb/encode.c +378 -0
- data/third_party/upb/upb/encode.h +21 -0
- data/third_party/upb/upb/generated_util.h +105 -0
- data/third_party/upb/upb/msg.c +111 -0
- data/third_party/upb/upb/msg.h +69 -0
- data/third_party/upb/upb/port.c +26 -0
- data/third_party/upb/upb/port_def.inc +150 -0
- data/third_party/upb/upb/port_undef.inc +21 -0
- data/third_party/upb/upb/table.c +913 -0
- data/third_party/upb/upb/table.int.h +507 -0
- data/third_party/upb/upb/upb.c +261 -0
- data/third_party/upb/upb/upb.h +364 -0
- metadata +968 -542
- data/src/boringssl/err_data.c +0 -1362
- data/src/core/ext/filters/client_channel/connector.cc +0 -41
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/proto/grpc/lb/v1/google/protobuf/duration.pb.c +0 -19
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/proto/grpc/lb/v1/google/protobuf/duration.pb.h +0 -54
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/proto/grpc/lb/v1/google/protobuf/timestamp.pb.c +0 -19
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/proto/grpc/lb/v1/google/protobuf/timestamp.pb.h +0 -54
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/proto/grpc/lb/v1/load_balancer.pb.c +0 -89
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/proto/grpc/lb/v1/load_balancer.pb.h +0 -164
- data/src/core/ext/filters/client_channel/lb_policy_factory.cc +0 -163
- data/src/core/ext/filters/client_channel/method_params.cc +0 -178
- data/src/core/ext/filters/client_channel/method_params.h +0 -78
- data/src/core/ext/filters/client_channel/proxy_mapper.cc +0 -48
- data/src/core/ext/filters/client_channel/subchannel_index.cc +0 -254
- data/src/core/ext/filters/client_channel/subchannel_index.h +0 -79
- data/src/core/ext/filters/client_channel/uri_parser.cc +0 -314
- data/src/core/ext/filters/client_channel/uri_parser.h +0 -50
- data/src/core/lib/channel/handshaker_factory.cc +0 -41
- data/src/core/lib/gpr/arena.cc +0 -145
- data/src/core/lib/gpr/host_port.cc +0 -98
- data/src/core/lib/gpr/host_port.h +0 -43
- data/src/core/lib/gpr/mpscq.cc +0 -117
- data/src/core/lib/gpr/mpscq.h +0 -86
- data/src/core/lib/gprpp/abstract.h +0 -37
- data/src/core/lib/gprpp/atomic_with_atm.h +0 -57
- data/src/core/lib/gprpp/atomic_with_std.h +0 -35
- data/src/core/lib/gprpp/inlined_vector.h +0 -186
- data/src/core/lib/gprpp/mutex_lock.h +0 -42
- data/src/core/lib/iomgr/ev_epollsig_linux.cc +0 -1743
- data/src/core/lib/iomgr/ev_epollsig_linux.h +0 -35
- data/src/core/lib/iomgr/network_status_tracker.cc +0 -36
- data/src/core/lib/iomgr/network_status_tracker.h +0 -32
- data/src/core/lib/iomgr/wakeup_fd_cv.cc +0 -107
- data/src/core/lib/iomgr/wakeup_fd_cv.h +0 -69
- data/src/core/lib/json/json.cc +0 -97
- data/src/core/lib/json/json_common.h +0 -34
- data/src/core/lib/json/json_reader.h +0 -146
- data/src/core/lib/json/json_string.cc +0 -367
- data/src/core/lib/json/json_writer.h +0 -84
- data/src/core/lib/security/security_connector/alts_security_connector.cc +0 -288
- data/src/core/lib/security/security_connector/alts_security_connector.h +0 -69
- data/src/core/lib/security/security_connector/local_security_connector.cc +0 -245
- data/src/core/lib/security/security_connector/local_security_connector.h +0 -58
- data/src/core/lib/transport/service_config.cc +0 -106
- data/src/core/lib/transport/service_config.h +0 -249
- data/src/core/tsi/alts/handshaker/alts_handshaker_service_api.cc +0 -520
- data/src/core/tsi/alts/handshaker/alts_handshaker_service_api.h +0 -323
- data/src/core/tsi/alts/handshaker/alts_handshaker_service_api_util.cc +0 -143
- data/src/core/tsi/alts/handshaker/alts_handshaker_service_api_util.h +0 -149
- data/src/core/tsi/alts/handshaker/alts_tsi_event.cc +0 -73
- data/src/core/tsi/alts/handshaker/alts_tsi_event.h +0 -93
- data/src/core/tsi/alts/handshaker/altscontext.pb.c +0 -47
- data/src/core/tsi/alts/handshaker/altscontext.pb.h +0 -63
- data/src/core/tsi/alts/handshaker/handshaker.pb.c +0 -122
- data/src/core/tsi/alts/handshaker/handshaker.pb.h +0 -254
- data/src/core/tsi/alts/handshaker/transport_security_common.pb.c +0 -49
- data/src/core/tsi/alts/handshaker/transport_security_common.pb.h +0 -78
- data/src/core/tsi/alts_transport_security.cc +0 -63
- data/src/core/tsi/alts_transport_security.h +0 -47
- data/src/core/tsi/grpc_shadow_boringssl.h +0 -3006
- data/third_party/boringssl/crypto/asn1/a_bool.c +0 -110
- data/third_party/boringssl/crypto/asn1/a_d2i_fp.c +0 -297
- data/third_party/boringssl/crypto/asn1/a_dup.c +0 -111
- data/third_party/boringssl/crypto/asn1/a_enum.c +0 -195
- data/third_party/boringssl/crypto/asn1/a_i2d_fp.c +0 -150
- data/third_party/boringssl/crypto/asn1/a_int.c +0 -479
- data/third_party/boringssl/crypto/asn1/a_mbstr.c +0 -411
- data/third_party/boringssl/crypto/asn1/a_object.c +0 -275
- data/third_party/boringssl/crypto/asn1/a_strnid.c +0 -312
- data/third_party/boringssl/crypto/asn1/a_time.c +0 -213
- data/third_party/boringssl/crypto/asn1/asn1_lib.c +0 -442
- data/third_party/boringssl/crypto/asn1/tasn_enc.c +0 -662
- data/third_party/boringssl/crypto/base64/base64.c +0 -466
- data/third_party/boringssl/crypto/bio/bio.c +0 -636
- data/third_party/boringssl/crypto/bio/connect.c +0 -542
- data/third_party/boringssl/crypto/bio/fd.c +0 -276
- data/third_party/boringssl/crypto/bio/file.c +0 -315
- data/third_party/boringssl/crypto/bio/pair.c +0 -489
- data/third_party/boringssl/crypto/bio/socket.c +0 -202
- data/third_party/boringssl/crypto/bio/socket_helper.c +0 -114
- data/third_party/boringssl/crypto/bn_extra/convert.c +0 -466
- data/third_party/boringssl/crypto/buf/buf.c +0 -231
- data/third_party/boringssl/crypto/bytestring/ber.c +0 -261
- data/third_party/boringssl/crypto/bytestring/cbb.c +0 -668
- data/third_party/boringssl/crypto/bytestring/cbs.c +0 -618
- data/third_party/boringssl/crypto/bytestring/internal.h +0 -75
- data/third_party/boringssl/crypto/chacha/chacha.c +0 -167
- data/third_party/boringssl/crypto/cipher_extra/cipher_extra.c +0 -114
- data/third_party/boringssl/crypto/cipher_extra/derive_key.c +0 -152
- data/third_party/boringssl/crypto/cipher_extra/e_aesccm.c +0 -203
- data/third_party/boringssl/crypto/cipher_extra/e_aesctrhmac.c +0 -281
- data/third_party/boringssl/crypto/cipher_extra/e_aesgcmsiv.c +0 -867
- data/third_party/boringssl/crypto/cipher_extra/e_chacha20poly1305.c +0 -326
- data/third_party/boringssl/crypto/cipher_extra/e_ssl3.c +0 -460
- data/third_party/boringssl/crypto/cipher_extra/e_tls.c +0 -680
- data/third_party/boringssl/crypto/cipher_extra/tls_cbc.c +0 -482
- data/third_party/boringssl/crypto/cmac/cmac.c +0 -241
- data/third_party/boringssl/crypto/conf/conf.c +0 -803
- data/third_party/boringssl/crypto/cpu-arm-linux.c +0 -363
- data/third_party/boringssl/crypto/cpu-intel.c +0 -288
- data/third_party/boringssl/crypto/crypto.c +0 -198
- data/third_party/boringssl/crypto/curve25519/spake25519.c +0 -539
- data/third_party/boringssl/crypto/dh/check.c +0 -217
- data/third_party/boringssl/crypto/dh/dh.c +0 -519
- data/third_party/boringssl/crypto/dsa/dsa.c +0 -946
- data/third_party/boringssl/crypto/ec_extra/ec_asn1.c +0 -562
- data/third_party/boringssl/crypto/ecdh/ecdh.c +0 -162
- data/third_party/boringssl/crypto/ecdsa_extra/ecdsa_asn1.c +0 -275
- data/third_party/boringssl/crypto/engine/engine.c +0 -98
- data/third_party/boringssl/crypto/err/err.c +0 -847
- data/third_party/boringssl/crypto/err/internal.h +0 -58
- data/third_party/boringssl/crypto/evp/evp.c +0 -362
- data/third_party/boringssl/crypto/evp/evp_asn1.c +0 -337
- data/third_party/boringssl/crypto/evp/evp_ctx.c +0 -446
- data/third_party/boringssl/crypto/evp/internal.h +0 -252
- data/third_party/boringssl/crypto/evp/p_dsa_asn1.c +0 -268
- data/third_party/boringssl/crypto/evp/p_ec.c +0 -239
- data/third_party/boringssl/crypto/evp/p_ec_asn1.c +0 -256
- data/third_party/boringssl/crypto/evp/p_ed25519.c +0 -71
- data/third_party/boringssl/crypto/evp/p_ed25519_asn1.c +0 -190
- data/third_party/boringssl/crypto/evp/p_rsa.c +0 -634
- data/third_party/boringssl/crypto/evp/p_rsa_asn1.c +0 -189
- data/third_party/boringssl/crypto/evp/scrypt.c +0 -209
- data/third_party/boringssl/crypto/fipsmodule/aes/aes.c +0 -1100
- data/third_party/boringssl/crypto/fipsmodule/aes/internal.h +0 -100
- data/third_party/boringssl/crypto/fipsmodule/aes/key_wrap.c +0 -138
- data/third_party/boringssl/crypto/fipsmodule/aes/mode_wrappers.c +0 -112
- data/third_party/boringssl/crypto/fipsmodule/bcm.c +0 -148
- data/third_party/boringssl/crypto/fipsmodule/bn/bn.c +0 -428
- data/third_party/boringssl/crypto/fipsmodule/bn/cmp.c +0 -200
- data/third_party/boringssl/crypto/fipsmodule/bn/ctx.c +0 -303
- data/third_party/boringssl/crypto/fipsmodule/bn/div.c +0 -895
- data/third_party/boringssl/crypto/fipsmodule/bn/exponentiation.c +0 -1356
- data/third_party/boringssl/crypto/fipsmodule/bn/gcd.c +0 -683
- data/third_party/boringssl/crypto/fipsmodule/bn/internal.h +0 -573
- data/third_party/boringssl/crypto/fipsmodule/bn/montgomery.c +0 -526
- data/third_party/boringssl/crypto/fipsmodule/bn/montgomery_inv.c +0 -185
- data/third_party/boringssl/crypto/fipsmodule/bn/mul.c +0 -876
- data/third_party/boringssl/crypto/fipsmodule/bn/prime.c +0 -1154
- data/third_party/boringssl/crypto/fipsmodule/bn/random.c +0 -351
- data/third_party/boringssl/crypto/fipsmodule/bn/rsaz_exp.c +0 -231
- data/third_party/boringssl/crypto/fipsmodule/bn/rsaz_exp.h +0 -33
- data/third_party/boringssl/crypto/fipsmodule/bn/shift.c +0 -364
- data/third_party/boringssl/crypto/fipsmodule/cipher/cipher.c +0 -615
- data/third_party/boringssl/crypto/fipsmodule/cipher/e_aes.c +0 -1437
- data/third_party/boringssl/crypto/fipsmodule/cipher/e_des.c +0 -233
- data/third_party/boringssl/crypto/fipsmodule/cipher/internal.h +0 -129
- data/third_party/boringssl/crypto/fipsmodule/delocate.h +0 -88
- data/third_party/boringssl/crypto/fipsmodule/digest/digest.c +0 -256
- data/third_party/boringssl/crypto/fipsmodule/digest/digests.c +0 -280
- data/third_party/boringssl/crypto/fipsmodule/digest/md32_common.h +0 -268
- data/third_party/boringssl/crypto/fipsmodule/ec/ec.c +0 -974
- data/third_party/boringssl/crypto/fipsmodule/ec/ec_key.c +0 -453
- data/third_party/boringssl/crypto/fipsmodule/ec/ec_montgomery.c +0 -270
- data/third_party/boringssl/crypto/fipsmodule/ec/internal.h +0 -337
- data/third_party/boringssl/crypto/fipsmodule/ec/oct.c +0 -373
- data/third_party/boringssl/crypto/fipsmodule/ec/p224-64.c +0 -1104
- data/third_party/boringssl/crypto/fipsmodule/ec/p256-x86_64-table.h +0 -9503
- data/third_party/boringssl/crypto/fipsmodule/ec/p256-x86_64.c +0 -447
- data/third_party/boringssl/crypto/fipsmodule/ec/p256-x86_64.h +0 -117
- data/third_party/boringssl/crypto/fipsmodule/ec/simple.c +0 -1046
- data/third_party/boringssl/crypto/fipsmodule/ec/util.c +0 -104
- data/third_party/boringssl/crypto/fipsmodule/ec/wnaf.c +0 -354
- data/third_party/boringssl/crypto/fipsmodule/ecdsa/ecdsa.c +0 -458
- data/third_party/boringssl/crypto/fipsmodule/is_fips.c +0 -27
- data/third_party/boringssl/crypto/fipsmodule/md4/md4.c +0 -254
- data/third_party/boringssl/crypto/fipsmodule/md5/md5.c +0 -298
- data/third_party/boringssl/crypto/fipsmodule/modes/cbc.c +0 -211
- data/third_party/boringssl/crypto/fipsmodule/modes/ccm.c +0 -256
- data/third_party/boringssl/crypto/fipsmodule/modes/cfb.c +0 -234
- data/third_party/boringssl/crypto/fipsmodule/modes/ctr.c +0 -220
- data/third_party/boringssl/crypto/fipsmodule/modes/gcm.c +0 -1063
- data/third_party/boringssl/crypto/fipsmodule/modes/internal.h +0 -388
- data/third_party/boringssl/crypto/fipsmodule/modes/ofb.c +0 -95
- data/third_party/boringssl/crypto/fipsmodule/rand/ctrdrbg.c +0 -202
- data/third_party/boringssl/crypto/fipsmodule/rand/internal.h +0 -92
- data/third_party/boringssl/crypto/fipsmodule/rand/rand.c +0 -358
- data/third_party/boringssl/crypto/fipsmodule/rand/urandom.c +0 -302
- data/third_party/boringssl/crypto/fipsmodule/rsa/blinding.c +0 -239
- data/third_party/boringssl/crypto/fipsmodule/rsa/internal.h +0 -126
- data/third_party/boringssl/crypto/fipsmodule/rsa/padding.c +0 -692
- data/third_party/boringssl/crypto/fipsmodule/rsa/rsa.c +0 -875
- data/third_party/boringssl/crypto/fipsmodule/rsa/rsa_impl.c +0 -1218
- data/third_party/boringssl/crypto/fipsmodule/self_check/self_check.c +0 -581
- data/third_party/boringssl/crypto/fipsmodule/sha/sha1.c +0 -375
- data/third_party/boringssl/crypto/fipsmodule/sha/sha256.c +0 -337
- data/third_party/boringssl/crypto/fipsmodule/sha/sha512.c +0 -608
- data/third_party/boringssl/crypto/internal.h +0 -739
- data/third_party/boringssl/crypto/lhash/lhash.c +0 -336
- data/third_party/boringssl/crypto/mem.c +0 -235
- data/third_party/boringssl/crypto/obj/obj.c +0 -554
- data/third_party/boringssl/crypto/obj/obj_dat.h +0 -6244
- data/third_party/boringssl/crypto/pem/pem_all.c +0 -262
- data/third_party/boringssl/crypto/pem/pem_info.c +0 -379
- data/third_party/boringssl/crypto/pem/pem_lib.c +0 -776
- data/third_party/boringssl/crypto/pem/pem_oth.c +0 -88
- data/third_party/boringssl/crypto/pem/pem_pk8.c +0 -258
- data/third_party/boringssl/crypto/pem/pem_pkey.c +0 -227
- data/third_party/boringssl/crypto/pkcs7/pkcs7.c +0 -166
- data/third_party/boringssl/crypto/pkcs7/pkcs7_x509.c +0 -233
- data/third_party/boringssl/crypto/pkcs8/internal.h +0 -120
- data/third_party/boringssl/crypto/pkcs8/p5_pbev2.c +0 -307
- data/third_party/boringssl/crypto/pkcs8/pkcs8.c +0 -513
- data/third_party/boringssl/crypto/pkcs8/pkcs8_x509.c +0 -789
- data/third_party/boringssl/crypto/poly1305/poly1305.c +0 -318
- data/third_party/boringssl/crypto/poly1305/poly1305_arm.c +0 -304
- data/third_party/boringssl/crypto/poly1305/poly1305_vec.c +0 -839
- data/third_party/boringssl/crypto/pool/internal.h +0 -45
- data/third_party/boringssl/crypto/pool/pool.c +0 -200
- data/third_party/boringssl/crypto/rand_extra/deterministic.c +0 -48
- data/third_party/boringssl/crypto/rand_extra/fuchsia.c +0 -43
- data/third_party/boringssl/crypto/rand_extra/windows.c +0 -53
- data/third_party/boringssl/crypto/refcount_lock.c +0 -53
- data/third_party/boringssl/crypto/stack/stack.c +0 -380
- data/third_party/boringssl/crypto/thread_none.c +0 -59
- data/third_party/boringssl/crypto/thread_pthread.c +0 -206
- data/third_party/boringssl/crypto/thread_win.c +0 -237
- data/third_party/boringssl/crypto/x509/a_strex.c +0 -633
- data/third_party/boringssl/crypto/x509/a_verify.c +0 -115
- data/third_party/boringssl/crypto/x509/asn1_gen.c +0 -841
- data/third_party/boringssl/crypto/x509/by_dir.c +0 -451
- data/third_party/boringssl/crypto/x509/by_file.c +0 -274
- data/third_party/boringssl/crypto/x509/t_crl.c +0 -128
- data/third_party/boringssl/crypto/x509/t_req.c +0 -246
- data/third_party/boringssl/crypto/x509/t_x509.c +0 -547
- data/third_party/boringssl/crypto/x509/x509_cmp.c +0 -477
- data/third_party/boringssl/crypto/x509/x509_def.c +0 -103
- data/third_party/boringssl/crypto/x509/x509_lu.c +0 -725
- data/third_party/boringssl/crypto/x509/x509_obj.c +0 -198
- data/third_party/boringssl/crypto/x509/x509_r2x.c +0 -117
- data/third_party/boringssl/crypto/x509/x509_req.c +0 -322
- data/third_party/boringssl/crypto/x509/x509_set.c +0 -164
- data/third_party/boringssl/crypto/x509/x509_trs.c +0 -326
- data/third_party/boringssl/crypto/x509/x509_txt.c +0 -205
- data/third_party/boringssl/crypto/x509/x509_vfy.c +0 -2476
- data/third_party/boringssl/crypto/x509/x509_vpm.c +0 -670
- data/third_party/boringssl/crypto/x509/x509cset.c +0 -170
- data/third_party/boringssl/crypto/x509/x509name.c +0 -389
- data/third_party/boringssl/crypto/x509/x_all.c +0 -501
- data/third_party/boringssl/crypto/x509/x_x509.c +0 -328
- data/third_party/boringssl/crypto/x509v3/ext_dat.h +0 -143
- data/third_party/boringssl/crypto/x509v3/pcy_cache.c +0 -284
- data/third_party/boringssl/crypto/x509v3/pcy_node.c +0 -188
- data/third_party/boringssl/crypto/x509v3/pcy_tree.c +0 -840
- data/third_party/boringssl/crypto/x509v3/v3_akey.c +0 -204
- data/third_party/boringssl/crypto/x509v3/v3_alt.c +0 -623
- data/third_party/boringssl/crypto/x509v3/v3_conf.c +0 -462
- data/third_party/boringssl/crypto/x509v3/v3_cpols.c +0 -502
- data/third_party/boringssl/crypto/x509v3/v3_enum.c +0 -100
- data/third_party/boringssl/crypto/x509v3/v3_genn.c +0 -251
- data/third_party/boringssl/crypto/x509v3/v3_info.c +0 -219
- data/third_party/boringssl/crypto/x509v3/v3_lib.c +0 -370
- data/third_party/boringssl/crypto/x509v3/v3_pci.c +0 -287
- data/third_party/boringssl/crypto/x509v3/v3_purp.c +0 -866
- data/third_party/boringssl/crypto/x509v3/v3_skey.c +0 -152
- data/third_party/boringssl/crypto/x509v3/v3_utl.c +0 -1352
- data/third_party/boringssl/include/openssl/aead.h +0 -433
- data/third_party/boringssl/include/openssl/aes.h +0 -170
- data/third_party/boringssl/include/openssl/asn1.h +0 -981
- data/third_party/boringssl/include/openssl/base.h +0 -457
- data/third_party/boringssl/include/openssl/base64.h +0 -187
- data/third_party/boringssl/include/openssl/bio.h +0 -902
- data/third_party/boringssl/include/openssl/blowfish.h +0 -93
- data/third_party/boringssl/include/openssl/bn.h +0 -1019
- data/third_party/boringssl/include/openssl/buf.h +0 -137
- data/third_party/boringssl/include/openssl/bytestring.h +0 -505
- data/third_party/boringssl/include/openssl/cast.h +0 -96
- data/third_party/boringssl/include/openssl/cipher.h +0 -608
- data/third_party/boringssl/include/openssl/cmac.h +0 -87
- data/third_party/boringssl/include/openssl/conf.h +0 -183
- data/third_party/boringssl/include/openssl/cpu.h +0 -196
- data/third_party/boringssl/include/openssl/crypto.h +0 -122
- data/third_party/boringssl/include/openssl/curve25519.h +0 -201
- data/third_party/boringssl/include/openssl/dh.h +0 -298
- data/third_party/boringssl/include/openssl/digest.h +0 -316
- data/third_party/boringssl/include/openssl/dsa.h +0 -435
- data/third_party/boringssl/include/openssl/ec.h +0 -413
- data/third_party/boringssl/include/openssl/ec_key.h +0 -342
- data/third_party/boringssl/include/openssl/ecdh.h +0 -101
- data/third_party/boringssl/include/openssl/ecdsa.h +0 -199
- data/third_party/boringssl/include/openssl/engine.h +0 -109
- data/third_party/boringssl/include/openssl/err.h +0 -458
- data/third_party/boringssl/include/openssl/evp.h +0 -873
- data/third_party/boringssl/include/openssl/hmac.h +0 -186
- data/third_party/boringssl/include/openssl/lhash.h +0 -174
- data/third_party/boringssl/include/openssl/lhash_macros.h +0 -174
- data/third_party/boringssl/include/openssl/md4.h +0 -106
- data/third_party/boringssl/include/openssl/md5.h +0 -107
- data/third_party/boringssl/include/openssl/mem.h +0 -156
- data/third_party/boringssl/include/openssl/nid.h +0 -4242
- data/third_party/boringssl/include/openssl/obj.h +0 -233
- data/third_party/boringssl/include/openssl/pem.h +0 -397
- data/third_party/boringssl/include/openssl/pkcs7.h +0 -82
- data/third_party/boringssl/include/openssl/pkcs8.h +0 -230
- data/third_party/boringssl/include/openssl/poly1305.h +0 -51
- data/third_party/boringssl/include/openssl/pool.h +0 -91
- data/third_party/boringssl/include/openssl/rand.h +0 -125
- data/third_party/boringssl/include/openssl/ripemd.h +0 -107
- data/third_party/boringssl/include/openssl/rsa.h +0 -756
- data/third_party/boringssl/include/openssl/sha.h +0 -256
- data/third_party/boringssl/include/openssl/span.h +0 -191
- data/third_party/boringssl/include/openssl/ssl.h +0 -4740
- data/third_party/boringssl/include/openssl/ssl3.h +0 -332
- data/third_party/boringssl/include/openssl/stack.h +0 -485
- data/third_party/boringssl/include/openssl/thread.h +0 -191
- data/third_party/boringssl/include/openssl/tls1.h +0 -618
- data/third_party/boringssl/include/openssl/type_check.h +0 -91
- data/third_party/boringssl/include/openssl/x509.h +0 -1180
- data/third_party/boringssl/include/openssl/x509_vfy.h +0 -614
- data/third_party/boringssl/include/openssl/x509v3.h +0 -827
- data/third_party/boringssl/ssl/custom_extensions.cc +0 -265
- data/third_party/boringssl/ssl/d1_both.cc +0 -851
- data/third_party/boringssl/ssl/d1_lib.cc +0 -267
- data/third_party/boringssl/ssl/d1_pkt.cc +0 -274
- data/third_party/boringssl/ssl/d1_srtp.cc +0 -232
- data/third_party/boringssl/ssl/dtls_method.cc +0 -193
- data/third_party/boringssl/ssl/dtls_record.cc +0 -353
- data/third_party/boringssl/ssl/handoff.cc +0 -285
- data/third_party/boringssl/ssl/handshake.cc +0 -630
- data/third_party/boringssl/ssl/handshake_client.cc +0 -1842
- data/third_party/boringssl/ssl/handshake_server.cc +0 -1674
- data/third_party/boringssl/ssl/internal.h +0 -3064
- data/third_party/boringssl/ssl/s3_both.cc +0 -585
- data/third_party/boringssl/ssl/s3_lib.cc +0 -226
- data/third_party/boringssl/ssl/s3_pkt.cc +0 -425
- data/third_party/boringssl/ssl/ssl_aead_ctx.cc +0 -412
- data/third_party/boringssl/ssl/ssl_asn1.cc +0 -844
- data/third_party/boringssl/ssl/ssl_buffer.cc +0 -286
- data/third_party/boringssl/ssl/ssl_cert.cc +0 -913
- data/third_party/boringssl/ssl/ssl_cipher.cc +0 -1781
- data/third_party/boringssl/ssl/ssl_file.cc +0 -583
- data/third_party/boringssl/ssl/ssl_key_share.cc +0 -252
- data/third_party/boringssl/ssl/ssl_lib.cc +0 -2719
- data/third_party/boringssl/ssl/ssl_privkey.cc +0 -494
- data/third_party/boringssl/ssl/ssl_session.cc +0 -1221
- data/third_party/boringssl/ssl/ssl_stat.cc +0 -224
- data/third_party/boringssl/ssl/ssl_transcript.cc +0 -398
- data/third_party/boringssl/ssl/ssl_versions.cc +0 -399
- data/third_party/boringssl/ssl/ssl_x509.cc +0 -1297
- data/third_party/boringssl/ssl/t1_enc.cc +0 -452
- data/third_party/boringssl/ssl/t1_lib.cc +0 -3783
- data/third_party/boringssl/ssl/tls13_both.cc +0 -559
- data/third_party/boringssl/ssl/tls13_client.cc +0 -891
- data/third_party/boringssl/ssl/tls13_enc.cc +0 -493
- data/third_party/boringssl/ssl/tls13_server.cc +0 -1022
- data/third_party/boringssl/ssl/tls_method.cc +0 -274
- data/third_party/boringssl/ssl/tls_record.cc +0 -703
- data/third_party/boringssl/third_party/fiat/curve25519.c +0 -3230
- data/third_party/boringssl/third_party/fiat/curve25519_tables.h +0 -7880
- data/third_party/boringssl/third_party/fiat/internal.h +0 -154
- data/third_party/boringssl/third_party/fiat/p256.c +0 -1824
- data/third_party/nanopb/pb.h +0 -579
- data/third_party/nanopb/pb_common.c +0 -97
- data/third_party/nanopb/pb_common.h +0 -42
- data/third_party/nanopb/pb_decode.c +0 -1347
- data/third_party/nanopb/pb_decode.h +0 -149
- data/third_party/nanopb/pb_encode.c +0 -696
- data/third_party/nanopb/pb_encode.h +0 -154
@@ -20,8 +20,6 @@
|
|
20
20
|
|
21
21
|
#include "src/core/lib/security/security_connector/security_connector.h"
|
22
22
|
|
23
|
-
#include <stdbool.h>
|
24
|
-
|
25
23
|
#include <grpc/slice_buffer.h>
|
26
24
|
#include <grpc/support/alloc.h>
|
27
25
|
#include <grpc/support/log.h>
|
@@ -30,231 +28,74 @@
|
|
30
28
|
#include "src/core/ext/transport/chttp2/alpn/alpn.h"
|
31
29
|
#include "src/core/lib/channel/channel_args.h"
|
32
30
|
#include "src/core/lib/channel/handshaker.h"
|
33
|
-
#include "src/core/lib/gpr/env.h"
|
34
|
-
#include "src/core/lib/gpr/host_port.h"
|
35
31
|
#include "src/core/lib/gpr/string.h"
|
32
|
+
#include "src/core/lib/gprpp/host_port.h"
|
36
33
|
#include "src/core/lib/iomgr/load_file.h"
|
37
34
|
#include "src/core/lib/security/context/security_context.h"
|
38
35
|
#include "src/core/lib/security/credentials/credentials.h"
|
39
|
-
#include "src/core/lib/security/credentials/fake/fake_credentials.h"
|
40
|
-
#include "src/core/lib/security/credentials/ssl/ssl_credentials.h"
|
41
36
|
#include "src/core/lib/security/security_connector/load_system_roots.h"
|
42
|
-
#include "src/core/lib/security/
|
37
|
+
#include "src/core/lib/security/security_connector/security_connector.h"
|
43
38
|
#include "src/core/lib/security/transport/security_handshaker.h"
|
44
|
-
#include "src/core/lib/security/transport/target_authority_table.h"
|
45
|
-
#include "src/core/tsi/fake_transport_security.h"
|
46
|
-
#include "src/core/tsi/ssl_transport_security.h"
|
47
39
|
|
48
40
|
grpc_core::DebugOnlyTraceFlag grpc_trace_security_connector_refcount(
|
49
41
|
false, "security_connector_refcount");
|
50
42
|
|
51
|
-
|
52
|
-
|
53
|
-
|
54
|
-
|
55
|
-
|
56
|
-
static const char* installed_roots_path =
|
57
|
-
INSTALL_PREFIX "/share/grpc/roots.pem";
|
58
|
-
#endif
|
59
|
-
|
60
|
-
/** Environment variable used as a flag to enable/disable loading system root
|
61
|
-
certificates from the OS trust store. */
|
62
|
-
#ifndef GRPC_USE_SYSTEM_SSL_ROOTS_ENV_VAR
|
63
|
-
#define GRPC_USE_SYSTEM_SSL_ROOTS_ENV_VAR "GRPC_USE_SYSTEM_SSL_ROOTS"
|
64
|
-
#endif
|
43
|
+
grpc_server_security_connector::grpc_server_security_connector(
|
44
|
+
const char* url_scheme,
|
45
|
+
grpc_core::RefCountedPtr<grpc_server_credentials> server_creds)
|
46
|
+
: grpc_security_connector(url_scheme),
|
47
|
+
server_creds_(std::move(server_creds)) {}
|
65
48
|
|
66
|
-
|
67
|
-
|
68
|
-
|
69
|
-
|
70
|
-
|
71
|
-
|
72
|
-
|
73
|
-
|
74
|
-
void grpc_set_ssl_roots_override_callback(grpc_ssl_roots_override_callback cb) {
|
75
|
-
ssl_roots_override_cb = cb;
|
76
|
-
}
|
77
|
-
|
78
|
-
/* -- Cipher suites. -- */
|
79
|
-
|
80
|
-
/* Defines the cipher suites that we accept by default. All these cipher suites
|
81
|
-
are compliant with HTTP2. */
|
82
|
-
#define GRPC_SSL_CIPHER_SUITES \
|
83
|
-
"ECDHE-ECDSA-AES128-GCM-SHA256:" \
|
84
|
-
"ECDHE-ECDSA-AES256-GCM-SHA384:" \
|
85
|
-
"ECDHE-RSA-AES128-GCM-SHA256:" \
|
86
|
-
"ECDHE-RSA-AES256-GCM-SHA384"
|
87
|
-
|
88
|
-
static gpr_once cipher_suites_once = GPR_ONCE_INIT;
|
89
|
-
static const char* cipher_suites = nullptr;
|
90
|
-
|
91
|
-
static void init_cipher_suites(void) {
|
92
|
-
char* overridden = gpr_getenv("GRPC_SSL_CIPHER_SUITES");
|
93
|
-
cipher_suites = overridden != nullptr ? overridden : GRPC_SSL_CIPHER_SUITES;
|
94
|
-
}
|
95
|
-
|
96
|
-
static const char* ssl_cipher_suites(void) {
|
97
|
-
gpr_once_init(&cipher_suites_once, init_cipher_suites);
|
98
|
-
return cipher_suites;
|
99
|
-
}
|
49
|
+
grpc_channel_security_connector::grpc_channel_security_connector(
|
50
|
+
const char* url_scheme,
|
51
|
+
grpc_core::RefCountedPtr<grpc_channel_credentials> channel_creds,
|
52
|
+
grpc_core::RefCountedPtr<grpc_call_credentials> request_metadata_creds)
|
53
|
+
: grpc_security_connector(url_scheme),
|
54
|
+
channel_creds_(std::move(channel_creds)),
|
55
|
+
request_metadata_creds_(std::move(request_metadata_creds)) {}
|
100
56
|
|
101
|
-
|
102
|
-
|
103
|
-
/* Returns the first property with that name. */
|
104
|
-
const tsi_peer_property* tsi_peer_get_property_by_name(const tsi_peer* peer,
|
105
|
-
const char* name) {
|
106
|
-
size_t i;
|
107
|
-
if (peer == nullptr) return nullptr;
|
108
|
-
for (i = 0; i < peer->property_count; i++) {
|
109
|
-
const tsi_peer_property* property = &peer->properties[i];
|
110
|
-
if (name == nullptr && property->name == nullptr) {
|
111
|
-
return property;
|
112
|
-
}
|
113
|
-
if (name != nullptr && property->name != nullptr &&
|
114
|
-
strcmp(property->name, name) == 0) {
|
115
|
-
return property;
|
116
|
-
}
|
117
|
-
}
|
118
|
-
return nullptr;
|
119
|
-
}
|
120
|
-
|
121
|
-
void grpc_channel_security_connector_add_handshakers(
|
122
|
-
grpc_channel_security_connector* connector,
|
123
|
-
grpc_handshake_manager* handshake_mgr) {
|
124
|
-
if (connector != nullptr) {
|
125
|
-
connector->add_handshakers(connector, handshake_mgr);
|
126
|
-
}
|
127
|
-
}
|
128
|
-
|
129
|
-
void grpc_server_security_connector_add_handshakers(
|
130
|
-
grpc_server_security_connector* connector,
|
131
|
-
grpc_handshake_manager* handshake_mgr) {
|
132
|
-
if (connector != nullptr) {
|
133
|
-
connector->add_handshakers(connector, handshake_mgr);
|
134
|
-
}
|
135
|
-
}
|
136
|
-
|
137
|
-
void grpc_security_connector_check_peer(grpc_security_connector* sc,
|
138
|
-
tsi_peer peer,
|
139
|
-
grpc_auth_context** auth_context,
|
140
|
-
grpc_closure* on_peer_checked) {
|
141
|
-
if (sc == nullptr) {
|
142
|
-
GRPC_CLOSURE_SCHED(on_peer_checked,
|
143
|
-
GRPC_ERROR_CREATE_FROM_STATIC_STRING(
|
144
|
-
"cannot check peer -- no security connector"));
|
145
|
-
tsi_peer_destruct(&peer);
|
146
|
-
} else {
|
147
|
-
sc->vtable->check_peer(sc, peer, auth_context, on_peer_checked);
|
148
|
-
}
|
149
|
-
}
|
57
|
+
grpc_channel_security_connector::~grpc_channel_security_connector() {}
|
150
58
|
|
151
|
-
int grpc_security_connector_cmp(grpc_security_connector* sc,
|
152
|
-
grpc_security_connector* other) {
|
59
|
+
int grpc_security_connector_cmp(const grpc_security_connector* sc,
|
60
|
+
const grpc_security_connector* other) {
|
153
61
|
if (sc == nullptr || other == nullptr) return GPR_ICMP(sc, other);
|
154
|
-
|
155
|
-
if (c != 0) return c;
|
156
|
-
return sc->vtable->cmp(sc, other);
|
157
|
-
}
|
158
|
-
|
159
|
-
int grpc_channel_security_connector_cmp(grpc_channel_security_connector* sc1,
|
160
|
-
grpc_channel_security_connector* sc2) {
|
161
|
-
GPR_ASSERT(sc1->channel_creds != nullptr);
|
162
|
-
GPR_ASSERT(sc2->channel_creds != nullptr);
|
163
|
-
int c = GPR_ICMP(sc1->channel_creds, sc2->channel_creds);
|
164
|
-
if (c != 0) return c;
|
165
|
-
c = GPR_ICMP(sc1->request_metadata_creds, sc2->request_metadata_creds);
|
166
|
-
if (c != 0) return c;
|
167
|
-
c = GPR_ICMP((void*)sc1->check_call_host, (void*)sc2->check_call_host);
|
168
|
-
if (c != 0) return c;
|
169
|
-
c = GPR_ICMP((void*)sc1->cancel_check_call_host,
|
170
|
-
(void*)sc2->cancel_check_call_host);
|
171
|
-
if (c != 0) return c;
|
172
|
-
return GPR_ICMP((void*)sc1->add_handshakers, (void*)sc2->add_handshakers);
|
62
|
+
return sc->cmp(other);
|
173
63
|
}
|
174
64
|
|
175
|
-
int
|
176
|
-
|
177
|
-
|
178
|
-
|
179
|
-
|
65
|
+
int grpc_channel_security_connector::channel_security_connector_cmp(
|
66
|
+
const grpc_channel_security_connector* other) const {
|
67
|
+
const grpc_channel_security_connector* other_sc =
|
68
|
+
static_cast<const grpc_channel_security_connector*>(other);
|
69
|
+
GPR_ASSERT(channel_creds() != nullptr);
|
70
|
+
GPR_ASSERT(other_sc->channel_creds() != nullptr);
|
71
|
+
int c = GPR_ICMP(channel_creds(), other_sc->channel_creds());
|
180
72
|
if (c != 0) return c;
|
181
|
-
return GPR_ICMP((
|
182
|
-
}
|
183
|
-
|
184
|
-
bool grpc_channel_security_connector_check_call_host(
|
185
|
-
grpc_channel_security_connector* sc, const char* host,
|
186
|
-
grpc_auth_context* auth_context, grpc_closure* on_call_host_checked,
|
187
|
-
grpc_error** error) {
|
188
|
-
if (sc == nullptr || sc->check_call_host == nullptr) {
|
189
|
-
*error = GRPC_ERROR_CREATE_FROM_STATIC_STRING(
|
190
|
-
"cannot check call host -- no security connector");
|
191
|
-
return true;
|
192
|
-
}
|
193
|
-
return sc->check_call_host(sc, host, auth_context, on_call_host_checked,
|
194
|
-
error);
|
195
|
-
}
|
196
|
-
|
197
|
-
void grpc_channel_security_connector_cancel_check_call_host(
|
198
|
-
grpc_channel_security_connector* sc, grpc_closure* on_call_host_checked,
|
199
|
-
grpc_error* error) {
|
200
|
-
if (sc == nullptr || sc->cancel_check_call_host == nullptr) {
|
201
|
-
GRPC_ERROR_UNREF(error);
|
202
|
-
return;
|
203
|
-
}
|
204
|
-
sc->cancel_check_call_host(sc, on_call_host_checked, error);
|
205
|
-
}
|
206
|
-
|
207
|
-
#ifndef NDEBUG
|
208
|
-
grpc_security_connector* grpc_security_connector_ref(
|
209
|
-
grpc_security_connector* sc, const char* file, int line,
|
210
|
-
const char* reason) {
|
211
|
-
if (sc == nullptr) return nullptr;
|
212
|
-
if (grpc_trace_security_connector_refcount.enabled()) {
|
213
|
-
gpr_atm val = gpr_atm_no_barrier_load(&sc->refcount.count);
|
214
|
-
gpr_log(file, line, GPR_LOG_SEVERITY_DEBUG,
|
215
|
-
"SECURITY_CONNECTOR:%p ref %" PRIdPTR " -> %" PRIdPTR " %s", sc,
|
216
|
-
val, val + 1, reason);
|
217
|
-
}
|
218
|
-
#else
|
219
|
-
grpc_security_connector* grpc_security_connector_ref(
|
220
|
-
grpc_security_connector* sc) {
|
221
|
-
if (sc == nullptr) return nullptr;
|
222
|
-
#endif
|
223
|
-
gpr_ref(&sc->refcount);
|
224
|
-
return sc;
|
73
|
+
return GPR_ICMP(request_metadata_creds(), other_sc->request_metadata_creds());
|
225
74
|
}
|
226
75
|
|
227
|
-
|
228
|
-
|
229
|
-
|
230
|
-
|
231
|
-
|
232
|
-
|
233
|
-
|
234
|
-
gpr_log(file, line, GPR_LOG_SEVERITY_DEBUG,
|
235
|
-
"SECURITY_CONNECTOR:%p unref %" PRIdPTR " -> %" PRIdPTR " %s", sc,
|
236
|
-
val, val - 1, reason);
|
237
|
-
}
|
238
|
-
#else
|
239
|
-
void grpc_security_connector_unref(grpc_security_connector* sc) {
|
240
|
-
if (sc == nullptr) return;
|
241
|
-
#endif
|
242
|
-
if (gpr_unref(&sc->refcount)) sc->vtable->destroy(sc);
|
76
|
+
int grpc_server_security_connector::server_security_connector_cmp(
|
77
|
+
const grpc_server_security_connector* other) const {
|
78
|
+
const grpc_server_security_connector* other_sc =
|
79
|
+
static_cast<const grpc_server_security_connector*>(other);
|
80
|
+
GPR_ASSERT(server_creds() != nullptr);
|
81
|
+
GPR_ASSERT(other_sc->server_creds() != nullptr);
|
82
|
+
return GPR_ICMP(server_creds(), other_sc->server_creds());
|
243
83
|
}
|
244
84
|
|
245
85
|
static void connector_arg_destroy(void* p) {
|
246
|
-
|
247
|
-
|
86
|
+
static_cast<grpc_security_connector*>(p)->Unref(DEBUG_LOCATION,
|
87
|
+
"connector_arg_destroy");
|
248
88
|
}
|
249
89
|
|
250
90
|
static void* connector_arg_copy(void* p) {
|
251
|
-
return
|
252
|
-
|
91
|
+
return static_cast<grpc_security_connector*>(p)
|
92
|
+
->Ref(DEBUG_LOCATION, "connector_arg_copy")
|
93
|
+
.release();
|
253
94
|
}
|
254
95
|
|
255
96
|
static int connector_cmp(void* a, void* b) {
|
256
|
-
return
|
257
|
-
|
97
|
+
return static_cast<grpc_security_connector*>(a)->cmp(
|
98
|
+
static_cast<grpc_security_connector*>(b));
|
258
99
|
}
|
259
100
|
|
260
101
|
static const grpc_arg_pointer_vtable connector_arg_vtable = {
|
@@ -286,962 +127,3 @@ grpc_security_connector* grpc_security_connector_find_in_args(
|
|
286
127
|
}
|
287
128
|
return nullptr;
|
288
129
|
}
|
289
|
-
|
290
|
-
static tsi_client_certificate_request_type
|
291
|
-
get_tsi_client_certificate_request_type(
|
292
|
-
grpc_ssl_client_certificate_request_type grpc_request_type) {
|
293
|
-
switch (grpc_request_type) {
|
294
|
-
case GRPC_SSL_DONT_REQUEST_CLIENT_CERTIFICATE:
|
295
|
-
return TSI_DONT_REQUEST_CLIENT_CERTIFICATE;
|
296
|
-
|
297
|
-
case GRPC_SSL_REQUEST_CLIENT_CERTIFICATE_BUT_DONT_VERIFY:
|
298
|
-
return TSI_REQUEST_CLIENT_CERTIFICATE_BUT_DONT_VERIFY;
|
299
|
-
|
300
|
-
case GRPC_SSL_REQUEST_CLIENT_CERTIFICATE_AND_VERIFY:
|
301
|
-
return TSI_REQUEST_CLIENT_CERTIFICATE_AND_VERIFY;
|
302
|
-
|
303
|
-
case GRPC_SSL_REQUEST_AND_REQUIRE_CLIENT_CERTIFICATE_BUT_DONT_VERIFY:
|
304
|
-
return TSI_REQUEST_AND_REQUIRE_CLIENT_CERTIFICATE_BUT_DONT_VERIFY;
|
305
|
-
|
306
|
-
case GRPC_SSL_REQUEST_AND_REQUIRE_CLIENT_CERTIFICATE_AND_VERIFY:
|
307
|
-
return TSI_REQUEST_AND_REQUIRE_CLIENT_CERTIFICATE_AND_VERIFY;
|
308
|
-
|
309
|
-
default:
|
310
|
-
return TSI_DONT_REQUEST_CLIENT_CERTIFICATE;
|
311
|
-
}
|
312
|
-
}
|
313
|
-
|
314
|
-
/* -- Fake implementation. -- */
|
315
|
-
|
316
|
-
typedef struct {
|
317
|
-
grpc_channel_security_connector base;
|
318
|
-
char* target;
|
319
|
-
char* expected_targets;
|
320
|
-
bool is_lb_channel;
|
321
|
-
char* target_name_override;
|
322
|
-
} grpc_fake_channel_security_connector;
|
323
|
-
|
324
|
-
static void fake_channel_destroy(grpc_security_connector* sc) {
|
325
|
-
grpc_fake_channel_security_connector* c =
|
326
|
-
reinterpret_cast<grpc_fake_channel_security_connector*>(sc);
|
327
|
-
grpc_call_credentials_unref(c->base.request_metadata_creds);
|
328
|
-
gpr_free(c->target);
|
329
|
-
gpr_free(c->expected_targets);
|
330
|
-
gpr_free(c->target_name_override);
|
331
|
-
gpr_free(c);
|
332
|
-
}
|
333
|
-
|
334
|
-
static void fake_server_destroy(grpc_security_connector* sc) { gpr_free(sc); }
|
335
|
-
|
336
|
-
static bool fake_check_target(const char* target_type, const char* target,
|
337
|
-
const char* set_str) {
|
338
|
-
GPR_ASSERT(target_type != nullptr);
|
339
|
-
GPR_ASSERT(target != nullptr);
|
340
|
-
char** set = nullptr;
|
341
|
-
size_t set_size = 0;
|
342
|
-
gpr_string_split(set_str, ",", &set, &set_size);
|
343
|
-
bool found = false;
|
344
|
-
for (size_t i = 0; i < set_size; ++i) {
|
345
|
-
if (set[i] != nullptr && strcmp(target, set[i]) == 0) found = true;
|
346
|
-
}
|
347
|
-
for (size_t i = 0; i < set_size; ++i) {
|
348
|
-
gpr_free(set[i]);
|
349
|
-
}
|
350
|
-
gpr_free(set);
|
351
|
-
return found;
|
352
|
-
}
|
353
|
-
|
354
|
-
static void fake_secure_name_check(const char* target,
|
355
|
-
const char* expected_targets,
|
356
|
-
bool is_lb_channel) {
|
357
|
-
if (expected_targets == nullptr) return;
|
358
|
-
char** lbs_and_backends = nullptr;
|
359
|
-
size_t lbs_and_backends_size = 0;
|
360
|
-
bool success = false;
|
361
|
-
gpr_string_split(expected_targets, ";", &lbs_and_backends,
|
362
|
-
&lbs_and_backends_size);
|
363
|
-
if (lbs_and_backends_size > 2 || lbs_and_backends_size == 0) {
|
364
|
-
gpr_log(GPR_ERROR, "Invalid expected targets arg value: '%s'",
|
365
|
-
expected_targets);
|
366
|
-
goto done;
|
367
|
-
}
|
368
|
-
if (is_lb_channel) {
|
369
|
-
if (lbs_and_backends_size != 2) {
|
370
|
-
gpr_log(GPR_ERROR,
|
371
|
-
"Invalid expected targets arg value: '%s'. Expectations for LB "
|
372
|
-
"channels must be of the form 'be1,be2,be3,...;lb1,lb2,...",
|
373
|
-
expected_targets);
|
374
|
-
goto done;
|
375
|
-
}
|
376
|
-
if (!fake_check_target("LB", target, lbs_and_backends[1])) {
|
377
|
-
gpr_log(GPR_ERROR, "LB target '%s' not found in expected set '%s'",
|
378
|
-
target, lbs_and_backends[1]);
|
379
|
-
goto done;
|
380
|
-
}
|
381
|
-
success = true;
|
382
|
-
} else {
|
383
|
-
if (!fake_check_target("Backend", target, lbs_and_backends[0])) {
|
384
|
-
gpr_log(GPR_ERROR, "Backend target '%s' not found in expected set '%s'",
|
385
|
-
target, lbs_and_backends[0]);
|
386
|
-
goto done;
|
387
|
-
}
|
388
|
-
success = true;
|
389
|
-
}
|
390
|
-
done:
|
391
|
-
for (size_t i = 0; i < lbs_and_backends_size; ++i) {
|
392
|
-
gpr_free(lbs_and_backends[i]);
|
393
|
-
}
|
394
|
-
gpr_free(lbs_and_backends);
|
395
|
-
if (!success) abort();
|
396
|
-
}
|
397
|
-
|
398
|
-
static void fake_check_peer(grpc_security_connector* sc, tsi_peer peer,
|
399
|
-
grpc_auth_context** auth_context,
|
400
|
-
grpc_closure* on_peer_checked) {
|
401
|
-
const char* prop_name;
|
402
|
-
grpc_error* error = GRPC_ERROR_NONE;
|
403
|
-
*auth_context = nullptr;
|
404
|
-
if (peer.property_count != 1) {
|
405
|
-
error = GRPC_ERROR_CREATE_FROM_STATIC_STRING(
|
406
|
-
"Fake peers should only have 1 property.");
|
407
|
-
goto end;
|
408
|
-
}
|
409
|
-
prop_name = peer.properties[0].name;
|
410
|
-
if (prop_name == nullptr ||
|
411
|
-
strcmp(prop_name, TSI_CERTIFICATE_TYPE_PEER_PROPERTY)) {
|
412
|
-
char* msg;
|
413
|
-
gpr_asprintf(&msg, "Unexpected property in fake peer: %s.",
|
414
|
-
prop_name == nullptr ? "<EMPTY>" : prop_name);
|
415
|
-
error = GRPC_ERROR_CREATE_FROM_COPIED_STRING(msg);
|
416
|
-
gpr_free(msg);
|
417
|
-
goto end;
|
418
|
-
}
|
419
|
-
if (strncmp(peer.properties[0].value.data, TSI_FAKE_CERTIFICATE_TYPE,
|
420
|
-
peer.properties[0].value.length)) {
|
421
|
-
error = GRPC_ERROR_CREATE_FROM_STATIC_STRING(
|
422
|
-
"Invalid value for cert type property.");
|
423
|
-
goto end;
|
424
|
-
}
|
425
|
-
*auth_context = grpc_auth_context_create(nullptr);
|
426
|
-
grpc_auth_context_add_cstring_property(
|
427
|
-
*auth_context, GRPC_TRANSPORT_SECURITY_TYPE_PROPERTY_NAME,
|
428
|
-
GRPC_FAKE_TRANSPORT_SECURITY_TYPE);
|
429
|
-
end:
|
430
|
-
GRPC_CLOSURE_SCHED(on_peer_checked, error);
|
431
|
-
tsi_peer_destruct(&peer);
|
432
|
-
}
|
433
|
-
|
434
|
-
static void fake_channel_check_peer(grpc_security_connector* sc, tsi_peer peer,
|
435
|
-
grpc_auth_context** auth_context,
|
436
|
-
grpc_closure* on_peer_checked) {
|
437
|
-
fake_check_peer(sc, peer, auth_context, on_peer_checked);
|
438
|
-
grpc_fake_channel_security_connector* c =
|
439
|
-
reinterpret_cast<grpc_fake_channel_security_connector*>(sc);
|
440
|
-
fake_secure_name_check(c->target, c->expected_targets, c->is_lb_channel);
|
441
|
-
}
|
442
|
-
|
443
|
-
static void fake_server_check_peer(grpc_security_connector* sc, tsi_peer peer,
|
444
|
-
grpc_auth_context** auth_context,
|
445
|
-
grpc_closure* on_peer_checked) {
|
446
|
-
fake_check_peer(sc, peer, auth_context, on_peer_checked);
|
447
|
-
}
|
448
|
-
|
449
|
-
static int fake_channel_cmp(grpc_security_connector* sc1,
|
450
|
-
grpc_security_connector* sc2) {
|
451
|
-
grpc_fake_channel_security_connector* c1 =
|
452
|
-
reinterpret_cast<grpc_fake_channel_security_connector*>(sc1);
|
453
|
-
grpc_fake_channel_security_connector* c2 =
|
454
|
-
reinterpret_cast<grpc_fake_channel_security_connector*>(sc2);
|
455
|
-
int c = grpc_channel_security_connector_cmp(&c1->base, &c2->base);
|
456
|
-
if (c != 0) return c;
|
457
|
-
c = strcmp(c1->target, c2->target);
|
458
|
-
if (c != 0) return c;
|
459
|
-
if (c1->expected_targets == nullptr || c2->expected_targets == nullptr) {
|
460
|
-
c = GPR_ICMP(c1->expected_targets, c2->expected_targets);
|
461
|
-
} else {
|
462
|
-
c = strcmp(c1->expected_targets, c2->expected_targets);
|
463
|
-
}
|
464
|
-
if (c != 0) return c;
|
465
|
-
return GPR_ICMP(c1->is_lb_channel, c2->is_lb_channel);
|
466
|
-
}
|
467
|
-
|
468
|
-
static int fake_server_cmp(grpc_security_connector* sc1,
|
469
|
-
grpc_security_connector* sc2) {
|
470
|
-
return grpc_server_security_connector_cmp(
|
471
|
-
reinterpret_cast<grpc_server_security_connector*>(sc1),
|
472
|
-
reinterpret_cast<grpc_server_security_connector*>(sc2));
|
473
|
-
}
|
474
|
-
|
475
|
-
static bool fake_channel_check_call_host(grpc_channel_security_connector* sc,
|
476
|
-
const char* host,
|
477
|
-
grpc_auth_context* auth_context,
|
478
|
-
grpc_closure* on_call_host_checked,
|
479
|
-
grpc_error** error) {
|
480
|
-
grpc_fake_channel_security_connector* c =
|
481
|
-
reinterpret_cast<grpc_fake_channel_security_connector*>(sc);
|
482
|
-
char* authority_hostname = nullptr;
|
483
|
-
char* authority_ignored_port = nullptr;
|
484
|
-
char* target_hostname = nullptr;
|
485
|
-
char* target_ignored_port = nullptr;
|
486
|
-
gpr_split_host_port(host, &authority_hostname, &authority_ignored_port);
|
487
|
-
gpr_split_host_port(c->target, &target_hostname, &target_ignored_port);
|
488
|
-
if (c->target_name_override != nullptr) {
|
489
|
-
char* fake_security_target_name_override_hostname = nullptr;
|
490
|
-
char* fake_security_target_name_override_ignored_port = nullptr;
|
491
|
-
gpr_split_host_port(c->target_name_override,
|
492
|
-
&fake_security_target_name_override_hostname,
|
493
|
-
&fake_security_target_name_override_ignored_port);
|
494
|
-
if (strcmp(authority_hostname,
|
495
|
-
fake_security_target_name_override_hostname) != 0) {
|
496
|
-
gpr_log(GPR_ERROR,
|
497
|
-
"Authority (host) '%s' != Fake Security Target override '%s'",
|
498
|
-
host, fake_security_target_name_override_hostname);
|
499
|
-
abort();
|
500
|
-
}
|
501
|
-
gpr_free(fake_security_target_name_override_hostname);
|
502
|
-
gpr_free(fake_security_target_name_override_ignored_port);
|
503
|
-
} else if (strcmp(authority_hostname, target_hostname) != 0) {
|
504
|
-
gpr_log(GPR_ERROR, "Authority (host) '%s' != Target '%s'",
|
505
|
-
authority_hostname, target_hostname);
|
506
|
-
abort();
|
507
|
-
}
|
508
|
-
gpr_free(authority_hostname);
|
509
|
-
gpr_free(authority_ignored_port);
|
510
|
-
gpr_free(target_hostname);
|
511
|
-
gpr_free(target_ignored_port);
|
512
|
-
return true;
|
513
|
-
}
|
514
|
-
|
515
|
-
static void fake_channel_cancel_check_call_host(
|
516
|
-
grpc_channel_security_connector* sc, grpc_closure* on_call_host_checked,
|
517
|
-
grpc_error* error) {
|
518
|
-
GRPC_ERROR_UNREF(error);
|
519
|
-
}
|
520
|
-
|
521
|
-
static void fake_channel_add_handshakers(
|
522
|
-
grpc_channel_security_connector* sc,
|
523
|
-
grpc_handshake_manager* handshake_mgr) {
|
524
|
-
grpc_handshake_manager_add(
|
525
|
-
handshake_mgr,
|
526
|
-
grpc_security_handshaker_create(
|
527
|
-
tsi_create_fake_handshaker(true /* is_client */), &sc->base));
|
528
|
-
}
|
529
|
-
|
530
|
-
static void fake_server_add_handshakers(grpc_server_security_connector* sc,
|
531
|
-
grpc_handshake_manager* handshake_mgr) {
|
532
|
-
grpc_handshake_manager_add(
|
533
|
-
handshake_mgr,
|
534
|
-
grpc_security_handshaker_create(
|
535
|
-
tsi_create_fake_handshaker(false /* is_client */), &sc->base));
|
536
|
-
}
|
537
|
-
|
538
|
-
static grpc_security_connector_vtable fake_channel_vtable = {
|
539
|
-
fake_channel_destroy, fake_channel_check_peer, fake_channel_cmp};
|
540
|
-
|
541
|
-
static grpc_security_connector_vtable fake_server_vtable = {
|
542
|
-
fake_server_destroy, fake_server_check_peer, fake_server_cmp};
|
543
|
-
|
544
|
-
grpc_channel_security_connector* grpc_fake_channel_security_connector_create(
|
545
|
-
grpc_channel_credentials* channel_creds,
|
546
|
-
grpc_call_credentials* request_metadata_creds, const char* target,
|
547
|
-
const grpc_channel_args* args) {
|
548
|
-
grpc_fake_channel_security_connector* c =
|
549
|
-
static_cast<grpc_fake_channel_security_connector*>(
|
550
|
-
gpr_zalloc(sizeof(*c)));
|
551
|
-
gpr_ref_init(&c->base.base.refcount, 1);
|
552
|
-
c->base.base.url_scheme = GRPC_FAKE_SECURITY_URL_SCHEME;
|
553
|
-
c->base.base.vtable = &fake_channel_vtable;
|
554
|
-
c->base.channel_creds = channel_creds;
|
555
|
-
c->base.request_metadata_creds =
|
556
|
-
grpc_call_credentials_ref(request_metadata_creds);
|
557
|
-
c->base.check_call_host = fake_channel_check_call_host;
|
558
|
-
c->base.cancel_check_call_host = fake_channel_cancel_check_call_host;
|
559
|
-
c->base.add_handshakers = fake_channel_add_handshakers;
|
560
|
-
c->target = gpr_strdup(target);
|
561
|
-
const char* expected_targets = grpc_fake_transport_get_expected_targets(args);
|
562
|
-
c->expected_targets = gpr_strdup(expected_targets);
|
563
|
-
c->is_lb_channel = grpc_core::FindTargetAuthorityTableInArgs(args) != nullptr;
|
564
|
-
const grpc_arg* target_name_override_arg =
|
565
|
-
grpc_channel_args_find(args, GRPC_SSL_TARGET_NAME_OVERRIDE_ARG);
|
566
|
-
if (target_name_override_arg != nullptr) {
|
567
|
-
c->target_name_override =
|
568
|
-
gpr_strdup(grpc_channel_arg_get_string(target_name_override_arg));
|
569
|
-
}
|
570
|
-
return &c->base;
|
571
|
-
}
|
572
|
-
|
573
|
-
grpc_server_security_connector* grpc_fake_server_security_connector_create(
|
574
|
-
grpc_server_credentials* server_creds) {
|
575
|
-
grpc_server_security_connector* c =
|
576
|
-
static_cast<grpc_server_security_connector*>(
|
577
|
-
gpr_zalloc(sizeof(grpc_server_security_connector)));
|
578
|
-
gpr_ref_init(&c->base.refcount, 1);
|
579
|
-
c->base.vtable = &fake_server_vtable;
|
580
|
-
c->base.url_scheme = GRPC_FAKE_SECURITY_URL_SCHEME;
|
581
|
-
c->server_creds = server_creds;
|
582
|
-
c->add_handshakers = fake_server_add_handshakers;
|
583
|
-
return c;
|
584
|
-
}
|
585
|
-
|
586
|
-
/* --- Ssl implementation. --- */
|
587
|
-
|
588
|
-
grpc_ssl_session_cache* grpc_ssl_session_cache_create_lru(size_t capacity) {
|
589
|
-
tsi_ssl_session_cache* cache = tsi_ssl_session_cache_create_lru(capacity);
|
590
|
-
return reinterpret_cast<grpc_ssl_session_cache*>(cache);
|
591
|
-
}
|
592
|
-
|
593
|
-
void grpc_ssl_session_cache_destroy(grpc_ssl_session_cache* cache) {
|
594
|
-
tsi_ssl_session_cache* tsi_cache =
|
595
|
-
reinterpret_cast<tsi_ssl_session_cache*>(cache);
|
596
|
-
tsi_ssl_session_cache_unref(tsi_cache);
|
597
|
-
}
|
598
|
-
|
599
|
-
static void* grpc_ssl_session_cache_arg_copy(void* p) {
|
600
|
-
tsi_ssl_session_cache* tsi_cache =
|
601
|
-
reinterpret_cast<tsi_ssl_session_cache*>(p);
|
602
|
-
// destroy call below will unref the pointer.
|
603
|
-
tsi_ssl_session_cache_ref(tsi_cache);
|
604
|
-
return p;
|
605
|
-
}
|
606
|
-
|
607
|
-
static void grpc_ssl_session_cache_arg_destroy(void* p) {
|
608
|
-
tsi_ssl_session_cache* tsi_cache =
|
609
|
-
reinterpret_cast<tsi_ssl_session_cache*>(p);
|
610
|
-
tsi_ssl_session_cache_unref(tsi_cache);
|
611
|
-
}
|
612
|
-
|
613
|
-
static int grpc_ssl_session_cache_arg_cmp(void* p, void* q) {
|
614
|
-
return GPR_ICMP(p, q);
|
615
|
-
}
|
616
|
-
|
617
|
-
grpc_arg grpc_ssl_session_cache_create_channel_arg(
|
618
|
-
grpc_ssl_session_cache* cache) {
|
619
|
-
static const grpc_arg_pointer_vtable vtable = {
|
620
|
-
grpc_ssl_session_cache_arg_copy,
|
621
|
-
grpc_ssl_session_cache_arg_destroy,
|
622
|
-
grpc_ssl_session_cache_arg_cmp,
|
623
|
-
};
|
624
|
-
return grpc_channel_arg_pointer_create(
|
625
|
-
const_cast<char*>(GRPC_SSL_SESSION_CACHE_ARG), cache, &vtable);
|
626
|
-
}
|
627
|
-
|
628
|
-
typedef struct {
|
629
|
-
grpc_channel_security_connector base;
|
630
|
-
tsi_ssl_client_handshaker_factory* client_handshaker_factory;
|
631
|
-
char* target_name;
|
632
|
-
char* overridden_target_name;
|
633
|
-
const verify_peer_options* verify_options;
|
634
|
-
} grpc_ssl_channel_security_connector;
|
635
|
-
|
636
|
-
typedef struct {
|
637
|
-
grpc_server_security_connector base;
|
638
|
-
tsi_ssl_server_handshaker_factory* server_handshaker_factory;
|
639
|
-
} grpc_ssl_server_security_connector;
|
640
|
-
|
641
|
-
static bool server_connector_has_cert_config_fetcher(
|
642
|
-
grpc_ssl_server_security_connector* c) {
|
643
|
-
GPR_ASSERT(c != nullptr);
|
644
|
-
grpc_ssl_server_credentials* server_creds =
|
645
|
-
reinterpret_cast<grpc_ssl_server_credentials*>(c->base.server_creds);
|
646
|
-
GPR_ASSERT(server_creds != nullptr);
|
647
|
-
return server_creds->certificate_config_fetcher.cb != nullptr;
|
648
|
-
}
|
649
|
-
|
650
|
-
static void ssl_channel_destroy(grpc_security_connector* sc) {
|
651
|
-
grpc_ssl_channel_security_connector* c =
|
652
|
-
reinterpret_cast<grpc_ssl_channel_security_connector*>(sc);
|
653
|
-
grpc_channel_credentials_unref(c->base.channel_creds);
|
654
|
-
grpc_call_credentials_unref(c->base.request_metadata_creds);
|
655
|
-
tsi_ssl_client_handshaker_factory_unref(c->client_handshaker_factory);
|
656
|
-
c->client_handshaker_factory = nullptr;
|
657
|
-
if (c->target_name != nullptr) gpr_free(c->target_name);
|
658
|
-
if (c->overridden_target_name != nullptr) gpr_free(c->overridden_target_name);
|
659
|
-
gpr_free(sc);
|
660
|
-
}
|
661
|
-
|
662
|
-
static void ssl_server_destroy(grpc_security_connector* sc) {
|
663
|
-
grpc_ssl_server_security_connector* c =
|
664
|
-
reinterpret_cast<grpc_ssl_server_security_connector*>(sc);
|
665
|
-
grpc_server_credentials_unref(c->base.server_creds);
|
666
|
-
tsi_ssl_server_handshaker_factory_unref(c->server_handshaker_factory);
|
667
|
-
c->server_handshaker_factory = nullptr;
|
668
|
-
gpr_free(sc);
|
669
|
-
}
|
670
|
-
|
671
|
-
static void ssl_channel_add_handshakers(grpc_channel_security_connector* sc,
|
672
|
-
grpc_handshake_manager* handshake_mgr) {
|
673
|
-
grpc_ssl_channel_security_connector* c =
|
674
|
-
reinterpret_cast<grpc_ssl_channel_security_connector*>(sc);
|
675
|
-
// Instantiate TSI handshaker.
|
676
|
-
tsi_handshaker* tsi_hs = nullptr;
|
677
|
-
tsi_result result = tsi_ssl_client_handshaker_factory_create_handshaker(
|
678
|
-
c->client_handshaker_factory,
|
679
|
-
c->overridden_target_name != nullptr ? c->overridden_target_name
|
680
|
-
: c->target_name,
|
681
|
-
&tsi_hs);
|
682
|
-
if (result != TSI_OK) {
|
683
|
-
gpr_log(GPR_ERROR, "Handshaker creation failed with error %s.",
|
684
|
-
tsi_result_to_string(result));
|
685
|
-
return;
|
686
|
-
}
|
687
|
-
// Create handshakers.
|
688
|
-
grpc_handshake_manager_add(
|
689
|
-
handshake_mgr, grpc_security_handshaker_create(tsi_hs, &sc->base));
|
690
|
-
}
|
691
|
-
|
692
|
-
static const char** fill_alpn_protocol_strings(size_t* num_alpn_protocols) {
|
693
|
-
GPR_ASSERT(num_alpn_protocols != nullptr);
|
694
|
-
*num_alpn_protocols = grpc_chttp2_num_alpn_versions();
|
695
|
-
const char** alpn_protocol_strings = static_cast<const char**>(
|
696
|
-
gpr_malloc(sizeof(const char*) * (*num_alpn_protocols)));
|
697
|
-
for (size_t i = 0; i < *num_alpn_protocols; i++) {
|
698
|
-
alpn_protocol_strings[i] = grpc_chttp2_get_alpn_version_index(i);
|
699
|
-
}
|
700
|
-
return alpn_protocol_strings;
|
701
|
-
}
|
702
|
-
|
703
|
-
/* Attempts to replace the server_handshaker_factory with a new factory using
|
704
|
-
* the provided grpc_ssl_server_certificate_config. Should new factory creation
|
705
|
-
* fail, the existing factory will not be replaced. Returns true on success (new
|
706
|
-
* factory created). */
|
707
|
-
static bool try_replace_server_handshaker_factory(
|
708
|
-
grpc_ssl_server_security_connector* sc,
|
709
|
-
const grpc_ssl_server_certificate_config* config) {
|
710
|
-
if (config == nullptr) {
|
711
|
-
gpr_log(GPR_ERROR,
|
712
|
-
"Server certificate config callback returned invalid (NULL) "
|
713
|
-
"config.");
|
714
|
-
return false;
|
715
|
-
}
|
716
|
-
gpr_log(GPR_DEBUG, "Using new server certificate config (%p).", config);
|
717
|
-
|
718
|
-
size_t num_alpn_protocols = 0;
|
719
|
-
const char** alpn_protocol_strings =
|
720
|
-
fill_alpn_protocol_strings(&num_alpn_protocols);
|
721
|
-
tsi_ssl_pem_key_cert_pair* cert_pairs = grpc_convert_grpc_to_tsi_cert_pairs(
|
722
|
-
config->pem_key_cert_pairs, config->num_key_cert_pairs);
|
723
|
-
tsi_ssl_server_handshaker_factory* new_handshaker_factory = nullptr;
|
724
|
-
grpc_ssl_server_credentials* server_creds =
|
725
|
-
reinterpret_cast<grpc_ssl_server_credentials*>(sc->base.server_creds);
|
726
|
-
tsi_result result = tsi_create_ssl_server_handshaker_factory_ex(
|
727
|
-
cert_pairs, config->num_key_cert_pairs, config->pem_root_certs,
|
728
|
-
get_tsi_client_certificate_request_type(
|
729
|
-
server_creds->config.client_certificate_request),
|
730
|
-
ssl_cipher_suites(), alpn_protocol_strings,
|
731
|
-
static_cast<uint16_t>(num_alpn_protocols), &new_handshaker_factory);
|
732
|
-
gpr_free(cert_pairs);
|
733
|
-
gpr_free((void*)alpn_protocol_strings);
|
734
|
-
|
735
|
-
if (result != TSI_OK) {
|
736
|
-
gpr_log(GPR_ERROR, "Handshaker factory creation failed with %s.",
|
737
|
-
tsi_result_to_string(result));
|
738
|
-
return false;
|
739
|
-
}
|
740
|
-
tsi_ssl_server_handshaker_factory_unref(sc->server_handshaker_factory);
|
741
|
-
sc->server_handshaker_factory = new_handshaker_factory;
|
742
|
-
return true;
|
743
|
-
}
|
744
|
-
|
745
|
-
/* Attempts to fetch the server certificate config if a callback is available.
|
746
|
-
* Current certificate config will continue to be used if the callback returns
|
747
|
-
* an error. Returns true if new credentials were sucessfully loaded. */
|
748
|
-
static bool try_fetch_ssl_server_credentials(
|
749
|
-
grpc_ssl_server_security_connector* sc) {
|
750
|
-
grpc_ssl_server_certificate_config* certificate_config = nullptr;
|
751
|
-
bool status;
|
752
|
-
|
753
|
-
GPR_ASSERT(sc != nullptr);
|
754
|
-
if (!server_connector_has_cert_config_fetcher(sc)) return false;
|
755
|
-
|
756
|
-
grpc_ssl_server_credentials* server_creds =
|
757
|
-
reinterpret_cast<grpc_ssl_server_credentials*>(sc->base.server_creds);
|
758
|
-
grpc_ssl_certificate_config_reload_status cb_result =
|
759
|
-
server_creds->certificate_config_fetcher.cb(
|
760
|
-
server_creds->certificate_config_fetcher.user_data,
|
761
|
-
&certificate_config);
|
762
|
-
if (cb_result == GRPC_SSL_CERTIFICATE_CONFIG_RELOAD_UNCHANGED) {
|
763
|
-
gpr_log(GPR_DEBUG, "No change in SSL server credentials.");
|
764
|
-
status = false;
|
765
|
-
} else if (cb_result == GRPC_SSL_CERTIFICATE_CONFIG_RELOAD_NEW) {
|
766
|
-
status = try_replace_server_handshaker_factory(sc, certificate_config);
|
767
|
-
} else {
|
768
|
-
// Log error, continue using previously-loaded credentials.
|
769
|
-
gpr_log(GPR_ERROR,
|
770
|
-
"Failed fetching new server credentials, continuing to "
|
771
|
-
"use previously-loaded credentials.");
|
772
|
-
status = false;
|
773
|
-
}
|
774
|
-
|
775
|
-
if (certificate_config != nullptr) {
|
776
|
-
grpc_ssl_server_certificate_config_destroy(certificate_config);
|
777
|
-
}
|
778
|
-
return status;
|
779
|
-
}
|
780
|
-
|
781
|
-
static void ssl_server_add_handshakers(grpc_server_security_connector* sc,
|
782
|
-
grpc_handshake_manager* handshake_mgr) {
|
783
|
-
grpc_ssl_server_security_connector* c =
|
784
|
-
reinterpret_cast<grpc_ssl_server_security_connector*>(sc);
|
785
|
-
// Instantiate TSI handshaker.
|
786
|
-
try_fetch_ssl_server_credentials(c);
|
787
|
-
tsi_handshaker* tsi_hs = nullptr;
|
788
|
-
tsi_result result = tsi_ssl_server_handshaker_factory_create_handshaker(
|
789
|
-
c->server_handshaker_factory, &tsi_hs);
|
790
|
-
if (result != TSI_OK) {
|
791
|
-
gpr_log(GPR_ERROR, "Handshaker creation failed with error %s.",
|
792
|
-
tsi_result_to_string(result));
|
793
|
-
return;
|
794
|
-
}
|
795
|
-
// Create handshakers.
|
796
|
-
grpc_handshake_manager_add(
|
797
|
-
handshake_mgr, grpc_security_handshaker_create(tsi_hs, &sc->base));
|
798
|
-
}
|
799
|
-
|
800
|
-
int grpc_ssl_host_matches_name(const tsi_peer* peer, const char* peer_name) {
|
801
|
-
char* allocated_name = nullptr;
|
802
|
-
int r;
|
803
|
-
|
804
|
-
char* ignored_port;
|
805
|
-
gpr_split_host_port(peer_name, &allocated_name, &ignored_port);
|
806
|
-
gpr_free(ignored_port);
|
807
|
-
peer_name = allocated_name;
|
808
|
-
if (!peer_name) return 0;
|
809
|
-
|
810
|
-
// IPv6 zone-id should not be included in comparisons.
|
811
|
-
char* const zone_id = strchr(allocated_name, '%');
|
812
|
-
if (zone_id != nullptr) *zone_id = '\0';
|
813
|
-
|
814
|
-
r = tsi_ssl_peer_matches_name(peer, peer_name);
|
815
|
-
gpr_free(allocated_name);
|
816
|
-
return r;
|
817
|
-
}
|
818
|
-
|
819
|
-
grpc_auth_context* grpc_ssl_peer_to_auth_context(const tsi_peer* peer) {
|
820
|
-
size_t i;
|
821
|
-
grpc_auth_context* ctx = nullptr;
|
822
|
-
const char* peer_identity_property_name = nullptr;
|
823
|
-
|
824
|
-
/* The caller has checked the certificate type property. */
|
825
|
-
GPR_ASSERT(peer->property_count >= 1);
|
826
|
-
ctx = grpc_auth_context_create(nullptr);
|
827
|
-
grpc_auth_context_add_cstring_property(
|
828
|
-
ctx, GRPC_TRANSPORT_SECURITY_TYPE_PROPERTY_NAME,
|
829
|
-
GRPC_SSL_TRANSPORT_SECURITY_TYPE);
|
830
|
-
for (i = 0; i < peer->property_count; i++) {
|
831
|
-
const tsi_peer_property* prop = &peer->properties[i];
|
832
|
-
if (prop->name == nullptr) continue;
|
833
|
-
if (strcmp(prop->name, TSI_X509_SUBJECT_COMMON_NAME_PEER_PROPERTY) == 0) {
|
834
|
-
/* If there is no subject alt name, have the CN as the identity. */
|
835
|
-
if (peer_identity_property_name == nullptr) {
|
836
|
-
peer_identity_property_name = GRPC_X509_CN_PROPERTY_NAME;
|
837
|
-
}
|
838
|
-
grpc_auth_context_add_property(ctx, GRPC_X509_CN_PROPERTY_NAME,
|
839
|
-
prop->value.data, prop->value.length);
|
840
|
-
} else if (strcmp(prop->name,
|
841
|
-
TSI_X509_SUBJECT_ALTERNATIVE_NAME_PEER_PROPERTY) == 0) {
|
842
|
-
peer_identity_property_name = GRPC_X509_SAN_PROPERTY_NAME;
|
843
|
-
grpc_auth_context_add_property(ctx, GRPC_X509_SAN_PROPERTY_NAME,
|
844
|
-
prop->value.data, prop->value.length);
|
845
|
-
} else if (strcmp(prop->name, TSI_X509_PEM_CERT_PROPERTY) == 0) {
|
846
|
-
grpc_auth_context_add_property(ctx, GRPC_X509_PEM_CERT_PROPERTY_NAME,
|
847
|
-
prop->value.data, prop->value.length);
|
848
|
-
} else if (strcmp(prop->name, TSI_SSL_SESSION_REUSED_PEER_PROPERTY) == 0) {
|
849
|
-
grpc_auth_context_add_property(ctx, GRPC_SSL_SESSION_REUSED_PROPERTY,
|
850
|
-
prop->value.data, prop->value.length);
|
851
|
-
}
|
852
|
-
}
|
853
|
-
if (peer_identity_property_name != nullptr) {
|
854
|
-
GPR_ASSERT(grpc_auth_context_set_peer_identity_property_name(
|
855
|
-
ctx, peer_identity_property_name) == 1);
|
856
|
-
}
|
857
|
-
return ctx;
|
858
|
-
}
|
859
|
-
|
860
|
-
static grpc_error* ssl_check_peer(grpc_security_connector* sc,
|
861
|
-
const char* peer_name, const tsi_peer* peer,
|
862
|
-
grpc_auth_context** auth_context) {
|
863
|
-
#if TSI_OPENSSL_ALPN_SUPPORT
|
864
|
-
/* Check the ALPN if ALPN is supported. */
|
865
|
-
const tsi_peer_property* p =
|
866
|
-
tsi_peer_get_property_by_name(peer, TSI_SSL_ALPN_SELECTED_PROTOCOL);
|
867
|
-
if (p == nullptr) {
|
868
|
-
return GRPC_ERROR_CREATE_FROM_STATIC_STRING(
|
869
|
-
"Cannot check peer: missing selected ALPN property.");
|
870
|
-
}
|
871
|
-
if (!grpc_chttp2_is_alpn_version_supported(p->value.data, p->value.length)) {
|
872
|
-
return GRPC_ERROR_CREATE_FROM_STATIC_STRING(
|
873
|
-
"Cannot check peer: invalid ALPN value.");
|
874
|
-
}
|
875
|
-
#endif /* TSI_OPENSSL_ALPN_SUPPORT */
|
876
|
-
/* Check the peer name if specified. */
|
877
|
-
if (peer_name != nullptr && !grpc_ssl_host_matches_name(peer, peer_name)) {
|
878
|
-
char* msg;
|
879
|
-
gpr_asprintf(&msg, "Peer name %s is not in peer certificate", peer_name);
|
880
|
-
grpc_error* error = GRPC_ERROR_CREATE_FROM_COPIED_STRING(msg);
|
881
|
-
gpr_free(msg);
|
882
|
-
return error;
|
883
|
-
}
|
884
|
-
*auth_context = grpc_ssl_peer_to_auth_context(peer);
|
885
|
-
return GRPC_ERROR_NONE;
|
886
|
-
}
|
887
|
-
|
888
|
-
static void ssl_channel_check_peer(grpc_security_connector* sc, tsi_peer peer,
|
889
|
-
grpc_auth_context** auth_context,
|
890
|
-
grpc_closure* on_peer_checked) {
|
891
|
-
grpc_ssl_channel_security_connector* c =
|
892
|
-
reinterpret_cast<grpc_ssl_channel_security_connector*>(sc);
|
893
|
-
const char* target_name = c->overridden_target_name != nullptr
|
894
|
-
? c->overridden_target_name
|
895
|
-
: c->target_name;
|
896
|
-
grpc_error* error = ssl_check_peer(sc, target_name, &peer, auth_context);
|
897
|
-
if (error == GRPC_ERROR_NONE &&
|
898
|
-
c->verify_options->verify_peer_callback != nullptr) {
|
899
|
-
const tsi_peer_property* p =
|
900
|
-
tsi_peer_get_property_by_name(&peer, TSI_X509_PEM_CERT_PROPERTY);
|
901
|
-
if (p == nullptr) {
|
902
|
-
error = GRPC_ERROR_CREATE_FROM_STATIC_STRING(
|
903
|
-
"Cannot check peer: missing pem cert property.");
|
904
|
-
} else {
|
905
|
-
char* peer_pem = static_cast<char*>(gpr_malloc(p->value.length + 1));
|
906
|
-
memcpy(peer_pem, p->value.data, p->value.length);
|
907
|
-
peer_pem[p->value.length] = '\0';
|
908
|
-
int callback_status = c->verify_options->verify_peer_callback(
|
909
|
-
target_name, peer_pem,
|
910
|
-
c->verify_options->verify_peer_callback_userdata);
|
911
|
-
gpr_free(peer_pem);
|
912
|
-
if (callback_status) {
|
913
|
-
char* msg;
|
914
|
-
gpr_asprintf(&msg, "Verify peer callback returned a failure (%d)",
|
915
|
-
callback_status);
|
916
|
-
error = GRPC_ERROR_CREATE_FROM_COPIED_STRING(msg);
|
917
|
-
gpr_free(msg);
|
918
|
-
}
|
919
|
-
}
|
920
|
-
}
|
921
|
-
GRPC_CLOSURE_SCHED(on_peer_checked, error);
|
922
|
-
tsi_peer_destruct(&peer);
|
923
|
-
}
|
924
|
-
|
925
|
-
static void ssl_server_check_peer(grpc_security_connector* sc, tsi_peer peer,
|
926
|
-
grpc_auth_context** auth_context,
|
927
|
-
grpc_closure* on_peer_checked) {
|
928
|
-
grpc_error* error = ssl_check_peer(sc, nullptr, &peer, auth_context);
|
929
|
-
tsi_peer_destruct(&peer);
|
930
|
-
GRPC_CLOSURE_SCHED(on_peer_checked, error);
|
931
|
-
}
|
932
|
-
|
933
|
-
static int ssl_channel_cmp(grpc_security_connector* sc1,
|
934
|
-
grpc_security_connector* sc2) {
|
935
|
-
grpc_ssl_channel_security_connector* c1 =
|
936
|
-
reinterpret_cast<grpc_ssl_channel_security_connector*>(sc1);
|
937
|
-
grpc_ssl_channel_security_connector* c2 =
|
938
|
-
reinterpret_cast<grpc_ssl_channel_security_connector*>(sc2);
|
939
|
-
int c = grpc_channel_security_connector_cmp(&c1->base, &c2->base);
|
940
|
-
if (c != 0) return c;
|
941
|
-
c = strcmp(c1->target_name, c2->target_name);
|
942
|
-
if (c != 0) return c;
|
943
|
-
return (c1->overridden_target_name == nullptr ||
|
944
|
-
c2->overridden_target_name == nullptr)
|
945
|
-
? GPR_ICMP(c1->overridden_target_name, c2->overridden_target_name)
|
946
|
-
: strcmp(c1->overridden_target_name, c2->overridden_target_name);
|
947
|
-
}
|
948
|
-
|
949
|
-
static int ssl_server_cmp(grpc_security_connector* sc1,
|
950
|
-
grpc_security_connector* sc2) {
|
951
|
-
return grpc_server_security_connector_cmp(
|
952
|
-
reinterpret_cast<grpc_server_security_connector*>(sc1),
|
953
|
-
reinterpret_cast<grpc_server_security_connector*>(sc2));
|
954
|
-
}
|
955
|
-
|
956
|
-
static void add_shallow_auth_property_to_peer(tsi_peer* peer,
|
957
|
-
const grpc_auth_property* prop,
|
958
|
-
const char* tsi_prop_name) {
|
959
|
-
tsi_peer_property* tsi_prop = &peer->properties[peer->property_count++];
|
960
|
-
tsi_prop->name = const_cast<char*>(tsi_prop_name);
|
961
|
-
tsi_prop->value.data = prop->value;
|
962
|
-
tsi_prop->value.length = prop->value_length;
|
963
|
-
}
|
964
|
-
|
965
|
-
tsi_peer grpc_shallow_peer_from_ssl_auth_context(
|
966
|
-
const grpc_auth_context* auth_context) {
|
967
|
-
size_t max_num_props = 0;
|
968
|
-
grpc_auth_property_iterator it;
|
969
|
-
const grpc_auth_property* prop;
|
970
|
-
tsi_peer peer;
|
971
|
-
memset(&peer, 0, sizeof(peer));
|
972
|
-
|
973
|
-
it = grpc_auth_context_property_iterator(auth_context);
|
974
|
-
while (grpc_auth_property_iterator_next(&it) != nullptr) max_num_props++;
|
975
|
-
|
976
|
-
if (max_num_props > 0) {
|
977
|
-
peer.properties = static_cast<tsi_peer_property*>(
|
978
|
-
gpr_malloc(max_num_props * sizeof(tsi_peer_property)));
|
979
|
-
it = grpc_auth_context_property_iterator(auth_context);
|
980
|
-
while ((prop = grpc_auth_property_iterator_next(&it)) != nullptr) {
|
981
|
-
if (strcmp(prop->name, GRPC_X509_SAN_PROPERTY_NAME) == 0) {
|
982
|
-
add_shallow_auth_property_to_peer(
|
983
|
-
&peer, prop, TSI_X509_SUBJECT_ALTERNATIVE_NAME_PEER_PROPERTY);
|
984
|
-
} else if (strcmp(prop->name, GRPC_X509_CN_PROPERTY_NAME) == 0) {
|
985
|
-
add_shallow_auth_property_to_peer(
|
986
|
-
&peer, prop, TSI_X509_SUBJECT_COMMON_NAME_PEER_PROPERTY);
|
987
|
-
} else if (strcmp(prop->name, GRPC_X509_PEM_CERT_PROPERTY_NAME) == 0) {
|
988
|
-
add_shallow_auth_property_to_peer(&peer, prop,
|
989
|
-
TSI_X509_PEM_CERT_PROPERTY);
|
990
|
-
}
|
991
|
-
}
|
992
|
-
}
|
993
|
-
return peer;
|
994
|
-
}
|
995
|
-
|
996
|
-
void grpc_shallow_peer_destruct(tsi_peer* peer) {
|
997
|
-
if (peer->properties != nullptr) gpr_free(peer->properties);
|
998
|
-
}
|
999
|
-
|
1000
|
-
static bool ssl_channel_check_call_host(grpc_channel_security_connector* sc,
|
1001
|
-
const char* host,
|
1002
|
-
grpc_auth_context* auth_context,
|
1003
|
-
grpc_closure* on_call_host_checked,
|
1004
|
-
grpc_error** error) {
|
1005
|
-
grpc_ssl_channel_security_connector* c =
|
1006
|
-
reinterpret_cast<grpc_ssl_channel_security_connector*>(sc);
|
1007
|
-
grpc_security_status status = GRPC_SECURITY_ERROR;
|
1008
|
-
tsi_peer peer = grpc_shallow_peer_from_ssl_auth_context(auth_context);
|
1009
|
-
if (grpc_ssl_host_matches_name(&peer, host)) status = GRPC_SECURITY_OK;
|
1010
|
-
/* If the target name was overridden, then the original target_name was
|
1011
|
-
'checked' transitively during the previous peer check at the end of the
|
1012
|
-
handshake. */
|
1013
|
-
if (c->overridden_target_name != nullptr &&
|
1014
|
-
strcmp(host, c->target_name) == 0) {
|
1015
|
-
status = GRPC_SECURITY_OK;
|
1016
|
-
}
|
1017
|
-
if (status != GRPC_SECURITY_OK) {
|
1018
|
-
*error = GRPC_ERROR_CREATE_FROM_STATIC_STRING(
|
1019
|
-
"call host does not match SSL server name");
|
1020
|
-
}
|
1021
|
-
grpc_shallow_peer_destruct(&peer);
|
1022
|
-
return true;
|
1023
|
-
}
|
1024
|
-
|
1025
|
-
static void ssl_channel_cancel_check_call_host(
|
1026
|
-
grpc_channel_security_connector* sc, grpc_closure* on_call_host_checked,
|
1027
|
-
grpc_error* error) {
|
1028
|
-
GRPC_ERROR_UNREF(error);
|
1029
|
-
}
|
1030
|
-
|
1031
|
-
static grpc_security_connector_vtable ssl_channel_vtable = {
|
1032
|
-
ssl_channel_destroy, ssl_channel_check_peer, ssl_channel_cmp};
|
1033
|
-
|
1034
|
-
static grpc_security_connector_vtable ssl_server_vtable = {
|
1035
|
-
ssl_server_destroy, ssl_server_check_peer, ssl_server_cmp};
|
1036
|
-
|
1037
|
-
grpc_security_status grpc_ssl_channel_security_connector_create(
|
1038
|
-
grpc_channel_credentials* channel_creds,
|
1039
|
-
grpc_call_credentials* request_metadata_creds,
|
1040
|
-
const grpc_ssl_config* config, const char* target_name,
|
1041
|
-
const char* overridden_target_name,
|
1042
|
-
tsi_ssl_session_cache* ssl_session_cache,
|
1043
|
-
grpc_channel_security_connector** sc) {
|
1044
|
-
tsi_result result = TSI_OK;
|
1045
|
-
grpc_ssl_channel_security_connector* c;
|
1046
|
-
char* port;
|
1047
|
-
bool has_key_cert_pair;
|
1048
|
-
tsi_ssl_client_handshaker_options options;
|
1049
|
-
memset(&options, 0, sizeof(options));
|
1050
|
-
options.alpn_protocols =
|
1051
|
-
fill_alpn_protocol_strings(&options.num_alpn_protocols);
|
1052
|
-
|
1053
|
-
if (config == nullptr || target_name == nullptr) {
|
1054
|
-
gpr_log(GPR_ERROR, "An ssl channel needs a config and a target name.");
|
1055
|
-
goto error;
|
1056
|
-
}
|
1057
|
-
if (config->pem_root_certs == nullptr) {
|
1058
|
-
// Use default root certificates.
|
1059
|
-
options.pem_root_certs = grpc_core::DefaultSslRootStore::GetPemRootCerts();
|
1060
|
-
options.root_store = grpc_core::DefaultSslRootStore::GetRootStore();
|
1061
|
-
if (options.pem_root_certs == nullptr) {
|
1062
|
-
gpr_log(GPR_ERROR, "Could not get default pem root certs.");
|
1063
|
-
goto error;
|
1064
|
-
}
|
1065
|
-
} else {
|
1066
|
-
options.pem_root_certs = config->pem_root_certs;
|
1067
|
-
}
|
1068
|
-
c = static_cast<grpc_ssl_channel_security_connector*>(
|
1069
|
-
gpr_zalloc(sizeof(grpc_ssl_channel_security_connector)));
|
1070
|
-
|
1071
|
-
gpr_ref_init(&c->base.base.refcount, 1);
|
1072
|
-
c->base.base.vtable = &ssl_channel_vtable;
|
1073
|
-
c->base.base.url_scheme = GRPC_SSL_URL_SCHEME;
|
1074
|
-
c->base.channel_creds = grpc_channel_credentials_ref(channel_creds);
|
1075
|
-
c->base.request_metadata_creds =
|
1076
|
-
grpc_call_credentials_ref(request_metadata_creds);
|
1077
|
-
c->base.check_call_host = ssl_channel_check_call_host;
|
1078
|
-
c->base.cancel_check_call_host = ssl_channel_cancel_check_call_host;
|
1079
|
-
c->base.add_handshakers = ssl_channel_add_handshakers;
|
1080
|
-
gpr_split_host_port(target_name, &c->target_name, &port);
|
1081
|
-
gpr_free(port);
|
1082
|
-
if (overridden_target_name != nullptr) {
|
1083
|
-
c->overridden_target_name = gpr_strdup(overridden_target_name);
|
1084
|
-
}
|
1085
|
-
c->verify_options = &config->verify_options;
|
1086
|
-
|
1087
|
-
has_key_cert_pair = config->pem_key_cert_pair != nullptr &&
|
1088
|
-
config->pem_key_cert_pair->private_key != nullptr &&
|
1089
|
-
config->pem_key_cert_pair->cert_chain != nullptr;
|
1090
|
-
if (has_key_cert_pair) {
|
1091
|
-
options.pem_key_cert_pair = config->pem_key_cert_pair;
|
1092
|
-
}
|
1093
|
-
options.cipher_suites = ssl_cipher_suites();
|
1094
|
-
options.session_cache = ssl_session_cache;
|
1095
|
-
result = tsi_create_ssl_client_handshaker_factory_with_options(
|
1096
|
-
&options, &c->client_handshaker_factory);
|
1097
|
-
if (result != TSI_OK) {
|
1098
|
-
gpr_log(GPR_ERROR, "Handshaker factory creation failed with %s.",
|
1099
|
-
tsi_result_to_string(result));
|
1100
|
-
ssl_channel_destroy(&c->base.base);
|
1101
|
-
*sc = nullptr;
|
1102
|
-
goto error;
|
1103
|
-
}
|
1104
|
-
*sc = &c->base;
|
1105
|
-
gpr_free((void*)options.alpn_protocols);
|
1106
|
-
return GRPC_SECURITY_OK;
|
1107
|
-
|
1108
|
-
error:
|
1109
|
-
gpr_free((void*)options.alpn_protocols);
|
1110
|
-
return GRPC_SECURITY_ERROR;
|
1111
|
-
}
|
1112
|
-
|
1113
|
-
static grpc_ssl_server_security_connector*
|
1114
|
-
grpc_ssl_server_security_connector_initialize(
|
1115
|
-
grpc_server_credentials* server_creds) {
|
1116
|
-
grpc_ssl_server_security_connector* c =
|
1117
|
-
static_cast<grpc_ssl_server_security_connector*>(
|
1118
|
-
gpr_zalloc(sizeof(grpc_ssl_server_security_connector)));
|
1119
|
-
gpr_ref_init(&c->base.base.refcount, 1);
|
1120
|
-
c->base.base.url_scheme = GRPC_SSL_URL_SCHEME;
|
1121
|
-
c->base.base.vtable = &ssl_server_vtable;
|
1122
|
-
c->base.add_handshakers = ssl_server_add_handshakers;
|
1123
|
-
c->base.server_creds = grpc_server_credentials_ref(server_creds);
|
1124
|
-
return c;
|
1125
|
-
}
|
1126
|
-
|
1127
|
-
grpc_security_status grpc_ssl_server_security_connector_create(
|
1128
|
-
grpc_server_credentials* gsc, grpc_server_security_connector** sc) {
|
1129
|
-
tsi_result result = TSI_OK;
|
1130
|
-
grpc_ssl_server_credentials* server_credentials =
|
1131
|
-
reinterpret_cast<grpc_ssl_server_credentials*>(gsc);
|
1132
|
-
grpc_security_status retval = GRPC_SECURITY_OK;
|
1133
|
-
|
1134
|
-
GPR_ASSERT(server_credentials != nullptr);
|
1135
|
-
GPR_ASSERT(sc != nullptr);
|
1136
|
-
|
1137
|
-
grpc_ssl_server_security_connector* c =
|
1138
|
-
grpc_ssl_server_security_connector_initialize(gsc);
|
1139
|
-
if (server_connector_has_cert_config_fetcher(c)) {
|
1140
|
-
// Load initial credentials from certificate_config_fetcher:
|
1141
|
-
if (!try_fetch_ssl_server_credentials(c)) {
|
1142
|
-
gpr_log(GPR_ERROR, "Failed loading SSL server credentials from fetcher.");
|
1143
|
-
retval = GRPC_SECURITY_ERROR;
|
1144
|
-
}
|
1145
|
-
} else {
|
1146
|
-
size_t num_alpn_protocols = 0;
|
1147
|
-
const char** alpn_protocol_strings =
|
1148
|
-
fill_alpn_protocol_strings(&num_alpn_protocols);
|
1149
|
-
result = tsi_create_ssl_server_handshaker_factory_ex(
|
1150
|
-
server_credentials->config.pem_key_cert_pairs,
|
1151
|
-
server_credentials->config.num_key_cert_pairs,
|
1152
|
-
server_credentials->config.pem_root_certs,
|
1153
|
-
get_tsi_client_certificate_request_type(
|
1154
|
-
server_credentials->config.client_certificate_request),
|
1155
|
-
ssl_cipher_suites(), alpn_protocol_strings,
|
1156
|
-
static_cast<uint16_t>(num_alpn_protocols),
|
1157
|
-
&c->server_handshaker_factory);
|
1158
|
-
gpr_free((void*)alpn_protocol_strings);
|
1159
|
-
if (result != TSI_OK) {
|
1160
|
-
gpr_log(GPR_ERROR, "Handshaker factory creation failed with %s.",
|
1161
|
-
tsi_result_to_string(result));
|
1162
|
-
retval = GRPC_SECURITY_ERROR;
|
1163
|
-
}
|
1164
|
-
}
|
1165
|
-
|
1166
|
-
if (retval == GRPC_SECURITY_OK) {
|
1167
|
-
*sc = &c->base;
|
1168
|
-
} else {
|
1169
|
-
if (c != nullptr) ssl_server_destroy(&c->base.base);
|
1170
|
-
if (sc != nullptr) *sc = nullptr;
|
1171
|
-
}
|
1172
|
-
return retval;
|
1173
|
-
}
|
1174
|
-
|
1175
|
-
namespace grpc_core {
|
1176
|
-
|
1177
|
-
tsi_ssl_root_certs_store* DefaultSslRootStore::default_root_store_;
|
1178
|
-
grpc_slice DefaultSslRootStore::default_pem_root_certs_;
|
1179
|
-
|
1180
|
-
const tsi_ssl_root_certs_store* DefaultSslRootStore::GetRootStore() {
|
1181
|
-
InitRootStore();
|
1182
|
-
return default_root_store_;
|
1183
|
-
}
|
1184
|
-
|
1185
|
-
const char* DefaultSslRootStore::GetPemRootCerts() {
|
1186
|
-
InitRootStore();
|
1187
|
-
return GRPC_SLICE_IS_EMPTY(default_pem_root_certs_)
|
1188
|
-
? nullptr
|
1189
|
-
: reinterpret_cast<const char*>
|
1190
|
-
GRPC_SLICE_START_PTR(default_pem_root_certs_);
|
1191
|
-
}
|
1192
|
-
|
1193
|
-
grpc_slice DefaultSslRootStore::ComputePemRootCerts() {
|
1194
|
-
grpc_slice result = grpc_empty_slice();
|
1195
|
-
char* use_system_roots_env_value =
|
1196
|
-
gpr_getenv(GRPC_USE_SYSTEM_SSL_ROOTS_ENV_VAR);
|
1197
|
-
const bool use_system_roots = gpr_is_true(use_system_roots_env_value);
|
1198
|
-
gpr_free(use_system_roots_env_value);
|
1199
|
-
// First try to load the roots from the environment.
|
1200
|
-
char* default_root_certs_path =
|
1201
|
-
gpr_getenv(GRPC_DEFAULT_SSL_ROOTS_FILE_PATH_ENV_VAR);
|
1202
|
-
if (default_root_certs_path != nullptr) {
|
1203
|
-
GRPC_LOG_IF_ERROR("load_file",
|
1204
|
-
grpc_load_file(default_root_certs_path, 1, &result));
|
1205
|
-
gpr_free(default_root_certs_path);
|
1206
|
-
}
|
1207
|
-
// Try overridden roots if needed.
|
1208
|
-
grpc_ssl_roots_override_result ovrd_res = GRPC_SSL_ROOTS_OVERRIDE_FAIL;
|
1209
|
-
if (GRPC_SLICE_IS_EMPTY(result) && ssl_roots_override_cb != nullptr) {
|
1210
|
-
char* pem_root_certs = nullptr;
|
1211
|
-
ovrd_res = ssl_roots_override_cb(&pem_root_certs);
|
1212
|
-
if (ovrd_res == GRPC_SSL_ROOTS_OVERRIDE_OK) {
|
1213
|
-
GPR_ASSERT(pem_root_certs != nullptr);
|
1214
|
-
result = grpc_slice_from_copied_buffer(
|
1215
|
-
pem_root_certs,
|
1216
|
-
strlen(pem_root_certs) + 1); // nullptr terminator.
|
1217
|
-
}
|
1218
|
-
gpr_free(pem_root_certs);
|
1219
|
-
}
|
1220
|
-
// Try loading roots from OS trust store if flag is enabled.
|
1221
|
-
if (GRPC_SLICE_IS_EMPTY(result) && use_system_roots) {
|
1222
|
-
result = LoadSystemRootCerts();
|
1223
|
-
}
|
1224
|
-
// Fallback to roots manually shipped with gRPC.
|
1225
|
-
if (GRPC_SLICE_IS_EMPTY(result) &&
|
1226
|
-
ovrd_res != GRPC_SSL_ROOTS_OVERRIDE_FAIL_PERMANENTLY) {
|
1227
|
-
GRPC_LOG_IF_ERROR("load_file",
|
1228
|
-
grpc_load_file(installed_roots_path, 1, &result));
|
1229
|
-
}
|
1230
|
-
return result;
|
1231
|
-
}
|
1232
|
-
|
1233
|
-
void DefaultSslRootStore::InitRootStore() {
|
1234
|
-
static gpr_once once = GPR_ONCE_INIT;
|
1235
|
-
gpr_once_init(&once, DefaultSslRootStore::InitRootStoreOnce);
|
1236
|
-
}
|
1237
|
-
|
1238
|
-
void DefaultSslRootStore::InitRootStoreOnce() {
|
1239
|
-
default_pem_root_certs_ = ComputePemRootCerts();
|
1240
|
-
if (!GRPC_SLICE_IS_EMPTY(default_pem_root_certs_)) {
|
1241
|
-
default_root_store_ =
|
1242
|
-
tsi_ssl_root_certs_store_create(reinterpret_cast<const char*>(
|
1243
|
-
GRPC_SLICE_START_PTR(default_pem_root_certs_)));
|
1244
|
-
}
|
1245
|
-
}
|
1246
|
-
|
1247
|
-
} // namespace grpc_core
|