grpc 1.21.0 → 1.32.0
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of grpc might be problematic. Click here for more details.
- checksums.yaml +4 -4
- data/Makefile +2516 -19950
- data/etc/roots.pem +44 -100
- data/include/grpc/grpc.h +3 -1
- data/include/grpc/grpc_security.h +238 -55
- data/include/grpc/grpc_security_constants.h +32 -1
- data/include/grpc/impl/codegen/README.md +22 -0
- data/include/grpc/impl/codegen/gpr_types.h +1 -1
- data/include/grpc/impl/codegen/grpc_types.h +61 -13
- data/include/grpc/impl/codegen/port_platform.h +74 -30
- data/include/grpc/impl/codegen/sync.h +5 -3
- data/include/grpc/impl/codegen/sync_abseil.h +36 -0
- data/include/grpc/impl/codegen/sync_generic.h +1 -1
- data/include/grpc/module.modulemap +25 -37
- data/include/grpc/slice.h +2 -2
- data/include/grpc/support/alloc.h +0 -16
- data/include/grpc/support/sync_abseil.h +26 -0
- data/src/core/ext/filters/client_channel/backend_metric.cc +84 -0
- data/src/core/ext/filters/client_channel/backend_metric.h +36 -0
- data/src/core/ext/filters/client_channel/backup_poller.cc +10 -8
- data/src/core/ext/filters/client_channel/backup_poller.h +5 -2
- data/src/core/ext/filters/client_channel/channel_connectivity.cc +18 -4
- data/src/core/ext/filters/client_channel/client_channel.cc +1516 -742
- data/src/core/ext/filters/client_channel/client_channel.h +25 -9
- data/src/core/ext/filters/client_channel/client_channel_channelz.cc +50 -139
- data/src/core/ext/filters/client_channel/client_channel_channelz.h +15 -39
- data/src/core/ext/filters/client_channel/client_channel_factory.cc +1 -1
- data/src/core/ext/filters/client_channel/client_channel_factory.h +1 -9
- data/src/core/ext/filters/client_channel/client_channel_plugin.cc +8 -13
- data/src/core/ext/filters/client_channel/config_selector.cc +62 -0
- data/src/core/ext/filters/client_channel/config_selector.h +93 -0
- data/src/core/ext/filters/client_channel/connector.h +42 -39
- data/src/core/ext/filters/client_channel/global_subchannel_pool.cc +34 -12
- data/src/core/ext/filters/client_channel/health/health_check_client.cc +75 -115
- data/src/core/ext/filters/client_channel/health/health_check_client.h +8 -16
- data/src/core/ext/filters/client_channel/http_connect_handshaker.cc +75 -46
- data/src/core/ext/filters/client_channel/http_proxy.cc +126 -120
- data/src/core/ext/filters/client_channel/http_proxy.h +5 -1
- data/src/core/ext/filters/client_channel/lb_policy.cc +35 -35
- data/src/core/ext/filters/client_channel/lb_policy.h +225 -152
- data/src/core/ext/filters/client_channel/lb_policy/address_filtering.cc +83 -0
- data/src/core/ext/filters/client_channel/lb_policy/address_filtering.h +99 -0
- data/src/core/ext/filters/client_channel/lb_policy/child_policy_handler.cc +299 -0
- data/src/core/ext/filters/client_channel/lb_policy/child_policy_handler.h +83 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/client_load_reporting_filter.cc +41 -25
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb.cc +635 -734
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb.h +7 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_balancer_addresses.cc +76 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_balancer_addresses.h +37 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_channel.h +9 -2
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_channel_secure.cc +33 -49
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_client_stats.cc +4 -3
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_client_stats.h +7 -6
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/load_balancer_api.cc +157 -271
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/load_balancer_api.h +42 -58
- data/src/core/ext/filters/client_channel/lb_policy/pick_first/pick_first.cc +113 -166
- data/src/core/ext/filters/client_channel/lb_policy/priority/priority.cc +890 -0
- data/src/core/ext/filters/client_channel/lb_policy/round_robin/round_robin.cc +61 -101
- data/src/core/ext/filters/client_channel/lb_policy/subchannel_list.h +116 -260
- data/src/core/ext/filters/client_channel/lb_policy/weighted_target/weighted_target.cc +744 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/cds.cc +423 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/eds.cc +946 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/lrs.cc +537 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds.h +3 -7
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_routing.cc +1141 -0
- data/src/core/ext/filters/client_channel/lb_policy_factory.h +6 -9
- data/src/core/ext/filters/client_channel/lb_policy_registry.cc +53 -77
- data/src/core/ext/filters/client_channel/lb_policy_registry.h +3 -3
- data/src/core/ext/filters/client_channel/local_subchannel_pool.cc +8 -8
- data/src/core/ext/filters/client_channel/local_subchannel_pool.h +2 -1
- data/src/core/ext/filters/client_channel/proxy_mapper.h +14 -34
- data/src/core/ext/filters/client_channel/proxy_mapper_registry.cc +46 -79
- data/src/core/ext/filters/client_channel/proxy_mapper_registry.h +23 -17
- data/src/core/ext/filters/client_channel/resolver.cc +6 -9
- data/src/core/ext/filters/client_channel/resolver.h +19 -37
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/dns_resolver_ares.cc +156 -130
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver.cc +74 -39
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver.h +15 -21
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver_libuv.cc +33 -33
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver_posix.cc +16 -13
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver_windows.cc +476 -129
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper.cc +231 -193
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper.h +6 -4
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper_fallback.cc +9 -6
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper_libuv.cc +1 -2
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper_windows.cc +1 -2
- data/src/core/ext/filters/client_channel/resolver/dns/native/dns_resolver.cc +73 -48
- data/src/core/ext/filters/client_channel/resolver/fake/fake_resolver.cc +165 -116
- data/src/core/ext/filters/client_channel/resolver/fake/fake_resolver.h +8 -7
- data/src/core/ext/filters/client_channel/resolver/sockaddr/sockaddr_resolver.cc +45 -29
- data/src/core/ext/filters/client_channel/resolver/xds/xds_resolver.cc +536 -0
- data/src/core/ext/filters/client_channel/resolver_factory.h +11 -11
- data/src/core/ext/filters/client_channel/resolver_registry.cc +39 -24
- data/src/core/ext/filters/client_channel/resolver_registry.h +17 -12
- data/src/core/ext/filters/client_channel/resolver_result_parsing.cc +251 -313
- data/src/core/ext/filters/client_channel/resolver_result_parsing.h +28 -26
- data/src/core/ext/filters/client_channel/resolving_lb_policy.cc +100 -325
- data/src/core/ext/filters/client_channel/resolving_lb_policy.h +48 -53
- data/src/core/ext/filters/client_channel/retry_throttle.cc +5 -5
- data/src/core/ext/filters/client_channel/retry_throttle.h +2 -6
- data/src/core/ext/filters/client_channel/server_address.cc +40 -14
- data/src/core/ext/filters/client_channel/server_address.h +45 -15
- data/src/core/ext/filters/client_channel/service_config.cc +143 -253
- data/src/core/ext/filters/client_channel/service_config.h +47 -131
- data/src/core/ext/filters/client_channel/service_config_call_data.h +68 -0
- data/src/core/ext/filters/client_channel/service_config_channel_arg_filter.cc +142 -0
- data/src/core/ext/filters/client_channel/service_config_parser.cc +87 -0
- data/src/core/ext/filters/client_channel/service_config_parser.h +89 -0
- data/src/core/ext/filters/client_channel/subchannel.cc +436 -288
- data/src/core/ext/filters/client_channel/subchannel.h +181 -53
- data/src/core/ext/filters/client_channel/subchannel_interface.h +94 -0
- data/src/core/ext/filters/client_channel/subchannel_pool_interface.h +3 -6
- data/src/core/ext/filters/client_idle/client_idle_filter.cc +440 -0
- data/src/core/ext/filters/deadline/deadline_filter.cc +30 -28
- data/src/core/ext/filters/http/client/http_client_filter.cc +66 -70
- data/src/core/ext/filters/http/client_authority_filter.cc +21 -21
- data/src/core/ext/filters/http/http_filters_plugin.cc +28 -12
- data/src/core/ext/filters/http/message_compress/message_compress_filter.cc +335 -301
- data/src/core/ext/filters/http/message_compress/message_decompress_filter.cc +399 -0
- data/src/core/ext/filters/http/message_compress/message_decompress_filter.h +31 -0
- data/src/core/ext/filters/http/server/http_server_filter.cc +66 -39
- data/src/core/ext/filters/max_age/max_age_filter.cc +72 -60
- data/src/core/ext/filters/message_size/message_size_filter.cc +116 -144
- data/src/core/ext/filters/message_size/message_size_filter.h +12 -6
- data/src/core/ext/filters/workarounds/workaround_cronet_compression_filter.cc +19 -17
- data/src/core/ext/transport/chttp2/client/chttp2_connector.cc +193 -171
- data/src/core/ext/transport/chttp2/client/chttp2_connector.h +48 -1
- data/src/core/ext/transport/chttp2/client/insecure/channel_create.cc +29 -25
- data/src/core/ext/transport/chttp2/client/secure/secure_channel_create.cc +44 -64
- data/src/core/ext/transport/chttp2/server/chttp2_server.cc +384 -305
- data/src/core/ext/transport/chttp2/server/chttp2_server.h +7 -2
- data/src/core/ext/transport/chttp2/server/insecure/server_chttp2.cc +3 -3
- data/src/core/ext/transport/chttp2/server/insecure/server_chttp2_posix.cc +10 -16
- data/src/core/ext/transport/chttp2/server/secure/server_secure_chttp2.cc +9 -9
- data/src/core/ext/transport/chttp2/transport/bin_encoder.cc +4 -6
- data/src/core/ext/transport/chttp2/transport/chttp2_transport.cc +640 -560
- data/src/core/ext/transport/chttp2/transport/chttp2_transport.h +2 -0
- data/src/core/ext/transport/chttp2/transport/context_list.cc +5 -3
- data/src/core/ext/transport/chttp2/transport/flow_control.cc +26 -31
- data/src/core/ext/transport/chttp2/transport/flow_control.h +28 -38
- data/src/core/ext/transport/chttp2/transport/frame_data.cc +45 -54
- data/src/core/ext/transport/chttp2/transport/frame_goaway.cc +7 -9
- data/src/core/ext/transport/chttp2/transport/frame_goaway.h +2 -3
- data/src/core/ext/transport/chttp2/transport/frame_ping.cc +7 -7
- data/src/core/ext/transport/chttp2/transport/frame_ping.h +2 -3
- data/src/core/ext/transport/chttp2/transport/frame_rst_stream.cc +21 -13
- data/src/core/ext/transport/chttp2/transport/frame_rst_stream.h +9 -3
- data/src/core/ext/transport/chttp2/transport/frame_settings.cc +13 -12
- data/src/core/ext/transport/chttp2/transport/frame_settings.h +2 -3
- data/src/core/ext/transport/chttp2/transport/frame_window_update.cc +9 -12
- data/src/core/ext/transport/chttp2/transport/frame_window_update.h +2 -3
- data/src/core/ext/transport/chttp2/transport/hpack_encoder.cc +531 -348
- data/src/core/ext/transport/chttp2/transport/hpack_encoder.h +26 -15
- data/src/core/ext/transport/chttp2/transport/hpack_parser.cc +213 -143
- data/src/core/ext/transport/chttp2/transport/hpack_parser.h +11 -4
- data/src/core/ext/transport/chttp2/transport/hpack_table.cc +41 -196
- data/src/core/ext/transport/chttp2/transport/hpack_table.h +62 -18
- data/src/core/ext/transport/chttp2/transport/http2_settings.h +4 -5
- data/src/core/ext/transport/chttp2/transport/huffsyms.h +2 -3
- data/src/core/ext/transport/chttp2/transport/incoming_metadata.cc +2 -1
- data/src/core/ext/transport/chttp2/transport/internal.h +64 -47
- data/src/core/ext/transport/chttp2/transport/parsing.cc +148 -162
- data/src/core/ext/transport/chttp2/transport/stream_map.cc +28 -18
- data/src/core/ext/transport/chttp2/transport/stream_map.h +2 -3
- data/src/core/ext/transport/chttp2/transport/writing.cc +38 -30
- data/src/core/ext/transport/inproc/inproc_transport.cc +164 -114
- data/src/core/ext/upb-generated/envoy/annotations/deprecation.upb.c +17 -0
- data/src/core/ext/upb-generated/envoy/annotations/deprecation.upb.h +29 -0
- data/src/core/ext/upb-generated/envoy/annotations/resource.upb.c +27 -0
- data/src/core/ext/upb-generated/envoy/annotations/resource.upb.h +53 -0
- data/src/core/ext/upb-generated/envoy/config/accesslog/v3/accesslog.upb.c +224 -0
- data/src/core/ext/upb-generated/envoy/config/accesslog/v3/accesslog.upb.h +700 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/circuit_breaker.upb.c +74 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/circuit_breaker.upb.h +226 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/cluster.upb.c +380 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/cluster.upb.h +1378 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/filter.upb.c +35 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/filter.upb.h +69 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/outlier_detection.upb.c +55 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/outlier_detection.upb.h +323 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/address.upb.c +112 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/address.upb.h +334 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/backoff.upb.c +35 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/backoff.upb.h +79 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/base.upb.c +309 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/base.upb.h +869 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/config_source.upb.c +96 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/config_source.upb.h +328 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/event_service_config.upb.c +34 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/event_service_config.upb.h +71 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/grpc_service.upb.c +195 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/grpc_service.upb.h +634 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/health_check.upb.c +170 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/health_check.upb.h +684 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/http_uri.upb.c +36 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/http_uri.upb.h +80 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/protocol.upb.c +152 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/protocol.upb.h +536 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/proxy_protocol.upb.c +28 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/proxy_protocol.upb.h +58 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/socket_option.upb.c +34 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/socket_option.upb.h +88 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint.upb.c +91 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint.upb.h +220 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint_components.upb.c +91 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint_components.upb.h +273 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/load_report.upb.c +112 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/load_report.upb.h +332 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/api_listener.upb.c +33 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/api_listener.upb.h +65 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/listener.upb.c +108 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/listener.upb.h +401 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/listener_components.upb.c +138 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/listener_components.upb.h +490 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/udp_listener_config.upb.c +41 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/udp_listener_config.upb.h +94 -0
- data/src/core/ext/upb-generated/envoy/config/rbac/v3/rbac.upb.c +174 -0
- data/src/core/ext/upb-generated/envoy/config/rbac/v3/rbac.upb.h +599 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/route.upb.c +63 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/route.upb.h +204 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/route_components.upb.c +773 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/route_components.upb.h +2855 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/scoped_route.upb.c +59 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/scoped_route.upb.h +135 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/http_tracer.upb.c +50 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/http_tracer.upb.h +108 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upb.c +312 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upb.h +1125 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/cert.upb.c +20 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/cert.upb.h +34 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/common.upb.c +111 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/common.upb.h +401 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/secret.upb.c +72 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/secret.upb.h +198 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/tls.upb.c +105 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/tls.upb.h +388 -0
- data/src/core/ext/upb-generated/envoy/service/cluster/v3/cds.upb.c +27 -0
- data/src/core/ext/upb-generated/envoy/service/cluster/v3/cds.upb.h +49 -0
- data/src/core/ext/upb-generated/envoy/service/discovery/v3/ads.upb.c +25 -0
- data/src/core/ext/upb-generated/envoy/service/discovery/v3/ads.upb.h +49 -0
- data/src/core/ext/upb-generated/envoy/service/discovery/v3/discovery.upb.c +129 -0
- data/src/core/ext/upb-generated/envoy/service/discovery/v3/discovery.upb.h +386 -0
- data/src/core/ext/upb-generated/envoy/service/endpoint/v3/eds.upb.c +30 -0
- data/src/core/ext/upb-generated/envoy/service/endpoint/v3/eds.upb.h +49 -0
- data/src/core/ext/upb-generated/envoy/service/listener/v3/lds.upb.c +30 -0
- data/src/core/ext/upb-generated/envoy/service/listener/v3/lds.upb.h +49 -0
- data/src/core/ext/upb-generated/envoy/service/load_stats/v3/lrs.upb.c +55 -0
- data/src/core/ext/upb-generated/envoy/service/load_stats/v3/lrs.upb.h +136 -0
- data/src/core/ext/upb-generated/envoy/service/route/v3/rds.upb.c +29 -0
- data/src/core/ext/upb-generated/envoy/service/route/v3/rds.upb.h +49 -0
- data/src/core/ext/upb-generated/envoy/service/route/v3/srds.upb.c +27 -0
- data/src/core/ext/upb-generated/envoy/service/route/v3/srds.upb.h +49 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/metadata.upb.c +47 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/metadata.upb.h +114 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/number.upb.c +35 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/number.upb.h +77 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/path.upb.c +34 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/path.upb.h +71 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/regex.upb.c +64 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/regex.upb.h +145 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/string.upb.c +53 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/string.upb.h +127 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/value.upb.c +63 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/value.upb.h +188 -0
- data/src/core/ext/upb-generated/envoy/type/metadata/v3/metadata.upb.c +88 -0
- data/src/core/ext/upb-generated/envoy/type/metadata/v3/metadata.upb.h +258 -0
- data/src/core/ext/upb-generated/envoy/type/tracing/v3/custom_tag.upb.c +90 -0
- data/src/core/ext/upb-generated/envoy/type/tracing/v3/custom_tag.upb.h +250 -0
- data/src/core/ext/upb-generated/envoy/type/v3/http.upb.c +17 -0
- data/src/core/ext/upb-generated/envoy/type/v3/http.upb.h +35 -0
- data/src/core/ext/upb-generated/envoy/type/v3/percent.upb.c +40 -0
- data/src/core/ext/upb-generated/envoy/type/v3/percent.upb.h +86 -0
- data/src/core/ext/upb-generated/envoy/type/v3/range.upb.c +51 -0
- data/src/core/ext/upb-generated/envoy/type/v3/range.upb.h +111 -0
- data/src/core/ext/upb-generated/envoy/type/v3/semantic_version.upb.c +30 -0
- data/src/core/ext/upb-generated/envoy/type/v3/semantic_version.upb.h +61 -0
- data/src/core/ext/upb-generated/gogoproto/gogo.upb.c +17 -0
- data/src/core/ext/upb-generated/gogoproto/gogo.upb.h +29 -0
- data/src/core/ext/upb-generated/google/api/annotations.upb.c +18 -0
- data/src/core/ext/upb-generated/google/api/annotations.upb.h +29 -0
- data/src/core/ext/upb-generated/google/api/expr/v1alpha1/syntax.upb.c +234 -0
- data/src/core/ext/upb-generated/google/api/expr/v1alpha1/syntax.upb.h +759 -0
- data/src/core/ext/upb-generated/google/api/http.upb.c +66 -0
- data/src/core/ext/upb-generated/google/api/http.upb.h +191 -0
- data/src/core/ext/upb-generated/google/protobuf/any.upb.c +27 -0
- data/src/core/ext/upb-generated/google/protobuf/any.upb.h +57 -0
- data/src/core/ext/upb-generated/google/protobuf/descriptor.upb.c +486 -0
- data/src/core/ext/upb-generated/google/protobuf/descriptor.upb.h +1722 -0
- data/src/core/ext/upb-generated/google/protobuf/duration.upb.c +27 -0
- data/src/core/ext/upb-generated/google/protobuf/duration.upb.h +57 -0
- data/src/core/ext/upb-generated/google/protobuf/empty.upb.c +22 -0
- data/src/core/ext/upb-generated/google/protobuf/empty.upb.h +49 -0
- data/src/core/ext/upb-generated/google/protobuf/struct.upb.c +79 -0
- data/src/core/ext/upb-generated/google/protobuf/struct.upb.h +194 -0
- data/src/core/ext/upb-generated/google/protobuf/timestamp.upb.c +27 -0
- data/src/core/ext/upb-generated/google/protobuf/timestamp.upb.h +57 -0
- data/src/core/ext/upb-generated/google/protobuf/wrappers.upb.c +106 -0
- data/src/core/ext/upb-generated/google/protobuf/wrappers.upb.h +237 -0
- data/src/core/ext/upb-generated/google/rpc/status.upb.c +33 -0
- data/src/core/ext/upb-generated/google/rpc/status.upb.h +74 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/altscontext.upb.c +49 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/altscontext.upb.h +113 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/handshaker.upb.c +212 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/handshaker.upb.h +672 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/transport_security_common.upb.c +42 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/transport_security_common.upb.h +110 -0
- data/src/core/ext/upb-generated/src/proto/grpc/health/v1/health.upb.c +36 -0
- data/src/core/ext/upb-generated/src/proto/grpc/health/v1/health.upb.h +83 -0
- data/src/core/ext/upb-generated/src/proto/grpc/lb/v1/load_balancer.upb.c +141 -0
- data/src/core/ext/upb-generated/src/proto/grpc/lb/v1/load_balancer.upb.h +396 -0
- data/src/core/ext/upb-generated/udpa/annotations/migrate.upb.c +48 -0
- data/src/core/ext/upb-generated/udpa/annotations/migrate.upb.h +103 -0
- data/src/core/ext/upb-generated/udpa/annotations/sensitive.upb.c +17 -0
- data/src/core/ext/upb-generated/udpa/annotations/sensitive.upb.h +29 -0
- data/src/core/ext/upb-generated/udpa/annotations/status.upb.c +28 -0
- data/src/core/ext/upb-generated/udpa/annotations/status.upb.h +64 -0
- data/src/core/ext/upb-generated/udpa/annotations/versioning.upb.c +27 -0
- data/src/core/ext/upb-generated/udpa/annotations/versioning.upb.h +53 -0
- data/src/core/ext/upb-generated/udpa/data/orca/v1/orca_load_report.upb.c +58 -0
- data/src/core/ext/upb-generated/udpa/data/orca/v1/orca_load_report.upb.h +117 -0
- data/src/core/ext/upb-generated/validate/validate.upb.c +448 -0
- data/src/core/ext/upb-generated/validate/validate.upb.h +2074 -0
- data/src/core/ext/xds/xds_api.cc +2388 -0
- data/src/core/ext/xds/xds_api.h +360 -0
- data/src/core/ext/xds/xds_bootstrap.cc +373 -0
- data/src/core/ext/xds/xds_bootstrap.h +93 -0
- data/src/core/ext/xds/xds_channel.h +46 -0
- data/src/core/ext/xds/xds_channel_args.h +26 -0
- data/src/core/ext/xds/xds_channel_secure.cc +103 -0
- data/src/core/ext/xds/xds_client.cc +2114 -0
- data/src/core/ext/xds/xds_client.h +276 -0
- data/src/core/ext/xds/xds_client_stats.cc +115 -0
- data/src/core/ext/xds/xds_client_stats.h +211 -0
- data/src/core/lib/avl/avl.cc +1 -1
- data/src/core/lib/channel/channel_args.cc +52 -14
- data/src/core/lib/channel/channel_args.h +41 -3
- data/src/core/lib/channel/channel_stack.cc +1 -1
- data/src/core/lib/channel/channel_stack.h +38 -18
- data/src/core/lib/channel/channel_trace.cc +32 -45
- data/src/core/lib/channel/channel_trace.h +3 -3
- data/src/core/lib/channel/channelz.cc +377 -318
- data/src/core/lib/channel/channelz.h +128 -90
- data/src/core/lib/channel/channelz_registry.cc +123 -178
- data/src/core/lib/channel/channelz_registry.h +14 -32
- data/src/core/lib/channel/connected_channel.cc +28 -25
- data/src/core/lib/channel/context.h +2 -2
- data/src/core/lib/channel/handshaker.cc +18 -14
- data/src/core/lib/channel/handshaker.h +7 -6
- data/src/core/lib/channel/handshaker_factory.h +1 -3
- data/src/core/lib/channel/handshaker_registry.cc +9 -21
- data/src/core/lib/channel/handshaker_registry.h +3 -3
- data/src/core/lib/channel/status_util.cc +2 -3
- data/src/core/lib/compression/compression.cc +16 -11
- data/src/core/lib/compression/compression_args.cc +13 -6
- data/src/core/lib/compression/compression_args.h +3 -2
- data/src/core/lib/compression/compression_internal.cc +15 -11
- data/src/core/lib/compression/compression_internal.h +9 -1
- data/src/core/lib/compression/message_compress.cc +8 -3
- data/src/core/lib/compression/stream_compression.cc +3 -2
- data/src/core/lib/compression/stream_compression.h +2 -2
- data/src/core/lib/compression/stream_compression_gzip.cc +9 -9
- data/src/core/lib/compression/stream_compression_identity.cc +5 -7
- data/src/core/lib/debug/stats.cc +21 -27
- data/src/core/lib/debug/stats.h +3 -1
- data/src/core/lib/debug/trace.h +3 -2
- data/src/core/lib/gpr/alloc.cc +4 -29
- data/src/core/lib/gpr/cpu_linux.cc +1 -1
- data/src/core/lib/gpr/env.h +1 -1
- data/src/core/lib/gpr/env_linux.cc +10 -21
- data/src/core/lib/gpr/env_posix.cc +0 -5
- data/src/core/lib/gpr/log_linux.cc +8 -10
- data/src/core/lib/gpr/log_posix.cc +7 -9
- data/src/core/lib/gpr/spinlock.h +2 -3
- data/src/core/lib/gpr/string.cc +25 -36
- data/src/core/lib/gpr/string.h +11 -19
- data/src/core/lib/gpr/sync_abseil.cc +116 -0
- data/src/core/lib/gpr/sync_posix.cc +10 -142
- data/src/core/lib/gpr/sync_windows.cc +4 -2
- data/src/core/lib/gpr/time.cc +4 -0
- data/src/core/lib/gpr/time_posix.cc +1 -1
- data/src/core/lib/gpr/time_precise.cc +123 -36
- data/src/core/lib/gpr/time_precise.h +37 -0
- data/src/core/lib/gprpp/arena.cc +3 -3
- data/src/core/lib/gprpp/arena.h +2 -3
- data/src/core/lib/gprpp/atomic.h +10 -6
- data/src/core/lib/gprpp/debug_location.h +3 -2
- data/src/core/lib/gprpp/fork.cc +19 -26
- data/src/core/lib/gprpp/fork.h +18 -3
- data/src/core/lib/gprpp/global_config.h +9 -0
- data/src/core/lib/gprpp/global_config_custom.h +1 -1
- data/src/core/lib/gprpp/global_config_env.cc +15 -13
- data/src/core/lib/gprpp/global_config_env.h +2 -2
- data/src/core/lib/gprpp/host_port.cc +112 -0
- data/src/core/lib/gprpp/host_port.h +56 -0
- data/src/core/lib/gprpp/map.h +16 -382
- data/src/core/lib/gprpp/memory.h +12 -75
- data/src/core/lib/gprpp/mpscq.cc +108 -0
- data/src/core/lib/gprpp/mpscq.h +98 -0
- data/src/core/lib/gprpp/orphanable.h +9 -14
- data/src/core/lib/gprpp/ref_counted.h +97 -44
- data/src/core/lib/gprpp/ref_counted_ptr.h +8 -1
- data/src/core/lib/gprpp/sync.h +9 -0
- data/src/core/lib/gprpp/thd.h +13 -6
- data/src/core/lib/gprpp/thd_posix.cc +29 -3
- data/src/core/lib/gprpp/thd_windows.cc +12 -4
- data/src/core/lib/http/format_request.cc +46 -65
- data/src/core/lib/http/httpcli.cc +18 -16
- data/src/core/lib/http/httpcli.h +2 -3
- data/src/core/lib/http/httpcli_security_connector.cc +27 -21
- data/src/core/lib/http/parser.cc +1 -1
- data/src/core/lib/http/parser.h +2 -3
- data/src/core/lib/iomgr/buffer_list.cc +45 -40
- data/src/core/lib/iomgr/buffer_list.h +27 -27
- data/src/core/lib/iomgr/call_combiner.cc +12 -12
- data/src/core/lib/iomgr/call_combiner.h +10 -8
- data/src/core/lib/iomgr/cfstream_handle.cc +11 -3
- data/src/core/lib/iomgr/cfstream_handle.h +11 -3
- data/src/core/lib/iomgr/closure.h +43 -141
- data/src/core/lib/iomgr/combiner.cc +46 -90
- data/src/core/lib/iomgr/combiner.h +30 -8
- data/src/core/lib/iomgr/dualstack_socket_posix.cc +47 -0
- data/src/core/lib/iomgr/endpoint.cc +5 -1
- data/src/core/lib/iomgr/endpoint.h +7 -3
- data/src/core/lib/iomgr/endpoint_cfstream.cc +41 -19
- data/src/core/lib/iomgr/endpoint_pair.h +2 -3
- data/src/core/lib/iomgr/endpoint_pair_posix.cc +11 -11
- data/src/core/lib/iomgr/error.cc +26 -19
- data/src/core/lib/iomgr/error.h +15 -8
- data/src/core/lib/iomgr/error_cfstream.cc +9 -8
- data/src/core/lib/iomgr/error_internal.h +1 -1
- data/src/core/lib/iomgr/ev_apple.cc +356 -0
- data/src/core/lib/iomgr/ev_apple.h +43 -0
- data/src/core/lib/iomgr/ev_epoll1_linux.cc +48 -47
- data/src/core/lib/iomgr/ev_epollex_linux.cc +80 -94
- data/src/core/lib/iomgr/ev_poll_posix.cc +42 -26
- data/src/core/lib/iomgr/ev_posix.cc +9 -8
- data/src/core/lib/iomgr/ev_posix.h +3 -2
- data/src/core/lib/iomgr/ev_windows.cc +2 -2
- data/src/core/lib/iomgr/exec_ctx.cc +78 -21
- data/src/core/lib/iomgr/exec_ctx.h +27 -7
- data/src/core/lib/iomgr/executor.cc +25 -41
- data/src/core/lib/iomgr/executor.h +7 -7
- data/src/core/lib/iomgr/executor/mpmcqueue.cc +183 -0
- data/src/core/lib/iomgr/executor/mpmcqueue.h +175 -0
- data/src/core/lib/iomgr/executor/threadpool.cc +137 -0
- data/src/core/lib/iomgr/executor/threadpool.h +149 -0
- data/src/core/lib/iomgr/fork_posix.cc +8 -2
- data/src/core/lib/iomgr/iocp_windows.cc +2 -2
- data/src/core/lib/iomgr/iomgr.cc +4 -4
- data/src/core/lib/iomgr/iomgr_custom.cc +1 -1
- data/src/core/lib/iomgr/iomgr_posix_cfstream.cc +87 -9
- data/src/core/lib/iomgr/iomgr_uv.cc +3 -0
- data/src/core/lib/iomgr/is_epollexclusive_available.cc +14 -0
- data/src/core/lib/iomgr/load_file.cc +1 -0
- data/src/core/lib/iomgr/lockfree_event.cc +13 -12
- data/src/core/lib/iomgr/parse_address.cc +238 -0
- data/src/core/lib/iomgr/parse_address.h +53 -0
- data/src/core/lib/iomgr/poller/eventmanager_libuv.cc +87 -0
- data/src/core/lib/iomgr/poller/eventmanager_libuv.h +88 -0
- data/src/core/lib/iomgr/pollset_custom.cc +5 -5
- data/src/core/lib/iomgr/pollset_set_custom.cc +10 -10
- data/src/core/lib/iomgr/pollset_uv.h +32 -0
- data/src/core/lib/iomgr/pollset_windows.cc +16 -2
- data/src/core/lib/iomgr/port.h +10 -22
- data/src/core/lib/iomgr/python_util.h +46 -0
- data/src/core/lib/iomgr/resolve_address.h +4 -6
- data/src/core/lib/iomgr/resolve_address_custom.cc +49 -68
- data/src/core/lib/iomgr/resolve_address_custom.h +4 -2
- data/src/core/lib/iomgr/resolve_address_posix.cc +20 -24
- data/src/core/lib/iomgr/resolve_address_windows.cc +22 -35
- data/src/core/lib/iomgr/resource_quota.cc +120 -110
- data/src/core/lib/iomgr/resource_quota.h +13 -9
- data/src/core/lib/iomgr/sockaddr_utils.cc +33 -36
- data/src/core/lib/iomgr/sockaddr_utils.h +12 -16
- data/src/core/lib/iomgr/socket_factory_posix.h +2 -3
- data/src/core/lib/iomgr/socket_mutator.h +2 -3
- data/src/core/lib/iomgr/socket_utils_common_posix.cc +140 -82
- data/src/core/lib/iomgr/socket_utils_posix.h +19 -0
- data/src/core/lib/iomgr/socket_windows.cc +6 -7
- data/src/core/lib/iomgr/socket_windows.h +1 -1
- data/src/core/lib/iomgr/tcp_client_cfstream.cc +18 -21
- data/src/core/lib/iomgr/tcp_client_custom.cc +9 -11
- data/src/core/lib/iomgr/tcp_client_posix.cc +47 -59
- data/src/core/lib/iomgr/tcp_client_posix.h +6 -6
- data/src/core/lib/iomgr/tcp_client_windows.cc +12 -13
- data/src/core/lib/iomgr/tcp_custom.cc +58 -36
- data/src/core/lib/iomgr/tcp_custom.h +4 -1
- data/src/core/lib/iomgr/tcp_posix.cc +697 -124
- data/src/core/lib/iomgr/tcp_server.cc +8 -4
- data/src/core/lib/iomgr/tcp_server.h +28 -5
- data/src/core/lib/iomgr/tcp_server_custom.cc +46 -41
- data/src/core/lib/iomgr/tcp_server_posix.cc +102 -46
- data/src/core/lib/iomgr/tcp_server_utils_posix.h +6 -4
- data/src/core/lib/iomgr/tcp_server_utils_posix_common.cc +17 -19
- data/src/core/lib/iomgr/tcp_server_utils_posix_ifaddrs.cc +10 -18
- data/src/core/lib/iomgr/tcp_server_windows.cc +33 -29
- data/src/core/lib/iomgr/tcp_uv.cc +8 -8
- data/src/core/lib/iomgr/tcp_windows.cc +49 -30
- data/src/core/lib/iomgr/time_averaged_stats.h +2 -3
- data/src/core/lib/iomgr/timer.h +2 -1
- data/src/core/lib/iomgr/timer_custom.cc +7 -5
- data/src/core/lib/iomgr/timer_generic.cc +26 -24
- data/src/core/lib/iomgr/timer_generic.h +39 -0
- data/src/core/lib/iomgr/timer_heap.h +2 -3
- data/src/core/lib/iomgr/timer_manager.cc +8 -30
- data/src/core/lib/iomgr/timer_manager.h +2 -0
- data/src/core/lib/iomgr/udp_server.cc +53 -53
- data/src/core/lib/iomgr/udp_server.h +11 -14
- data/src/core/lib/iomgr/unix_sockets_posix.cc +9 -14
- data/src/core/lib/iomgr/unix_sockets_posix.h +3 -1
- data/src/core/lib/iomgr/unix_sockets_posix_noop.cc +5 -2
- data/src/core/lib/iomgr/work_serializer.cc +155 -0
- data/src/core/lib/iomgr/work_serializer.h +65 -0
- data/src/core/lib/json/json.h +209 -68
- data/src/core/lib/json/json_reader.cc +508 -317
- data/src/core/lib/json/json_writer.cc +202 -110
- data/src/core/lib/profiling/basic_timers.cc +2 -2
- data/src/core/lib/security/authorization/authorization_engine.cc +177 -0
- data/src/core/lib/security/authorization/authorization_engine.h +84 -0
- data/src/core/lib/security/authorization/evaluate_args.cc +153 -0
- data/src/core/lib/security/authorization/evaluate_args.h +59 -0
- data/src/core/lib/security/authorization/mock_cel/activation.h +57 -0
- data/src/core/lib/security/authorization/mock_cel/cel_expr_builder_factory.h +42 -0
- data/src/core/lib/security/authorization/mock_cel/cel_expression.h +68 -0
- data/src/core/lib/security/authorization/mock_cel/cel_value.h +93 -0
- data/src/core/lib/security/authorization/mock_cel/evaluator_core.h +67 -0
- data/src/core/lib/security/authorization/mock_cel/flat_expr_builder.h +56 -0
- data/src/core/lib/security/authorization/mock_cel/statusor.h +50 -0
- data/src/core/lib/security/credentials/alts/alts_credentials.cc +10 -7
- data/src/core/lib/security/credentials/alts/check_gcp_environment.cc +1 -1
- data/src/core/lib/security/credentials/alts/check_gcp_environment_windows.cc +45 -57
- data/src/core/lib/security/credentials/alts/grpc_alts_credentials_server_options.cc +1 -1
- data/src/core/lib/security/credentials/composite/composite_credentials.cc +26 -6
- data/src/core/lib/security/credentials/composite/composite_credentials.h +11 -4
- data/src/core/lib/security/credentials/credentials.h +31 -25
- data/src/core/lib/security/credentials/fake/fake_credentials.cc +9 -9
- data/src/core/lib/security/credentials/fake/fake_credentials.h +6 -1
- data/src/core/lib/security/credentials/google_default/credentials_generic.cc +8 -6
- data/src/core/lib/security/credentials/google_default/google_default_credentials.cc +74 -56
- data/src/core/lib/security/credentials/iam/iam_credentials.cc +12 -10
- data/src/core/lib/security/credentials/iam/iam_credentials.h +4 -0
- data/src/core/lib/security/credentials/jwt/json_token.cc +32 -58
- data/src/core/lib/security/credentials/jwt/json_token.h +5 -7
- data/src/core/lib/security/credentials/jwt/jwt_credentials.cc +19 -26
- data/src/core/lib/security/credentials/jwt/jwt_credentials.h +12 -0
- data/src/core/lib/security/credentials/jwt/jwt_verifier.cc +153 -170
- data/src/core/lib/security/credentials/jwt/jwt_verifier.h +4 -6
- data/src/core/lib/security/credentials/local/local_credentials.cc +3 -3
- data/src/core/lib/security/credentials/oauth2/oauth2_credentials.cc +332 -87
- data/src/core/lib/security/credentials/oauth2/oauth2_credentials.h +27 -7
- data/src/core/lib/security/credentials/plugin/plugin_credentials.cc +31 -15
- data/src/core/lib/security/credentials/plugin/plugin_credentials.h +4 -1
- data/src/core/lib/security/credentials/ssl/ssl_credentials.cc +43 -5
- data/src/core/lib/security/credentials/ssl/ssl_credentials.h +12 -2
- data/src/core/lib/security/credentials/tls/grpc_tls_credentials_options.cc +70 -17
- data/src/core/lib/security/credentials/tls/grpc_tls_credentials_options.h +118 -5
- data/src/core/lib/security/credentials/tls/tls_credentials.cc +128 -0
- data/src/core/lib/security/credentials/tls/tls_credentials.h +62 -0
- data/src/core/lib/security/security_connector/alts/alts_security_connector.cc +67 -32
- data/src/core/lib/security/security_connector/alts/alts_security_connector.h +5 -0
- data/src/core/lib/security/security_connector/fake/fake_security_connector.cc +64 -47
- data/src/core/lib/security/security_connector/load_system_roots_fallback.cc +2 -2
- data/src/core/lib/security/security_connector/load_system_roots_linux.cc +9 -5
- data/src/core/lib/security/security_connector/local/local_security_connector.cc +42 -16
- data/src/core/lib/security/security_connector/security_connector.cc +4 -1
- data/src/core/lib/security/security_connector/security_connector.h +22 -20
- data/src/core/lib/security/security_connector/ssl/ssl_security_connector.cc +55 -62
- data/src/core/lib/security/security_connector/ssl/ssl_security_connector.h +8 -5
- data/src/core/lib/security/security_connector/ssl_utils.cc +150 -53
- data/src/core/lib/security/security_connector/ssl_utils.h +41 -17
- data/src/core/lib/security/security_connector/ssl_utils_config.cc +32 -0
- data/src/core/lib/security/security_connector/ssl_utils_config.h +30 -0
- data/src/core/lib/security/security_connector/tls/tls_security_connector.cc +606 -0
- data/src/core/lib/security/security_connector/tls/tls_security_connector.h +183 -0
- data/src/core/lib/security/transport/auth_filters.h +0 -2
- data/src/core/lib/security/transport/client_auth_filter.cc +74 -28
- data/src/core/lib/security/transport/secure_endpoint.cc +16 -9
- data/src/core/lib/security/transport/security_handshaker.cc +103 -43
- data/src/core/lib/security/transport/security_handshaker.h +4 -2
- data/src/core/lib/security/transport/server_auth_filter.cc +18 -17
- data/src/core/lib/security/util/json_util.cc +35 -15
- data/src/core/lib/security/util/json_util.h +5 -3
- data/src/core/lib/slice/b64.cc +3 -4
- data/src/core/lib/slice/b64.h +3 -4
- data/src/core/lib/slice/slice.cc +188 -73
- data/src/core/lib/slice/slice_buffer.cc +55 -26
- data/src/core/lib/slice/slice_intern.cc +164 -64
- data/src/core/lib/slice/slice_internal.h +110 -8
- data/src/core/lib/slice/slice_string_helpers.cc +10 -1
- data/src/core/lib/slice/slice_string_helpers.h +3 -1
- data/src/core/lib/slice/slice_utils.h +200 -0
- data/src/core/lib/surface/byte_buffer_reader.cc +2 -47
- data/src/core/lib/surface/call.cc +166 -117
- data/src/core/lib/surface/call.h +8 -8
- data/src/core/lib/surface/call_log_batch.cc +51 -60
- data/src/core/lib/surface/channel.cc +188 -137
- data/src/core/lib/surface/channel.h +91 -11
- data/src/core/lib/surface/channel_ping.cc +3 -4
- data/src/core/lib/surface/completion_queue.cc +144 -111
- data/src/core/lib/surface/completion_queue.h +6 -3
- data/src/core/lib/surface/completion_queue_factory.cc +1 -1
- data/src/core/lib/surface/event_string.cc +18 -25
- data/src/core/lib/surface/event_string.h +3 -1
- data/src/core/lib/surface/init.cc +6 -2
- data/src/core/lib/surface/init_secure.cc +2 -2
- data/src/core/lib/surface/lame_client.cc +43 -30
- data/src/core/lib/surface/server.cc +1275 -1316
- data/src/core/lib/surface/server.h +373 -52
- data/src/core/lib/surface/validate_metadata.cc +18 -8
- data/src/core/lib/surface/validate_metadata.h +13 -2
- data/src/core/lib/surface/version.cc +2 -2
- data/src/core/lib/transport/authority_override.cc +38 -0
- data/src/core/lib/transport/authority_override.h +32 -0
- data/src/core/lib/transport/byte_stream.cc +5 -7
- data/src/core/lib/transport/byte_stream.h +13 -12
- data/src/core/lib/transport/connectivity_state.cc +118 -98
- data/src/core/lib/transport/connectivity_state.h +114 -50
- data/src/core/lib/transport/error_utils.cc +23 -1
- data/src/core/lib/transport/error_utils.h +6 -0
- data/src/core/lib/transport/metadata.cc +252 -57
- data/src/core/lib/transport/metadata.h +168 -80
- data/src/core/lib/transport/metadata_batch.cc +78 -16
- data/src/core/lib/transport/metadata_batch.h +40 -3
- data/src/core/lib/transport/static_metadata.cc +1169 -495
- data/src/core/lib/transport/static_metadata.h +279 -282
- data/src/core/lib/transport/status_conversion.cc +7 -15
- data/src/core/lib/transport/status_metadata.cc +8 -1
- data/src/core/lib/transport/status_metadata.h +18 -0
- data/src/core/lib/transport/timeout_encoding.cc +7 -0
- data/src/core/lib/transport/timeout_encoding.h +3 -2
- data/src/core/lib/transport/transport.cc +14 -13
- data/src/core/lib/transport/transport.h +48 -8
- data/src/core/lib/transport/transport_op_string.cc +67 -105
- data/src/core/lib/uri/uri_parser.cc +30 -35
- data/src/core/lib/uri/uri_parser.h +5 -4
- data/src/core/plugin_registry/grpc_plugin_registry.cc +36 -4
- data/src/core/tsi/alts/crypt/aes_gcm.cc +0 -2
- data/src/core/tsi/alts/frame_protector/alts_unseal_privacy_integrity_crypter.cc +1 -1
- data/src/core/tsi/alts/handshaker/alts_handshaker_client.cc +414 -120
- data/src/core/tsi/alts/handshaker/alts_handshaker_client.h +8 -4
- data/src/core/tsi/alts/handshaker/alts_shared_resource.cc +1 -1
- data/src/core/tsi/alts/handshaker/alts_shared_resource.h +1 -1
- data/src/core/tsi/alts/handshaker/alts_tsi_handshaker.cc +293 -61
- data/src/core/tsi/alts/handshaker/alts_tsi_handshaker.h +15 -5
- data/src/core/tsi/alts/handshaker/alts_tsi_handshaker_private.h +5 -0
- data/src/core/tsi/alts/handshaker/alts_tsi_utils.cc +10 -6
- data/src/core/tsi/alts/handshaker/alts_tsi_utils.h +4 -3
- data/src/core/tsi/alts/handshaker/transport_security_common_api.cc +76 -48
- data/src/core/tsi/alts/handshaker/transport_security_common_api.h +34 -26
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_record_protocol_common.h +2 -3
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_zero_copy_grpc_protector.cc +12 -2
- data/src/core/tsi/fake_transport_security.cc +22 -21
- data/src/core/tsi/fake_transport_security.h +2 -0
- data/src/core/tsi/local_transport_security.cc +8 -6
- data/src/core/tsi/ssl/session_cache/ssl_session.h +2 -6
- data/src/core/tsi/ssl/session_cache/ssl_session_boringssl.cc +2 -3
- data/src/core/tsi/ssl/session_cache/ssl_session_cache.cc +11 -9
- data/src/core/tsi/ssl/session_cache/ssl_session_cache.h +4 -13
- data/src/core/tsi/ssl/session_cache/ssl_session_openssl.cc +2 -3
- data/src/core/tsi/ssl_transport_security.cc +345 -103
- data/src/core/tsi/ssl_transport_security.h +42 -11
- data/src/core/tsi/ssl_types.h +0 -2
- data/src/core/tsi/transport_security.cc +13 -0
- data/src/core/tsi/transport_security.h +6 -9
- data/src/core/tsi/transport_security_grpc.cc +7 -0
- data/src/core/tsi/transport_security_grpc.h +8 -3
- data/src/core/tsi/transport_security_interface.h +20 -3
- data/src/ruby/bin/math_pb.rb +5 -5
- data/src/ruby/bin/math_services_pb.rb +4 -4
- data/src/ruby/ext/grpc/ext-export.clang +1 -0
- data/src/ruby/ext/grpc/ext-export.gcc +6 -0
- data/src/ruby/ext/grpc/extconf.rb +11 -2
- data/src/ruby/ext/grpc/rb_call.c +13 -4
- data/src/ruby/ext/grpc/rb_call.h +4 -0
- data/src/ruby/ext/grpc/rb_call_credentials.c +61 -13
- data/src/ruby/ext/grpc/rb_channel.c +1 -1
- data/src/ruby/ext/grpc/rb_channel_credentials.c +9 -0
- data/src/ruby/ext/grpc/rb_enable_cpp.cc +22 -0
- data/src/ruby/ext/grpc/rb_grpc.c +1 -42
- data/src/ruby/ext/grpc/rb_grpc_imports.generated.c +16 -6
- data/src/ruby/ext/grpc/rb_grpc_imports.generated.h +28 -13
- data/src/ruby/lib/grpc.rb +2 -0
- data/src/ruby/lib/grpc/core/status_codes.rb +135 -0
- data/src/ruby/lib/grpc/errors.rb +107 -49
- data/src/ruby/lib/grpc/generic/active_call.rb +2 -3
- data/src/ruby/lib/grpc/generic/bidi_call.rb +1 -1
- data/src/ruby/lib/grpc/generic/client_stub.rb +1 -1
- data/src/ruby/lib/grpc/generic/interceptors.rb +5 -5
- data/src/ruby/lib/grpc/generic/rpc_server.rb +11 -12
- data/src/ruby/lib/grpc/generic/service.rb +5 -4
- data/src/ruby/lib/grpc/google_rpc_status_utils.rb +9 -4
- data/src/ruby/lib/grpc/grpc.rb +1 -1
- data/src/ruby/lib/grpc/structs.rb +15 -0
- data/src/ruby/lib/grpc/version.rb +1 -1
- data/src/ruby/pb/generate_proto_ruby.sh +5 -3
- data/src/ruby/pb/grpc/health/v1/health_pb.rb +3 -3
- data/src/ruby/pb/grpc/health/v1/health_services_pb.rb +2 -2
- data/src/ruby/pb/src/proto/grpc/testing/empty_pb.rb +1 -1
- data/src/ruby/pb/src/proto/grpc/testing/messages_pb.rb +39 -13
- data/src/ruby/pb/src/proto/grpc/testing/test_services_pb.rb +43 -11
- data/src/ruby/spec/channel_credentials_spec.rb +10 -0
- data/src/ruby/spec/debug_message_spec.rb +134 -0
- data/src/ruby/spec/errors_spec.rb +1 -0
- data/src/ruby/spec/generic/active_call_spec.rb +19 -8
- data/src/ruby/spec/generic/service_spec.rb +2 -0
- data/src/ruby/spec/google_rpc_status_utils_spec.rb +2 -2
- data/src/ruby/spec/pb/codegen/grpc/testing/package_options_import.proto +22 -0
- data/src/ruby/spec/pb/codegen/grpc/testing/package_options_import2.proto +23 -0
- data/src/ruby/spec/pb/codegen/grpc/testing/package_options_ruby_style.proto +41 -0
- data/src/ruby/spec/pb/codegen/grpc/testing/same_package_service_name.proto +27 -0
- data/src/ruby/spec/pb/codegen/grpc/testing/same_ruby_package_service_name.proto +29 -0
- data/src/ruby/spec/pb/codegen/package_option_spec.rb +79 -29
- data/src/ruby/spec/support/services.rb +10 -4
- data/src/ruby/spec/testdata/ca.pem +18 -13
- data/src/ruby/spec/testdata/client.key +26 -14
- data/src/ruby/spec/testdata/client.pem +18 -12
- data/src/ruby/spec/testdata/server1.key +26 -14
- data/src/ruby/spec/testdata/server1.pem +20 -14
- data/src/ruby/spec/user_agent_spec.rb +74 -0
- data/third_party/abseil-cpp/absl/algorithm/algorithm.h +159 -0
- data/third_party/abseil-cpp/absl/algorithm/container.h +1727 -0
- data/third_party/abseil-cpp/absl/base/attributes.h +621 -0
- data/third_party/abseil-cpp/absl/base/call_once.h +226 -0
- data/third_party/abseil-cpp/absl/base/casts.h +184 -0
- data/third_party/abseil-cpp/absl/base/config.h +671 -0
- data/third_party/abseil-cpp/absl/base/const_init.h +76 -0
- data/third_party/abseil-cpp/absl/base/dynamic_annotations.cc +129 -0
- data/third_party/abseil-cpp/absl/base/dynamic_annotations.h +389 -0
- data/third_party/abseil-cpp/absl/base/internal/atomic_hook.h +200 -0
- data/third_party/abseil-cpp/absl/base/internal/bits.h +218 -0
- data/third_party/abseil-cpp/absl/base/internal/cycleclock.cc +107 -0
- data/third_party/abseil-cpp/absl/base/internal/cycleclock.h +94 -0
- data/third_party/abseil-cpp/absl/base/internal/direct_mmap.h +161 -0
- data/third_party/abseil-cpp/absl/base/internal/endian.h +266 -0
- data/third_party/abseil-cpp/absl/base/internal/errno_saver.h +43 -0
- data/third_party/abseil-cpp/absl/base/internal/exponential_biased.cc +93 -0
- data/third_party/abseil-cpp/absl/base/internal/exponential_biased.h +130 -0
- data/third_party/abseil-cpp/absl/base/internal/hide_ptr.h +51 -0
- data/third_party/abseil-cpp/absl/base/internal/identity.h +37 -0
- data/third_party/abseil-cpp/absl/base/internal/inline_variable.h +107 -0
- data/third_party/abseil-cpp/absl/base/internal/invoke.h +187 -0
- data/third_party/abseil-cpp/absl/base/internal/low_level_alloc.cc +620 -0
- data/third_party/abseil-cpp/absl/base/internal/low_level_alloc.h +126 -0
- data/third_party/abseil-cpp/absl/base/internal/low_level_scheduling.h +107 -0
- data/third_party/abseil-cpp/absl/base/internal/per_thread_tls.h +52 -0
- data/third_party/abseil-cpp/absl/base/internal/raw_logging.cc +240 -0
- data/third_party/abseil-cpp/absl/base/internal/raw_logging.h +183 -0
- data/third_party/abseil-cpp/absl/base/internal/scheduling_mode.h +58 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock.cc +233 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock.h +243 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_akaros.inc +35 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_linux.inc +66 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_posix.inc +46 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_wait.cc +81 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_wait.h +93 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_win32.inc +37 -0
- data/third_party/abseil-cpp/absl/base/internal/sysinfo.cc +416 -0
- data/third_party/abseil-cpp/absl/base/internal/sysinfo.h +66 -0
- data/third_party/abseil-cpp/absl/base/internal/thread_annotations.h +271 -0
- data/third_party/abseil-cpp/absl/base/internal/thread_identity.cc +152 -0
- data/third_party/abseil-cpp/absl/base/internal/thread_identity.h +259 -0
- data/third_party/abseil-cpp/absl/base/internal/throw_delegate.cc +108 -0
- data/third_party/abseil-cpp/absl/base/internal/throw_delegate.h +75 -0
- data/third_party/abseil-cpp/absl/base/internal/tsan_mutex_interface.h +66 -0
- data/third_party/abseil-cpp/absl/base/internal/unaligned_access.h +158 -0
- data/third_party/abseil-cpp/absl/base/internal/unscaledcycleclock.cc +140 -0
- data/third_party/abseil-cpp/absl/base/internal/unscaledcycleclock.h +124 -0
- data/third_party/abseil-cpp/absl/base/log_severity.cc +27 -0
- data/third_party/abseil-cpp/absl/base/log_severity.h +121 -0
- data/third_party/abseil-cpp/absl/base/macros.h +220 -0
- data/third_party/abseil-cpp/absl/base/optimization.h +181 -0
- data/third_party/abseil-cpp/absl/base/options.h +211 -0
- data/third_party/abseil-cpp/absl/base/policy_checks.h +111 -0
- data/third_party/abseil-cpp/absl/base/port.h +26 -0
- data/third_party/abseil-cpp/absl/base/thread_annotations.h +280 -0
- data/third_party/abseil-cpp/absl/container/fixed_array.h +515 -0
- data/third_party/abseil-cpp/absl/container/flat_hash_set.h +503 -0
- data/third_party/abseil-cpp/absl/container/inlined_vector.h +848 -0
- data/third_party/abseil-cpp/absl/container/internal/common.h +202 -0
- data/third_party/abseil-cpp/absl/container/internal/compressed_tuple.h +265 -0
- data/third_party/abseil-cpp/absl/container/internal/container_memory.h +440 -0
- data/third_party/abseil-cpp/absl/container/internal/hash_function_defaults.h +146 -0
- data/third_party/abseil-cpp/absl/container/internal/hash_policy_traits.h +191 -0
- data/third_party/abseil-cpp/absl/container/internal/hashtable_debug_hooks.h +85 -0
- data/third_party/abseil-cpp/absl/container/internal/hashtablez_sampler.cc +269 -0
- data/third_party/abseil-cpp/absl/container/internal/hashtablez_sampler.h +297 -0
- data/third_party/abseil-cpp/absl/container/internal/hashtablez_sampler_force_weak_definition.cc +30 -0
- data/third_party/abseil-cpp/absl/container/internal/have_sse.h +49 -0
- data/third_party/abseil-cpp/absl/container/internal/inlined_vector.h +892 -0
- data/third_party/abseil-cpp/absl/container/internal/layout.h +741 -0
- data/third_party/abseil-cpp/absl/container/internal/raw_hash_set.cc +48 -0
- data/third_party/abseil-cpp/absl/container/internal/raw_hash_set.h +1882 -0
- data/third_party/abseil-cpp/absl/debugging/internal/address_is_readable.cc +138 -0
- data/third_party/abseil-cpp/absl/debugging/internal/address_is_readable.h +32 -0
- data/third_party/abseil-cpp/absl/debugging/internal/demangle.cc +1895 -0
- data/third_party/abseil-cpp/absl/debugging/internal/demangle.h +71 -0
- data/third_party/abseil-cpp/absl/debugging/internal/elf_mem_image.cc +382 -0
- data/third_party/abseil-cpp/absl/debugging/internal/elf_mem_image.h +134 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_aarch64-inl.inc +192 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_arm-inl.inc +125 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_config.h +70 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_generic-inl.inc +99 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_powerpc-inl.inc +248 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_unimplemented-inl.inc +24 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_win32-inl.inc +85 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_x86-inl.inc +346 -0
- data/third_party/abseil-cpp/absl/debugging/internal/symbolize.h +128 -0
- data/third_party/abseil-cpp/absl/debugging/internal/vdso_support.cc +194 -0
- data/third_party/abseil-cpp/absl/debugging/internal/vdso_support.h +158 -0
- data/third_party/abseil-cpp/absl/debugging/stacktrace.cc +140 -0
- data/third_party/abseil-cpp/absl/debugging/stacktrace.h +231 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize.cc +25 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize.h +99 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize_elf.inc +1480 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize_unimplemented.inc +40 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize_win32.inc +81 -0
- data/third_party/abseil-cpp/absl/functional/function_ref.h +139 -0
- data/third_party/abseil-cpp/absl/functional/internal/function_ref.h +106 -0
- data/third_party/abseil-cpp/absl/hash/hash.h +324 -0
- data/third_party/abseil-cpp/absl/hash/internal/city.cc +346 -0
- data/third_party/abseil-cpp/absl/hash/internal/city.h +96 -0
- data/third_party/abseil-cpp/absl/hash/internal/hash.cc +55 -0
- data/third_party/abseil-cpp/absl/hash/internal/hash.h +988 -0
- data/third_party/abseil-cpp/absl/memory/memory.h +695 -0
- data/third_party/abseil-cpp/absl/meta/type_traits.h +759 -0
- data/third_party/abseil-cpp/absl/numeric/int128.cc +404 -0
- data/third_party/abseil-cpp/absl/numeric/int128.h +1091 -0
- data/third_party/abseil-cpp/absl/numeric/int128_have_intrinsic.inc +302 -0
- data/third_party/abseil-cpp/absl/numeric/int128_no_intrinsic.inc +308 -0
- data/third_party/abseil-cpp/absl/status/status.cc +447 -0
- data/third_party/abseil-cpp/absl/status/status.h +428 -0
- data/third_party/abseil-cpp/absl/status/status_payload_printer.cc +43 -0
- data/third_party/abseil-cpp/absl/status/status_payload_printer.h +51 -0
- data/third_party/abseil-cpp/absl/strings/ascii.cc +200 -0
- data/third_party/abseil-cpp/absl/strings/ascii.h +242 -0
- data/third_party/abseil-cpp/absl/strings/charconv.cc +984 -0
- data/third_party/abseil-cpp/absl/strings/charconv.h +119 -0
- data/third_party/abseil-cpp/absl/strings/cord.cc +2019 -0
- data/third_party/abseil-cpp/absl/strings/cord.h +1121 -0
- data/third_party/abseil-cpp/absl/strings/escaping.cc +949 -0
- data/third_party/abseil-cpp/absl/strings/escaping.h +164 -0
- data/third_party/abseil-cpp/absl/strings/internal/char_map.h +156 -0
- data/third_party/abseil-cpp/absl/strings/internal/charconv_bigint.cc +359 -0
- data/third_party/abseil-cpp/absl/strings/internal/charconv_bigint.h +423 -0
- data/third_party/abseil-cpp/absl/strings/internal/charconv_parse.cc +504 -0
- data/third_party/abseil-cpp/absl/strings/internal/charconv_parse.h +99 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_internal.h +151 -0
- data/third_party/abseil-cpp/absl/strings/internal/escaping.cc +180 -0
- data/third_party/abseil-cpp/absl/strings/internal/escaping.h +58 -0
- data/third_party/abseil-cpp/absl/strings/internal/memutil.cc +112 -0
- data/third_party/abseil-cpp/absl/strings/internal/memutil.h +148 -0
- data/third_party/abseil-cpp/absl/strings/internal/ostringstream.cc +36 -0
- data/third_party/abseil-cpp/absl/strings/internal/ostringstream.h +89 -0
- data/third_party/abseil-cpp/absl/strings/internal/resize_uninitialized.h +73 -0
- data/third_party/abseil-cpp/absl/strings/internal/stl_type_traits.h +248 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/arg.cc +388 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/arg.h +432 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/bind.cc +245 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/bind.h +209 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/checker.h +326 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/extension.cc +51 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/extension.h +415 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/float_conversion.cc +493 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/float_conversion.h +23 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/output.cc +72 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/output.h +104 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/parser.cc +334 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/parser.h +333 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_join_internal.h +314 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_split_internal.h +455 -0
- data/third_party/abseil-cpp/absl/strings/internal/utf8.cc +53 -0
- data/third_party/abseil-cpp/absl/strings/internal/utf8.h +50 -0
- data/third_party/abseil-cpp/absl/strings/match.cc +40 -0
- data/third_party/abseil-cpp/absl/strings/match.h +90 -0
- data/third_party/abseil-cpp/absl/strings/numbers.cc +965 -0
- data/third_party/abseil-cpp/absl/strings/numbers.h +266 -0
- data/third_party/abseil-cpp/absl/strings/str_cat.cc +246 -0
- data/third_party/abseil-cpp/absl/strings/str_cat.h +408 -0
- data/third_party/abseil-cpp/absl/strings/str_format.h +537 -0
- data/third_party/abseil-cpp/absl/strings/str_join.h +293 -0
- data/third_party/abseil-cpp/absl/strings/str_replace.cc +82 -0
- data/third_party/abseil-cpp/absl/strings/str_replace.h +219 -0
- data/third_party/abseil-cpp/absl/strings/str_split.cc +139 -0
- data/third_party/abseil-cpp/absl/strings/str_split.h +513 -0
- data/third_party/abseil-cpp/absl/strings/string_view.cc +235 -0
- data/third_party/abseil-cpp/absl/strings/string_view.h +622 -0
- data/third_party/abseil-cpp/absl/strings/strip.h +91 -0
- data/third_party/abseil-cpp/absl/strings/substitute.cc +171 -0
- data/third_party/abseil-cpp/absl/strings/substitute.h +693 -0
- data/third_party/abseil-cpp/absl/synchronization/barrier.cc +52 -0
- data/third_party/abseil-cpp/absl/synchronization/barrier.h +79 -0
- data/third_party/abseil-cpp/absl/synchronization/blocking_counter.cc +57 -0
- data/third_party/abseil-cpp/absl/synchronization/blocking_counter.h +99 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/create_thread_identity.cc +140 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/create_thread_identity.h +60 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/graphcycles.cc +697 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/graphcycles.h +141 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/kernel_timeout.h +155 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/mutex_nonprod.inc +261 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/per_thread_sem.cc +106 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/per_thread_sem.h +115 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/waiter.cc +484 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/waiter.h +159 -0
- data/third_party/abseil-cpp/absl/synchronization/mutex.cc +2728 -0
- data/third_party/abseil-cpp/absl/synchronization/mutex.h +1056 -0
- data/third_party/abseil-cpp/absl/synchronization/notification.cc +78 -0
- data/third_party/abseil-cpp/absl/synchronization/notification.h +123 -0
- data/third_party/abseil-cpp/absl/time/civil_time.cc +175 -0
- data/third_party/abseil-cpp/absl/time/civil_time.h +538 -0
- data/third_party/abseil-cpp/absl/time/clock.cc +569 -0
- data/third_party/abseil-cpp/absl/time/clock.h +74 -0
- data/third_party/abseil-cpp/absl/time/duration.cc +922 -0
- data/third_party/abseil-cpp/absl/time/format.cc +153 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/civil_time.h +332 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/civil_time_detail.h +622 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/time_zone.h +384 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/zone_info_source.h +102 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/civil_time_detail.cc +94 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_fixed.cc +140 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_fixed.h +52 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_format.cc +922 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_if.cc +45 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_if.h +76 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_impl.cc +121 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_impl.h +93 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_info.cc +958 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_info.h +138 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_libc.cc +308 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_libc.h +55 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_lookup.cc +187 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_posix.cc +159 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_posix.h +132 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/tzfile.h +122 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/zone_info_source.cc +115 -0
- data/third_party/abseil-cpp/absl/time/internal/get_current_time_chrono.inc +31 -0
- data/third_party/abseil-cpp/absl/time/internal/get_current_time_posix.inc +24 -0
- data/third_party/abseil-cpp/absl/time/time.cc +499 -0
- data/third_party/abseil-cpp/absl/time/time.h +1584 -0
- data/third_party/abseil-cpp/absl/types/bad_optional_access.cc +48 -0
- data/third_party/abseil-cpp/absl/types/bad_optional_access.h +78 -0
- data/third_party/abseil-cpp/absl/types/bad_variant_access.cc +64 -0
- data/third_party/abseil-cpp/absl/types/bad_variant_access.h +82 -0
- data/third_party/abseil-cpp/absl/types/internal/optional.h +396 -0
- data/third_party/abseil-cpp/absl/types/internal/span.h +128 -0
- data/third_party/abseil-cpp/absl/types/internal/variant.h +1646 -0
- data/third_party/abseil-cpp/absl/types/optional.h +776 -0
- data/third_party/abseil-cpp/absl/types/span.h +713 -0
- data/third_party/abseil-cpp/absl/types/variant.h +861 -0
- data/third_party/abseil-cpp/absl/utility/utility.h +350 -0
- data/third_party/boringssl-with-bazel/err_data.c +1451 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_bitstr.c +271 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_bool.c +123 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_d2i_fp.c +93 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_dup.c +87 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_enum.c +195 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_gentm.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_i2d_fp.c +88 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_int.c +420 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_mbstr.c +305 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_object.c +286 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_octet.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_print.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_strnid.c +313 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_time.c +212 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_type.c +151 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_utctm.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_utf8.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/asn1_lib.c +446 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/asn1_locl.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/asn1_par.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/asn_pack.c +105 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/f_enum.c +93 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/f_int.c +97 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/f_string.c +91 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/tasn_dec.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_enc.c +664 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/tasn_fre.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/tasn_new.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/tasn_typ.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/tasn_utl.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/time_support.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/base64/base64.c +466 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/bio.c +700 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bio/bio_mem.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/connect.c +545 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/fd.c +279 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/file.c +317 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bio/hexdump.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bio/internal.h +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/pair.c +488 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bio/printf.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/socket.c +206 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/socket_helper.c +118 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bn_extra/bn_asn1.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/bn_extra/convert.c +470 -0
- data/third_party/boringssl-with-bazel/src/crypto/buf/buf.c +172 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bytestring/asn1_compat.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/ber.c +265 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/cbb.c +719 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/cbs.c +688 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/internal.h +96 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/unicode.c +155 -0
- data/third_party/boringssl-with-bazel/src/crypto/chacha/chacha.c +184 -0
- data/third_party/boringssl-with-bazel/src/crypto/chacha/internal.h +45 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/cipher_extra.c +143 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/derive_key.c +152 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_aesccm.c +447 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_aesctrhmac.c +283 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_aesgcmsiv.c +891 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_chacha20poly1305.c +418 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cipher_extra/e_null.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cipher_extra/e_rc2.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cipher_extra/e_rc4.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_tls.c +688 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cipher_extra/internal.h +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/tls_cbc.c +492 -0
- data/third_party/boringssl-with-bazel/src/crypto/cmac/cmac.c +278 -0
- data/third_party/boringssl-with-bazel/src/crypto/conf/conf.c +810 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/conf/conf_def.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/conf/internal.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cpu-aarch64-fuchsia.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cpu-aarch64-linux.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-arm-linux.c +220 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-arm-linux.h +201 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cpu-arm.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-intel.c +291 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cpu-ppc64le.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/crypto.c +226 -0
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/curve25519.c +2159 -0
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/curve25519_tables.h +7872 -0
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/internal.h +146 -0
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/spake25519.c +539 -0
- data/third_party/boringssl-with-bazel/src/crypto/dh/check.c +217 -0
- data/third_party/boringssl-with-bazel/src/crypto/dh/dh.c +533 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/dh/dh_asn1.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/dh/params.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/digest_extra/digest_extra.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/dsa/dsa.c +980 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/dsa/dsa_asn1.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/ec_asn1.c +574 -0
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/ec_derive.c +95 -0
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/hash_to_curve.c +385 -0
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/internal.h +56 -0
- data/third_party/boringssl-with-bazel/src/crypto/ecdh_extra/ecdh_extra.c +124 -0
- data/third_party/boringssl-with-bazel/src/crypto/ecdsa_extra/ecdsa_asn1.c +267 -0
- data/third_party/boringssl-with-bazel/src/crypto/engine/engine.c +99 -0
- data/third_party/boringssl-with-bazel/src/crypto/err/err.c +850 -0
- data/third_party/boringssl-with-bazel/src/crypto/err/internal.h +58 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/evp/digestsign.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/evp.c +443 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/evp_asn1.c +547 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/evp_ctx.c +484 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/internal.h +269 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_dsa_asn1.c +273 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_ec.c +286 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_ec_asn1.c +255 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_ed25519.c +104 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_ed25519_asn1.c +221 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_rsa.c +648 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_rsa_asn1.c +194 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_x25519.c +110 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_x25519_asn1.c +248 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/evp/pbkdf.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/evp/print.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/scrypt.c +213 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/evp/sign.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/ex_data.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/aes.c +108 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/aes_nohw.c +1282 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/internal.h +238 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/key_wrap.c +236 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/mode_wrappers.c +122 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bcm.c +263 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/add.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/asm/x86_64-gcc.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/bn.c +445 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/bytes.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/cmp.c +200 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/ctx.c +236 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/div.c +886 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/div_extra.c +87 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/exponentiation.c +1288 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/gcd.c +378 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/gcd_extra.c +325 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/generic.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/internal.h +704 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/jacobi.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/montgomery.c +502 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/montgomery_inv.c +186 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/mul.c +749 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/prime.c +1068 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/random.c +341 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/rsaz_exp.c +226 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/rsaz_exp.h +104 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/shift.c +364 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/sqrt.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/cipher/aead.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/cipher.c +620 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/e_aes.c +1302 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/e_des.c +237 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/internal.h +128 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/delocate.h +89 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/des/des.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/des/internal.h +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/digest/digest.c +271 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/digest/digests.c +296 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/digest/internal.h +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/digest/md32_common.h +268 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec.c +1252 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec_key.c +465 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec_montgomery.c +524 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/felem.c +100 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/internal.h +776 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/oct.c +328 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p224-64.c +1180 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256-x86_64-table.h +9497 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256-x86_64.c +633 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256-x86_64.h +153 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256.c +740 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256_table.h +297 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/scalar.c +175 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/simple.c +357 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/simple_mul.c +270 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/util.c +255 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/wnaf.c +270 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ecdh/ecdh.c +122 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ecdsa/ecdsa.c +328 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/fips_shared_support.c +32 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/hmac/hmac.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/is_fips.c +29 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/md4/md4.c +256 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/md5/internal.h +37 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/md5/md5.c +301 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/cbc.c +167 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/cfb.c +202 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/ctr.c +200 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/gcm.c +729 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/gcm_nohw.c +304 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/internal.h +441 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/ofb.c +96 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/modes/polyval.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/ctrdrbg.c +202 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/fork_detect.c +137 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/fork_detect.h +49 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/getrandom_fillin.h +64 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/internal.h +163 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/rand.c +378 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/urandom.c +391 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/blinding.c +243 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/internal.h +127 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/padding.c +695 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/rsa.c +898 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/rsa_impl.c +1358 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/self_check/self_check.c +716 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/internal.h +53 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/sha/sha1-altivec.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/sha1.c +371 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/sha256.c +343 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/sha512.c +544 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/tls/internal.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/tls/kdf.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/hkdf/hkdf.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/hpke/hpke.c +456 -0
- data/third_party/boringssl-with-bazel/src/crypto/hpke/internal.h +192 -0
- data/third_party/boringssl-with-bazel/src/crypto/hrss/hrss.c +2100 -0
- data/third_party/boringssl-with-bazel/src/crypto/hrss/internal.h +61 -0
- data/third_party/boringssl-with-bazel/src/crypto/internal.h +834 -0
- data/third_party/boringssl-with-bazel/src/crypto/lhash/lhash.c +348 -0
- data/third_party/boringssl-with-bazel/src/crypto/mem.c +373 -0
- data/third_party/boringssl-with-bazel/src/crypto/obj/obj.c +549 -0
- data/third_party/boringssl-with-bazel/src/crypto/obj/obj_dat.h +11585 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/obj/obj_xref.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_all.c +261 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_info.c +360 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_lib.c +777 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_oth.c +87 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_pk8.c +257 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_pkey.c +218 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/pem/pem_x509.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/pem/pem_xaux.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/pkcs7/internal.h +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs7/pkcs7.c +159 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs7/pkcs7_x509.c +385 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs8/internal.h +138 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs8/p5_pbev2.c +316 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs8/pkcs8.c +530 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs8/pkcs8_x509.c +1336 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/poly1305/internal.h +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/poly1305/poly1305.c +318 -0
- data/third_party/boringssl-with-bazel/src/crypto/poly1305/poly1305_arm.c +305 -0
- data/third_party/boringssl-with-bazel/src/crypto/poly1305/poly1305_vec.c +856 -0
- data/third_party/boringssl-with-bazel/src/crypto/pool/internal.h +45 -0
- data/third_party/boringssl-with-bazel/src/crypto/pool/pool.c +220 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/deterministic.c +52 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/rand_extra/forkunsafe.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/fuchsia.c +30 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/rand_extra/rand_extra.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/windows.c +69 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/rc4/rc4.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/refcount_c11.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/refcount_lock.c +53 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/rsa_extra/rsa_asn1.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/rsa_extra/rsa_print.c +22 -0
- data/third_party/boringssl-with-bazel/src/crypto/siphash/siphash.c +82 -0
- data/third_party/boringssl-with-bazel/src/crypto/stack/stack.c +431 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/thread.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/thread_none.c +59 -0
- data/third_party/boringssl-with-bazel/src/crypto/thread_pthread.c +210 -0
- data/third_party/boringssl-with-bazel/src/crypto/thread_win.c +260 -0
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/internal.h +249 -0
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/pmbtoken.c +1227 -0
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/trust_token.c +682 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/a_digest.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/a_sign.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/a_strex.c +653 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/a_verify.c +114 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/algorithm.c +161 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/asn1_gen.c +842 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/by_dir.c +458 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/by_file.c +275 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/charmap.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/i2d_pr.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/internal.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/rsa_pss.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/t_crl.c +125 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/t_req.c +244 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/t_x509.c +544 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/t_x509a.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/vpm_int.h +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509.c +90 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509_att.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_cmp.c +483 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509_d2.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_def.c +103 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509_ext.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_lu.c +834 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_obj.c +198 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_r2x.c +116 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_req.c +351 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_set.c +226 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_trs.c +329 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_txt.c +204 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509_v3.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_vfy.c +2506 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_vpm.c +671 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509cset.c +235 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509name.c +389 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509rset.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509spki.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_algor.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_all.c +399 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_attrib.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_crl.c +563 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_exten.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_info.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_name.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_pkey.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_pubkey.c +214 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_req.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_sig.c +89 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_spki.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_val.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_x509.c +356 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_x509a.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/ext_dat.h +141 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/internal.h +61 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_cache.c +286 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/pcy_data.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/pcy_int.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/pcy_lib.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/pcy_map.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_node.c +189 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_tree.c +842 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_akey.c +207 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_akeya.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_alt.c +629 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_bcons.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_bitst.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_conf.c +463 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_cpols.c +503 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_crld.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_enum.c +100 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_extku.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_genn.c +246 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_ia5.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_info.c +218 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_int.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_lib.c +371 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_ncons.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_ocsp.c +68 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_pci.c +288 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_pcia.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_pcons.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_pku.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_pmaps.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_prn.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_purp.c +882 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_skey.c +155 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_sxnet.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_utl.c +1395 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/aead.h +459 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/aes.h +207 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/arm_arch.h +173 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/asn1.h +911 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/asn1_mac.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/asn1t.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/base.h +575 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/base64.h +190 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/bio.h +933 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/blowfish.h +93 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/bn.h +1057 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/buf.h +137 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/buffer.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/bytestring.h +561 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/cast.h +96 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/chacha.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/cipher.h +638 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/cmac.h +91 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/conf.h +180 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/cpu.h +212 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/crypto.h +149 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/curve25519.h +201 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/des.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/dh.h +319 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/digest.h +331 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/dsa.h +457 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/dtls1.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/e_os2.h +18 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ec.h +424 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ec_key.h +372 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ecdh.h +118 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ecdsa.h +205 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/engine.h +109 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/err.h +465 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/evp.h +1119 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/ex_data.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/hkdf.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/hmac.h +186 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/hrss.h +100 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/is_boringssl.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/lhash.h +282 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/md4.h +108 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/md5.h +109 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/mem.h +175 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/nid.h +4259 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/obj.h +236 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/obj_mac.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/objects.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/opensslconf.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/opensslv.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/ossl_typ.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/pem.h +435 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/pkcs12.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/pkcs7.h +215 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/pkcs8.h +269 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/poly1305.h +49 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/pool.h +102 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/rand.h +111 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/rc4.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ripemd.h +108 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/rsa.h +818 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/safestack.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/sha.h +294 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/siphash.h +37 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/span.h +199 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/srtp.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ssl.h +5247 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ssl3.h +333 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/stack.h +542 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/thread.h +191 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/tls1.h +631 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/trust_token.h +282 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/type_check.h +90 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/x509.h +1292 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/x509_vfy.h +681 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/x509v3.h +831 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/ssl/bio_ssl.cc +0 -0
- data/third_party/boringssl-with-bazel/src/ssl/d1_both.cc +837 -0
- data/third_party/boringssl-with-bazel/src/ssl/d1_lib.cc +268 -0
- data/third_party/boringssl-with-bazel/src/ssl/d1_pkt.cc +273 -0
- data/third_party/boringssl-with-bazel/src/ssl/d1_srtp.cc +232 -0
- data/third_party/boringssl-with-bazel/src/ssl/dtls_method.cc +200 -0
- data/third_party/boringssl-with-bazel/src/ssl/dtls_record.cc +353 -0
- data/third_party/boringssl-with-bazel/src/ssl/handoff.cc +675 -0
- data/third_party/boringssl-with-bazel/src/ssl/handshake.cc +710 -0
- data/third_party/boringssl-with-bazel/src/ssl/handshake_client.cc +1890 -0
- data/third_party/boringssl-with-bazel/src/ssl/handshake_server.cc +1814 -0
- data/third_party/boringssl-with-bazel/src/ssl/internal.h +3579 -0
- data/third_party/boringssl-with-bazel/src/ssl/s3_both.cc +724 -0
- data/third_party/boringssl-with-bazel/src/ssl/s3_lib.cc +221 -0
- data/third_party/boringssl-with-bazel/src/ssl/s3_pkt.cc +458 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_aead_ctx.cc +432 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_asn1.cc +856 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_buffer.cc +306 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_cert.cc +1016 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_cipher.cc +1718 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_file.cc +585 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_key_share.cc +397 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_lib.cc +3053 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_privkey.cc +835 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_session.cc +1313 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_stat.cc +230 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_transcript.cc +277 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_versions.cc +394 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_x509.cc +1358 -0
- data/third_party/boringssl-with-bazel/src/ssl/t1_enc.cc +386 -0
- data/third_party/boringssl-with-bazel/src/ssl/t1_lib.cc +3895 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls13_both.cc +689 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls13_client.cc +1027 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls13_enc.cc +513 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls13_server.cc +1104 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls_method.cc +317 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls_record.cc +705 -0
- data/third_party/boringssl-with-bazel/src/third_party/fiat/curve25519_32.h +981 -0
- data/third_party/boringssl-with-bazel/src/third_party/fiat/curve25519_64.h +619 -0
- data/third_party/boringssl-with-bazel/src/third_party/fiat/p256_32.h +3147 -0
- data/third_party/boringssl-with-bazel/src/third_party/fiat/p256_64.h +1226 -0
- data/third_party/re2/re2/bitmap256.h +117 -0
- data/third_party/re2/re2/bitstate.cc +385 -0
- data/third_party/re2/re2/compile.cc +1279 -0
- data/third_party/re2/re2/dfa.cc +2130 -0
- data/third_party/re2/re2/filtered_re2.cc +121 -0
- data/third_party/re2/re2/filtered_re2.h +109 -0
- data/third_party/re2/re2/mimics_pcre.cc +197 -0
- data/third_party/re2/re2/nfa.cc +713 -0
- data/third_party/re2/re2/onepass.cc +623 -0
- data/third_party/re2/re2/parse.cc +2464 -0
- data/third_party/re2/re2/perl_groups.cc +119 -0
- data/third_party/re2/re2/pod_array.h +55 -0
- data/third_party/re2/re2/prefilter.cc +710 -0
- data/third_party/re2/re2/prefilter.h +108 -0
- data/third_party/re2/re2/prefilter_tree.cc +407 -0
- data/third_party/re2/re2/prefilter_tree.h +139 -0
- data/third_party/re2/re2/prog.cc +988 -0
- data/third_party/re2/re2/prog.h +436 -0
- data/third_party/re2/re2/re2.cc +1362 -0
- data/third_party/re2/re2/re2.h +1002 -0
- data/third_party/re2/re2/regexp.cc +980 -0
- data/third_party/re2/re2/regexp.h +659 -0
- data/third_party/re2/re2/set.cc +154 -0
- data/third_party/re2/re2/set.h +80 -0
- data/third_party/re2/re2/simplify.cc +657 -0
- data/third_party/re2/re2/sparse_array.h +392 -0
- data/third_party/re2/re2/sparse_set.h +264 -0
- data/third_party/re2/re2/stringpiece.cc +65 -0
- data/third_party/re2/re2/stringpiece.h +210 -0
- data/third_party/re2/re2/tostring.cc +351 -0
- data/third_party/re2/re2/unicode_casefold.cc +582 -0
- data/third_party/re2/re2/unicode_casefold.h +78 -0
- data/third_party/re2/re2/unicode_groups.cc +6269 -0
- data/third_party/re2/re2/unicode_groups.h +67 -0
- data/third_party/re2/re2/walker-inl.h +246 -0
- data/third_party/re2/util/benchmark.h +156 -0
- data/third_party/re2/util/flags.h +26 -0
- data/third_party/re2/util/logging.h +109 -0
- data/third_party/re2/util/malloc_counter.h +19 -0
- data/third_party/re2/util/mix.h +41 -0
- data/third_party/re2/util/mutex.h +148 -0
- data/third_party/re2/util/pcre.cc +1025 -0
- data/third_party/re2/util/pcre.h +681 -0
- data/third_party/re2/util/rune.cc +260 -0
- data/third_party/re2/util/strutil.cc +149 -0
- data/third_party/re2/util/strutil.h +21 -0
- data/third_party/re2/util/test.h +50 -0
- data/third_party/re2/util/utf.h +44 -0
- data/third_party/re2/util/util.h +42 -0
- data/third_party/upb/upb/decode.c +621 -0
- data/third_party/upb/upb/decode.h +21 -0
- data/third_party/upb/upb/encode.c +420 -0
- data/third_party/upb/upb/encode.h +21 -0
- data/third_party/upb/upb/msg.c +177 -0
- data/third_party/upb/upb/msg.h +473 -0
- data/third_party/upb/upb/port.c +26 -0
- data/third_party/upb/upb/port_def.inc +179 -0
- data/third_party/upb/upb/port_undef.inc +28 -0
- data/third_party/upb/upb/table.c +880 -0
- data/third_party/upb/upb/table.int.h +466 -0
- data/third_party/upb/upb/upb.c +287 -0
- data/third_party/upb/upb/upb.h +308 -0
- data/third_party/upb/upb/upb.hpp +88 -0
- metadata +1054 -526
- data/src/boringssl/err_data.c +0 -1362
- data/src/core/ext/filters/client_channel/connector.cc +0 -41
- data/src/core/ext/filters/client_channel/health/health.pb.c +0 -23
- data/src/core/ext/filters/client_channel/health/health.pb.h +0 -73
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/proto/grpc/lb/v1/google/protobuf/duration.pb.c +0 -19
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/proto/grpc/lb/v1/google/protobuf/duration.pb.h +0 -54
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/proto/grpc/lb/v1/google/protobuf/timestamp.pb.c +0 -19
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/proto/grpc/lb/v1/google/protobuf/timestamp.pb.h +0 -54
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/proto/grpc/lb/v1/load_balancer.pb.c +0 -89
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/proto/grpc/lb/v1/load_balancer.pb.h +0 -164
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds.cc +0 -2249
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_channel.h +0 -36
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_channel_secure.cc +0 -61
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_client_stats.cc +0 -85
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_client_stats.h +0 -72
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_load_balancer_api.cc +0 -307
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_load_balancer_api.h +0 -89
- data/src/core/ext/filters/client_channel/parse_address.cc +0 -234
- data/src/core/ext/filters/client_channel/parse_address.h +0 -53
- data/src/core/ext/filters/client_channel/proxy_mapper.cc +0 -48
- data/src/core/lib/gpr/host_port.cc +0 -98
- data/src/core/lib/gpr/host_port.h +0 -43
- data/src/core/lib/gpr/mpscq.cc +0 -117
- data/src/core/lib/gpr/mpscq.h +0 -88
- data/src/core/lib/gprpp/abstract.h +0 -37
- data/src/core/lib/gprpp/inlined_vector.h +0 -200
- data/src/core/lib/gprpp/optional.h +0 -48
- data/src/core/lib/gprpp/pair.h +0 -38
- data/src/core/lib/json/json.cc +0 -94
- data/src/core/lib/json/json_common.h +0 -34
- data/src/core/lib/json/json_reader.h +0 -146
- data/src/core/lib/json/json_string.cc +0 -367
- data/src/core/lib/json/json_writer.h +0 -84
- data/src/core/lib/security/credentials/tls/spiffe_credentials.cc +0 -129
- data/src/core/lib/security/credentials/tls/spiffe_credentials.h +0 -62
- data/src/core/lib/security/security_connector/tls/spiffe_security_connector.cc +0 -426
- data/src/core/lib/security/security_connector/tls/spiffe_security_connector.h +0 -122
- data/src/core/lib/security/transport/target_authority_table.cc +0 -75
- data/src/core/lib/security/transport/target_authority_table.h +0 -40
- data/src/core/lib/slice/slice_hash_table.h +0 -205
- data/src/core/lib/slice/slice_weak_hash_table.h +0 -109
- data/src/core/tsi/alts/handshaker/alts_handshaker_service_api.cc +0 -520
- data/src/core/tsi/alts/handshaker/alts_handshaker_service_api.h +0 -323
- data/src/core/tsi/alts/handshaker/alts_handshaker_service_api_util.cc +0 -145
- data/src/core/tsi/alts/handshaker/alts_handshaker_service_api_util.h +0 -149
- data/src/core/tsi/alts/handshaker/altscontext.pb.c +0 -47
- data/src/core/tsi/alts/handshaker/altscontext.pb.h +0 -63
- data/src/core/tsi/alts/handshaker/handshaker.pb.c +0 -122
- data/src/core/tsi/alts/handshaker/handshaker.pb.h +0 -254
- data/src/core/tsi/alts/handshaker/transport_security_common.pb.c +0 -49
- data/src/core/tsi/alts/handshaker/transport_security_common.pb.h +0 -78
- data/src/core/tsi/grpc_shadow_boringssl.h +0 -3006
- data/third_party/boringssl/crypto/asn1/a_bitstr.c +0 -271
- data/third_party/boringssl/crypto/asn1/a_bool.c +0 -110
- data/third_party/boringssl/crypto/asn1/a_d2i_fp.c +0 -297
- data/third_party/boringssl/crypto/asn1/a_dup.c +0 -111
- data/third_party/boringssl/crypto/asn1/a_enum.c +0 -195
- data/third_party/boringssl/crypto/asn1/a_i2d_fp.c +0 -150
- data/third_party/boringssl/crypto/asn1/a_int.c +0 -479
- data/third_party/boringssl/crypto/asn1/a_mbstr.c +0 -411
- data/third_party/boringssl/crypto/asn1/a_object.c +0 -275
- data/third_party/boringssl/crypto/asn1/a_strnid.c +0 -312
- data/third_party/boringssl/crypto/asn1/a_time.c +0 -213
- data/third_party/boringssl/crypto/asn1/a_type.c +0 -151
- data/third_party/boringssl/crypto/asn1/asn1_lib.c +0 -442
- data/third_party/boringssl/crypto/asn1/asn_pack.c +0 -105
- data/third_party/boringssl/crypto/asn1/f_enum.c +0 -93
- data/third_party/boringssl/crypto/asn1/f_int.c +0 -97
- data/third_party/boringssl/crypto/asn1/f_string.c +0 -91
- data/third_party/boringssl/crypto/asn1/tasn_enc.c +0 -662
- data/third_party/boringssl/crypto/base64/base64.c +0 -466
- data/third_party/boringssl/crypto/bio/bio.c +0 -636
- data/third_party/boringssl/crypto/bio/connect.c +0 -542
- data/third_party/boringssl/crypto/bio/fd.c +0 -276
- data/third_party/boringssl/crypto/bio/file.c +0 -315
- data/third_party/boringssl/crypto/bio/pair.c +0 -489
- data/third_party/boringssl/crypto/bio/socket.c +0 -202
- data/third_party/boringssl/crypto/bio/socket_helper.c +0 -114
- data/third_party/boringssl/crypto/bn_extra/convert.c +0 -466
- data/third_party/boringssl/crypto/buf/buf.c +0 -231
- data/third_party/boringssl/crypto/bytestring/ber.c +0 -261
- data/third_party/boringssl/crypto/bytestring/cbb.c +0 -668
- data/third_party/boringssl/crypto/bytestring/cbs.c +0 -618
- data/third_party/boringssl/crypto/bytestring/internal.h +0 -75
- data/third_party/boringssl/crypto/chacha/chacha.c +0 -167
- data/third_party/boringssl/crypto/cipher_extra/cipher_extra.c +0 -114
- data/third_party/boringssl/crypto/cipher_extra/derive_key.c +0 -152
- data/third_party/boringssl/crypto/cipher_extra/e_aesccm.c +0 -203
- data/third_party/boringssl/crypto/cipher_extra/e_aesctrhmac.c +0 -281
- data/third_party/boringssl/crypto/cipher_extra/e_aesgcmsiv.c +0 -867
- data/third_party/boringssl/crypto/cipher_extra/e_chacha20poly1305.c +0 -326
- data/third_party/boringssl/crypto/cipher_extra/e_ssl3.c +0 -460
- data/third_party/boringssl/crypto/cipher_extra/e_tls.c +0 -680
- data/third_party/boringssl/crypto/cipher_extra/tls_cbc.c +0 -482
- data/third_party/boringssl/crypto/cmac/cmac.c +0 -241
- data/third_party/boringssl/crypto/conf/conf.c +0 -803
- data/third_party/boringssl/crypto/cpu-arm-linux.c +0 -363
- data/third_party/boringssl/crypto/cpu-intel.c +0 -288
- data/third_party/boringssl/crypto/crypto.c +0 -198
- data/third_party/boringssl/crypto/curve25519/spake25519.c +0 -539
- data/third_party/boringssl/crypto/dh/check.c +0 -217
- data/third_party/boringssl/crypto/dh/dh.c +0 -519
- data/third_party/boringssl/crypto/dsa/dsa.c +0 -946
- data/third_party/boringssl/crypto/ec_extra/ec_asn1.c +0 -562
- data/third_party/boringssl/crypto/ecdh/ecdh.c +0 -162
- data/third_party/boringssl/crypto/ecdsa_extra/ecdsa_asn1.c +0 -275
- data/third_party/boringssl/crypto/engine/engine.c +0 -98
- data/third_party/boringssl/crypto/err/err.c +0 -847
- data/third_party/boringssl/crypto/err/internal.h +0 -58
- data/third_party/boringssl/crypto/evp/evp.c +0 -362
- data/third_party/boringssl/crypto/evp/evp_asn1.c +0 -337
- data/third_party/boringssl/crypto/evp/evp_ctx.c +0 -446
- data/third_party/boringssl/crypto/evp/internal.h +0 -252
- data/third_party/boringssl/crypto/evp/p_dsa_asn1.c +0 -268
- data/third_party/boringssl/crypto/evp/p_ec.c +0 -239
- data/third_party/boringssl/crypto/evp/p_ec_asn1.c +0 -256
- data/third_party/boringssl/crypto/evp/p_ed25519.c +0 -71
- data/third_party/boringssl/crypto/evp/p_ed25519_asn1.c +0 -190
- data/third_party/boringssl/crypto/evp/p_rsa.c +0 -634
- data/third_party/boringssl/crypto/evp/p_rsa_asn1.c +0 -189
- data/third_party/boringssl/crypto/evp/scrypt.c +0 -209
- data/third_party/boringssl/crypto/fipsmodule/aes/aes.c +0 -1100
- data/third_party/boringssl/crypto/fipsmodule/aes/internal.h +0 -100
- data/third_party/boringssl/crypto/fipsmodule/aes/key_wrap.c +0 -138
- data/third_party/boringssl/crypto/fipsmodule/aes/mode_wrappers.c +0 -112
- data/third_party/boringssl/crypto/fipsmodule/bcm.c +0 -148
- data/third_party/boringssl/crypto/fipsmodule/bn/bn.c +0 -428
- data/third_party/boringssl/crypto/fipsmodule/bn/cmp.c +0 -200
- data/third_party/boringssl/crypto/fipsmodule/bn/ctx.c +0 -303
- data/third_party/boringssl/crypto/fipsmodule/bn/div.c +0 -895
- data/third_party/boringssl/crypto/fipsmodule/bn/exponentiation.c +0 -1356
- data/third_party/boringssl/crypto/fipsmodule/bn/gcd.c +0 -683
- data/third_party/boringssl/crypto/fipsmodule/bn/internal.h +0 -573
- data/third_party/boringssl/crypto/fipsmodule/bn/montgomery.c +0 -526
- data/third_party/boringssl/crypto/fipsmodule/bn/montgomery_inv.c +0 -185
- data/third_party/boringssl/crypto/fipsmodule/bn/mul.c +0 -876
- data/third_party/boringssl/crypto/fipsmodule/bn/prime.c +0 -1154
- data/third_party/boringssl/crypto/fipsmodule/bn/random.c +0 -351
- data/third_party/boringssl/crypto/fipsmodule/bn/rsaz_exp.c +0 -231
- data/third_party/boringssl/crypto/fipsmodule/bn/rsaz_exp.h +0 -33
- data/third_party/boringssl/crypto/fipsmodule/bn/shift.c +0 -364
- data/third_party/boringssl/crypto/fipsmodule/cipher/cipher.c +0 -615
- data/third_party/boringssl/crypto/fipsmodule/cipher/e_aes.c +0 -1437
- data/third_party/boringssl/crypto/fipsmodule/cipher/e_des.c +0 -233
- data/third_party/boringssl/crypto/fipsmodule/cipher/internal.h +0 -129
- data/third_party/boringssl/crypto/fipsmodule/delocate.h +0 -88
- data/third_party/boringssl/crypto/fipsmodule/digest/digest.c +0 -256
- data/third_party/boringssl/crypto/fipsmodule/digest/digests.c +0 -280
- data/third_party/boringssl/crypto/fipsmodule/digest/md32_common.h +0 -268
- data/third_party/boringssl/crypto/fipsmodule/ec/ec.c +0 -974
- data/third_party/boringssl/crypto/fipsmodule/ec/ec_key.c +0 -453
- data/third_party/boringssl/crypto/fipsmodule/ec/ec_montgomery.c +0 -270
- data/third_party/boringssl/crypto/fipsmodule/ec/internal.h +0 -337
- data/third_party/boringssl/crypto/fipsmodule/ec/oct.c +0 -373
- data/third_party/boringssl/crypto/fipsmodule/ec/p224-64.c +0 -1104
- data/third_party/boringssl/crypto/fipsmodule/ec/p256-x86_64-table.h +0 -9503
- data/third_party/boringssl/crypto/fipsmodule/ec/p256-x86_64.c +0 -447
- data/third_party/boringssl/crypto/fipsmodule/ec/p256-x86_64.h +0 -117
- data/third_party/boringssl/crypto/fipsmodule/ec/simple.c +0 -1046
- data/third_party/boringssl/crypto/fipsmodule/ec/util.c +0 -104
- data/third_party/boringssl/crypto/fipsmodule/ec/wnaf.c +0 -354
- data/third_party/boringssl/crypto/fipsmodule/ecdsa/ecdsa.c +0 -458
- data/third_party/boringssl/crypto/fipsmodule/is_fips.c +0 -27
- data/third_party/boringssl/crypto/fipsmodule/md4/md4.c +0 -254
- data/third_party/boringssl/crypto/fipsmodule/md5/md5.c +0 -298
- data/third_party/boringssl/crypto/fipsmodule/modes/cbc.c +0 -211
- data/third_party/boringssl/crypto/fipsmodule/modes/ccm.c +0 -256
- data/third_party/boringssl/crypto/fipsmodule/modes/cfb.c +0 -234
- data/third_party/boringssl/crypto/fipsmodule/modes/ctr.c +0 -220
- data/third_party/boringssl/crypto/fipsmodule/modes/gcm.c +0 -1063
- data/third_party/boringssl/crypto/fipsmodule/modes/internal.h +0 -388
- data/third_party/boringssl/crypto/fipsmodule/modes/ofb.c +0 -95
- data/third_party/boringssl/crypto/fipsmodule/rand/ctrdrbg.c +0 -202
- data/third_party/boringssl/crypto/fipsmodule/rand/internal.h +0 -92
- data/third_party/boringssl/crypto/fipsmodule/rand/rand.c +0 -358
- data/third_party/boringssl/crypto/fipsmodule/rand/urandom.c +0 -302
- data/third_party/boringssl/crypto/fipsmodule/rsa/blinding.c +0 -239
- data/third_party/boringssl/crypto/fipsmodule/rsa/internal.h +0 -126
- data/third_party/boringssl/crypto/fipsmodule/rsa/padding.c +0 -692
- data/third_party/boringssl/crypto/fipsmodule/rsa/rsa.c +0 -875
- data/third_party/boringssl/crypto/fipsmodule/rsa/rsa_impl.c +0 -1218
- data/third_party/boringssl/crypto/fipsmodule/self_check/self_check.c +0 -581
- data/third_party/boringssl/crypto/fipsmodule/sha/sha1.c +0 -375
- data/third_party/boringssl/crypto/fipsmodule/sha/sha256.c +0 -337
- data/third_party/boringssl/crypto/fipsmodule/sha/sha512.c +0 -608
- data/third_party/boringssl/crypto/internal.h +0 -739
- data/third_party/boringssl/crypto/lhash/lhash.c +0 -336
- data/third_party/boringssl/crypto/mem.c +0 -235
- data/third_party/boringssl/crypto/obj/obj.c +0 -554
- data/third_party/boringssl/crypto/obj/obj_dat.h +0 -6244
- data/third_party/boringssl/crypto/pem/pem_all.c +0 -262
- data/third_party/boringssl/crypto/pem/pem_info.c +0 -379
- data/third_party/boringssl/crypto/pem/pem_lib.c +0 -776
- data/third_party/boringssl/crypto/pem/pem_oth.c +0 -88
- data/third_party/boringssl/crypto/pem/pem_pk8.c +0 -258
- data/third_party/boringssl/crypto/pem/pem_pkey.c +0 -227
- data/third_party/boringssl/crypto/pkcs7/pkcs7.c +0 -166
- data/third_party/boringssl/crypto/pkcs7/pkcs7_x509.c +0 -233
- data/third_party/boringssl/crypto/pkcs8/internal.h +0 -120
- data/third_party/boringssl/crypto/pkcs8/p5_pbev2.c +0 -307
- data/third_party/boringssl/crypto/pkcs8/pkcs8.c +0 -513
- data/third_party/boringssl/crypto/pkcs8/pkcs8_x509.c +0 -789
- data/third_party/boringssl/crypto/poly1305/poly1305.c +0 -318
- data/third_party/boringssl/crypto/poly1305/poly1305_arm.c +0 -304
- data/third_party/boringssl/crypto/poly1305/poly1305_vec.c +0 -839
- data/third_party/boringssl/crypto/pool/internal.h +0 -45
- data/third_party/boringssl/crypto/pool/pool.c +0 -200
- data/third_party/boringssl/crypto/rand_extra/deterministic.c +0 -48
- data/third_party/boringssl/crypto/rand_extra/fuchsia.c +0 -43
- data/third_party/boringssl/crypto/rand_extra/windows.c +0 -53
- data/third_party/boringssl/crypto/refcount_lock.c +0 -53
- data/third_party/boringssl/crypto/stack/stack.c +0 -380
- data/third_party/boringssl/crypto/thread_none.c +0 -59
- data/third_party/boringssl/crypto/thread_pthread.c +0 -206
- data/third_party/boringssl/crypto/thread_win.c +0 -237
- data/third_party/boringssl/crypto/x509/a_strex.c +0 -633
- data/third_party/boringssl/crypto/x509/a_verify.c +0 -115
- data/third_party/boringssl/crypto/x509/algorithm.c +0 -153
- data/third_party/boringssl/crypto/x509/asn1_gen.c +0 -841
- data/third_party/boringssl/crypto/x509/by_dir.c +0 -451
- data/third_party/boringssl/crypto/x509/by_file.c +0 -274
- data/third_party/boringssl/crypto/x509/t_crl.c +0 -128
- data/third_party/boringssl/crypto/x509/t_req.c +0 -246
- data/third_party/boringssl/crypto/x509/t_x509.c +0 -547
- data/third_party/boringssl/crypto/x509/x509.c +0 -157
- data/third_party/boringssl/crypto/x509/x509_cmp.c +0 -477
- data/third_party/boringssl/crypto/x509/x509_def.c +0 -103
- data/third_party/boringssl/crypto/x509/x509_lu.c +0 -725
- data/third_party/boringssl/crypto/x509/x509_obj.c +0 -198
- data/third_party/boringssl/crypto/x509/x509_r2x.c +0 -117
- data/third_party/boringssl/crypto/x509/x509_req.c +0 -322
- data/third_party/boringssl/crypto/x509/x509_set.c +0 -164
- data/third_party/boringssl/crypto/x509/x509_trs.c +0 -326
- data/third_party/boringssl/crypto/x509/x509_txt.c +0 -205
- data/third_party/boringssl/crypto/x509/x509_vfy.c +0 -2476
- data/third_party/boringssl/crypto/x509/x509_vpm.c +0 -670
- data/third_party/boringssl/crypto/x509/x509cset.c +0 -170
- data/third_party/boringssl/crypto/x509/x509name.c +0 -389
- data/third_party/boringssl/crypto/x509/x_all.c +0 -501
- data/third_party/boringssl/crypto/x509/x_crl.c +0 -541
- data/third_party/boringssl/crypto/x509/x_pubkey.c +0 -368
- data/third_party/boringssl/crypto/x509/x_sig.c +0 -69
- data/third_party/boringssl/crypto/x509/x_x509.c +0 -328
- data/third_party/boringssl/crypto/x509v3/ext_dat.h +0 -143
- data/third_party/boringssl/crypto/x509v3/pcy_cache.c +0 -284
- data/third_party/boringssl/crypto/x509v3/pcy_node.c +0 -188
- data/third_party/boringssl/crypto/x509v3/pcy_tree.c +0 -840
- data/third_party/boringssl/crypto/x509v3/v3_akey.c +0 -204
- data/third_party/boringssl/crypto/x509v3/v3_alt.c +0 -623
- data/third_party/boringssl/crypto/x509v3/v3_conf.c +0 -462
- data/third_party/boringssl/crypto/x509v3/v3_cpols.c +0 -502
- data/third_party/boringssl/crypto/x509v3/v3_enum.c +0 -100
- data/third_party/boringssl/crypto/x509v3/v3_genn.c +0 -251
- data/third_party/boringssl/crypto/x509v3/v3_info.c +0 -219
- data/third_party/boringssl/crypto/x509v3/v3_lib.c +0 -370
- data/third_party/boringssl/crypto/x509v3/v3_pci.c +0 -287
- data/third_party/boringssl/crypto/x509v3/v3_purp.c +0 -866
- data/third_party/boringssl/crypto/x509v3/v3_skey.c +0 -152
- data/third_party/boringssl/crypto/x509v3/v3_utl.c +0 -1352
- data/third_party/boringssl/include/openssl/aead.h +0 -433
- data/third_party/boringssl/include/openssl/aes.h +0 -170
- data/third_party/boringssl/include/openssl/arm_arch.h +0 -121
- data/third_party/boringssl/include/openssl/asn1.h +0 -981
- data/third_party/boringssl/include/openssl/base.h +0 -457
- data/third_party/boringssl/include/openssl/base64.h +0 -187
- data/third_party/boringssl/include/openssl/bio.h +0 -902
- data/third_party/boringssl/include/openssl/blowfish.h +0 -93
- data/third_party/boringssl/include/openssl/bn.h +0 -1019
- data/third_party/boringssl/include/openssl/buf.h +0 -137
- data/third_party/boringssl/include/openssl/bytestring.h +0 -505
- data/third_party/boringssl/include/openssl/cast.h +0 -96
- data/third_party/boringssl/include/openssl/cipher.h +0 -608
- data/third_party/boringssl/include/openssl/cmac.h +0 -87
- data/third_party/boringssl/include/openssl/conf.h +0 -183
- data/third_party/boringssl/include/openssl/cpu.h +0 -196
- data/third_party/boringssl/include/openssl/crypto.h +0 -122
- data/third_party/boringssl/include/openssl/curve25519.h +0 -201
- data/third_party/boringssl/include/openssl/dh.h +0 -298
- data/third_party/boringssl/include/openssl/digest.h +0 -316
- data/third_party/boringssl/include/openssl/dsa.h +0 -435
- data/third_party/boringssl/include/openssl/ec.h +0 -413
- data/third_party/boringssl/include/openssl/ec_key.h +0 -342
- data/third_party/boringssl/include/openssl/ecdh.h +0 -101
- data/third_party/boringssl/include/openssl/ecdsa.h +0 -199
- data/third_party/boringssl/include/openssl/engine.h +0 -109
- data/third_party/boringssl/include/openssl/err.h +0 -458
- data/third_party/boringssl/include/openssl/evp.h +0 -873
- data/third_party/boringssl/include/openssl/hmac.h +0 -186
- data/third_party/boringssl/include/openssl/lhash.h +0 -174
- data/third_party/boringssl/include/openssl/lhash_macros.h +0 -174
- data/third_party/boringssl/include/openssl/md4.h +0 -106
- data/third_party/boringssl/include/openssl/md5.h +0 -107
- data/third_party/boringssl/include/openssl/mem.h +0 -156
- data/third_party/boringssl/include/openssl/nid.h +0 -4242
- data/third_party/boringssl/include/openssl/obj.h +0 -233
- data/third_party/boringssl/include/openssl/pem.h +0 -397
- data/third_party/boringssl/include/openssl/pkcs7.h +0 -82
- data/third_party/boringssl/include/openssl/pkcs8.h +0 -230
- data/third_party/boringssl/include/openssl/poly1305.h +0 -51
- data/third_party/boringssl/include/openssl/pool.h +0 -91
- data/third_party/boringssl/include/openssl/rand.h +0 -125
- data/third_party/boringssl/include/openssl/ripemd.h +0 -107
- data/third_party/boringssl/include/openssl/rsa.h +0 -756
- data/third_party/boringssl/include/openssl/sha.h +0 -256
- data/third_party/boringssl/include/openssl/span.h +0 -191
- data/third_party/boringssl/include/openssl/ssl.h +0 -4740
- data/third_party/boringssl/include/openssl/ssl3.h +0 -332
- data/third_party/boringssl/include/openssl/stack.h +0 -485
- data/third_party/boringssl/include/openssl/thread.h +0 -191
- data/third_party/boringssl/include/openssl/tls1.h +0 -618
- data/third_party/boringssl/include/openssl/type_check.h +0 -91
- data/third_party/boringssl/include/openssl/x509.h +0 -1180
- data/third_party/boringssl/include/openssl/x509_vfy.h +0 -614
- data/third_party/boringssl/include/openssl/x509v3.h +0 -827
- data/third_party/boringssl/ssl/custom_extensions.cc +0 -265
- data/third_party/boringssl/ssl/d1_both.cc +0 -851
- data/third_party/boringssl/ssl/d1_lib.cc +0 -267
- data/third_party/boringssl/ssl/d1_pkt.cc +0 -274
- data/third_party/boringssl/ssl/d1_srtp.cc +0 -232
- data/third_party/boringssl/ssl/dtls_method.cc +0 -193
- data/third_party/boringssl/ssl/dtls_record.cc +0 -353
- data/third_party/boringssl/ssl/handoff.cc +0 -285
- data/third_party/boringssl/ssl/handshake.cc +0 -630
- data/third_party/boringssl/ssl/handshake_client.cc +0 -1842
- data/third_party/boringssl/ssl/handshake_server.cc +0 -1674
- data/third_party/boringssl/ssl/internal.h +0 -3064
- data/third_party/boringssl/ssl/s3_both.cc +0 -585
- data/third_party/boringssl/ssl/s3_lib.cc +0 -226
- data/third_party/boringssl/ssl/s3_pkt.cc +0 -425
- data/third_party/boringssl/ssl/ssl_aead_ctx.cc +0 -412
- data/third_party/boringssl/ssl/ssl_asn1.cc +0 -844
- data/third_party/boringssl/ssl/ssl_buffer.cc +0 -286
- data/third_party/boringssl/ssl/ssl_cert.cc +0 -913
- data/third_party/boringssl/ssl/ssl_cipher.cc +0 -1781
- data/third_party/boringssl/ssl/ssl_file.cc +0 -583
- data/third_party/boringssl/ssl/ssl_key_share.cc +0 -252
- data/third_party/boringssl/ssl/ssl_lib.cc +0 -2719
- data/third_party/boringssl/ssl/ssl_privkey.cc +0 -494
- data/third_party/boringssl/ssl/ssl_session.cc +0 -1221
- data/third_party/boringssl/ssl/ssl_stat.cc +0 -224
- data/third_party/boringssl/ssl/ssl_transcript.cc +0 -398
- data/third_party/boringssl/ssl/ssl_versions.cc +0 -399
- data/third_party/boringssl/ssl/ssl_x509.cc +0 -1297
- data/third_party/boringssl/ssl/t1_enc.cc +0 -452
- data/third_party/boringssl/ssl/t1_lib.cc +0 -3783
- data/third_party/boringssl/ssl/tls13_both.cc +0 -559
- data/third_party/boringssl/ssl/tls13_client.cc +0 -891
- data/third_party/boringssl/ssl/tls13_enc.cc +0 -493
- data/third_party/boringssl/ssl/tls13_server.cc +0 -1022
- data/third_party/boringssl/ssl/tls_method.cc +0 -274
- data/third_party/boringssl/ssl/tls_record.cc +0 -703
- data/third_party/boringssl/third_party/fiat/curve25519.c +0 -3230
- data/third_party/boringssl/third_party/fiat/curve25519_tables.h +0 -7880
- data/third_party/boringssl/third_party/fiat/internal.h +0 -154
- data/third_party/boringssl/third_party/fiat/p256.c +0 -1824
- data/third_party/nanopb/pb.h +0 -579
- data/third_party/nanopb/pb_common.c +0 -97
- data/third_party/nanopb/pb_common.h +0 -42
- data/third_party/nanopb/pb_decode.c +0 -1347
- data/third_party/nanopb/pb_decode.h +0 -149
- data/third_party/nanopb/pb_encode.c +0 -696
- data/third_party/nanopb/pb_encode.h +0 -154
@@ -1,1674 +0,0 @@
|
|
1
|
-
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
|
2
|
-
* All rights reserved.
|
3
|
-
*
|
4
|
-
* This package is an SSL implementation written
|
5
|
-
* by Eric Young (eay@cryptsoft.com).
|
6
|
-
* The implementation was written so as to conform with Netscapes SSL.
|
7
|
-
*
|
8
|
-
* This library is free for commercial and non-commercial use as long as
|
9
|
-
* the following conditions are aheared to. The following conditions
|
10
|
-
* apply to all code found in this distribution, be it the RC4, RSA,
|
11
|
-
* lhash, DES, etc., code; not just the SSL code. The SSL documentation
|
12
|
-
* included with this distribution is covered by the same copyright terms
|
13
|
-
* except that the holder is Tim Hudson (tjh@cryptsoft.com).
|
14
|
-
*
|
15
|
-
* Copyright remains Eric Young's, and as such any Copyright notices in
|
16
|
-
* the code are not to be removed.
|
17
|
-
* If this package is used in a product, Eric Young should be given attribution
|
18
|
-
* as the author of the parts of the library used.
|
19
|
-
* This can be in the form of a textual message at program startup or
|
20
|
-
* in documentation (online or textual) provided with the package.
|
21
|
-
*
|
22
|
-
* Redistribution and use in source and binary forms, with or without
|
23
|
-
* modification, are permitted provided that the following conditions
|
24
|
-
* are met:
|
25
|
-
* 1. Redistributions of source code must retain the copyright
|
26
|
-
* notice, this list of conditions and the following disclaimer.
|
27
|
-
* 2. Redistributions in binary form must reproduce the above copyright
|
28
|
-
* notice, this list of conditions and the following disclaimer in the
|
29
|
-
* documentation and/or other materials provided with the distribution.
|
30
|
-
* 3. All advertising materials mentioning features or use of this software
|
31
|
-
* must display the following acknowledgement:
|
32
|
-
* "This product includes cryptographic software written by
|
33
|
-
* Eric Young (eay@cryptsoft.com)"
|
34
|
-
* The word 'cryptographic' can be left out if the rouines from the library
|
35
|
-
* being used are not cryptographic related :-).
|
36
|
-
* 4. If you include any Windows specific code (or a derivative thereof) from
|
37
|
-
* the apps directory (application code) you must include an acknowledgement:
|
38
|
-
* "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
|
39
|
-
*
|
40
|
-
* THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
|
41
|
-
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
42
|
-
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
43
|
-
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
44
|
-
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
45
|
-
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
46
|
-
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
47
|
-
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
48
|
-
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
49
|
-
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
50
|
-
* SUCH DAMAGE.
|
51
|
-
*
|
52
|
-
* The licence and distribution terms for any publically available version or
|
53
|
-
* derivative of this code cannot be changed. i.e. this code cannot simply be
|
54
|
-
* copied and put under another distribution licence
|
55
|
-
* [including the GNU Public Licence.]
|
56
|
-
*/
|
57
|
-
/* ====================================================================
|
58
|
-
* Copyright (c) 1998-2007 The OpenSSL Project. All rights reserved.
|
59
|
-
*
|
60
|
-
* Redistribution and use in source and binary forms, with or without
|
61
|
-
* modification, are permitted provided that the following conditions
|
62
|
-
* are met:
|
63
|
-
*
|
64
|
-
* 1. Redistributions of source code must retain the above copyright
|
65
|
-
* notice, this list of conditions and the following disclaimer.
|
66
|
-
*
|
67
|
-
* 2. Redistributions in binary form must reproduce the above copyright
|
68
|
-
* notice, this list of conditions and the following disclaimer in
|
69
|
-
* the documentation and/or other materials provided with the
|
70
|
-
* distribution.
|
71
|
-
*
|
72
|
-
* 3. All advertising materials mentioning features or use of this
|
73
|
-
* software must display the following acknowledgment:
|
74
|
-
* "This product includes software developed by the OpenSSL Project
|
75
|
-
* for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
|
76
|
-
*
|
77
|
-
* 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
|
78
|
-
* endorse or promote products derived from this software without
|
79
|
-
* prior written permission. For written permission, please contact
|
80
|
-
* openssl-core@openssl.org.
|
81
|
-
*
|
82
|
-
* 5. Products derived from this software may not be called "OpenSSL"
|
83
|
-
* nor may "OpenSSL" appear in their names without prior written
|
84
|
-
* permission of the OpenSSL Project.
|
85
|
-
*
|
86
|
-
* 6. Redistributions of any form whatsoever must retain the following
|
87
|
-
* acknowledgment:
|
88
|
-
* "This product includes software developed by the OpenSSL Project
|
89
|
-
* for use in the OpenSSL Toolkit (http://www.openssl.org/)"
|
90
|
-
*
|
91
|
-
* THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
|
92
|
-
* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
93
|
-
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
|
94
|
-
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
|
95
|
-
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
96
|
-
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
|
97
|
-
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
|
98
|
-
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
99
|
-
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
|
100
|
-
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
101
|
-
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
|
102
|
-
* OF THE POSSIBILITY OF SUCH DAMAGE.
|
103
|
-
* ====================================================================
|
104
|
-
*
|
105
|
-
* This product includes cryptographic software written by Eric Young
|
106
|
-
* (eay@cryptsoft.com). This product includes software written by Tim
|
107
|
-
* Hudson (tjh@cryptsoft.com).
|
108
|
-
*
|
109
|
-
*/
|
110
|
-
/* ====================================================================
|
111
|
-
* Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
|
112
|
-
*
|
113
|
-
* Portions of the attached software ("Contribution") are developed by
|
114
|
-
* SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project.
|
115
|
-
*
|
116
|
-
* The Contribution is licensed pursuant to the OpenSSL open source
|
117
|
-
* license provided above.
|
118
|
-
*
|
119
|
-
* ECC cipher suite support in OpenSSL originally written by
|
120
|
-
* Vipul Gupta and Sumit Gupta of Sun Microsystems Laboratories.
|
121
|
-
*
|
122
|
-
*/
|
123
|
-
/* ====================================================================
|
124
|
-
* Copyright 2005 Nokia. All rights reserved.
|
125
|
-
*
|
126
|
-
* The portions of the attached software ("Contribution") is developed by
|
127
|
-
* Nokia Corporation and is licensed pursuant to the OpenSSL open source
|
128
|
-
* license.
|
129
|
-
*
|
130
|
-
* The Contribution, originally written by Mika Kousa and Pasi Eronen of
|
131
|
-
* Nokia Corporation, consists of the "PSK" (Pre-Shared Key) ciphersuites
|
132
|
-
* support (see RFC 4279) to OpenSSL.
|
133
|
-
*
|
134
|
-
* No patent licenses or other rights except those expressly stated in
|
135
|
-
* the OpenSSL open source license shall be deemed granted or received
|
136
|
-
* expressly, by implication, estoppel, or otherwise.
|
137
|
-
*
|
138
|
-
* No assurances are provided by Nokia that the Contribution does not
|
139
|
-
* infringe the patent or other intellectual property rights of any third
|
140
|
-
* party or that the license provides you with all the necessary rights
|
141
|
-
* to make use of the Contribution.
|
142
|
-
*
|
143
|
-
* THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. IN
|
144
|
-
* ADDITION TO THE DISCLAIMERS INCLUDED IN THE LICENSE, NOKIA
|
145
|
-
* SPECIFICALLY DISCLAIMS ANY LIABILITY FOR CLAIMS BROUGHT BY YOU OR ANY
|
146
|
-
* OTHER ENTITY BASED ON INFRINGEMENT OF INTELLECTUAL PROPERTY RIGHTS OR
|
147
|
-
* OTHERWISE. */
|
148
|
-
|
149
|
-
#include <openssl/ssl.h>
|
150
|
-
|
151
|
-
#include <assert.h>
|
152
|
-
#include <string.h>
|
153
|
-
|
154
|
-
#include <openssl/bn.h>
|
155
|
-
#include <openssl/buf.h>
|
156
|
-
#include <openssl/bytestring.h>
|
157
|
-
#include <openssl/cipher.h>
|
158
|
-
#include <openssl/ec.h>
|
159
|
-
#include <openssl/ecdsa.h>
|
160
|
-
#include <openssl/err.h>
|
161
|
-
#include <openssl/evp.h>
|
162
|
-
#include <openssl/hmac.h>
|
163
|
-
#include <openssl/md5.h>
|
164
|
-
#include <openssl/mem.h>
|
165
|
-
#include <openssl/nid.h>
|
166
|
-
#include <openssl/rand.h>
|
167
|
-
#include <openssl/x509.h>
|
168
|
-
|
169
|
-
#include "internal.h"
|
170
|
-
#include "../crypto/internal.h"
|
171
|
-
|
172
|
-
|
173
|
-
namespace bssl {
|
174
|
-
|
175
|
-
enum ssl_server_hs_state_t {
|
176
|
-
state_start_accept = 0,
|
177
|
-
state_read_client_hello,
|
178
|
-
state_select_certificate,
|
179
|
-
state_tls13,
|
180
|
-
state_select_parameters,
|
181
|
-
state_send_server_hello,
|
182
|
-
state_send_server_certificate,
|
183
|
-
state_send_server_key_exchange,
|
184
|
-
state_send_server_hello_done,
|
185
|
-
state_read_client_certificate,
|
186
|
-
state_verify_client_certificate,
|
187
|
-
state_read_client_key_exchange,
|
188
|
-
state_read_client_certificate_verify,
|
189
|
-
state_read_change_cipher_spec,
|
190
|
-
state_process_change_cipher_spec,
|
191
|
-
state_read_next_proto,
|
192
|
-
state_read_channel_id,
|
193
|
-
state_read_client_finished,
|
194
|
-
state_send_server_finished,
|
195
|
-
state_finish_server_handshake,
|
196
|
-
state_done,
|
197
|
-
};
|
198
|
-
|
199
|
-
int ssl_client_cipher_list_contains_cipher(const SSL_CLIENT_HELLO *client_hello,
|
200
|
-
uint16_t id) {
|
201
|
-
CBS cipher_suites;
|
202
|
-
CBS_init(&cipher_suites, client_hello->cipher_suites,
|
203
|
-
client_hello->cipher_suites_len);
|
204
|
-
|
205
|
-
while (CBS_len(&cipher_suites) > 0) {
|
206
|
-
uint16_t got_id;
|
207
|
-
if (!CBS_get_u16(&cipher_suites, &got_id)) {
|
208
|
-
return 0;
|
209
|
-
}
|
210
|
-
|
211
|
-
if (got_id == id) {
|
212
|
-
return 1;
|
213
|
-
}
|
214
|
-
}
|
215
|
-
|
216
|
-
return 0;
|
217
|
-
}
|
218
|
-
|
219
|
-
static int negotiate_version(SSL_HANDSHAKE *hs, uint8_t *out_alert,
|
220
|
-
const SSL_CLIENT_HELLO *client_hello) {
|
221
|
-
SSL *const ssl = hs->ssl;
|
222
|
-
assert(!ssl->s3->have_version);
|
223
|
-
CBS supported_versions, versions;
|
224
|
-
if (ssl_client_hello_get_extension(client_hello, &supported_versions,
|
225
|
-
TLSEXT_TYPE_supported_versions)) {
|
226
|
-
if (!CBS_get_u8_length_prefixed(&supported_versions, &versions) ||
|
227
|
-
CBS_len(&supported_versions) != 0 ||
|
228
|
-
CBS_len(&versions) == 0) {
|
229
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_DECODE_ERROR);
|
230
|
-
*out_alert = SSL_AD_DECODE_ERROR;
|
231
|
-
return 0;
|
232
|
-
}
|
233
|
-
} else {
|
234
|
-
// Convert the ClientHello version to an equivalent supported_versions
|
235
|
-
// extension.
|
236
|
-
static const uint8_t kTLSVersions[] = {
|
237
|
-
0x03, 0x03, // TLS 1.2
|
238
|
-
0x03, 0x02, // TLS 1.1
|
239
|
-
0x03, 0x01, // TLS 1
|
240
|
-
0x03, 0x00, // SSL 3
|
241
|
-
};
|
242
|
-
|
243
|
-
static const uint8_t kDTLSVersions[] = {
|
244
|
-
0xfe, 0xfd, // DTLS 1.2
|
245
|
-
0xfe, 0xff, // DTLS 1.0
|
246
|
-
};
|
247
|
-
|
248
|
-
size_t versions_len = 0;
|
249
|
-
if (SSL_is_dtls(ssl)) {
|
250
|
-
if (client_hello->version <= DTLS1_2_VERSION) {
|
251
|
-
versions_len = 4;
|
252
|
-
} else if (client_hello->version <= DTLS1_VERSION) {
|
253
|
-
versions_len = 2;
|
254
|
-
}
|
255
|
-
CBS_init(&versions, kDTLSVersions + sizeof(kDTLSVersions) - versions_len,
|
256
|
-
versions_len);
|
257
|
-
} else {
|
258
|
-
if (client_hello->version >= TLS1_2_VERSION) {
|
259
|
-
versions_len = 8;
|
260
|
-
} else if (client_hello->version >= TLS1_1_VERSION) {
|
261
|
-
versions_len = 6;
|
262
|
-
} else if (client_hello->version >= TLS1_VERSION) {
|
263
|
-
versions_len = 4;
|
264
|
-
} else if (client_hello->version >= SSL3_VERSION) {
|
265
|
-
versions_len = 2;
|
266
|
-
}
|
267
|
-
CBS_init(&versions, kTLSVersions + sizeof(kTLSVersions) - versions_len,
|
268
|
-
versions_len);
|
269
|
-
}
|
270
|
-
}
|
271
|
-
|
272
|
-
if (!ssl_negotiate_version(hs, out_alert, &ssl->version, &versions)) {
|
273
|
-
return 0;
|
274
|
-
}
|
275
|
-
|
276
|
-
// At this point, the connection's version is known and |ssl->version| is
|
277
|
-
// fixed. Begin enforcing the record-layer version.
|
278
|
-
ssl->s3->have_version = true;
|
279
|
-
ssl->s3->aead_write_ctx->SetVersionIfNullCipher(ssl->version);
|
280
|
-
|
281
|
-
// Handle FALLBACK_SCSV.
|
282
|
-
if (ssl_client_cipher_list_contains_cipher(client_hello,
|
283
|
-
SSL3_CK_FALLBACK_SCSV & 0xffff) &&
|
284
|
-
ssl_protocol_version(ssl) < hs->max_version) {
|
285
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_INAPPROPRIATE_FALLBACK);
|
286
|
-
*out_alert = SSL3_AD_INAPPROPRIATE_FALLBACK;
|
287
|
-
return 0;
|
288
|
-
}
|
289
|
-
|
290
|
-
return 1;
|
291
|
-
}
|
292
|
-
|
293
|
-
static UniquePtr<STACK_OF(SSL_CIPHER)> ssl_parse_client_cipher_list(
|
294
|
-
const SSL_CLIENT_HELLO *client_hello) {
|
295
|
-
CBS cipher_suites;
|
296
|
-
CBS_init(&cipher_suites, client_hello->cipher_suites,
|
297
|
-
client_hello->cipher_suites_len);
|
298
|
-
|
299
|
-
UniquePtr<STACK_OF(SSL_CIPHER)> sk(sk_SSL_CIPHER_new_null());
|
300
|
-
if (!sk) {
|
301
|
-
OPENSSL_PUT_ERROR(SSL, ERR_R_MALLOC_FAILURE);
|
302
|
-
return nullptr;
|
303
|
-
}
|
304
|
-
|
305
|
-
while (CBS_len(&cipher_suites) > 0) {
|
306
|
-
uint16_t cipher_suite;
|
307
|
-
|
308
|
-
if (!CBS_get_u16(&cipher_suites, &cipher_suite)) {
|
309
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_ERROR_IN_RECEIVED_CIPHER_LIST);
|
310
|
-
return nullptr;
|
311
|
-
}
|
312
|
-
|
313
|
-
const SSL_CIPHER *c = SSL_get_cipher_by_value(cipher_suite);
|
314
|
-
if (c != NULL && !sk_SSL_CIPHER_push(sk.get(), c)) {
|
315
|
-
OPENSSL_PUT_ERROR(SSL, ERR_R_MALLOC_FAILURE);
|
316
|
-
return nullptr;
|
317
|
-
}
|
318
|
-
}
|
319
|
-
|
320
|
-
return sk;
|
321
|
-
}
|
322
|
-
|
323
|
-
// ssl_get_compatible_server_ciphers determines the key exchange and
|
324
|
-
// authentication cipher suite masks compatible with the server configuration
|
325
|
-
// and current ClientHello parameters of |hs|. It sets |*out_mask_k| to the key
|
326
|
-
// exchange mask and |*out_mask_a| to the authentication mask.
|
327
|
-
static void ssl_get_compatible_server_ciphers(SSL_HANDSHAKE *hs,
|
328
|
-
uint32_t *out_mask_k,
|
329
|
-
uint32_t *out_mask_a) {
|
330
|
-
SSL *const ssl = hs->ssl;
|
331
|
-
uint32_t mask_k = 0;
|
332
|
-
uint32_t mask_a = 0;
|
333
|
-
|
334
|
-
if (ssl_has_certificate(ssl)) {
|
335
|
-
mask_a |= ssl_cipher_auth_mask_for_key(hs->local_pubkey.get());
|
336
|
-
if (EVP_PKEY_id(hs->local_pubkey.get()) == EVP_PKEY_RSA) {
|
337
|
-
mask_k |= SSL_kRSA;
|
338
|
-
}
|
339
|
-
}
|
340
|
-
|
341
|
-
// Check for a shared group to consider ECDHE ciphers.
|
342
|
-
uint16_t unused;
|
343
|
-
if (tls1_get_shared_group(hs, &unused)) {
|
344
|
-
mask_k |= SSL_kECDHE;
|
345
|
-
}
|
346
|
-
|
347
|
-
// PSK requires a server callback.
|
348
|
-
if (ssl->psk_server_callback != NULL) {
|
349
|
-
mask_k |= SSL_kPSK;
|
350
|
-
mask_a |= SSL_aPSK;
|
351
|
-
}
|
352
|
-
|
353
|
-
*out_mask_k = mask_k;
|
354
|
-
*out_mask_a = mask_a;
|
355
|
-
}
|
356
|
-
|
357
|
-
static const SSL_CIPHER *ssl3_choose_cipher(
|
358
|
-
SSL_HANDSHAKE *hs, const SSL_CLIENT_HELLO *client_hello,
|
359
|
-
const struct ssl_cipher_preference_list_st *server_pref) {
|
360
|
-
SSL *const ssl = hs->ssl;
|
361
|
-
STACK_OF(SSL_CIPHER) *prio, *allow;
|
362
|
-
// in_group_flags will either be NULL, or will point to an array of bytes
|
363
|
-
// which indicate equal-preference groups in the |prio| stack. See the
|
364
|
-
// comment about |in_group_flags| in the |ssl_cipher_preference_list_st|
|
365
|
-
// struct.
|
366
|
-
const uint8_t *in_group_flags;
|
367
|
-
// group_min contains the minimal index so far found in a group, or -1 if no
|
368
|
-
// such value exists yet.
|
369
|
-
int group_min = -1;
|
370
|
-
|
371
|
-
UniquePtr<STACK_OF(SSL_CIPHER)> client_pref =
|
372
|
-
ssl_parse_client_cipher_list(client_hello);
|
373
|
-
if (!client_pref) {
|
374
|
-
return nullptr;
|
375
|
-
}
|
376
|
-
|
377
|
-
if (ssl->options & SSL_OP_CIPHER_SERVER_PREFERENCE) {
|
378
|
-
prio = server_pref->ciphers;
|
379
|
-
in_group_flags = server_pref->in_group_flags;
|
380
|
-
allow = client_pref.get();
|
381
|
-
} else {
|
382
|
-
prio = client_pref.get();
|
383
|
-
in_group_flags = NULL;
|
384
|
-
allow = server_pref->ciphers;
|
385
|
-
}
|
386
|
-
|
387
|
-
uint32_t mask_k, mask_a;
|
388
|
-
ssl_get_compatible_server_ciphers(hs, &mask_k, &mask_a);
|
389
|
-
|
390
|
-
for (size_t i = 0; i < sk_SSL_CIPHER_num(prio); i++) {
|
391
|
-
const SSL_CIPHER *c = sk_SSL_CIPHER_value(prio, i);
|
392
|
-
|
393
|
-
size_t cipher_index;
|
394
|
-
if (// Check if the cipher is supported for the current version.
|
395
|
-
SSL_CIPHER_get_min_version(c) <= ssl_protocol_version(ssl) &&
|
396
|
-
ssl_protocol_version(ssl) <= SSL_CIPHER_get_max_version(c) &&
|
397
|
-
// Check the cipher is supported for the server configuration.
|
398
|
-
(c->algorithm_mkey & mask_k) &&
|
399
|
-
(c->algorithm_auth & mask_a) &&
|
400
|
-
// Check the cipher is in the |allow| list.
|
401
|
-
sk_SSL_CIPHER_find(allow, &cipher_index, c)) {
|
402
|
-
if (in_group_flags != NULL && in_group_flags[i] == 1) {
|
403
|
-
// This element of |prio| is in a group. Update the minimum index found
|
404
|
-
// so far and continue looking.
|
405
|
-
if (group_min == -1 || (size_t)group_min > cipher_index) {
|
406
|
-
group_min = cipher_index;
|
407
|
-
}
|
408
|
-
} else {
|
409
|
-
if (group_min != -1 && (size_t)group_min < cipher_index) {
|
410
|
-
cipher_index = group_min;
|
411
|
-
}
|
412
|
-
return sk_SSL_CIPHER_value(allow, cipher_index);
|
413
|
-
}
|
414
|
-
}
|
415
|
-
|
416
|
-
if (in_group_flags != NULL && in_group_flags[i] == 0 && group_min != -1) {
|
417
|
-
// We are about to leave a group, but we found a match in it, so that's
|
418
|
-
// our answer.
|
419
|
-
return sk_SSL_CIPHER_value(allow, group_min);
|
420
|
-
}
|
421
|
-
}
|
422
|
-
|
423
|
-
return nullptr;
|
424
|
-
}
|
425
|
-
|
426
|
-
static enum ssl_hs_wait_t do_start_accept(SSL_HANDSHAKE *hs) {
|
427
|
-
ssl_do_info_callback(hs->ssl, SSL_CB_HANDSHAKE_START, 1);
|
428
|
-
hs->state = state_read_client_hello;
|
429
|
-
return ssl_hs_ok;
|
430
|
-
}
|
431
|
-
|
432
|
-
static enum ssl_hs_wait_t do_read_client_hello(SSL_HANDSHAKE *hs) {
|
433
|
-
SSL *const ssl = hs->ssl;
|
434
|
-
|
435
|
-
SSLMessage msg;
|
436
|
-
if (!ssl->method->get_message(ssl, &msg)) {
|
437
|
-
return ssl_hs_read_message;
|
438
|
-
}
|
439
|
-
|
440
|
-
if (!ssl_check_message_type(ssl, msg, SSL3_MT_CLIENT_HELLO)) {
|
441
|
-
return ssl_hs_error;
|
442
|
-
}
|
443
|
-
|
444
|
-
if (ssl->handoff) {
|
445
|
-
return ssl_hs_handoff;
|
446
|
-
}
|
447
|
-
|
448
|
-
SSL_CLIENT_HELLO client_hello;
|
449
|
-
if (!ssl_client_hello_init(ssl, &client_hello, msg)) {
|
450
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_DECODE_ERROR);
|
451
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR);
|
452
|
-
return ssl_hs_error;
|
453
|
-
}
|
454
|
-
|
455
|
-
// Run the early callback.
|
456
|
-
if (ssl->ctx->select_certificate_cb != NULL) {
|
457
|
-
switch (ssl->ctx->select_certificate_cb(&client_hello)) {
|
458
|
-
case ssl_select_cert_retry:
|
459
|
-
return ssl_hs_certificate_selection_pending;
|
460
|
-
|
461
|
-
case ssl_select_cert_error:
|
462
|
-
// Connection rejected.
|
463
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_CONNECTION_REJECTED);
|
464
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_HANDSHAKE_FAILURE);
|
465
|
-
return ssl_hs_error;
|
466
|
-
|
467
|
-
default:
|
468
|
-
/* fallthrough */;
|
469
|
-
}
|
470
|
-
}
|
471
|
-
|
472
|
-
// Freeze the version range after the early callback.
|
473
|
-
if (!ssl_get_version_range(ssl, &hs->min_version, &hs->max_version)) {
|
474
|
-
return ssl_hs_error;
|
475
|
-
}
|
476
|
-
|
477
|
-
uint8_t alert = SSL_AD_DECODE_ERROR;
|
478
|
-
if (!negotiate_version(hs, &alert, &client_hello)) {
|
479
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, alert);
|
480
|
-
return ssl_hs_error;
|
481
|
-
}
|
482
|
-
|
483
|
-
hs->client_version = client_hello.version;
|
484
|
-
if (client_hello.random_len != SSL3_RANDOM_SIZE) {
|
485
|
-
OPENSSL_PUT_ERROR(SSL, ERR_R_INTERNAL_ERROR);
|
486
|
-
return ssl_hs_error;
|
487
|
-
}
|
488
|
-
OPENSSL_memcpy(ssl->s3->client_random, client_hello.random,
|
489
|
-
client_hello.random_len);
|
490
|
-
|
491
|
-
// Only null compression is supported. TLS 1.3 further requires the peer
|
492
|
-
// advertise no other compression.
|
493
|
-
if (OPENSSL_memchr(client_hello.compression_methods, 0,
|
494
|
-
client_hello.compression_methods_len) == NULL ||
|
495
|
-
(ssl_protocol_version(ssl) >= TLS1_3_VERSION &&
|
496
|
-
client_hello.compression_methods_len != 1)) {
|
497
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_INVALID_COMPRESSION_LIST);
|
498
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_ILLEGAL_PARAMETER);
|
499
|
-
return ssl_hs_error;
|
500
|
-
}
|
501
|
-
|
502
|
-
// TLS extensions.
|
503
|
-
if (!ssl_parse_clienthello_tlsext(hs, &client_hello)) {
|
504
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_PARSE_TLSEXT);
|
505
|
-
return ssl_hs_error;
|
506
|
-
}
|
507
|
-
|
508
|
-
hs->state = state_select_certificate;
|
509
|
-
return ssl_hs_ok;
|
510
|
-
}
|
511
|
-
|
512
|
-
static enum ssl_hs_wait_t do_select_certificate(SSL_HANDSHAKE *hs) {
|
513
|
-
SSL *const ssl = hs->ssl;
|
514
|
-
|
515
|
-
SSLMessage msg;
|
516
|
-
if (!ssl->method->get_message(ssl, &msg)) {
|
517
|
-
return ssl_hs_read_message;
|
518
|
-
}
|
519
|
-
|
520
|
-
// Call |cert_cb| to update server certificates if required.
|
521
|
-
if (ssl->cert->cert_cb != NULL) {
|
522
|
-
int rv = ssl->cert->cert_cb(ssl, ssl->cert->cert_cb_arg);
|
523
|
-
if (rv == 0) {
|
524
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_CERT_CB_ERROR);
|
525
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_INTERNAL_ERROR);
|
526
|
-
return ssl_hs_error;
|
527
|
-
}
|
528
|
-
if (rv < 0) {
|
529
|
-
return ssl_hs_x509_lookup;
|
530
|
-
}
|
531
|
-
}
|
532
|
-
|
533
|
-
if (!ssl_on_certificate_selected(hs)) {
|
534
|
-
return ssl_hs_error;
|
535
|
-
}
|
536
|
-
|
537
|
-
if (ssl_protocol_version(ssl) >= TLS1_3_VERSION) {
|
538
|
-
// Jump to the TLS 1.3 state machine.
|
539
|
-
hs->state = state_tls13;
|
540
|
-
return ssl_hs_ok;
|
541
|
-
}
|
542
|
-
|
543
|
-
SSL_CLIENT_HELLO client_hello;
|
544
|
-
if (!ssl_client_hello_init(ssl, &client_hello, msg)) {
|
545
|
-
return ssl_hs_error;
|
546
|
-
}
|
547
|
-
|
548
|
-
// Negotiate the cipher suite. This must be done after |cert_cb| so the
|
549
|
-
// certificate is finalized.
|
550
|
-
hs->new_cipher =
|
551
|
-
ssl3_choose_cipher(hs, &client_hello, ssl_get_cipher_preferences(ssl));
|
552
|
-
if (hs->new_cipher == NULL) {
|
553
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_NO_SHARED_CIPHER);
|
554
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_HANDSHAKE_FAILURE);
|
555
|
-
return ssl_hs_error;
|
556
|
-
}
|
557
|
-
|
558
|
-
hs->state = state_select_parameters;
|
559
|
-
return ssl_hs_ok;
|
560
|
-
}
|
561
|
-
|
562
|
-
static enum ssl_hs_wait_t do_tls13(SSL_HANDSHAKE *hs) {
|
563
|
-
enum ssl_hs_wait_t wait = tls13_server_handshake(hs);
|
564
|
-
if (wait == ssl_hs_ok) {
|
565
|
-
hs->state = state_finish_server_handshake;
|
566
|
-
return ssl_hs_ok;
|
567
|
-
}
|
568
|
-
|
569
|
-
return wait;
|
570
|
-
}
|
571
|
-
|
572
|
-
static enum ssl_hs_wait_t do_select_parameters(SSL_HANDSHAKE *hs) {
|
573
|
-
SSL *const ssl = hs->ssl;
|
574
|
-
|
575
|
-
SSLMessage msg;
|
576
|
-
if (!ssl->method->get_message(ssl, &msg)) {
|
577
|
-
return ssl_hs_read_message;
|
578
|
-
}
|
579
|
-
|
580
|
-
SSL_CLIENT_HELLO client_hello;
|
581
|
-
if (!ssl_client_hello_init(ssl, &client_hello, msg)) {
|
582
|
-
return ssl_hs_error;
|
583
|
-
}
|
584
|
-
|
585
|
-
// Determine whether we are doing session resumption.
|
586
|
-
UniquePtr<SSL_SESSION> session;
|
587
|
-
bool tickets_supported = false, renew_ticket = false;
|
588
|
-
enum ssl_hs_wait_t wait = ssl_get_prev_session(
|
589
|
-
ssl, &session, &tickets_supported, &renew_ticket, &client_hello);
|
590
|
-
if (wait != ssl_hs_ok) {
|
591
|
-
return wait;
|
592
|
-
}
|
593
|
-
|
594
|
-
if (session) {
|
595
|
-
if (session->extended_master_secret && !hs->extended_master_secret) {
|
596
|
-
// A ClientHello without EMS that attempts to resume a session with EMS
|
597
|
-
// is fatal to the connection.
|
598
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_RESUMED_EMS_SESSION_WITHOUT_EMS_EXTENSION);
|
599
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_HANDSHAKE_FAILURE);
|
600
|
-
return ssl_hs_error;
|
601
|
-
}
|
602
|
-
|
603
|
-
if (!ssl_session_is_resumable(hs, session.get()) ||
|
604
|
-
// If the client offers the EMS extension, but the previous session
|
605
|
-
// didn't use it, then negotiate a new session.
|
606
|
-
hs->extended_master_secret != session->extended_master_secret) {
|
607
|
-
session.reset();
|
608
|
-
}
|
609
|
-
}
|
610
|
-
|
611
|
-
if (session) {
|
612
|
-
// Use the old session.
|
613
|
-
hs->ticket_expected = renew_ticket;
|
614
|
-
ssl->session = session.release();
|
615
|
-
ssl->s3->session_reused = true;
|
616
|
-
} else {
|
617
|
-
hs->ticket_expected = tickets_supported;
|
618
|
-
ssl_set_session(ssl, NULL);
|
619
|
-
if (!ssl_get_new_session(hs, 1 /* server */)) {
|
620
|
-
return ssl_hs_error;
|
621
|
-
}
|
622
|
-
|
623
|
-
// Clear the session ID if we want the session to be single-use.
|
624
|
-
if (!(ssl->ctx->session_cache_mode & SSL_SESS_CACHE_SERVER)) {
|
625
|
-
hs->new_session->session_id_length = 0;
|
626
|
-
}
|
627
|
-
}
|
628
|
-
|
629
|
-
if (ssl->ctx->dos_protection_cb != NULL &&
|
630
|
-
ssl->ctx->dos_protection_cb(&client_hello) == 0) {
|
631
|
-
// Connection rejected for DOS reasons.
|
632
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_CONNECTION_REJECTED);
|
633
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_INTERNAL_ERROR);
|
634
|
-
return ssl_hs_error;
|
635
|
-
}
|
636
|
-
|
637
|
-
if (ssl->session == NULL) {
|
638
|
-
hs->new_session->cipher = hs->new_cipher;
|
639
|
-
|
640
|
-
// Determine whether to request a client certificate.
|
641
|
-
hs->cert_request = !!(ssl->verify_mode & SSL_VERIFY_PEER);
|
642
|
-
// Only request a certificate if Channel ID isn't negotiated.
|
643
|
-
if ((ssl->verify_mode & SSL_VERIFY_PEER_IF_NO_OBC) &&
|
644
|
-
ssl->s3->tlsext_channel_id_valid) {
|
645
|
-
hs->cert_request = false;
|
646
|
-
}
|
647
|
-
// CertificateRequest may only be sent in certificate-based ciphers.
|
648
|
-
if (!ssl_cipher_uses_certificate_auth(hs->new_cipher)) {
|
649
|
-
hs->cert_request = false;
|
650
|
-
}
|
651
|
-
|
652
|
-
if (!hs->cert_request) {
|
653
|
-
// OpenSSL returns X509_V_OK when no certificates are requested. This is
|
654
|
-
// classed by them as a bug, but it's assumed by at least NGINX.
|
655
|
-
hs->new_session->verify_result = X509_V_OK;
|
656
|
-
}
|
657
|
-
}
|
658
|
-
|
659
|
-
// HTTP/2 negotiation depends on the cipher suite, so ALPN negotiation was
|
660
|
-
// deferred. Complete it now.
|
661
|
-
uint8_t alert = SSL_AD_DECODE_ERROR;
|
662
|
-
if (!ssl_negotiate_alpn(hs, &alert, &client_hello)) {
|
663
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, alert);
|
664
|
-
return ssl_hs_error;
|
665
|
-
}
|
666
|
-
|
667
|
-
// Now that all parameters are known, initialize the handshake hash and hash
|
668
|
-
// the ClientHello.
|
669
|
-
if (!hs->transcript.InitHash(ssl_protocol_version(ssl), hs->new_cipher) ||
|
670
|
-
!ssl_hash_message(hs, msg)) {
|
671
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_INTERNAL_ERROR);
|
672
|
-
return ssl_hs_error;
|
673
|
-
}
|
674
|
-
|
675
|
-
// Release the handshake buffer if client authentication isn't required.
|
676
|
-
if (!hs->cert_request) {
|
677
|
-
hs->transcript.FreeBuffer();
|
678
|
-
}
|
679
|
-
|
680
|
-
ssl->method->next_message(ssl);
|
681
|
-
|
682
|
-
hs->state = state_send_server_hello;
|
683
|
-
return ssl_hs_ok;
|
684
|
-
}
|
685
|
-
|
686
|
-
static enum ssl_hs_wait_t do_send_server_hello(SSL_HANDSHAKE *hs) {
|
687
|
-
SSL *const ssl = hs->ssl;
|
688
|
-
|
689
|
-
// We only accept ChannelIDs on connections with ECDHE in order to avoid a
|
690
|
-
// known attack while we fix ChannelID itself.
|
691
|
-
if (ssl->s3->tlsext_channel_id_valid &&
|
692
|
-
(hs->new_cipher->algorithm_mkey & SSL_kECDHE) == 0) {
|
693
|
-
ssl->s3->tlsext_channel_id_valid = false;
|
694
|
-
}
|
695
|
-
|
696
|
-
// If this is a resumption and the original handshake didn't support
|
697
|
-
// ChannelID then we didn't record the original handshake hashes in the
|
698
|
-
// session and so cannot resume with ChannelIDs.
|
699
|
-
if (ssl->session != NULL &&
|
700
|
-
ssl->session->original_handshake_hash_len == 0) {
|
701
|
-
ssl->s3->tlsext_channel_id_valid = false;
|
702
|
-
}
|
703
|
-
|
704
|
-
struct OPENSSL_timeval now;
|
705
|
-
ssl_get_current_time(ssl, &now);
|
706
|
-
ssl->s3->server_random[0] = now.tv_sec >> 24;
|
707
|
-
ssl->s3->server_random[1] = now.tv_sec >> 16;
|
708
|
-
ssl->s3->server_random[2] = now.tv_sec >> 8;
|
709
|
-
ssl->s3->server_random[3] = now.tv_sec;
|
710
|
-
if (!RAND_bytes(ssl->s3->server_random + 4, SSL3_RANDOM_SIZE - 4)) {
|
711
|
-
return ssl_hs_error;
|
712
|
-
}
|
713
|
-
|
714
|
-
// Implement the TLS 1.3 anti-downgrade feature, but with a different value.
|
715
|
-
//
|
716
|
-
// For draft TLS 1.3 versions, it is not safe to deploy this feature. However,
|
717
|
-
// some TLS terminators are non-compliant and copy the origin server's value,
|
718
|
-
// so we wish to measure eventual compatibility impact.
|
719
|
-
if (hs->max_version >= TLS1_3_VERSION) {
|
720
|
-
OPENSSL_memcpy(ssl->s3->server_random + SSL3_RANDOM_SIZE -
|
721
|
-
sizeof(kDraftDowngradeRandom),
|
722
|
-
kDraftDowngradeRandom, sizeof(kDraftDowngradeRandom));
|
723
|
-
}
|
724
|
-
|
725
|
-
const SSL_SESSION *session = hs->new_session.get();
|
726
|
-
if (ssl->session != NULL) {
|
727
|
-
session = ssl->session;
|
728
|
-
}
|
729
|
-
|
730
|
-
ScopedCBB cbb;
|
731
|
-
CBB body, session_id;
|
732
|
-
if (!ssl->method->init_message(ssl, cbb.get(), &body, SSL3_MT_SERVER_HELLO) ||
|
733
|
-
!CBB_add_u16(&body, ssl->version) ||
|
734
|
-
!CBB_add_bytes(&body, ssl->s3->server_random, SSL3_RANDOM_SIZE) ||
|
735
|
-
!CBB_add_u8_length_prefixed(&body, &session_id) ||
|
736
|
-
!CBB_add_bytes(&session_id, session->session_id,
|
737
|
-
session->session_id_length) ||
|
738
|
-
!CBB_add_u16(&body, ssl_cipher_get_value(hs->new_cipher)) ||
|
739
|
-
!CBB_add_u8(&body, 0 /* no compression */) ||
|
740
|
-
!ssl_add_serverhello_tlsext(hs, &body) ||
|
741
|
-
!ssl_add_message_cbb(ssl, cbb.get())) {
|
742
|
-
OPENSSL_PUT_ERROR(SSL, ERR_R_INTERNAL_ERROR);
|
743
|
-
return ssl_hs_error;
|
744
|
-
}
|
745
|
-
|
746
|
-
if (ssl->session != NULL) {
|
747
|
-
hs->state = state_send_server_finished;
|
748
|
-
} else {
|
749
|
-
hs->state = state_send_server_certificate;
|
750
|
-
}
|
751
|
-
return ssl_hs_ok;
|
752
|
-
}
|
753
|
-
|
754
|
-
static enum ssl_hs_wait_t do_send_server_certificate(SSL_HANDSHAKE *hs) {
|
755
|
-
SSL *const ssl = hs->ssl;
|
756
|
-
ScopedCBB cbb;
|
757
|
-
|
758
|
-
if (ssl_cipher_uses_certificate_auth(hs->new_cipher)) {
|
759
|
-
if (!ssl_has_certificate(ssl)) {
|
760
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_NO_CERTIFICATE_SET);
|
761
|
-
return ssl_hs_error;
|
762
|
-
}
|
763
|
-
|
764
|
-
if (!ssl_output_cert_chain(ssl)) {
|
765
|
-
return ssl_hs_error;
|
766
|
-
}
|
767
|
-
|
768
|
-
if (hs->certificate_status_expected) {
|
769
|
-
CBB body, ocsp_response;
|
770
|
-
if (!ssl->method->init_message(ssl, cbb.get(), &body,
|
771
|
-
SSL3_MT_CERTIFICATE_STATUS) ||
|
772
|
-
!CBB_add_u8(&body, TLSEXT_STATUSTYPE_ocsp) ||
|
773
|
-
!CBB_add_u24_length_prefixed(&body, &ocsp_response) ||
|
774
|
-
!CBB_add_bytes(&ocsp_response,
|
775
|
-
CRYPTO_BUFFER_data(ssl->cert->ocsp_response),
|
776
|
-
CRYPTO_BUFFER_len(ssl->cert->ocsp_response)) ||
|
777
|
-
!ssl_add_message_cbb(ssl, cbb.get())) {
|
778
|
-
OPENSSL_PUT_ERROR(SSL, ERR_R_INTERNAL_ERROR);
|
779
|
-
return ssl_hs_error;
|
780
|
-
}
|
781
|
-
}
|
782
|
-
}
|
783
|
-
|
784
|
-
// Assemble ServerKeyExchange parameters if needed.
|
785
|
-
uint32_t alg_k = hs->new_cipher->algorithm_mkey;
|
786
|
-
uint32_t alg_a = hs->new_cipher->algorithm_auth;
|
787
|
-
if (ssl_cipher_requires_server_key_exchange(hs->new_cipher) ||
|
788
|
-
((alg_a & SSL_aPSK) && ssl->psk_identity_hint)) {
|
789
|
-
|
790
|
-
// Pre-allocate enough room to comfortably fit an ECDHE public key. Prepend
|
791
|
-
// the client and server randoms for the signing transcript.
|
792
|
-
CBB child;
|
793
|
-
if (!CBB_init(cbb.get(), SSL3_RANDOM_SIZE * 2 + 128) ||
|
794
|
-
!CBB_add_bytes(cbb.get(), ssl->s3->client_random, SSL3_RANDOM_SIZE) ||
|
795
|
-
!CBB_add_bytes(cbb.get(), ssl->s3->server_random, SSL3_RANDOM_SIZE)) {
|
796
|
-
return ssl_hs_error;
|
797
|
-
}
|
798
|
-
|
799
|
-
// PSK ciphers begin with an identity hint.
|
800
|
-
if (alg_a & SSL_aPSK) {
|
801
|
-
size_t len =
|
802
|
-
(ssl->psk_identity_hint == NULL) ? 0 : strlen(ssl->psk_identity_hint);
|
803
|
-
if (!CBB_add_u16_length_prefixed(cbb.get(), &child) ||
|
804
|
-
!CBB_add_bytes(&child, (const uint8_t *)ssl->psk_identity_hint,
|
805
|
-
len)) {
|
806
|
-
return ssl_hs_error;
|
807
|
-
}
|
808
|
-
}
|
809
|
-
|
810
|
-
if (alg_k & SSL_kECDHE) {
|
811
|
-
// Determine the group to use.
|
812
|
-
uint16_t group_id;
|
813
|
-
if (!tls1_get_shared_group(hs, &group_id)) {
|
814
|
-
OPENSSL_PUT_ERROR(SSL, ERR_R_INTERNAL_ERROR);
|
815
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_HANDSHAKE_FAILURE);
|
816
|
-
return ssl_hs_error;
|
817
|
-
}
|
818
|
-
hs->new_session->group_id = group_id;
|
819
|
-
|
820
|
-
// Set up ECDH, generate a key, and emit the public half.
|
821
|
-
hs->key_share = SSLKeyShare::Create(group_id);
|
822
|
-
if (!hs->key_share ||
|
823
|
-
!CBB_add_u8(cbb.get(), NAMED_CURVE_TYPE) ||
|
824
|
-
!CBB_add_u16(cbb.get(), group_id) ||
|
825
|
-
!CBB_add_u8_length_prefixed(cbb.get(), &child) ||
|
826
|
-
!hs->key_share->Offer(&child)) {
|
827
|
-
return ssl_hs_error;
|
828
|
-
}
|
829
|
-
} else {
|
830
|
-
assert(alg_k & SSL_kPSK);
|
831
|
-
}
|
832
|
-
|
833
|
-
if (!CBBFinishArray(cbb.get(), &hs->server_params)) {
|
834
|
-
return ssl_hs_error;
|
835
|
-
}
|
836
|
-
}
|
837
|
-
|
838
|
-
hs->state = state_send_server_key_exchange;
|
839
|
-
return ssl_hs_ok;
|
840
|
-
}
|
841
|
-
|
842
|
-
static enum ssl_hs_wait_t do_send_server_key_exchange(SSL_HANDSHAKE *hs) {
|
843
|
-
SSL *const ssl = hs->ssl;
|
844
|
-
|
845
|
-
if (hs->server_params.size() == 0) {
|
846
|
-
hs->state = state_send_server_hello_done;
|
847
|
-
return ssl_hs_ok;
|
848
|
-
}
|
849
|
-
|
850
|
-
ScopedCBB cbb;
|
851
|
-
CBB body, child;
|
852
|
-
if (!ssl->method->init_message(ssl, cbb.get(), &body,
|
853
|
-
SSL3_MT_SERVER_KEY_EXCHANGE) ||
|
854
|
-
// |hs->server_params| contains a prefix for signing.
|
855
|
-
hs->server_params.size() < 2 * SSL3_RANDOM_SIZE ||
|
856
|
-
!CBB_add_bytes(&body, hs->server_params.data() + 2 * SSL3_RANDOM_SIZE,
|
857
|
-
hs->server_params.size() - 2 * SSL3_RANDOM_SIZE)) {
|
858
|
-
return ssl_hs_error;
|
859
|
-
}
|
860
|
-
|
861
|
-
// Add a signature.
|
862
|
-
if (ssl_cipher_uses_certificate_auth(hs->new_cipher)) {
|
863
|
-
if (!ssl_has_private_key(ssl)) {
|
864
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_INTERNAL_ERROR);
|
865
|
-
return ssl_hs_error;
|
866
|
-
}
|
867
|
-
|
868
|
-
// Determine the signature algorithm.
|
869
|
-
uint16_t signature_algorithm;
|
870
|
-
if (!tls1_choose_signature_algorithm(hs, &signature_algorithm)) {
|
871
|
-
return ssl_hs_error;
|
872
|
-
}
|
873
|
-
if (ssl_protocol_version(ssl) >= TLS1_2_VERSION) {
|
874
|
-
if (!CBB_add_u16(&body, signature_algorithm)) {
|
875
|
-
OPENSSL_PUT_ERROR(SSL, ERR_R_INTERNAL_ERROR);
|
876
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_INTERNAL_ERROR);
|
877
|
-
return ssl_hs_error;
|
878
|
-
}
|
879
|
-
}
|
880
|
-
|
881
|
-
// Add space for the signature.
|
882
|
-
const size_t max_sig_len = EVP_PKEY_size(hs->local_pubkey.get());
|
883
|
-
uint8_t *ptr;
|
884
|
-
if (!CBB_add_u16_length_prefixed(&body, &child) ||
|
885
|
-
!CBB_reserve(&child, &ptr, max_sig_len)) {
|
886
|
-
return ssl_hs_error;
|
887
|
-
}
|
888
|
-
|
889
|
-
size_t sig_len;
|
890
|
-
switch (ssl_private_key_sign(hs, ptr, &sig_len, max_sig_len,
|
891
|
-
signature_algorithm, hs->server_params)) {
|
892
|
-
case ssl_private_key_success:
|
893
|
-
if (!CBB_did_write(&child, sig_len)) {
|
894
|
-
return ssl_hs_error;
|
895
|
-
}
|
896
|
-
break;
|
897
|
-
case ssl_private_key_failure:
|
898
|
-
return ssl_hs_error;
|
899
|
-
case ssl_private_key_retry:
|
900
|
-
return ssl_hs_private_key_operation;
|
901
|
-
}
|
902
|
-
}
|
903
|
-
|
904
|
-
if (!ssl_add_message_cbb(ssl, cbb.get())) {
|
905
|
-
return ssl_hs_error;
|
906
|
-
}
|
907
|
-
|
908
|
-
hs->server_params.Reset();
|
909
|
-
|
910
|
-
hs->state = state_send_server_hello_done;
|
911
|
-
return ssl_hs_ok;
|
912
|
-
}
|
913
|
-
|
914
|
-
static enum ssl_hs_wait_t do_send_server_hello_done(SSL_HANDSHAKE *hs) {
|
915
|
-
SSL *const ssl = hs->ssl;
|
916
|
-
|
917
|
-
ScopedCBB cbb;
|
918
|
-
CBB body;
|
919
|
-
|
920
|
-
if (hs->cert_request) {
|
921
|
-
CBB cert_types, sigalgs_cbb;
|
922
|
-
if (!ssl->method->init_message(ssl, cbb.get(), &body,
|
923
|
-
SSL3_MT_CERTIFICATE_REQUEST) ||
|
924
|
-
!CBB_add_u8_length_prefixed(&body, &cert_types) ||
|
925
|
-
!CBB_add_u8(&cert_types, SSL3_CT_RSA_SIGN) ||
|
926
|
-
(ssl_protocol_version(ssl) >= TLS1_VERSION &&
|
927
|
-
!CBB_add_u8(&cert_types, TLS_CT_ECDSA_SIGN)) ||
|
928
|
-
(ssl_protocol_version(ssl) >= TLS1_2_VERSION &&
|
929
|
-
(!CBB_add_u16_length_prefixed(&body, &sigalgs_cbb) ||
|
930
|
-
!tls12_add_verify_sigalgs(ssl, &sigalgs_cbb))) ||
|
931
|
-
!ssl_add_client_CA_list(ssl, &body) ||
|
932
|
-
!ssl_add_message_cbb(ssl, cbb.get())) {
|
933
|
-
OPENSSL_PUT_ERROR(SSL, ERR_R_INTERNAL_ERROR);
|
934
|
-
return ssl_hs_error;
|
935
|
-
}
|
936
|
-
}
|
937
|
-
|
938
|
-
if (!ssl->method->init_message(ssl, cbb.get(), &body,
|
939
|
-
SSL3_MT_SERVER_HELLO_DONE) ||
|
940
|
-
!ssl_add_message_cbb(ssl, cbb.get())) {
|
941
|
-
OPENSSL_PUT_ERROR(SSL, ERR_R_INTERNAL_ERROR);
|
942
|
-
return ssl_hs_error;
|
943
|
-
}
|
944
|
-
|
945
|
-
hs->state = state_read_client_certificate;
|
946
|
-
return ssl_hs_flush;
|
947
|
-
}
|
948
|
-
|
949
|
-
static enum ssl_hs_wait_t do_read_client_certificate(SSL_HANDSHAKE *hs) {
|
950
|
-
SSL *const ssl = hs->ssl;
|
951
|
-
|
952
|
-
if (!hs->cert_request) {
|
953
|
-
hs->state = state_verify_client_certificate;
|
954
|
-
return ssl_hs_ok;
|
955
|
-
}
|
956
|
-
|
957
|
-
SSLMessage msg;
|
958
|
-
if (!ssl->method->get_message(ssl, &msg)) {
|
959
|
-
return ssl_hs_read_message;
|
960
|
-
}
|
961
|
-
|
962
|
-
if (msg.type != SSL3_MT_CERTIFICATE) {
|
963
|
-
if (ssl->version == SSL3_VERSION &&
|
964
|
-
msg.type == SSL3_MT_CLIENT_KEY_EXCHANGE) {
|
965
|
-
// In SSL 3.0, the Certificate message is omitted to signal no
|
966
|
-
// certificate.
|
967
|
-
if (ssl->verify_mode & SSL_VERIFY_FAIL_IF_NO_PEER_CERT) {
|
968
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_PEER_DID_NOT_RETURN_A_CERTIFICATE);
|
969
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_HANDSHAKE_FAILURE);
|
970
|
-
return ssl_hs_error;
|
971
|
-
}
|
972
|
-
|
973
|
-
// OpenSSL returns X509_V_OK when no certificates are received. This is
|
974
|
-
// classed by them as a bug, but it's assumed by at least NGINX.
|
975
|
-
hs->new_session->verify_result = X509_V_OK;
|
976
|
-
hs->state = state_verify_client_certificate;
|
977
|
-
return ssl_hs_ok;
|
978
|
-
}
|
979
|
-
|
980
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_UNEXPECTED_MESSAGE);
|
981
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_UNEXPECTED_MESSAGE);
|
982
|
-
return ssl_hs_error;
|
983
|
-
}
|
984
|
-
|
985
|
-
if (!ssl_hash_message(hs, msg)) {
|
986
|
-
return ssl_hs_error;
|
987
|
-
}
|
988
|
-
|
989
|
-
CBS certificate_msg = msg.body;
|
990
|
-
uint8_t alert = SSL_AD_DECODE_ERROR;
|
991
|
-
UniquePtr<STACK_OF(CRYPTO_BUFFER)> chain;
|
992
|
-
if (!ssl_parse_cert_chain(&alert, &chain, &hs->peer_pubkey,
|
993
|
-
ssl->retain_only_sha256_of_client_certs
|
994
|
-
? hs->new_session->peer_sha256
|
995
|
-
: NULL,
|
996
|
-
&certificate_msg, ssl->ctx->pool)) {
|
997
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, alert);
|
998
|
-
return ssl_hs_error;
|
999
|
-
}
|
1000
|
-
sk_CRYPTO_BUFFER_pop_free(hs->new_session->certs, CRYPTO_BUFFER_free);
|
1001
|
-
hs->new_session->certs = chain.release();
|
1002
|
-
|
1003
|
-
if (CBS_len(&certificate_msg) != 0 ||
|
1004
|
-
!ssl->ctx->x509_method->session_cache_objects(hs->new_session.get())) {
|
1005
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_DECODE_ERROR);
|
1006
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR);
|
1007
|
-
return ssl_hs_error;
|
1008
|
-
}
|
1009
|
-
|
1010
|
-
if (sk_CRYPTO_BUFFER_num(hs->new_session->certs) == 0) {
|
1011
|
-
// No client certificate so the handshake buffer may be discarded.
|
1012
|
-
hs->transcript.FreeBuffer();
|
1013
|
-
|
1014
|
-
// In SSL 3.0, sending no certificate is signaled by omitting the
|
1015
|
-
// Certificate message.
|
1016
|
-
if (ssl->version == SSL3_VERSION) {
|
1017
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_NO_CERTIFICATES_RETURNED);
|
1018
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_HANDSHAKE_FAILURE);
|
1019
|
-
return ssl_hs_error;
|
1020
|
-
}
|
1021
|
-
|
1022
|
-
if (ssl->verify_mode & SSL_VERIFY_FAIL_IF_NO_PEER_CERT) {
|
1023
|
-
// Fail for TLS only if we required a certificate
|
1024
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_PEER_DID_NOT_RETURN_A_CERTIFICATE);
|
1025
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_HANDSHAKE_FAILURE);
|
1026
|
-
return ssl_hs_error;
|
1027
|
-
}
|
1028
|
-
|
1029
|
-
// OpenSSL returns X509_V_OK when no certificates are received. This is
|
1030
|
-
// classed by them as a bug, but it's assumed by at least NGINX.
|
1031
|
-
hs->new_session->verify_result = X509_V_OK;
|
1032
|
-
} else if (ssl->retain_only_sha256_of_client_certs) {
|
1033
|
-
// The hash will have been filled in.
|
1034
|
-
hs->new_session->peer_sha256_valid = 1;
|
1035
|
-
}
|
1036
|
-
|
1037
|
-
ssl->method->next_message(ssl);
|
1038
|
-
hs->state = state_verify_client_certificate;
|
1039
|
-
return ssl_hs_ok;
|
1040
|
-
}
|
1041
|
-
|
1042
|
-
static enum ssl_hs_wait_t do_verify_client_certificate(SSL_HANDSHAKE *hs) {
|
1043
|
-
if (sk_CRYPTO_BUFFER_num(hs->new_session->certs) > 0) {
|
1044
|
-
switch (ssl_verify_peer_cert(hs)) {
|
1045
|
-
case ssl_verify_ok:
|
1046
|
-
break;
|
1047
|
-
case ssl_verify_invalid:
|
1048
|
-
return ssl_hs_error;
|
1049
|
-
case ssl_verify_retry:
|
1050
|
-
return ssl_hs_certificate_verify;
|
1051
|
-
}
|
1052
|
-
}
|
1053
|
-
|
1054
|
-
hs->state = state_read_client_key_exchange;
|
1055
|
-
return ssl_hs_ok;
|
1056
|
-
}
|
1057
|
-
|
1058
|
-
static enum ssl_hs_wait_t do_read_client_key_exchange(SSL_HANDSHAKE *hs) {
|
1059
|
-
SSL *const ssl = hs->ssl;
|
1060
|
-
SSLMessage msg;
|
1061
|
-
if (!ssl->method->get_message(ssl, &msg)) {
|
1062
|
-
return ssl_hs_read_message;
|
1063
|
-
}
|
1064
|
-
|
1065
|
-
if (!ssl_check_message_type(ssl, msg, SSL3_MT_CLIENT_KEY_EXCHANGE)) {
|
1066
|
-
return ssl_hs_error;
|
1067
|
-
}
|
1068
|
-
|
1069
|
-
CBS client_key_exchange = msg.body;
|
1070
|
-
uint32_t alg_k = hs->new_cipher->algorithm_mkey;
|
1071
|
-
uint32_t alg_a = hs->new_cipher->algorithm_auth;
|
1072
|
-
|
1073
|
-
// If using a PSK key exchange, parse the PSK identity.
|
1074
|
-
if (alg_a & SSL_aPSK) {
|
1075
|
-
CBS psk_identity;
|
1076
|
-
|
1077
|
-
// If using PSK, the ClientKeyExchange contains a psk_identity. If PSK,
|
1078
|
-
// then this is the only field in the message.
|
1079
|
-
if (!CBS_get_u16_length_prefixed(&client_key_exchange, &psk_identity) ||
|
1080
|
-
((alg_k & SSL_kPSK) && CBS_len(&client_key_exchange) != 0)) {
|
1081
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_DECODE_ERROR);
|
1082
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR);
|
1083
|
-
return ssl_hs_error;
|
1084
|
-
}
|
1085
|
-
|
1086
|
-
if (CBS_len(&psk_identity) > PSK_MAX_IDENTITY_LEN ||
|
1087
|
-
CBS_contains_zero_byte(&psk_identity)) {
|
1088
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_DATA_LENGTH_TOO_LONG);
|
1089
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_ILLEGAL_PARAMETER);
|
1090
|
-
return ssl_hs_error;
|
1091
|
-
}
|
1092
|
-
|
1093
|
-
if (!CBS_strdup(&psk_identity, &hs->new_session->psk_identity)) {
|
1094
|
-
OPENSSL_PUT_ERROR(SSL, ERR_R_MALLOC_FAILURE);
|
1095
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_INTERNAL_ERROR);
|
1096
|
-
return ssl_hs_error;
|
1097
|
-
}
|
1098
|
-
}
|
1099
|
-
|
1100
|
-
// Depending on the key exchange method, compute |premaster_secret|.
|
1101
|
-
Array<uint8_t> premaster_secret;
|
1102
|
-
if (alg_k & SSL_kRSA) {
|
1103
|
-
CBS encrypted_premaster_secret;
|
1104
|
-
if (ssl->version > SSL3_VERSION) {
|
1105
|
-
if (!CBS_get_u16_length_prefixed(&client_key_exchange,
|
1106
|
-
&encrypted_premaster_secret) ||
|
1107
|
-
CBS_len(&client_key_exchange) != 0) {
|
1108
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_DECODE_ERROR);
|
1109
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR);
|
1110
|
-
return ssl_hs_error;
|
1111
|
-
}
|
1112
|
-
} else {
|
1113
|
-
encrypted_premaster_secret = client_key_exchange;
|
1114
|
-
}
|
1115
|
-
|
1116
|
-
// Allocate a buffer large enough for an RSA decryption.
|
1117
|
-
Array<uint8_t> decrypt_buf;
|
1118
|
-
if (!decrypt_buf.Init(EVP_PKEY_size(hs->local_pubkey.get()))) {
|
1119
|
-
return ssl_hs_error;
|
1120
|
-
}
|
1121
|
-
|
1122
|
-
// Decrypt with no padding. PKCS#1 padding will be removed as part of the
|
1123
|
-
// timing-sensitive code below.
|
1124
|
-
size_t decrypt_len;
|
1125
|
-
switch (ssl_private_key_decrypt(hs, decrypt_buf.data(), &decrypt_len,
|
1126
|
-
decrypt_buf.size(),
|
1127
|
-
encrypted_premaster_secret)) {
|
1128
|
-
case ssl_private_key_success:
|
1129
|
-
break;
|
1130
|
-
case ssl_private_key_failure:
|
1131
|
-
return ssl_hs_error;
|
1132
|
-
case ssl_private_key_retry:
|
1133
|
-
return ssl_hs_private_key_operation;
|
1134
|
-
}
|
1135
|
-
|
1136
|
-
if (decrypt_len != decrypt_buf.size()) {
|
1137
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_DECRYPTION_FAILED);
|
1138
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECRYPT_ERROR);
|
1139
|
-
return ssl_hs_error;
|
1140
|
-
}
|
1141
|
-
|
1142
|
-
// Prepare a random premaster, to be used on invalid padding. See RFC 5246,
|
1143
|
-
// section 7.4.7.1.
|
1144
|
-
if (!premaster_secret.Init(SSL_MAX_MASTER_KEY_LENGTH) ||
|
1145
|
-
!RAND_bytes(premaster_secret.data(), premaster_secret.size())) {
|
1146
|
-
return ssl_hs_error;
|
1147
|
-
}
|
1148
|
-
|
1149
|
-
// The smallest padded premaster is 11 bytes of overhead. Small keys are
|
1150
|
-
// publicly invalid.
|
1151
|
-
if (decrypt_len < 11 + premaster_secret.size()) {
|
1152
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_DECRYPTION_FAILED);
|
1153
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECRYPT_ERROR);
|
1154
|
-
return ssl_hs_error;
|
1155
|
-
}
|
1156
|
-
|
1157
|
-
// Check the padding. See RFC 3447, section 7.2.2.
|
1158
|
-
size_t padding_len = decrypt_len - premaster_secret.size();
|
1159
|
-
uint8_t good = constant_time_eq_int_8(decrypt_buf[0], 0) &
|
1160
|
-
constant_time_eq_int_8(decrypt_buf[1], 2);
|
1161
|
-
for (size_t i = 2; i < padding_len - 1; i++) {
|
1162
|
-
good &= ~constant_time_is_zero_8(decrypt_buf[i]);
|
1163
|
-
}
|
1164
|
-
good &= constant_time_is_zero_8(decrypt_buf[padding_len - 1]);
|
1165
|
-
|
1166
|
-
// The premaster secret must begin with |client_version|. This too must be
|
1167
|
-
// checked in constant time (http://eprint.iacr.org/2003/052/).
|
1168
|
-
good &= constant_time_eq_8(decrypt_buf[padding_len],
|
1169
|
-
(unsigned)(hs->client_version >> 8));
|
1170
|
-
good &= constant_time_eq_8(decrypt_buf[padding_len + 1],
|
1171
|
-
(unsigned)(hs->client_version & 0xff));
|
1172
|
-
|
1173
|
-
// Select, in constant time, either the decrypted premaster or the random
|
1174
|
-
// premaster based on |good|.
|
1175
|
-
for (size_t i = 0; i < premaster_secret.size(); i++) {
|
1176
|
-
premaster_secret[i] = constant_time_select_8(
|
1177
|
-
good, decrypt_buf[padding_len + i], premaster_secret[i]);
|
1178
|
-
}
|
1179
|
-
} else if (alg_k & SSL_kECDHE) {
|
1180
|
-
// Parse the ClientKeyExchange.
|
1181
|
-
CBS peer_key;
|
1182
|
-
if (!CBS_get_u8_length_prefixed(&client_key_exchange, &peer_key) ||
|
1183
|
-
CBS_len(&client_key_exchange) != 0) {
|
1184
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_DECODE_ERROR);
|
1185
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR);
|
1186
|
-
return ssl_hs_error;
|
1187
|
-
}
|
1188
|
-
|
1189
|
-
// Compute the premaster.
|
1190
|
-
uint8_t alert = SSL_AD_DECODE_ERROR;
|
1191
|
-
if (!hs->key_share->Finish(&premaster_secret, &alert, peer_key)) {
|
1192
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, alert);
|
1193
|
-
return ssl_hs_error;
|
1194
|
-
}
|
1195
|
-
|
1196
|
-
// The key exchange state may now be discarded.
|
1197
|
-
hs->key_share.reset();
|
1198
|
-
} else if (!(alg_k & SSL_kPSK)) {
|
1199
|
-
OPENSSL_PUT_ERROR(SSL, ERR_R_INTERNAL_ERROR);
|
1200
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_HANDSHAKE_FAILURE);
|
1201
|
-
return ssl_hs_error;
|
1202
|
-
}
|
1203
|
-
|
1204
|
-
// For a PSK cipher suite, the actual pre-master secret is combined with the
|
1205
|
-
// pre-shared key.
|
1206
|
-
if (alg_a & SSL_aPSK) {
|
1207
|
-
if (ssl->psk_server_callback == NULL) {
|
1208
|
-
OPENSSL_PUT_ERROR(SSL, ERR_R_INTERNAL_ERROR);
|
1209
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_INTERNAL_ERROR);
|
1210
|
-
return ssl_hs_error;
|
1211
|
-
}
|
1212
|
-
|
1213
|
-
// Look up the key for the identity.
|
1214
|
-
uint8_t psk[PSK_MAX_PSK_LEN];
|
1215
|
-
unsigned psk_len = ssl->psk_server_callback(
|
1216
|
-
ssl, hs->new_session->psk_identity, psk, sizeof(psk));
|
1217
|
-
if (psk_len > PSK_MAX_PSK_LEN) {
|
1218
|
-
OPENSSL_PUT_ERROR(SSL, ERR_R_INTERNAL_ERROR);
|
1219
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_INTERNAL_ERROR);
|
1220
|
-
return ssl_hs_error;
|
1221
|
-
} else if (psk_len == 0) {
|
1222
|
-
// PSK related to the given identity not found.
|
1223
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_PSK_IDENTITY_NOT_FOUND);
|
1224
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_UNKNOWN_PSK_IDENTITY);
|
1225
|
-
return ssl_hs_error;
|
1226
|
-
}
|
1227
|
-
|
1228
|
-
if (alg_k & SSL_kPSK) {
|
1229
|
-
// In plain PSK, other_secret is a block of 0s with the same length as the
|
1230
|
-
// pre-shared key.
|
1231
|
-
if (!premaster_secret.Init(psk_len)) {
|
1232
|
-
return ssl_hs_error;
|
1233
|
-
}
|
1234
|
-
OPENSSL_memset(premaster_secret.data(), 0, premaster_secret.size());
|
1235
|
-
}
|
1236
|
-
|
1237
|
-
ScopedCBB new_premaster;
|
1238
|
-
CBB child;
|
1239
|
-
if (!CBB_init(new_premaster.get(),
|
1240
|
-
2 + psk_len + 2 + premaster_secret.size()) ||
|
1241
|
-
!CBB_add_u16_length_prefixed(new_premaster.get(), &child) ||
|
1242
|
-
!CBB_add_bytes(&child, premaster_secret.data(),
|
1243
|
-
premaster_secret.size()) ||
|
1244
|
-
!CBB_add_u16_length_prefixed(new_premaster.get(), &child) ||
|
1245
|
-
!CBB_add_bytes(&child, psk, psk_len) ||
|
1246
|
-
!CBBFinishArray(new_premaster.get(), &premaster_secret)) {
|
1247
|
-
OPENSSL_PUT_ERROR(SSL, ERR_R_MALLOC_FAILURE);
|
1248
|
-
return ssl_hs_error;
|
1249
|
-
}
|
1250
|
-
}
|
1251
|
-
|
1252
|
-
if (!ssl_hash_message(hs, msg)) {
|
1253
|
-
return ssl_hs_error;
|
1254
|
-
}
|
1255
|
-
|
1256
|
-
// Compute the master secret.
|
1257
|
-
hs->new_session->master_key_length = tls1_generate_master_secret(
|
1258
|
-
hs, hs->new_session->master_key, premaster_secret);
|
1259
|
-
if (hs->new_session->master_key_length == 0) {
|
1260
|
-
return ssl_hs_error;
|
1261
|
-
}
|
1262
|
-
hs->new_session->extended_master_secret = hs->extended_master_secret;
|
1263
|
-
|
1264
|
-
ssl->method->next_message(ssl);
|
1265
|
-
hs->state = state_read_client_certificate_verify;
|
1266
|
-
return ssl_hs_ok;
|
1267
|
-
}
|
1268
|
-
|
1269
|
-
static enum ssl_hs_wait_t do_read_client_certificate_verify(SSL_HANDSHAKE *hs) {
|
1270
|
-
SSL *const ssl = hs->ssl;
|
1271
|
-
|
1272
|
-
// Only RSA and ECDSA client certificates are supported, so a
|
1273
|
-
// CertificateVerify is required if and only if there's a client certificate.
|
1274
|
-
if (!hs->peer_pubkey) {
|
1275
|
-
hs->transcript.FreeBuffer();
|
1276
|
-
hs->state = state_read_change_cipher_spec;
|
1277
|
-
return ssl_hs_ok;
|
1278
|
-
}
|
1279
|
-
|
1280
|
-
SSLMessage msg;
|
1281
|
-
if (!ssl->method->get_message(ssl, &msg)) {
|
1282
|
-
return ssl_hs_read_message;
|
1283
|
-
}
|
1284
|
-
|
1285
|
-
if (!ssl_check_message_type(ssl, msg, SSL3_MT_CERTIFICATE_VERIFY)) {
|
1286
|
-
return ssl_hs_error;
|
1287
|
-
}
|
1288
|
-
|
1289
|
-
CBS certificate_verify = msg.body, signature;
|
1290
|
-
|
1291
|
-
// Determine the signature algorithm.
|
1292
|
-
uint16_t signature_algorithm = 0;
|
1293
|
-
if (ssl_protocol_version(ssl) >= TLS1_2_VERSION) {
|
1294
|
-
if (!CBS_get_u16(&certificate_verify, &signature_algorithm)) {
|
1295
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_DECODE_ERROR);
|
1296
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR);
|
1297
|
-
return ssl_hs_error;
|
1298
|
-
}
|
1299
|
-
uint8_t alert = SSL_AD_DECODE_ERROR;
|
1300
|
-
if (!tls12_check_peer_sigalg(ssl, &alert, signature_algorithm)) {
|
1301
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, alert);
|
1302
|
-
return ssl_hs_error;
|
1303
|
-
}
|
1304
|
-
hs->new_session->peer_signature_algorithm = signature_algorithm;
|
1305
|
-
} else if (!tls1_get_legacy_signature_algorithm(&signature_algorithm,
|
1306
|
-
hs->peer_pubkey.get())) {
|
1307
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_PEER_ERROR_UNSUPPORTED_CERTIFICATE_TYPE);
|
1308
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_UNSUPPORTED_CERTIFICATE);
|
1309
|
-
return ssl_hs_error;
|
1310
|
-
}
|
1311
|
-
|
1312
|
-
// Parse and verify the signature.
|
1313
|
-
if (!CBS_get_u16_length_prefixed(&certificate_verify, &signature) ||
|
1314
|
-
CBS_len(&certificate_verify) != 0) {
|
1315
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_DECODE_ERROR);
|
1316
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR);
|
1317
|
-
return ssl_hs_error;
|
1318
|
-
}
|
1319
|
-
|
1320
|
-
bool sig_ok;
|
1321
|
-
// The SSL3 construction for CertificateVerify does not decompose into a
|
1322
|
-
// single final digest and signature, and must be special-cased.
|
1323
|
-
if (ssl_protocol_version(ssl) == SSL3_VERSION) {
|
1324
|
-
uint8_t digest[EVP_MAX_MD_SIZE];
|
1325
|
-
size_t digest_len;
|
1326
|
-
if (!hs->transcript.GetSSL3CertVerifyHash(
|
1327
|
-
digest, &digest_len, hs->new_session.get(), signature_algorithm)) {
|
1328
|
-
return ssl_hs_error;
|
1329
|
-
}
|
1330
|
-
|
1331
|
-
UniquePtr<EVP_PKEY_CTX> pctx(
|
1332
|
-
EVP_PKEY_CTX_new(hs->peer_pubkey.get(), nullptr));
|
1333
|
-
sig_ok = pctx &&
|
1334
|
-
EVP_PKEY_verify_init(pctx.get()) &&
|
1335
|
-
EVP_PKEY_verify(pctx.get(), CBS_data(&signature),
|
1336
|
-
CBS_len(&signature), digest, digest_len);
|
1337
|
-
} else {
|
1338
|
-
sig_ok =
|
1339
|
-
ssl_public_key_verify(ssl, signature, signature_algorithm,
|
1340
|
-
hs->peer_pubkey.get(), hs->transcript.buffer());
|
1341
|
-
}
|
1342
|
-
|
1343
|
-
#if defined(BORINGSSL_UNSAFE_FUZZER_MODE)
|
1344
|
-
sig_ok = true;
|
1345
|
-
ERR_clear_error();
|
1346
|
-
#endif
|
1347
|
-
if (!sig_ok) {
|
1348
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_BAD_SIGNATURE);
|
1349
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECRYPT_ERROR);
|
1350
|
-
return ssl_hs_error;
|
1351
|
-
}
|
1352
|
-
|
1353
|
-
// The handshake buffer is no longer necessary, and we may hash the current
|
1354
|
-
// message.
|
1355
|
-
hs->transcript.FreeBuffer();
|
1356
|
-
if (!ssl_hash_message(hs, msg)) {
|
1357
|
-
return ssl_hs_error;
|
1358
|
-
}
|
1359
|
-
|
1360
|
-
ssl->method->next_message(ssl);
|
1361
|
-
hs->state = state_read_change_cipher_spec;
|
1362
|
-
return ssl_hs_ok;
|
1363
|
-
}
|
1364
|
-
|
1365
|
-
static enum ssl_hs_wait_t do_read_change_cipher_spec(SSL_HANDSHAKE *hs) {
|
1366
|
-
hs->state = state_process_change_cipher_spec;
|
1367
|
-
return ssl_hs_read_change_cipher_spec;
|
1368
|
-
}
|
1369
|
-
|
1370
|
-
static enum ssl_hs_wait_t do_process_change_cipher_spec(SSL_HANDSHAKE *hs) {
|
1371
|
-
if (!tls1_change_cipher_state(hs, evp_aead_open)) {
|
1372
|
-
return ssl_hs_error;
|
1373
|
-
}
|
1374
|
-
|
1375
|
-
hs->state = state_read_next_proto;
|
1376
|
-
return ssl_hs_ok;
|
1377
|
-
}
|
1378
|
-
|
1379
|
-
static enum ssl_hs_wait_t do_read_next_proto(SSL_HANDSHAKE *hs) {
|
1380
|
-
SSL *const ssl = hs->ssl;
|
1381
|
-
|
1382
|
-
if (!hs->next_proto_neg_seen) {
|
1383
|
-
hs->state = state_read_channel_id;
|
1384
|
-
return ssl_hs_ok;
|
1385
|
-
}
|
1386
|
-
|
1387
|
-
SSLMessage msg;
|
1388
|
-
if (!ssl->method->get_message(ssl, &msg)) {
|
1389
|
-
return ssl_hs_read_message;
|
1390
|
-
}
|
1391
|
-
|
1392
|
-
if (!ssl_check_message_type(ssl, msg, SSL3_MT_NEXT_PROTO) ||
|
1393
|
-
!ssl_hash_message(hs, msg)) {
|
1394
|
-
return ssl_hs_error;
|
1395
|
-
}
|
1396
|
-
|
1397
|
-
CBS next_protocol = msg.body, selected_protocol, padding;
|
1398
|
-
if (!CBS_get_u8_length_prefixed(&next_protocol, &selected_protocol) ||
|
1399
|
-
!CBS_get_u8_length_prefixed(&next_protocol, &padding) ||
|
1400
|
-
CBS_len(&next_protocol) != 0) {
|
1401
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_DECODE_ERROR);
|
1402
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR);
|
1403
|
-
return ssl_hs_error;
|
1404
|
-
}
|
1405
|
-
|
1406
|
-
if (!ssl->s3->next_proto_negotiated.CopyFrom(selected_protocol)) {
|
1407
|
-
return ssl_hs_error;
|
1408
|
-
}
|
1409
|
-
|
1410
|
-
ssl->method->next_message(ssl);
|
1411
|
-
hs->state = state_read_channel_id;
|
1412
|
-
return ssl_hs_ok;
|
1413
|
-
}
|
1414
|
-
|
1415
|
-
static enum ssl_hs_wait_t do_read_channel_id(SSL_HANDSHAKE *hs) {
|
1416
|
-
SSL *const ssl = hs->ssl;
|
1417
|
-
|
1418
|
-
if (!ssl->s3->tlsext_channel_id_valid) {
|
1419
|
-
hs->state = state_read_client_finished;
|
1420
|
-
return ssl_hs_ok;
|
1421
|
-
}
|
1422
|
-
|
1423
|
-
SSLMessage msg;
|
1424
|
-
if (!ssl->method->get_message(ssl, &msg)) {
|
1425
|
-
return ssl_hs_read_message;
|
1426
|
-
}
|
1427
|
-
|
1428
|
-
if (!ssl_check_message_type(ssl, msg, SSL3_MT_CHANNEL_ID) ||
|
1429
|
-
!tls1_verify_channel_id(hs, msg) ||
|
1430
|
-
!ssl_hash_message(hs, msg)) {
|
1431
|
-
return ssl_hs_error;
|
1432
|
-
}
|
1433
|
-
|
1434
|
-
ssl->method->next_message(ssl);
|
1435
|
-
hs->state = state_read_client_finished;
|
1436
|
-
return ssl_hs_ok;
|
1437
|
-
}
|
1438
|
-
|
1439
|
-
static enum ssl_hs_wait_t do_read_client_finished(SSL_HANDSHAKE *hs) {
|
1440
|
-
SSL *const ssl = hs->ssl;
|
1441
|
-
enum ssl_hs_wait_t wait = ssl_get_finished(hs);
|
1442
|
-
if (wait != ssl_hs_ok) {
|
1443
|
-
return wait;
|
1444
|
-
}
|
1445
|
-
|
1446
|
-
if (ssl->session != NULL) {
|
1447
|
-
hs->state = state_finish_server_handshake;
|
1448
|
-
} else {
|
1449
|
-
hs->state = state_send_server_finished;
|
1450
|
-
}
|
1451
|
-
|
1452
|
-
// If this is a full handshake with ChannelID then record the handshake
|
1453
|
-
// hashes in |hs->new_session| in case we need them to verify a
|
1454
|
-
// ChannelID signature on a resumption of this session in the future.
|
1455
|
-
if (ssl->session == NULL && ssl->s3->tlsext_channel_id_valid &&
|
1456
|
-
!tls1_record_handshake_hashes_for_channel_id(hs)) {
|
1457
|
-
return ssl_hs_error;
|
1458
|
-
}
|
1459
|
-
|
1460
|
-
return ssl_hs_ok;
|
1461
|
-
}
|
1462
|
-
|
1463
|
-
static enum ssl_hs_wait_t do_send_server_finished(SSL_HANDSHAKE *hs) {
|
1464
|
-
SSL *const ssl = hs->ssl;
|
1465
|
-
|
1466
|
-
if (hs->ticket_expected) {
|
1467
|
-
const SSL_SESSION *session;
|
1468
|
-
UniquePtr<SSL_SESSION> session_copy;
|
1469
|
-
if (ssl->session == NULL) {
|
1470
|
-
// Fix the timeout to measure from the ticket issuance time.
|
1471
|
-
ssl_session_rebase_time(ssl, hs->new_session.get());
|
1472
|
-
session = hs->new_session.get();
|
1473
|
-
} else {
|
1474
|
-
// We are renewing an existing session. Duplicate the session to adjust
|
1475
|
-
// the timeout.
|
1476
|
-
session_copy = SSL_SESSION_dup(ssl->session, SSL_SESSION_INCLUDE_NONAUTH);
|
1477
|
-
if (!session_copy) {
|
1478
|
-
return ssl_hs_error;
|
1479
|
-
}
|
1480
|
-
|
1481
|
-
ssl_session_rebase_time(ssl, session_copy.get());
|
1482
|
-
session = session_copy.get();
|
1483
|
-
}
|
1484
|
-
|
1485
|
-
ScopedCBB cbb;
|
1486
|
-
CBB body, ticket;
|
1487
|
-
if (!ssl->method->init_message(ssl, cbb.get(), &body,
|
1488
|
-
SSL3_MT_NEW_SESSION_TICKET) ||
|
1489
|
-
!CBB_add_u32(&body, session->timeout) ||
|
1490
|
-
!CBB_add_u16_length_prefixed(&body, &ticket) ||
|
1491
|
-
!ssl_encrypt_ticket(ssl, &ticket, session) ||
|
1492
|
-
!ssl_add_message_cbb(ssl, cbb.get())) {
|
1493
|
-
return ssl_hs_error;
|
1494
|
-
}
|
1495
|
-
}
|
1496
|
-
|
1497
|
-
if (!ssl->method->add_change_cipher_spec(ssl) ||
|
1498
|
-
!tls1_change_cipher_state(hs, evp_aead_seal) ||
|
1499
|
-
!ssl_send_finished(hs)) {
|
1500
|
-
return ssl_hs_error;
|
1501
|
-
}
|
1502
|
-
|
1503
|
-
if (ssl->session != NULL) {
|
1504
|
-
hs->state = state_read_change_cipher_spec;
|
1505
|
-
} else {
|
1506
|
-
hs->state = state_finish_server_handshake;
|
1507
|
-
}
|
1508
|
-
return ssl_hs_flush;
|
1509
|
-
}
|
1510
|
-
|
1511
|
-
static enum ssl_hs_wait_t do_finish_server_handshake(SSL_HANDSHAKE *hs) {
|
1512
|
-
SSL *const ssl = hs->ssl;
|
1513
|
-
|
1514
|
-
ssl->method->on_handshake_complete(ssl);
|
1515
|
-
|
1516
|
-
// If we aren't retaining peer certificates then we can discard it now.
|
1517
|
-
if (hs->new_session != NULL && ssl->retain_only_sha256_of_client_certs) {
|
1518
|
-
sk_CRYPTO_BUFFER_pop_free(hs->new_session->certs, CRYPTO_BUFFER_free);
|
1519
|
-
hs->new_session->certs = NULL;
|
1520
|
-
ssl->ctx->x509_method->session_clear(hs->new_session.get());
|
1521
|
-
}
|
1522
|
-
|
1523
|
-
if (ssl->session != NULL) {
|
1524
|
-
SSL_SESSION_up_ref(ssl->session);
|
1525
|
-
ssl->s3->established_session.reset(ssl->session);
|
1526
|
-
} else {
|
1527
|
-
ssl->s3->established_session = std::move(hs->new_session);
|
1528
|
-
ssl->s3->established_session->not_resumable = 0;
|
1529
|
-
}
|
1530
|
-
|
1531
|
-
hs->handshake_finalized = true;
|
1532
|
-
ssl->s3->initial_handshake_complete = true;
|
1533
|
-
ssl_update_cache(hs, SSL_SESS_CACHE_SERVER);
|
1534
|
-
|
1535
|
-
hs->state = state_done;
|
1536
|
-
return ssl_hs_ok;
|
1537
|
-
}
|
1538
|
-
|
1539
|
-
enum ssl_hs_wait_t ssl_server_handshake(SSL_HANDSHAKE *hs) {
|
1540
|
-
while (hs->state != state_done) {
|
1541
|
-
enum ssl_hs_wait_t ret = ssl_hs_error;
|
1542
|
-
enum ssl_server_hs_state_t state =
|
1543
|
-
static_cast<enum ssl_server_hs_state_t>(hs->state);
|
1544
|
-
switch (state) {
|
1545
|
-
case state_start_accept:
|
1546
|
-
ret = do_start_accept(hs);
|
1547
|
-
break;
|
1548
|
-
case state_read_client_hello:
|
1549
|
-
ret = do_read_client_hello(hs);
|
1550
|
-
break;
|
1551
|
-
case state_select_certificate:
|
1552
|
-
ret = do_select_certificate(hs);
|
1553
|
-
break;
|
1554
|
-
case state_tls13:
|
1555
|
-
ret = do_tls13(hs);
|
1556
|
-
break;
|
1557
|
-
case state_select_parameters:
|
1558
|
-
ret = do_select_parameters(hs);
|
1559
|
-
break;
|
1560
|
-
case state_send_server_hello:
|
1561
|
-
ret = do_send_server_hello(hs);
|
1562
|
-
break;
|
1563
|
-
case state_send_server_certificate:
|
1564
|
-
ret = do_send_server_certificate(hs);
|
1565
|
-
break;
|
1566
|
-
case state_send_server_key_exchange:
|
1567
|
-
ret = do_send_server_key_exchange(hs);
|
1568
|
-
break;
|
1569
|
-
case state_send_server_hello_done:
|
1570
|
-
ret = do_send_server_hello_done(hs);
|
1571
|
-
break;
|
1572
|
-
case state_read_client_certificate:
|
1573
|
-
ret = do_read_client_certificate(hs);
|
1574
|
-
break;
|
1575
|
-
case state_verify_client_certificate:
|
1576
|
-
ret = do_verify_client_certificate(hs);
|
1577
|
-
break;
|
1578
|
-
case state_read_client_key_exchange:
|
1579
|
-
ret = do_read_client_key_exchange(hs);
|
1580
|
-
break;
|
1581
|
-
case state_read_client_certificate_verify:
|
1582
|
-
ret = do_read_client_certificate_verify(hs);
|
1583
|
-
break;
|
1584
|
-
case state_read_change_cipher_spec:
|
1585
|
-
ret = do_read_change_cipher_spec(hs);
|
1586
|
-
break;
|
1587
|
-
case state_process_change_cipher_spec:
|
1588
|
-
ret = do_process_change_cipher_spec(hs);
|
1589
|
-
break;
|
1590
|
-
case state_read_next_proto:
|
1591
|
-
ret = do_read_next_proto(hs);
|
1592
|
-
break;
|
1593
|
-
case state_read_channel_id:
|
1594
|
-
ret = do_read_channel_id(hs);
|
1595
|
-
break;
|
1596
|
-
case state_read_client_finished:
|
1597
|
-
ret = do_read_client_finished(hs);
|
1598
|
-
break;
|
1599
|
-
case state_send_server_finished:
|
1600
|
-
ret = do_send_server_finished(hs);
|
1601
|
-
break;
|
1602
|
-
case state_finish_server_handshake:
|
1603
|
-
ret = do_finish_server_handshake(hs);
|
1604
|
-
break;
|
1605
|
-
case state_done:
|
1606
|
-
ret = ssl_hs_ok;
|
1607
|
-
break;
|
1608
|
-
}
|
1609
|
-
|
1610
|
-
if (hs->state != state) {
|
1611
|
-
ssl_do_info_callback(hs->ssl, SSL_CB_ACCEPT_LOOP, 1);
|
1612
|
-
}
|
1613
|
-
|
1614
|
-
if (ret != ssl_hs_ok) {
|
1615
|
-
return ret;
|
1616
|
-
}
|
1617
|
-
}
|
1618
|
-
|
1619
|
-
ssl_do_info_callback(hs->ssl, SSL_CB_HANDSHAKE_DONE, 1);
|
1620
|
-
return ssl_hs_ok;
|
1621
|
-
}
|
1622
|
-
|
1623
|
-
const char *ssl_server_handshake_state(SSL_HANDSHAKE *hs) {
|
1624
|
-
enum ssl_server_hs_state_t state =
|
1625
|
-
static_cast<enum ssl_server_hs_state_t>(hs->state);
|
1626
|
-
switch (state) {
|
1627
|
-
case state_start_accept:
|
1628
|
-
return "TLS server start_accept";
|
1629
|
-
case state_read_client_hello:
|
1630
|
-
return "TLS server read_client_hello";
|
1631
|
-
case state_select_certificate:
|
1632
|
-
return "TLS server select_certificate";
|
1633
|
-
case state_tls13:
|
1634
|
-
return tls13_server_handshake_state(hs);
|
1635
|
-
case state_select_parameters:
|
1636
|
-
return "TLS server select_parameters";
|
1637
|
-
case state_send_server_hello:
|
1638
|
-
return "TLS server send_server_hello";
|
1639
|
-
case state_send_server_certificate:
|
1640
|
-
return "TLS server send_server_certificate";
|
1641
|
-
case state_send_server_key_exchange:
|
1642
|
-
return "TLS server send_server_key_exchange";
|
1643
|
-
case state_send_server_hello_done:
|
1644
|
-
return "TLS server send_server_hello_done";
|
1645
|
-
case state_read_client_certificate:
|
1646
|
-
return "TLS server read_client_certificate";
|
1647
|
-
case state_verify_client_certificate:
|
1648
|
-
return "TLS server verify_client_certificate";
|
1649
|
-
case state_read_client_key_exchange:
|
1650
|
-
return "TLS server read_client_key_exchange";
|
1651
|
-
case state_read_client_certificate_verify:
|
1652
|
-
return "TLS server read_client_certificate_verify";
|
1653
|
-
case state_read_change_cipher_spec:
|
1654
|
-
return "TLS server read_change_cipher_spec";
|
1655
|
-
case state_process_change_cipher_spec:
|
1656
|
-
return "TLS server process_change_cipher_spec";
|
1657
|
-
case state_read_next_proto:
|
1658
|
-
return "TLS server read_next_proto";
|
1659
|
-
case state_read_channel_id:
|
1660
|
-
return "TLS server read_channel_id";
|
1661
|
-
case state_read_client_finished:
|
1662
|
-
return "TLS server read_client_finished";
|
1663
|
-
case state_send_server_finished:
|
1664
|
-
return "TLS server send_server_finished";
|
1665
|
-
case state_finish_server_handshake:
|
1666
|
-
return "TLS server finish_server_handshake";
|
1667
|
-
case state_done:
|
1668
|
-
return "TLS server done";
|
1669
|
-
}
|
1670
|
-
|
1671
|
-
return "TLS server unknown";
|
1672
|
-
}
|
1673
|
-
|
1674
|
-
}
|