grpc 1.26.0 → 1.30.0
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of grpc might be problematic. Click here for more details.
- checksums.yaml +4 -4
- data/Makefile +7860 -11139
- data/etc/roots.pem +44 -0
- data/include/grpc/grpc.h +2 -2
- data/include/grpc/grpc_security.h +59 -24
- data/include/grpc/grpc_security_constants.h +28 -0
- data/include/grpc/impl/codegen/grpc_types.h +38 -21
- data/include/grpc/impl/codegen/port_platform.h +14 -3
- data/include/grpc/impl/codegen/sync.h +5 -3
- data/include/grpc/impl/codegen/sync_abseil.h +36 -0
- data/include/grpc/module.modulemap +25 -37
- data/include/grpc/support/sync_abseil.h +26 -0
- data/src/core/ext/filters/client_channel/backend_metric.cc +7 -4
- data/src/core/ext/filters/client_channel/client_channel.cc +273 -264
- data/src/core/ext/filters/client_channel/client_channel_channelz.cc +31 -47
- data/src/core/ext/filters/client_channel/client_channel_channelz.h +1 -3
- data/src/core/ext/filters/client_channel/client_channel_plugin.cc +3 -2
- data/src/core/ext/filters/client_channel/health/health_check_client.cc +7 -22
- data/src/core/ext/filters/client_channel/health/health_check_client.h +3 -3
- data/src/core/ext/filters/client_channel/http_connect_handshaker.cc +1 -1
- data/src/core/ext/filters/client_channel/http_proxy.cc +25 -15
- data/src/core/ext/filters/client_channel/lb_policy.cc +20 -18
- data/src/core/ext/filters/client_channel/lb_policy.h +42 -33
- data/src/core/ext/filters/client_channel/lb_policy/address_filtering.cc +83 -0
- data/src/core/ext/filters/client_channel/lb_policy/address_filtering.h +99 -0
- data/src/core/ext/filters/client_channel/lb_policy/child_policy_handler.cc +297 -0
- data/src/core/ext/filters/client_channel/lb_policy/child_policy_handler.h +83 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb.cc +423 -627
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_balancer_addresses.cc +89 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_balancer_addresses.h +40 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_channel_secure.cc +11 -9
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_client_stats.h +3 -2
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/load_balancer_api.cc +88 -121
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/load_balancer_api.h +28 -57
- data/src/core/ext/filters/client_channel/lb_policy/pick_first/pick_first.cc +18 -21
- data/src/core/ext/filters/client_channel/lb_policy/priority/priority.cc +871 -0
- data/src/core/ext/filters/client_channel/lb_policy/round_robin/round_robin.cc +10 -14
- data/src/core/ext/filters/client_channel/lb_policy/subchannel_list.h +5 -11
- data/src/core/ext/filters/client_channel/lb_policy/weighted_target/weighted_target.cc +734 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/cds.cc +150 -101
- data/src/core/ext/filters/client_channel/lb_policy/xds/eds.cc +938 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/lrs.cc +528 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds.h +1 -2
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_routing.cc +834 -0
- data/src/core/ext/filters/client_channel/lb_policy_factory.h +3 -3
- data/src/core/ext/filters/client_channel/lb_policy_registry.cc +49 -77
- data/src/core/ext/filters/client_channel/lb_policy_registry.h +1 -1
- data/src/core/ext/filters/client_channel/local_subchannel_pool.h +2 -1
- data/src/core/ext/filters/client_channel/parse_address.cc +22 -21
- data/src/core/ext/filters/client_channel/resolver.cc +5 -8
- data/src/core/ext/filters/client_channel/resolver.h +12 -14
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/dns_resolver_ares.cc +129 -128
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver.cc +35 -35
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver.h +8 -7
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver_libuv.cc +17 -21
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver_posix.cc +5 -5
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver_windows.cc +72 -117
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper.cc +186 -135
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper.h +5 -3
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper_fallback.cc +7 -4
- data/src/core/ext/filters/client_channel/resolver/dns/native/dns_resolver.cc +42 -45
- data/src/core/ext/filters/client_channel/resolver/fake/fake_resolver.cc +94 -103
- data/src/core/ext/filters/client_channel/resolver/fake/fake_resolver.h +0 -4
- data/src/core/ext/filters/client_channel/resolver/sockaddr/sockaddr_resolver.cc +5 -5
- data/src/core/ext/filters/client_channel/resolver/xds/xds_resolver.cc +61 -10
- data/src/core/ext/filters/client_channel/resolver_factory.h +2 -2
- data/src/core/ext/filters/client_channel/resolver_registry.cc +6 -3
- data/src/core/ext/filters/client_channel/resolver_registry.h +8 -8
- data/src/core/ext/filters/client_channel/resolver_result_parsing.cc +242 -300
- data/src/core/ext/filters/client_channel/resolver_result_parsing.h +21 -18
- data/src/core/ext/filters/client_channel/resolving_lb_policy.cc +56 -206
- data/src/core/ext/filters/client_channel/resolving_lb_policy.h +11 -14
- data/src/core/ext/filters/client_channel/server_address.cc +6 -9
- data/src/core/ext/filters/client_channel/server_address.h +6 -12
- data/src/core/ext/filters/client_channel/service_config.cc +144 -253
- data/src/core/ext/filters/client_channel/service_config.h +32 -109
- data/src/core/ext/filters/client_channel/service_config_call_data.h +68 -0
- data/src/core/ext/filters/client_channel/service_config_parser.cc +87 -0
- data/src/core/ext/filters/client_channel/service_config_parser.h +89 -0
- data/src/core/ext/filters/client_channel/subchannel.cc +54 -24
- data/src/core/ext/filters/client_channel/subchannel.h +35 -11
- data/src/core/ext/filters/client_channel/xds/xds_api.cc +1556 -232
- data/src/core/ext/filters/client_channel/xds/xds_api.h +213 -114
- data/src/core/ext/filters/client_channel/xds/xds_bootstrap.cc +237 -345
- data/src/core/ext/filters/client_channel/xds/xds_bootstrap.h +34 -46
- data/src/core/ext/filters/client_channel/xds/xds_channel.h +3 -1
- data/src/core/ext/filters/client_channel/xds/xds_channel_secure.cc +18 -11
- data/src/core/ext/filters/client_channel/xds/xds_client.cc +1326 -399
- data/src/core/ext/filters/client_channel/xds/xds_client.h +124 -41
- data/src/core/ext/filters/client_channel/xds/xds_client_stats.cc +59 -138
- data/src/core/ext/filters/client_channel/xds/xds_client_stats.h +133 -154
- data/src/core/ext/filters/http/client/http_client_filter.cc +23 -28
- data/src/core/ext/filters/http/client_authority_filter.cc +4 -4
- data/src/core/ext/filters/http/http_filters_plugin.cc +27 -12
- data/src/core/ext/filters/http/message_compress/message_compress_filter.cc +258 -221
- data/src/core/ext/filters/http/message_compress/message_decompress_filter.cc +358 -0
- data/src/core/ext/filters/http/message_compress/message_decompress_filter.h +29 -0
- data/src/core/ext/filters/message_size/message_size_filter.cc +38 -44
- data/src/core/ext/filters/message_size/message_size_filter.h +5 -5
- data/src/core/ext/transport/chttp2/server/chttp2_server.cc +7 -10
- data/src/core/ext/transport/chttp2/transport/bin_encoder.cc +4 -6
- data/src/core/ext/transport/chttp2/transport/chttp2_transport.cc +28 -29
- data/src/core/ext/transport/chttp2/transport/chttp2_transport.h +1 -0
- data/src/core/ext/transport/chttp2/transport/flow_control.cc +3 -3
- data/src/core/ext/transport/chttp2/transport/frame_goaway.h +2 -3
- data/src/core/ext/transport/chttp2/transport/frame_ping.h +2 -3
- data/src/core/ext/transport/chttp2/transport/frame_rst_stream.h +2 -3
- data/src/core/ext/transport/chttp2/transport/frame_settings.h +2 -3
- data/src/core/ext/transport/chttp2/transport/frame_window_update.h +2 -3
- data/src/core/ext/transport/chttp2/transport/hpack_encoder.cc +29 -16
- data/src/core/ext/transport/chttp2/transport/hpack_encoder.h +2 -3
- data/src/core/ext/transport/chttp2/transport/hpack_parser.h +2 -3
- data/src/core/ext/transport/chttp2/transport/hpack_table.h +2 -2
- data/src/core/ext/transport/chttp2/transport/http2_settings.h +4 -5
- data/src/core/ext/transport/chttp2/transport/huffsyms.h +2 -3
- data/src/core/ext/transport/chttp2/transport/internal.h +14 -21
- data/src/core/ext/transport/chttp2/transport/stream_map.h +2 -3
- data/src/core/ext/transport/chttp2/transport/writing.cc +16 -9
- data/src/core/ext/transport/inproc/inproc_transport.cc +41 -42
- data/src/core/ext/upb-generated/envoy/annotations/deprecation.upb.c +17 -0
- data/src/core/ext/upb-generated/envoy/annotations/deprecation.upb.h +30 -0
- data/src/core/ext/upb-generated/envoy/annotations/resource.upb.c +27 -0
- data/src/core/ext/upb-generated/envoy/annotations/resource.upb.h +54 -0
- data/src/core/ext/upb-generated/envoy/api/v2/auth/cert.upb.c +5 -205
- data/src/core/ext/upb-generated/envoy/api/v2/auth/cert.upb.h +5 -788
- data/src/core/ext/upb-generated/envoy/api/v2/auth/common.upb.c +114 -0
- data/src/core/ext/upb-generated/envoy/api/v2/auth/common.upb.h +418 -0
- data/src/core/ext/upb-generated/envoy/api/v2/auth/secret.upb.c +72 -0
- data/src/core/ext/upb-generated/envoy/api/v2/auth/secret.upb.h +197 -0
- data/src/core/ext/upb-generated/envoy/api/v2/auth/tls.upb.c +105 -0
- data/src/core/ext/upb-generated/envoy/api/v2/auth/tls.upb.h +378 -0
- data/src/core/ext/upb-generated/envoy/api/v2/cds.upb.c +5 -362
- data/src/core/ext/upb-generated/envoy/api/v2/cds.upb.h +14 -1337
- data/src/core/ext/upb-generated/envoy/api/v2/cluster.upb.c +403 -0
- data/src/core/ext/upb-generated/envoy/api/v2/cluster.upb.h +1447 -0
- data/src/core/ext/upb-generated/envoy/api/v2/cluster/circuit_breaker.upb.c +30 -8
- data/src/core/ext/upb-generated/envoy/api/v2/cluster/circuit_breaker.upb.h +60 -0
- data/src/core/ext/upb-generated/envoy/api/v2/cluster/filter.upb.c +2 -0
- data/src/core/ext/upb-generated/envoy/api/v2/cluster/outlier_detection.upb.c +2 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/address.upb.c +7 -4
- data/src/core/ext/upb-generated/envoy/api/v2/core/address.upb.h +6 -2
- data/src/core/ext/upb-generated/envoy/api/v2/core/backoff.upb.c +35 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/backoff.upb.h +78 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/base.upb.c +87 -23
- data/src/core/ext/upb-generated/envoy/api/v2/core/base.upb.h +262 -62
- data/src/core/ext/upb-generated/envoy/api/v2/core/config_source.upb.c +20 -15
- data/src/core/ext/upb-generated/envoy/api/v2/core/config_source.upb.h +46 -32
- data/src/core/ext/upb-generated/envoy/api/v2/core/event_service_config.upb.c +34 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/event_service_config.upb.h +72 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/grpc_service.upb.c +27 -4
- data/src/core/ext/upb-generated/envoy/api/v2/core/grpc_service.upb.h +70 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/health_check.upb.c +46 -25
- data/src/core/ext/upb-generated/envoy/api/v2/core/health_check.upb.h +98 -25
- data/src/core/ext/upb-generated/envoy/api/v2/core/http_uri.upb.c +2 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/protocol.upb.c +77 -21
- data/src/core/ext/upb-generated/envoy/api/v2/core/protocol.upb.h +201 -4
- data/src/core/ext/upb-generated/envoy/api/v2/core/socket_option.upb.c +34 -0
- data/src/core/ext/upb-generated/envoy/api/v2/core/socket_option.upb.h +89 -0
- data/src/core/ext/upb-generated/envoy/api/v2/discovery.upb.c +2 -0
- data/src/core/ext/upb-generated/envoy/api/v2/eds.upb.c +8 -68
- data/src/core/ext/upb-generated/envoy/api/v2/eds.upb.h +14 -201
- data/src/core/ext/upb-generated/envoy/api/v2/endpoint.upb.c +92 -0
- data/src/core/ext/upb-generated/envoy/api/v2/endpoint.upb.h +240 -0
- data/src/core/ext/upb-generated/envoy/api/v2/endpoint/endpoint.upb.c +2 -71
- data/src/core/ext/upb-generated/envoy/api/v2/endpoint/endpoint.upb.h +3 -228
- data/src/core/ext/upb-generated/envoy/api/v2/endpoint/endpoint_components.upb.c +91 -0
- data/src/core/ext/upb-generated/envoy/api/v2/endpoint/endpoint_components.upb.h +266 -0
- data/src/core/ext/upb-generated/envoy/api/v2/endpoint/load_report.upb.c +2 -0
- data/src/core/ext/upb-generated/envoy/api/v2/lds.upb.c +31 -0
- data/src/core/ext/upb-generated/envoy/api/v2/lds.upb.h +53 -0
- data/src/core/ext/upb-generated/envoy/api/v2/listener.upb.c +109 -0
- data/src/core/ext/upb-generated/envoy/api/v2/listener.upb.h +399 -0
- data/src/core/ext/upb-generated/envoy/api/v2/listener/listener.upb.c +18 -0
- data/src/core/ext/upb-generated/envoy/api/v2/listener/listener.upb.h +33 -0
- data/src/core/ext/upb-generated/envoy/api/v2/listener/listener_components.upb.c +145 -0
- data/src/core/ext/upb-generated/envoy/api/v2/listener/listener_components.upb.h +527 -0
- data/src/core/ext/upb-generated/envoy/api/v2/listener/udp_listener_config.upb.c +43 -0
- data/src/core/ext/upb-generated/envoy/api/v2/listener/udp_listener_config.upb.h +112 -0
- data/src/core/ext/upb-generated/envoy/api/v2/rds.upb.c +30 -0
- data/src/core/ext/upb-generated/envoy/api/v2/rds.upb.h +53 -0
- data/src/core/ext/upb-generated/envoy/api/v2/route.upb.c +63 -0
- data/src/core/ext/upb-generated/envoy/api/v2/route.upb.h +199 -0
- data/src/core/ext/upb-generated/envoy/api/v2/route/route.upb.c +18 -0
- data/src/core/ext/upb-generated/envoy/api/v2/route/route.upb.h +33 -0
- data/src/core/ext/upb-generated/envoy/api/v2/route/route_components.upb.c +815 -0
- data/src/core/ext/upb-generated/envoy/api/v2/route/route_components.upb.h +3032 -0
- data/src/core/ext/upb-generated/envoy/api/v2/scoped_route.upb.c +59 -0
- data/src/core/ext/upb-generated/envoy/api/v2/scoped_route.upb.h +134 -0
- data/src/core/ext/upb-generated/envoy/api/v2/srds.upb.c +28 -0
- data/src/core/ext/upb-generated/envoy/api/v2/srds.upb.h +53 -0
- data/src/core/ext/upb-generated/envoy/config/filter/accesslog/v2/accesslog.upb.c +228 -0
- data/src/core/ext/upb-generated/envoy/config/filter/accesslog/v2/accesslog.upb.h +725 -0
- data/src/core/ext/upb-generated/envoy/config/filter/network/http_connection_manager/v2/http_connection_manager.upb.c +316 -0
- data/src/core/ext/upb-generated/envoy/config/filter/network/http_connection_manager/v2/http_connection_manager.upb.h +1132 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v2/api_listener.upb.c +33 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v2/api_listener.upb.h +65 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v2/http_tracer.upb.c +51 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v2/http_tracer.upb.h +125 -0
- data/src/core/ext/upb-generated/envoy/service/discovery/v2/ads.upb.c +1 -0
- data/src/core/ext/upb-generated/envoy/service/load_stats/v2/lrs.upb.c +4 -2
- data/src/core/ext/upb-generated/envoy/service/load_stats/v2/lrs.upb.h +4 -0
- data/src/core/ext/upb-generated/envoy/type/http.upb.c +1 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/regex.upb.c +63 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/regex.upb.h +144 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/string.upb.c +53 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/string.upb.h +133 -0
- data/src/core/ext/upb-generated/envoy/type/metadata/v2/metadata.upb.c +88 -0
- data/src/core/ext/upb-generated/envoy/type/metadata/v2/metadata.upb.h +258 -0
- data/src/core/ext/upb-generated/envoy/type/percent.upb.c +1 -0
- data/src/core/ext/upb-generated/envoy/type/range.upb.c +12 -0
- data/src/core/ext/upb-generated/envoy/type/range.upb.h +27 -0
- data/src/core/ext/upb-generated/envoy/type/semantic_version.upb.c +29 -0
- data/src/core/ext/upb-generated/envoy/type/semantic_version.upb.h +62 -0
- data/src/core/ext/upb-generated/envoy/type/tracing/v2/custom_tag.upb.c +89 -0
- data/src/core/ext/upb-generated/envoy/type/tracing/v2/custom_tag.upb.h +249 -0
- data/src/core/ext/upb-generated/google/protobuf/descriptor.upb.c +9 -8
- data/src/core/ext/upb-generated/google/protobuf/descriptor.upb.h +30 -24
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/handshaker.upb.c +30 -27
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/handshaker.upb.h +64 -52
- data/src/core/ext/upb-generated/src/proto/grpc/lb/v1/load_balancer.upb.c +13 -5
- data/src/core/ext/upb-generated/src/proto/grpc/lb/v1/load_balancer.upb.h +34 -0
- data/src/core/ext/upb-generated/udpa/annotations/migrate.upb.c +48 -0
- data/src/core/ext/upb-generated/udpa/annotations/migrate.upb.h +104 -0
- data/src/core/ext/upb-generated/udpa/annotations/sensitive.upb.c +17 -0
- data/src/core/ext/upb-generated/udpa/annotations/sensitive.upb.h +30 -0
- data/src/core/ext/upb-generated/udpa/annotations/status.upb.c +28 -0
- data/src/core/ext/upb-generated/udpa/annotations/status.upb.h +65 -0
- data/src/core/ext/upb-generated/validate/validate.upb.c +44 -39
- data/src/core/ext/upb-generated/validate/validate.upb.h +155 -119
- data/src/core/lib/channel/channel_args.cc +15 -14
- data/src/core/lib/channel/channel_args.h +3 -1
- data/src/core/lib/channel/channel_stack.h +20 -13
- data/src/core/lib/channel/channel_trace.cc +32 -41
- data/src/core/lib/channel/channel_trace.h +3 -3
- data/src/core/lib/channel/channelz.cc +163 -254
- data/src/core/lib/channel/channelz.h +20 -12
- data/src/core/lib/channel/channelz_registry.cc +52 -77
- data/src/core/lib/channel/channelz_registry.h +4 -4
- data/src/core/lib/channel/connected_channel.cc +7 -5
- data/src/core/lib/channel/context.h +1 -1
- data/src/core/lib/channel/handshaker.cc +11 -13
- data/src/core/lib/channel/handshaker.h +4 -2
- data/src/core/lib/channel/handshaker_registry.cc +5 -17
- data/src/core/lib/channel/status_util.cc +2 -3
- data/src/core/lib/compression/message_compress.cc +5 -1
- data/src/core/lib/debug/stats.cc +21 -27
- data/src/core/lib/debug/stats.h +3 -1
- data/src/core/lib/gpr/spinlock.h +2 -3
- data/src/core/lib/gpr/string.cc +2 -26
- data/src/core/lib/gpr/string.h +0 -16
- data/src/core/lib/gpr/sync_abseil.cc +116 -0
- data/src/core/lib/gpr/sync_posix.cc +8 -5
- data/src/core/lib/gpr/sync_windows.cc +4 -2
- data/src/core/lib/gpr/time.cc +4 -0
- data/src/core/lib/gpr/time_posix.cc +1 -1
- data/src/core/lib/gpr/time_precise.cc +1 -1
- data/src/core/lib/gprpp/atomic.h +6 -6
- data/src/core/lib/gprpp/fork.cc +1 -1
- data/src/core/lib/gprpp/host_port.cc +30 -36
- data/src/core/lib/gprpp/host_port.h +14 -17
- data/src/core/lib/gprpp/map.h +5 -11
- data/src/core/lib/gprpp/memory.h +2 -6
- data/src/core/lib/gprpp/ref_counted_ptr.h +5 -0
- data/src/core/lib/gprpp/sync.h +9 -0
- data/src/core/lib/http/format_request.cc +46 -65
- data/src/core/lib/http/httpcli.cc +2 -3
- data/src/core/lib/http/httpcli.h +2 -3
- data/src/core/lib/http/httpcli_security_connector.cc +5 -5
- data/src/core/lib/http/parser.h +2 -3
- data/src/core/lib/iomgr/buffer_list.cc +36 -35
- data/src/core/lib/iomgr/buffer_list.h +22 -21
- data/src/core/lib/iomgr/call_combiner.h +3 -2
- data/src/core/lib/iomgr/cfstream_handle.cc +3 -2
- data/src/core/lib/iomgr/closure.h +2 -3
- data/src/core/lib/iomgr/dualstack_socket_posix.cc +47 -0
- data/src/core/lib/iomgr/endpoint_cfstream.cc +2 -3
- data/src/core/lib/iomgr/endpoint_pair.h +2 -3
- data/src/core/lib/iomgr/error.cc +6 -9
- data/src/core/lib/iomgr/error.h +4 -5
- data/src/core/lib/iomgr/ev_apple.cc +356 -0
- data/src/core/lib/iomgr/ev_apple.h +43 -0
- data/src/core/lib/iomgr/ev_epoll1_linux.cc +20 -23
- data/src/core/lib/iomgr/ev_epollex_linux.cc +14 -7
- data/src/core/lib/iomgr/ev_poll_posix.cc +3 -3
- data/src/core/lib/iomgr/ev_posix.cc +2 -3
- data/src/core/lib/iomgr/exec_ctx.h +14 -2
- data/src/core/lib/iomgr/executor.cc +1 -1
- data/src/core/lib/iomgr/fork_posix.cc +4 -0
- data/src/core/lib/iomgr/iomgr_posix_cfstream.cc +84 -20
- data/src/core/lib/iomgr/load_file.cc +1 -0
- data/src/core/lib/iomgr/poller/eventmanager_libuv.cc +87 -0
- data/src/core/lib/iomgr/poller/eventmanager_libuv.h +88 -0
- data/src/core/lib/iomgr/pollset_set_custom.cc +10 -10
- data/src/core/lib/iomgr/pollset_uv.h +32 -0
- data/src/core/lib/iomgr/port.h +1 -0
- data/src/core/lib/iomgr/python_util.h +46 -0
- data/src/core/lib/iomgr/resolve_address.h +4 -6
- data/src/core/lib/iomgr/resolve_address_custom.cc +29 -39
- data/src/core/lib/iomgr/resolve_address_custom.h +4 -2
- data/src/core/lib/iomgr/resolve_address_posix.cc +10 -11
- data/src/core/lib/iomgr/resolve_address_windows.cc +8 -17
- data/src/core/lib/iomgr/resource_quota.cc +4 -6
- data/src/core/lib/iomgr/sockaddr_utils.cc +23 -29
- data/src/core/lib/iomgr/sockaddr_utils.h +9 -14
- data/src/core/lib/iomgr/socket_factory_posix.h +2 -3
- data/src/core/lib/iomgr/socket_mutator.h +2 -3
- data/src/core/lib/iomgr/socket_utils_common_posix.cc +21 -26
- data/src/core/lib/iomgr/socket_utils_posix.h +15 -0
- data/src/core/lib/iomgr/tcp_client_cfstream.cc +5 -7
- data/src/core/lib/iomgr/tcp_client_posix.cc +25 -22
- data/src/core/lib/iomgr/tcp_client_posix.h +6 -6
- data/src/core/lib/iomgr/tcp_client_windows.cc +2 -3
- data/src/core/lib/iomgr/tcp_custom.cc +2 -3
- data/src/core/lib/iomgr/tcp_custom.h +3 -0
- data/src/core/lib/iomgr/tcp_posix.cc +608 -56
- data/src/core/lib/iomgr/tcp_server_custom.cc +20 -11
- data/src/core/lib/iomgr/tcp_server_posix.cc +5 -4
- data/src/core/lib/iomgr/tcp_server_utils_posix_common.cc +13 -4
- data/src/core/lib/iomgr/tcp_server_utils_posix_ifaddrs.cc +8 -11
- data/src/core/lib/iomgr/tcp_uv.cc +3 -2
- data/src/core/lib/iomgr/time_averaged_stats.h +2 -3
- data/src/core/lib/iomgr/timer_generic.cc +2 -3
- data/src/core/lib/iomgr/timer_generic.h +39 -0
- data/src/core/lib/iomgr/timer_heap.h +2 -3
- data/src/core/lib/iomgr/udp_server.cc +9 -14
- data/src/core/lib/iomgr/work_serializer.cc +155 -0
- data/src/core/lib/iomgr/work_serializer.h +65 -0
- data/src/core/lib/json/json.h +209 -68
- data/src/core/lib/json/json_reader.cc +511 -319
- data/src/core/lib/json/json_writer.cc +202 -110
- data/src/core/lib/security/credentials/alts/check_gcp_environment.cc +1 -1
- data/src/core/lib/security/credentials/composite/composite_credentials.cc +19 -0
- data/src/core/lib/security/credentials/composite/composite_credentials.h +11 -4
- data/src/core/lib/security/credentials/credentials.cc +0 -84
- data/src/core/lib/security/credentials/credentials.h +18 -60
- data/src/core/lib/security/credentials/fake/fake_credentials.h +6 -1
- data/src/core/lib/security/credentials/google_default/google_default_credentials.cc +9 -12
- data/src/core/lib/security/credentials/iam/iam_credentials.cc +8 -6
- data/src/core/lib/security/credentials/iam/iam_credentials.h +4 -0
- data/src/core/lib/security/credentials/jwt/json_token.cc +26 -56
- data/src/core/lib/security/credentials/jwt/json_token.h +4 -6
- data/src/core/lib/security/credentials/jwt/jwt_credentials.cc +8 -18
- data/src/core/lib/security/credentials/jwt/jwt_credentials.h +12 -0
- data/src/core/lib/security/credentials/jwt/jwt_verifier.cc +151 -168
- data/src/core/lib/security/credentials/jwt/jwt_verifier.h +4 -6
- data/src/core/lib/security/credentials/oauth2/oauth2_credentials.cc +92 -61
- data/src/core/lib/security/credentials/oauth2/oauth2_credentials.h +10 -4
- data/src/core/lib/security/credentials/plugin/plugin_credentials.cc +19 -4
- data/src/core/lib/security/credentials/plugin/plugin_credentials.h +4 -1
- data/src/core/lib/security/credentials/tls/grpc_tls_credentials_options.cc +43 -13
- data/src/core/lib/security/credentials/tls/grpc_tls_credentials_options.h +47 -11
- data/src/core/lib/security/credentials/tls/tls_credentials.cc +128 -0
- data/src/core/lib/security/credentials/tls/tls_credentials.h +62 -0
- data/src/core/lib/security/security_connector/alts/alts_security_connector.cc +34 -6
- data/src/core/lib/security/security_connector/fake/fake_security_connector.cc +29 -9
- data/src/core/lib/security/security_connector/load_system_roots_fallback.cc +2 -2
- data/src/core/lib/security/security_connector/load_system_roots_linux.cc +5 -4
- data/src/core/lib/security/security_connector/local/local_security_connector.cc +32 -7
- data/src/core/lib/security/security_connector/security_connector.h +1 -1
- data/src/core/lib/security/security_connector/ssl/ssl_security_connector.cc +20 -37
- data/src/core/lib/security/security_connector/ssl/ssl_security_connector.h +4 -6
- data/src/core/lib/security/security_connector/ssl_utils.cc +107 -16
- data/src/core/lib/security/security_connector/ssl_utils.h +24 -11
- data/src/core/lib/security/security_connector/tls/tls_security_connector.cc +603 -0
- data/src/core/lib/security/security_connector/tls/tls_security_connector.h +183 -0
- data/src/core/lib/security/transport/client_auth_filter.cc +34 -2
- data/src/core/lib/security/transport/security_handshaker.cc +2 -2
- data/src/core/lib/security/util/json_util.cc +22 -15
- data/src/core/lib/security/util/json_util.h +2 -2
- data/src/core/lib/slice/slice_intern.cc +2 -3
- data/src/core/lib/slice/slice_internal.h +14 -0
- data/src/core/lib/slice/slice_utils.h +9 -0
- data/src/core/lib/surface/byte_buffer_reader.cc +2 -47
- data/src/core/lib/surface/call.cc +2 -3
- data/src/core/lib/surface/call_log_batch.cc +50 -58
- data/src/core/lib/surface/channel.cc +53 -31
- data/src/core/lib/surface/channel.h +35 -4
- data/src/core/lib/surface/channel_ping.cc +2 -3
- data/src/core/lib/surface/completion_queue.cc +55 -34
- data/src/core/lib/surface/event_string.cc +18 -25
- data/src/core/lib/surface/event_string.h +3 -1
- data/src/core/lib/surface/init_secure.cc +1 -4
- data/src/core/lib/surface/server.cc +570 -369
- data/src/core/lib/surface/server.h +32 -0
- data/src/core/lib/surface/version.cc +2 -2
- data/src/core/lib/transport/byte_stream.h +7 -2
- data/src/core/lib/transport/connectivity_state.cc +7 -6
- data/src/core/lib/transport/connectivity_state.h +5 -3
- data/src/core/lib/transport/metadata.cc +3 -3
- data/src/core/lib/transport/metadata_batch.h +2 -3
- data/src/core/lib/transport/static_metadata.h +1 -1
- data/src/core/lib/transport/status_conversion.cc +6 -14
- data/src/core/lib/transport/transport.cc +2 -3
- data/src/core/lib/transport/transport.h +3 -2
- data/src/core/lib/transport/transport_op_string.cc +61 -102
- data/src/core/lib/uri/uri_parser.h +2 -3
- data/src/core/plugin_registry/grpc_plugin_registry.cc +20 -4
- data/src/core/tsi/alts/crypt/aes_gcm.cc +0 -2
- data/src/core/tsi/alts/handshaker/alts_handshaker_client.cc +9 -2
- data/src/core/tsi/alts/handshaker/alts_handshaker_client.h +8 -4
- data/src/core/tsi/alts/handshaker/alts_tsi_handshaker.cc +44 -4
- data/src/core/tsi/alts/handshaker/alts_tsi_handshaker.h +10 -2
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_record_protocol_common.h +2 -3
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_zero_copy_grpc_protector.cc +3 -3
- data/src/core/tsi/fake_transport_security.cc +17 -18
- data/src/core/tsi/fake_transport_security.h +2 -0
- data/src/core/tsi/ssl/session_cache/ssl_session.h +0 -2
- data/src/core/tsi/ssl/session_cache/ssl_session_boringssl.cc +1 -1
- data/src/core/tsi/ssl/session_cache/ssl_session_cache.h +0 -2
- data/src/core/tsi/ssl/session_cache/ssl_session_openssl.cc +1 -1
- data/src/core/tsi/ssl_transport_security.cc +197 -47
- data/src/core/tsi/ssl_transport_security.h +23 -9
- data/src/core/tsi/ssl_types.h +0 -2
- data/src/core/tsi/transport_security.cc +13 -0
- data/src/core/tsi/transport_security.h +6 -9
- data/src/core/tsi/transport_security_grpc.cc +2 -2
- data/src/core/tsi/transport_security_grpc.h +4 -5
- data/src/core/tsi/transport_security_interface.h +15 -3
- data/src/ruby/bin/math_pb.rb +5 -5
- data/src/ruby/ext/grpc/rb_call.c +9 -1
- data/src/ruby/ext/grpc/rb_call_credentials.c +4 -1
- data/src/ruby/ext/grpc/rb_grpc_imports.generated.c +2 -0
- data/src/ruby/ext/grpc/rb_grpc_imports.generated.h +4 -1
- data/src/ruby/lib/grpc/errors.rb +103 -42
- data/src/ruby/lib/grpc/generic/active_call.rb +2 -3
- data/src/ruby/lib/grpc/generic/interceptors.rb +4 -4
- data/src/ruby/lib/grpc/generic/rpc_server.rb +9 -10
- data/src/ruby/lib/grpc/generic/service.rb +5 -4
- data/src/ruby/lib/grpc/structs.rb +1 -1
- data/src/ruby/lib/grpc/version.rb +1 -1
- data/src/ruby/pb/generate_proto_ruby.sh +5 -3
- data/src/ruby/pb/grpc/health/v1/health_pb.rb +3 -3
- data/src/ruby/pb/src/proto/grpc/testing/empty_pb.rb +1 -1
- data/src/ruby/pb/src/proto/grpc/testing/messages_pb.rb +34 -13
- data/src/ruby/pb/src/proto/grpc/testing/test_services_pb.rb +16 -0
- data/src/ruby/spec/debug_message_spec.rb +134 -0
- data/src/ruby/spec/generic/service_spec.rb +2 -0
- data/src/ruby/spec/pb/codegen/grpc/testing/package_options_ruby_style.proto +5 -0
- data/src/ruby/spec/pb/codegen/package_option_spec.rb +2 -0
- data/src/ruby/spec/testdata/ca.pem +18 -13
- data/src/ruby/spec/testdata/client.key +26 -14
- data/src/ruby/spec/testdata/client.pem +18 -12
- data/src/ruby/spec/testdata/server1.key +26 -14
- data/src/ruby/spec/testdata/server1.pem +20 -14
- data/third_party/abseil-cpp/absl/algorithm/algorithm.h +159 -0
- data/third_party/abseil-cpp/absl/base/attributes.h +621 -0
- data/third_party/abseil-cpp/absl/base/call_once.h +226 -0
- data/third_party/abseil-cpp/absl/base/casts.h +184 -0
- data/third_party/abseil-cpp/absl/base/config.h +671 -0
- data/third_party/abseil-cpp/absl/base/const_init.h +76 -0
- data/third_party/abseil-cpp/absl/base/dynamic_annotations.cc +129 -0
- data/third_party/abseil-cpp/absl/base/dynamic_annotations.h +389 -0
- data/third_party/abseil-cpp/absl/base/internal/atomic_hook.h +200 -0
- data/third_party/abseil-cpp/absl/base/internal/bits.h +218 -0
- data/third_party/abseil-cpp/absl/base/internal/cycleclock.cc +107 -0
- data/third_party/abseil-cpp/absl/base/internal/cycleclock.h +94 -0
- data/third_party/abseil-cpp/absl/base/internal/endian.h +266 -0
- data/third_party/abseil-cpp/absl/base/internal/errno_saver.h +43 -0
- data/third_party/abseil-cpp/absl/base/internal/hide_ptr.h +51 -0
- data/third_party/abseil-cpp/absl/base/internal/identity.h +37 -0
- data/third_party/abseil-cpp/absl/base/internal/inline_variable.h +107 -0
- data/third_party/abseil-cpp/absl/base/internal/invoke.h +187 -0
- data/third_party/abseil-cpp/absl/base/internal/low_level_scheduling.h +107 -0
- data/third_party/abseil-cpp/absl/base/internal/per_thread_tls.h +52 -0
- data/third_party/abseil-cpp/absl/base/internal/raw_logging.cc +240 -0
- data/third_party/abseil-cpp/absl/base/internal/raw_logging.h +183 -0
- data/third_party/abseil-cpp/absl/base/internal/scheduling_mode.h +58 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock.cc +233 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock.h +243 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_akaros.inc +35 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_linux.inc +66 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_posix.inc +46 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_wait.cc +81 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_wait.h +93 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_win32.inc +37 -0
- data/third_party/abseil-cpp/absl/base/internal/sysinfo.cc +416 -0
- data/third_party/abseil-cpp/absl/base/internal/sysinfo.h +66 -0
- data/third_party/abseil-cpp/absl/base/internal/thread_annotations.h +271 -0
- data/third_party/abseil-cpp/absl/base/internal/thread_identity.cc +152 -0
- data/third_party/abseil-cpp/absl/base/internal/thread_identity.h +259 -0
- data/third_party/abseil-cpp/absl/base/internal/throw_delegate.cc +108 -0
- data/third_party/abseil-cpp/absl/base/internal/throw_delegate.h +75 -0
- data/third_party/abseil-cpp/absl/base/internal/tsan_mutex_interface.h +66 -0
- data/third_party/abseil-cpp/absl/base/internal/unaligned_access.h +158 -0
- data/third_party/abseil-cpp/absl/base/internal/unscaledcycleclock.cc +140 -0
- data/third_party/abseil-cpp/absl/base/internal/unscaledcycleclock.h +124 -0
- data/third_party/abseil-cpp/absl/base/log_severity.cc +27 -0
- data/third_party/abseil-cpp/absl/base/log_severity.h +121 -0
- data/third_party/abseil-cpp/absl/base/macros.h +220 -0
- data/third_party/abseil-cpp/absl/base/optimization.h +181 -0
- data/third_party/abseil-cpp/absl/base/options.h +211 -0
- data/third_party/abseil-cpp/absl/base/policy_checks.h +111 -0
- data/third_party/abseil-cpp/absl/base/port.h +26 -0
- data/third_party/abseil-cpp/absl/base/thread_annotations.h +280 -0
- data/third_party/abseil-cpp/absl/container/inlined_vector.h +848 -0
- data/third_party/abseil-cpp/absl/container/internal/compressed_tuple.h +265 -0
- data/third_party/abseil-cpp/absl/container/internal/inlined_vector.h +892 -0
- data/third_party/abseil-cpp/absl/memory/memory.h +695 -0
- data/third_party/abseil-cpp/absl/meta/type_traits.h +759 -0
- data/third_party/abseil-cpp/absl/numeric/int128.cc +404 -0
- data/third_party/abseil-cpp/absl/numeric/int128.h +1091 -0
- data/third_party/abseil-cpp/absl/numeric/int128_have_intrinsic.inc +302 -0
- data/third_party/abseil-cpp/absl/numeric/int128_no_intrinsic.inc +308 -0
- data/third_party/abseil-cpp/absl/strings/ascii.cc +200 -0
- data/third_party/abseil-cpp/absl/strings/ascii.h +242 -0
- data/third_party/abseil-cpp/absl/strings/charconv.cc +984 -0
- data/third_party/abseil-cpp/absl/strings/charconv.h +119 -0
- data/third_party/abseil-cpp/absl/strings/escaping.cc +949 -0
- data/third_party/abseil-cpp/absl/strings/escaping.h +164 -0
- data/third_party/abseil-cpp/absl/strings/internal/char_map.h +156 -0
- data/third_party/abseil-cpp/absl/strings/internal/charconv_bigint.cc +359 -0
- data/third_party/abseil-cpp/absl/strings/internal/charconv_bigint.h +423 -0
- data/third_party/abseil-cpp/absl/strings/internal/charconv_parse.cc +504 -0
- data/third_party/abseil-cpp/absl/strings/internal/charconv_parse.h +99 -0
- data/third_party/abseil-cpp/absl/strings/internal/escaping.cc +180 -0
- data/third_party/abseil-cpp/absl/strings/internal/escaping.h +58 -0
- data/third_party/abseil-cpp/absl/strings/internal/memutil.cc +112 -0
- data/third_party/abseil-cpp/absl/strings/internal/memutil.h +148 -0
- data/third_party/abseil-cpp/absl/strings/internal/ostringstream.cc +36 -0
- data/third_party/abseil-cpp/absl/strings/internal/ostringstream.h +89 -0
- data/third_party/abseil-cpp/absl/strings/internal/resize_uninitialized.h +73 -0
- data/third_party/abseil-cpp/absl/strings/internal/stl_type_traits.h +248 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/arg.cc +388 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/arg.h +432 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/bind.cc +245 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/bind.h +209 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/checker.h +326 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/extension.cc +51 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/extension.h +415 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/float_conversion.cc +493 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/float_conversion.h +23 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/output.cc +72 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/output.h +104 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/parser.cc +334 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/parser.h +333 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_join_internal.h +314 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_split_internal.h +455 -0
- data/third_party/abseil-cpp/absl/strings/internal/utf8.cc +53 -0
- data/third_party/abseil-cpp/absl/strings/internal/utf8.h +50 -0
- data/third_party/abseil-cpp/absl/strings/match.cc +40 -0
- data/third_party/abseil-cpp/absl/strings/match.h +90 -0
- data/third_party/abseil-cpp/absl/strings/numbers.cc +965 -0
- data/third_party/abseil-cpp/absl/strings/numbers.h +266 -0
- data/third_party/abseil-cpp/absl/strings/str_cat.cc +246 -0
- data/third_party/abseil-cpp/absl/strings/str_cat.h +408 -0
- data/third_party/abseil-cpp/absl/strings/str_format.h +537 -0
- data/third_party/abseil-cpp/absl/strings/str_join.h +293 -0
- data/third_party/abseil-cpp/absl/strings/str_replace.cc +82 -0
- data/third_party/abseil-cpp/absl/strings/str_replace.h +219 -0
- data/third_party/abseil-cpp/absl/strings/str_split.cc +139 -0
- data/third_party/abseil-cpp/absl/strings/str_split.h +513 -0
- data/third_party/abseil-cpp/absl/strings/string_view.cc +235 -0
- data/third_party/abseil-cpp/absl/strings/string_view.h +622 -0
- data/third_party/abseil-cpp/absl/strings/strip.h +91 -0
- data/third_party/abseil-cpp/absl/strings/substitute.cc +171 -0
- data/third_party/abseil-cpp/absl/strings/substitute.h +693 -0
- data/third_party/abseil-cpp/absl/time/civil_time.cc +175 -0
- data/third_party/abseil-cpp/absl/time/civil_time.h +538 -0
- data/third_party/abseil-cpp/absl/time/clock.cc +569 -0
- data/third_party/abseil-cpp/absl/time/clock.h +74 -0
- data/third_party/abseil-cpp/absl/time/duration.cc +922 -0
- data/third_party/abseil-cpp/absl/time/format.cc +153 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/civil_time.h +332 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/civil_time_detail.h +622 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/time_zone.h +384 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/zone_info_source.h +102 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/civil_time_detail.cc +94 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_fixed.cc +140 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_fixed.h +52 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_format.cc +922 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_if.cc +45 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_if.h +76 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_impl.cc +121 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_impl.h +93 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_info.cc +958 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_info.h +138 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_libc.cc +308 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_libc.h +55 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_lookup.cc +187 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_posix.cc +159 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_posix.h +132 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/tzfile.h +122 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/zone_info_source.cc +115 -0
- data/third_party/abseil-cpp/absl/time/internal/get_current_time_chrono.inc +31 -0
- data/third_party/abseil-cpp/absl/time/internal/get_current_time_posix.inc +24 -0
- data/third_party/abseil-cpp/absl/time/time.cc +499 -0
- data/third_party/abseil-cpp/absl/time/time.h +1584 -0
- data/third_party/abseil-cpp/absl/types/bad_optional_access.cc +48 -0
- data/third_party/abseil-cpp/absl/types/bad_optional_access.h +78 -0
- data/third_party/abseil-cpp/absl/types/internal/optional.h +396 -0
- data/third_party/abseil-cpp/absl/types/internal/span.h +128 -0
- data/third_party/abseil-cpp/absl/types/optional.h +776 -0
- data/third_party/abseil-cpp/absl/types/span.h +713 -0
- data/third_party/abseil-cpp/absl/utility/utility.h +350 -0
- data/third_party/boringssl-with-bazel/err_data.c +1439 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_bitstr.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_bool.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_d2i_fp.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_dup.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_enum.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_gentm.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_i2d_fp.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_int.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_mbstr.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_object.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_octet.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_print.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_strnid.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_time.c +212 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_type.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_utctm.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/a_utf8.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/asn1_lib.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/asn1_locl.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/asn1_par.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/asn_pack.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/f_enum.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/f_int.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/f_string.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/tasn_dec.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/tasn_enc.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/tasn_fre.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/tasn_new.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/tasn_typ.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/tasn_utl.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/asn1/time_support.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/base64/base64.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bio/bio.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bio/bio_mem.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/connect.c +545 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/fd.c +279 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/file.c +317 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bio/hexdump.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bio/internal.h +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/pair.c +488 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bio/printf.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bio/socket.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bio/socket_helper.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bn_extra/bn_asn1.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bn_extra/convert.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/buf/buf.c +172 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bytestring/asn1_compat.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bytestring/ber.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/cbb.c +719 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/cbs.c +688 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bytestring/internal.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/bytestring/unicode.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/chacha/chacha.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/chacha/internal.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cipher_extra/cipher_extra.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/derive_key.c +152 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cipher_extra/e_aesccm.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cipher_extra/e_aesctrhmac.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_aesgcmsiv.c +891 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cipher_extra/e_chacha20poly1305.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cipher_extra/e_null.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cipher_extra/e_rc2.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cipher_extra/e_rc4.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cipher_extra/e_tls.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cipher_extra/internal.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cipher_extra/tls_cbc.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cmac/cmac.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/conf/conf.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/conf/conf_def.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/conf/internal.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cpu-aarch64-fuchsia.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cpu-aarch64-linux.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-arm-linux.c +220 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cpu-arm-linux.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cpu-arm.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-intel.c +291 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/cpu-ppc64le.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/crypto.c +226 -0
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/curve25519.c +2159 -0
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/curve25519_tables.h +7872 -0
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/internal.h +146 -0
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/spake25519.c +539 -0
- data/third_party/boringssl-with-bazel/src/crypto/dh/check.c +217 -0
- data/third_party/boringssl-with-bazel/src/crypto/dh/dh.c +533 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/dh/dh_asn1.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/dh/params.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/digest_extra/digest_extra.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/dsa/dsa.c +980 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/dsa/dsa_asn1.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/ec_extra/ec_asn1.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/ec_derive.c +95 -0
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/hash_to_curve.c +425 -0
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/internal.h +78 -0
- data/third_party/boringssl-with-bazel/src/crypto/ecdh_extra/ecdh_extra.c +124 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/ecdsa_extra/ecdsa_asn1.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/engine/engine.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/err/err.c +850 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/err/internal.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/evp/digestsign.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/evp/evp.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/evp/evp_asn1.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/evp/evp_ctx.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/evp/internal.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/evp/p_dsa_asn1.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_ec.c +286 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/evp/p_ec_asn1.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/evp/p_ed25519.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/evp/p_ed25519_asn1.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_rsa.c +648 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/evp/p_rsa_asn1.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/evp/p_x25519.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_x25519_asn1.c +248 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/evp/pbkdf.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/evp/print.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/evp/scrypt.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/evp/sign.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/ex_data.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/aes.c +108 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/aes_nohw.c +1282 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/internal.h +238 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/aes/key_wrap.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/mode_wrappers.c +106 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bcm.c +263 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/add.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/asm/x86_64-gcc.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/bn.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/bytes.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/cmp.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/ctx.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/div.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/div_extra.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/exponentiation.c +1288 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/gcd.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/gcd_extra.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/generic.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/internal.h +694 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/jacobi.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/montgomery.c +502 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/montgomery_inv.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/mul.c +749 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/prime.c +1068 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/random.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/rsaz_exp.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/rsaz_exp.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/shift.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/bn/sqrt.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/cipher/aead.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/cipher/cipher.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/e_aes.c +1302 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/cipher/e_des.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/cipher/internal.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/delocate.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/des/des.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/des/internal.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/digest/digest.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/digest/digests.c +296 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/digest/internal.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/digest/md32_common.h +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec.c +1252 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec_key.c +465 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec_montgomery.c +524 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/felem.c +100 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/internal.h +775 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/oct.c +328 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p224-64.c +1178 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256-x86_64-table.h +9497 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256-x86_64.c +632 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/ec/p256-x86_64.h +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256.c +736 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256_table.h +297 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/scalar.c +175 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/simple.c +357 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/simple_mul.c +270 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/ec/util.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/wnaf.c +270 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ecdh/ecdh.c +122 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ecdsa/ecdsa.c +328 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/fips_shared_support.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/hmac/hmac.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/is_fips.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/md4/md4.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/md5/internal.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/md5/md5.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/modes/cbc.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/modes/cfb.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/modes/ctr.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/gcm.c +729 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/gcm_nohw.c +304 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/internal.h +441 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/modes/ofb.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/modes/polyval.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/rand/ctrdrbg.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/fork_detect.c +137 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/fork_detect.h +49 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/getrandom_fillin.h +64 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/internal.h +163 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/rand.c +378 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/urandom.c +391 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/blinding.c +243 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/internal.h +127 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/rsa/padding.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/rsa.c +898 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/rsa_impl.c +1358 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/self_check/self_check.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/sha/internal.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/sha/sha1-altivec.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/sha/sha1.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/sha/sha256.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/sha512.c +544 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/tls/internal.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/fipsmodule/tls/kdf.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/hkdf/hkdf.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/hrss/hrss.c +2100 -0
- data/third_party/boringssl-with-bazel/src/crypto/hrss/internal.h +61 -0
- data/third_party/boringssl-with-bazel/src/crypto/internal.h +834 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/lhash/lhash.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/mem.c +359 -0
- data/third_party/boringssl-with-bazel/src/crypto/obj/obj.c +549 -0
- data/third_party/boringssl-with-bazel/src/crypto/obj/obj_dat.h +11585 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/obj/obj_xref.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/pem/pem_all.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_info.c +360 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_lib.c +777 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_oth.c +87 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_pk8.c +257 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_pkey.c +218 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/pem/pem_x509.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/pem/pem_xaux.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/pkcs7/internal.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/pkcs7/pkcs7.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs7/pkcs7_x509.c +385 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/pkcs8/internal.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/pkcs8/p5_pbev2.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/pkcs8/pkcs8.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/pkcs8/pkcs8_x509.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/poly1305/internal.h +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/poly1305/poly1305.c +318 -0
- data/third_party/boringssl-with-bazel/src/crypto/poly1305/poly1305_arm.c +305 -0
- data/third_party/boringssl-with-bazel/src/crypto/poly1305/poly1305_vec.c +856 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/pool/internal.h +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/pool/pool.c +220 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/deterministic.c +52 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/rand_extra/forkunsafe.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/rand_extra/fuchsia.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/rand_extra/rand_extra.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/windows.c +69 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/rc4/rc4.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/refcount_c11.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/refcount_lock.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/rsa_extra/rsa_asn1.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/rsa_extra/rsa_print.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/siphash/siphash.c +82 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/stack/stack.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/thread.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/thread_none.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/thread_pthread.c +210 -0
- data/third_party/boringssl-with-bazel/src/crypto/thread_win.c +260 -0
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/internal.h +278 -0
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/pmbtoken.c +1474 -0
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/trust_token.c +720 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/a_digest.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/a_sign.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/a_strex.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/a_verify.c +114 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/algorithm.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/asn1_gen.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/by_dir.c +458 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/by_file.c +275 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/charmap.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/i2d_pr.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/internal.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/rsa_pss.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/t_crl.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/t_req.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/t_x509.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/t_x509a.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/vpm_int.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509_att.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_cmp.c +476 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509_d2.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509_def.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509_ext.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509_lu.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_obj.c +198 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_r2x.c +116 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_req.c +341 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_set.c +185 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_trs.c +326 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509_txt.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509_v3.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_vfy.c +2487 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_vpm.c +671 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509cset.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509name.c +389 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509rset.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x509spki.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_algor.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_all.c +399 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_attrib.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_crl.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_exten.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_info.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_name.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_pkey.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_pubkey.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_req.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_sig.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_spki.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_val.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_x509.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509/x_x509a.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/ext_dat.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/internal.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/pcy_cache.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/pcy_data.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/pcy_int.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/pcy_lib.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/pcy_map.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/pcy_node.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/pcy_tree.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_akey.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_akeya.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_alt.c +629 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_bcons.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_bitst.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_conf.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_cpols.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_crld.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_enum.c +100 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_extku.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_genn.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_ia5.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_info.c +218 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_int.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_lib.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_ncons.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_ocsp.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_pci.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_pcia.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_pcons.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_pku.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_pmaps.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_prn.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_purp.c +843 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_skey.c +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/crypto/x509v3/v3_sxnet.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_utl.c +1395 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/aead.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/aes.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/arm_arch.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/asn1.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/asn1_mac.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/asn1t.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/base.h +575 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/base64.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/bio.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/blowfish.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/bn.h +1057 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/buf.h +137 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/buffer.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/bytestring.h +561 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/cast.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/chacha.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/cipher.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/cmac.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/conf.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/cpu.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/crypto.h +149 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/curve25519.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/des.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/dh.h +319 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/digest.h +331 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/dsa.h +457 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/dtls1.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/e_os2.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ec.h +424 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ec_key.h +372 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/ecdh.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ecdsa.h +205 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/engine.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/err.h +465 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/evp.h +1050 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/ex_data.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/hkdf.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/hmac.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/hrss.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/is_boringssl.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/lhash.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/md4.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/md5.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/mem.h +175 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/nid.h +4259 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/obj.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/obj_mac.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/objects.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/opensslconf.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/opensslv.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/ossl_typ.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/pem.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/pkcs12.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/pkcs7.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/pkcs8.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/poly1305.h +49 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/pool.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/rand.h +111 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/rc4.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/ripemd.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/rsa.h +818 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/safestack.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/sha.h +294 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/siphash.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/span.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/srtp.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ssl.h +5198 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/ssl3.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/stack.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/thread.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/tls1.h +632 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/trust_token.h +291 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/type_check.h +0 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/x509.h +1207 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/x509_vfy.h +681 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/include/openssl/x509v3.h +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/ssl/bio_ssl.cc +0 -0
- data/third_party/boringssl-with-bazel/src/ssl/d1_both.cc +837 -0
- data/third_party/boringssl-with-bazel/src/ssl/d1_lib.cc +268 -0
- data/third_party/boringssl-with-bazel/src/ssl/d1_pkt.cc +273 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/ssl/d1_srtp.cc +0 -0
- data/third_party/boringssl-with-bazel/src/ssl/dtls_method.cc +200 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/ssl/dtls_record.cc +0 -0
- data/third_party/boringssl-with-bazel/src/ssl/handoff.cc +675 -0
- data/third_party/boringssl-with-bazel/src/ssl/handshake.cc +703 -0
- data/third_party/boringssl-with-bazel/src/ssl/handshake_client.cc +1890 -0
- data/third_party/boringssl-with-bazel/src/ssl/handshake_server.cc +1805 -0
- data/third_party/boringssl-with-bazel/src/ssl/internal.h +3572 -0
- data/third_party/boringssl-with-bazel/src/ssl/s3_both.cc +724 -0
- data/third_party/boringssl-with-bazel/src/ssl/s3_lib.cc +221 -0
- data/third_party/boringssl-with-bazel/src/ssl/s3_pkt.cc +458 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/ssl/ssl_aead_ctx.cc +0 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_asn1.cc +856 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_buffer.cc +306 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_cert.cc +1019 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_cipher.cc +1718 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/ssl/ssl_file.cc +0 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/ssl/ssl_key_share.cc +0 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_lib.cc +3015 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_privkey.cc +835 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_session.cc +1333 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_stat.cc +230 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/ssl/ssl_transcript.cc +0 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_versions.cc +394 -0
- data/third_party/{boringssl → boringssl-with-bazel/src}/ssl/ssl_x509.cc +0 -0
- data/third_party/boringssl-with-bazel/src/ssl/t1_enc.cc +365 -0
- data/third_party/boringssl-with-bazel/src/ssl/t1_lib.cc +3870 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls13_both.cc +689 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls13_client.cc +1017 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls13_enc.cc +513 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls13_server.cc +1096 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls_method.cc +317 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls_record.cc +703 -0
- data/third_party/boringssl-with-bazel/src/third_party/fiat/curve25519_32.h +981 -0
- data/third_party/boringssl-with-bazel/src/third_party/fiat/curve25519_64.h +619 -0
- data/third_party/boringssl-with-bazel/src/third_party/fiat/p256_32.h +3147 -0
- data/third_party/boringssl-with-bazel/src/third_party/fiat/p256_64.h +1226 -0
- data/third_party/upb/upb/decode.c +4 -0
- data/third_party/upb/upb/port.c +0 -1
- data/third_party/upb/upb/port_def.inc +1 -3
- data/third_party/upb/upb/table.c +2 -1
- metadata +758 -509
- data/src/boringssl/err_data.c +0 -1407
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds.cc +0 -1898
- data/src/core/lib/gprpp/inlined_vector.h +0 -246
- data/src/core/lib/gprpp/optional.h +0 -48
- data/src/core/lib/gprpp/string_view.h +0 -165
- data/src/core/lib/iomgr/logical_thread.cc +0 -103
- data/src/core/lib/iomgr/logical_thread.h +0 -52
- data/src/core/lib/json/json.cc +0 -94
- data/src/core/lib/json/json_common.h +0 -34
- data/src/core/lib/json/json_reader.h +0 -146
- data/src/core/lib/json/json_string.cc +0 -367
- data/src/core/lib/json/json_writer.h +0 -84
- data/src/core/lib/security/credentials/tls/spiffe_credentials.cc +0 -129
- data/src/core/lib/security/credentials/tls/spiffe_credentials.h +0 -62
- data/src/core/lib/security/security_connector/tls/spiffe_security_connector.cc +0 -541
- data/src/core/lib/security/security_connector/tls/spiffe_security_connector.h +0 -158
- data/src/core/tsi/grpc_shadow_boringssl.h +0 -3297
- data/third_party/boringssl/crypto/asn1/a_time.c +0 -213
- data/third_party/boringssl/crypto/bio/connect.c +0 -546
- data/third_party/boringssl/crypto/bio/fd.c +0 -280
- data/third_party/boringssl/crypto/bio/file.c +0 -318
- data/third_party/boringssl/crypto/bio/pair.c +0 -489
- data/third_party/boringssl/crypto/buf/buf.c +0 -231
- data/third_party/boringssl/crypto/bytestring/cbb.c +0 -680
- data/third_party/boringssl/crypto/bytestring/cbs.c +0 -631
- data/third_party/boringssl/crypto/cipher_extra/derive_key.c +0 -152
- data/third_party/boringssl/crypto/cipher_extra/e_aesgcmsiv.c +0 -883
- data/third_party/boringssl/crypto/cpu-arm-linux.c +0 -219
- data/third_party/boringssl/crypto/cpu-intel.c +0 -282
- data/third_party/boringssl/crypto/crypto.c +0 -215
- data/third_party/boringssl/crypto/curve25519/spake25519.c +0 -539
- data/third_party/boringssl/crypto/dh/check.c +0 -217
- data/third_party/boringssl/crypto/dh/dh.c +0 -519
- data/third_party/boringssl/crypto/dsa/dsa.c +0 -970
- data/third_party/boringssl/crypto/ec_extra/ec_derive.c +0 -96
- data/third_party/boringssl/crypto/ecdh_extra/ecdh_extra.c +0 -124
- data/third_party/boringssl/crypto/err/err.c +0 -849
- data/third_party/boringssl/crypto/evp/p_ec.c +0 -287
- data/third_party/boringssl/crypto/evp/p_rsa.c +0 -636
- data/third_party/boringssl/crypto/evp/p_x25519_asn1.c +0 -249
- data/third_party/boringssl/crypto/fipsmodule/aes/aes.c +0 -860
- data/third_party/boringssl/crypto/fipsmodule/aes/internal.h +0 -240
- data/third_party/boringssl/crypto/fipsmodule/aes/mode_wrappers.c +0 -108
- data/third_party/boringssl/crypto/fipsmodule/bcm.c +0 -260
- data/third_party/boringssl/crypto/fipsmodule/bn/exponentiation.c +0 -1288
- data/third_party/boringssl/crypto/fipsmodule/bn/internal.h +0 -691
- data/third_party/boringssl/crypto/fipsmodule/bn/montgomery.c +0 -502
- data/third_party/boringssl/crypto/fipsmodule/bn/mul.c +0 -873
- data/third_party/boringssl/crypto/fipsmodule/bn/prime.c +0 -1069
- data/third_party/boringssl/crypto/fipsmodule/cipher/e_aes.c +0 -1304
- data/third_party/boringssl/crypto/fipsmodule/digest/digests.c +0 -280
- data/third_party/boringssl/crypto/fipsmodule/ec/ec.c +0 -1080
- data/third_party/boringssl/crypto/fipsmodule/ec/ec_key.c +0 -479
- data/third_party/boringssl/crypto/fipsmodule/ec/ec_montgomery.c +0 -483
- data/third_party/boringssl/crypto/fipsmodule/ec/felem.c +0 -82
- data/third_party/boringssl/crypto/fipsmodule/ec/internal.h +0 -503
- data/third_party/boringssl/crypto/fipsmodule/ec/oct.c +0 -336
- data/third_party/boringssl/crypto/fipsmodule/ec/p224-64.c +0 -1187
- data/third_party/boringssl/crypto/fipsmodule/ec/p256-x86_64-table.h +0 -9501
- data/third_party/boringssl/crypto/fipsmodule/ec/p256-x86_64.c +0 -651
- data/third_party/boringssl/crypto/fipsmodule/ec/scalar.c +0 -96
- data/third_party/boringssl/crypto/fipsmodule/ec/simple.c +0 -380
- data/third_party/boringssl/crypto/fipsmodule/ec/simple_mul.c +0 -84
- data/third_party/boringssl/crypto/fipsmodule/ec/wnaf.c +0 -227
- data/third_party/boringssl/crypto/fipsmodule/ecdh/ecdh.c +0 -122
- data/third_party/boringssl/crypto/fipsmodule/ecdsa/ecdsa.c +0 -313
- data/third_party/boringssl/crypto/fipsmodule/modes/gcm.c +0 -877
- data/third_party/boringssl/crypto/fipsmodule/modes/internal.h +0 -451
- data/third_party/boringssl/crypto/fipsmodule/rand/internal.h +0 -127
- data/third_party/boringssl/crypto/fipsmodule/rand/rand.c +0 -363
- data/third_party/boringssl/crypto/fipsmodule/rand/urandom.c +0 -481
- data/third_party/boringssl/crypto/fipsmodule/rsa/blinding.c +0 -239
- data/third_party/boringssl/crypto/fipsmodule/rsa/internal.h +0 -126
- data/third_party/boringssl/crypto/fipsmodule/rsa/rsa.c +0 -879
- data/third_party/boringssl/crypto/fipsmodule/rsa/rsa_impl.c +0 -1335
- data/third_party/boringssl/crypto/fipsmodule/sha/sha512.c +0 -535
- data/third_party/boringssl/crypto/hrss/hrss.c +0 -2201
- data/third_party/boringssl/crypto/hrss/internal.h +0 -62
- data/third_party/boringssl/crypto/internal.h +0 -814
- data/third_party/boringssl/crypto/mem.c +0 -272
- data/third_party/boringssl/crypto/obj/obj.c +0 -554
- data/third_party/boringssl/crypto/obj/obj_dat.h +0 -11550
- data/third_party/boringssl/crypto/pem/pem_info.c +0 -361
- data/third_party/boringssl/crypto/pem/pem_lib.c +0 -777
- data/third_party/boringssl/crypto/pem/pem_oth.c +0 -88
- data/third_party/boringssl/crypto/pem/pem_pk8.c +0 -258
- data/third_party/boringssl/crypto/pem/pem_pkey.c +0 -219
- data/third_party/boringssl/crypto/pkcs7/pkcs7_x509.c +0 -385
- data/third_party/boringssl/crypto/poly1305/poly1305.c +0 -318
- data/third_party/boringssl/crypto/poly1305/poly1305_arm.c +0 -304
- data/third_party/boringssl/crypto/poly1305/poly1305_vec.c +0 -839
- data/third_party/boringssl/crypto/pool/pool.c +0 -221
- data/third_party/boringssl/crypto/rand_extra/deterministic.c +0 -56
- data/third_party/boringssl/crypto/rand_extra/windows.c +0 -53
- data/third_party/boringssl/crypto/siphash/siphash.c +0 -80
- data/third_party/boringssl/crypto/thread_pthread.c +0 -206
- data/third_party/boringssl/crypto/thread_win.c +0 -256
- data/third_party/boringssl/crypto/x509/a_verify.c +0 -115
- data/third_party/boringssl/crypto/x509/by_dir.c +0 -458
- data/third_party/boringssl/crypto/x509/by_file.c +0 -276
- data/third_party/boringssl/crypto/x509/x509_cmp.c +0 -477
- data/third_party/boringssl/crypto/x509/x509_obj.c +0 -198
- data/third_party/boringssl/crypto/x509/x509_r2x.c +0 -117
- data/third_party/boringssl/crypto/x509/x509_req.c +0 -342
- data/third_party/boringssl/crypto/x509/x509_set.c +0 -169
- data/third_party/boringssl/crypto/x509/x509_trs.c +0 -327
- data/third_party/boringssl/crypto/x509/x509_vfy.c +0 -2483
- data/third_party/boringssl/crypto/x509/x509_vpm.c +0 -672
- data/third_party/boringssl/crypto/x509/x509name.c +0 -388
- data/third_party/boringssl/crypto/x509/x_all.c +0 -400
- data/third_party/boringssl/crypto/x509v3/v3_alt.c +0 -629
- data/third_party/boringssl/crypto/x509v3/v3_enum.c +0 -100
- data/third_party/boringssl/crypto/x509v3/v3_info.c +0 -219
- data/third_party/boringssl/crypto/x509v3/v3_purp.c +0 -844
- data/third_party/boringssl/crypto/x509v3/v3_utl.c +0 -1396
- data/third_party/boringssl/include/openssl/base.h +0 -571
- data/third_party/boringssl/include/openssl/bn.h +0 -1045
- data/third_party/boringssl/include/openssl/buf.h +0 -137
- data/third_party/boringssl/include/openssl/bytestring.h +0 -527
- data/third_party/boringssl/include/openssl/crypto.h +0 -144
- data/third_party/boringssl/include/openssl/dh.h +0 -299
- data/third_party/boringssl/include/openssl/digest.h +0 -330
- data/third_party/boringssl/include/openssl/dsa.h +0 -441
- data/third_party/boringssl/include/openssl/ec.h +0 -417
- data/third_party/boringssl/include/openssl/ec_key.h +0 -370
- data/third_party/boringssl/include/openssl/ecdsa.h +0 -199
- data/third_party/boringssl/include/openssl/err.h +0 -461
- data/third_party/boringssl/include/openssl/evp.h +0 -1030
- data/third_party/boringssl/include/openssl/mem.h +0 -160
- data/third_party/boringssl/include/openssl/nid.h +0 -4245
- data/third_party/boringssl/include/openssl/poly1305.h +0 -51
- data/third_party/boringssl/include/openssl/rand.h +0 -125
- data/third_party/boringssl/include/openssl/rsa.h +0 -787
- data/third_party/boringssl/include/openssl/sha.h +0 -268
- data/third_party/boringssl/include/openssl/ssl.h +0 -5113
- data/third_party/boringssl/include/openssl/tls1.h +0 -634
- data/third_party/boringssl/include/openssl/x509.h +0 -1205
- data/third_party/boringssl/include/openssl/x509_vfy.h +0 -680
- data/third_party/boringssl/ssl/d1_both.cc +0 -842
- data/third_party/boringssl/ssl/d1_lib.cc +0 -268
- data/third_party/boringssl/ssl/d1_pkt.cc +0 -274
- data/third_party/boringssl/ssl/dtls_method.cc +0 -192
- data/third_party/boringssl/ssl/handoff.cc +0 -489
- data/third_party/boringssl/ssl/handshake.cc +0 -691
- data/third_party/boringssl/ssl/handshake_client.cc +0 -1871
- data/third_party/boringssl/ssl/handshake_server.cc +0 -1801
- data/third_party/boringssl/ssl/internal.h +0 -3549
- data/third_party/boringssl/ssl/s3_both.cc +0 -724
- data/third_party/boringssl/ssl/s3_lib.cc +0 -222
- data/third_party/boringssl/ssl/s3_pkt.cc +0 -459
- data/third_party/boringssl/ssl/ssl_asn1.cc +0 -828
- data/third_party/boringssl/ssl/ssl_buffer.cc +0 -287
- data/third_party/boringssl/ssl/ssl_cert.cc +0 -1016
- data/third_party/boringssl/ssl/ssl_cipher.cc +0 -1719
- data/third_party/boringssl/ssl/ssl_lib.cc +0 -3011
- data/third_party/boringssl/ssl/ssl_privkey.cc +0 -824
- data/third_party/boringssl/ssl/ssl_session.cc +0 -1273
- data/third_party/boringssl/ssl/ssl_stat.cc +0 -224
- data/third_party/boringssl/ssl/ssl_versions.cc +0 -394
- data/third_party/boringssl/ssl/t1_enc.cc +0 -361
- data/third_party/boringssl/ssl/t1_lib.cc +0 -4036
- data/third_party/boringssl/ssl/tls13_both.cc +0 -689
- data/third_party/boringssl/ssl/tls13_client.cc +0 -947
- data/third_party/boringssl/ssl/tls13_enc.cc +0 -561
- data/third_party/boringssl/ssl/tls13_server.cc +0 -1089
- data/third_party/boringssl/ssl/tls_method.cc +0 -279
- data/third_party/boringssl/ssl/tls_record.cc +0 -698
- data/third_party/boringssl/third_party/fiat/curve25519.c +0 -2167
- data/third_party/boringssl/third_party/fiat/curve25519_32.h +0 -911
- data/third_party/boringssl/third_party/fiat/curve25519_64.h +0 -559
- data/third_party/boringssl/third_party/fiat/curve25519_tables.h +0 -7880
- data/third_party/boringssl/third_party/fiat/internal.h +0 -154
- data/third_party/boringssl/third_party/fiat/p256.c +0 -1063
- data/third_party/boringssl/third_party/fiat/p256_32.h +0 -3226
- data/third_party/boringssl/third_party/fiat/p256_64.h +0 -1217
@@ -1,1089 +0,0 @@
|
|
1
|
-
/* Copyright (c) 2016, Google Inc.
|
2
|
-
*
|
3
|
-
* Permission to use, copy, modify, and/or distribute this software for any
|
4
|
-
* purpose with or without fee is hereby granted, provided that the above
|
5
|
-
* copyright notice and this permission notice appear in all copies.
|
6
|
-
*
|
7
|
-
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
|
8
|
-
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
|
9
|
-
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
|
10
|
-
* SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
|
11
|
-
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
|
12
|
-
* OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
|
13
|
-
* CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
|
14
|
-
|
15
|
-
#include <openssl/ssl.h>
|
16
|
-
|
17
|
-
#include <assert.h>
|
18
|
-
#include <string.h>
|
19
|
-
|
20
|
-
#include <tuple>
|
21
|
-
|
22
|
-
#include <openssl/aead.h>
|
23
|
-
#include <openssl/bytestring.h>
|
24
|
-
#include <openssl/digest.h>
|
25
|
-
#include <openssl/err.h>
|
26
|
-
#include <openssl/mem.h>
|
27
|
-
#include <openssl/rand.h>
|
28
|
-
#include <openssl/stack.h>
|
29
|
-
|
30
|
-
#include "../crypto/internal.h"
|
31
|
-
#include "internal.h"
|
32
|
-
|
33
|
-
|
34
|
-
BSSL_NAMESPACE_BEGIN
|
35
|
-
|
36
|
-
enum server_hs_state_t {
|
37
|
-
state_select_parameters = 0,
|
38
|
-
state_select_session,
|
39
|
-
state_send_hello_retry_request,
|
40
|
-
state_read_second_client_hello,
|
41
|
-
state_send_server_hello,
|
42
|
-
state_send_server_certificate_verify,
|
43
|
-
state_send_server_finished,
|
44
|
-
state_read_second_client_flight,
|
45
|
-
state_process_end_of_early_data,
|
46
|
-
state_read_client_certificate,
|
47
|
-
state_read_client_certificate_verify,
|
48
|
-
state_read_channel_id,
|
49
|
-
state_read_client_finished,
|
50
|
-
state_send_new_session_ticket,
|
51
|
-
state_done,
|
52
|
-
};
|
53
|
-
|
54
|
-
static const uint8_t kZeroes[EVP_MAX_MD_SIZE] = {0};
|
55
|
-
|
56
|
-
// Allow a minute of ticket age skew in either direction. This covers
|
57
|
-
// transmission delays in ClientHello and NewSessionTicket, as well as
|
58
|
-
// drift between client and server clock rate since the ticket was issued.
|
59
|
-
// See RFC 8446, section 8.3.
|
60
|
-
static const int32_t kMaxTicketAgeSkewSeconds = 60;
|
61
|
-
|
62
|
-
static int resolve_ecdhe_secret(SSL_HANDSHAKE *hs, bool *out_need_retry,
|
63
|
-
SSL_CLIENT_HELLO *client_hello) {
|
64
|
-
SSL *const ssl = hs->ssl;
|
65
|
-
*out_need_retry = false;
|
66
|
-
|
67
|
-
// We only support connections that include an ECDHE key exchange.
|
68
|
-
CBS key_share;
|
69
|
-
if (!ssl_client_hello_get_extension(client_hello, &key_share,
|
70
|
-
TLSEXT_TYPE_key_share)) {
|
71
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_MISSING_KEY_SHARE);
|
72
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_MISSING_EXTENSION);
|
73
|
-
return 0;
|
74
|
-
}
|
75
|
-
|
76
|
-
bool found_key_share;
|
77
|
-
Array<uint8_t> dhe_secret;
|
78
|
-
uint8_t alert = SSL_AD_DECODE_ERROR;
|
79
|
-
if (!ssl_ext_key_share_parse_clienthello(hs, &found_key_share, &dhe_secret,
|
80
|
-
&alert, &key_share)) {
|
81
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, alert);
|
82
|
-
return 0;
|
83
|
-
}
|
84
|
-
|
85
|
-
if (!found_key_share) {
|
86
|
-
*out_need_retry = true;
|
87
|
-
return 0;
|
88
|
-
}
|
89
|
-
|
90
|
-
return tls13_advance_key_schedule(hs, dhe_secret);
|
91
|
-
}
|
92
|
-
|
93
|
-
static int ssl_ext_supported_versions_add_serverhello(SSL_HANDSHAKE *hs,
|
94
|
-
CBB *out) {
|
95
|
-
CBB contents;
|
96
|
-
if (!CBB_add_u16(out, TLSEXT_TYPE_supported_versions) ||
|
97
|
-
!CBB_add_u16_length_prefixed(out, &contents) ||
|
98
|
-
!CBB_add_u16(&contents, hs->ssl->version) ||
|
99
|
-
!CBB_flush(out)) {
|
100
|
-
return 0;
|
101
|
-
}
|
102
|
-
|
103
|
-
return 1;
|
104
|
-
}
|
105
|
-
|
106
|
-
static const SSL_CIPHER *choose_tls13_cipher(
|
107
|
-
const SSL *ssl, const SSL_CLIENT_HELLO *client_hello, uint16_t group_id) {
|
108
|
-
CBS cipher_suites;
|
109
|
-
CBS_init(&cipher_suites, client_hello->cipher_suites,
|
110
|
-
client_hello->cipher_suites_len);
|
111
|
-
|
112
|
-
const uint16_t version = ssl_protocol_version(ssl);
|
113
|
-
|
114
|
-
return ssl_choose_tls13_cipher(cipher_suites, version, group_id);
|
115
|
-
}
|
116
|
-
|
117
|
-
static bool add_new_session_tickets(SSL_HANDSHAKE *hs, bool *out_sent_tickets) {
|
118
|
-
SSL *const ssl = hs->ssl;
|
119
|
-
if (// If the client doesn't accept resumption with PSK_DHE_KE, don't send a
|
120
|
-
// session ticket.
|
121
|
-
!hs->accept_psk_mode ||
|
122
|
-
// We only implement stateless resumption in TLS 1.3, so skip sending
|
123
|
-
// tickets if disabled.
|
124
|
-
(SSL_get_options(ssl) & SSL_OP_NO_TICKET)) {
|
125
|
-
*out_sent_tickets = false;
|
126
|
-
return true;
|
127
|
-
}
|
128
|
-
|
129
|
-
// TLS 1.3 recommends single-use tickets, so issue multiple tickets in case
|
130
|
-
// the client makes several connections before getting a renewal.
|
131
|
-
static const int kNumTickets = 2;
|
132
|
-
|
133
|
-
// Rebase the session timestamp so that it is measured from ticket
|
134
|
-
// issuance.
|
135
|
-
ssl_session_rebase_time(ssl, hs->new_session.get());
|
136
|
-
|
137
|
-
for (int i = 0; i < kNumTickets; i++) {
|
138
|
-
UniquePtr<SSL_SESSION> session(
|
139
|
-
SSL_SESSION_dup(hs->new_session.get(), SSL_SESSION_INCLUDE_NONAUTH));
|
140
|
-
if (!session) {
|
141
|
-
return false;
|
142
|
-
}
|
143
|
-
|
144
|
-
if (!RAND_bytes((uint8_t *)&session->ticket_age_add, 4)) {
|
145
|
-
return false;
|
146
|
-
}
|
147
|
-
session->ticket_age_add_valid = true;
|
148
|
-
if (ssl->enable_early_data) {
|
149
|
-
// QUIC does not use the max_early_data_size parameter and always sets it
|
150
|
-
// to a fixed value. See draft-ietf-quic-tls-22, section 4.5.
|
151
|
-
session->ticket_max_early_data =
|
152
|
-
ssl->quic_method != nullptr ? 0xffffffff : kMaxEarlyDataAccepted;
|
153
|
-
}
|
154
|
-
|
155
|
-
static_assert(kNumTickets < 256, "Too many tickets");
|
156
|
-
uint8_t nonce[] = {static_cast<uint8_t>(i)};
|
157
|
-
|
158
|
-
ScopedCBB cbb;
|
159
|
-
CBB body, nonce_cbb, ticket, extensions;
|
160
|
-
if (!ssl->method->init_message(ssl, cbb.get(), &body,
|
161
|
-
SSL3_MT_NEW_SESSION_TICKET) ||
|
162
|
-
!CBB_add_u32(&body, session->timeout) ||
|
163
|
-
!CBB_add_u32(&body, session->ticket_age_add) ||
|
164
|
-
!CBB_add_u8_length_prefixed(&body, &nonce_cbb) ||
|
165
|
-
!CBB_add_bytes(&nonce_cbb, nonce, sizeof(nonce)) ||
|
166
|
-
!CBB_add_u16_length_prefixed(&body, &ticket) ||
|
167
|
-
!tls13_derive_session_psk(session.get(), nonce) ||
|
168
|
-
!ssl_encrypt_ticket(hs, &ticket, session.get()) ||
|
169
|
-
!CBB_add_u16_length_prefixed(&body, &extensions)) {
|
170
|
-
return false;
|
171
|
-
}
|
172
|
-
|
173
|
-
if (ssl->enable_early_data) {
|
174
|
-
CBB early_data;
|
175
|
-
if (!CBB_add_u16(&extensions, TLSEXT_TYPE_early_data) ||
|
176
|
-
!CBB_add_u16_length_prefixed(&extensions, &early_data) ||
|
177
|
-
!CBB_add_u32(&early_data, session->ticket_max_early_data) ||
|
178
|
-
!CBB_flush(&extensions)) {
|
179
|
-
return false;
|
180
|
-
}
|
181
|
-
}
|
182
|
-
|
183
|
-
// Add a fake extension. See draft-davidben-tls-grease-01.
|
184
|
-
if (!CBB_add_u16(&extensions,
|
185
|
-
ssl_get_grease_value(hs, ssl_grease_ticket_extension)) ||
|
186
|
-
!CBB_add_u16(&extensions, 0 /* empty */)) {
|
187
|
-
return false;
|
188
|
-
}
|
189
|
-
|
190
|
-
if (!ssl_add_message_cbb(ssl, cbb.get())) {
|
191
|
-
return false;
|
192
|
-
}
|
193
|
-
}
|
194
|
-
|
195
|
-
*out_sent_tickets = true;
|
196
|
-
return true;
|
197
|
-
}
|
198
|
-
|
199
|
-
static enum ssl_hs_wait_t do_select_parameters(SSL_HANDSHAKE *hs) {
|
200
|
-
// At this point, most ClientHello extensions have already been processed by
|
201
|
-
// the common handshake logic. Resolve the remaining non-PSK parameters.
|
202
|
-
SSL *const ssl = hs->ssl;
|
203
|
-
SSLMessage msg;
|
204
|
-
if (!ssl->method->get_message(ssl, &msg)) {
|
205
|
-
return ssl_hs_read_message;
|
206
|
-
}
|
207
|
-
SSL_CLIENT_HELLO client_hello;
|
208
|
-
if (!ssl_client_hello_init(ssl, &client_hello, msg)) {
|
209
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_CLIENTHELLO_PARSE_FAILED);
|
210
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR);
|
211
|
-
return ssl_hs_error;
|
212
|
-
}
|
213
|
-
|
214
|
-
OPENSSL_memcpy(hs->session_id, client_hello.session_id,
|
215
|
-
client_hello.session_id_len);
|
216
|
-
hs->session_id_len = client_hello.session_id_len;
|
217
|
-
|
218
|
-
uint16_t group_id;
|
219
|
-
if (!tls1_get_shared_group(hs, &group_id)) {
|
220
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_NO_SHARED_GROUP);
|
221
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_HANDSHAKE_FAILURE);
|
222
|
-
return ssl_hs_error;
|
223
|
-
}
|
224
|
-
|
225
|
-
// Negotiate the cipher suite.
|
226
|
-
hs->new_cipher = choose_tls13_cipher(ssl, &client_hello, group_id);
|
227
|
-
if (hs->new_cipher == NULL) {
|
228
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_NO_SHARED_CIPHER);
|
229
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_HANDSHAKE_FAILURE);
|
230
|
-
return ssl_hs_error;
|
231
|
-
}
|
232
|
-
|
233
|
-
// HTTP/2 negotiation depends on the cipher suite, so ALPN negotiation was
|
234
|
-
// deferred. Complete it now.
|
235
|
-
uint8_t alert = SSL_AD_DECODE_ERROR;
|
236
|
-
if (!ssl_negotiate_alpn(hs, &alert, &client_hello)) {
|
237
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, alert);
|
238
|
-
return ssl_hs_error;
|
239
|
-
}
|
240
|
-
|
241
|
-
// The PRF hash is now known. Set up the key schedule and hash the
|
242
|
-
// ClientHello.
|
243
|
-
if (!hs->transcript.InitHash(ssl_protocol_version(ssl), hs->new_cipher)) {
|
244
|
-
return ssl_hs_error;
|
245
|
-
}
|
246
|
-
|
247
|
-
hs->tls13_state = state_select_session;
|
248
|
-
return ssl_hs_ok;
|
249
|
-
}
|
250
|
-
|
251
|
-
static enum ssl_ticket_aead_result_t select_session(
|
252
|
-
SSL_HANDSHAKE *hs, uint8_t *out_alert, UniquePtr<SSL_SESSION> *out_session,
|
253
|
-
int32_t *out_ticket_age_skew, bool *out_offered_ticket,
|
254
|
-
const SSLMessage &msg, const SSL_CLIENT_HELLO *client_hello) {
|
255
|
-
SSL *const ssl = hs->ssl;
|
256
|
-
*out_session = nullptr;
|
257
|
-
|
258
|
-
CBS pre_shared_key;
|
259
|
-
*out_offered_ticket = ssl_client_hello_get_extension(
|
260
|
-
client_hello, &pre_shared_key, TLSEXT_TYPE_pre_shared_key);
|
261
|
-
if (!*out_offered_ticket) {
|
262
|
-
return ssl_ticket_aead_ignore_ticket;
|
263
|
-
}
|
264
|
-
|
265
|
-
CBS ticket, binders;
|
266
|
-
uint32_t client_ticket_age;
|
267
|
-
if (!ssl_ext_pre_shared_key_parse_clienthello(
|
268
|
-
hs, &ticket, &binders, &client_ticket_age, out_alert, client_hello,
|
269
|
-
&pre_shared_key)) {
|
270
|
-
return ssl_ticket_aead_error;
|
271
|
-
}
|
272
|
-
|
273
|
-
// If the peer did not offer psk_dhe, ignore the resumption.
|
274
|
-
if (!hs->accept_psk_mode) {
|
275
|
-
return ssl_ticket_aead_ignore_ticket;
|
276
|
-
}
|
277
|
-
|
278
|
-
// TLS 1.3 session tickets are renewed separately as part of the
|
279
|
-
// NewSessionTicket.
|
280
|
-
bool unused_renew;
|
281
|
-
UniquePtr<SSL_SESSION> session;
|
282
|
-
enum ssl_ticket_aead_result_t ret =
|
283
|
-
ssl_process_ticket(hs, &session, &unused_renew, ticket, {});
|
284
|
-
switch (ret) {
|
285
|
-
case ssl_ticket_aead_success:
|
286
|
-
break;
|
287
|
-
case ssl_ticket_aead_error:
|
288
|
-
*out_alert = SSL_AD_INTERNAL_ERROR;
|
289
|
-
return ret;
|
290
|
-
default:
|
291
|
-
return ret;
|
292
|
-
}
|
293
|
-
|
294
|
-
if (!ssl_session_is_resumable(hs, session.get()) ||
|
295
|
-
// Historically, some TLS 1.3 tickets were missing ticket_age_add.
|
296
|
-
!session->ticket_age_add_valid) {
|
297
|
-
return ssl_ticket_aead_ignore_ticket;
|
298
|
-
}
|
299
|
-
|
300
|
-
// Recover the client ticket age and convert to seconds.
|
301
|
-
client_ticket_age -= session->ticket_age_add;
|
302
|
-
client_ticket_age /= 1000;
|
303
|
-
|
304
|
-
struct OPENSSL_timeval now;
|
305
|
-
ssl_get_current_time(ssl, &now);
|
306
|
-
|
307
|
-
// Compute the server ticket age in seconds.
|
308
|
-
assert(now.tv_sec >= session->time);
|
309
|
-
uint64_t server_ticket_age = now.tv_sec - session->time;
|
310
|
-
|
311
|
-
// To avoid overflowing |hs->ticket_age_skew|, we will not resume
|
312
|
-
// 68-year-old sessions.
|
313
|
-
if (server_ticket_age > INT32_MAX) {
|
314
|
-
return ssl_ticket_aead_ignore_ticket;
|
315
|
-
}
|
316
|
-
|
317
|
-
*out_ticket_age_skew = static_cast<int32_t>(client_ticket_age) -
|
318
|
-
static_cast<int32_t>(server_ticket_age);
|
319
|
-
|
320
|
-
// Check the PSK binder.
|
321
|
-
if (!tls13_verify_psk_binder(hs, session.get(), msg, &binders)) {
|
322
|
-
*out_alert = SSL_AD_DECRYPT_ERROR;
|
323
|
-
return ssl_ticket_aead_error;
|
324
|
-
}
|
325
|
-
|
326
|
-
*out_session = std::move(session);
|
327
|
-
return ssl_ticket_aead_success;
|
328
|
-
}
|
329
|
-
|
330
|
-
static enum ssl_hs_wait_t do_select_session(SSL_HANDSHAKE *hs) {
|
331
|
-
SSL *const ssl = hs->ssl;
|
332
|
-
SSLMessage msg;
|
333
|
-
if (!ssl->method->get_message(ssl, &msg)) {
|
334
|
-
return ssl_hs_read_message;
|
335
|
-
}
|
336
|
-
SSL_CLIENT_HELLO client_hello;
|
337
|
-
if (!ssl_client_hello_init(ssl, &client_hello, msg)) {
|
338
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_CLIENTHELLO_PARSE_FAILED);
|
339
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR);
|
340
|
-
return ssl_hs_error;
|
341
|
-
}
|
342
|
-
|
343
|
-
uint8_t alert = SSL_AD_DECODE_ERROR;
|
344
|
-
UniquePtr<SSL_SESSION> session;
|
345
|
-
bool offered_ticket = false;
|
346
|
-
switch (select_session(hs, &alert, &session, &ssl->s3->ticket_age_skew,
|
347
|
-
&offered_ticket, msg, &client_hello)) {
|
348
|
-
case ssl_ticket_aead_ignore_ticket:
|
349
|
-
assert(!session);
|
350
|
-
if (!ssl->enable_early_data) {
|
351
|
-
ssl->s3->early_data_reason = ssl_early_data_disabled;
|
352
|
-
} else if (!offered_ticket) {
|
353
|
-
ssl->s3->early_data_reason = ssl_early_data_no_session_offered;
|
354
|
-
} else {
|
355
|
-
ssl->s3->early_data_reason = ssl_early_data_session_not_resumed;
|
356
|
-
}
|
357
|
-
if (!ssl_get_new_session(hs, 1 /* server */)) {
|
358
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_INTERNAL_ERROR);
|
359
|
-
return ssl_hs_error;
|
360
|
-
}
|
361
|
-
break;
|
362
|
-
|
363
|
-
case ssl_ticket_aead_success:
|
364
|
-
// Carry over authentication information from the previous handshake into
|
365
|
-
// a fresh session.
|
366
|
-
hs->new_session =
|
367
|
-
SSL_SESSION_dup(session.get(), SSL_SESSION_DUP_AUTH_ONLY);
|
368
|
-
if (hs->new_session == nullptr) {
|
369
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_INTERNAL_ERROR);
|
370
|
-
return ssl_hs_error;
|
371
|
-
}
|
372
|
-
|
373
|
-
if (!ssl->enable_early_data) {
|
374
|
-
ssl->s3->early_data_reason = ssl_early_data_disabled;
|
375
|
-
} else if (session->ticket_max_early_data == 0) {
|
376
|
-
ssl->s3->early_data_reason = ssl_early_data_unsupported_for_session;
|
377
|
-
} else if (!hs->early_data_offered) {
|
378
|
-
ssl->s3->early_data_reason = ssl_early_data_peer_declined;
|
379
|
-
} else if (ssl->s3->channel_id_valid) {
|
380
|
-
// Channel ID is incompatible with 0-RTT.
|
381
|
-
ssl->s3->early_data_reason = ssl_early_data_channel_id;
|
382
|
-
} else if (ssl->s3->token_binding_negotiated) {
|
383
|
-
// Token Binding is incompatible with 0-RTT.
|
384
|
-
ssl->s3->early_data_reason = ssl_early_data_token_binding;
|
385
|
-
} else if (MakeConstSpan(ssl->s3->alpn_selected) != session->early_alpn) {
|
386
|
-
// The negotiated ALPN must match the one in the ticket.
|
387
|
-
ssl->s3->early_data_reason = ssl_early_data_alpn_mismatch;
|
388
|
-
} else if (ssl->s3->ticket_age_skew < -kMaxTicketAgeSkewSeconds ||
|
389
|
-
kMaxTicketAgeSkewSeconds < ssl->s3->ticket_age_skew) {
|
390
|
-
ssl->s3->early_data_reason = ssl_early_data_ticket_age_skew;
|
391
|
-
} else {
|
392
|
-
ssl->s3->early_data_reason = ssl_early_data_accepted;
|
393
|
-
ssl->s3->early_data_accepted = true;
|
394
|
-
}
|
395
|
-
|
396
|
-
ssl->s3->session_reused = true;
|
397
|
-
|
398
|
-
// Resumption incorporates fresh key material, so refresh the timeout.
|
399
|
-
ssl_session_renew_timeout(ssl, hs->new_session.get(),
|
400
|
-
ssl->session_ctx->session_psk_dhe_timeout);
|
401
|
-
break;
|
402
|
-
|
403
|
-
case ssl_ticket_aead_error:
|
404
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, alert);
|
405
|
-
return ssl_hs_error;
|
406
|
-
|
407
|
-
case ssl_ticket_aead_retry:
|
408
|
-
hs->tls13_state = state_select_session;
|
409
|
-
return ssl_hs_pending_ticket;
|
410
|
-
}
|
411
|
-
|
412
|
-
// Record connection properties in the new session.
|
413
|
-
hs->new_session->cipher = hs->new_cipher;
|
414
|
-
|
415
|
-
// Store the initial negotiated ALPN in the session.
|
416
|
-
if (!hs->new_session->early_alpn.CopyFrom(ssl->s3->alpn_selected)) {
|
417
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_INTERNAL_ERROR);
|
418
|
-
return ssl_hs_error;
|
419
|
-
}
|
420
|
-
|
421
|
-
if (ssl->ctx->dos_protection_cb != NULL &&
|
422
|
-
ssl->ctx->dos_protection_cb(&client_hello) == 0) {
|
423
|
-
// Connection rejected for DOS reasons.
|
424
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_CONNECTION_REJECTED);
|
425
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_INTERNAL_ERROR);
|
426
|
-
return ssl_hs_error;
|
427
|
-
}
|
428
|
-
|
429
|
-
size_t hash_len = EVP_MD_size(
|
430
|
-
ssl_get_handshake_digest(ssl_protocol_version(ssl), hs->new_cipher));
|
431
|
-
|
432
|
-
// Set up the key schedule and incorporate the PSK into the running secret.
|
433
|
-
if (ssl->s3->session_reused) {
|
434
|
-
if (!tls13_init_key_schedule(
|
435
|
-
hs, MakeConstSpan(hs->new_session->master_key,
|
436
|
-
hs->new_session->master_key_length))) {
|
437
|
-
return ssl_hs_error;
|
438
|
-
}
|
439
|
-
} else if (!tls13_init_key_schedule(hs, MakeConstSpan(kZeroes, hash_len))) {
|
440
|
-
return ssl_hs_error;
|
441
|
-
}
|
442
|
-
|
443
|
-
if (!ssl_hash_message(hs, msg)) {
|
444
|
-
return ssl_hs_error;
|
445
|
-
}
|
446
|
-
|
447
|
-
if (ssl->s3->early_data_accepted) {
|
448
|
-
if (!tls13_derive_early_secret(hs)) {
|
449
|
-
return ssl_hs_error;
|
450
|
-
}
|
451
|
-
} else if (hs->early_data_offered) {
|
452
|
-
ssl->s3->skip_early_data = true;
|
453
|
-
}
|
454
|
-
|
455
|
-
// Resolve ECDHE and incorporate it into the secret.
|
456
|
-
bool need_retry;
|
457
|
-
if (!resolve_ecdhe_secret(hs, &need_retry, &client_hello)) {
|
458
|
-
if (need_retry) {
|
459
|
-
if (ssl->s3->early_data_accepted) {
|
460
|
-
ssl->s3->early_data_reason = ssl_early_data_hello_retry_request;
|
461
|
-
ssl->s3->early_data_accepted = false;
|
462
|
-
}
|
463
|
-
ssl->s3->skip_early_data = true;
|
464
|
-
ssl->method->next_message(ssl);
|
465
|
-
if (!hs->transcript.UpdateForHelloRetryRequest()) {
|
466
|
-
return ssl_hs_error;
|
467
|
-
}
|
468
|
-
hs->tls13_state = state_send_hello_retry_request;
|
469
|
-
return ssl_hs_ok;
|
470
|
-
}
|
471
|
-
return ssl_hs_error;
|
472
|
-
}
|
473
|
-
|
474
|
-
// Note we defer releasing the early traffic secret to QUIC until after ECDHE
|
475
|
-
// is resolved. The early traffic secret should be derived before the key
|
476
|
-
// schedule incorporates ECDHE, but doing so may reject 0-RTT. To avoid
|
477
|
-
// confusing the caller, we split derivation and releasing the secret to QUIC.
|
478
|
-
if (ssl->s3->early_data_accepted &&
|
479
|
-
!tls13_set_early_secret_for_quic(hs)) {
|
480
|
-
return ssl_hs_error;
|
481
|
-
}
|
482
|
-
|
483
|
-
ssl->method->next_message(ssl);
|
484
|
-
hs->tls13_state = state_send_server_hello;
|
485
|
-
return ssl_hs_ok;
|
486
|
-
}
|
487
|
-
|
488
|
-
static enum ssl_hs_wait_t do_send_hello_retry_request(SSL_HANDSHAKE *hs) {
|
489
|
-
SSL *const ssl = hs->ssl;
|
490
|
-
|
491
|
-
|
492
|
-
ScopedCBB cbb;
|
493
|
-
CBB body, session_id, extensions;
|
494
|
-
uint16_t group_id;
|
495
|
-
if (!ssl->method->init_message(ssl, cbb.get(), &body, SSL3_MT_SERVER_HELLO) ||
|
496
|
-
!CBB_add_u16(&body, TLS1_2_VERSION) ||
|
497
|
-
!CBB_add_bytes(&body, kHelloRetryRequest, SSL3_RANDOM_SIZE) ||
|
498
|
-
!CBB_add_u8_length_prefixed(&body, &session_id) ||
|
499
|
-
!CBB_add_bytes(&session_id, hs->session_id, hs->session_id_len) ||
|
500
|
-
!CBB_add_u16(&body, ssl_cipher_get_value(hs->new_cipher)) ||
|
501
|
-
!CBB_add_u8(&body, 0 /* no compression */) ||
|
502
|
-
!tls1_get_shared_group(hs, &group_id) ||
|
503
|
-
!CBB_add_u16_length_prefixed(&body, &extensions) ||
|
504
|
-
!CBB_add_u16(&extensions, TLSEXT_TYPE_supported_versions) ||
|
505
|
-
!CBB_add_u16(&extensions, 2 /* length */) ||
|
506
|
-
!CBB_add_u16(&extensions, ssl->version) ||
|
507
|
-
!CBB_add_u16(&extensions, TLSEXT_TYPE_key_share) ||
|
508
|
-
!CBB_add_u16(&extensions, 2 /* length */) ||
|
509
|
-
!CBB_add_u16(&extensions, group_id) ||
|
510
|
-
!ssl_add_message_cbb(ssl, cbb.get())) {
|
511
|
-
return ssl_hs_error;
|
512
|
-
}
|
513
|
-
|
514
|
-
if (!ssl->method->add_change_cipher_spec(ssl)) {
|
515
|
-
return ssl_hs_error;
|
516
|
-
}
|
517
|
-
|
518
|
-
hs->sent_hello_retry_request = true;
|
519
|
-
hs->tls13_state = state_read_second_client_hello;
|
520
|
-
return ssl_hs_flush;
|
521
|
-
}
|
522
|
-
|
523
|
-
static enum ssl_hs_wait_t do_read_second_client_hello(SSL_HANDSHAKE *hs) {
|
524
|
-
SSL *const ssl = hs->ssl;
|
525
|
-
SSLMessage msg;
|
526
|
-
if (!ssl->method->get_message(ssl, &msg)) {
|
527
|
-
return ssl_hs_read_message;
|
528
|
-
}
|
529
|
-
if (!ssl_check_message_type(ssl, msg, SSL3_MT_CLIENT_HELLO)) {
|
530
|
-
return ssl_hs_error;
|
531
|
-
}
|
532
|
-
SSL_CLIENT_HELLO client_hello;
|
533
|
-
if (!ssl_client_hello_init(ssl, &client_hello, msg)) {
|
534
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_CLIENTHELLO_PARSE_FAILED);
|
535
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR);
|
536
|
-
return ssl_hs_error;
|
537
|
-
}
|
538
|
-
|
539
|
-
// We perform all our negotiation based on the first ClientHello (for
|
540
|
-
// consistency with what |select_certificate_cb| observed), which is in the
|
541
|
-
// transcript, so we can ignore most of this second one.
|
542
|
-
//
|
543
|
-
// We do, however, check the second PSK binder. This covers the client key
|
544
|
-
// share, in case we ever send half-RTT data (we currently do not). It is also
|
545
|
-
// a tricky computation, so we enforce the peer handled it correctly.
|
546
|
-
if (ssl->s3->session_reused) {
|
547
|
-
CBS pre_shared_key;
|
548
|
-
if (!ssl_client_hello_get_extension(&client_hello, &pre_shared_key,
|
549
|
-
TLSEXT_TYPE_pre_shared_key)) {
|
550
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_INCONSISTENT_CLIENT_HELLO);
|
551
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_ILLEGAL_PARAMETER);
|
552
|
-
return ssl_hs_error;
|
553
|
-
}
|
554
|
-
|
555
|
-
CBS ticket, binders;
|
556
|
-
uint32_t client_ticket_age;
|
557
|
-
uint8_t alert = SSL_AD_DECODE_ERROR;
|
558
|
-
if (!ssl_ext_pre_shared_key_parse_clienthello(
|
559
|
-
hs, &ticket, &binders, &client_ticket_age, &alert, &client_hello,
|
560
|
-
&pre_shared_key)) {
|
561
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, alert);
|
562
|
-
return ssl_hs_error;
|
563
|
-
}
|
564
|
-
|
565
|
-
// Note it is important that we do not obtain a new |SSL_SESSION| from
|
566
|
-
// |ticket|. We have already selected parameters based on the first
|
567
|
-
// ClientHello (in the transcript) and must not switch partway through.
|
568
|
-
if (!tls13_verify_psk_binder(hs, hs->new_session.get(), msg, &binders)) {
|
569
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECRYPT_ERROR);
|
570
|
-
return ssl_hs_error;
|
571
|
-
}
|
572
|
-
}
|
573
|
-
|
574
|
-
bool need_retry;
|
575
|
-
if (!resolve_ecdhe_secret(hs, &need_retry, &client_hello)) {
|
576
|
-
if (need_retry) {
|
577
|
-
// Only send one HelloRetryRequest.
|
578
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_ILLEGAL_PARAMETER);
|
579
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_WRONG_CURVE);
|
580
|
-
}
|
581
|
-
return ssl_hs_error;
|
582
|
-
}
|
583
|
-
|
584
|
-
if (!ssl_hash_message(hs, msg)) {
|
585
|
-
return ssl_hs_error;
|
586
|
-
}
|
587
|
-
|
588
|
-
ssl->method->next_message(ssl);
|
589
|
-
hs->tls13_state = state_send_server_hello;
|
590
|
-
return ssl_hs_ok;
|
591
|
-
}
|
592
|
-
|
593
|
-
static enum ssl_hs_wait_t do_send_server_hello(SSL_HANDSHAKE *hs) {
|
594
|
-
SSL *const ssl = hs->ssl;
|
595
|
-
|
596
|
-
// Send a ServerHello.
|
597
|
-
ScopedCBB cbb;
|
598
|
-
CBB body, extensions, session_id;
|
599
|
-
if (!ssl->method->init_message(ssl, cbb.get(), &body, SSL3_MT_SERVER_HELLO) ||
|
600
|
-
!CBB_add_u16(&body, TLS1_2_VERSION) ||
|
601
|
-
!RAND_bytes(ssl->s3->server_random, sizeof(ssl->s3->server_random)) ||
|
602
|
-
!CBB_add_bytes(&body, ssl->s3->server_random, SSL3_RANDOM_SIZE) ||
|
603
|
-
!CBB_add_u8_length_prefixed(&body, &session_id) ||
|
604
|
-
!CBB_add_bytes(&session_id, hs->session_id, hs->session_id_len) ||
|
605
|
-
!CBB_add_u16(&body, ssl_cipher_get_value(hs->new_cipher)) ||
|
606
|
-
!CBB_add_u8(&body, 0) ||
|
607
|
-
!CBB_add_u16_length_prefixed(&body, &extensions) ||
|
608
|
-
!ssl_ext_pre_shared_key_add_serverhello(hs, &extensions) ||
|
609
|
-
!ssl_ext_key_share_add_serverhello(hs, &extensions) ||
|
610
|
-
!ssl_ext_supported_versions_add_serverhello(hs, &extensions) ||
|
611
|
-
!ssl_add_message_cbb(ssl, cbb.get())) {
|
612
|
-
return ssl_hs_error;
|
613
|
-
}
|
614
|
-
|
615
|
-
if (!hs->sent_hello_retry_request &&
|
616
|
-
!ssl->method->add_change_cipher_spec(ssl)) {
|
617
|
-
return ssl_hs_error;
|
618
|
-
}
|
619
|
-
|
620
|
-
// Derive and enable the handshake traffic secrets.
|
621
|
-
if (!tls13_derive_handshake_secrets(hs) ||
|
622
|
-
!tls13_set_traffic_key(ssl, ssl_encryption_handshake, evp_aead_seal,
|
623
|
-
hs->server_handshake_secret())) {
|
624
|
-
return ssl_hs_error;
|
625
|
-
}
|
626
|
-
|
627
|
-
// Send EncryptedExtensions.
|
628
|
-
if (!ssl->method->init_message(ssl, cbb.get(), &body,
|
629
|
-
SSL3_MT_ENCRYPTED_EXTENSIONS) ||
|
630
|
-
!ssl_add_serverhello_tlsext(hs, &body) ||
|
631
|
-
!ssl_add_message_cbb(ssl, cbb.get())) {
|
632
|
-
return ssl_hs_error;
|
633
|
-
}
|
634
|
-
|
635
|
-
if (!ssl->s3->session_reused) {
|
636
|
-
// Determine whether to request a client certificate.
|
637
|
-
hs->cert_request = !!(hs->config->verify_mode & SSL_VERIFY_PEER);
|
638
|
-
// Only request a certificate if Channel ID isn't negotiated.
|
639
|
-
if ((hs->config->verify_mode & SSL_VERIFY_PEER_IF_NO_OBC) &&
|
640
|
-
ssl->s3->channel_id_valid) {
|
641
|
-
hs->cert_request = false;
|
642
|
-
}
|
643
|
-
}
|
644
|
-
|
645
|
-
// Send a CertificateRequest, if necessary.
|
646
|
-
if (hs->cert_request) {
|
647
|
-
CBB cert_request_extensions, sigalg_contents, sigalgs_cbb;
|
648
|
-
if (!ssl->method->init_message(ssl, cbb.get(), &body,
|
649
|
-
SSL3_MT_CERTIFICATE_REQUEST) ||
|
650
|
-
!CBB_add_u8(&body, 0 /* no certificate_request_context. */) ||
|
651
|
-
!CBB_add_u16_length_prefixed(&body, &cert_request_extensions) ||
|
652
|
-
!CBB_add_u16(&cert_request_extensions,
|
653
|
-
TLSEXT_TYPE_signature_algorithms) ||
|
654
|
-
!CBB_add_u16_length_prefixed(&cert_request_extensions,
|
655
|
-
&sigalg_contents) ||
|
656
|
-
!CBB_add_u16_length_prefixed(&sigalg_contents, &sigalgs_cbb) ||
|
657
|
-
!tls12_add_verify_sigalgs(ssl, &sigalgs_cbb,
|
658
|
-
false /* online signature */)) {
|
659
|
-
return ssl_hs_error;
|
660
|
-
}
|
661
|
-
|
662
|
-
if (tls12_has_different_verify_sigalgs_for_certs(ssl)) {
|
663
|
-
if (!CBB_add_u16(&cert_request_extensions,
|
664
|
-
TLSEXT_TYPE_signature_algorithms_cert) ||
|
665
|
-
!CBB_add_u16_length_prefixed(&cert_request_extensions,
|
666
|
-
&sigalg_contents) ||
|
667
|
-
!CBB_add_u16_length_prefixed(&sigalg_contents, &sigalgs_cbb) ||
|
668
|
-
!tls12_add_verify_sigalgs(ssl, &sigalgs_cbb, true /* certs */)) {
|
669
|
-
return ssl_hs_error;
|
670
|
-
}
|
671
|
-
}
|
672
|
-
|
673
|
-
if (ssl_has_client_CAs(hs->config)) {
|
674
|
-
CBB ca_contents;
|
675
|
-
if (!CBB_add_u16(&cert_request_extensions,
|
676
|
-
TLSEXT_TYPE_certificate_authorities) ||
|
677
|
-
!CBB_add_u16_length_prefixed(&cert_request_extensions,
|
678
|
-
&ca_contents) ||
|
679
|
-
!ssl_add_client_CA_list(hs, &ca_contents) ||
|
680
|
-
!CBB_flush(&cert_request_extensions)) {
|
681
|
-
return ssl_hs_error;
|
682
|
-
}
|
683
|
-
}
|
684
|
-
|
685
|
-
if (!ssl_add_message_cbb(ssl, cbb.get())) {
|
686
|
-
return ssl_hs_error;
|
687
|
-
}
|
688
|
-
}
|
689
|
-
|
690
|
-
// Send the server Certificate message, if necessary.
|
691
|
-
if (!ssl->s3->session_reused) {
|
692
|
-
if (!ssl_has_certificate(hs)) {
|
693
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_NO_CERTIFICATE_SET);
|
694
|
-
return ssl_hs_error;
|
695
|
-
}
|
696
|
-
|
697
|
-
if (!tls13_add_certificate(hs)) {
|
698
|
-
return ssl_hs_error;
|
699
|
-
}
|
700
|
-
|
701
|
-
hs->tls13_state = state_send_server_certificate_verify;
|
702
|
-
return ssl_hs_ok;
|
703
|
-
}
|
704
|
-
|
705
|
-
hs->tls13_state = state_send_server_finished;
|
706
|
-
return ssl_hs_ok;
|
707
|
-
}
|
708
|
-
|
709
|
-
static enum ssl_hs_wait_t do_send_server_certificate_verify(SSL_HANDSHAKE *hs) {
|
710
|
-
switch (tls13_add_certificate_verify(hs)) {
|
711
|
-
case ssl_private_key_success:
|
712
|
-
hs->tls13_state = state_send_server_finished;
|
713
|
-
return ssl_hs_ok;
|
714
|
-
|
715
|
-
case ssl_private_key_retry:
|
716
|
-
hs->tls13_state = state_send_server_certificate_verify;
|
717
|
-
return ssl_hs_private_key_operation;
|
718
|
-
|
719
|
-
case ssl_private_key_failure:
|
720
|
-
return ssl_hs_error;
|
721
|
-
}
|
722
|
-
|
723
|
-
assert(0);
|
724
|
-
return ssl_hs_error;
|
725
|
-
}
|
726
|
-
|
727
|
-
static enum ssl_hs_wait_t do_send_server_finished(SSL_HANDSHAKE *hs) {
|
728
|
-
SSL *const ssl = hs->ssl;
|
729
|
-
if (!tls13_add_finished(hs) ||
|
730
|
-
// Update the secret to the master secret and derive traffic keys.
|
731
|
-
!tls13_advance_key_schedule(
|
732
|
-
hs, MakeConstSpan(kZeroes, hs->transcript.DigestLen())) ||
|
733
|
-
!tls13_derive_application_secrets(hs) ||
|
734
|
-
!tls13_set_traffic_key(ssl, ssl_encryption_application, evp_aead_seal,
|
735
|
-
hs->server_traffic_secret_0())) {
|
736
|
-
return ssl_hs_error;
|
737
|
-
}
|
738
|
-
|
739
|
-
if (ssl->s3->early_data_accepted) {
|
740
|
-
// If accepting 0-RTT, we send tickets half-RTT. This gets the tickets on
|
741
|
-
// the wire sooner and also avoids triggering a write on |SSL_read| when
|
742
|
-
// processing the client Finished. This requires computing the client
|
743
|
-
// Finished early. See RFC 8446, section 4.6.1.
|
744
|
-
static const uint8_t kEndOfEarlyData[4] = {SSL3_MT_END_OF_EARLY_DATA, 0,
|
745
|
-
0, 0};
|
746
|
-
if (ssl->quic_method == nullptr &&
|
747
|
-
!hs->transcript.Update(kEndOfEarlyData)) {
|
748
|
-
OPENSSL_PUT_ERROR(SSL, ERR_R_INTERNAL_ERROR);
|
749
|
-
return ssl_hs_error;
|
750
|
-
}
|
751
|
-
|
752
|
-
size_t finished_len;
|
753
|
-
if (!tls13_finished_mac(hs, hs->expected_client_finished().data(),
|
754
|
-
&finished_len, false /* client */)) {
|
755
|
-
return ssl_hs_error;
|
756
|
-
}
|
757
|
-
|
758
|
-
if (finished_len != hs->expected_client_finished().size()) {
|
759
|
-
OPENSSL_PUT_ERROR(SSL, ERR_R_INTERNAL_ERROR);
|
760
|
-
return ssl_hs_error;
|
761
|
-
}
|
762
|
-
|
763
|
-
// Feed the predicted Finished into the transcript. This allows us to derive
|
764
|
-
// the resumption secret early and send half-RTT tickets.
|
765
|
-
//
|
766
|
-
// TODO(davidben): This will need to be updated for DTLS 1.3.
|
767
|
-
assert(!SSL_is_dtls(hs->ssl));
|
768
|
-
assert(hs->expected_client_finished().size() <= 0xff);
|
769
|
-
uint8_t header[4] = {
|
770
|
-
SSL3_MT_FINISHED, 0, 0,
|
771
|
-
static_cast<uint8_t>(hs->expected_client_finished().size())};
|
772
|
-
bool unused_sent_tickets;
|
773
|
-
if (!hs->transcript.Update(header) ||
|
774
|
-
!hs->transcript.Update(hs->expected_client_finished()) ||
|
775
|
-
!tls13_derive_resumption_secret(hs) ||
|
776
|
-
!add_new_session_tickets(hs, &unused_sent_tickets)) {
|
777
|
-
return ssl_hs_error;
|
778
|
-
}
|
779
|
-
}
|
780
|
-
|
781
|
-
hs->tls13_state = state_read_second_client_flight;
|
782
|
-
return ssl_hs_flush;
|
783
|
-
}
|
784
|
-
|
785
|
-
static enum ssl_hs_wait_t do_read_second_client_flight(SSL_HANDSHAKE *hs) {
|
786
|
-
SSL *const ssl = hs->ssl;
|
787
|
-
if (ssl->s3->early_data_accepted) {
|
788
|
-
// QUIC never receives handshake messages under 0-RTT keys.
|
789
|
-
if (ssl->quic_method == nullptr &&
|
790
|
-
!tls13_set_traffic_key(ssl, ssl_encryption_early_data, evp_aead_open,
|
791
|
-
hs->early_traffic_secret())) {
|
792
|
-
return ssl_hs_error;
|
793
|
-
}
|
794
|
-
hs->can_early_write = true;
|
795
|
-
hs->can_early_read = true;
|
796
|
-
hs->in_early_data = true;
|
797
|
-
}
|
798
|
-
|
799
|
-
// QUIC doesn't use an EndOfEarlyData message (draft-ietf-quic-tls-22,
|
800
|
-
// section 8.3), so we switch to client_handshake_secret before the early
|
801
|
-
// return.
|
802
|
-
if (ssl->quic_method != nullptr) {
|
803
|
-
if (!tls13_set_traffic_key(ssl, ssl_encryption_handshake, evp_aead_open,
|
804
|
-
hs->client_handshake_secret())) {
|
805
|
-
return ssl_hs_error;
|
806
|
-
}
|
807
|
-
hs->tls13_state = state_read_client_certificate;
|
808
|
-
return ssl->s3->early_data_accepted ? ssl_hs_early_return : ssl_hs_ok;
|
809
|
-
}
|
810
|
-
|
811
|
-
hs->tls13_state = state_process_end_of_early_data;
|
812
|
-
return ssl->s3->early_data_accepted ? ssl_hs_read_end_of_early_data
|
813
|
-
: ssl_hs_ok;
|
814
|
-
}
|
815
|
-
|
816
|
-
static enum ssl_hs_wait_t do_process_end_of_early_data(SSL_HANDSHAKE *hs) {
|
817
|
-
SSL *const ssl = hs->ssl;
|
818
|
-
// If early data was not accepted, the EndOfEarlyData will be in the discarded
|
819
|
-
// early data.
|
820
|
-
if (hs->ssl->s3->early_data_accepted) {
|
821
|
-
SSLMessage msg;
|
822
|
-
if (!ssl->method->get_message(ssl, &msg)) {
|
823
|
-
return ssl_hs_read_message;
|
824
|
-
}
|
825
|
-
if (!ssl_check_message_type(ssl, msg, SSL3_MT_END_OF_EARLY_DATA)) {
|
826
|
-
return ssl_hs_error;
|
827
|
-
}
|
828
|
-
if (CBS_len(&msg.body) != 0) {
|
829
|
-
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR);
|
830
|
-
OPENSSL_PUT_ERROR(SSL, SSL_R_DECODE_ERROR);
|
831
|
-
return ssl_hs_error;
|
832
|
-
}
|
833
|
-
ssl->method->next_message(ssl);
|
834
|
-
}
|
835
|
-
if (!tls13_set_traffic_key(ssl, ssl_encryption_handshake, evp_aead_open,
|
836
|
-
hs->client_handshake_secret())) {
|
837
|
-
return ssl_hs_error;
|
838
|
-
}
|
839
|
-
hs->tls13_state = state_read_client_certificate;
|
840
|
-
return ssl_hs_ok;
|
841
|
-
}
|
842
|
-
|
843
|
-
static enum ssl_hs_wait_t do_read_client_certificate(SSL_HANDSHAKE *hs) {
|
844
|
-
SSL *const ssl = hs->ssl;
|
845
|
-
if (!hs->cert_request) {
|
846
|
-
if (!ssl->s3->session_reused) {
|
847
|
-
// OpenSSL returns X509_V_OK when no certificates are requested. This is
|
848
|
-
// classed by them as a bug, but it's assumed by at least NGINX. (Only do
|
849
|
-
// this in full handshakes as resumptions should carry over the previous
|
850
|
-
// |verify_result|, though this is a no-op because servers do not
|
851
|
-
// implement the client's odd soft-fail mode.)
|
852
|
-
hs->new_session->verify_result = X509_V_OK;
|
853
|
-
}
|
854
|
-
|
855
|
-
// Skip this state.
|
856
|
-
hs->tls13_state = state_read_channel_id;
|
857
|
-
return ssl_hs_ok;
|
858
|
-
}
|
859
|
-
|
860
|
-
const bool allow_anonymous =
|
861
|
-
(hs->config->verify_mode & SSL_VERIFY_FAIL_IF_NO_PEER_CERT) == 0;
|
862
|
-
SSLMessage msg;
|
863
|
-
if (!ssl->method->get_message(ssl, &msg)) {
|
864
|
-
return ssl_hs_read_message;
|
865
|
-
}
|
866
|
-
if (!ssl_check_message_type(ssl, msg, SSL3_MT_CERTIFICATE) ||
|
867
|
-
!tls13_process_certificate(hs, msg, allow_anonymous) ||
|
868
|
-
!ssl_hash_message(hs, msg)) {
|
869
|
-
return ssl_hs_error;
|
870
|
-
}
|
871
|
-
|
872
|
-
ssl->method->next_message(ssl);
|
873
|
-
hs->tls13_state = state_read_client_certificate_verify;
|
874
|
-
return ssl_hs_ok;
|
875
|
-
}
|
876
|
-
|
877
|
-
static enum ssl_hs_wait_t do_read_client_certificate_verify(
|
878
|
-
SSL_HANDSHAKE *hs) {
|
879
|
-
SSL *const ssl = hs->ssl;
|
880
|
-
if (sk_CRYPTO_BUFFER_num(hs->new_session->certs.get()) == 0) {
|
881
|
-
// Skip this state.
|
882
|
-
hs->tls13_state = state_read_channel_id;
|
883
|
-
return ssl_hs_ok;
|
884
|
-
}
|
885
|
-
|
886
|
-
SSLMessage msg;
|
887
|
-
if (!ssl->method->get_message(ssl, &msg)) {
|
888
|
-
return ssl_hs_read_message;
|
889
|
-
}
|
890
|
-
|
891
|
-
switch (ssl_verify_peer_cert(hs)) {
|
892
|
-
case ssl_verify_ok:
|
893
|
-
break;
|
894
|
-
case ssl_verify_invalid:
|
895
|
-
return ssl_hs_error;
|
896
|
-
case ssl_verify_retry:
|
897
|
-
hs->tls13_state = state_read_client_certificate_verify;
|
898
|
-
return ssl_hs_certificate_verify;
|
899
|
-
}
|
900
|
-
|
901
|
-
if (!ssl_check_message_type(ssl, msg, SSL3_MT_CERTIFICATE_VERIFY) ||
|
902
|
-
!tls13_process_certificate_verify(hs, msg) ||
|
903
|
-
!ssl_hash_message(hs, msg)) {
|
904
|
-
return ssl_hs_error;
|
905
|
-
}
|
906
|
-
|
907
|
-
ssl->method->next_message(ssl);
|
908
|
-
hs->tls13_state = state_read_channel_id;
|
909
|
-
return ssl_hs_ok;
|
910
|
-
}
|
911
|
-
|
912
|
-
static enum ssl_hs_wait_t do_read_channel_id(SSL_HANDSHAKE *hs) {
|
913
|
-
SSL *const ssl = hs->ssl;
|
914
|
-
if (!ssl->s3->channel_id_valid) {
|
915
|
-
hs->tls13_state = state_read_client_finished;
|
916
|
-
return ssl_hs_ok;
|
917
|
-
}
|
918
|
-
|
919
|
-
SSLMessage msg;
|
920
|
-
if (!ssl->method->get_message(ssl, &msg)) {
|
921
|
-
return ssl_hs_read_message;
|
922
|
-
}
|
923
|
-
if (!ssl_check_message_type(ssl, msg, SSL3_MT_CHANNEL_ID) ||
|
924
|
-
!tls1_verify_channel_id(hs, msg) ||
|
925
|
-
!ssl_hash_message(hs, msg)) {
|
926
|
-
return ssl_hs_error;
|
927
|
-
}
|
928
|
-
|
929
|
-
ssl->method->next_message(ssl);
|
930
|
-
hs->tls13_state = state_read_client_finished;
|
931
|
-
return ssl_hs_ok;
|
932
|
-
}
|
933
|
-
|
934
|
-
static enum ssl_hs_wait_t do_read_client_finished(SSL_HANDSHAKE *hs) {
|
935
|
-
SSL *const ssl = hs->ssl;
|
936
|
-
SSLMessage msg;
|
937
|
-
if (!ssl->method->get_message(ssl, &msg)) {
|
938
|
-
return ssl_hs_read_message;
|
939
|
-
}
|
940
|
-
if (!ssl_check_message_type(ssl, msg, SSL3_MT_FINISHED) ||
|
941
|
-
// If early data was accepted, we've already computed the client Finished
|
942
|
-
// and derived the resumption secret.
|
943
|
-
!tls13_process_finished(hs, msg, ssl->s3->early_data_accepted) ||
|
944
|
-
// evp_aead_seal keys have already been switched.
|
945
|
-
!tls13_set_traffic_key(ssl, ssl_encryption_application, evp_aead_open,
|
946
|
-
hs->client_traffic_secret_0())) {
|
947
|
-
return ssl_hs_error;
|
948
|
-
}
|
949
|
-
|
950
|
-
if (!ssl->s3->early_data_accepted) {
|
951
|
-
if (!ssl_hash_message(hs, msg) ||
|
952
|
-
!tls13_derive_resumption_secret(hs)) {
|
953
|
-
return ssl_hs_error;
|
954
|
-
}
|
955
|
-
|
956
|
-
// We send post-handshake tickets as part of the handshake in 1-RTT.
|
957
|
-
hs->tls13_state = state_send_new_session_ticket;
|
958
|
-
} else {
|
959
|
-
// We already sent half-RTT tickets.
|
960
|
-
hs->tls13_state = state_done;
|
961
|
-
}
|
962
|
-
|
963
|
-
ssl->method->next_message(ssl);
|
964
|
-
return ssl_hs_ok;
|
965
|
-
}
|
966
|
-
|
967
|
-
static enum ssl_hs_wait_t do_send_new_session_ticket(SSL_HANDSHAKE *hs) {
|
968
|
-
bool sent_tickets;
|
969
|
-
if (!add_new_session_tickets(hs, &sent_tickets)) {
|
970
|
-
return ssl_hs_error;
|
971
|
-
}
|
972
|
-
|
973
|
-
hs->tls13_state = state_done;
|
974
|
-
// In TLS 1.3, the NewSessionTicket isn't flushed until the server performs a
|
975
|
-
// write, to prevent a non-reading client from causing the server to hang in
|
976
|
-
// the case of a small server write buffer. Consumers which don't write data
|
977
|
-
// to the client will need to do a zero-byte write if they wish to flush the
|
978
|
-
// tickets.
|
979
|
-
if (hs->ssl->quic_method != nullptr && sent_tickets) {
|
980
|
-
return ssl_hs_flush;
|
981
|
-
}
|
982
|
-
return ssl_hs_ok;
|
983
|
-
}
|
984
|
-
|
985
|
-
enum ssl_hs_wait_t tls13_server_handshake(SSL_HANDSHAKE *hs) {
|
986
|
-
while (hs->tls13_state != state_done) {
|
987
|
-
enum ssl_hs_wait_t ret = ssl_hs_error;
|
988
|
-
enum server_hs_state_t state =
|
989
|
-
static_cast<enum server_hs_state_t>(hs->tls13_state);
|
990
|
-
switch (state) {
|
991
|
-
case state_select_parameters:
|
992
|
-
ret = do_select_parameters(hs);
|
993
|
-
break;
|
994
|
-
case state_select_session:
|
995
|
-
ret = do_select_session(hs);
|
996
|
-
break;
|
997
|
-
case state_send_hello_retry_request:
|
998
|
-
ret = do_send_hello_retry_request(hs);
|
999
|
-
break;
|
1000
|
-
case state_read_second_client_hello:
|
1001
|
-
ret = do_read_second_client_hello(hs);
|
1002
|
-
break;
|
1003
|
-
case state_send_server_hello:
|
1004
|
-
ret = do_send_server_hello(hs);
|
1005
|
-
break;
|
1006
|
-
case state_send_server_certificate_verify:
|
1007
|
-
ret = do_send_server_certificate_verify(hs);
|
1008
|
-
break;
|
1009
|
-
case state_send_server_finished:
|
1010
|
-
ret = do_send_server_finished(hs);
|
1011
|
-
break;
|
1012
|
-
case state_read_second_client_flight:
|
1013
|
-
ret = do_read_second_client_flight(hs);
|
1014
|
-
break;
|
1015
|
-
case state_process_end_of_early_data:
|
1016
|
-
ret = do_process_end_of_early_data(hs);
|
1017
|
-
break;
|
1018
|
-
case state_read_client_certificate:
|
1019
|
-
ret = do_read_client_certificate(hs);
|
1020
|
-
break;
|
1021
|
-
case state_read_client_certificate_verify:
|
1022
|
-
ret = do_read_client_certificate_verify(hs);
|
1023
|
-
break;
|
1024
|
-
case state_read_channel_id:
|
1025
|
-
ret = do_read_channel_id(hs);
|
1026
|
-
break;
|
1027
|
-
case state_read_client_finished:
|
1028
|
-
ret = do_read_client_finished(hs);
|
1029
|
-
break;
|
1030
|
-
case state_send_new_session_ticket:
|
1031
|
-
ret = do_send_new_session_ticket(hs);
|
1032
|
-
break;
|
1033
|
-
case state_done:
|
1034
|
-
ret = ssl_hs_ok;
|
1035
|
-
break;
|
1036
|
-
}
|
1037
|
-
|
1038
|
-
if (hs->tls13_state != state) {
|
1039
|
-
ssl_do_info_callback(hs->ssl, SSL_CB_ACCEPT_LOOP, 1);
|
1040
|
-
}
|
1041
|
-
|
1042
|
-
if (ret != ssl_hs_ok) {
|
1043
|
-
return ret;
|
1044
|
-
}
|
1045
|
-
}
|
1046
|
-
|
1047
|
-
return ssl_hs_ok;
|
1048
|
-
}
|
1049
|
-
|
1050
|
-
const char *tls13_server_handshake_state(SSL_HANDSHAKE *hs) {
|
1051
|
-
enum server_hs_state_t state =
|
1052
|
-
static_cast<enum server_hs_state_t>(hs->tls13_state);
|
1053
|
-
switch (state) {
|
1054
|
-
case state_select_parameters:
|
1055
|
-
return "TLS 1.3 server select_parameters";
|
1056
|
-
case state_select_session:
|
1057
|
-
return "TLS 1.3 server select_session";
|
1058
|
-
case state_send_hello_retry_request:
|
1059
|
-
return "TLS 1.3 server send_hello_retry_request";
|
1060
|
-
case state_read_second_client_hello:
|
1061
|
-
return "TLS 1.3 server read_second_client_hello";
|
1062
|
-
case state_send_server_hello:
|
1063
|
-
return "TLS 1.3 server send_server_hello";
|
1064
|
-
case state_send_server_certificate_verify:
|
1065
|
-
return "TLS 1.3 server send_server_certificate_verify";
|
1066
|
-
case state_send_server_finished:
|
1067
|
-
return "TLS 1.3 server send_server_finished";
|
1068
|
-
case state_read_second_client_flight:
|
1069
|
-
return "TLS 1.3 server read_second_client_flight";
|
1070
|
-
case state_process_end_of_early_data:
|
1071
|
-
return "TLS 1.3 server process_end_of_early_data";
|
1072
|
-
case state_read_client_certificate:
|
1073
|
-
return "TLS 1.3 server read_client_certificate";
|
1074
|
-
case state_read_client_certificate_verify:
|
1075
|
-
return "TLS 1.3 server read_client_certificate_verify";
|
1076
|
-
case state_read_channel_id:
|
1077
|
-
return "TLS 1.3 server read_channel_id";
|
1078
|
-
case state_read_client_finished:
|
1079
|
-
return "TLS 1.3 server read_client_finished";
|
1080
|
-
case state_send_new_session_ticket:
|
1081
|
-
return "TLS 1.3 server send_new_session_ticket";
|
1082
|
-
case state_done:
|
1083
|
-
return "TLS 1.3 server done";
|
1084
|
-
}
|
1085
|
-
|
1086
|
-
return "TLS 1.3 server unknown";
|
1087
|
-
}
|
1088
|
-
|
1089
|
-
BSSL_NAMESPACE_END
|