grpc 1.33.0.pre1 → 1.37.0.pre1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of grpc might be problematic. Click here for more details.
- checksums.yaml +4 -4
- data/Makefile +1075 -2814
- data/etc/roots.pem +257 -573
- data/include/grpc/compression.h +1 -1
- data/include/grpc/grpc.h +29 -2
- data/include/grpc/grpc_security.h +215 -175
- data/include/grpc/impl/codegen/atm_windows.h +4 -0
- data/include/grpc/impl/codegen/byte_buffer.h +1 -1
- data/include/grpc/impl/codegen/grpc_types.h +10 -3
- data/include/grpc/impl/codegen/log.h +0 -2
- data/include/grpc/impl/codegen/port_platform.h +24 -55
- data/include/grpc/impl/codegen/sync_windows.h +4 -0
- data/include/grpc/slice_buffer.h +3 -3
- data/include/grpc/support/sync.h +3 -3
- data/include/grpc/support/time.h +7 -7
- data/src/core/ext/filters/client_channel/backend_metric.cc +2 -4
- data/src/core/ext/filters/client_channel/client_channel.cc +2829 -1588
- data/src/core/ext/filters/client_channel/client_channel.h +0 -6
- data/src/core/ext/filters/client_channel/client_channel_factory.h +2 -1
- data/src/core/ext/filters/client_channel/client_channel_plugin.cc +1 -1
- data/src/core/ext/filters/client_channel/config_selector.h +15 -4
- data/src/core/ext/filters/client_channel/dynamic_filters.cc +191 -0
- data/src/core/ext/filters/client_channel/dynamic_filters.h +99 -0
- data/src/core/ext/filters/client_channel/global_subchannel_pool.cc +24 -142
- data/src/core/ext/filters/client_channel/global_subchannel_pool.h +15 -10
- data/src/core/ext/filters/client_channel/health/health_check_client.cc +10 -7
- data/src/core/ext/filters/client_channel/health/health_check_client.h +4 -4
- data/src/core/ext/filters/client_channel/http_connect_handshaker.cc +7 -8
- data/src/core/ext/filters/client_channel/http_proxy.cc +21 -20
- data/src/core/ext/filters/client_channel/lb_policy.cc +9 -2
- data/src/core/ext/filters/client_channel/lb_policy.h +5 -6
- data/src/core/ext/filters/client_channel/lb_policy/child_policy_handler.cc +1 -1
- data/src/core/ext/filters/client_channel/lb_policy/child_policy_handler.h +1 -1
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb.cc +115 -106
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_channel.h +1 -2
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_channel_secure.cc +1 -2
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_client_stats.cc +3 -1
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/load_balancer_api.cc +3 -3
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/load_balancer_api.h +1 -1
- data/src/core/ext/filters/client_channel/lb_policy/pick_first/pick_first.cc +3 -3
- data/src/core/ext/filters/client_channel/lb_policy/priority/priority.cc +55 -23
- data/src/core/ext/filters/client_channel/lb_policy/ring_hash/ring_hash.cc +23 -0
- data/src/core/ext/filters/client_channel/lb_policy/ring_hash/ring_hash.h +27 -0
- data/src/core/ext/filters/client_channel/lb_policy/round_robin/round_robin.cc +2 -2
- data/src/core/ext/filters/client_channel/lb_policy/subchannel_list.h +8 -5
- data/src/core/ext/filters/client_channel/lb_policy/weighted_target/weighted_target.cc +3 -3
- data/src/core/ext/filters/client_channel/lb_policy/xds/cds.cc +370 -109
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds.h +52 -24
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_channel_args.h +29 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/{eds_drop.cc → xds_cluster_impl.cc} +332 -108
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_cluster_manager.cc +22 -27
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_cluster_resolver.cc +1384 -0
- data/src/core/ext/filters/client_channel/local_subchannel_pool.cc +27 -67
- data/src/core/ext/filters/client_channel/local_subchannel_pool.h +10 -9
- data/src/core/ext/filters/client_channel/resolver.cc +7 -5
- data/src/core/ext/filters/client_channel/resolver.h +5 -13
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/dns_resolver_ares.cc +42 -58
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver.h +1 -32
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver_posix.cc +5 -5
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver_windows.cc +3 -1
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper.cc +444 -22
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper.h +5 -0
- data/src/core/ext/filters/client_channel/resolver/dns/native/dns_resolver.cc +22 -23
- data/src/core/ext/filters/client_channel/resolver/fake/fake_resolver.cc +21 -18
- data/src/core/ext/filters/client_channel/resolver/fake/fake_resolver.h +1 -1
- data/src/core/ext/filters/client_channel/resolver/google_c2p/google_c2p_resolver.cc +377 -0
- data/src/core/ext/filters/client_channel/resolver/sockaddr/sockaddr_resolver.cc +37 -30
- data/src/core/ext/filters/client_channel/resolver/xds/xds_resolver.cc +342 -133
- data/src/core/ext/filters/client_channel/resolver_factory.h +6 -6
- data/src/core/ext/filters/client_channel/resolver_registry.cc +40 -39
- data/src/core/ext/filters/client_channel/resolver_registry.h +2 -2
- data/src/core/ext/filters/client_channel/resolver_result_parsing.cc +24 -38
- data/src/core/ext/filters/client_channel/resolver_result_parsing.h +8 -8
- data/src/core/ext/filters/client_channel/retry_throttle.cc +5 -3
- data/src/core/ext/filters/client_channel/retry_throttle.h +4 -2
- data/src/core/ext/filters/client_channel/server_address.cc +9 -0
- data/src/core/ext/filters/client_channel/server_address.h +31 -4
- data/src/core/ext/filters/client_channel/service_config.cc +3 -1
- data/src/core/ext/filters/client_channel/service_config.h +1 -1
- data/src/core/ext/filters/client_channel/service_config_call_data.h +19 -1
- data/src/core/ext/filters/client_channel/subchannel.cc +117 -207
- data/src/core/ext/filters/client_channel/subchannel.h +75 -113
- data/src/core/ext/filters/client_channel/subchannel_interface.h +7 -15
- data/src/core/ext/filters/client_channel/subchannel_pool_interface.cc +16 -2
- data/src/core/ext/filters/client_channel/subchannel_pool_interface.h +16 -10
- data/src/core/ext/filters/client_idle/client_idle_filter.cc +1 -1
- data/src/core/ext/filters/deadline/deadline_filter.cc +87 -79
- data/src/core/ext/filters/deadline/deadline_filter.h +7 -11
- data/src/core/ext/filters/fault_injection/fault_injection_filter.cc +495 -0
- data/src/core/ext/filters/fault_injection/fault_injection_filter.h +39 -0
- data/src/core/ext/filters/fault_injection/service_config_parser.cc +189 -0
- data/src/core/ext/filters/fault_injection/service_config_parser.h +85 -0
- data/src/core/ext/filters/http/client/http_client_filter.cc +1 -1
- data/src/core/ext/filters/http/client_authority_filter.cc +6 -6
- data/src/core/ext/filters/http/http_filters_plugin.cc +6 -3
- data/src/core/ext/filters/http/server/http_server_filter.cc +3 -3
- data/src/core/ext/filters/max_age/max_age_filter.cc +36 -33
- data/src/core/ext/filters/message_size/message_size_filter.cc +1 -1
- data/src/core/ext/filters/workarounds/workaround_cronet_compression_filter.cc +1 -1
- data/src/core/ext/filters/workarounds/workaround_utils.cc +1 -1
- data/src/core/ext/transport/chttp2/client/authority.cc +3 -3
- data/src/core/ext/transport/chttp2/client/chttp2_connector.cc +2 -2
- data/src/core/ext/transport/chttp2/client/chttp2_connector.h +1 -1
- data/src/core/ext/transport/chttp2/client/insecure/channel_create.cc +23 -10
- data/src/core/ext/transport/chttp2/client/insecure/channel_create_posix.cc +21 -10
- data/src/core/ext/transport/chttp2/client/secure/secure_channel_create.cc +29 -16
- data/src/core/ext/transport/chttp2/server/chttp2_server.cc +629 -211
- data/src/core/ext/transport/chttp2/server/chttp2_server.h +11 -2
- data/src/core/ext/transport/chttp2/server/insecure/server_chttp2.cc +11 -1
- data/src/core/ext/transport/chttp2/server/insecure/server_chttp2_posix.cc +12 -5
- data/src/core/ext/transport/chttp2/server/secure/server_secure_chttp2.cc +62 -18
- data/src/core/ext/transport/chttp2/transport/bin_decoder.cc +7 -7
- data/src/core/ext/transport/chttp2/transport/chttp2_transport.cc +50 -39
- data/src/core/ext/transport/chttp2/transport/chttp2_transport.h +12 -1
- data/src/core/ext/transport/chttp2/transport/flow_control.h +3 -3
- data/src/core/ext/transport/chttp2/transport/frame_data.cc +5 -1
- data/src/core/ext/transport/chttp2/transport/frame_goaway.cc +2 -1
- data/src/core/ext/transport/chttp2/transport/frame_settings.h +2 -1
- data/src/core/ext/transport/chttp2/transport/frame_window_update.cc +6 -6
- data/src/core/ext/transport/chttp2/transport/hpack_encoder.cc +1 -1
- data/src/core/ext/transport/chttp2/transport/hpack_parser.cc +12 -8
- data/src/core/ext/transport/chttp2/transport/internal.h +1 -1
- data/src/core/ext/transport/chttp2/transport/parsing.cc +2 -1
- data/src/core/ext/transport/chttp2/transport/writing.cc +2 -3
- data/src/core/ext/transport/inproc/inproc_transport.cc +42 -8
- data/src/core/ext/upb-generated/envoy/admin/v3/config_dump.upb.c +406 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/config_dump.upb.h +1459 -0
- data/src/core/ext/upb-generated/envoy/annotations/deprecation.upb.h +1 -0
- data/src/core/ext/upb-generated/envoy/annotations/resource.upb.c +1 -1
- data/src/core/ext/upb-generated/envoy/annotations/resource.upb.h +7 -0
- data/src/core/ext/upb-generated/envoy/config/accesslog/v3/accesslog.upb.c +27 -28
- data/src/core/ext/upb-generated/envoy/config/accesslog/v3/accesslog.upb.h +139 -40
- data/src/core/ext/upb-generated/envoy/config/bootstrap/v3/bootstrap.upb.c +350 -0
- data/src/core/ext/upb-generated/envoy/config/bootstrap/v3/bootstrap.upb.h +1348 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/circuit_breaker.upb.c +13 -13
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/circuit_breaker.upb.h +44 -17
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/cluster.upb.c +119 -124
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/cluster.upb.h +450 -284
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/filter.upb.c +3 -3
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/filter.upb.h +13 -5
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/outlier_detection.upb.c +24 -23
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/outlier_detection.upb.h +62 -21
- data/src/core/ext/upb-generated/envoy/config/core/v3/address.upb.c +21 -21
- data/src/core/ext/upb-generated/envoy/config/core/v3/address.upb.h +88 -39
- data/src/core/ext/upb-generated/envoy/config/core/v3/backoff.upb.c +4 -4
- data/src/core/ext/upb-generated/envoy/config/core/v3/backoff.upb.h +15 -6
- data/src/core/ext/upb-generated/envoy/config/core/v3/base.upb.c +69 -45
- data/src/core/ext/upb-generated/envoy/config/core/v3/base.upb.h +275 -78
- data/src/core/ext/upb-generated/envoy/config/core/v3/config_source.upb.c +19 -19
- data/src/core/ext/upb-generated/envoy/config/core/v3/config_source.upb.h +80 -43
- data/src/core/ext/upb-generated/envoy/config/core/v3/event_service_config.upb.c +1 -1
- data/src/core/ext/upb-generated/envoy/config/core/v3/event_service_config.upb.h +7 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/extension.upb.c +7 -7
- data/src/core/ext/upb-generated/envoy/config/core/v3/extension.upb.h +27 -11
- data/src/core/ext/upb-generated/envoy/config/core/v3/grpc_service.upb.c +30 -30
- data/src/core/ext/upb-generated/envoy/config/core/v3/grpc_service.upb.h +136 -49
- data/src/core/ext/upb-generated/envoy/config/core/v3/health_check.upb.c +41 -41
- data/src/core/ext/upb-generated/envoy/config/core/v3/health_check.upb.h +172 -89
- data/src/core/ext/upb-generated/envoy/config/core/v3/http_uri.upb.c +4 -4
- data/src/core/ext/upb-generated/envoy/config/core/v3/http_uri.upb.h +17 -9
- data/src/core/ext/upb-generated/envoy/config/core/v3/protocol.upb.c +53 -47
- data/src/core/ext/upb-generated/envoy/config/core/v3/protocol.upb.h +188 -78
- data/src/core/ext/upb-generated/envoy/config/core/v3/proxy_protocol.upb.c +1 -2
- data/src/core/ext/upb-generated/envoy/config/core/v3/proxy_protocol.upb.h +7 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/socket_option.upb.c +2 -2
- data/src/core/ext/upb-generated/envoy/config/core/v3/socket_option.upb.h +9 -2
- data/src/core/ext/upb-generated/envoy/config/core/v3/substitution_format_string.upb.c +11 -5
- data/src/core/ext/upb-generated/envoy/config/core/v3/substitution_format_string.upb.h +48 -7
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint.upb.c +13 -14
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint.upb.h +59 -36
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint_components.upb.c +16 -16
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint_components.upb.h +61 -29
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/load_report.upb.c +26 -26
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/load_report.upb.h +101 -66
- data/src/core/ext/upb-generated/envoy/config/listener/v3/api_listener.upb.c +2 -2
- data/src/core/ext/upb-generated/envoy/config/listener/v3/api_listener.upb.h +11 -3
- data/src/core/ext/upb-generated/envoy/config/listener/v3/listener.upb.c +34 -32
- data/src/core/ext/upb-generated/envoy/config/listener/v3/listener.upb.h +151 -61
- data/src/core/ext/upb-generated/envoy/config/listener/v3/listener_components.upb.c +33 -29
- data/src/core/ext/upb-generated/envoy/config/listener/v3/listener_components.upb.h +138 -54
- data/src/core/ext/upb-generated/envoy/config/listener/v3/udp_listener_config.upb.c +2 -3
- data/src/core/ext/upb-generated/envoy/config/listener/v3/udp_listener_config.upb.h +13 -0
- data/src/core/ext/upb-generated/envoy/config/metrics/v3/stats.upb.c +144 -0
- data/src/core/ext/upb-generated/envoy/config/metrics/v3/stats.upb.h +488 -0
- data/src/core/ext/upb-generated/envoy/config/overload/v3/overload.upb.c +141 -0
- data/src/core/ext/upb-generated/envoy/config/overload/v3/overload.upb.h +452 -0
- data/src/core/ext/upb-generated/envoy/config/rbac/v3/rbac.upb.c +16 -16
- data/src/core/ext/upb-generated/envoy/config/rbac/v3/rbac.upb.h +81 -35
- data/src/core/ext/upb-generated/envoy/config/route/v3/route.upb.c +15 -13
- data/src/core/ext/upb-generated/envoy/config/route/v3/route.upb.h +70 -37
- data/src/core/ext/upb-generated/envoy/config/route/v3/route_components.upb.c +257 -216
- data/src/core/ext/upb-generated/envoy/config/route/v3/route_components.upb.h +995 -495
- data/src/core/ext/upb-generated/envoy/config/route/v3/scoped_route.upb.c +5 -5
- data/src/core/ext/upb-generated/envoy/config/route/v3/scoped_route.upb.h +26 -6
- data/src/core/ext/upb-generated/envoy/config/trace/v3/http_tracer.upb.c +3 -4
- data/src/core/ext/upb-generated/envoy/config/trace/v3/http_tracer.upb.h +17 -3
- data/src/core/ext/upb-generated/envoy/extensions/clusters/aggregate/v3/cluster.upb.c +29 -0
- data/src/core/ext/upb-generated/envoy/extensions/clusters/aggregate/v3/cluster.upb.h +67 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/common/fault/v3/fault.upb.c +79 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/common/fault/v3/fault.upb.h +268 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/http/fault/v3/fault.upb.c +78 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/http/fault/v3/fault.upb.h +281 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/http/router/v3/router.upb.c +41 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/http/router/v3/router.upb.h +113 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upb.c +96 -98
- data/src/core/ext/upb-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upb.h +378 -226
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/cert.upb.c +0 -1
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/cert.upb.h +1 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/common.upb.c +28 -25
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/common.upb.h +124 -53
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/secret.upb.c +9 -12
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/secret.upb.h +29 -24
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/tls.upb.c +32 -33
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/tls.upb.h +118 -67
- data/src/core/ext/upb-generated/envoy/service/cluster/v3/cds.upb.c +1 -1
- data/src/core/ext/upb-generated/envoy/service/cluster/v3/cds.upb.h +7 -0
- data/src/core/ext/upb-generated/envoy/service/discovery/v3/ads.upb.c +1 -1
- data/src/core/ext/upb-generated/envoy/service/discovery/v3/ads.upb.h +7 -0
- data/src/core/ext/upb-generated/envoy/service/discovery/v3/discovery.upb.c +51 -44
- data/src/core/ext/upb-generated/envoy/service/discovery/v3/discovery.upb.h +179 -129
- data/src/core/ext/upb-generated/envoy/service/endpoint/v3/eds.upb.c +1 -4
- data/src/core/ext/upb-generated/envoy/service/endpoint/v3/eds.upb.h +7 -0
- data/src/core/ext/upb-generated/envoy/service/listener/v3/lds.upb.c +1 -4
- data/src/core/ext/upb-generated/envoy/service/listener/v3/lds.upb.h +7 -0
- data/src/core/ext/upb-generated/envoy/service/load_stats/v3/lrs.upb.c +7 -8
- data/src/core/ext/upb-generated/envoy/service/load_stats/v3/lrs.upb.h +31 -16
- data/src/core/ext/upb-generated/envoy/service/route/v3/rds.upb.c +1 -3
- data/src/core/ext/upb-generated/envoy/service/route/v3/rds.upb.h +7 -0
- data/src/core/ext/upb-generated/envoy/service/route/v3/srds.upb.c +1 -1
- data/src/core/ext/upb-generated/envoy/service/route/v3/srds.upb.h +7 -0
- data/src/core/ext/upb-generated/envoy/service/status/v3/csds.upb.c +93 -0
- data/src/core/ext/upb-generated/envoy/service/status/v3/csds.upb.h +323 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/metadata.upb.c +5 -5
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/metadata.upb.h +25 -11
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/node.upb.c +36 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/node.upb.h +90 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/number.upb.c +1 -1
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/number.upb.h +7 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/path.upb.c +1 -1
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/path.upb.h +7 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/regex.upb.c +6 -6
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/regex.upb.h +29 -8
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/string.upb.c +2 -3
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/string.upb.h +16 -3
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/struct.upb.c +46 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/struct.upb.h +124 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/value.upb.c +3 -3
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/value.upb.h +19 -0
- data/src/core/ext/upb-generated/envoy/type/metadata/v3/metadata.upb.c +7 -7
- data/src/core/ext/upb-generated/envoy/type/metadata/v3/metadata.upb.h +46 -3
- data/src/core/ext/upb-generated/envoy/type/tracing/v3/custom_tag.upb.c +8 -8
- data/src/core/ext/upb-generated/envoy/type/tracing/v3/custom_tag.upb.h +41 -8
- data/src/core/ext/upb-generated/envoy/type/v3/http.upb.h +1 -0
- data/src/core/ext/upb-generated/envoy/type/v3/percent.upb.c +3 -3
- data/src/core/ext/upb-generated/envoy/type/v3/percent.upb.h +15 -2
- data/src/core/ext/upb-generated/envoy/type/v3/range.upb.c +3 -3
- data/src/core/ext/upb-generated/envoy/type/v3/range.upb.h +19 -0
- data/src/core/ext/upb-generated/envoy/type/v3/semantic_version.upb.c +1 -1
- data/src/core/ext/upb-generated/envoy/type/v3/semantic_version.upb.h +7 -0
- data/src/core/ext/upb-generated/google/api/annotations.upb.h +1 -0
- data/src/core/ext/upb-generated/google/api/expr/v1alpha1/checked.upb.c +34 -34
- data/src/core/ext/upb-generated/google/api/expr/v1alpha1/checked.upb.h +149 -72
- data/src/core/ext/upb-generated/google/api/expr/v1alpha1/syntax.upb.c +54 -37
- data/src/core/ext/upb-generated/google/api/expr/v1alpha1/syntax.upb.h +171 -59
- data/src/core/ext/upb-generated/google/api/http.upb.c +3 -3
- data/src/core/ext/upb-generated/google/api/http.upb.h +25 -6
- data/src/core/ext/upb-generated/google/protobuf/any.upb.c +1 -1
- data/src/core/ext/upb-generated/google/protobuf/any.upb.h +7 -0
- data/src/core/ext/upb-generated/google/protobuf/descriptor.upb.c +90 -90
- data/src/core/ext/upb-generated/google/protobuf/descriptor.upb.h +455 -292
- data/src/core/ext/upb-generated/google/protobuf/duration.upb.c +1 -1
- data/src/core/ext/upb-generated/google/protobuf/duration.upb.h +7 -0
- data/src/core/ext/upb-generated/google/protobuf/empty.upb.c +1 -1
- data/src/core/ext/upb-generated/google/protobuf/empty.upb.h +7 -0
- data/src/core/ext/upb-generated/google/protobuf/struct.upb.c +4 -4
- data/src/core/ext/upb-generated/google/protobuf/struct.upb.h +22 -3
- data/src/core/ext/upb-generated/google/protobuf/timestamp.upb.c +1 -1
- data/src/core/ext/upb-generated/google/protobuf/timestamp.upb.h +7 -0
- data/src/core/ext/upb-generated/google/protobuf/wrappers.upb.c +9 -9
- data/src/core/ext/upb-generated/google/protobuf/wrappers.upb.h +55 -0
- data/src/core/ext/upb-generated/google/rpc/status.upb.c +1 -1
- data/src/core/ext/upb-generated/google/rpc/status.upb.h +10 -3
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/altscontext.upb.c +4 -4
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/altscontext.upb.h +11 -3
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/handshaker.upb.c +41 -41
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/handshaker.upb.h +149 -76
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/transport_security_common.upb.c +5 -5
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/transport_security_common.upb.h +21 -6
- data/src/core/ext/upb-generated/src/proto/grpc/health/v1/health.upb.c +2 -2
- data/src/core/ext/upb-generated/src/proto/grpc/health/v1/health.upb.h +13 -0
- data/src/core/ext/upb-generated/src/proto/grpc/lb/v1/load_balancer.upb.c +17 -17
- data/src/core/ext/upb-generated/src/proto/grpc/lb/v1/load_balancer.upb.h +82 -25
- data/src/core/ext/upb-generated/udpa/annotations/migrate.upb.c +3 -3
- data/src/core/ext/upb-generated/udpa/annotations/migrate.upb.h +19 -0
- data/src/core/ext/upb-generated/udpa/annotations/security.upb.c +1 -1
- data/src/core/ext/upb-generated/udpa/annotations/security.upb.h +7 -0
- data/src/core/ext/upb-generated/udpa/annotations/sensitive.upb.h +1 -0
- data/src/core/ext/upb-generated/udpa/annotations/status.upb.c +2 -2
- data/src/core/ext/upb-generated/udpa/annotations/status.upb.h +9 -2
- data/src/core/ext/upb-generated/udpa/annotations/versioning.upb.c +1 -1
- data/src/core/ext/upb-generated/udpa/annotations/versioning.upb.h +7 -0
- data/src/core/ext/upb-generated/udpa/data/orca/v1/orca_load_report.upb.c +3 -3
- data/src/core/ext/upb-generated/udpa/data/orca/v1/orca_load_report.upb.h +7 -0
- data/src/core/ext/upb-generated/udpa/type/v1/typed_struct.upb.c +33 -0
- data/src/core/ext/upb-generated/udpa/type/v1/typed_struct.upb.h +77 -0
- data/src/core/ext/upb-generated/validate/validate.upb.c +64 -64
- data/src/core/ext/upb-generated/validate/validate.upb.h +296 -157
- data/src/core/ext/upb-generated/{udpa/core/v1 → xds/core/v3}/authority.upb.c +6 -6
- data/src/core/ext/upb-generated/xds/core/v3/authority.upb.h +60 -0
- data/src/core/ext/upb-generated/xds/core/v3/collection_entry.upb.c +52 -0
- data/src/core/ext/upb-generated/xds/core/v3/collection_entry.upb.h +143 -0
- data/src/core/ext/upb-generated/xds/core/v3/context_params.upb.c +42 -0
- data/src/core/ext/upb-generated/xds/core/v3/context_params.upb.h +84 -0
- data/src/core/ext/upb-generated/xds/core/v3/resource.upb.c +36 -0
- data/src/core/ext/upb-generated/xds/core/v3/resource.upb.h +94 -0
- data/src/core/ext/upb-generated/xds/core/v3/resource_locator.upb.c +54 -0
- data/src/core/ext/upb-generated/xds/core/v3/resource_locator.upb.h +166 -0
- data/src/core/ext/upb-generated/xds/core/v3/resource_name.upb.c +36 -0
- data/src/core/ext/upb-generated/xds/core/v3/resource_name.upb.h +85 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/config_dump.upbdefs.c +354 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/config_dump.upbdefs.h +140 -0
- data/src/core/ext/upbdefs-generated/envoy/annotations/deprecation.upbdefs.c +38 -0
- data/src/core/ext/upbdefs-generated/envoy/annotations/deprecation.upbdefs.h +30 -0
- data/src/core/ext/upbdefs-generated/envoy/annotations/resource.upbdefs.c +41 -0
- data/src/core/ext/upbdefs-generated/envoy/annotations/resource.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/accesslog/v3/accesslog.upbdefs.c +251 -0
- data/src/core/ext/upbdefs-generated/envoy/config/accesslog/v3/accesslog.upbdefs.h +105 -0
- data/src/core/ext/upbdefs-generated/envoy/config/bootstrap/v3/bootstrap.upbdefs.c +383 -0
- data/src/core/ext/upbdefs-generated/envoy/config/bootstrap/v3/bootstrap.upbdefs.h +115 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/circuit_breaker.upbdefs.c +100 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/circuit_breaker.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/cluster.upbdefs.c +543 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/cluster.upbdefs.h +145 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/filter.upbdefs.c +53 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/filter.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/outlier_detection.upbdefs.c +136 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/outlier_detection.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/address.upbdefs.c +127 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/address.upbdefs.h +65 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/backoff.upbdefs.c +56 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/backoff.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/base.upbdefs.c +272 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/base.upbdefs.h +135 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/config_source.upbdefs.c +143 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/config_source.upbdefs.h +55 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/event_service_config.upbdefs.c +56 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/event_service_config.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/extension.upbdefs.c +66 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/extension.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/grpc_service.upbdefs.c +263 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/grpc_service.upbdefs.h +100 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/health_check.upbdefs.c +233 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/health_check.upbdefs.h +70 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/http_uri.upbdefs.c +56 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/http_uri.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/protocol.upbdefs.c +231 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/protocol.upbdefs.h +85 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/proxy_protocol.upbdefs.c +43 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/proxy_protocol.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/socket_option.upbdefs.c +59 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/socket_option.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/substitution_format_string.upbdefs.c +68 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/substitution_format_string.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/endpoint/v3/endpoint.upbdefs.c +107 -0
- data/src/core/ext/upbdefs-generated/envoy/config/endpoint/v3/endpoint.upbdefs.h +50 -0
- data/src/core/ext/upbdefs-generated/envoy/config/endpoint/v3/endpoint_components.upbdefs.c +113 -0
- data/src/core/ext/upbdefs-generated/envoy/config/endpoint/v3/endpoint_components.upbdefs.h +50 -0
- data/src/core/ext/upbdefs-generated/envoy/config/endpoint/v3/load_report.upbdefs.c +146 -0
- data/src/core/ext/upbdefs-generated/envoy/config/endpoint/v3/load_report.upbdefs.h +55 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/api_listener.upbdefs.c +50 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/api_listener.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/listener.upbdefs.c +195 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/listener.upbdefs.h +55 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/listener_components.upbdefs.c +193 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/listener_components.upbdefs.h +65 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/udp_listener_config.upbdefs.c +59 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/udp_listener_config.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/config/metrics/v3/stats.upbdefs.c +141 -0
- data/src/core/ext/upbdefs-generated/envoy/config/metrics/v3/stats.upbdefs.h +70 -0
- data/src/core/ext/upbdefs-generated/envoy/config/overload/v3/overload.upbdefs.c +141 -0
- data/src/core/ext/upbdefs-generated/envoy/config/overload/v3/overload.upbdefs.h +70 -0
- data/src/core/ext/upbdefs-generated/envoy/config/route/v3/route.upbdefs.c +101 -0
- data/src/core/ext/upbdefs-generated/envoy/config/route/v3/route.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/config/route/v3/route_components.upbdefs.c +944 -0
- data/src/core/ext/upbdefs-generated/envoy/config/route/v3/route_components.upbdefs.h +290 -0
- data/src/core/ext/upbdefs-generated/envoy/config/route/v3/scoped_route.upbdefs.c +71 -0
- data/src/core/ext/upbdefs-generated/envoy/config/route/v3/scoped_route.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/http_tracer.upbdefs.c +61 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/http_tracer.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/clusters/aggregate/v3/cluster.upbdefs.c +51 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/clusters/aggregate/v3/cluster.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/common/fault/v3/fault.upbdefs.c +102 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/common/fault/v3/fault.upbdefs.h +55 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/http/fault/v3/fault.upbdefs.c +120 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/http/fault/v3/fault.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/http/router/v3/router.upbdefs.c +76 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/http/router/v3/router.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upbdefs.c +505 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upbdefs.h +115 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/cert.upbdefs.c +44 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/cert.upbdefs.h +30 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/common.upbdefs.c +170 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/common.upbdefs.h +55 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/secret.upbdefs.c +97 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/secret.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/tls.upbdefs.c +246 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/tls.upbdefs.h +60 -0
- data/src/core/ext/upbdefs-generated/envoy/service/cluster/v3/cds.upbdefs.c +72 -0
- data/src/core/ext/upbdefs-generated/envoy/service/cluster/v3/cds.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/service/discovery/v3/ads.upbdefs.c +60 -0
- data/src/core/ext/upbdefs-generated/envoy/service/discovery/v3/ads.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/service/discovery/v3/discovery.upbdefs.c +142 -0
- data/src/core/ext/upbdefs-generated/envoy/service/discovery/v3/discovery.upbdefs.h +65 -0
- data/src/core/ext/upbdefs-generated/envoy/service/endpoint/v3/eds.upbdefs.c +73 -0
- data/src/core/ext/upbdefs-generated/envoy/service/endpoint/v3/eds.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/service/listener/v3/lds.upbdefs.c +72 -0
- data/src/core/ext/upbdefs-generated/envoy/service/listener/v3/lds.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/service/load_stats/v3/lrs.upbdefs.c +80 -0
- data/src/core/ext/upbdefs-generated/envoy/service/load_stats/v3/lrs.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/service/route/v3/rds.upbdefs.c +80 -0
- data/src/core/ext/upbdefs-generated/envoy/service/route/v3/rds.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/service/route/v3/srds.upbdefs.c +74 -0
- data/src/core/ext/upbdefs-generated/envoy/service/route/v3/srds.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/service/status/v3/csds.upbdefs.c +130 -0
- data/src/core/ext/upbdefs-generated/envoy/service/status/v3/csds.upbdefs.h +50 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/metadata.upbdefs.c +64 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/metadata.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/node.upbdefs.c +56 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/node.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/number.upbdefs.c +54 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/number.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/path.upbdefs.c +53 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/path.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/regex.upbdefs.c +73 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/regex.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/string.upbdefs.c +69 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/string.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/struct.upbdefs.c +63 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/struct.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/value.upbdefs.c +81 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/value.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/type/metadata/v3/metadata.upbdefs.c +92 -0
- data/src/core/ext/upbdefs-generated/envoy/type/metadata/v3/metadata.upbdefs.h +65 -0
- data/src/core/ext/upbdefs-generated/envoy/type/tracing/v3/custom_tag.upbdefs.c +95 -0
- data/src/core/ext/upbdefs-generated/envoy/type/tracing/v3/custom_tag.upbdefs.h +55 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/http.upbdefs.c +34 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/http.upbdefs.h +30 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/percent.upbdefs.c +59 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/percent.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/range.upbdefs.c +54 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/range.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/semantic_version.upbdefs.c +47 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/semantic_version.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/google/api/annotations.upbdefs.c +40 -0
- data/src/core/ext/upbdefs-generated/google/api/annotations.upbdefs.h +30 -0
- data/src/core/ext/upbdefs-generated/google/api/http.upbdefs.c +61 -0
- data/src/core/ext/upbdefs-generated/google/api/http.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/any.upbdefs.c +39 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/any.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/descriptor.upbdefs.c +386 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/descriptor.upbdefs.h +165 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/duration.upbdefs.c +40 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/duration.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/empty.upbdefs.c +37 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/empty.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/struct.upbdefs.c +65 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/struct.upbdefs.h +50 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/timestamp.upbdefs.c +40 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/timestamp.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/wrappers.upbdefs.c +66 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/wrappers.upbdefs.h +75 -0
- data/src/core/ext/upbdefs-generated/google/rpc/status.upbdefs.c +42 -0
- data/src/core/ext/upbdefs-generated/google/rpc/status.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/migrate.upbdefs.c +70 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/migrate.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/security.upbdefs.c +56 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/security.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/sensitive.upbdefs.c +33 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/sensitive.upbdefs.h +30 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/status.upbdefs.c +49 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/status.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/versioning.upbdefs.c +43 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/versioning.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/udpa/type/v1/typed_struct.upbdefs.c +44 -0
- data/src/core/ext/upbdefs-generated/udpa/type/v1/typed_struct.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/validate/validate.upbdefs.c +310 -0
- data/src/core/ext/upbdefs-generated/validate/validate.upbdefs.h +145 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/authority.upbdefs.c +42 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/authority.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/collection_entry.upbdefs.c +62 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/collection_entry.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/context_params.upbdefs.c +45 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/context_params.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/resource.upbdefs.c +49 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/resource.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/resource_locator.upbdefs.c +67 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/resource_locator.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/resource_name.upbdefs.c +50 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/resource_name.upbdefs.h +35 -0
- data/src/core/ext/xds/certificate_provider_factory.h +7 -5
- data/src/core/ext/xds/certificate_provider_store.cc +87 -0
- data/src/core/ext/xds/certificate_provider_store.h +70 -8
- data/src/core/ext/xds/file_watcher_certificate_provider_factory.cc +144 -0
- data/src/core/ext/xds/file_watcher_certificate_provider_factory.h +69 -0
- data/src/core/ext/xds/xds_api.cc +2378 -1183
- data/src/core/ext/xds/xds_api.h +373 -99
- data/src/core/ext/xds/xds_bootstrap.cc +250 -68
- data/src/core/ext/xds/xds_bootstrap.h +40 -13
- data/src/core/ext/xds/xds_certificate_provider.cc +405 -0
- data/src/core/ext/xds/xds_certificate_provider.h +151 -0
- data/src/core/ext/xds/xds_client.cc +364 -182
- data/src/core/ext/xds/xds_client.h +47 -12
- data/src/core/ext/xds/xds_client_stats.cc +43 -5
- data/src/core/ext/xds/xds_client_stats.h +4 -4
- data/src/core/ext/xds/xds_http_fault_filter.cc +226 -0
- data/src/core/ext/xds/xds_http_fault_filter.h +63 -0
- data/src/core/ext/xds/xds_http_filters.cc +114 -0
- data/src/core/ext/xds/xds_http_filters.h +130 -0
- data/src/core/ext/xds/xds_server_config_fetcher.cc +532 -0
- data/src/core/lib/channel/channel_args.cc +9 -8
- data/src/core/lib/channel/channel_stack.cc +12 -0
- data/src/core/lib/channel/channel_stack.h +7 -0
- data/src/core/lib/channel/channel_trace.cc +4 -2
- data/src/core/lib/channel/channel_trace.h +1 -1
- data/src/core/lib/channel/channelz.cc +105 -18
- data/src/core/lib/channel/channelz.h +32 -4
- data/src/core/lib/channel/channelz_registry.cc +14 -0
- data/src/core/lib/channel/channelz_registry.h +0 -1
- data/src/core/lib/channel/handshaker.cc +4 -46
- data/src/core/lib/channel/handshaker.h +3 -20
- data/src/core/lib/channel/status_util.cc +12 -2
- data/src/core/lib/channel/status_util.h +5 -0
- data/src/core/lib/compression/compression.cc +8 -4
- data/src/core/lib/compression/compression_args.cc +3 -2
- data/src/core/lib/compression/compression_internal.cc +10 -5
- data/src/core/lib/compression/compression_internal.h +2 -1
- data/src/core/lib/compression/stream_compression_identity.cc +1 -3
- data/src/core/lib/debug/stats.h +2 -2
- data/src/core/lib/debug/stats_data.cc +1 -0
- data/src/core/lib/debug/stats_data.h +13 -13
- data/src/core/lib/gpr/alloc.cc +3 -2
- data/src/core/lib/gpr/cpu_iphone.cc +10 -2
- data/src/core/lib/gpr/log.cc +59 -17
- data/src/core/lib/gpr/log_linux.cc +19 -3
- data/src/core/lib/gpr/log_posix.cc +15 -1
- data/src/core/lib/gpr/log_windows.cc +18 -4
- data/src/core/lib/gpr/murmur_hash.cc +1 -1
- data/src/core/lib/gpr/spinlock.h +10 -2
- data/src/core/lib/gpr/string.cc +23 -22
- data/src/core/lib/gpr/string.h +5 -6
- data/src/core/lib/gpr/sync.cc +4 -4
- data/src/core/lib/gpr/sync_abseil.cc +3 -6
- data/src/core/lib/gpr/sync_windows.cc +2 -2
- data/src/core/lib/gpr/time.cc +12 -12
- data/src/core/lib/gpr/time_precise.cc +3 -2
- data/src/core/lib/gpr/tls.h +4 -0
- data/src/core/lib/gpr/tls_msvc.h +2 -0
- data/src/core/lib/gpr/tls_stdcpp.h +48 -0
- data/src/core/lib/gpr/useful.h +5 -4
- data/src/core/lib/gprpp/arena.h +3 -2
- data/src/core/lib/gprpp/atomic.h +3 -3
- data/src/core/lib/gprpp/dual_ref_counted.h +46 -51
- data/src/core/lib/gprpp/examine_stack.cc +43 -0
- data/src/core/lib/gprpp/examine_stack.h +46 -0
- data/src/core/lib/gprpp/fork.cc +2 -2
- data/src/core/lib/gprpp/manual_constructor.h +1 -1
- data/src/core/lib/gprpp/mpscq.cc +2 -2
- data/src/core/lib/gprpp/orphanable.h +4 -8
- data/src/core/lib/gprpp/ref_counted.h +42 -48
- data/src/core/lib/gprpp/ref_counted_ptr.h +20 -12
- data/src/core/lib/{security/authorization/mock_cel/statusor.h → gprpp/stat.h} +13 -25
- data/src/core/lib/gprpp/stat_posix.cc +49 -0
- data/src/core/lib/gprpp/stat_windows.cc +48 -0
- data/src/core/lib/gprpp/sync.h +129 -40
- data/src/core/lib/gprpp/thd.h +3 -3
- data/src/core/lib/gprpp/thd_posix.cc +42 -37
- data/src/core/lib/gprpp/thd_windows.cc +3 -1
- data/src/core/lib/gprpp/time_util.cc +77 -0
- data/src/core/lib/gprpp/time_util.h +42 -0
- data/src/core/lib/http/httpcli.cc +1 -1
- data/src/core/lib/http/httpcli.h +2 -3
- data/src/core/lib/http/httpcli_security_connector.cc +3 -3
- data/src/core/lib/http/parser.cc +47 -27
- data/src/core/lib/iomgr/buffer_list.h +1 -1
- data/src/core/lib/iomgr/call_combiner.cc +8 -5
- data/src/core/lib/iomgr/cfstream_handle.cc +2 -2
- data/src/core/lib/iomgr/combiner.cc +2 -1
- data/src/core/lib/iomgr/endpoint.h +1 -1
- data/src/core/lib/iomgr/error.cc +17 -12
- data/src/core/lib/iomgr/error.h +1 -1
- data/src/core/lib/iomgr/error_internal.h +1 -1
- data/src/core/lib/iomgr/ev_apple.cc +11 -8
- data/src/core/lib/iomgr/ev_epoll1_linux.cc +23 -16
- data/src/core/lib/iomgr/ev_epollex_linux.cc +29 -21
- data/src/core/lib/iomgr/ev_poll_posix.cc +9 -7
- data/src/core/lib/iomgr/ev_posix.cc +3 -3
- data/src/core/lib/iomgr/exec_ctx.cc +7 -3
- data/src/core/lib/iomgr/exec_ctx.h +6 -4
- data/src/core/lib/iomgr/executor.cc +2 -1
- data/src/core/lib/iomgr/executor.h +1 -1
- data/src/core/lib/iomgr/executor/mpmcqueue.h +5 -5
- data/src/core/lib/iomgr/executor/threadpool.h +4 -4
- data/src/core/lib/iomgr/iomgr.cc +1 -1
- data/src/core/lib/iomgr/iomgr_posix.cc +0 -1
- data/src/core/lib/iomgr/iomgr_posix_cfstream.cc +0 -1
- data/src/core/lib/iomgr/load_file.h +1 -1
- data/src/core/lib/iomgr/lockfree_event.cc +19 -14
- data/src/core/lib/iomgr/lockfree_event.h +2 -2
- data/src/core/lib/iomgr/parse_address.cc +127 -43
- data/src/core/lib/iomgr/parse_address.h +32 -8
- data/src/core/lib/iomgr/poller/eventmanager_libuv.cc +2 -1
- data/src/core/lib/iomgr/poller/eventmanager_libuv.h +1 -1
- data/src/core/lib/iomgr/pollset_set_custom.cc +1 -1
- data/src/core/lib/iomgr/python_util.h +4 -4
- data/src/core/lib/iomgr/resolve_address.cc +4 -4
- data/src/core/lib/iomgr/resolve_address_posix.cc +1 -5
- data/src/core/lib/iomgr/resource_quota.cc +5 -5
- data/src/core/lib/iomgr/sockaddr_utils.cc +131 -11
- data/src/core/lib/iomgr/sockaddr_utils.h +26 -1
- data/src/core/lib/iomgr/socket_factory_posix.cc +3 -2
- data/src/core/lib/iomgr/socket_mutator.cc +3 -2
- data/src/core/lib/iomgr/socket_utils_common_posix.cc +1 -0
- data/src/core/lib/iomgr/tcp_client.cc +3 -3
- data/src/core/lib/iomgr/tcp_client_custom.cc +7 -6
- data/src/core/lib/iomgr/tcp_client_posix.cc +1 -1
- data/src/core/lib/iomgr/tcp_custom.cc +22 -17
- data/src/core/lib/iomgr/tcp_posix.cc +17 -16
- data/src/core/lib/iomgr/tcp_server_custom.cc +28 -22
- data/src/core/lib/iomgr/tcp_uv.cc +2 -2
- data/src/core/lib/iomgr/timer_custom.cc +5 -5
- data/src/core/lib/iomgr/timer_generic.cc +5 -5
- data/src/core/lib/iomgr/timer_manager.cc +3 -3
- data/src/core/lib/iomgr/udp_server.cc +1 -2
- data/src/core/lib/iomgr/udp_server.h +1 -2
- data/src/core/lib/iomgr/unix_sockets_posix.cc +32 -21
- data/src/core/lib/iomgr/unix_sockets_posix.h +5 -0
- data/src/core/lib/iomgr/unix_sockets_posix_noop.cc +7 -0
- data/src/core/lib/iomgr/wakeup_fd_nospecial.cc +1 -1
- data/src/core/lib/iomgr/wakeup_fd_pipe.cc +2 -2
- data/src/core/lib/json/json.h +12 -2
- data/src/core/lib/json/json_reader.cc +8 -4
- data/src/core/lib/json/json_util.h +167 -0
- data/src/core/lib/json/json_writer.cc +2 -1
- data/src/core/lib/matchers/matchers.cc +339 -0
- data/src/core/lib/matchers/matchers.h +160 -0
- data/src/core/lib/security/context/security_context.cc +4 -3
- data/src/core/lib/security/context/security_context.h +3 -1
- data/src/core/lib/security/credentials/alts/alts_credentials.cc +2 -1
- data/src/core/lib/security/credentials/alts/alts_credentials.h +1 -1
- data/src/core/lib/security/credentials/alts/check_gcp_environment.cc +1 -1
- data/src/core/lib/security/credentials/credentials.cc +7 -7
- data/src/core/lib/security/credentials/credentials.h +5 -4
- data/src/core/lib/security/credentials/external/aws_external_account_credentials.cc +413 -0
- data/src/core/lib/security/credentials/external/aws_external_account_credentials.h +80 -0
- data/src/core/lib/security/credentials/external/aws_request_signer.cc +213 -0
- data/src/core/lib/security/credentials/external/aws_request_signer.h +72 -0
- data/src/core/lib/security/credentials/external/external_account_credentials.cc +497 -0
- data/src/core/lib/security/credentials/external/external_account_credentials.h +120 -0
- data/src/core/lib/security/credentials/external/file_external_account_credentials.cc +135 -0
- data/src/core/lib/security/credentials/external/file_external_account_credentials.h +48 -0
- data/src/core/lib/security/credentials/external/url_external_account_credentials.cc +213 -0
- data/src/core/lib/security/credentials/external/url_external_account_credentials.h +58 -0
- data/src/core/lib/security/credentials/fake/fake_credentials.cc +3 -2
- data/src/core/lib/security/credentials/google_default/google_default_credentials.cc +25 -18
- data/src/core/lib/security/credentials/insecure/insecure_credentials.cc +64 -0
- data/src/core/lib/security/credentials/jwt/json_token.cc +3 -3
- data/src/core/lib/security/credentials/jwt/jwt_credentials.h +4 -3
- data/src/core/lib/security/credentials/jwt/jwt_verifier.cc +5 -4
- data/src/core/lib/security/credentials/local/local_credentials.cc +2 -1
- data/src/core/lib/security/credentials/local/local_credentials.h +1 -1
- data/src/core/lib/security/credentials/oauth2/oauth2_credentials.cc +39 -46
- data/src/core/lib/security/credentials/oauth2/oauth2_credentials.h +5 -4
- data/src/core/lib/security/credentials/plugin/plugin_credentials.cc +1 -1
- data/src/core/lib/security/credentials/ssl/ssl_credentials.cc +7 -6
- data/src/core/lib/security/credentials/ssl/ssl_credentials.h +2 -2
- data/src/core/lib/security/credentials/tls/grpc_tls_certificate_distributor.cc +30 -5
- data/src/core/lib/security/credentials/tls/grpc_tls_certificate_distributor.h +13 -14
- data/src/core/lib/security/credentials/tls/grpc_tls_certificate_provider.cc +399 -0
- data/src/core/lib/security/credentials/tls/grpc_tls_certificate_provider.h +138 -0
- data/src/core/lib/security/credentials/tls/grpc_tls_credentials_options.cc +78 -150
- data/src/core/lib/security/credentials/tls/grpc_tls_credentials_options.h +57 -187
- data/src/core/lib/security/credentials/tls/tls_credentials.cc +18 -13
- data/src/core/lib/security/credentials/tls/tls_credentials.h +3 -3
- data/src/core/lib/security/credentials/tls/tls_utils.cc +91 -0
- data/src/core/lib/security/credentials/tls/tls_utils.h +38 -0
- data/src/core/lib/security/credentials/xds/xds_credentials.cc +209 -10
- data/src/core/lib/security/credentials/xds/xds_credentials.h +27 -9
- data/src/core/lib/security/security_connector/alts/alts_security_connector.cc +1 -1
- data/src/core/lib/security/security_connector/fake/fake_security_connector.cc +3 -3
- data/src/core/lib/security/security_connector/insecure/insecure_security_connector.cc +121 -0
- data/src/core/lib/security/security_connector/insecure/insecure_security_connector.h +87 -0
- data/src/core/lib/security/security_connector/load_system_roots.h +4 -0
- data/src/core/lib/security/security_connector/load_system_roots_linux.h +2 -0
- data/src/core/lib/security/security_connector/local/local_security_connector.cc +3 -3
- data/src/core/lib/security/security_connector/security_connector.cc +4 -3
- data/src/core/lib/security/security_connector/security_connector.h +4 -2
- data/src/core/lib/security/security_connector/ssl/ssl_security_connector.cc +4 -4
- data/src/core/lib/security/security_connector/ssl_utils.cc +11 -6
- data/src/core/lib/security/security_connector/ssl_utils.h +16 -21
- data/src/core/lib/security/security_connector/tls/tls_security_connector.cc +360 -279
- data/src/core/lib/security/security_connector/tls/tls_security_connector.h +105 -61
- data/src/core/lib/security/transport/secure_endpoint.cc +2 -2
- data/src/core/lib/security/transport/security_handshaker.cc +36 -8
- data/src/core/lib/security/transport/server_auth_filter.cc +2 -1
- data/src/core/lib/security/util/json_util.h +1 -0
- data/src/core/lib/slice/slice.cc +7 -4
- data/src/core/lib/slice/slice_buffer.cc +2 -1
- data/src/core/lib/slice/slice_intern.cc +11 -13
- data/src/core/lib/slice/slice_internal.h +2 -2
- data/src/core/lib/surface/call.cc +41 -32
- data/src/core/lib/surface/call_details.cc +8 -8
- data/src/core/lib/surface/channel.cc +16 -10
- data/src/core/lib/surface/channel.h +6 -5
- data/src/core/lib/surface/channel_init.cc +1 -1
- data/src/core/lib/surface/completion_queue.cc +31 -25
- data/src/core/lib/surface/completion_queue.h +16 -16
- data/src/core/lib/surface/init.cc +19 -20
- data/src/core/lib/surface/lame_client.cc +47 -54
- data/src/core/lib/surface/lame_client.h +5 -0
- data/src/core/lib/surface/server.cc +106 -53
- data/src/core/lib/surface/server.h +114 -20
- data/src/core/lib/surface/validate_metadata.h +3 -0
- data/src/core/lib/surface/version.cc +2 -2
- data/src/core/lib/transport/authority_override.cc +6 -4
- data/src/core/lib/transport/authority_override.h +7 -2
- data/src/core/lib/transport/bdp_estimator.cc +1 -1
- data/src/core/lib/transport/byte_stream.h +3 -3
- data/src/core/lib/transport/connectivity_state.h +9 -7
- data/src/core/lib/transport/error_utils.h +1 -1
- data/src/core/lib/transport/metadata.cc +6 -2
- data/src/core/lib/transport/metadata.h +2 -2
- data/src/core/lib/transport/metadata_batch.cc +27 -0
- data/src/core/lib/transport/metadata_batch.h +18 -4
- data/src/core/lib/transport/static_metadata.cc +1 -1
- data/src/core/lib/transport/status_metadata.cc +4 -3
- data/src/core/lib/transport/timeout_encoding.cc +4 -4
- data/src/core/lib/transport/transport.cc +5 -3
- data/src/core/lib/transport/transport.h +8 -8
- data/src/core/lib/uri/uri_parser.cc +131 -249
- data/src/core/lib/uri/uri_parser.h +57 -21
- data/src/core/plugin_registry/grpc_plugin_registry.cc +26 -8
- data/src/core/tsi/alts/crypt/gsec.cc +5 -4
- data/src/core/tsi/alts/frame_protector/frame_handler.cc +8 -6
- data/src/core/tsi/alts/handshaker/alts_handshaker_client.cc +19 -25
- data/src/core/tsi/alts/handshaker/alts_tsi_handshaker.cc +43 -47
- data/src/core/tsi/alts/handshaker/alts_tsi_handshaker.h +1 -1
- data/src/core/tsi/alts/handshaker/transport_security_common_api.cc +1 -3
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_iovec_record_protocol.cc +8 -6
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_zero_copy_grpc_protector.cc +4 -4
- data/src/core/tsi/fake_transport_security.cc +17 -5
- data/src/core/tsi/local_transport_security.cc +5 -1
- data/src/core/tsi/local_transport_security.h +6 -7
- data/src/core/tsi/ssl/session_cache/ssl_session_boringssl.cc +1 -1
- data/src/core/tsi/ssl/session_cache/ssl_session_cache.cc +0 -2
- data/src/core/tsi/ssl/session_cache/ssl_session_cache.h +3 -2
- data/src/core/tsi/ssl_transport_security.cc +73 -56
- data/src/core/tsi/ssl_transport_security.h +6 -6
- data/src/core/tsi/transport_security.cc +10 -8
- data/src/core/tsi/transport_security_interface.h +1 -1
- data/src/ruby/ext/grpc/extconf.rb +10 -2
- data/src/ruby/ext/grpc/rb_channel.c +10 -1
- data/src/ruby/ext/grpc/rb_channel_credentials.c +11 -1
- data/src/ruby/ext/grpc/rb_channel_credentials.h +4 -0
- data/src/ruby/ext/grpc/rb_compression_options.c +1 -1
- data/src/ruby/ext/grpc/rb_enable_cpp.cc +1 -1
- data/src/ruby/ext/grpc/rb_event_thread.c +2 -0
- data/src/ruby/ext/grpc/rb_grpc.c +4 -0
- data/src/ruby/ext/grpc/rb_grpc_imports.generated.c +36 -14
- data/src/ruby/ext/grpc/rb_grpc_imports.generated.h +70 -37
- data/src/ruby/ext/grpc/rb_server.c +13 -1
- data/src/ruby/ext/grpc/rb_server_credentials.c +19 -3
- data/src/ruby/ext/grpc/rb_server_credentials.h +4 -0
- data/src/ruby/ext/grpc/rb_xds_channel_credentials.c +215 -0
- data/src/ruby/ext/grpc/rb_xds_channel_credentials.h +35 -0
- data/src/ruby/ext/grpc/rb_xds_server_credentials.c +169 -0
- data/src/ruby/ext/grpc/rb_xds_server_credentials.h +35 -0
- data/src/ruby/lib/grpc/generic/client_stub.rb +4 -2
- data/src/ruby/lib/grpc/version.rb +1 -1
- data/src/ruby/pb/src/proto/grpc/testing/messages_pb.rb +35 -0
- data/src/ruby/pb/src/proto/grpc/testing/test_services_pb.rb +18 -0
- data/src/ruby/spec/call_spec.rb +1 -1
- data/src/ruby/spec/channel_credentials_spec.rb +32 -0
- data/src/ruby/spec/channel_spec.rb +17 -6
- data/src/ruby/spec/client_auth_spec.rb +27 -1
- data/src/ruby/spec/errors_spec.rb +1 -1
- data/src/ruby/spec/generic/active_call_spec.rb +2 -2
- data/src/ruby/spec/generic/client_stub_spec.rb +4 -4
- data/src/ruby/spec/generic/rpc_server_spec.rb +1 -1
- data/src/ruby/spec/pb/codegen/package_option_spec.rb +2 -6
- data/src/ruby/spec/server_credentials_spec.rb +25 -0
- data/src/ruby/spec/server_spec.rb +22 -0
- data/third_party/abseil-cpp/absl/algorithm/container.h +59 -22
- data/third_party/abseil-cpp/absl/base/attributes.h +99 -38
- data/third_party/abseil-cpp/absl/base/call_once.h +1 -1
- data/third_party/abseil-cpp/absl/base/casts.h +9 -6
- data/third_party/abseil-cpp/absl/base/config.h +60 -17
- data/third_party/abseil-cpp/absl/base/dynamic_annotations.h +428 -335
- data/third_party/abseil-cpp/absl/base/internal/bits.h +17 -16
- data/third_party/abseil-cpp/absl/base/internal/direct_mmap.h +5 -0
- data/third_party/abseil-cpp/absl/base/internal/dynamic_annotations.h +398 -0
- data/third_party/abseil-cpp/absl/base/internal/invoke.h +4 -4
- data/third_party/abseil-cpp/absl/base/internal/low_level_alloc.cc +1 -1
- data/third_party/abseil-cpp/absl/base/internal/low_level_scheduling.h +29 -1
- data/third_party/abseil-cpp/absl/base/internal/raw_logging.cc +2 -2
- data/third_party/abseil-cpp/absl/base/internal/raw_logging.h +7 -5
- data/third_party/abseil-cpp/absl/base/internal/spinlock.cc +25 -38
- data/third_party/abseil-cpp/absl/base/internal/spinlock.h +19 -25
- data/third_party/abseil-cpp/absl/base/internal/spinlock_linux.inc +8 -0
- data/third_party/abseil-cpp/absl/base/internal/sysinfo.cc +28 -5
- data/third_party/abseil-cpp/absl/base/internal/sysinfo.h +8 -0
- data/third_party/abseil-cpp/absl/base/internal/tsan_mutex_interface.h +3 -1
- data/third_party/abseil-cpp/absl/base/internal/unaligned_access.h +2 -2
- data/third_party/abseil-cpp/absl/base/internal/unscaledcycleclock.h +3 -3
- data/third_party/abseil-cpp/absl/base/macros.h +36 -109
- data/third_party/abseil-cpp/absl/base/optimization.h +61 -1
- data/third_party/abseil-cpp/absl/base/options.h +31 -4
- data/third_party/abseil-cpp/absl/base/policy_checks.h +1 -1
- data/third_party/abseil-cpp/absl/base/thread_annotations.h +94 -39
- data/third_party/abseil-cpp/absl/container/fixed_array.h +42 -25
- data/third_party/abseil-cpp/absl/container/flat_hash_map.h +606 -0
- data/third_party/abseil-cpp/absl/container/inlined_vector.h +33 -36
- data/third_party/abseil-cpp/absl/container/internal/common.h +6 -2
- data/third_party/abseil-cpp/absl/container/internal/compressed_tuple.h +33 -8
- data/third_party/abseil-cpp/absl/container/internal/container_memory.h +49 -29
- data/third_party/abseil-cpp/absl/container/internal/hash_function_defaults.h +15 -0
- data/third_party/abseil-cpp/absl/container/internal/hash_policy_traits.h +24 -7
- data/third_party/abseil-cpp/absl/container/internal/hashtablez_sampler.cc +2 -1
- data/third_party/abseil-cpp/absl/container/internal/hashtablez_sampler.h +35 -11
- data/third_party/abseil-cpp/absl/container/internal/have_sse.h +10 -9
- data/third_party/abseil-cpp/absl/container/internal/layout.h +7 -5
- data/third_party/abseil-cpp/absl/container/internal/raw_hash_map.h +197 -0
- data/third_party/abseil-cpp/absl/container/internal/raw_hash_set.h +55 -34
- data/third_party/abseil-cpp/absl/debugging/internal/address_is_readable.cc +5 -4
- data/third_party/abseil-cpp/absl/debugging/internal/demangle.cc +66 -16
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_aarch64-inl.inc +4 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_arm-inl.inc +13 -4
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_config.h +43 -24
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_generic-inl.inc +12 -3
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_win32-inl.inc +10 -2
- data/third_party/abseil-cpp/absl/debugging/internal/symbolize.h +22 -1
- data/third_party/abseil-cpp/absl/debugging/internal/vdso_support.cc +0 -21
- data/third_party/abseil-cpp/absl/debugging/symbolize.cc +12 -1
- data/third_party/abseil-cpp/absl/debugging/symbolize_darwin.inc +101 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize_elf.inc +100 -20
- data/third_party/abseil-cpp/absl/functional/bind_front.h +184 -0
- data/third_party/abseil-cpp/absl/functional/function_ref.h +1 -1
- data/third_party/abseil-cpp/absl/functional/internal/front_binder.h +95 -0
- data/third_party/abseil-cpp/absl/functional/internal/function_ref.h +2 -2
- data/third_party/abseil-cpp/absl/hash/hash.h +6 -5
- data/third_party/abseil-cpp/absl/hash/internal/hash.h +73 -65
- data/third_party/abseil-cpp/absl/memory/memory.h +4 -0
- data/third_party/abseil-cpp/absl/meta/type_traits.h +2 -8
- data/third_party/abseil-cpp/absl/numeric/int128.cc +13 -27
- data/third_party/abseil-cpp/absl/numeric/int128.h +16 -15
- data/third_party/abseil-cpp/absl/status/internal/status_internal.h +51 -0
- data/third_party/abseil-cpp/absl/status/internal/statusor_internal.h +399 -0
- data/third_party/abseil-cpp/absl/status/status.cc +4 -6
- data/third_party/abseil-cpp/absl/status/status.h +502 -113
- data/third_party/abseil-cpp/absl/status/status_payload_printer.cc +5 -10
- data/third_party/abseil-cpp/absl/status/statusor.cc +71 -0
- data/third_party/abseil-cpp/absl/status/statusor.h +760 -0
- data/third_party/abseil-cpp/absl/strings/charconv.cc +2 -2
- data/third_party/abseil-cpp/absl/strings/cord.cc +91 -112
- data/third_party/abseil-cpp/absl/strings/cord.h +360 -205
- data/third_party/abseil-cpp/absl/strings/escaping.cc +9 -9
- data/third_party/abseil-cpp/absl/strings/internal/char_map.h +1 -1
- data/third_party/abseil-cpp/absl/strings/internal/charconv_bigint.cc +1 -1
- data/third_party/abseil-cpp/absl/strings/internal/charconv_bigint.h +2 -2
- data/third_party/abseil-cpp/absl/strings/internal/charconv_parse.cc +2 -2
- data/third_party/abseil-cpp/absl/strings/internal/cord_internal.h +45 -23
- data/third_party/abseil-cpp/absl/strings/internal/str_format/arg.cc +222 -136
- data/third_party/abseil-cpp/absl/strings/internal/str_format/arg.h +136 -64
- data/third_party/abseil-cpp/absl/strings/internal/str_format/bind.cc +1 -1
- data/third_party/abseil-cpp/absl/strings/internal/str_format/bind.h +14 -21
- data/third_party/abseil-cpp/absl/strings/internal/str_format/checker.h +7 -14
- data/third_party/abseil-cpp/absl/strings/internal/str_format/extension.cc +31 -7
- data/third_party/abseil-cpp/absl/strings/internal/str_format/extension.h +147 -135
- data/third_party/abseil-cpp/absl/strings/internal/str_format/float_conversion.cc +999 -87
- data/third_party/abseil-cpp/absl/strings/internal/str_format/float_conversion.h +3 -3
- data/third_party/abseil-cpp/absl/strings/internal/str_format/output.h +4 -12
- data/third_party/abseil-cpp/absl/strings/internal/str_format/parser.cc +8 -6
- data/third_party/abseil-cpp/absl/strings/internal/str_format/parser.h +13 -11
- data/third_party/abseil-cpp/absl/strings/internal/str_split_internal.h +2 -2
- data/third_party/abseil-cpp/absl/strings/str_cat.cc +4 -4
- data/third_party/abseil-cpp/absl/strings/str_cat.h +1 -1
- data/third_party/abseil-cpp/absl/strings/str_format.h +289 -13
- data/third_party/abseil-cpp/absl/strings/str_split.cc +2 -2
- data/third_party/abseil-cpp/absl/strings/str_split.h +1 -0
- data/third_party/abseil-cpp/absl/strings/string_view.h +26 -19
- data/third_party/abseil-cpp/absl/strings/substitute.cc +5 -5
- data/third_party/abseil-cpp/absl/strings/substitute.h +32 -29
- data/third_party/abseil-cpp/absl/synchronization/internal/create_thread_identity.cc +3 -3
- data/third_party/abseil-cpp/absl/synchronization/internal/graphcycles.cc +4 -3
- data/third_party/abseil-cpp/absl/synchronization/internal/kernel_timeout.h +28 -28
- data/third_party/abseil-cpp/absl/synchronization/internal/mutex_nonprod.inc +4 -16
- data/third_party/abseil-cpp/absl/synchronization/internal/per_thread_sem.h +1 -1
- data/third_party/abseil-cpp/absl/synchronization/internal/waiter.cc +8 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/waiter.h +2 -2
- data/third_party/abseil-cpp/absl/synchronization/mutex.cc +75 -64
- data/third_party/abseil-cpp/absl/synchronization/mutex.h +15 -6
- data/third_party/abseil-cpp/absl/time/civil_time.cc +9 -9
- data/third_party/abseil-cpp/absl/time/clock.cc +3 -3
- data/third_party/abseil-cpp/absl/time/duration.cc +90 -59
- data/third_party/abseil-cpp/absl/time/format.cc +43 -36
- data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/civil_time_detail.h +26 -16
- data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/time_zone.h +4 -2
- data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/zone_info_source.h +1 -1
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_format.cc +136 -29
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_impl.cc +13 -21
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_impl.h +1 -1
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_info.cc +136 -129
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_info.h +4 -5
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_libc.cc +8 -7
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/tzfile.h +6 -6
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/zone_info_source.cc +2 -1
- data/third_party/abseil-cpp/absl/time/time.h +15 -16
- data/third_party/abseil-cpp/absl/types/internal/variant.h +4 -4
- data/third_party/abseil-cpp/absl/types/optional.h +9 -9
- data/third_party/abseil-cpp/absl/types/span.h +49 -36
- data/third_party/abseil-cpp/absl/utility/utility.h +2 -2
- data/third_party/address_sorting/include/address_sorting/address_sorting.h +2 -0
- data/third_party/boringssl-with-bazel/err_data.c +728 -722
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_bitstr.c +3 -3
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_enum.c +2 -2
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_int.c +5 -5
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_object.c +3 -10
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_octet.c +3 -3
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_type.c +4 -2
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_utctm.c +2 -2
- data/third_party/boringssl-with-bazel/src/crypto/asn1/asn1_lib.c +15 -14
- data/third_party/boringssl-with-bazel/src/crypto/asn1/asn1_locl.h +30 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_dec.c +28 -79
- data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_enc.c +39 -85
- data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_fre.c +5 -16
- data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_new.c +10 -61
- data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_typ.c +0 -2
- data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_utl.c +2 -2
- data/third_party/boringssl-with-bazel/src/crypto/bio/bio.c +2 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/socket_helper.c +4 -0
- data/third_party/boringssl-with-bazel/src/crypto/blake2/blake2.c +158 -0
- data/third_party/boringssl-with-bazel/src/crypto/bn_extra/bn_asn1.c +3 -10
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/ber.c +8 -9
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/cbs.c +60 -45
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_chacha20poly1305.c +6 -81
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/internal.h +87 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-aarch64-win.c +41 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-arm-linux.c +11 -2
- data/third_party/boringssl-with-bazel/src/crypto/cpu-arm.c +3 -3
- data/third_party/boringssl-with-bazel/src/crypto/{dh → dh_extra}/dh_asn1.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/{dh → dh_extra}/params.c +179 -0
- data/third_party/boringssl-with-bazel/src/crypto/digest_extra/digest_extra.c +25 -0
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/ec_asn1.c +2 -17
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bcm.c +3 -1
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/bn.c +13 -20
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/div.c +2 -3
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/internal.h +9 -1
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/cipher.c +21 -13
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/e_aes.c +173 -35
- data/third_party/boringssl-with-bazel/src/crypto/{dh → fipsmodule/dh}/check.c +0 -0
- data/third_party/boringssl-with-bazel/src/crypto/{dh → fipsmodule/dh}/dh.c +136 -213
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec.c +12 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec_key.c +9 -1
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/internal.h +28 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/rand.c +135 -43
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/urandom.c +0 -7
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/rsa_impl.c +97 -39
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/self_check/self_check.c +155 -2
- data/third_party/boringssl-with-bazel/src/crypto/hpke/hpke.c +18 -29
- data/third_party/boringssl-with-bazel/src/crypto/hpke/internal.h +13 -4
- data/third_party/boringssl-with-bazel/src/crypto/poly1305/poly1305.c +10 -7
- data/third_party/boringssl-with-bazel/src/crypto/poly1305/poly1305_arm.c +13 -11
- data/third_party/boringssl-with-bazel/src/crypto/poly1305/poly1305_vec.c +4 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/passive.c +34 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/rand_extra.c +4 -0
- data/third_party/boringssl-with-bazel/src/crypto/stack/stack.c +7 -13
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/internal.h +90 -63
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/pmbtoken.c +60 -60
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/trust_token.c +179 -47
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/voprf.c +766 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/algorithm.c +10 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/rsa_pss.c +5 -1
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_cmp.c +1 -29
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_ext.c +10 -7
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_r2x.c +1 -1
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_set.c +8 -8
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_v3.c +1 -1
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509cset.c +29 -23
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_attrib.c +22 -17
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_crl.c +1 -2
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_pkey.c +2 -2
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_x509.c +39 -4
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_x509a.c +2 -2
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_data.c +5 -3
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_akey.c +3 -3
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_alt.c +25 -24
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_bitst.c +3 -3
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_conf.c +25 -25
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_cpols.c +2 -2
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_enum.c +2 -1
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_genn.c +40 -20
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_ia5.c +3 -4
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_lib.c +25 -36
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_prn.c +2 -2
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_skey.c +6 -6
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_utl.c +6 -6
- data/third_party/boringssl-with-bazel/src/include/openssl/aead.h +24 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/arm_arch.h +10 -8
- data/third_party/boringssl-with-bazel/src/include/openssl/asn1.h +652 -545
- data/third_party/boringssl-with-bazel/src/include/openssl/asn1t.h +0 -167
- data/third_party/boringssl-with-bazel/src/include/openssl/base.h +14 -6
- data/third_party/boringssl-with-bazel/src/include/openssl/bio.h +4 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/blake2.h +62 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/bytestring.h +22 -7
- data/third_party/boringssl-with-bazel/src/include/openssl/cipher.h +19 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/cpu.h +22 -32
- data/third_party/boringssl-with-bazel/src/include/openssl/des.h +6 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/dh.h +56 -26
- data/third_party/boringssl-with-bazel/src/include/openssl/digest.h +1 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ec.h +15 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/evp.h +12 -2
- data/third_party/boringssl-with-bazel/src/include/openssl/opensslconf.h +3 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/pem.h +202 -134
- data/third_party/boringssl-with-bazel/src/include/openssl/rand.h +3 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/span.h +2 -1
- data/third_party/boringssl-with-bazel/src/include/openssl/ssl.h +122 -34
- data/third_party/boringssl-with-bazel/src/include/openssl/tls1.h +31 -8
- data/third_party/boringssl-with-bazel/src/include/openssl/trust_token.h +31 -23
- data/third_party/boringssl-with-bazel/src/include/openssl/x509.h +287 -99
- data/third_party/boringssl-with-bazel/src/include/openssl/x509v3.h +546 -402
- data/third_party/boringssl-with-bazel/src/ssl/bio_ssl.cc +18 -5
- data/third_party/boringssl-with-bazel/src/ssl/handoff.cc +35 -0
- data/third_party/boringssl-with-bazel/src/ssl/handshake.cc +4 -3
- data/third_party/boringssl-with-bazel/src/ssl/handshake_client.cc +11 -20
- data/third_party/boringssl-with-bazel/src/ssl/handshake_server.cc +10 -5
- data/third_party/boringssl-with-bazel/src/ssl/internal.h +73 -17
- data/third_party/boringssl-with-bazel/src/ssl/s3_lib.cc +0 -1
- data/third_party/boringssl-with-bazel/src/ssl/ssl_asn1.cc +49 -9
- data/third_party/boringssl-with-bazel/src/ssl/ssl_lib.cc +87 -14
- data/third_party/boringssl-with-bazel/src/ssl/ssl_session.cc +18 -22
- data/third_party/boringssl-with-bazel/src/ssl/ssl_transcript.cc +2 -2
- data/third_party/boringssl-with-bazel/src/ssl/t1_enc.cc +5 -7
- data/third_party/boringssl-with-bazel/src/ssl/t1_lib.cc +570 -53
- data/third_party/boringssl-with-bazel/src/ssl/tls13_client.cc +55 -13
- data/third_party/boringssl-with-bazel/src/ssl/tls13_enc.cc +48 -15
- data/third_party/boringssl-with-bazel/src/ssl/tls13_server.cc +192 -56
- data/third_party/upb/third_party/wyhash/wyhash.h +145 -0
- data/third_party/upb/upb/decode.c +248 -167
- data/third_party/upb/upb/decode.h +20 -1
- data/third_party/upb/upb/decode.int.h +163 -0
- data/third_party/upb/upb/decode_fast.c +1040 -0
- data/third_party/upb/upb/decode_fast.h +126 -0
- data/third_party/upb/upb/def.c +2178 -0
- data/third_party/upb/upb/def.h +315 -0
- data/third_party/upb/upb/def.hpp +439 -0
- data/third_party/upb/upb/encode.c +227 -169
- data/third_party/upb/upb/encode.h +27 -2
- data/third_party/upb/upb/msg.c +167 -88
- data/third_party/upb/upb/msg.h +174 -34
- data/third_party/upb/upb/port_def.inc +74 -61
- data/third_party/upb/upb/port_undef.inc +3 -7
- data/third_party/upb/upb/reflection.c +408 -0
- data/third_party/upb/upb/reflection.h +168 -0
- data/third_party/upb/upb/table.c +34 -197
- data/third_party/upb/upb/table.int.h +14 -5
- data/third_party/upb/upb/text_encode.c +421 -0
- data/third_party/upb/upb/text_encode.h +38 -0
- data/third_party/upb/upb/upb.c +18 -41
- data/third_party/upb/upb/upb.h +36 -7
- data/third_party/upb/upb/upb.hpp +4 -4
- data/third_party/upb/upb/upb.int.h +29 -0
- data/third_party/xxhash/xxhash.h +5443 -0
- metadata +335 -75
- data/src/core/ext/filters/client_channel/lb_policy/xds/eds.cc +0 -1136
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver.cc +0 -485
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper_fallback.cc +0 -68
- data/src/core/ext/filters/client_channel/resolving_lb_policy.cc +0 -355
- data/src/core/ext/filters/client_channel/resolving_lb_policy.h +0 -138
- data/src/core/ext/upb-generated/udpa/core/v1/authority.upb.h +0 -53
- data/src/core/ext/upb-generated/udpa/core/v1/collection_entry.upb.c +0 -52
- data/src/core/ext/upb-generated/udpa/core/v1/collection_entry.upb.h +0 -129
- data/src/core/ext/upb-generated/udpa/core/v1/context_params.upb.c +0 -42
- data/src/core/ext/upb-generated/udpa/core/v1/context_params.upb.h +0 -77
- data/src/core/ext/upb-generated/udpa/core/v1/resource.upb.c +0 -36
- data/src/core/ext/upb-generated/udpa/core/v1/resource.upb.h +0 -85
- data/src/core/ext/upb-generated/udpa/core/v1/resource_locator.upb.c +0 -54
- data/src/core/ext/upb-generated/udpa/core/v1/resource_locator.upb.h +0 -160
- data/src/core/ext/upb-generated/udpa/core/v1/resource_name.upb.c +0 -36
- data/src/core/ext/upb-generated/udpa/core/v1/resource_name.upb.h +0 -84
- data/src/core/ext/xds/google_mesh_ca_certificate_provider_factory.cc +0 -377
- data/src/core/ext/xds/google_mesh_ca_certificate_provider_factory.h +0 -102
- data/src/core/lib/gprpp/map.h +0 -53
- data/src/core/lib/iomgr/iomgr_posix.h +0 -26
- data/src/core/lib/security/authorization/authorization_engine.cc +0 -177
- data/src/core/lib/security/authorization/authorization_engine.h +0 -84
- data/src/core/lib/security/authorization/evaluate_args.cc +0 -153
- data/src/core/lib/security/authorization/evaluate_args.h +0 -59
- data/src/core/lib/security/authorization/mock_cel/activation.h +0 -57
- data/src/core/lib/security/authorization/mock_cel/cel_expr_builder_factory.h +0 -42
- data/src/core/lib/security/authorization/mock_cel/cel_expression.h +0 -68
- data/src/core/lib/security/authorization/mock_cel/cel_value.h +0 -93
- data/src/core/lib/security/authorization/mock_cel/evaluator_core.h +0 -67
- data/src/core/lib/security/authorization/mock_cel/flat_expr_builder.h +0 -56
- data/src/core/lib/security/certificate_provider.h +0 -60
- data/third_party/abseil-cpp/absl/base/dynamic_annotations.cc +0 -129
- data/third_party/abseil-cpp/absl/container/flat_hash_set.h +0 -503
- data/third_party/upb/upb/port.c +0 -26
@@ -145,20 +145,15 @@ class DefaultSslRootStore {
|
|
145
145
|
|
146
146
|
class PemKeyCertPair {
|
147
147
|
public:
|
148
|
-
|
149
|
-
|
150
|
-
explicit PemKeyCertPair(grpc_ssl_pem_key_cert_pair* pair)
|
151
|
-
: private_key_(const_cast<char*>(pair->private_key)),
|
152
|
-
cert_chain_(const_cast<char*>(pair->cert_chain)) {
|
153
|
-
gpr_free(pair);
|
154
|
-
}
|
148
|
+
PemKeyCertPair(absl::string_view private_key, absl::string_view cert_chain)
|
149
|
+
: private_key_(private_key), cert_chain_(cert_chain) {}
|
155
150
|
|
156
151
|
// Movable.
|
157
|
-
PemKeyCertPair(PemKeyCertPair&& other) {
|
152
|
+
PemKeyCertPair(PemKeyCertPair&& other) noexcept {
|
158
153
|
private_key_ = std::move(other.private_key_);
|
159
154
|
cert_chain_ = std::move(other.cert_chain_);
|
160
155
|
}
|
161
|
-
PemKeyCertPair& operator=(PemKeyCertPair&& other) {
|
156
|
+
PemKeyCertPair& operator=(PemKeyCertPair&& other) noexcept {
|
162
157
|
private_key_ = std::move(other.private_key_);
|
163
158
|
cert_chain_ = std::move(other.cert_chain_);
|
164
159
|
return *this;
|
@@ -166,28 +161,28 @@ class PemKeyCertPair {
|
|
166
161
|
|
167
162
|
// Copyable.
|
168
163
|
PemKeyCertPair(const PemKeyCertPair& other)
|
169
|
-
: private_key_(
|
170
|
-
cert_chain_(gpr_strdup(other.cert_chain())) {}
|
164
|
+
: private_key_(other.private_key()), cert_chain_(other.cert_chain()) {}
|
171
165
|
PemKeyCertPair& operator=(const PemKeyCertPair& other) {
|
172
|
-
private_key_ =
|
173
|
-
cert_chain_ =
|
166
|
+
private_key_ = other.private_key();
|
167
|
+
cert_chain_ = other.cert_chain();
|
174
168
|
return *this;
|
175
169
|
}
|
176
170
|
|
177
171
|
bool operator==(const PemKeyCertPair& other) const {
|
178
|
-
return
|
179
|
-
|
172
|
+
return this->private_key() == other.private_key() &&
|
173
|
+
this->cert_chain() == other.cert_chain();
|
180
174
|
}
|
181
175
|
|
182
|
-
|
183
|
-
|
176
|
+
const std::string& private_key() const { return private_key_; }
|
177
|
+
const std::string& cert_chain() const { return cert_chain_; }
|
184
178
|
|
185
179
|
private:
|
186
|
-
|
187
|
-
|
180
|
+
std::string private_key_;
|
181
|
+
std::string cert_chain_;
|
188
182
|
};
|
189
183
|
|
184
|
+
typedef absl::InlinedVector<grpc_core::PemKeyCertPair, 1> PemKeyCertPairList;
|
185
|
+
|
190
186
|
} // namespace grpc_core
|
191
187
|
|
192
|
-
#endif
|
193
|
-
*/
|
188
|
+
#endif // GRPC_CORE_LIB_SECURITY_SECURITY_CONNECTOR_SSL_UTILS_H
|
@@ -46,7 +46,7 @@ namespace grpc_core {
|
|
46
46
|
namespace {
|
47
47
|
|
48
48
|
tsi_ssl_pem_key_cert_pair* ConvertToTsiPemKeyCertPair(
|
49
|
-
const
|
49
|
+
const grpc_core::PemKeyCertPairList& cert_pair_list) {
|
50
50
|
tsi_ssl_pem_key_cert_pair* tsi_pairs = nullptr;
|
51
51
|
size_t num_key_cert_pairs = cert_pair_list.size();
|
52
52
|
if (num_key_cert_pairs > 0) {
|
@@ -55,137 +55,146 @@ tsi_ssl_pem_key_cert_pair* ConvertToTsiPemKeyCertPair(
|
|
55
55
|
gpr_zalloc(num_key_cert_pairs * sizeof(tsi_ssl_pem_key_cert_pair)));
|
56
56
|
}
|
57
57
|
for (size_t i = 0; i < num_key_cert_pairs; i++) {
|
58
|
-
GPR_ASSERT(cert_pair_list[i].private_key()
|
59
|
-
GPR_ASSERT(cert_pair_list[i].cert_chain()
|
60
|
-
tsi_pairs[i].cert_chain =
|
61
|
-
|
58
|
+
GPR_ASSERT(!cert_pair_list[i].private_key().empty());
|
59
|
+
GPR_ASSERT(!cert_pair_list[i].cert_chain().empty());
|
60
|
+
tsi_pairs[i].cert_chain =
|
61
|
+
gpr_strdup(cert_pair_list[i].cert_chain().c_str());
|
62
|
+
tsi_pairs[i].private_key =
|
63
|
+
gpr_strdup(cert_pair_list[i].private_key().c_str());
|
62
64
|
}
|
63
65
|
return tsi_pairs;
|
64
66
|
}
|
65
67
|
|
66
68
|
} // namespace
|
67
69
|
|
68
|
-
|
69
|
-
|
70
|
-
|
71
|
-
|
72
|
-
|
73
|
-
|
74
|
-
|
75
|
-
|
76
|
-
|
77
|
-
grpc_tls_credential_reload_config* credential_reload_config =
|
78
|
-
options.credential_reload_config();
|
79
|
-
/** If there are no key materials and no credential reload config and the
|
80
|
-
* caller is a server, then return an error. We do not require that a client
|
81
|
-
* always provision certificates. **/
|
82
|
-
if (credential_reload_config == nullptr && is_key_materials_empty &&
|
83
|
-
is_server) {
|
70
|
+
// -------------------channel security connector-------------------
|
71
|
+
grpc_core::RefCountedPtr<grpc_channel_security_connector>
|
72
|
+
TlsChannelSecurityConnector::CreateTlsChannelSecurityConnector(
|
73
|
+
grpc_core::RefCountedPtr<grpc_channel_credentials> channel_creds,
|
74
|
+
grpc_core::RefCountedPtr<grpc_tls_credentials_options> options,
|
75
|
+
grpc_core::RefCountedPtr<grpc_call_credentials> request_metadata_creds,
|
76
|
+
const char* target_name, const char* overridden_target_name,
|
77
|
+
tsi_ssl_session_cache* ssl_session_cache) {
|
78
|
+
if (channel_creds == nullptr) {
|
84
79
|
gpr_log(GPR_ERROR,
|
85
|
-
"
|
86
|
-
"
|
87
|
-
return
|
88
|
-
}
|
89
|
-
grpc_status_code reload_status = GRPC_STATUS_OK;
|
90
|
-
/** Use |credential_reload_config| to update |key_materials_config|. **/
|
91
|
-
if (credential_reload_config != nullptr) {
|
92
|
-
grpc_tls_credential_reload_arg* arg = new grpc_tls_credential_reload_arg();
|
93
|
-
arg->key_materials_config = key_materials_config.get();
|
94
|
-
arg->error_details = new grpc_tls_error_details();
|
95
|
-
int result = credential_reload_config->Schedule(arg);
|
96
|
-
if (result) {
|
97
|
-
/** Credential reloading is performed async. This is not yet supported.
|
98
|
-
* **/
|
99
|
-
gpr_log(GPR_ERROR, "Async credential reload is unsupported now.");
|
100
|
-
*status = GRPC_SSL_CERTIFICATE_CONFIG_RELOAD_UNCHANGED;
|
101
|
-
reload_status =
|
102
|
-
is_key_materials_empty ? GRPC_STATUS_UNIMPLEMENTED : GRPC_STATUS_OK;
|
103
|
-
} else {
|
104
|
-
/** Credential reloading is performed sync. **/
|
105
|
-
*status = arg->status;
|
106
|
-
if (arg->status == GRPC_SSL_CERTIFICATE_CONFIG_RELOAD_UNCHANGED) {
|
107
|
-
/* Key materials is not empty. */
|
108
|
-
gpr_log(GPR_DEBUG, "Credential does not change after reload.");
|
109
|
-
} else if (arg->status == GRPC_SSL_CERTIFICATE_CONFIG_RELOAD_FAIL) {
|
110
|
-
gpr_log(GPR_ERROR, "Credential reload failed with an error:");
|
111
|
-
if (arg->error_details != nullptr) {
|
112
|
-
gpr_log(GPR_ERROR, "%s", arg->error_details->error_details().c_str());
|
113
|
-
}
|
114
|
-
reload_status =
|
115
|
-
is_key_materials_empty ? GRPC_STATUS_INTERNAL : GRPC_STATUS_OK;
|
116
|
-
}
|
117
|
-
}
|
118
|
-
delete arg->error_details;
|
119
|
-
/** If the credential reload config was constructed via a wrapped language,
|
120
|
-
* then |arg->context| and |arg->destroy_context| will not be nullptr. In
|
121
|
-
* this case, we must destroy |arg->context|, which stores the wrapped
|
122
|
-
* language-version of the credential reload arg. **/
|
123
|
-
if (arg->destroy_context != nullptr) {
|
124
|
-
arg->destroy_context(arg->context);
|
125
|
-
}
|
126
|
-
delete arg;
|
80
|
+
"channel_creds is nullptr in "
|
81
|
+
"TlsChannelSecurityConnectorCreate()");
|
82
|
+
return nullptr;
|
127
83
|
}
|
128
|
-
|
129
|
-
|
130
|
-
|
131
|
-
|
132
|
-
|
133
|
-
if (peer_name != nullptr && !grpc_ssl_host_matches_name(peer, peer_name)) {
|
134
|
-
return GRPC_ERROR_CREATE_FROM_COPIED_STRING(
|
135
|
-
absl::StrCat("Peer name ", peer_name, " is not in peer certificate")
|
136
|
-
.c_str());
|
84
|
+
if (options == nullptr) {
|
85
|
+
gpr_log(GPR_ERROR,
|
86
|
+
"options is nullptr in "
|
87
|
+
"TlsChannelSecurityConnectorCreate()");
|
88
|
+
return nullptr;
|
137
89
|
}
|
138
|
-
|
90
|
+
if (target_name == nullptr) {
|
91
|
+
gpr_log(GPR_ERROR,
|
92
|
+
"target_name is nullptr in "
|
93
|
+
"TlsChannelSecurityConnectorCreate()");
|
94
|
+
return nullptr;
|
95
|
+
}
|
96
|
+
grpc_core::RefCountedPtr<TlsChannelSecurityConnector> c =
|
97
|
+
grpc_core::MakeRefCounted<TlsChannelSecurityConnector>(
|
98
|
+
std::move(channel_creds), std::move(options),
|
99
|
+
std::move(request_metadata_creds), target_name,
|
100
|
+
overridden_target_name, ssl_session_cache);
|
101
|
+
return c;
|
139
102
|
}
|
140
103
|
|
141
104
|
TlsChannelSecurityConnector::TlsChannelSecurityConnector(
|
142
105
|
grpc_core::RefCountedPtr<grpc_channel_credentials> channel_creds,
|
106
|
+
grpc_core::RefCountedPtr<grpc_tls_credentials_options> options,
|
143
107
|
grpc_core::RefCountedPtr<grpc_call_credentials> request_metadata_creds,
|
144
|
-
const char* target_name, const char* overridden_target_name
|
108
|
+
const char* target_name, const char* overridden_target_name,
|
109
|
+
tsi_ssl_session_cache* ssl_session_cache)
|
145
110
|
: grpc_channel_security_connector(GRPC_SSL_URL_SCHEME,
|
146
111
|
std::move(channel_creds),
|
147
112
|
std::move(request_metadata_creds)),
|
113
|
+
options_(std::move(options)),
|
148
114
|
overridden_target_name_(
|
149
|
-
overridden_target_name == nullptr ? "" : overridden_target_name)
|
150
|
-
|
115
|
+
overridden_target_name == nullptr ? "" : overridden_target_name),
|
116
|
+
ssl_session_cache_(ssl_session_cache) {
|
117
|
+
if (ssl_session_cache_ != nullptr) {
|
118
|
+
tsi_ssl_session_cache_ref(ssl_session_cache_);
|
119
|
+
}
|
151
120
|
check_arg_ = ServerAuthorizationCheckArgCreate(this);
|
152
121
|
absl::string_view host;
|
153
122
|
absl::string_view port;
|
154
123
|
grpc_core::SplitHostPort(target_name, &host, &port);
|
155
124
|
target_name_ = std::string(host);
|
125
|
+
// Create a watcher.
|
126
|
+
auto watcher_ptr = absl::make_unique<TlsChannelCertificateWatcher>(this);
|
127
|
+
certificate_watcher_ = watcher_ptr.get();
|
128
|
+
// Register the watcher with the distributor.
|
129
|
+
grpc_tls_certificate_distributor* distributor =
|
130
|
+
options_->certificate_distributor();
|
131
|
+
absl::optional<std::string> watched_root_cert_name;
|
132
|
+
if (options_->watch_root_cert()) {
|
133
|
+
watched_root_cert_name = options_->root_cert_name();
|
134
|
+
}
|
135
|
+
absl::optional<std::string> watched_identity_cert_name;
|
136
|
+
if (options_->watch_identity_pair()) {
|
137
|
+
watched_identity_cert_name = options_->identity_cert_name();
|
138
|
+
}
|
139
|
+
// We will use the root certs stored in system default locations if not
|
140
|
+
// watching root certs on the client side. We will handle this case
|
141
|
+
// differently here, because "watching a default roots without the identity
|
142
|
+
// certs" is a valid case(and hence we will need to call
|
143
|
+
// OnCertificatesChanged), but it requires nothing from the provider, and
|
144
|
+
// hence no need to register the watcher.
|
145
|
+
bool use_default_roots = !options_->watch_root_cert();
|
146
|
+
if (use_default_roots && !options_->watch_identity_pair()) {
|
147
|
+
watcher_ptr->OnCertificatesChanged(absl::nullopt, absl::nullopt);
|
148
|
+
} else {
|
149
|
+
distributor->WatchTlsCertificates(std::move(watcher_ptr),
|
150
|
+
watched_root_cert_name,
|
151
|
+
watched_identity_cert_name);
|
152
|
+
}
|
156
153
|
}
|
157
154
|
|
158
155
|
TlsChannelSecurityConnector::~TlsChannelSecurityConnector() {
|
156
|
+
if (ssl_session_cache_ != nullptr) {
|
157
|
+
tsi_ssl_session_cache_unref(ssl_session_cache_);
|
158
|
+
}
|
159
|
+
// Cancel all the watchers.
|
160
|
+
grpc_tls_certificate_distributor* distributor =
|
161
|
+
options_->certificate_distributor();
|
162
|
+
if (distributor != nullptr) {
|
163
|
+
distributor->CancelTlsCertificatesWatch(certificate_watcher_);
|
164
|
+
}
|
159
165
|
if (client_handshaker_factory_ != nullptr) {
|
160
166
|
tsi_ssl_client_handshaker_factory_unref(client_handshaker_factory_);
|
161
167
|
}
|
162
|
-
if (
|
163
|
-
|
168
|
+
if (check_arg_ != nullptr) {
|
169
|
+
ServerAuthorizationCheckArgDestroy(check_arg_);
|
164
170
|
}
|
165
|
-
ServerAuthorizationCheckArgDestroy(check_arg_);
|
166
171
|
}
|
167
172
|
|
168
173
|
void TlsChannelSecurityConnector::add_handshakers(
|
169
174
|
const grpc_channel_args* args, grpc_pollset_set* /*interested_parties*/,
|
170
175
|
grpc_core::HandshakeManager* handshake_mgr) {
|
171
|
-
|
172
|
-
|
173
|
-
|
174
|
-
|
175
|
-
|
176
|
-
|
177
|
-
|
178
|
-
|
179
|
-
|
180
|
-
|
181
|
-
|
182
|
-
|
183
|
-
|
184
|
-
|
176
|
+
grpc_core::MutexLock lock(&mu_);
|
177
|
+
if (client_handshaker_factory_ != nullptr) {
|
178
|
+
// Instantiate TSI handshaker.
|
179
|
+
tsi_handshaker* tsi_hs = nullptr;
|
180
|
+
tsi_result result = tsi_ssl_client_handshaker_factory_create_handshaker(
|
181
|
+
client_handshaker_factory_,
|
182
|
+
overridden_target_name_.empty() ? target_name_.c_str()
|
183
|
+
: overridden_target_name_.c_str(),
|
184
|
+
&tsi_hs);
|
185
|
+
if (result != TSI_OK) {
|
186
|
+
gpr_log(GPR_ERROR, "Handshaker creation failed with error %s.",
|
187
|
+
tsi_result_to_string(result));
|
188
|
+
return;
|
189
|
+
}
|
190
|
+
// Create handshakers.
|
191
|
+
handshake_mgr->Add(grpc_core::SecurityHandshakerCreate(tsi_hs, this, args));
|
185
192
|
return;
|
186
193
|
}
|
187
|
-
//
|
188
|
-
|
194
|
+
// TODO(ZhenLian): Implement the logic(delegation to
|
195
|
+
// BlockOnInitialCredentialHandshaker) when certificates are not ready.
|
196
|
+
gpr_log(GPR_ERROR, "%s not supported yet.",
|
197
|
+
"Client BlockOnInitialCredentialHandshaker");
|
189
198
|
}
|
190
199
|
|
191
200
|
void TlsChannelSecurityConnector::check_peer(
|
@@ -203,12 +212,9 @@ void TlsChannelSecurityConnector::check_peer(
|
|
203
212
|
}
|
204
213
|
*auth_context =
|
205
214
|
grpc_ssl_peer_to_auth_context(&peer, GRPC_TLS_TRANSPORT_SECURITY_TYPE);
|
206
|
-
|
207
|
-
static_cast<const TlsCredentials*>(channel_creds());
|
208
|
-
if (creds->options().server_verification_option() ==
|
209
|
-
GRPC_TLS_SERVER_VERIFICATION) {
|
215
|
+
if (options_->server_verification_option() == GRPC_TLS_SERVER_VERIFICATION) {
|
210
216
|
/* Do the default host name check if specifying the target name. */
|
211
|
-
error = TlsCheckHostName(target_name, &peer);
|
217
|
+
error = internal::TlsCheckHostName(target_name, &peer);
|
212
218
|
if (error != GRPC_ERROR_NONE) {
|
213
219
|
grpc_core::ExecCtx::Run(DEBUG_LOCATION, on_peer_checked, error);
|
214
220
|
tsi_peer_destruct(&peer);
|
@@ -217,7 +223,7 @@ void TlsChannelSecurityConnector::check_peer(
|
|
217
223
|
}
|
218
224
|
/* Do the custom server authorization check, if specified by the user. */
|
219
225
|
const grpc_tls_server_authorization_check_config* config =
|
220
|
-
|
226
|
+
options_->server_authorization_check_config();
|
221
227
|
/* If server authorization config is not null, use it to perform
|
222
228
|
* server authorization check. */
|
223
229
|
if (config != nullptr) {
|
@@ -250,6 +256,39 @@ void TlsChannelSecurityConnector::check_peer(
|
|
250
256
|
: check_arg_->peer_cert_full_chain;
|
251
257
|
gpr_free(peer_pem_chain);
|
252
258
|
}
|
259
|
+
// TODO(zhenlian) - This should be cleaned up as part of the custom
|
260
|
+
// verification changes. Fill in the subject alternative names
|
261
|
+
std::vector<char*> subject_alternative_names;
|
262
|
+
for (size_t i = 0; i < peer.property_count; i++) {
|
263
|
+
const tsi_peer_property* prop = &peer.properties[i];
|
264
|
+
if (strcmp(prop->name,
|
265
|
+
TSI_X509_SUBJECT_ALTERNATIVE_NAME_PEER_PROPERTY) == 0) {
|
266
|
+
char* san = new char[prop->value.length + 1];
|
267
|
+
memcpy(san, prop->value.data, prop->value.length);
|
268
|
+
san[prop->value.length] = '\0';
|
269
|
+
subject_alternative_names.emplace_back(san);
|
270
|
+
}
|
271
|
+
}
|
272
|
+
if (check_arg_->subject_alternative_names != nullptr) {
|
273
|
+
for (size_t i = 0; i < check_arg_->subject_alternative_names_size;
|
274
|
+
++i) {
|
275
|
+
delete[] check_arg_->subject_alternative_names[i];
|
276
|
+
}
|
277
|
+
delete[] check_arg_->subject_alternative_names;
|
278
|
+
}
|
279
|
+
check_arg_->subject_alternative_names_size =
|
280
|
+
subject_alternative_names.size();
|
281
|
+
if (subject_alternative_names.empty()) {
|
282
|
+
check_arg_->subject_alternative_names = nullptr;
|
283
|
+
} else {
|
284
|
+
check_arg_->subject_alternative_names =
|
285
|
+
new char*[check_arg_->subject_alternative_names_size];
|
286
|
+
for (size_t i = 0; i < check_arg_->subject_alternative_names_size;
|
287
|
+
++i) {
|
288
|
+
check_arg_->subject_alternative_names[i] =
|
289
|
+
subject_alternative_names[i];
|
290
|
+
}
|
291
|
+
}
|
253
292
|
int callback_status = config->Schedule(check_arg_);
|
254
293
|
/* Server authorization check is handled asynchronously. */
|
255
294
|
if (callback_status) {
|
@@ -279,6 +318,12 @@ int TlsChannelSecurityConnector::cmp(
|
|
279
318
|
bool TlsChannelSecurityConnector::check_call_host(
|
280
319
|
absl::string_view host, grpc_auth_context* auth_context,
|
281
320
|
grpc_closure* /*on_call_host_checked*/, grpc_error** error) {
|
321
|
+
if (options_->server_verification_option() ==
|
322
|
+
GRPC_TLS_SKIP_HOSTNAME_VERIFICATION ||
|
323
|
+
options_->server_verification_option() ==
|
324
|
+
GRPC_TLS_SKIP_ALL_SERVER_VERIFICATION) {
|
325
|
+
return true;
|
326
|
+
}
|
282
327
|
return grpc_ssl_check_call_host(host, target_name_.c_str(),
|
283
328
|
overridden_target_name_.c_str(), auth_context,
|
284
329
|
error);
|
@@ -289,105 +334,84 @@ void TlsChannelSecurityConnector::cancel_check_call_host(
|
|
289
334
|
GRPC_ERROR_UNREF(error);
|
290
335
|
}
|
291
336
|
|
292
|
-
|
293
|
-
|
294
|
-
|
295
|
-
|
296
|
-
|
297
|
-
|
298
|
-
if (
|
299
|
-
|
300
|
-
|
301
|
-
|
302
|
-
|
337
|
+
void TlsChannelSecurityConnector::TlsChannelCertificateWatcher::
|
338
|
+
OnCertificatesChanged(
|
339
|
+
absl::optional<absl::string_view> root_certs,
|
340
|
+
absl::optional<grpc_core::PemKeyCertPairList> key_cert_pairs) {
|
341
|
+
GPR_ASSERT(security_connector_ != nullptr);
|
342
|
+
grpc_core::MutexLock lock(&security_connector_->mu_);
|
343
|
+
if (root_certs.has_value()) {
|
344
|
+
security_connector_->pem_root_certs_ = root_certs;
|
345
|
+
}
|
346
|
+
if (key_cert_pairs.has_value()) {
|
347
|
+
security_connector_->pem_key_cert_pair_list_ = std::move(key_cert_pairs);
|
348
|
+
}
|
349
|
+
const bool root_ready = !security_connector_->options_->watch_root_cert() ||
|
350
|
+
security_connector_->pem_root_certs_.has_value();
|
351
|
+
const bool identity_ready =
|
352
|
+
!security_connector_->options_->watch_identity_pair() ||
|
353
|
+
security_connector_->pem_key_cert_pair_list_.has_value();
|
354
|
+
if (root_ready && identity_ready) {
|
355
|
+
if (security_connector_->UpdateHandshakerFactoryLocked() !=
|
356
|
+
GRPC_SECURITY_OK) {
|
357
|
+
gpr_log(GPR_ERROR, "Update handshaker factory failed.");
|
358
|
+
}
|
303
359
|
}
|
304
|
-
|
360
|
+
}
|
361
|
+
|
362
|
+
// TODO(ZhenLian): implement the logic to signal waiting handshakers once
|
363
|
+
// BlockOnInitialCredentialHandshaker is implemented.
|
364
|
+
void TlsChannelSecurityConnector::TlsChannelCertificateWatcher::OnError(
|
365
|
+
grpc_error* root_cert_error, grpc_error* identity_cert_error) {
|
366
|
+
if (root_cert_error != GRPC_ERROR_NONE) {
|
305
367
|
gpr_log(GPR_ERROR,
|
306
|
-
"
|
307
|
-
|
308
|
-
return nullptr;
|
368
|
+
"TlsChannelCertificateWatcher getting root_cert_error: %s",
|
369
|
+
grpc_error_string(root_cert_error));
|
309
370
|
}
|
310
|
-
|
311
|
-
|
312
|
-
|
313
|
-
|
314
|
-
if (c->InitializeHandshakerFactory(ssl_session_cache) != GRPC_SECURITY_OK) {
|
315
|
-
gpr_log(GPR_ERROR, "Could not initialize client handshaker factory.");
|
316
|
-
return nullptr;
|
371
|
+
if (identity_cert_error != GRPC_ERROR_NONE) {
|
372
|
+
gpr_log(GPR_ERROR,
|
373
|
+
"TlsChannelCertificateWatcher getting identity_cert_error: %s",
|
374
|
+
grpc_error_string(identity_cert_error));
|
317
375
|
}
|
318
|
-
|
376
|
+
GRPC_ERROR_UNREF(root_cert_error);
|
377
|
+
GRPC_ERROR_UNREF(identity_cert_error);
|
319
378
|
}
|
320
379
|
|
321
|
-
|
322
|
-
|
323
|
-
|
324
|
-
|
380
|
+
// TODO(ZhenLian): implement the logic to signal waiting handshakers once
|
381
|
+
// BlockOnInitialCredentialHandshaker is implemented.
|
382
|
+
grpc_security_status
|
383
|
+
TlsChannelSecurityConnector::UpdateHandshakerFactoryLocked() {
|
325
384
|
bool skip_server_certificate_verification =
|
326
|
-
|
385
|
+
options_->server_verification_option() ==
|
327
386
|
GRPC_TLS_SKIP_ALL_SERVER_VERIFICATION;
|
328
387
|
/* Free the client handshaker factory if exists. */
|
329
|
-
if (client_handshaker_factory_) {
|
388
|
+
if (client_handshaker_factory_ != nullptr) {
|
330
389
|
tsi_ssl_client_handshaker_factory_unref(client_handshaker_factory_);
|
331
390
|
}
|
332
|
-
|
333
|
-
|
391
|
+
std::string pem_root_certs;
|
392
|
+
if (pem_root_certs_.has_value()) {
|
393
|
+
// TODO(ZhenLian): update the underlying TSI layer to use C++ types like
|
394
|
+
// std::string and absl::string_view to avoid making another copy here.
|
395
|
+
pem_root_certs = std::string(*pem_root_certs_);
|
396
|
+
}
|
397
|
+
tsi_ssl_pem_key_cert_pair* pem_key_cert_pair = nullptr;
|
398
|
+
if (pem_key_cert_pair_list_.has_value()) {
|
399
|
+
pem_key_cert_pair = ConvertToTsiPemKeyCertPair(*pem_key_cert_pair_list_);
|
400
|
+
}
|
401
|
+
bool use_default_roots = !options_->watch_root_cert();
|
334
402
|
grpc_security_status status = grpc_ssl_tsi_client_handshaker_factory_init(
|
335
|
-
pem_key_cert_pair,
|
403
|
+
pem_key_cert_pair,
|
404
|
+
pem_root_certs.empty() || use_default_roots ? nullptr
|
405
|
+
: pem_root_certs.c_str(),
|
336
406
|
skip_server_certificate_verification,
|
337
|
-
grpc_get_tsi_tls_version(
|
338
|
-
grpc_get_tsi_tls_version(
|
339
|
-
|
407
|
+
grpc_get_tsi_tls_version(options_->min_tls_version()),
|
408
|
+
grpc_get_tsi_tls_version(options_->max_tls_version()), ssl_session_cache_,
|
409
|
+
&client_handshaker_factory_);
|
340
410
|
/* Free memory. */
|
341
|
-
|
342
|
-
|
343
|
-
}
|
344
|
-
|
345
|
-
grpc_security_status TlsChannelSecurityConnector::InitializeHandshakerFactory(
|
346
|
-
tsi_ssl_session_cache* ssl_session_cache) {
|
347
|
-
grpc_core::MutexLock lock(&mu_);
|
348
|
-
const TlsCredentials* creds =
|
349
|
-
static_cast<const TlsCredentials*>(channel_creds());
|
350
|
-
grpc_tls_key_materials_config* key_materials_config =
|
351
|
-
creds->options().key_materials_config();
|
352
|
-
// key_materials_config_->set_key_materials will handle the copying of the key
|
353
|
-
// materials users provided
|
354
|
-
if (key_materials_config != nullptr) {
|
355
|
-
key_materials_config_->set_key_materials(
|
356
|
-
key_materials_config->pem_root_certs(),
|
357
|
-
key_materials_config->pem_key_cert_pair_list());
|
358
|
-
}
|
359
|
-
grpc_ssl_certificate_config_reload_status reload_status =
|
360
|
-
GRPC_SSL_CERTIFICATE_CONFIG_RELOAD_UNCHANGED;
|
361
|
-
/** If |creds->options()| has a credential reload config, then the call to
|
362
|
-
* |TlsFetchKeyMaterials| will use it to update the root cert and
|
363
|
-
* pem-key-cert-pair list stored in |key_materials_config_|. **/
|
364
|
-
if (TlsFetchKeyMaterials(key_materials_config_, creds->options(), false,
|
365
|
-
&reload_status) != GRPC_STATUS_OK) {
|
366
|
-
/* Raise an error if key materials are not populated. */
|
367
|
-
return GRPC_SECURITY_ERROR;
|
368
|
-
}
|
369
|
-
return ReplaceHandshakerFactory(ssl_session_cache);
|
370
|
-
}
|
371
|
-
|
372
|
-
grpc_security_status TlsChannelSecurityConnector::RefreshHandshakerFactory() {
|
373
|
-
grpc_core::MutexLock lock(&mu_);
|
374
|
-
const TlsCredentials* creds =
|
375
|
-
static_cast<const TlsCredentials*>(channel_creds());
|
376
|
-
grpc_ssl_certificate_config_reload_status reload_status =
|
377
|
-
GRPC_SSL_CERTIFICATE_CONFIG_RELOAD_UNCHANGED;
|
378
|
-
/** If |creds->options()| has a credential reload config, then the call to
|
379
|
-
* |TlsFetchKeyMaterials| will use it to update the root cert and
|
380
|
-
* pem-key-cert-pair list stored in |key_materials_config_|. **/
|
381
|
-
if (TlsFetchKeyMaterials(key_materials_config_, creds->options(), false,
|
382
|
-
&reload_status) != GRPC_STATUS_OK) {
|
383
|
-
return GRPC_SECURITY_ERROR;
|
384
|
-
}
|
385
|
-
if (reload_status != GRPC_SSL_CERTIFICATE_CONFIG_RELOAD_NEW) {
|
386
|
-
// Re-use existing handshaker factory.
|
387
|
-
return GRPC_SECURITY_OK;
|
388
|
-
} else {
|
389
|
-
return ReplaceHandshakerFactory(nullptr);
|
411
|
+
if (pem_key_cert_pair != nullptr) {
|
412
|
+
grpc_tsi_ssl_pem_key_cert_pairs_destroy(pem_key_cert_pair, 1);
|
390
413
|
}
|
414
|
+
return status;
|
391
415
|
}
|
392
416
|
|
393
417
|
void TlsChannelSecurityConnector::ServerAuthorizationCheckDone(
|
@@ -435,6 +459,11 @@ TlsChannelSecurityConnector::ServerAuthorizationCheckArgCreate(
|
|
435
459
|
void* user_data) {
|
436
460
|
grpc_tls_server_authorization_check_arg* arg =
|
437
461
|
new grpc_tls_server_authorization_check_arg();
|
462
|
+
arg->target_name = nullptr;
|
463
|
+
arg->peer_cert = nullptr;
|
464
|
+
arg->peer_cert_full_chain = nullptr;
|
465
|
+
arg->subject_alternative_names = nullptr;
|
466
|
+
arg->subject_alternative_names_size = 0;
|
438
467
|
arg->error_details = new grpc_tls_error_details();
|
439
468
|
arg->cb = ServerAuthorizationCheckDone;
|
440
469
|
arg->cb_user_data = user_data;
|
@@ -447,9 +476,13 @@ void TlsChannelSecurityConnector::ServerAuthorizationCheckArgDestroy(
|
|
447
476
|
if (arg == nullptr) {
|
448
477
|
return;
|
449
478
|
}
|
450
|
-
gpr_free((
|
451
|
-
gpr_free((
|
452
|
-
|
479
|
+
gpr_free(const_cast<char*>(arg->target_name));
|
480
|
+
gpr_free(const_cast<char*>(arg->peer_cert));
|
481
|
+
gpr_free(const_cast<char*>(arg->peer_cert_full_chain));
|
482
|
+
for (size_t i = 0; i < arg->subject_alternative_names_size; ++i) {
|
483
|
+
delete[] arg->subject_alternative_names[i];
|
484
|
+
}
|
485
|
+
delete[] arg->subject_alternative_names;
|
453
486
|
delete arg->error_details;
|
454
487
|
if (arg->destroy_context != nullptr) {
|
455
488
|
arg->destroy_context(arg->context);
|
@@ -457,40 +490,87 @@ void TlsChannelSecurityConnector::ServerAuthorizationCheckArgDestroy(
|
|
457
490
|
delete arg;
|
458
491
|
}
|
459
492
|
|
493
|
+
// -------------------server security connector-------------------
|
494
|
+
grpc_core::RefCountedPtr<grpc_server_security_connector>
|
495
|
+
TlsServerSecurityConnector::CreateTlsServerSecurityConnector(
|
496
|
+
grpc_core::RefCountedPtr<grpc_server_credentials> server_creds,
|
497
|
+
grpc_core::RefCountedPtr<grpc_tls_credentials_options> options) {
|
498
|
+
if (server_creds == nullptr) {
|
499
|
+
gpr_log(GPR_ERROR,
|
500
|
+
"server_creds is nullptr in "
|
501
|
+
"TlsServerSecurityConnectorCreate()");
|
502
|
+
return nullptr;
|
503
|
+
}
|
504
|
+
if (options == nullptr) {
|
505
|
+
gpr_log(GPR_ERROR,
|
506
|
+
"options is nullptr in "
|
507
|
+
"TlsServerSecurityConnectorCreate()");
|
508
|
+
return nullptr;
|
509
|
+
}
|
510
|
+
grpc_core::RefCountedPtr<TlsServerSecurityConnector> c =
|
511
|
+
grpc_core::MakeRefCounted<TlsServerSecurityConnector>(
|
512
|
+
std::move(server_creds), std::move(options));
|
513
|
+
return c;
|
514
|
+
}
|
515
|
+
|
460
516
|
TlsServerSecurityConnector::TlsServerSecurityConnector(
|
461
|
-
grpc_core::RefCountedPtr<grpc_server_credentials> server_creds
|
517
|
+
grpc_core::RefCountedPtr<grpc_server_credentials> server_creds,
|
518
|
+
grpc_core::RefCountedPtr<grpc_tls_credentials_options> options)
|
462
519
|
: grpc_server_security_connector(GRPC_SSL_URL_SCHEME,
|
463
|
-
std::move(server_creds))
|
464
|
-
|
520
|
+
std::move(server_creds)),
|
521
|
+
options_(std::move(options)) {
|
522
|
+
// Create a watcher.
|
523
|
+
auto watcher_ptr = absl::make_unique<TlsServerCertificateWatcher>(this);
|
524
|
+
certificate_watcher_ = watcher_ptr.get();
|
525
|
+
// Register the watcher with the distributor.
|
526
|
+
grpc_tls_certificate_distributor* distributor =
|
527
|
+
options_->certificate_distributor();
|
528
|
+
absl::optional<std::string> watched_root_cert_name;
|
529
|
+
if (options_->watch_root_cert()) {
|
530
|
+
watched_root_cert_name = options_->root_cert_name();
|
531
|
+
}
|
532
|
+
absl::optional<std::string> watched_identity_cert_name;
|
533
|
+
if (options_->watch_identity_pair()) {
|
534
|
+
watched_identity_cert_name = options_->identity_cert_name();
|
535
|
+
}
|
536
|
+
// Server side won't use default system roots at any time.
|
537
|
+
distributor->WatchTlsCertificates(std::move(watcher_ptr),
|
538
|
+
watched_root_cert_name,
|
539
|
+
watched_identity_cert_name);
|
465
540
|
}
|
466
541
|
|
467
542
|
TlsServerSecurityConnector::~TlsServerSecurityConnector() {
|
543
|
+
// Cancel all the watchers.
|
544
|
+
grpc_tls_certificate_distributor* distributor =
|
545
|
+
options_->certificate_distributor();
|
546
|
+
distributor->CancelTlsCertificatesWatch(certificate_watcher_);
|
468
547
|
if (server_handshaker_factory_ != nullptr) {
|
469
548
|
tsi_ssl_server_handshaker_factory_unref(server_handshaker_factory_);
|
470
549
|
}
|
471
|
-
if (key_materials_config_.get() != nullptr) {
|
472
|
-
key_materials_config_.get()->Unref();
|
473
|
-
}
|
474
550
|
}
|
475
551
|
|
476
552
|
void TlsServerSecurityConnector::add_handshakers(
|
477
553
|
const grpc_channel_args* args, grpc_pollset_set* /*interested_parties*/,
|
478
554
|
grpc_core::HandshakeManager* handshake_mgr) {
|
479
|
-
|
480
|
-
if (
|
481
|
-
|
482
|
-
|
483
|
-
|
484
|
-
|
485
|
-
|
486
|
-
|
487
|
-
|
488
|
-
|
489
|
-
|
490
|
-
|
555
|
+
grpc_core::MutexLock lock(&mu_);
|
556
|
+
if (server_handshaker_factory_ != nullptr) {
|
557
|
+
// Instantiate TSI handshaker.
|
558
|
+
tsi_handshaker* tsi_hs = nullptr;
|
559
|
+
tsi_result result = tsi_ssl_server_handshaker_factory_create_handshaker(
|
560
|
+
server_handshaker_factory_, &tsi_hs);
|
561
|
+
if (result != TSI_OK) {
|
562
|
+
gpr_log(GPR_ERROR, "Handshaker creation failed with error %s.",
|
563
|
+
tsi_result_to_string(result));
|
564
|
+
return;
|
565
|
+
}
|
566
|
+
// Create handshakers.
|
567
|
+
handshake_mgr->Add(grpc_core::SecurityHandshakerCreate(tsi_hs, this, args));
|
491
568
|
return;
|
492
569
|
}
|
493
|
-
|
570
|
+
// TODO(ZhenLian): Implement the logic(delegation to
|
571
|
+
// BlockOnInitialCredentialHandshaker) when certificates are not ready.
|
572
|
+
gpr_log(GPR_ERROR, "%s not supported yet.",
|
573
|
+
"Server BlockOnInitialCredentialHandshaker");
|
494
574
|
}
|
495
575
|
|
496
576
|
void TlsServerSecurityConnector::check_peer(
|
@@ -510,43 +590,79 @@ int TlsServerSecurityConnector::cmp(
|
|
510
590
|
static_cast<const grpc_server_security_connector*>(other));
|
511
591
|
}
|
512
592
|
|
513
|
-
|
514
|
-
|
515
|
-
|
516
|
-
|
593
|
+
void TlsServerSecurityConnector::TlsServerCertificateWatcher::
|
594
|
+
OnCertificatesChanged(
|
595
|
+
absl::optional<absl::string_view> root_certs,
|
596
|
+
absl::optional<grpc_core::PemKeyCertPairList> key_cert_pairs) {
|
597
|
+
GPR_ASSERT(security_connector_ != nullptr);
|
598
|
+
grpc_core::MutexLock lock(&security_connector_->mu_);
|
599
|
+
if (root_certs.has_value()) {
|
600
|
+
security_connector_->pem_root_certs_ = root_certs;
|
601
|
+
}
|
602
|
+
if (key_cert_pairs.has_value()) {
|
603
|
+
security_connector_->pem_key_cert_pair_list_ = std::move(key_cert_pairs);
|
604
|
+
}
|
605
|
+
bool root_being_watched = security_connector_->options_->watch_root_cert();
|
606
|
+
bool root_has_value = security_connector_->pem_root_certs_.has_value();
|
607
|
+
bool identity_being_watched =
|
608
|
+
security_connector_->options_->watch_identity_pair();
|
609
|
+
bool identity_has_value =
|
610
|
+
security_connector_->pem_key_cert_pair_list_.has_value();
|
611
|
+
if ((root_being_watched && root_has_value && identity_being_watched &&
|
612
|
+
identity_has_value) ||
|
613
|
+
(root_being_watched && root_has_value && !identity_being_watched) ||
|
614
|
+
(!root_being_watched && identity_being_watched && identity_has_value)) {
|
615
|
+
if (security_connector_->UpdateHandshakerFactoryLocked() !=
|
616
|
+
GRPC_SECURITY_OK) {
|
617
|
+
gpr_log(GPR_ERROR, "Update handshaker factory failed.");
|
618
|
+
}
|
619
|
+
}
|
620
|
+
}
|
621
|
+
|
622
|
+
// TODO(ZhenLian): implement the logic to signal waiting handshakers once
|
623
|
+
// BlockOnInitialCredentialHandshaker is implemented.
|
624
|
+
void TlsServerSecurityConnector::TlsServerCertificateWatcher::OnError(
|
625
|
+
grpc_error* root_cert_error, grpc_error* identity_cert_error) {
|
626
|
+
if (root_cert_error != GRPC_ERROR_NONE) {
|
517
627
|
gpr_log(GPR_ERROR,
|
518
|
-
"
|
519
|
-
|
520
|
-
return nullptr;
|
628
|
+
"TlsServerCertificateWatcher getting root_cert_error: %s",
|
629
|
+
grpc_error_string(root_cert_error));
|
521
630
|
}
|
522
|
-
|
523
|
-
|
524
|
-
|
525
|
-
|
526
|
-
gpr_log(GPR_ERROR, "Could not initialize server handshaker factory.");
|
527
|
-
return nullptr;
|
631
|
+
if (identity_cert_error != GRPC_ERROR_NONE) {
|
632
|
+
gpr_log(GPR_ERROR,
|
633
|
+
"TlsServerCertificateWatcher getting identity_cert_error: %s",
|
634
|
+
grpc_error_string(identity_cert_error));
|
528
635
|
}
|
529
|
-
|
636
|
+
GRPC_ERROR_UNREF(root_cert_error);
|
637
|
+
GRPC_ERROR_UNREF(identity_cert_error);
|
530
638
|
}
|
531
639
|
|
532
|
-
|
533
|
-
|
534
|
-
|
640
|
+
// TODO(ZhenLian): implement the logic to signal waiting handshakers once
|
641
|
+
// BlockOnInitialCredentialHandshaker is implemented.
|
642
|
+
grpc_security_status
|
643
|
+
TlsServerSecurityConnector::UpdateHandshakerFactoryLocked() {
|
535
644
|
/* Free the server handshaker factory if exists. */
|
536
|
-
if (server_handshaker_factory_) {
|
645
|
+
if (server_handshaker_factory_ != nullptr) {
|
537
646
|
tsi_ssl_server_handshaker_factory_unref(server_handshaker_factory_);
|
538
647
|
}
|
539
|
-
|
540
|
-
|
541
|
-
|
542
|
-
|
543
|
-
|
648
|
+
// The identity certs on the server side shouldn't be empty.
|
649
|
+
GPR_ASSERT(pem_key_cert_pair_list_.has_value());
|
650
|
+
GPR_ASSERT(!(*pem_key_cert_pair_list_).empty());
|
651
|
+
std::string pem_root_certs;
|
652
|
+
if (pem_root_certs_.has_value()) {
|
653
|
+
// TODO(ZhenLian): update the underlying TSI layer to use C++ types like
|
654
|
+
// std::string and absl::string_view to avoid making another copy here.
|
655
|
+
pem_root_certs = std::string(*pem_root_certs_);
|
656
|
+
}
|
657
|
+
tsi_ssl_pem_key_cert_pair* pem_key_cert_pairs = nullptr;
|
658
|
+
pem_key_cert_pairs = ConvertToTsiPemKeyCertPair(*pem_key_cert_pair_list_);
|
659
|
+
size_t num_key_cert_pairs = (*pem_key_cert_pair_list_).size();
|
544
660
|
grpc_security_status status = grpc_ssl_tsi_server_handshaker_factory_init(
|
545
661
|
pem_key_cert_pairs, num_key_cert_pairs,
|
546
|
-
|
547
|
-
|
548
|
-
grpc_get_tsi_tls_version(
|
549
|
-
grpc_get_tsi_tls_version(
|
662
|
+
pem_root_certs.empty() ? nullptr : pem_root_certs.c_str(),
|
663
|
+
options_->cert_request_type(),
|
664
|
+
grpc_get_tsi_tls_version(options_->min_tls_version()),
|
665
|
+
grpc_get_tsi_tls_version(options_->max_tls_version()),
|
550
666
|
&server_handshaker_factory_);
|
551
667
|
/* Free memory. */
|
552
668
|
grpc_tsi_ssl_pem_key_cert_pairs_destroy(pem_key_cert_pairs,
|
@@ -554,53 +670,18 @@ grpc_security_status TlsServerSecurityConnector::ReplaceHandshakerFactory() {
|
|
554
670
|
return status;
|
555
671
|
}
|
556
672
|
|
557
|
-
|
558
|
-
grpc_core::MutexLock lock(&mu_);
|
559
|
-
const TlsServerCredentials* creds =
|
560
|
-
static_cast<const TlsServerCredentials*>(server_creds());
|
561
|
-
grpc_tls_key_materials_config* key_materials_config =
|
562
|
-
creds->options().key_materials_config();
|
563
|
-
if (key_materials_config != nullptr) {
|
564
|
-
key_materials_config_->set_key_materials(
|
565
|
-
key_materials_config->pem_root_certs(),
|
566
|
-
key_materials_config->pem_key_cert_pair_list());
|
567
|
-
}
|
568
|
-
grpc_ssl_certificate_config_reload_status reload_status =
|
569
|
-
GRPC_SSL_CERTIFICATE_CONFIG_RELOAD_UNCHANGED;
|
570
|
-
/** If |creds->options()| has a credential reload config, then the call to
|
571
|
-
* |TlsFetchKeyMaterials| will use it to update the root cert and
|
572
|
-
* pem-key-cert-pair list stored in |key_materials_config_|. Otherwise, it
|
573
|
-
* will return |GRPC_STATUS_OK| if |key_materials_config_| already has
|
574
|
-
* credentials, and an error code if not. **/
|
575
|
-
if (TlsFetchKeyMaterials(key_materials_config_, creds->options(), true,
|
576
|
-
&reload_status) != GRPC_STATUS_OK) {
|
577
|
-
/* Raise an error if key materials are not populated. */
|
578
|
-
return GRPC_SECURITY_ERROR;
|
579
|
-
}
|
580
|
-
return ReplaceHandshakerFactory();
|
581
|
-
}
|
673
|
+
namespace internal {
|
582
674
|
|
583
|
-
|
584
|
-
|
585
|
-
|
586
|
-
|
587
|
-
|
588
|
-
|
589
|
-
/** If |creds->options()| has a credential reload config, then the call to
|
590
|
-
* |TlsFetchKeyMaterials| will use it to update the root cert and
|
591
|
-
* pem-key-cert-pair list stored in |key_materials_config_|. Otherwise, it
|
592
|
-
* will return |GRPC_STATUS_OK| if |key_materials_config_| already has
|
593
|
-
* credentials, and an error code if not. **/
|
594
|
-
if (TlsFetchKeyMaterials(key_materials_config_, creds->options(), true,
|
595
|
-
&reload_status) != GRPC_STATUS_OK) {
|
596
|
-
return GRPC_SECURITY_ERROR;
|
597
|
-
}
|
598
|
-
if (reload_status != GRPC_SSL_CERTIFICATE_CONFIG_RELOAD_NEW) {
|
599
|
-
/* At this point, we should have key materials populated. */
|
600
|
-
return GRPC_SECURITY_OK;
|
601
|
-
} else {
|
602
|
-
return ReplaceHandshakerFactory();
|
675
|
+
grpc_error* TlsCheckHostName(const char* peer_name, const tsi_peer* peer) {
|
676
|
+
/* Check the peer name if specified. */
|
677
|
+
if (peer_name != nullptr && !grpc_ssl_host_matches_name(peer, peer_name)) {
|
678
|
+
return GRPC_ERROR_CREATE_FROM_COPIED_STRING(
|
679
|
+
absl::StrCat("Peer name ", peer_name, " is not in peer certificate")
|
680
|
+
.c_str());
|
603
681
|
}
|
682
|
+
return GRPC_ERROR_NONE;
|
604
683
|
}
|
605
684
|
|
685
|
+
} // namespace internal
|
686
|
+
|
606
687
|
} // namespace grpc_core
|