grpc 1.45.0-x86_64-linux → 1.46.2-x86_64-linux
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of grpc might be problematic. Click here for more details.
- checksums.yaml +4 -4
- data/.yardopts +1 -0
- data/Makefile +3195 -0
- data/include/grpc/byte_buffer.h +27 -0
- data/include/grpc/byte_buffer_reader.h +26 -0
- data/include/grpc/census.h +40 -0
- data/include/grpc/compression.h +75 -0
- data/include/grpc/event_engine/README.md +38 -0
- data/include/grpc/event_engine/endpoint_config.h +43 -0
- data/include/grpc/event_engine/event_engine.h +399 -0
- data/include/grpc/event_engine/internal/memory_allocator_impl.h +68 -0
- data/include/grpc/event_engine/memory_allocator.h +226 -0
- data/include/grpc/event_engine/memory_request.h +57 -0
- data/include/grpc/event_engine/port.h +39 -0
- data/include/grpc/fork.h +26 -0
- data/include/grpc/grpc.h +605 -0
- data/include/grpc/grpc_cronet.h +38 -0
- data/include/grpc/grpc_posix.h +63 -0
- data/include/grpc/grpc_security.h +1259 -0
- data/include/grpc/grpc_security_constants.h +152 -0
- data/include/grpc/impl/codegen/README.md +22 -0
- data/include/grpc/impl/codegen/atm.h +97 -0
- data/include/grpc/impl/codegen/atm_gcc_atomic.h +93 -0
- data/include/grpc/impl/codegen/atm_gcc_sync.h +87 -0
- data/include/grpc/impl/codegen/atm_windows.h +134 -0
- data/include/grpc/impl/codegen/byte_buffer.h +103 -0
- data/include/grpc/impl/codegen/byte_buffer_reader.h +44 -0
- data/include/grpc/impl/codegen/compression_types.h +108 -0
- data/include/grpc/impl/codegen/connectivity_state.h +46 -0
- data/include/grpc/impl/codegen/fork.h +50 -0
- data/include/grpc/impl/codegen/gpr_slice.h +71 -0
- data/include/grpc/impl/codegen/gpr_types.h +61 -0
- data/include/grpc/impl/codegen/grpc_types.h +816 -0
- data/include/grpc/impl/codegen/log.h +112 -0
- data/include/grpc/impl/codegen/port_platform.h +723 -0
- data/include/grpc/impl/codegen/propagation_bits.h +54 -0
- data/include/grpc/impl/codegen/slice.h +132 -0
- data/include/grpc/impl/codegen/status.h +156 -0
- data/include/grpc/impl/codegen/sync.h +68 -0
- data/include/grpc/impl/codegen/sync_abseil.h +38 -0
- data/include/grpc/impl/codegen/sync_custom.h +40 -0
- data/include/grpc/impl/codegen/sync_generic.h +51 -0
- data/include/grpc/impl/codegen/sync_posix.h +54 -0
- data/include/grpc/impl/codegen/sync_windows.h +42 -0
- data/include/grpc/load_reporting.h +48 -0
- data/include/grpc/module.modulemap +64 -0
- data/include/grpc/slice.h +161 -0
- data/include/grpc/slice_buffer.h +84 -0
- data/include/grpc/status.h +26 -0
- data/include/grpc/support/alloc.h +52 -0
- data/include/grpc/support/atm.h +26 -0
- data/include/grpc/support/atm_gcc_atomic.h +26 -0
- data/include/grpc/support/atm_gcc_sync.h +26 -0
- data/include/grpc/support/atm_windows.h +26 -0
- data/include/grpc/support/cpu.h +44 -0
- data/include/grpc/support/log.h +26 -0
- data/include/grpc/support/log_windows.h +38 -0
- data/include/grpc/support/port_platform.h +24 -0
- data/include/grpc/support/string_util.h +51 -0
- data/include/grpc/support/sync.h +282 -0
- data/include/grpc/support/sync_abseil.h +26 -0
- data/include/grpc/support/sync_custom.h +26 -0
- data/include/grpc/support/sync_generic.h +26 -0
- data/include/grpc/support/sync_posix.h +26 -0
- data/include/grpc/support/sync_windows.h +26 -0
- data/include/grpc/support/thd_id.h +44 -0
- data/include/grpc/support/time.h +92 -0
- data/include/grpc/support/workaround_list.h +31 -0
- data/src/core/ext/filters/census/grpc_context.cc +39 -0
- data/src/core/ext/filters/channel_idle/channel_idle_filter.cc +309 -0
- data/src/core/ext/filters/channel_idle/channel_idle_filter.h +122 -0
- data/src/core/ext/filters/channel_idle/idle_filter_state.cc +96 -0
- data/src/core/ext/filters/channel_idle/idle_filter_state.h +66 -0
- data/src/core/ext/filters/client_channel/backend_metric.cc +79 -0
- data/src/core/ext/filters/client_channel/backend_metric.h +37 -0
- data/src/core/ext/filters/client_channel/backup_poller.cc +187 -0
- data/src/core/ext/filters/client_channel/backup_poller.h +42 -0
- data/src/core/ext/filters/client_channel/channel_connectivity.cc +220 -0
- data/src/core/ext/filters/client_channel/client_channel.cc +3243 -0
- data/src/core/ext/filters/client_channel/client_channel.h +585 -0
- data/src/core/ext/filters/client_channel/client_channel_channelz.cc +96 -0
- data/src/core/ext/filters/client_channel/client_channel_channelz.h +75 -0
- data/src/core/ext/filters/client_channel/client_channel_factory.cc +56 -0
- data/src/core/ext/filters/client_channel/client_channel_factory.h +46 -0
- data/src/core/ext/filters/client_channel/client_channel_plugin.cc +67 -0
- data/src/core/ext/filters/client_channel/config_selector.cc +59 -0
- data/src/core/ext/filters/client_channel/config_selector.h +145 -0
- data/src/core/ext/filters/client_channel/connector.h +79 -0
- data/src/core/ext/filters/client_channel/dynamic_filters.cc +189 -0
- data/src/core/ext/filters/client_channel/dynamic_filters.h +99 -0
- data/src/core/ext/filters/client_channel/global_subchannel_pool.cc +63 -0
- data/src/core/ext/filters/client_channel/global_subchannel_pool.h +60 -0
- data/src/core/ext/filters/client_channel/health/health_check_client.cc +163 -0
- data/src/core/ext/filters/client_channel/health/health_check_client.h +41 -0
- data/src/core/ext/filters/client_channel/http_connect_handshaker.cc +387 -0
- data/src/core/ext/filters/client_channel/http_connect_handshaker.h +42 -0
- data/src/core/ext/filters/client_channel/http_proxy.cc +212 -0
- data/src/core/ext/filters/client_channel/http_proxy.h +45 -0
- data/src/core/ext/filters/client_channel/lb_policy/address_filtering.cc +97 -0
- data/src/core/ext/filters/client_channel/lb_policy/address_filtering.h +102 -0
- data/src/core/ext/filters/client_channel/lb_policy/child_policy_handler.cc +304 -0
- data/src/core/ext/filters/client_channel/lb_policy/child_policy_handler.h +83 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/client_load_reporting_filter.cc +145 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/client_load_reporting_filter.h +29 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb.cc +1885 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb.h +40 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_balancer_addresses.cc +76 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_balancer_addresses.h +37 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_client_stats.cc +92 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_client_stats.h +76 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/load_balancer_api.cc +192 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/load_balancer_api.h +74 -0
- data/src/core/ext/filters/client_channel/lb_policy/pick_first/pick_first.cc +540 -0
- data/src/core/ext/filters/client_channel/lb_policy/priority/priority.cc +967 -0
- data/src/core/ext/filters/client_channel/lb_policy/ring_hash/ring_hash.cc +804 -0
- data/src/core/ext/filters/client_channel/lb_policy/ring_hash/ring_hash.h +37 -0
- data/src/core/ext/filters/client_channel/lb_policy/rls/rls.cc +2542 -0
- data/src/core/ext/filters/client_channel/lb_policy/round_robin/round_robin.cc +504 -0
- data/src/core/ext/filters/client_channel/lb_policy/subchannel_list.h +431 -0
- data/src/core/ext/filters/client_channel/lb_policy/weighted_target/weighted_target.cc +776 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/cds.cc +704 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds.h +60 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_channel_args.h +29 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_cluster_impl.cc +872 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_cluster_manager.cc +710 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_cluster_resolver.cc +1215 -0
- data/src/core/ext/filters/client_channel/lb_policy.cc +132 -0
- data/src/core/ext/filters/client_channel/lb_policy.h +457 -0
- data/src/core/ext/filters/client_channel/lb_policy_factory.h +48 -0
- data/src/core/ext/filters/client_channel/lb_policy_registry.cc +185 -0
- data/src/core/ext/filters/client_channel/lb_policy_registry.h +65 -0
- data/src/core/ext/filters/client_channel/local_subchannel_pool.cc +56 -0
- data/src/core/ext/filters/client_channel/local_subchannel_pool.h +58 -0
- data/src/core/ext/filters/client_channel/proxy_mapper.h +54 -0
- data/src/core/ext/filters/client_channel/proxy_mapper_registry.cc +89 -0
- data/src/core/ext/filters/client_channel/proxy_mapper_registry.h +50 -0
- data/src/core/ext/filters/client_channel/resolver/binder/binder_resolver.cc +133 -0
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/dns_resolver_ares.cc +500 -0
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver.h +84 -0
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver_event_engine.cc +31 -0
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver_posix.cc +114 -0
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver_windows.cc +883 -0
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper.cc +1113 -0
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper.h +115 -0
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper_event_engine.cc +28 -0
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper_posix.cc +29 -0
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper_windows.cc +34 -0
- data/src/core/ext/filters/client_channel/resolver/dns/dns_resolver_selection.cc +28 -0
- data/src/core/ext/filters/client_channel/resolver/dns/dns_resolver_selection.h +29 -0
- data/src/core/ext/filters/client_channel/resolver/dns/native/dns_resolver.cc +169 -0
- data/src/core/ext/filters/client_channel/resolver/fake/fake_resolver.cc +381 -0
- data/src/core/ext/filters/client_channel/resolver/fake/fake_resolver.h +96 -0
- data/src/core/ext/filters/client_channel/resolver/google_c2p/google_c2p_resolver.cc +400 -0
- data/src/core/ext/filters/client_channel/resolver/polling_resolver.cc +201 -0
- data/src/core/ext/filters/client_channel/resolver/polling_resolver.h +106 -0
- data/src/core/ext/filters/client_channel/resolver/sockaddr/sockaddr_resolver.cc +196 -0
- data/src/core/ext/filters/client_channel/resolver/xds/xds_resolver.cc +1066 -0
- data/src/core/ext/filters/client_channel/resolver/xds/xds_resolver.h +28 -0
- data/src/core/ext/filters/client_channel/resolver_result_parsing.cc +186 -0
- data/src/core/ext/filters/client_channel/resolver_result_parsing.h +105 -0
- data/src/core/ext/filters/client_channel/retry_filter.cc +2655 -0
- data/src/core/ext/filters/client_channel/retry_filter.h +30 -0
- data/src/core/ext/filters/client_channel/retry_service_config.cc +314 -0
- data/src/core/ext/filters/client_channel/retry_service_config.h +102 -0
- data/src/core/ext/filters/client_channel/retry_throttle.cc +148 -0
- data/src/core/ext/filters/client_channel/retry_throttle.h +85 -0
- data/src/core/ext/filters/client_channel/service_config_channel_arg_filter.cc +157 -0
- data/src/core/ext/filters/client_channel/subchannel.cc +1014 -0
- data/src/core/ext/filters/client_channel/subchannel.h +382 -0
- data/src/core/ext/filters/client_channel/subchannel_interface.h +130 -0
- data/src/core/ext/filters/client_channel/subchannel_pool_interface.cc +126 -0
- data/src/core/ext/filters/client_channel/subchannel_pool_interface.h +106 -0
- data/src/core/ext/filters/client_channel/subchannel_stream_client.cc +544 -0
- data/src/core/ext/filters/client_channel/subchannel_stream_client.h +214 -0
- data/src/core/ext/filters/deadline/deadline_filter.cc +392 -0
- data/src/core/ext/filters/deadline/deadline_filter.h +87 -0
- data/src/core/ext/filters/fault_injection/fault_injection_filter.cc +258 -0
- data/src/core/ext/filters/fault_injection/fault_injection_filter.h +62 -0
- data/src/core/ext/filters/fault_injection/service_config_parser.cc +179 -0
- data/src/core/ext/filters/fault_injection/service_config_parser.h +91 -0
- data/src/core/ext/filters/http/client/http_client_filter.cc +141 -0
- data/src/core/ext/filters/http/client/http_client_filter.h +48 -0
- data/src/core/ext/filters/http/client_authority_filter.cc +95 -0
- data/src/core/ext/filters/http/client_authority_filter.h +53 -0
- data/src/core/ext/filters/http/http_filters_plugin.cc +90 -0
- data/src/core/ext/filters/http/message_compress/message_compress_filter.cc +456 -0
- data/src/core/ext/filters/http/message_compress/message_compress_filter.h +53 -0
- data/src/core/ext/filters/http/message_compress/message_decompress_filter.cc +386 -0
- data/src/core/ext/filters/http/message_compress/message_decompress_filter.h +31 -0
- data/src/core/ext/filters/http/server/http_server_filter.cc +322 -0
- data/src/core/ext/filters/http/server/http_server_filter.h +29 -0
- data/src/core/ext/filters/message_size/message_size_filter.cc +394 -0
- data/src/core/ext/filters/message_size/message_size_filter.h +73 -0
- data/src/core/ext/filters/rbac/rbac_filter.cc +162 -0
- data/src/core/ext/filters/rbac/rbac_filter.h +76 -0
- data/src/core/ext/filters/rbac/rbac_service_config_parser.cc +606 -0
- data/src/core/ext/filters/rbac/rbac_service_config_parser.h +75 -0
- data/src/core/ext/filters/server_config_selector/server_config_selector.cc +61 -0
- data/src/core/ext/filters/server_config_selector/server_config_selector.h +71 -0
- data/src/core/ext/filters/server_config_selector/server_config_selector_filter.cc +143 -0
- data/src/core/ext/filters/server_config_selector/server_config_selector_filter.h +32 -0
- data/src/core/ext/transport/chttp2/alpn/alpn.cc +45 -0
- data/src/core/ext/transport/chttp2/alpn/alpn.h +36 -0
- data/src/core/ext/transport/chttp2/client/chttp2_connector.cc +495 -0
- data/src/core/ext/transport/chttp2/client/chttp2_connector.h +75 -0
- data/src/core/ext/transport/chttp2/server/chttp2_server.cc +1101 -0
- data/src/core/ext/transport/chttp2/server/chttp2_server.h +47 -0
- data/src/core/ext/transport/chttp2/transport/bin_decoder.cc +252 -0
- data/src/core/ext/transport/chttp2/transport/bin_decoder.h +57 -0
- data/src/core/ext/transport/chttp2/transport/bin_encoder.cc +231 -0
- data/src/core/ext/transport/chttp2/transport/bin_encoder.h +42 -0
- data/src/core/ext/transport/chttp2/transport/chttp2_transport.cc +3375 -0
- data/src/core/ext/transport/chttp2/transport/chttp2_transport.h +71 -0
- data/src/core/ext/transport/chttp2/transport/context_list.cc +67 -0
- data/src/core/ext/transport/chttp2/transport/context_list.h +51 -0
- data/src/core/ext/transport/chttp2/transport/flow_control.cc +430 -0
- data/src/core/ext/transport/chttp2/transport/flow_control.h +488 -0
- data/src/core/ext/transport/chttp2/transport/frame.h +47 -0
- data/src/core/ext/transport/chttp2/transport/frame_data.cc +307 -0
- data/src/core/ext/transport/chttp2/transport/frame_data.h +83 -0
- data/src/core/ext/transport/chttp2/transport/frame_goaway.cc +187 -0
- data/src/core/ext/transport/chttp2/transport/frame_goaway.h +63 -0
- data/src/core/ext/transport/chttp2/transport/frame_ping.cc +132 -0
- data/src/core/ext/transport/chttp2/transport/frame_ping.h +46 -0
- data/src/core/ext/transport/chttp2/transport/frame_rst_stream.cc +123 -0
- data/src/core/ext/transport/chttp2/transport/frame_rst_stream.h +51 -0
- data/src/core/ext/transport/chttp2/transport/frame_settings.cc +275 -0
- data/src/core/ext/transport/chttp2/transport/frame_settings.h +62 -0
- data/src/core/ext/transport/chttp2/transport/frame_window_update.cc +123 -0
- data/src/core/ext/transport/chttp2/transport/frame_window_update.h +43 -0
- data/src/core/ext/transport/chttp2/transport/hpack_constants.h +41 -0
- data/src/core/ext/transport/chttp2/transport/hpack_encoder.cc +667 -0
- data/src/core/ext/transport/chttp2/transport/hpack_encoder.h +219 -0
- data/src/core/ext/transport/chttp2/transport/hpack_encoder_table.cc +86 -0
- data/src/core/ext/transport/chttp2/transport/hpack_encoder_table.h +71 -0
- data/src/core/ext/transport/chttp2/transport/hpack_parser.cc +1379 -0
- data/src/core/ext/transport/chttp2/transport/hpack_parser.h +135 -0
- data/src/core/ext/transport/chttp2/transport/hpack_parser_table.cc +239 -0
- data/src/core/ext/transport/chttp2/transport/hpack_parser_table.h +115 -0
- data/src/core/ext/transport/chttp2/transport/http2_settings.cc +62 -0
- data/src/core/ext/transport/chttp2/transport/http2_settings.h +61 -0
- data/src/core/ext/transport/chttp2/transport/huffsyms.cc +92 -0
- data/src/core/ext/transport/chttp2/transport/huffsyms.h +32 -0
- data/src/core/ext/transport/chttp2/transport/internal.h +865 -0
- data/src/core/ext/transport/chttp2/transport/parsing.cc +653 -0
- data/src/core/ext/transport/chttp2/transport/stream_lists.cc +216 -0
- data/src/core/ext/transport/chttp2/transport/stream_map.cc +177 -0
- data/src/core/ext/transport/chttp2/transport/stream_map.h +67 -0
- data/src/core/ext/transport/chttp2/transport/varint.cc +62 -0
- data/src/core/ext/transport/chttp2/transport/varint.h +71 -0
- data/src/core/ext/transport/chttp2/transport/writing.cc +661 -0
- data/src/core/ext/transport/inproc/inproc_plugin.cc +24 -0
- data/src/core/ext/transport/inproc/inproc_transport.cc +1321 -0
- data/src/core/ext/transport/inproc/inproc_transport.h +32 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/certs.upb.c +117 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/certs.upb.h +482 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/clusters.upb.c +121 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/clusters.upb.h +553 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/config_dump.upb.c +444 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/config_dump.upb.h +2156 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/init_dump.upb.c +56 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/init_dump.upb.h +151 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/listeners.upb.c +62 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/listeners.upb.h +160 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/memory.upb.c +46 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/memory.upb.h +124 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/metrics.upb.c +43 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/metrics.upb.h +102 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/mutex_stats.upb.c +43 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/mutex_stats.upb.h +97 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/server_info.upb.c +106 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/server_info.upb.h +605 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/tap.upb.c +48 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/tap.upb.h +103 -0
- data/src/core/ext/upb-generated/envoy/annotations/deprecation.upb.c +60 -0
- data/src/core/ext/upb-generated/envoy/annotations/deprecation.upb.h +81 -0
- data/src/core/ext/upb-generated/envoy/annotations/resource.upb.c +53 -0
- data/src/core/ext/upb-generated/envoy/annotations/resource.upb.h +99 -0
- data/src/core/ext/upb-generated/envoy/config/accesslog/v3/accesslog.upb.c +270 -0
- data/src/core/ext/upb-generated/envoy/config/accesslog/v3/accesslog.upb.h +1240 -0
- data/src/core/ext/upb-generated/envoy/config/bootstrap/v3/bootstrap.upb.c +411 -0
- data/src/core/ext/upb-generated/envoy/config/bootstrap/v3/bootstrap.upb.h +2161 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/circuit_breaker.upb.c +95 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/circuit_breaker.upb.h +382 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/cluster.upb.c +543 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/cluster.upb.h +2961 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/filter.upb.c +48 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/filter.upb.h +103 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/outlier_detection.upb.c +89 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/outlier_detection.upb.h +545 -0
- data/src/core/ext/upb-generated/envoy/config/common/matcher/v3/matcher.upb.c +299 -0
- data/src/core/ext/upb-generated/envoy/config/common/matcher/v3/matcher.upb.h +1381 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/address.upb.c +145 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/address.upb.h +636 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/backoff.upb.c +49 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/backoff.upb.h +116 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/base.upb.c +419 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/base.upb.h +1783 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/config_source.upb.c +163 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/config_source.upb.h +778 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/event_service_config.upb.c +47 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/event_service_config.upb.h +100 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/extension.upb.c +47 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/extension.upb.h +103 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/grpc_method_list.upb.c +58 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/grpc_method_list.upb.h +151 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/grpc_service.upb.c +269 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/grpc_service.upb.h +1277 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/health_check.upb.c +220 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/health_check.upb.h +1219 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/http_uri.upb.c +49 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/http_uri.upb.h +122 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/protocol.upb.c +322 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/protocol.upb.h +1686 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/proxy_protocol.upb.c +40 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/proxy_protocol.upb.h +84 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/resolver.upb.c +60 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/resolver.upb.h +169 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/socket_option.upb.c +47 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/socket_option.upb.h +144 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/substitution_format_string.upb.c +56 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/substitution_format_string.upb.h +178 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/udp_socket_config.upb.c +48 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/udp_socket_config.upb.h +118 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint.upb.c +106 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint.upb.h +348 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint_components.upb.c +144 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint_components.upb.h +623 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/load_report.upb.c +129 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/load_report.upb.h +568 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/api_listener.upb.c +46 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/api_listener.upb.h +94 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/listener.upb.c +165 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/listener.upb.h +886 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/listener_components.upb.c +186 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/listener_components.upb.h +941 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/quic_config.upb.c +63 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/quic_config.upb.h +234 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/udp_listener_config.upb.c +56 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/udp_listener_config.upb.h +154 -0
- data/src/core/ext/upb-generated/envoy/config/metrics/v3/metrics_service.upb.c +53 -0
- data/src/core/ext/upb-generated/envoy/config/metrics/v3/metrics_service.upb.h +136 -0
- data/src/core/ext/upb-generated/envoy/config/metrics/v3/stats.upb.c +165 -0
- data/src/core/ext/upb-generated/envoy/config/metrics/v3/stats.upb.h +716 -0
- data/src/core/ext/upb-generated/envoy/config/overload/v3/overload.upb.c +174 -0
- data/src/core/ext/upb-generated/envoy/config/overload/v3/overload.upb.h +721 -0
- data/src/core/ext/upb-generated/envoy/config/rbac/v3/rbac.upb.c +209 -0
- data/src/core/ext/upb-generated/envoy/config/rbac/v3/rbac.upb.h +1008 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/route.upb.c +101 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/route.upb.h +443 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/route_components.upb.c +1051 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/route_components.upb.h +5956 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/scoped_route.upb.c +79 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/scoped_route.upb.h +255 -0
- data/src/core/ext/upb-generated/envoy/config/tap/v3/common.upb.c +222 -0
- data/src/core/ext/upb-generated/envoy/config/tap/v3/common.upb.h +1052 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/datadog.upb.c +44 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/datadog.upb.h +88 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/dynamic_ot.upb.c +49 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/dynamic_ot.upb.h +103 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/http_tracer.upb.c +63 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/http_tracer.upb.h +167 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/lightstep.upb.c +52 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/lightstep.upb.h +134 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/opencensus.upb.c +63 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/opencensus.upb.h +250 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/service.upb.c +47 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/service.upb.h +94 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/skywalking.upb.c +69 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/skywalking.upb.h +213 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/trace.upb.c +32 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/trace.upb.h +42 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/xray.upb.c +71 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/xray.upb.h +218 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/zipkin.upb.c +54 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/zipkin.upb.h +146 -0
- data/src/core/ext/upb-generated/envoy/extensions/clusters/aggregate/v3/cluster.upb.c +42 -0
- data/src/core/ext/upb-generated/envoy/extensions/clusters/aggregate/v3/cluster.upb.h +85 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/common/fault/v3/fault.upb.c +96 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/common/fault/v3/fault.upb.h +375 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/http/fault/v3/fault.upb.c +94 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/http/fault/v3/fault.upb.h +433 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/http/rbac/v3/rbac.upb.c +64 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/http/rbac/v3/rbac.upb.h +183 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/http/router/v3/router.upb.c +55 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/http/router/v3/router.upb.h +168 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upb.c +463 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upb.h +2606 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/cert.upb.c +28 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/cert.upb.h +38 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/common.upb.c +175 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/common.upb.h +880 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/secret.upb.c +88 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/secret.upb.h +308 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/tls.upb.c +191 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/tls.upb.h +1035 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/tls_spiffe_validator_config.upb.c +62 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/tls_spiffe_validator_config.upb.h +160 -0
- data/src/core/ext/upb-generated/envoy/service/discovery/v3/ads.upb.c +38 -0
- data/src/core/ext/upb-generated/envoy/service/discovery/v3/ads.upb.h +70 -0
- data/src/core/ext/upb-generated/envoy/service/discovery/v3/discovery.upb.c +165 -0
- data/src/core/ext/upb-generated/envoy/service/discovery/v3/discovery.upb.h +755 -0
- data/src/core/ext/upb-generated/envoy/service/load_stats/v3/lrs.upb.c +68 -0
- data/src/core/ext/upb-generated/envoy/service/load_stats/v3/lrs.upb.h +210 -0
- data/src/core/ext/upb-generated/envoy/service/status/v3/csds.upb.c +138 -0
- data/src/core/ext/upb-generated/envoy/service/status/v3/csds.upb.h +631 -0
- data/src/core/ext/upb-generated/envoy/type/http/v3/cookie.upb.c +48 -0
- data/src/core/ext/upb-generated/envoy/type/http/v3/cookie.upb.h +112 -0
- data/src/core/ext/upb-generated/envoy/type/http/v3/path_transformation.upb.c +76 -0
- data/src/core/ext/upb-generated/envoy/type/http/v3/path_transformation.upb.h +249 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/http_inputs.upb.c +74 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/http_inputs.upb.h +214 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/metadata.upb.c +62 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/metadata.upb.h +188 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/node.upb.c +49 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/node.upb.h +117 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/number.upb.c +48 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/number.upb.h +113 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/path.upb.c +47 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/path.upb.h +100 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/regex.upb.c +80 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/regex.upb.h +234 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/string.upb.c +67 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/string.upb.h +218 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/struct.upb.c +60 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/struct.upb.h +170 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/value.upb.c +78 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/value.upb.h +294 -0
- data/src/core/ext/upb-generated/envoy/type/metadata/v3/metadata.upb.c +107 -0
- data/src/core/ext/upb-generated/envoy/type/metadata/v3/metadata.upb.h +429 -0
- data/src/core/ext/upb-generated/envoy/type/tracing/v3/custom_tag.upb.c +107 -0
- data/src/core/ext/upb-generated/envoy/type/tracing/v3/custom_tag.upb.h +419 -0
- data/src/core/ext/upb-generated/envoy/type/v3/hash_policy.upb.c +66 -0
- data/src/core/ext/upb-generated/envoy/type/v3/hash_policy.upb.h +201 -0
- data/src/core/ext/upb-generated/envoy/type/v3/http.upb.c +26 -0
- data/src/core/ext/upb-generated/envoy/type/v3/http.upb.h +39 -0
- data/src/core/ext/upb-generated/envoy/type/v3/http_status.upb.c +42 -0
- data/src/core/ext/upb-generated/envoy/type/v3/http_status.upb.h +139 -0
- data/src/core/ext/upb-generated/envoy/type/v3/percent.upb.c +54 -0
- data/src/core/ext/upb-generated/envoy/type/v3/percent.upb.h +139 -0
- data/src/core/ext/upb-generated/envoy/type/v3/range.upb.c +66 -0
- data/src/core/ext/upb-generated/envoy/type/v3/range.upb.h +196 -0
- data/src/core/ext/upb-generated/envoy/type/v3/ratelimit_unit.upb.c +26 -0
- data/src/core/ext/upb-generated/envoy/type/v3/ratelimit_unit.upb.h +41 -0
- data/src/core/ext/upb-generated/envoy/type/v3/semantic_version.upb.c +43 -0
- data/src/core/ext/upb-generated/envoy/type/v3/semantic_version.upb.h +97 -0
- data/src/core/ext/upb-generated/envoy/type/v3/token_bucket.upb.c +51 -0
- data/src/core/ext/upb-generated/envoy/type/v3/token_bucket.upb.h +127 -0
- data/src/core/ext/upb-generated/google/api/annotations.upb.c +40 -0
- data/src/core/ext/upb-generated/google/api/annotations.upb.h +53 -0
- data/src/core/ext/upb-generated/google/api/expr/v1alpha1/checked.upb.c +271 -0
- data/src/core/ext/upb-generated/google/api/expr/v1alpha1/checked.upb.h +1236 -0
- data/src/core/ext/upb-generated/google/api/expr/v1alpha1/syntax.upb.c +283 -0
- data/src/core/ext/upb-generated/google/api/expr/v1alpha1/syntax.upb.h +1338 -0
- data/src/core/ext/upb-generated/google/api/http.upb.c +81 -0
- data/src/core/ext/upb-generated/google/api/http.upb.h +331 -0
- data/src/core/ext/upb-generated/google/api/httpbody.upb.c +46 -0
- data/src/core/ext/upb-generated/google/api/httpbody.upb.h +111 -0
- data/src/core/ext/upb-generated/google/protobuf/any.upb.c +40 -0
- data/src/core/ext/upb-generated/google/protobuf/any.upb.h +88 -0
- data/src/core/ext/upb-generated/google/protobuf/descriptor.upb.c +577 -0
- data/src/core/ext/upb-generated/google/protobuf/descriptor.upb.h +3095 -0
- data/src/core/ext/upb-generated/google/protobuf/duration.upb.c +40 -0
- data/src/core/ext/upb-generated/google/protobuf/duration.upb.h +88 -0
- data/src/core/ext/upb-generated/google/protobuf/empty.upb.c +35 -0
- data/src/core/ext/upb-generated/google/protobuf/empty.upb.h +70 -0
- data/src/core/ext/upb-generated/google/protobuf/struct.upb.c +95 -0
- data/src/core/ext/upb-generated/google/protobuf/struct.upb.h +317 -0
- data/src/core/ext/upb-generated/google/protobuf/timestamp.upb.c +40 -0
- data/src/core/ext/upb-generated/google/protobuf/timestamp.upb.h +88 -0
- data/src/core/ext/upb-generated/google/protobuf/wrappers.upb.c +127 -0
- data/src/core/ext/upb-generated/google/protobuf/wrappers.upb.h +439 -0
- data/src/core/ext/upb-generated/google/rpc/status.upb.c +46 -0
- data/src/core/ext/upb-generated/google/rpc/status.upb.h +111 -0
- data/src/core/ext/upb-generated/opencensus/proto/trace/v1/trace_config.upb.c +84 -0
- data/src/core/ext/upb-generated/opencensus/proto/trace/v1/trace_config.upb.h +319 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/altscontext.upb.c +63 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/altscontext.upb.h +184 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/handshaker.upb.c +240 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/handshaker.upb.h +1133 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/transport_security_common.upb.c +57 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/transport_security_common.upb.h +174 -0
- data/src/core/ext/upb-generated/src/proto/grpc/health/v1/health.upb.c +50 -0
- data/src/core/ext/upb-generated/src/proto/grpc/health/v1/health.upb.h +131 -0
- data/src/core/ext/upb-generated/src/proto/grpc/lb/v1/load_balancer.upb.c +161 -0
- data/src/core/ext/upb-generated/src/proto/grpc/lb/v1/load_balancer.upb.h +669 -0
- data/src/core/ext/upb-generated/src/proto/grpc/lookup/v1/rls.upb.c +70 -0
- data/src/core/ext/upb-generated/src/proto/grpc/lookup/v1/rls.upb.h +208 -0
- data/src/core/ext/upb-generated/src/proto/grpc/lookup/v1/rls_config.upb.c +175 -0
- data/src/core/ext/upb-generated/src/proto/grpc/lookup/v1/rls_config.upb.h +764 -0
- data/src/core/ext/upb-generated/udpa/annotations/migrate.upb.c +110 -0
- data/src/core/ext/upb-generated/udpa/annotations/migrate.upb.h +278 -0
- data/src/core/ext/upb-generated/udpa/annotations/security.upb.c +55 -0
- data/src/core/ext/upb-generated/udpa/annotations/security.upb.h +108 -0
- data/src/core/ext/upb-generated/udpa/annotations/sensitive.upb.c +38 -0
- data/src/core/ext/upb-generated/udpa/annotations/sensitive.upb.h +46 -0
- data/src/core/ext/upb-generated/udpa/annotations/status.upb.c +54 -0
- data/src/core/ext/upb-generated/udpa/annotations/status.upb.h +115 -0
- data/src/core/ext/upb-generated/udpa/annotations/versioning.upb.c +53 -0
- data/src/core/ext/upb-generated/udpa/annotations/versioning.upb.h +99 -0
- data/src/core/ext/upb-generated/validate/validate.upb.c +560 -0
- data/src/core/ext/upb-generated/validate/validate.upb.h +4013 -0
- data/src/core/ext/upb-generated/xds/annotations/v3/migrate.upb.c +110 -0
- data/src/core/ext/upb-generated/xds/annotations/v3/migrate.upb.h +278 -0
- data/src/core/ext/upb-generated/xds/annotations/v3/security.upb.c +55 -0
- data/src/core/ext/upb-generated/xds/annotations/v3/security.upb.h +108 -0
- data/src/core/ext/upb-generated/xds/annotations/v3/sensitive.upb.c +38 -0
- data/src/core/ext/upb-generated/xds/annotations/v3/sensitive.upb.h +46 -0
- data/src/core/ext/upb-generated/xds/annotations/v3/status.upb.c +105 -0
- data/src/core/ext/upb-generated/xds/annotations/v3/status.upb.h +290 -0
- data/src/core/ext/upb-generated/xds/annotations/v3/versioning.upb.c +53 -0
- data/src/core/ext/upb-generated/xds/annotations/v3/versioning.upb.h +99 -0
- data/src/core/ext/upb-generated/xds/core/v3/authority.upb.c +41 -0
- data/src/core/ext/upb-generated/xds/core/v3/authority.upb.h +79 -0
- data/src/core/ext/upb-generated/xds/core/v3/collection_entry.upb.c +66 -0
- data/src/core/ext/upb-generated/xds/core/v3/collection_entry.upb.h +200 -0
- data/src/core/ext/upb-generated/xds/core/v3/context_params.upb.c +56 -0
- data/src/core/ext/upb-generated/xds/core/v3/context_params.upb.h +115 -0
- data/src/core/ext/upb-generated/xds/core/v3/extension.upb.c +46 -0
- data/src/core/ext/upb-generated/xds/core/v3/extension.upb.h +103 -0
- data/src/core/ext/upb-generated/xds/core/v3/resource.upb.c +49 -0
- data/src/core/ext/upb-generated/xds/core/v3/resource.upb.h +127 -0
- data/src/core/ext/upb-generated/xds/core/v3/resource_locator.upb.c +68 -0
- data/src/core/ext/upb-generated/xds/core/v3/resource_locator.upb.h +240 -0
- data/src/core/ext/upb-generated/xds/core/v3/resource_name.upb.c +49 -0
- data/src/core/ext/upb-generated/xds/core/v3/resource_name.upb.h +121 -0
- data/src/core/ext/upb-generated/xds/data/orca/v3/orca_load_report.upb.c +73 -0
- data/src/core/ext/upb-generated/xds/data/orca/v3/orca_load_report.upb.h +187 -0
- data/src/core/ext/upb-generated/xds/type/matcher/v3/matcher.upb.c +207 -0
- data/src/core/ext/upb-generated/xds/type/matcher/v3/matcher.upb.h +878 -0
- data/src/core/ext/upb-generated/xds/type/matcher/v3/regex.upb.c +52 -0
- data/src/core/ext/upb-generated/xds/type/matcher/v3/regex.upb.h +143 -0
- data/src/core/ext/upb-generated/xds/type/matcher/v3/string.upb.c +65 -0
- data/src/core/ext/upb-generated/xds/type/matcher/v3/string.upb.h +218 -0
- data/src/core/ext/upb-generated/xds/type/v3/typed_struct.upb.c +46 -0
- data/src/core/ext/upb-generated/xds/type/v3/typed_struct.upb.h +103 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/certs.upbdefs.c +84 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/certs.upbdefs.h +55 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/clusters.upbdefs.c +127 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/clusters.upbdefs.h +50 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/config_dump.upbdefs.c +309 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/config_dump.upbdefs.h +140 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/init_dump.upbdefs.c +43 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/init_dump.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/listeners.upbdefs.c +53 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/listeners.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/memory.upbdefs.c +49 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/memory.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/metrics.upbdefs.c +46 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/metrics.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/mutex_stats.upbdefs.c +46 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/mutex_stats.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/server_info.upbdefs.c +142 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/server_info.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/tap.upbdefs.c +51 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/tap.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/annotations/deprecation.upbdefs.c +48 -0
- data/src/core/ext/upbdefs-generated/envoy/annotations/deprecation.upbdefs.h +30 -0
- data/src/core/ext/upbdefs-generated/envoy/annotations/resource.upbdefs.c +38 -0
- data/src/core/ext/upbdefs-generated/envoy/annotations/resource.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/accesslog/v3/accesslog.upbdefs.c +222 -0
- data/src/core/ext/upbdefs-generated/envoy/config/accesslog/v3/accesslog.upbdefs.h +105 -0
- data/src/core/ext/upbdefs-generated/envoy/config/bootstrap/v3/bootstrap.upbdefs.c +393 -0
- data/src/core/ext/upbdefs-generated/envoy/config/bootstrap/v3/bootstrap.upbdefs.h +120 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/circuit_breaker.upbdefs.c +98 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/circuit_breaker.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/cluster.upbdefs.c +557 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/cluster.upbdefs.h +155 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/filter.upbdefs.c +51 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/filter.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/outlier_detection.upbdefs.c +138 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/outlier_detection.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/common/matcher/v3/matcher.upbdefs.c +206 -0
- data/src/core/ext/upbdefs-generated/envoy/config/common/matcher/v3/matcher.upbdefs.h +105 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/address.upbdefs.c +112 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/address.upbdefs.h +65 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/backoff.upbdefs.c +54 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/backoff.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/base.upbdefs.c +267 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/base.upbdefs.h +150 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/config_source.upbdefs.c +168 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/config_source.upbdefs.h +65 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/event_service_config.upbdefs.c +53 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/event_service_config.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/extension.upbdefs.c +47 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/extension.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/grpc_method_list.upbdefs.c +53 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/grpc_method_list.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/grpc_service.upbdefs.c +235 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/grpc_service.upbdefs.h +100 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/health_check.upbdefs.c +228 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/health_check.upbdefs.h +75 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/http_uri.upbdefs.c +53 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/http_uri.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/protocol.upbdefs.c +298 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/protocol.upbdefs.h +110 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/proxy_protocol.upbdefs.c +41 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/proxy_protocol.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/resolver.upbdefs.c +55 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/resolver.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/socket_option.upbdefs.c +57 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/socket_option.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/substitution_format_string.upbdefs.c +70 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/substitution_format_string.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/udp_socket_config.upbdefs.c +49 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/udp_socket_config.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/endpoint/v3/endpoint.upbdefs.c +99 -0
- data/src/core/ext/upbdefs-generated/envoy/config/endpoint/v3/endpoint.upbdefs.h +50 -0
- data/src/core/ext/upbdefs-generated/envoy/config/endpoint/v3/endpoint_components.upbdefs.c +128 -0
- data/src/core/ext/upbdefs-generated/envoy/config/endpoint/v3/endpoint_components.upbdefs.h +60 -0
- data/src/core/ext/upbdefs-generated/envoy/config/endpoint/v3/load_report.upbdefs.c +136 -0
- data/src/core/ext/upbdefs-generated/envoy/config/endpoint/v3/load_report.upbdefs.h +55 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/api_listener.upbdefs.c +48 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/api_listener.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/listener.upbdefs.c +197 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/listener.upbdefs.h +60 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/listener_components.upbdefs.c +190 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/listener_components.upbdefs.h +65 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/quic_config.upbdefs.c +88 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/quic_config.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/udp_listener_config.upbdefs.c +63 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/udp_listener_config.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/config/metrics/v3/metrics_service.upbdefs.c +69 -0
- data/src/core/ext/upbdefs-generated/envoy/config/metrics/v3/metrics_service.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/metrics/v3/stats.upbdefs.c +125 -0
- data/src/core/ext/upbdefs-generated/envoy/config/metrics/v3/stats.upbdefs.h +70 -0
- data/src/core/ext/upbdefs-generated/envoy/config/overload/v3/overload.upbdefs.c +134 -0
- data/src/core/ext/upbdefs-generated/envoy/config/overload/v3/overload.upbdefs.h +75 -0
- data/src/core/ext/upbdefs-generated/envoy/config/rbac/v3/rbac.upbdefs.c +190 -0
- data/src/core/ext/upbdefs-generated/envoy/config/rbac/v3/rbac.upbdefs.h +70 -0
- data/src/core/ext/upbdefs-generated/envoy/config/route/v3/route.upbdefs.c +115 -0
- data/src/core/ext/upbdefs-generated/envoy/config/route/v3/route.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/config/route/v3/route_components.upbdefs.c +896 -0
- data/src/core/ext/upbdefs-generated/envoy/config/route/v3/route_components.upbdefs.h +295 -0
- data/src/core/ext/upbdefs-generated/envoy/config/route/v3/scoped_route.upbdefs.c +77 -0
- data/src/core/ext/upbdefs-generated/envoy/config/route/v3/scoped_route.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/config/tap/v3/common.upbdefs.c +188 -0
- data/src/core/ext/upbdefs-generated/envoy/config/tap/v3/common.upbdefs.h +85 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/datadog.upbdefs.c +54 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/datadog.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/dynamic_ot.upbdefs.c +57 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/dynamic_ot.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/http_tracer.upbdefs.c +57 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/http_tracer.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/lightstep.upbdefs.c +72 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/lightstep.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/opencensus.upbdefs.c +99 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/opencensus.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/service.upbdefs.c +52 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/service.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/skywalking.upbdefs.c +71 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/skywalking.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/trace.upbdefs.c +57 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/trace.upbdefs.h +30 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/xray.upbdefs.c +75 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/xray.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/zipkin.upbdefs.c +77 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/zipkin.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/clusters/aggregate/v3/cluster.upbdefs.c +50 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/clusters/aggregate/v3/cluster.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/common/fault/v3/fault.upbdefs.c +92 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/common/fault/v3/fault.upbdefs.h +55 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/http/fault/v3/fault.upbdefs.c +117 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/http/fault/v3/fault.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/http/rbac/v3/rbac.upbdefs.c +59 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/http/rbac/v3/rbac.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/http/router/v3/router.upbdefs.c +78 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/http/router/v3/router.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upbdefs.c +551 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upbdefs.h +130 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/cert.upbdefs.c +48 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/cert.upbdefs.h +30 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/common.upbdefs.c +210 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/common.upbdefs.h +65 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/secret.upbdefs.c +91 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/secret.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/tls.upbdefs.c +254 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/tls.upbdefs.h +65 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/tls_spiffe_validator_config.upbdefs.c +58 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/tls_spiffe_validator_config.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/service/discovery/v3/ads.upbdefs.c +58 -0
- data/src/core/ext/upbdefs-generated/envoy/service/discovery/v3/ads.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/service/discovery/v3/discovery.upbdefs.c +128 -0
- data/src/core/ext/upbdefs-generated/envoy/service/discovery/v3/discovery.upbdefs.h +65 -0
- data/src/core/ext/upbdefs-generated/envoy/service/load_stats/v3/lrs.upbdefs.c +76 -0
- data/src/core/ext/upbdefs-generated/envoy/service/load_stats/v3/lrs.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/service/status/v3/csds.upbdefs.c +153 -0
- data/src/core/ext/upbdefs-generated/envoy/service/status/v3/csds.upbdefs.h +55 -0
- data/src/core/ext/upbdefs-generated/envoy/type/http/v3/cookie.upbdefs.c +46 -0
- data/src/core/ext/upbdefs-generated/envoy/type/http/v3/cookie.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/type/http/v3/path_transformation.upbdefs.c +56 -0
- data/src/core/ext/upbdefs-generated/envoy/type/http/v3/path_transformation.upbdefs.h +50 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/http_inputs.upbdefs.c +52 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/http_inputs.upbdefs.h +50 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/metadata.upbdefs.c +61 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/metadata.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/node.upbdefs.c +54 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/node.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/number.upbdefs.c +52 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/number.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/path.upbdefs.c +51 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/path.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/regex.upbdefs.c +70 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/regex.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/string.upbdefs.c +65 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/string.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/struct.upbdefs.c +58 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/struct.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/value.upbdefs.c +75 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/value.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/type/metadata/v3/metadata.upbdefs.c +78 -0
- data/src/core/ext/upbdefs-generated/envoy/type/metadata/v3/metadata.upbdefs.h +65 -0
- data/src/core/ext/upbdefs-generated/envoy/type/tracing/v3/custom_tag.upbdefs.c +85 -0
- data/src/core/ext/upbdefs-generated/envoy/type/tracing/v3/custom_tag.upbdefs.h +55 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/hash_policy.upbdefs.c +53 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/hash_policy.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/http.upbdefs.c +36 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/http.upbdefs.h +30 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/http_status.upbdefs.c +94 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/http_status.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/percent.upbdefs.c +54 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/percent.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/range.upbdefs.c +48 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/range.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/ratelimit_unit.upbdefs.c +38 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/ratelimit_unit.upbdefs.h +30 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/semantic_version.upbdefs.c +44 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/semantic_version.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/token_bucket.upbdefs.c +57 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/token_bucket.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/google/api/annotations.upbdefs.c +40 -0
- data/src/core/ext/upbdefs-generated/google/api/annotations.upbdefs.h +30 -0
- data/src/core/ext/upbdefs-generated/google/api/expr/v1alpha1/checked.upbdefs.c +154 -0
- data/src/core/ext/upbdefs-generated/google/api/expr/v1alpha1/checked.upbdefs.h +95 -0
- data/src/core/ext/upbdefs-generated/google/api/expr/v1alpha1/syntax.upbdefs.c +153 -0
- data/src/core/ext/upbdefs-generated/google/api/expr/v1alpha1/syntax.upbdefs.h +100 -0
- data/src/core/ext/upbdefs-generated/google/api/http.upbdefs.c +52 -0
- data/src/core/ext/upbdefs-generated/google/api/http.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/google/api/httpbody.upbdefs.c +39 -0
- data/src/core/ext/upbdefs-generated/google/api/httpbody.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/any.upbdefs.c +34 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/any.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/descriptor.upbdefs.c +329 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/descriptor.upbdefs.h +165 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/duration.upbdefs.c +35 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/duration.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/empty.upbdefs.c +32 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/empty.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/struct.upbdefs.c +54 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/struct.upbdefs.h +50 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/timestamp.upbdefs.c +35 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/timestamp.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/wrappers.upbdefs.c +45 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/wrappers.upbdefs.h +75 -0
- data/src/core/ext/upbdefs-generated/google/rpc/status.upbdefs.c +37 -0
- data/src/core/ext/upbdefs-generated/google/rpc/status.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/opencensus/proto/trace/v1/trace_config.upbdefs.c +67 -0
- data/src/core/ext/upbdefs-generated/opencensus/proto/trace/v1/trace_config.upbdefs.h +50 -0
- data/src/core/ext/upbdefs-generated/src/proto/grpc/lookup/v1/rls_config.upbdefs.c +99 -0
- data/src/core/ext/upbdefs-generated/src/proto/grpc/lookup/v1/rls_config.upbdefs.h +75 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/migrate.upbdefs.c +62 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/migrate.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/security.upbdefs.c +47 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/security.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/sensitive.upbdefs.c +34 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/sensitive.upbdefs.h +30 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/status.upbdefs.c +46 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/status.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/versioning.upbdefs.c +39 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/versioning.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/validate/validate.upbdefs.c +283 -0
- data/src/core/ext/upbdefs-generated/validate/validate.upbdefs.h +145 -0
- data/src/core/ext/upbdefs-generated/xds/annotations/v3/migrate.upbdefs.c +63 -0
- data/src/core/ext/upbdefs-generated/xds/annotations/v3/migrate.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/xds/annotations/v3/security.upbdefs.c +47 -0
- data/src/core/ext/upbdefs-generated/xds/annotations/v3/security.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/xds/annotations/v3/sensitive.upbdefs.c +35 -0
- data/src/core/ext/upbdefs-generated/xds/annotations/v3/sensitive.upbdefs.h +30 -0
- data/src/core/ext/upbdefs-generated/xds/annotations/v3/status.upbdefs.c +64 -0
- data/src/core/ext/upbdefs-generated/xds/annotations/v3/status.upbdefs.h +50 -0
- data/src/core/ext/upbdefs-generated/xds/annotations/v3/versioning.upbdefs.c +40 -0
- data/src/core/ext/upbdefs-generated/xds/annotations/v3/versioning.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/authority.upbdefs.c +38 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/authority.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/collection_entry.upbdefs.c +56 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/collection_entry.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/context_params.upbdefs.c +39 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/context_params.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/extension.upbdefs.c +41 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/extension.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/resource.upbdefs.c +45 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/resource.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/resource_locator.upbdefs.c +61 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/resource_locator.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/resource_name.upbdefs.c +46 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/resource_name.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/xds/type/matcher/v3/matcher.upbdefs.c +126 -0
- data/src/core/ext/upbdefs-generated/xds/type/matcher/v3/matcher.upbdefs.h +80 -0
- data/src/core/ext/upbdefs-generated/xds/type/matcher/v3/regex.upbdefs.c +40 -0
- data/src/core/ext/upbdefs-generated/xds/type/matcher/v3/regex.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/xds/type/matcher/v3/string.upbdefs.c +52 -0
- data/src/core/ext/upbdefs-generated/xds/type/matcher/v3/string.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/xds/type/v3/typed_struct.upbdefs.c +40 -0
- data/src/core/ext/upbdefs-generated/xds/type/v3/typed_struct.upbdefs.h +35 -0
- data/src/core/ext/xds/certificate_provider_factory.h +61 -0
- data/src/core/ext/xds/certificate_provider_registry.cc +103 -0
- data/src/core/ext/xds/certificate_provider_registry.h +57 -0
- data/src/core/ext/xds/certificate_provider_store.cc +95 -0
- data/src/core/ext/xds/certificate_provider_store.h +121 -0
- data/src/core/ext/xds/file_watcher_certificate_provider_factory.cc +144 -0
- data/src/core/ext/xds/file_watcher_certificate_provider_factory.h +69 -0
- data/src/core/ext/xds/upb_utils.h +67 -0
- data/src/core/ext/xds/xds_api.cc +730 -0
- data/src/core/ext/xds/xds_api.h +191 -0
- data/src/core/ext/xds/xds_bootstrap.cc +570 -0
- data/src/core/ext/xds/xds_bootstrap.h +141 -0
- data/src/core/ext/xds/xds_certificate_provider.cc +407 -0
- data/src/core/ext/xds/xds_certificate_provider.h +159 -0
- data/src/core/ext/xds/xds_channel_args.h +32 -0
- data/src/core/ext/xds/xds_channel_stack_modifier.cc +109 -0
- data/src/core/ext/xds/xds_channel_stack_modifier.h +53 -0
- data/src/core/ext/xds/xds_client.cc +2510 -0
- data/src/core/ext/xds/xds_client.h +347 -0
- data/src/core/ext/xds/xds_client_stats.cc +160 -0
- data/src/core/ext/xds/xds_client_stats.h +241 -0
- data/src/core/ext/xds/xds_cluster.cc +453 -0
- data/src/core/ext/xds/xds_cluster.h +108 -0
- data/src/core/ext/xds/xds_cluster_specifier_plugin.cc +142 -0
- data/src/core/ext/xds/xds_cluster_specifier_plugin.h +79 -0
- data/src/core/ext/xds/xds_common_types.cc +388 -0
- data/src/core/ext/xds/xds_common_types.h +95 -0
- data/src/core/ext/xds/xds_endpoint.cc +371 -0
- data/src/core/ext/xds/xds_endpoint.h +135 -0
- data/src/core/ext/xds/xds_http_fault_filter.cc +227 -0
- data/src/core/ext/xds/xds_http_fault_filter.h +64 -0
- data/src/core/ext/xds/xds_http_filters.cc +122 -0
- data/src/core/ext/xds/xds_http_filters.h +133 -0
- data/src/core/ext/xds/xds_http_rbac_filter.cc +563 -0
- data/src/core/ext/xds/xds_http_rbac_filter.h +54 -0
- data/src/core/ext/xds/xds_listener.cc +1039 -0
- data/src/core/ext/xds/xds_listener.h +220 -0
- data/src/core/ext/xds/xds_resource_type.cc +33 -0
- data/src/core/ext/xds/xds_resource_type.h +98 -0
- data/src/core/ext/xds/xds_resource_type_impl.h +87 -0
- data/src/core/ext/xds/xds_route_config.cc +1122 -0
- data/src/core/ext/xds/xds_route_config.h +218 -0
- data/src/core/ext/xds/xds_routing.cc +250 -0
- data/src/core/ext/xds/xds_routing.h +101 -0
- data/src/core/ext/xds/xds_server_config_fetcher.cc +1314 -0
- data/src/core/lib/address_utils/parse_address.cc +340 -0
- data/src/core/lib/address_utils/parse_address.h +82 -0
- data/src/core/lib/address_utils/sockaddr_utils.cc +409 -0
- data/src/core/lib/address_utils/sockaddr_utils.h +95 -0
- data/src/core/lib/avl/avl.h +458 -0
- data/src/core/lib/backoff/backoff.cc +49 -0
- data/src/core/lib/backoff/backoff.h +89 -0
- data/src/core/lib/channel/call_finalization.h +86 -0
- data/src/core/lib/channel/call_tracer.h +88 -0
- data/src/core/lib/channel/channel_args.cc +538 -0
- data/src/core/lib/channel/channel_args.h +347 -0
- data/src/core/lib/channel/channel_args_preconditioning.cc +42 -0
- data/src/core/lib/channel/channel_args_preconditioning.h +61 -0
- data/src/core/lib/channel/channel_stack.cc +274 -0
- data/src/core/lib/channel/channel_stack.h +345 -0
- data/src/core/lib/channel/channel_stack_builder.cc +64 -0
- data/src/core/lib/channel/channel_stack_builder.h +127 -0
- data/src/core/lib/channel/channel_stack_builder_impl.cc +102 -0
- data/src/core/lib/channel/channel_stack_builder_impl.h +48 -0
- data/src/core/lib/channel/channel_trace.cc +190 -0
- data/src/core/lib/channel/channel_trace.h +135 -0
- data/src/core/lib/channel/channelz.cc +597 -0
- data/src/core/lib/channel/channelz.h +357 -0
- data/src/core/lib/channel/channelz_registry.cc +285 -0
- data/src/core/lib/channel/channelz_registry.h +99 -0
- data/src/core/lib/channel/connected_channel.cc +250 -0
- data/src/core/lib/channel/connected_channel.h +34 -0
- data/src/core/lib/channel/context.h +63 -0
- data/src/core/lib/channel/handshaker.cc +222 -0
- data/src/core/lib/channel/handshaker.h +161 -0
- data/src/core/lib/channel/handshaker_factory.h +50 -0
- data/src/core/lib/channel/handshaker_registry.cc +50 -0
- data/src/core/lib/channel/handshaker_registry.h +71 -0
- data/src/core/lib/channel/promise_based_filter.cc +1002 -0
- data/src/core/lib/channel/promise_based_filter.h +437 -0
- data/src/core/lib/channel/status_util.cc +109 -0
- data/src/core/lib/channel/status_util.h +67 -0
- data/src/core/lib/compression/compression.cc +91 -0
- data/src/core/lib/compression/compression_internal.cc +217 -0
- data/src/core/lib/compression/compression_internal.h +92 -0
- data/src/core/lib/compression/message_compress.cc +192 -0
- data/src/core/lib/compression/message_compress.h +40 -0
- data/src/core/lib/config/core_configuration.cc +104 -0
- data/src/core/lib/config/core_configuration.h +196 -0
- data/src/core/lib/debug/stats.cc +172 -0
- data/src/core/lib/debug/stats.h +71 -0
- data/src/core/lib/debug/stats_data.cc +685 -0
- data/src/core/lib/debug/stats_data.h +553 -0
- data/src/core/lib/debug/trace.cc +155 -0
- data/src/core/lib/debug/trace.h +132 -0
- data/src/core/lib/event_engine/channel_args_endpoint_config.cc +46 -0
- data/src/core/lib/event_engine/channel_args_endpoint_config.h +42 -0
- data/src/core/lib/event_engine/default_event_engine_factory.cc +27 -0
- data/src/core/lib/event_engine/event_engine.cc +52 -0
- data/src/core/lib/event_engine/event_engine_factory.h +36 -0
- data/src/core/lib/event_engine/memory_allocator.cc +66 -0
- data/src/core/lib/event_engine/resolved_address.cc +39 -0
- data/src/core/lib/event_engine/sockaddr.cc +40 -0
- data/src/core/lib/event_engine/sockaddr.h +44 -0
- data/src/core/lib/gpr/alloc.cc +76 -0
- data/src/core/lib/gpr/alloc.h +28 -0
- data/src/core/lib/gpr/atm.cc +35 -0
- data/src/core/lib/gpr/cpu_iphone.cc +44 -0
- data/src/core/lib/gpr/cpu_linux.cc +82 -0
- data/src/core/lib/gpr/cpu_posix.cc +83 -0
- data/src/core/lib/gpr/cpu_windows.cc +33 -0
- data/src/core/lib/gpr/env.h +40 -0
- data/src/core/lib/gpr/env_linux.cc +75 -0
- data/src/core/lib/gpr/env_posix.cc +46 -0
- data/src/core/lib/gpr/env_windows.cc +74 -0
- data/src/core/lib/gpr/log.cc +140 -0
- data/src/core/lib/gpr/log_android.cc +77 -0
- data/src/core/lib/gpr/log_linux.cc +114 -0
- data/src/core/lib/gpr/log_posix.cc +110 -0
- data/src/core/lib/gpr/log_windows.cc +116 -0
- data/src/core/lib/gpr/murmur_hash.cc +82 -0
- data/src/core/lib/gpr/murmur_hash.h +29 -0
- data/src/core/lib/gpr/spinlock.h +53 -0
- data/src/core/lib/gpr/string.cc +343 -0
- data/src/core/lib/gpr/string.h +112 -0
- data/src/core/lib/gpr/string_posix.cc +72 -0
- data/src/core/lib/gpr/string_util_windows.cc +82 -0
- data/src/core/lib/gpr/string_windows.cc +69 -0
- data/src/core/lib/gpr/string_windows.h +32 -0
- data/src/core/lib/gpr/sync.cc +124 -0
- data/src/core/lib/gpr/sync_abseil.cc +114 -0
- data/src/core/lib/gpr/sync_posix.cc +171 -0
- data/src/core/lib/gpr/sync_windows.cc +120 -0
- data/src/core/lib/gpr/time.cc +265 -0
- data/src/core/lib/gpr/time_posix.cc +186 -0
- data/src/core/lib/gpr/time_precise.cc +168 -0
- data/src/core/lib/gpr/time_precise.h +70 -0
- data/src/core/lib/gpr/time_windows.cc +99 -0
- data/src/core/lib/gpr/tls.h +158 -0
- data/src/core/lib/gpr/tmpfile.h +32 -0
- data/src/core/lib/gpr/tmpfile_msys.cc +58 -0
- data/src/core/lib/gpr/tmpfile_posix.cc +69 -0
- data/src/core/lib/gpr/tmpfile_windows.cc +69 -0
- data/src/core/lib/gpr/useful.h +131 -0
- data/src/core/lib/gpr/wrap_memcpy.cc +43 -0
- data/src/core/lib/gprpp/atomic_utils.h +47 -0
- data/src/core/lib/gprpp/bitset.h +207 -0
- data/src/core/lib/gprpp/capture.h +76 -0
- data/src/core/lib/gprpp/chunked_vector.h +253 -0
- data/src/core/lib/gprpp/construct_destruct.h +39 -0
- data/src/core/lib/gprpp/cpp_impl_of.h +49 -0
- data/src/core/lib/gprpp/debug_location.h +55 -0
- data/src/core/lib/gprpp/dual_ref_counted.h +330 -0
- data/src/core/lib/gprpp/examine_stack.cc +43 -0
- data/src/core/lib/gprpp/examine_stack.h +46 -0
- data/src/core/lib/gprpp/fork.cc +244 -0
- data/src/core/lib/gprpp/fork.h +103 -0
- data/src/core/lib/gprpp/global_config.h +95 -0
- data/src/core/lib/gprpp/global_config_custom.h +29 -0
- data/src/core/lib/gprpp/global_config_env.cc +137 -0
- data/src/core/lib/gprpp/global_config_env.h +131 -0
- data/src/core/lib/gprpp/global_config_generic.h +44 -0
- data/src/core/lib/gprpp/host_port.cc +112 -0
- data/src/core/lib/gprpp/host_port.h +56 -0
- data/src/core/lib/gprpp/manual_constructor.h +215 -0
- data/src/core/lib/gprpp/match.h +73 -0
- data/src/core/lib/gprpp/memory.h +57 -0
- data/src/core/lib/gprpp/mpscq.cc +108 -0
- data/src/core/lib/gprpp/mpscq.h +99 -0
- data/src/core/lib/gprpp/orphanable.h +125 -0
- data/src/core/lib/gprpp/overload.h +59 -0
- data/src/core/lib/gprpp/ref_counted.h +351 -0
- data/src/core/lib/gprpp/ref_counted_ptr.h +351 -0
- data/src/core/lib/gprpp/single_set_ptr.h +87 -0
- data/src/core/lib/gprpp/stat.h +38 -0
- data/src/core/lib/gprpp/stat_posix.cc +49 -0
- data/src/core/lib/gprpp/stat_windows.cc +48 -0
- data/src/core/lib/gprpp/status_helper.cc +435 -0
- data/src/core/lib/gprpp/status_helper.h +181 -0
- data/src/core/lib/gprpp/sync.h +198 -0
- data/src/core/lib/gprpp/table.h +434 -0
- data/src/core/lib/gprpp/thd.h +174 -0
- data/src/core/lib/gprpp/thd_posix.cc +209 -0
- data/src/core/lib/gprpp/thd_windows.cc +171 -0
- data/src/core/lib/gprpp/time.cc +198 -0
- data/src/core/lib/gprpp/time.h +292 -0
- data/src/core/lib/gprpp/time_util.cc +77 -0
- data/src/core/lib/gprpp/time_util.h +42 -0
- data/src/core/lib/http/format_request.cc +107 -0
- data/src/core/lib/http/format_request.h +36 -0
- data/src/core/lib/http/httpcli.cc +396 -0
- data/src/core/lib/http/httpcli.h +223 -0
- data/src/core/lib/http/httpcli_security_connector.cc +204 -0
- data/src/core/lib/http/httpcli_ssl_credentials.h +37 -0
- data/src/core/lib/http/parser.cc +463 -0
- data/src/core/lib/http/parser.h +127 -0
- data/src/core/lib/iomgr/block_annotate.h +57 -0
- data/src/core/lib/iomgr/buffer_list.cc +307 -0
- data/src/core/lib/iomgr/buffer_list.h +163 -0
- data/src/core/lib/iomgr/call_combiner.cc +291 -0
- data/src/core/lib/iomgr/call_combiner.h +215 -0
- data/src/core/lib/iomgr/cfstream_handle.cc +210 -0
- data/src/core/lib/iomgr/cfstream_handle.h +90 -0
- data/src/core/lib/iomgr/closure.h +276 -0
- data/src/core/lib/iomgr/combiner.cc +350 -0
- data/src/core/lib/iomgr/combiner.h +89 -0
- data/src/core/lib/iomgr/dualstack_socket_posix.cc +48 -0
- data/src/core/lib/iomgr/dynamic_annotations.h +67 -0
- data/src/core/lib/iomgr/endpoint.cc +67 -0
- data/src/core/lib/iomgr/endpoint.h +107 -0
- data/src/core/lib/iomgr/endpoint_cfstream.cc +372 -0
- data/src/core/lib/iomgr/endpoint_cfstream.h +49 -0
- data/src/core/lib/iomgr/endpoint_pair.h +34 -0
- data/src/core/lib/iomgr/endpoint_pair_event_engine.cc +32 -0
- data/src/core/lib/iomgr/endpoint_pair_posix.cc +75 -0
- data/src/core/lib/iomgr/endpoint_pair_windows.cc +86 -0
- data/src/core/lib/iomgr/error.cc +988 -0
- data/src/core/lib/iomgr/error.h +440 -0
- data/src/core/lib/iomgr/error_cfstream.cc +59 -0
- data/src/core/lib/iomgr/error_cfstream.h +31 -0
- data/src/core/lib/iomgr/error_internal.h +66 -0
- data/src/core/lib/iomgr/ev_apple.cc +360 -0
- data/src/core/lib/iomgr/ev_apple.h +43 -0
- data/src/core/lib/iomgr/ev_epoll1_linux.cc +1365 -0
- data/src/core/lib/iomgr/ev_epoll1_linux.h +31 -0
- data/src/core/lib/iomgr/ev_poll_posix.cc +1430 -0
- data/src/core/lib/iomgr/ev_poll_posix.h +29 -0
- data/src/core/lib/iomgr/ev_posix.cc +416 -0
- data/src/core/lib/iomgr/ev_posix.h +207 -0
- data/src/core/lib/iomgr/ev_windows.cc +30 -0
- data/src/core/lib/iomgr/event_engine/closure.cc +77 -0
- data/src/core/lib/iomgr/event_engine/closure.h +42 -0
- data/src/core/lib/iomgr/event_engine/endpoint.cc +172 -0
- data/src/core/lib/iomgr/event_engine/endpoint.h +52 -0
- data/src/core/lib/iomgr/event_engine/iomgr.cc +85 -0
- data/src/core/lib/iomgr/event_engine/pollset.cc +87 -0
- data/src/core/lib/iomgr/event_engine/pollset.h +25 -0
- data/src/core/lib/iomgr/event_engine/promise.h +51 -0
- data/src/core/lib/iomgr/event_engine/resolved_address_internal.cc +47 -0
- data/src/core/lib/iomgr/event_engine/resolved_address_internal.h +37 -0
- data/src/core/lib/iomgr/event_engine/resolver.cc +133 -0
- data/src/core/lib/iomgr/event_engine/resolver.h +56 -0
- data/src/core/lib/iomgr/event_engine/tcp.cc +296 -0
- data/src/core/lib/iomgr/event_engine/timer.cc +62 -0
- data/src/core/lib/iomgr/exec_ctx.cc +155 -0
- data/src/core/lib/iomgr/exec_ctx.h +359 -0
- data/src/core/lib/iomgr/executor/mpmcqueue.cc +182 -0
- data/src/core/lib/iomgr/executor/mpmcqueue.h +171 -0
- data/src/core/lib/iomgr/executor/threadpool.cc +136 -0
- data/src/core/lib/iomgr/executor/threadpool.h +150 -0
- data/src/core/lib/iomgr/executor.cc +461 -0
- data/src/core/lib/iomgr/executor.h +122 -0
- data/src/core/lib/iomgr/fork_posix.cc +120 -0
- data/src/core/lib/iomgr/fork_windows.cc +41 -0
- data/src/core/lib/iomgr/gethostname.h +26 -0
- data/src/core/lib/iomgr/gethostname_fallback.cc +30 -0
- data/src/core/lib/iomgr/gethostname_host_name_max.cc +40 -0
- data/src/core/lib/iomgr/gethostname_sysconf.cc +40 -0
- data/src/core/lib/iomgr/grpc_if_nametoindex.h +30 -0
- data/src/core/lib/iomgr/grpc_if_nametoindex_posix.cc +42 -0
- data/src/core/lib/iomgr/grpc_if_nametoindex_unsupported.cc +38 -0
- data/src/core/lib/iomgr/internal_errqueue.cc +68 -0
- data/src/core/lib/iomgr/internal_errqueue.h +191 -0
- data/src/core/lib/iomgr/iocp_windows.cc +158 -0
- data/src/core/lib/iomgr/iocp_windows.h +48 -0
- data/src/core/lib/iomgr/iomgr.cc +196 -0
- data/src/core/lib/iomgr/iomgr.h +60 -0
- data/src/core/lib/iomgr/iomgr_internal.cc +53 -0
- data/src/core/lib/iomgr/iomgr_internal.h +74 -0
- data/src/core/lib/iomgr/iomgr_posix.cc +90 -0
- data/src/core/lib/iomgr/iomgr_posix_cfstream.cc +200 -0
- data/src/core/lib/iomgr/iomgr_windows.cc +105 -0
- data/src/core/lib/iomgr/load_file.cc +81 -0
- data/src/core/lib/iomgr/load_file.h +35 -0
- data/src/core/lib/iomgr/lockfree_event.cc +278 -0
- data/src/core/lib/iomgr/lockfree_event.h +72 -0
- data/src/core/lib/iomgr/nameser.h +106 -0
- data/src/core/lib/iomgr/polling_entity.cc +96 -0
- data/src/core/lib/iomgr/polling_entity.h +74 -0
- data/src/core/lib/iomgr/pollset.cc +56 -0
- data/src/core/lib/iomgr/pollset.h +99 -0
- data/src/core/lib/iomgr/pollset_set.cc +55 -0
- data/src/core/lib/iomgr/pollset_set.h +55 -0
- data/src/core/lib/iomgr/pollset_set_windows.cc +52 -0
- data/src/core/lib/iomgr/pollset_set_windows.h +26 -0
- data/src/core/lib/iomgr/pollset_windows.cc +243 -0
- data/src/core/lib/iomgr/pollset_windows.h +70 -0
- data/src/core/lib/iomgr/port.h +216 -0
- data/src/core/lib/iomgr/python_util.h +47 -0
- data/src/core/lib/iomgr/resolve_address.cc +36 -0
- data/src/core/lib/iomgr/resolve_address.h +86 -0
- data/src/core/lib/iomgr/resolve_address_impl.h +59 -0
- data/src/core/lib/iomgr/resolve_address_posix.cc +186 -0
- data/src/core/lib/iomgr/resolve_address_posix.h +47 -0
- data/src/core/lib/iomgr/resolve_address_windows.cc +171 -0
- data/src/core/lib/iomgr/resolve_address_windows.h +47 -0
- data/src/core/lib/iomgr/resolved_address.h +39 -0
- data/src/core/lib/iomgr/sockaddr.h +33 -0
- data/src/core/lib/iomgr/sockaddr_posix.h +55 -0
- data/src/core/lib/iomgr/sockaddr_utils_posix.cc +62 -0
- data/src/core/lib/iomgr/sockaddr_windows.h +55 -0
- data/src/core/lib/iomgr/socket_factory_posix.cc +95 -0
- data/src/core/lib/iomgr/socket_factory_posix.h +69 -0
- data/src/core/lib/iomgr/socket_mutator.cc +97 -0
- data/src/core/lib/iomgr/socket_mutator.h +84 -0
- data/src/core/lib/iomgr/socket_utils.h +47 -0
- data/src/core/lib/iomgr/socket_utils_common_posix.cc +498 -0
- data/src/core/lib/iomgr/socket_utils_linux.cc +42 -0
- data/src/core/lib/iomgr/socket_utils_posix.cc +58 -0
- data/src/core/lib/iomgr/socket_utils_posix.h +163 -0
- data/src/core/lib/iomgr/socket_utils_windows.cc +47 -0
- data/src/core/lib/iomgr/socket_windows.cc +202 -0
- data/src/core/lib/iomgr/socket_windows.h +127 -0
- data/src/core/lib/iomgr/tcp_client.cc +36 -0
- data/src/core/lib/iomgr/tcp_client.h +55 -0
- data/src/core/lib/iomgr/tcp_client_cfstream.cc +197 -0
- data/src/core/lib/iomgr/tcp_client_posix.cc +344 -0
- data/src/core/lib/iomgr/tcp_client_posix.h +69 -0
- data/src/core/lib/iomgr/tcp_client_windows.cc +232 -0
- data/src/core/lib/iomgr/tcp_posix.cc +1902 -0
- data/src/core/lib/iomgr/tcp_posix.h +65 -0
- data/src/core/lib/iomgr/tcp_server.cc +77 -0
- data/src/core/lib/iomgr/tcp_server.h +147 -0
- data/src/core/lib/iomgr/tcp_server_posix.cc +650 -0
- data/src/core/lib/iomgr/tcp_server_utils_posix.h +129 -0
- data/src/core/lib/iomgr/tcp_server_utils_posix_common.cc +224 -0
- data/src/core/lib/iomgr/tcp_server_utils_posix_ifaddrs.cc +176 -0
- data/src/core/lib/iomgr/tcp_server_utils_posix_noifaddrs.cc +36 -0
- data/src/core/lib/iomgr/tcp_server_windows.cc +561 -0
- data/src/core/lib/iomgr/tcp_windows.cc +532 -0
- data/src/core/lib/iomgr/tcp_windows.h +53 -0
- data/src/core/lib/iomgr/time_averaged_stats.cc +64 -0
- data/src/core/lib/iomgr/time_averaged_stats.h +72 -0
- data/src/core/lib/iomgr/timer.cc +46 -0
- data/src/core/lib/iomgr/timer.h +136 -0
- data/src/core/lib/iomgr/timer_generic.cc +737 -0
- data/src/core/lib/iomgr/timer_generic.h +40 -0
- data/src/core/lib/iomgr/timer_heap.cc +134 -0
- data/src/core/lib/iomgr/timer_heap.h +43 -0
- data/src/core/lib/iomgr/timer_manager.cc +364 -0
- data/src/core/lib/iomgr/timer_manager.h +41 -0
- data/src/core/lib/iomgr/unix_sockets_posix.cc +96 -0
- data/src/core/lib/iomgr/unix_sockets_posix.h +46 -0
- data/src/core/lib/iomgr/unix_sockets_posix_noop.cc +53 -0
- data/src/core/lib/iomgr/wakeup_fd_eventfd.cc +82 -0
- data/src/core/lib/iomgr/wakeup_fd_nospecial.cc +39 -0
- data/src/core/lib/iomgr/wakeup_fd_pipe.cc +99 -0
- data/src/core/lib/iomgr/wakeup_fd_pipe.h +28 -0
- data/src/core/lib/iomgr/wakeup_fd_posix.cc +70 -0
- data/src/core/lib/iomgr/wakeup_fd_posix.h +98 -0
- data/src/core/lib/iomgr/work_serializer.cc +231 -0
- data/src/core/lib/iomgr/work_serializer.h +93 -0
- data/src/core/lib/json/json.h +250 -0
- data/src/core/lib/json/json_reader.cc +897 -0
- data/src/core/lib/json/json_util.cc +126 -0
- data/src/core/lib/json/json_util.h +154 -0
- data/src/core/lib/json/json_writer.cc +335 -0
- data/src/core/lib/matchers/matchers.cc +327 -0
- data/src/core/lib/matchers/matchers.h +160 -0
- data/src/core/lib/profiling/basic_timers.cc +295 -0
- data/src/core/lib/profiling/stap_timers.cc +50 -0
- data/src/core/lib/profiling/timers.h +94 -0
- data/src/core/lib/promise/activity.cc +121 -0
- data/src/core/lib/promise/activity.h +540 -0
- data/src/core/lib/promise/arena_promise.h +188 -0
- data/src/core/lib/promise/call_push_pull.h +144 -0
- data/src/core/lib/promise/context.h +86 -0
- data/src/core/lib/promise/detail/basic_seq.h +496 -0
- data/src/core/lib/promise/detail/promise_factory.h +189 -0
- data/src/core/lib/promise/detail/promise_like.h +85 -0
- data/src/core/lib/promise/detail/status.h +50 -0
- data/src/core/lib/promise/detail/switch.h +1455 -0
- data/src/core/lib/promise/exec_ctx_wakeup_scheduler.h +48 -0
- data/src/core/lib/promise/intra_activity_waiter.h +49 -0
- data/src/core/lib/promise/latch.h +104 -0
- data/src/core/lib/promise/loop.h +134 -0
- data/src/core/lib/promise/map.h +88 -0
- data/src/core/lib/promise/poll.h +66 -0
- data/src/core/lib/promise/promise.h +95 -0
- data/src/core/lib/promise/race.h +84 -0
- data/src/core/lib/promise/seq.h +89 -0
- data/src/core/lib/promise/sleep.cc +74 -0
- data/src/core/lib/promise/sleep.h +66 -0
- data/src/core/lib/promise/try_seq.h +157 -0
- data/src/core/lib/resolver/resolver.cc +79 -0
- data/src/core/lib/resolver/resolver.h +135 -0
- data/src/core/lib/resolver/resolver_factory.h +76 -0
- data/src/core/lib/resolver/resolver_registry.cc +156 -0
- data/src/core/lib/resolver/resolver_registry.h +113 -0
- data/src/core/lib/resolver/server_address.cc +170 -0
- data/src/core/lib/resolver/server_address.h +144 -0
- data/src/core/lib/resource_quota/api.cc +83 -0
- data/src/core/lib/resource_quota/api.h +40 -0
- data/src/core/lib/resource_quota/arena.cc +107 -0
- data/src/core/lib/resource_quota/arena.h +142 -0
- data/src/core/lib/resource_quota/memory_quota.cc +478 -0
- data/src/core/lib/resource_quota/memory_quota.h +457 -0
- data/src/core/lib/resource_quota/resource_quota.cc +33 -0
- data/src/core/lib/resource_quota/resource_quota.h +66 -0
- data/src/core/lib/resource_quota/thread_quota.cc +43 -0
- data/src/core/lib/resource_quota/thread_quota.h +57 -0
- data/src/core/lib/resource_quota/trace.cc +19 -0
- data/src/core/lib/resource_quota/trace.h +24 -0
- data/src/core/lib/security/authorization/authorization_engine.h +44 -0
- data/src/core/lib/security/authorization/authorization_policy_provider.h +40 -0
- data/src/core/lib/security/authorization/authorization_policy_provider_vtable.cc +46 -0
- data/src/core/lib/security/authorization/evaluate_args.cc +212 -0
- data/src/core/lib/security/authorization/evaluate_args.h +92 -0
- data/src/core/lib/security/authorization/grpc_authorization_engine.cc +60 -0
- data/src/core/lib/security/authorization/grpc_authorization_engine.h +62 -0
- data/src/core/lib/security/authorization/grpc_server_authz_filter.cc +106 -0
- data/src/core/lib/security/authorization/grpc_server_authz_filter.h +50 -0
- data/src/core/lib/security/authorization/matchers.cc +227 -0
- data/src/core/lib/security/authorization/matchers.h +211 -0
- data/src/core/lib/security/authorization/rbac_policy.cc +442 -0
- data/src/core/lib/security/authorization/rbac_policy.h +171 -0
- data/src/core/lib/security/context/security_context.cc +327 -0
- data/src/core/lib/security/context/security_context.h +159 -0
- data/src/core/lib/security/credentials/alts/alts_credentials.cc +112 -0
- data/src/core/lib/security/credentials/alts/alts_credentials.h +119 -0
- data/src/core/lib/security/credentials/alts/check_gcp_environment.cc +72 -0
- data/src/core/lib/security/credentials/alts/check_gcp_environment.h +57 -0
- data/src/core/lib/security/credentials/alts/check_gcp_environment_linux.cc +68 -0
- data/src/core/lib/security/credentials/alts/check_gcp_environment_no_op.cc +33 -0
- data/src/core/lib/security/credentials/alts/check_gcp_environment_windows.cc +102 -0
- data/src/core/lib/security/credentials/alts/grpc_alts_credentials_client_options.cc +127 -0
- data/src/core/lib/security/credentials/alts/grpc_alts_credentials_options.cc +46 -0
- data/src/core/lib/security/credentials/alts/grpc_alts_credentials_options.h +75 -0
- data/src/core/lib/security/credentials/alts/grpc_alts_credentials_server_options.cc +59 -0
- data/src/core/lib/security/credentials/call_creds_util.cc +87 -0
- data/src/core/lib/security/credentials/call_creds_util.h +42 -0
- data/src/core/lib/security/credentials/channel_creds_registry.h +97 -0
- data/src/core/lib/security/credentials/channel_creds_registry_init.cc +70 -0
- data/src/core/lib/security/credentials/composite/composite_credentials.cc +171 -0
- data/src/core/lib/security/credentials/composite/composite_credentials.h +119 -0
- data/src/core/lib/security/credentials/credentials.cc +163 -0
- data/src/core/lib/security/credentials/credentials.h +285 -0
- data/src/core/lib/security/credentials/external/aws_external_account_credentials.cc +419 -0
- data/src/core/lib/security/credentials/external/aws_external_account_credentials.h +82 -0
- data/src/core/lib/security/credentials/external/aws_request_signer.cc +214 -0
- data/src/core/lib/security/credentials/external/aws_request_signer.h +72 -0
- data/src/core/lib/security/credentials/external/external_account_credentials.cc +544 -0
- data/src/core/lib/security/credentials/external/external_account_credentials.h +118 -0
- data/src/core/lib/security/credentials/external/file_external_account_credentials.cc +135 -0
- data/src/core/lib/security/credentials/external/file_external_account_credentials.h +49 -0
- data/src/core/lib/security/credentials/external/url_external_account_credentials.cc +230 -0
- data/src/core/lib/security/credentials/external/url_external_account_credentials.h +61 -0
- data/src/core/lib/security/credentials/fake/fake_credentials.cc +109 -0
- data/src/core/lib/security/credentials/fake/fake_credentials.h +88 -0
- data/src/core/lib/security/credentials/google_default/credentials_generic.cc +42 -0
- data/src/core/lib/security/credentials/google_default/google_default_credentials.cc +470 -0
- data/src/core/lib/security/credentials/google_default/google_default_credentials.h +93 -0
- data/src/core/lib/security/credentials/iam/iam_credentials.cc +74 -0
- data/src/core/lib/security/credentials/iam/iam_credentials.h +55 -0
- data/src/core/lib/security/credentials/insecure/insecure_credentials.cc +63 -0
- data/src/core/lib/security/credentials/insecure/insecure_credentials.h +57 -0
- data/src/core/lib/security/credentials/jwt/json_token.cc +286 -0
- data/src/core/lib/security/credentials/jwt/json_token.h +76 -0
- data/src/core/lib/security/credentials/jwt/jwt_credentials.cc +180 -0
- data/src/core/lib/security/credentials/jwt/jwt_credentials.h +93 -0
- data/src/core/lib/security/credentials/jwt/jwt_verifier.cc +933 -0
- data/src/core/lib/security/credentials/jwt/jwt_verifier.h +122 -0
- data/src/core/lib/security/credentials/local/local_credentials.cc +65 -0
- data/src/core/lib/security/credentials/local/local_credentials.h +71 -0
- data/src/core/lib/security/credentials/oauth2/oauth2_credentials.cc +736 -0
- data/src/core/lib/security/credentials/oauth2/oauth2_credentials.h +200 -0
- data/src/core/lib/security/credentials/plugin/plugin_credentials.cc +211 -0
- data/src/core/lib/security/credentials/plugin/plugin_credentials.h +101 -0
- data/src/core/lib/security/credentials/ssl/ssl_credentials.cc +378 -0
- data/src/core/lib/security/credentials/ssl/ssl_credentials.h +119 -0
- data/src/core/lib/security/credentials/tls/grpc_tls_certificate_distributor.cc +348 -0
- data/src/core/lib/security/credentials/tls/grpc_tls_certificate_distributor.h +217 -0
- data/src/core/lib/security/credentials/tls/grpc_tls_certificate_provider.cc +454 -0
- data/src/core/lib/security/credentials/tls/grpc_tls_certificate_provider.h +195 -0
- data/src/core/lib/security/credentials/tls/grpc_tls_certificate_verifier.cc +209 -0
- data/src/core/lib/security/credentials/tls/grpc_tls_certificate_verifier.h +145 -0
- data/src/core/lib/security/credentials/tls/grpc_tls_credentials_options.cc +123 -0
- data/src/core/lib/security/credentials/tls/grpc_tls_credentials_options.h +117 -0
- data/src/core/lib/security/credentials/tls/tls_credentials.cc +147 -0
- data/src/core/lib/security/credentials/tls/tls_credentials.h +68 -0
- data/src/core/lib/security/credentials/tls/tls_utils.cc +123 -0
- data/src/core/lib/security/credentials/tls/tls_utils.h +51 -0
- data/src/core/lib/security/credentials/xds/xds_credentials.cc +237 -0
- data/src/core/lib/security/credentials/xds/xds_credentials.h +100 -0
- data/src/core/lib/security/security_connector/alts/alts_security_connector.cc +305 -0
- data/src/core/lib/security/security_connector/alts/alts_security_connector.h +76 -0
- data/src/core/lib/security/security_connector/fake/fake_security_connector.cc +318 -0
- data/src/core/lib/security/security_connector/fake/fake_security_connector.h +43 -0
- data/src/core/lib/security/security_connector/insecure/insecure_security_connector.cc +111 -0
- data/src/core/lib/security/security_connector/insecure/insecure_security_connector.h +92 -0
- data/src/core/lib/security/security_connector/load_system_roots.h +33 -0
- data/src/core/lib/security/security_connector/load_system_roots_fallback.cc +33 -0
- data/src/core/lib/security/security_connector/load_system_roots_linux.cc +170 -0
- data/src/core/lib/security/security_connector/load_system_roots_linux.h +46 -0
- data/src/core/lib/security/security_connector/local/local_security_connector.cc +289 -0
- data/src/core/lib/security/security_connector/local/local_security_connector.h +59 -0
- data/src/core/lib/security/security_connector/security_connector.cc +125 -0
- data/src/core/lib/security/security_connector/security_connector.h +187 -0
- data/src/core/lib/security/security_connector/ssl/ssl_security_connector.cc +450 -0
- data/src/core/lib/security/security_connector/ssl/ssl_security_connector.h +81 -0
- data/src/core/lib/security/security_connector/ssl_utils.cc +617 -0
- data/src/core/lib/security/security_connector/ssl_utils.h +184 -0
- data/src/core/lib/security/security_connector/ssl_utils_config.cc +32 -0
- data/src/core/lib/security/security_connector/ssl_utils_config.h +30 -0
- data/src/core/lib/security/security_connector/tls/tls_security_connector.cc +826 -0
- data/src/core/lib/security/security_connector/tls/tls_security_connector.h +266 -0
- data/src/core/lib/security/transport/auth_filters.h +69 -0
- data/src/core/lib/security/transport/client_auth_filter.cc +210 -0
- data/src/core/lib/security/transport/secure_endpoint.cc +511 -0
- data/src/core/lib/security/transport/secure_endpoint.h +42 -0
- data/src/core/lib/security/transport/security_handshaker.cc +652 -0
- data/src/core/lib/security/transport/security_handshaker.h +46 -0
- data/src/core/lib/security/transport/server_auth_filter.cc +337 -0
- data/src/core/lib/security/transport/tsi_error.cc +28 -0
- data/src/core/lib/security/transport/tsi_error.h +30 -0
- data/src/core/lib/security/util/json_util.cc +70 -0
- data/src/core/lib/security/util/json_util.h +45 -0
- data/src/core/lib/service_config/service_config.h +82 -0
- data/src/core/lib/service_config/service_config_call_data.h +72 -0
- data/src/core/lib/service_config/service_config_impl.cc +230 -0
- data/src/core/lib/service_config/service_config_impl.h +125 -0
- data/src/core/lib/service_config/service_config_parser.cc +93 -0
- data/src/core/lib/service_config/service_config_parser.h +106 -0
- data/src/core/lib/slice/b64.cc +239 -0
- data/src/core/lib/slice/b64.h +50 -0
- data/src/core/lib/slice/percent_encoding.cc +156 -0
- data/src/core/lib/slice/percent_encoding.h +60 -0
- data/src/core/lib/slice/slice.cc +489 -0
- data/src/core/lib/slice/slice.h +384 -0
- data/src/core/lib/slice/slice_api.cc +39 -0
- data/src/core/lib/slice/slice_buffer.cc +417 -0
- data/src/core/lib/slice/slice_internal.h +104 -0
- data/src/core/lib/slice/slice_refcount.cc +35 -0
- data/src/core/lib/slice/slice_refcount.h +46 -0
- data/src/core/lib/slice/slice_refcount_base.h +61 -0
- data/src/core/lib/slice/slice_split.cc +100 -0
- data/src/core/lib/slice/slice_split.h +40 -0
- data/src/core/lib/slice/slice_string_helpers.cc +44 -0
- data/src/core/lib/slice/slice_string_helpers.h +38 -0
- data/src/core/lib/surface/api_trace.cc +25 -0
- data/src/core/lib/surface/api_trace.h +53 -0
- data/src/core/lib/surface/builtins.cc +49 -0
- data/src/core/lib/surface/builtins.h +26 -0
- data/src/core/lib/surface/byte_buffer.cc +92 -0
- data/src/core/lib/surface/byte_buffer_reader.cc +101 -0
- data/src/core/lib/surface/call.cc +1967 -0
- data/src/core/lib/surface/call.h +117 -0
- data/src/core/lib/surface/call_details.cc +41 -0
- data/src/core/lib/surface/call_log_batch.cc +111 -0
- data/src/core/lib/surface/call_test_only.h +43 -0
- data/src/core/lib/surface/channel.cc +504 -0
- data/src/core/lib/surface/channel.h +167 -0
- data/src/core/lib/surface/channel_init.cc +55 -0
- data/src/core/lib/surface/channel_init.h +82 -0
- data/src/core/lib/surface/channel_ping.cc +63 -0
- data/src/core/lib/surface/channel_stack_type.cc +59 -0
- data/src/core/lib/surface/channel_stack_type.h +47 -0
- data/src/core/lib/surface/completion_queue.cc +1430 -0
- data/src/core/lib/surface/completion_queue.h +98 -0
- data/src/core/lib/surface/completion_queue_factory.cc +88 -0
- data/src/core/lib/surface/completion_queue_factory.h +39 -0
- data/src/core/lib/surface/event_string.cc +62 -0
- data/src/core/lib/surface/event_string.h +31 -0
- data/src/core/lib/surface/init.cc +288 -0
- data/src/core/lib/surface/init.h +33 -0
- data/src/core/lib/surface/lame_client.cc +199 -0
- data/src/core/lib/surface/lame_client.h +33 -0
- data/src/core/lib/surface/metadata_array.cc +36 -0
- data/src/core/lib/surface/server.cc +1569 -0
- data/src/core/lib/surface/server.h +495 -0
- data/src/core/lib/surface/validate_metadata.cc +136 -0
- data/src/core/lib/surface/validate_metadata.h +45 -0
- data/src/core/lib/surface/version.cc +28 -0
- data/src/core/lib/transport/bdp_estimator.cc +86 -0
- data/src/core/lib/transport/bdp_estimator.h +95 -0
- data/src/core/lib/transport/byte_stream.cc +164 -0
- data/src/core/lib/transport/byte_stream.h +166 -0
- data/src/core/lib/transport/connectivity_state.cc +188 -0
- data/src/core/lib/transport/connectivity_state.h +145 -0
- data/src/core/lib/transport/error_utils.cc +193 -0
- data/src/core/lib/transport/error_utils.h +59 -0
- data/src/core/lib/transport/http2_errors.h +41 -0
- data/src/core/lib/transport/metadata_batch.h +1394 -0
- data/src/core/lib/transport/parsed_metadata.cc +37 -0
- data/src/core/lib/transport/parsed_metadata.h +401 -0
- data/src/core/lib/transport/pid_controller.cc +51 -0
- data/src/core/lib/transport/pid_controller.h +116 -0
- data/src/core/lib/transport/status_conversion.cc +92 -0
- data/src/core/lib/transport/status_conversion.h +38 -0
- data/src/core/lib/transport/timeout_encoding.cc +288 -0
- data/src/core/lib/transport/timeout_encoding.h +68 -0
- data/src/core/lib/transport/transport.cc +241 -0
- data/src/core/lib/transport/transport.h +570 -0
- data/src/core/lib/transport/transport_impl.h +85 -0
- data/src/core/lib/transport/transport_op_string.cc +147 -0
- data/src/core/lib/uri/uri_parser.cc +365 -0
- data/src/core/lib/uri/uri_parser.h +103 -0
- data/src/core/plugin_registry/grpc_plugin_registry.cc +129 -0
- data/src/core/plugin_registry/grpc_plugin_registry_extra.cc +85 -0
- data/src/core/tsi/alts/crypt/aes_gcm.cc +690 -0
- data/src/core/tsi/alts/crypt/gsec.cc +190 -0
- data/src/core/tsi/alts/crypt/gsec.h +459 -0
- data/src/core/tsi/alts/frame_protector/alts_counter.cc +118 -0
- data/src/core/tsi/alts/frame_protector/alts_counter.h +98 -0
- data/src/core/tsi/alts/frame_protector/alts_crypter.cc +66 -0
- data/src/core/tsi/alts/frame_protector/alts_crypter.h +255 -0
- data/src/core/tsi/alts/frame_protector/alts_frame_protector.cc +408 -0
- data/src/core/tsi/alts/frame_protector/alts_frame_protector.h +55 -0
- data/src/core/tsi/alts/frame_protector/alts_record_protocol_crypter_common.cc +114 -0
- data/src/core/tsi/alts/frame_protector/alts_record_protocol_crypter_common.h +114 -0
- data/src/core/tsi/alts/frame_protector/alts_seal_privacy_integrity_crypter.cc +105 -0
- data/src/core/tsi/alts/frame_protector/alts_unseal_privacy_integrity_crypter.cc +103 -0
- data/src/core/tsi/alts/frame_protector/frame_handler.cc +219 -0
- data/src/core/tsi/alts/frame_protector/frame_handler.h +236 -0
- data/src/core/tsi/alts/handshaker/alts_handshaker_client.cc +908 -0
- data/src/core/tsi/alts/handshaker/alts_handshaker_client.h +160 -0
- data/src/core/tsi/alts/handshaker/alts_shared_resource.cc +91 -0
- data/src/core/tsi/alts/handshaker/alts_shared_resource.h +73 -0
- data/src/core/tsi/alts/handshaker/alts_tsi_handshaker.cc +713 -0
- data/src/core/tsi/alts/handshaker/alts_tsi_handshaker.h +104 -0
- data/src/core/tsi/alts/handshaker/alts_tsi_handshaker_private.h +89 -0
- data/src/core/tsi/alts/handshaker/alts_tsi_utils.cc +64 -0
- data/src/core/tsi/alts/handshaker/alts_tsi_utils.h +53 -0
- data/src/core/tsi/alts/handshaker/transport_security_common_api.cc +223 -0
- data/src/core/tsi/alts/handshaker/transport_security_common_api.h +171 -0
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_integrity_only_record_protocol.cc +226 -0
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_integrity_only_record_protocol.h +54 -0
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_privacy_integrity_record_protocol.cc +144 -0
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_privacy_integrity_record_protocol.h +49 -0
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_record_protocol.h +91 -0
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_record_protocol_common.cc +174 -0
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_record_protocol_common.h +99 -0
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_iovec_record_protocol.cc +478 -0
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_iovec_record_protocol.h +199 -0
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_zero_copy_grpc_protector.cc +307 -0
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_zero_copy_grpc_protector.h +57 -0
- data/src/core/tsi/fake_transport_security.cc +809 -0
- data/src/core/tsi/fake_transport_security.h +47 -0
- data/src/core/tsi/local_transport_security.cc +170 -0
- data/src/core/tsi/local_transport_security.h +47 -0
- data/src/core/tsi/ssl/key_logging/ssl_key_logging.cc +141 -0
- data/src/core/tsi/ssl/key_logging/ssl_key_logging.h +81 -0
- data/src/core/tsi/ssl/session_cache/ssl_session.h +69 -0
- data/src/core/tsi/ssl/session_cache/ssl_session_boringssl.cc +57 -0
- data/src/core/tsi/ssl/session_cache/ssl_session_cache.cc +179 -0
- data/src/core/tsi/ssl/session_cache/ssl_session_cache.h +90 -0
- data/src/core/tsi/ssl/session_cache/ssl_session_openssl.cc +75 -0
- data/src/core/tsi/ssl_transport_security.cc +2417 -0
- data/src/core/tsi/ssl_transport_security.h +405 -0
- data/src/core/tsi/ssl_types.h +42 -0
- data/src/core/tsi/transport_security.cc +384 -0
- data/src/core/tsi/transport_security.h +142 -0
- data/src/core/tsi/transport_security_grpc.cc +73 -0
- data/src/core/tsi/transport_security_grpc.h +80 -0
- data/src/core/tsi/transport_security_interface.h +509 -0
- data/src/ruby/ext/grpc/extconf.rb +1 -1
- data/src/ruby/lib/grpc/2.5/grpc_c.so +0 -0
- data/src/ruby/lib/grpc/2.6/grpc_c.so +0 -0
- data/src/ruby/lib/grpc/2.7/grpc_c.so +0 -0
- data/src/ruby/lib/grpc/3.0/grpc_c.so +0 -0
- data/src/ruby/lib/grpc/3.1/grpc_c.so +0 -0
- data/src/ruby/lib/grpc/generic/active_call.rb +7 -1
- data/src/ruby/lib/grpc/grpc.rb +1 -1
- data/src/ruby/lib/grpc/grpc_c.so +0 -0
- data/src/ruby/lib/grpc/version.rb +1 -1
- data/src/ruby/pb/generate_proto_ruby.sh +1 -0
- data/third_party/abseil-cpp/absl/algorithm/algorithm.h +159 -0
- data/third_party/abseil-cpp/absl/algorithm/container.h +1774 -0
- data/third_party/abseil-cpp/absl/base/attributes.h +735 -0
- data/third_party/abseil-cpp/absl/base/call_once.h +219 -0
- data/third_party/abseil-cpp/absl/base/casts.h +187 -0
- data/third_party/abseil-cpp/absl/base/config.h +772 -0
- data/third_party/abseil-cpp/absl/base/const_init.h +76 -0
- data/third_party/abseil-cpp/absl/base/dynamic_annotations.h +471 -0
- data/third_party/abseil-cpp/absl/base/internal/atomic_hook.h +200 -0
- data/third_party/abseil-cpp/absl/base/internal/cycleclock.cc +107 -0
- data/third_party/abseil-cpp/absl/base/internal/cycleclock.h +94 -0
- data/third_party/abseil-cpp/absl/base/internal/direct_mmap.h +169 -0
- data/third_party/abseil-cpp/absl/base/internal/dynamic_annotations.h +398 -0
- data/third_party/abseil-cpp/absl/base/internal/endian.h +327 -0
- data/third_party/abseil-cpp/absl/base/internal/errno_saver.h +43 -0
- data/third_party/abseil-cpp/absl/base/internal/fast_type_id.h +48 -0
- data/third_party/abseil-cpp/absl/base/internal/hide_ptr.h +51 -0
- data/third_party/abseil-cpp/absl/base/internal/identity.h +37 -0
- data/third_party/abseil-cpp/absl/base/internal/inline_variable.h +107 -0
- data/third_party/abseil-cpp/absl/base/internal/invoke.h +187 -0
- data/third_party/abseil-cpp/absl/base/internal/low_level_alloc.cc +620 -0
- data/third_party/abseil-cpp/absl/base/internal/low_level_alloc.h +126 -0
- data/third_party/abseil-cpp/absl/base/internal/low_level_scheduling.h +134 -0
- data/third_party/abseil-cpp/absl/base/internal/per_thread_tls.h +52 -0
- data/third_party/abseil-cpp/absl/base/internal/raw_logging.cc +242 -0
- data/third_party/abseil-cpp/absl/base/internal/raw_logging.h +195 -0
- data/third_party/abseil-cpp/absl/base/internal/scheduling_mode.h +58 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock.cc +229 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock.h +248 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_akaros.inc +35 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_linux.inc +74 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_posix.inc +46 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_wait.cc +81 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_wait.h +95 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_win32.inc +37 -0
- data/third_party/abseil-cpp/absl/base/internal/sysinfo.cc +508 -0
- data/third_party/abseil-cpp/absl/base/internal/sysinfo.h +74 -0
- data/third_party/abseil-cpp/absl/base/internal/thread_annotations.h +271 -0
- data/third_party/abseil-cpp/absl/base/internal/thread_identity.cc +155 -0
- data/third_party/abseil-cpp/absl/base/internal/thread_identity.h +265 -0
- data/third_party/abseil-cpp/absl/base/internal/throw_delegate.cc +212 -0
- data/third_party/abseil-cpp/absl/base/internal/throw_delegate.h +75 -0
- data/third_party/abseil-cpp/absl/base/internal/tsan_mutex_interface.h +68 -0
- data/third_party/abseil-cpp/absl/base/internal/unaligned_access.h +82 -0
- data/third_party/abseil-cpp/absl/base/internal/unscaledcycleclock.cc +154 -0
- data/third_party/abseil-cpp/absl/base/internal/unscaledcycleclock.h +124 -0
- data/third_party/abseil-cpp/absl/base/log_severity.cc +27 -0
- data/third_party/abseil-cpp/absl/base/log_severity.h +121 -0
- data/third_party/abseil-cpp/absl/base/macros.h +158 -0
- data/third_party/abseil-cpp/absl/base/optimization.h +244 -0
- data/third_party/abseil-cpp/absl/base/options.h +238 -0
- data/third_party/abseil-cpp/absl/base/policy_checks.h +111 -0
- data/third_party/abseil-cpp/absl/base/port.h +25 -0
- data/third_party/abseil-cpp/absl/base/thread_annotations.h +335 -0
- data/third_party/abseil-cpp/absl/container/fixed_array.h +527 -0
- data/third_party/abseil-cpp/absl/container/flat_hash_map.h +606 -0
- data/third_party/abseil-cpp/absl/container/inlined_vector.h +855 -0
- data/third_party/abseil-cpp/absl/container/internal/common.h +206 -0
- data/third_party/abseil-cpp/absl/container/internal/compressed_tuple.h +290 -0
- data/third_party/abseil-cpp/absl/container/internal/container_memory.h +460 -0
- data/third_party/abseil-cpp/absl/container/internal/hash_function_defaults.h +163 -0
- data/third_party/abseil-cpp/absl/container/internal/hash_policy_traits.h +208 -0
- data/third_party/abseil-cpp/absl/container/internal/hashtable_debug_hooks.h +85 -0
- data/third_party/abseil-cpp/absl/container/internal/hashtablez_sampler.cc +190 -0
- data/third_party/abseil-cpp/absl/container/internal/hashtablez_sampler.h +281 -0
- data/third_party/abseil-cpp/absl/container/internal/hashtablez_sampler_force_weak_definition.cc +31 -0
- data/third_party/abseil-cpp/absl/container/internal/have_sse.h +50 -0
- data/third_party/abseil-cpp/absl/container/internal/inlined_vector.h +932 -0
- data/third_party/abseil-cpp/absl/container/internal/layout.h +743 -0
- data/third_party/abseil-cpp/absl/container/internal/raw_hash_map.h +198 -0
- data/third_party/abseil-cpp/absl/container/internal/raw_hash_set.cc +67 -0
- data/third_party/abseil-cpp/absl/container/internal/raw_hash_set.h +2034 -0
- data/third_party/abseil-cpp/absl/debugging/internal/address_is_readable.cc +139 -0
- data/third_party/abseil-cpp/absl/debugging/internal/address_is_readable.h +32 -0
- data/third_party/abseil-cpp/absl/debugging/internal/demangle.cc +1959 -0
- data/third_party/abseil-cpp/absl/debugging/internal/demangle.h +71 -0
- data/third_party/abseil-cpp/absl/debugging/internal/elf_mem_image.cc +383 -0
- data/third_party/abseil-cpp/absl/debugging/internal/elf_mem_image.h +138 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_aarch64-inl.inc +199 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_arm-inl.inc +134 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_config.h +87 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_emscripten-inl.inc +110 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_generic-inl.inc +108 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_powerpc-inl.inc +253 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_riscv-inl.inc +234 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_unimplemented-inl.inc +24 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_win32-inl.inc +93 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_x86-inl.inc +364 -0
- data/third_party/abseil-cpp/absl/debugging/internal/symbolize.h +153 -0
- data/third_party/abseil-cpp/absl/debugging/internal/vdso_support.cc +191 -0
- data/third_party/abseil-cpp/absl/debugging/internal/vdso_support.h +158 -0
- data/third_party/abseil-cpp/absl/debugging/stacktrace.cc +142 -0
- data/third_party/abseil-cpp/absl/debugging/stacktrace.h +231 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize.cc +38 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize.h +99 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize_darwin.inc +101 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize_elf.inc +1574 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize_emscripten.inc +72 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize_unimplemented.inc +40 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize_win32.inc +81 -0
- data/third_party/abseil-cpp/absl/functional/bind_front.h +184 -0
- data/third_party/abseil-cpp/absl/functional/function_ref.h +142 -0
- data/third_party/abseil-cpp/absl/functional/internal/front_binder.h +95 -0
- data/third_party/abseil-cpp/absl/functional/internal/function_ref.h +106 -0
- data/third_party/abseil-cpp/absl/hash/hash.h +347 -0
- data/third_party/abseil-cpp/absl/hash/internal/city.cc +349 -0
- data/third_party/abseil-cpp/absl/hash/internal/city.h +78 -0
- data/third_party/abseil-cpp/absl/hash/internal/hash.cc +69 -0
- data/third_party/abseil-cpp/absl/hash/internal/hash.h +1096 -0
- data/third_party/abseil-cpp/absl/hash/internal/low_level_hash.cc +123 -0
- data/third_party/abseil-cpp/absl/hash/internal/low_level_hash.h +50 -0
- data/third_party/abseil-cpp/absl/memory/memory.h +699 -0
- data/third_party/abseil-cpp/absl/meta/type_traits.h +797 -0
- data/third_party/abseil-cpp/absl/numeric/bits.h +177 -0
- data/third_party/abseil-cpp/absl/numeric/int128.cc +383 -0
- data/third_party/abseil-cpp/absl/numeric/int128.h +1165 -0
- data/third_party/abseil-cpp/absl/numeric/int128_have_intrinsic.inc +296 -0
- data/third_party/abseil-cpp/absl/numeric/int128_no_intrinsic.inc +311 -0
- data/third_party/abseil-cpp/absl/numeric/internal/bits.h +358 -0
- data/third_party/abseil-cpp/absl/numeric/internal/representation.h +55 -0
- data/third_party/abseil-cpp/absl/profiling/internal/exponential_biased.cc +93 -0
- data/third_party/abseil-cpp/absl/profiling/internal/exponential_biased.h +130 -0
- data/third_party/abseil-cpp/absl/profiling/internal/sample_recorder.h +230 -0
- data/third_party/abseil-cpp/absl/random/bernoulli_distribution.h +200 -0
- data/third_party/abseil-cpp/absl/random/beta_distribution.h +427 -0
- data/third_party/abseil-cpp/absl/random/discrete_distribution.cc +98 -0
- data/third_party/abseil-cpp/absl/random/discrete_distribution.h +247 -0
- data/third_party/abseil-cpp/absl/random/distributions.h +452 -0
- data/third_party/abseil-cpp/absl/random/exponential_distribution.h +165 -0
- data/third_party/abseil-cpp/absl/random/gaussian_distribution.cc +104 -0
- data/third_party/abseil-cpp/absl/random/gaussian_distribution.h +275 -0
- data/third_party/abseil-cpp/absl/random/internal/distribution_caller.h +92 -0
- data/third_party/abseil-cpp/absl/random/internal/fast_uniform_bits.h +268 -0
- data/third_party/abseil-cpp/absl/random/internal/fastmath.h +57 -0
- data/third_party/abseil-cpp/absl/random/internal/generate_real.h +144 -0
- data/third_party/abseil-cpp/absl/random/internal/iostream_state_saver.h +245 -0
- data/third_party/abseil-cpp/absl/random/internal/nonsecure_base.h +150 -0
- data/third_party/abseil-cpp/absl/random/internal/pcg_engine.h +308 -0
- data/third_party/abseil-cpp/absl/random/internal/platform.h +171 -0
- data/third_party/abseil-cpp/absl/random/internal/pool_urbg.cc +253 -0
- data/third_party/abseil-cpp/absl/random/internal/pool_urbg.h +131 -0
- data/third_party/abseil-cpp/absl/random/internal/randen.cc +91 -0
- data/third_party/abseil-cpp/absl/random/internal/randen.h +102 -0
- data/third_party/abseil-cpp/absl/random/internal/randen_detect.cc +221 -0
- data/third_party/abseil-cpp/absl/random/internal/randen_detect.h +33 -0
- data/third_party/abseil-cpp/absl/random/internal/randen_engine.h +239 -0
- data/third_party/abseil-cpp/absl/random/internal/randen_hwaes.cc +526 -0
- data/third_party/abseil-cpp/absl/random/internal/randen_hwaes.h +50 -0
- data/third_party/abseil-cpp/absl/random/internal/randen_round_keys.cc +462 -0
- data/third_party/abseil-cpp/absl/random/internal/randen_slow.cc +471 -0
- data/third_party/abseil-cpp/absl/random/internal/randen_slow.h +40 -0
- data/third_party/abseil-cpp/absl/random/internal/randen_traits.h +88 -0
- data/third_party/abseil-cpp/absl/random/internal/salted_seed_seq.h +167 -0
- data/third_party/abseil-cpp/absl/random/internal/seed_material.cc +267 -0
- data/third_party/abseil-cpp/absl/random/internal/seed_material.h +104 -0
- data/third_party/abseil-cpp/absl/random/internal/traits.h +101 -0
- data/third_party/abseil-cpp/absl/random/internal/uniform_helper.h +244 -0
- data/third_party/abseil-cpp/absl/random/internal/wide_multiply.h +111 -0
- data/third_party/abseil-cpp/absl/random/log_uniform_int_distribution.h +257 -0
- data/third_party/abseil-cpp/absl/random/poisson_distribution.h +258 -0
- data/third_party/abseil-cpp/absl/random/random.h +189 -0
- data/third_party/abseil-cpp/absl/random/seed_gen_exception.cc +46 -0
- data/third_party/abseil-cpp/absl/random/seed_gen_exception.h +55 -0
- data/third_party/abseil-cpp/absl/random/seed_sequences.cc +29 -0
- data/third_party/abseil-cpp/absl/random/seed_sequences.h +110 -0
- data/third_party/abseil-cpp/absl/random/uniform_int_distribution.h +275 -0
- data/third_party/abseil-cpp/absl/random/uniform_real_distribution.h +202 -0
- data/third_party/abseil-cpp/absl/random/zipf_distribution.h +271 -0
- data/third_party/abseil-cpp/absl/status/internal/status_internal.h +69 -0
- data/third_party/abseil-cpp/absl/status/internal/statusor_internal.h +396 -0
- data/third_party/abseil-cpp/absl/status/status.cc +444 -0
- data/third_party/abseil-cpp/absl/status/status.h +882 -0
- data/third_party/abseil-cpp/absl/status/status_payload_printer.cc +38 -0
- data/third_party/abseil-cpp/absl/status/status_payload_printer.h +51 -0
- data/third_party/abseil-cpp/absl/status/statusor.cc +103 -0
- data/third_party/abseil-cpp/absl/status/statusor.h +770 -0
- data/third_party/abseil-cpp/absl/strings/ascii.cc +200 -0
- data/third_party/abseil-cpp/absl/strings/ascii.h +242 -0
- data/third_party/abseil-cpp/absl/strings/charconv.cc +984 -0
- data/third_party/abseil-cpp/absl/strings/charconv.h +120 -0
- data/third_party/abseil-cpp/absl/strings/cord.cc +2047 -0
- data/third_party/abseil-cpp/absl/strings/cord.h +1521 -0
- data/third_party/abseil-cpp/absl/strings/escaping.cc +949 -0
- data/third_party/abseil-cpp/absl/strings/escaping.h +164 -0
- data/third_party/abseil-cpp/absl/strings/internal/char_map.h +156 -0
- data/third_party/abseil-cpp/absl/strings/internal/charconv_bigint.cc +359 -0
- data/third_party/abseil-cpp/absl/strings/internal/charconv_bigint.h +423 -0
- data/third_party/abseil-cpp/absl/strings/internal/charconv_parse.cc +504 -0
- data/third_party/abseil-cpp/absl/strings/internal/charconv_parse.h +99 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_internal.cc +89 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_internal.h +620 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_btree.cc +1128 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_btree.h +939 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_btree_navigator.cc +185 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_btree_navigator.h +265 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_btree_reader.cc +68 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_btree_reader.h +211 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_consume.cc +129 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_consume.h +50 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_flat.h +146 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_ring.cc +771 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_ring.h +607 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_ring_reader.h +118 -0
- data/third_party/abseil-cpp/absl/strings/internal/cordz_functions.cc +96 -0
- data/third_party/abseil-cpp/absl/strings/internal/cordz_functions.h +85 -0
- data/third_party/abseil-cpp/absl/strings/internal/cordz_handle.cc +139 -0
- data/third_party/abseil-cpp/absl/strings/internal/cordz_handle.h +131 -0
- data/third_party/abseil-cpp/absl/strings/internal/cordz_info.cc +445 -0
- data/third_party/abseil-cpp/absl/strings/internal/cordz_info.h +298 -0
- data/third_party/abseil-cpp/absl/strings/internal/cordz_statistics.h +87 -0
- data/third_party/abseil-cpp/absl/strings/internal/cordz_update_scope.h +71 -0
- data/third_party/abseil-cpp/absl/strings/internal/cordz_update_tracker.h +121 -0
- data/third_party/abseil-cpp/absl/strings/internal/escaping.cc +180 -0
- data/third_party/abseil-cpp/absl/strings/internal/escaping.h +58 -0
- data/third_party/abseil-cpp/absl/strings/internal/memutil.cc +112 -0
- data/third_party/abseil-cpp/absl/strings/internal/memutil.h +148 -0
- data/third_party/abseil-cpp/absl/strings/internal/ostringstream.cc +36 -0
- data/third_party/abseil-cpp/absl/strings/internal/ostringstream.h +89 -0
- data/third_party/abseil-cpp/absl/strings/internal/resize_uninitialized.h +119 -0
- data/third_party/abseil-cpp/absl/strings/internal/stl_type_traits.h +248 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/arg.cc +488 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/arg.h +526 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/bind.cc +258 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/bind.h +217 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/checker.h +333 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/extension.cc +75 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/extension.h +445 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/float_conversion.cc +1423 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/float_conversion.h +37 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/output.cc +72 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/output.h +96 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/parser.cc +339 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/parser.h +357 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_join_internal.h +314 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_split_internal.h +430 -0
- data/third_party/abseil-cpp/absl/strings/internal/string_constant.h +64 -0
- data/third_party/abseil-cpp/absl/strings/internal/utf8.cc +53 -0
- data/third_party/abseil-cpp/absl/strings/internal/utf8.h +50 -0
- data/third_party/abseil-cpp/absl/strings/match.cc +43 -0
- data/third_party/abseil-cpp/absl/strings/match.h +100 -0
- data/third_party/abseil-cpp/absl/strings/numbers.cc +1093 -0
- data/third_party/abseil-cpp/absl/strings/numbers.h +300 -0
- data/third_party/abseil-cpp/absl/strings/str_cat.cc +246 -0
- data/third_party/abseil-cpp/absl/strings/str_cat.h +408 -0
- data/third_party/abseil-cpp/absl/strings/str_format.h +812 -0
- data/third_party/abseil-cpp/absl/strings/str_join.h +293 -0
- data/third_party/abseil-cpp/absl/strings/str_replace.cc +82 -0
- data/third_party/abseil-cpp/absl/strings/str_replace.h +219 -0
- data/third_party/abseil-cpp/absl/strings/str_split.cc +139 -0
- data/third_party/abseil-cpp/absl/strings/str_split.h +548 -0
- data/third_party/abseil-cpp/absl/strings/string_view.cc +230 -0
- data/third_party/abseil-cpp/absl/strings/string_view.h +710 -0
- data/third_party/abseil-cpp/absl/strings/strip.h +91 -0
- data/third_party/abseil-cpp/absl/strings/substitute.cc +172 -0
- data/third_party/abseil-cpp/absl/strings/substitute.h +721 -0
- data/third_party/abseil-cpp/absl/synchronization/barrier.cc +52 -0
- data/third_party/abseil-cpp/absl/synchronization/barrier.h +79 -0
- data/third_party/abseil-cpp/absl/synchronization/blocking_counter.cc +67 -0
- data/third_party/abseil-cpp/absl/synchronization/blocking_counter.h +101 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/create_thread_identity.cc +140 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/create_thread_identity.h +60 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/futex.h +154 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/graphcycles.cc +698 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/graphcycles.h +141 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/kernel_timeout.h +156 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/per_thread_sem.cc +106 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/per_thread_sem.h +115 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/waiter.cc +428 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/waiter.h +155 -0
- data/third_party/abseil-cpp/absl/synchronization/mutex.cc +2751 -0
- data/third_party/abseil-cpp/absl/synchronization/mutex.h +1082 -0
- data/third_party/abseil-cpp/absl/synchronization/notification.cc +78 -0
- data/third_party/abseil-cpp/absl/synchronization/notification.h +123 -0
- data/third_party/abseil-cpp/absl/time/civil_time.cc +173 -0
- data/third_party/abseil-cpp/absl/time/civil_time.h +538 -0
- data/third_party/abseil-cpp/absl/time/clock.cc +585 -0
- data/third_party/abseil-cpp/absl/time/clock.h +74 -0
- data/third_party/abseil-cpp/absl/time/duration.cc +954 -0
- data/third_party/abseil-cpp/absl/time/format.cc +160 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/civil_time.h +332 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/civil_time_detail.h +628 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/time_zone.h +459 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/zone_info_source.h +102 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/civil_time_detail.cc +94 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_fixed.cc +140 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_fixed.h +52 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_format.cc +1029 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_if.cc +45 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_if.h +77 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_impl.cc +113 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_impl.h +93 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_info.cc +1027 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_info.h +137 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_libc.cc +315 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_libc.h +55 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_lookup.cc +236 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_posix.cc +159 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_posix.h +132 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/tzfile.h +122 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/zone_info_source.cc +115 -0
- data/third_party/abseil-cpp/absl/time/internal/get_current_time_chrono.inc +31 -0
- data/third_party/abseil-cpp/absl/time/internal/get_current_time_posix.inc +24 -0
- data/third_party/abseil-cpp/absl/time/time.cc +500 -0
- data/third_party/abseil-cpp/absl/time/time.h +1616 -0
- data/third_party/abseil-cpp/absl/types/bad_optional_access.cc +48 -0
- data/third_party/abseil-cpp/absl/types/bad_optional_access.h +78 -0
- data/third_party/abseil-cpp/absl/types/bad_variant_access.cc +64 -0
- data/third_party/abseil-cpp/absl/types/bad_variant_access.h +82 -0
- data/third_party/abseil-cpp/absl/types/internal/optional.h +396 -0
- data/third_party/abseil-cpp/absl/types/internal/span.h +128 -0
- data/third_party/abseil-cpp/absl/types/internal/variant.h +1646 -0
- data/third_party/abseil-cpp/absl/types/optional.h +776 -0
- data/third_party/abseil-cpp/absl/types/span.h +726 -0
- data/third_party/abseil-cpp/absl/types/variant.h +866 -0
- data/third_party/abseil-cpp/absl/utility/utility.h +350 -0
- data/third_party/address_sorting/address_sorting.c +375 -0
- data/third_party/address_sorting/address_sorting_internal.h +70 -0
- data/third_party/address_sorting/address_sorting_posix.c +98 -0
- data/third_party/address_sorting/address_sorting_windows.c +95 -0
- data/third_party/address_sorting/include/address_sorting/address_sorting.h +115 -0
- data/third_party/boringssl-with-bazel/err_data.c +1493 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_bitstr.c +284 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_bool.c +122 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_d2i_fp.c +91 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_dup.c +87 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_enum.c +195 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_gentm.c +266 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_i2d_fp.c +88 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_int.c +420 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_mbstr.c +298 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_object.c +299 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_octet.c +77 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_print.c +83 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_strex.c +650 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_strnid.c +266 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_time.c +212 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_type.c +163 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_utctm.c +264 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_utf8.c +236 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/asn1_lib.c +452 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/asn1_par.c +80 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/asn_pack.c +101 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/charmap.h +15 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/f_int.c +102 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/f_string.c +91 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/internal.h +224 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_dec.c +969 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_enc.c +710 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_fre.c +233 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_new.c +332 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_typ.c +131 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_utl.c +281 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/time_support.c +206 -0
- data/third_party/boringssl-with-bazel/src/crypto/base64/base64.c +482 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/bio.c +702 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/bio_mem.c +324 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/connect.c +541 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/fd.c +275 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/file.c +311 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/hexdump.c +192 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/internal.h +111 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/pair.c +483 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/printf.c +115 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/socket.c +192 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/socket_helper.c +122 -0
- data/third_party/boringssl-with-bazel/src/crypto/blake2/blake2.c +156 -0
- data/third_party/boringssl-with-bazel/src/crypto/bn_extra/bn_asn1.c +57 -0
- data/third_party/boringssl-with-bazel/src/crypto/bn_extra/convert.c +470 -0
- data/third_party/boringssl-with-bazel/src/crypto/buf/buf.c +172 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/asn1_compat.c +52 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/ber.c +266 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/cbb.c +728 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/cbs.c +711 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/internal.h +96 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/unicode.c +155 -0
- data/third_party/boringssl-with-bazel/src/crypto/chacha/chacha.c +175 -0
- data/third_party/boringssl-with-bazel/src/crypto/chacha/internal.h +45 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/cipher_extra.c +127 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/derive_key.c +152 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_aesccm.c +447 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_aesctrhmac.c +283 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_aesgcmsiv.c +891 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_chacha20poly1305.c +343 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_null.c +85 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_rc2.c +462 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_rc4.c +87 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_tls.c +601 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/internal.h +226 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/tls_cbc.c +338 -0
- data/third_party/boringssl-with-bazel/src/crypto/cmac/cmac.c +278 -0
- data/third_party/boringssl-with-bazel/src/crypto/conf/conf.c +821 -0
- data/third_party/boringssl-with-bazel/src/crypto/conf/conf_def.h +127 -0
- data/third_party/boringssl-with-bazel/src/crypto/conf/internal.h +31 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-aarch64-fuchsia.c +55 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-aarch64-linux.c +62 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-aarch64-win.c +41 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-arm-linux.c +229 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-arm-linux.h +201 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-arm.c +38 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-intel.c +291 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-ppc64le.c +38 -0
- data/third_party/boringssl-with-bazel/src/crypto/crypto.c +226 -0
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/curve25519.c +2159 -0
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/curve25519_tables.h +7872 -0
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/internal.h +146 -0
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/spake25519.c +539 -0
- data/third_party/boringssl-with-bazel/src/crypto/dh_extra/dh_asn1.c +160 -0
- data/third_party/boringssl-with-bazel/src/crypto/dh_extra/params.c +272 -0
- data/third_party/boringssl-with-bazel/src/crypto/digest_extra/digest_extra.c +268 -0
- data/third_party/boringssl-with-bazel/src/crypto/dsa/dsa.c +967 -0
- data/third_party/boringssl-with-bazel/src/crypto/dsa/dsa_asn1.c +390 -0
- data/third_party/boringssl-with-bazel/src/crypto/dsa/internal.h +34 -0
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/ec_asn1.c +559 -0
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/ec_derive.c +95 -0
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/hash_to_curve.c +385 -0
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/internal.h +56 -0
- data/third_party/boringssl-with-bazel/src/crypto/ecdh_extra/ecdh_extra.c +124 -0
- data/third_party/boringssl-with-bazel/src/crypto/ecdsa_extra/ecdsa_asn1.c +267 -0
- data/third_party/boringssl-with-bazel/src/crypto/engine/engine.c +99 -0
- data/third_party/boringssl-with-bazel/src/crypto/err/err.c +857 -0
- data/third_party/boringssl-with-bazel/src/crypto/err/internal.h +58 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/digestsign.c +231 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/evp.c +456 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/evp_asn1.c +547 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/evp_ctx.c +484 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/internal.h +269 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_dsa_asn1.c +277 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_ec.c +286 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_ec_asn1.c +255 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_ed25519.c +104 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_ed25519_asn1.c +221 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_rsa.c +648 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_rsa_asn1.c +194 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_x25519.c +110 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_x25519_asn1.c +248 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/pbkdf.c +146 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/print.c +489 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/scrypt.c +211 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/sign.c +151 -0
- data/third_party/boringssl-with-bazel/src/crypto/ex_data.c +261 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/aes.c +108 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/aes_nohw.c +1282 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/internal.h +238 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/key_wrap.c +236 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/mode_wrappers.c +122 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bcm.c +266 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/add.c +316 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/asm/x86_64-gcc.c +541 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/bn.c +438 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/bytes.c +230 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/cmp.c +200 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/ctx.c +236 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/div.c +902 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/div_extra.c +87 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/exponentiation.c +1288 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/gcd.c +378 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/gcd_extra.c +326 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/generic.c +711 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/internal.h +715 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/jacobi.c +146 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/montgomery.c +502 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/montgomery_inv.c +186 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/mul.c +749 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/prime.c +1064 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/random.c +341 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/rsaz_exp.c +226 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/rsaz_exp.h +104 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/shift.c +364 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/sqrt.c +498 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/aead.c +284 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/cipher.c +648 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/e_aes.c +1473 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/e_des.c +237 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/internal.h +128 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/delocate.h +89 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/des/des.c +784 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/des/internal.h +238 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/dh/check.c +217 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/dh/dh.c +456 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/digest/digest.c +282 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/digest/digests.c +304 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/digest/internal.h +112 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/digest/md32_common.h +195 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec.c +1268 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec_key.c +472 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec_montgomery.c +524 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/felem.c +100 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/internal.h +772 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/oct.c +328 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p224-64.c +1180 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256-x86_64-table.h +9497 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256-x86_64.c +633 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256-x86_64.h +153 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256.c +740 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256_table.h +297 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/scalar.c +175 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/simple.c +357 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/simple_mul.c +270 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/util.c +255 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/wnaf.c +270 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ecdh/ecdh.c +122 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ecdsa/ecdsa.c +338 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ecdsa/internal.h +39 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/fips_shared_support.c +32 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/hmac/hmac.c +228 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/md4/md4.c +240 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/md5/internal.h +37 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/md5/md5.c +284 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/cbc.c +178 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/cfb.c +203 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/ctr.c +201 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/gcm.c +733 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/gcm_nohw.c +304 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/internal.h +420 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/ofb.c +97 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/polyval.c +91 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/ctrdrbg.c +202 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/fork_detect.c +137 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/fork_detect.h +49 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/getrandom_fillin.h +64 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/internal.h +184 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/rand.c +457 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/urandom.c +401 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/blinding.c +243 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/internal.h +131 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/padding.c +695 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/rsa.c +935 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/rsa_impl.c +1416 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/self_check/fips.c +79 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/self_check/self_check.c +874 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/internal.h +53 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/sha1-altivec.c +361 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/sha1.c +357 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/sha256.c +321 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/sha512.c +508 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/tls/internal.h +39 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/tls/kdf.c +165 -0
- data/third_party/boringssl-with-bazel/src/crypto/hkdf/hkdf.c +112 -0
- data/third_party/boringssl-with-bazel/src/crypto/hpke/hpke.c +618 -0
- data/third_party/boringssl-with-bazel/src/crypto/hrss/hrss.c +2198 -0
- data/third_party/boringssl-with-bazel/src/crypto/hrss/internal.h +68 -0
- data/third_party/boringssl-with-bazel/src/crypto/internal.h +959 -0
- data/third_party/boringssl-with-bazel/src/crypto/lhash/internal.h +253 -0
- data/third_party/boringssl-with-bazel/src/crypto/lhash/lhash.c +353 -0
- data/third_party/boringssl-with-bazel/src/crypto/mem.c +410 -0
- data/third_party/boringssl-with-bazel/src/crypto/obj/obj.c +553 -0
- data/third_party/boringssl-with-bazel/src/crypto/obj/obj_dat.h +11585 -0
- data/third_party/boringssl-with-bazel/src/crypto/obj/obj_xref.c +122 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_all.c +252 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_info.c +358 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_lib.c +769 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_oth.c +87 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_pk8.c +255 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_pkey.c +214 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_x509.c +65 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_xaux.c +65 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs7/internal.h +58 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs7/pkcs7.c +193 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs7/pkcs7_x509.c +526 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs8/internal.h +137 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs8/p5_pbev2.c +316 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs8/pkcs8.c +530 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs8/pkcs8_x509.c +1383 -0
- data/third_party/boringssl-with-bazel/src/crypto/poly1305/internal.h +41 -0
- data/third_party/boringssl-with-bazel/src/crypto/poly1305/poly1305.c +321 -0
- data/third_party/boringssl-with-bazel/src/crypto/poly1305/poly1305_arm.c +307 -0
- data/third_party/boringssl-with-bazel/src/crypto/poly1305/poly1305_vec.c +860 -0
- data/third_party/boringssl-with-bazel/src/crypto/pool/internal.h +49 -0
- data/third_party/boringssl-with-bazel/src/crypto/pool/pool.c +257 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/deterministic.c +56 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/forkunsafe.c +46 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/fuchsia.c +34 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/passive.c +34 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/rand_extra.c +74 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/windows.c +73 -0
- data/third_party/boringssl-with-bazel/src/crypto/rc4/rc4.c +98 -0
- data/third_party/boringssl-with-bazel/src/crypto/refcount_c11.c +67 -0
- data/third_party/boringssl-with-bazel/src/crypto/refcount_lock.c +53 -0
- data/third_party/boringssl-with-bazel/src/crypto/rsa_extra/rsa_asn1.c +324 -0
- data/third_party/boringssl-with-bazel/src/crypto/rsa_extra/rsa_print.c +22 -0
- data/third_party/boringssl-with-bazel/src/crypto/siphash/siphash.c +82 -0
- data/third_party/boringssl-with-bazel/src/crypto/stack/stack.c +425 -0
- data/third_party/boringssl-with-bazel/src/crypto/thread.c +110 -0
- data/third_party/boringssl-with-bazel/src/crypto/thread_none.c +59 -0
- data/third_party/boringssl-with-bazel/src/crypto/thread_pthread.c +182 -0
- data/third_party/boringssl-with-bazel/src/crypto/thread_win.c +260 -0
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/internal.h +318 -0
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/pmbtoken.c +1399 -0
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/trust_token.c +858 -0
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/voprf.c +766 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/a_digest.c +96 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/a_sign.c +128 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/a_verify.c +118 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/algorithm.c +163 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/asn1_gen.c +826 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/by_dir.c +459 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/by_file.c +277 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/i2d_pr.c +83 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/internal.h +404 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/name_print.c +246 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/rsa_pss.c +400 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/t_crl.c +130 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/t_req.c +246 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/t_x509.c +365 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/t_x509a.c +116 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509.c +90 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_att.c +358 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_cmp.c +461 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_d2.c +106 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_def.c +103 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_ext.c +212 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_lu.c +830 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_obj.c +199 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_req.c +304 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_set.c +240 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_trs.c +331 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_txt.c +204 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_v3.c +281 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_vfy.c +2456 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_vpm.c +651 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509cset.c +284 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509name.c +388 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509rset.c +84 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509spki.c +137 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_algor.c +153 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_all.c +386 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_attrib.c +98 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_crl.c +565 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_exten.c +77 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_info.c +98 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_name.c +544 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_pkey.c +106 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_pubkey.c +217 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_req.c +106 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_sig.c +94 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_spki.c +80 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_val.c +71 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_x509.c +394 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_x509a.c +201 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/ext_dat.h +138 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/internal.h +289 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_cache.c +287 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_data.c +132 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_lib.c +155 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_map.c +131 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_node.c +189 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_tree.c +843 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_akey.c +226 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_akeya.c +72 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_alt.c +640 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_bcons.c +133 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_bitst.c +144 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_conf.c +468 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_cpols.c +500 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_crld.c +563 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_enum.c +106 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_extku.c +148 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_genn.c +266 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_ia5.c +121 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_info.c +218 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_int.c +91 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_lib.c +379 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_ncons.c +558 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_ocsp.c +68 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_pci.c +289 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_pcia.c +57 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_pcons.c +139 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_pmaps.c +154 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_prn.c +230 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_purp.c +929 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_skey.c +156 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_utl.c +1437 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/aead.h +480 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/aes.h +207 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/arm_arch.h +240 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/asn1.h +2039 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/asn1_mac.h +18 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/asn1t.h +718 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/base.h +627 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/base64.h +198 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/bio.h +939 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/blake2.h +62 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/blowfish.h +93 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/bn.h +1057 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/buf.h +137 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/buffer.h +18 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/bytestring.h +586 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/cast.h +96 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/chacha.h +41 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/cipher.h +673 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/cmac.h +91 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/conf.h +183 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/cpu.h +202 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/crypto.h +169 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/curve25519.h +201 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/des.h +183 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/dh.h +353 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/digest.h +348 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/dsa.h +443 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/dtls1.h +16 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/e_os2.h +18 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ec.h +442 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ec_key.h +357 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ecdh.h +118 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ecdsa.h +236 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/engine.h +109 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/err.h +466 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/evp.h +1083 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/evp_errors.h +99 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ex_data.h +203 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/hkdf.h +68 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/hmac.h +186 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/hpke.h +350 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/hrss.h +102 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/is_boringssl.h +16 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/lhash.h +81 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/md4.h +108 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/md5.h +109 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/mem.h +184 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/nid.h +4259 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/obj.h +256 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/obj_mac.h +18 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/objects.h +18 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/opensslconf.h +70 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/opensslv.h +18 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ossl_typ.h +18 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/pem.h +483 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/pkcs12.h +18 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/pkcs7.h +239 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/pkcs8.h +282 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/poly1305.h +49 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/pool.h +108 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/rand.h +114 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/rc4.h +96 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ripemd.h +108 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/rsa.h +855 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/safestack.h +16 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/sha.h +294 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/siphash.h +37 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/span.h +222 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/srtp.h +18 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ssl.h +5624 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ssl3.h +333 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/stack.h +542 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/thread.h +191 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/tls1.h +647 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/trust_token.h +310 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/type_check.h +90 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/x509.h +2419 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/x509_vfy.h +18 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/x509v3.h +1021 -0
- data/third_party/boringssl-with-bazel/src/ssl/bio_ssl.cc +192 -0
- data/third_party/boringssl-with-bazel/src/ssl/d1_both.cc +835 -0
- data/third_party/boringssl-with-bazel/src/ssl/d1_lib.cc +268 -0
- data/third_party/boringssl-with-bazel/src/ssl/d1_pkt.cc +273 -0
- data/third_party/boringssl-with-bazel/src/ssl/d1_srtp.cc +232 -0
- data/third_party/boringssl-with-bazel/src/ssl/dtls_method.cc +200 -0
- data/third_party/boringssl-with-bazel/src/ssl/dtls_record.cc +353 -0
- data/third_party/boringssl-with-bazel/src/ssl/encrypted_client_hello.cc +1084 -0
- data/third_party/boringssl-with-bazel/src/ssl/extensions.cc +4325 -0
- data/third_party/boringssl-with-bazel/src/ssl/handoff.cc +986 -0
- data/third_party/boringssl-with-bazel/src/ssl/handshake.cc +758 -0
- data/third_party/boringssl-with-bazel/src/ssl/handshake_client.cc +1986 -0
- data/third_party/boringssl-with-bazel/src/ssl/handshake_server.cc +1956 -0
- data/third_party/boringssl-with-bazel/src/ssl/internal.h +3953 -0
- data/third_party/boringssl-with-bazel/src/ssl/s3_both.cc +730 -0
- data/third_party/boringssl-with-bazel/src/ssl/s3_lib.cc +219 -0
- data/third_party/boringssl-with-bazel/src/ssl/s3_pkt.cc +453 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_aead_ctx.cc +432 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_asn1.cc +896 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_buffer.cc +306 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_cert.cc +1014 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_cipher.cc +1717 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_file.cc +585 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_key_share.cc +400 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_lib.cc +3072 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_privkey.cc +837 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_session.cc +1342 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_stat.cc +233 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_transcript.cc +272 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_versions.cc +402 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_x509.cc +1363 -0
- data/third_party/boringssl-with-bazel/src/ssl/t1_enc.cc +384 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls13_both.cc +733 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls13_client.cc +1122 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls13_enc.cc +582 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls13_server.cc +1349 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls_method.cc +319 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls_record.cc +705 -0
- data/third_party/boringssl-with-bazel/src/third_party/fiat/curve25519_32.h +981 -0
- data/third_party/boringssl-with-bazel/src/third_party/fiat/curve25519_64.h +619 -0
- data/third_party/boringssl-with-bazel/src/third_party/fiat/p256_32.h +3147 -0
- data/third_party/boringssl-with-bazel/src/third_party/fiat/p256_64.h +1226 -0
- data/third_party/cares/ares_build.h +223 -0
- data/third_party/cares/cares/include/ares.h +742 -0
- data/third_party/cares/cares/include/ares_dns.h +112 -0
- data/third_party/cares/cares/include/ares_rules.h +125 -0
- data/third_party/cares/cares/include/ares_version.h +24 -0
- data/third_party/cares/cares/src/lib/ares__close_sockets.c +61 -0
- data/third_party/cares/cares/src/lib/ares__get_hostent.c +260 -0
- data/third_party/cares/cares/src/lib/ares__parse_into_addrinfo.c +260 -0
- data/third_party/cares/cares/src/lib/ares__read_line.c +73 -0
- data/third_party/cares/cares/src/lib/ares__readaddrinfo.c +264 -0
- data/third_party/cares/cares/src/lib/ares__sortaddrinfo.c +499 -0
- data/third_party/cares/cares/src/lib/ares__timeval.c +111 -0
- data/third_party/cares/cares/src/lib/ares_android.c +444 -0
- data/third_party/cares/cares/src/lib/ares_android.h +27 -0
- data/third_party/cares/cares/src/lib/ares_cancel.c +63 -0
- data/third_party/cares/cares/src/lib/ares_create_query.c +197 -0
- data/third_party/cares/cares/src/lib/ares_data.c +240 -0
- data/third_party/cares/cares/src/lib/ares_data.h +74 -0
- data/third_party/cares/cares/src/lib/ares_destroy.c +113 -0
- data/third_party/cares/cares/src/lib/ares_expand_name.c +300 -0
- data/third_party/cares/cares/src/lib/ares_expand_string.c +67 -0
- data/third_party/cares/cares/src/lib/ares_fds.c +59 -0
- data/third_party/cares/cares/src/lib/ares_free_hostent.c +43 -0
- data/third_party/cares/cares/src/lib/ares_free_string.c +25 -0
- data/third_party/cares/cares/src/lib/ares_freeaddrinfo.c +59 -0
- data/third_party/cares/cares/src/lib/ares_getaddrinfo.c +772 -0
- data/third_party/cares/cares/src/lib/ares_getenv.c +28 -0
- data/third_party/cares/cares/src/lib/ares_getenv.h +26 -0
- data/third_party/cares/cares/src/lib/ares_gethostbyaddr.c +287 -0
- data/third_party/cares/cares/src/lib/ares_gethostbyname.c +534 -0
- data/third_party/cares/cares/src/lib/ares_getnameinfo.c +447 -0
- data/third_party/cares/cares/src/lib/ares_getsock.c +66 -0
- data/third_party/cares/cares/src/lib/ares_inet_net_pton.h +25 -0
- data/third_party/cares/cares/src/lib/ares_init.c +2654 -0
- data/third_party/cares/cares/src/lib/ares_iphlpapi.h +221 -0
- data/third_party/cares/cares/src/lib/ares_ipv6.h +85 -0
- data/third_party/cares/cares/src/lib/ares_library_init.c +200 -0
- data/third_party/cares/cares/src/lib/ares_library_init.h +43 -0
- data/third_party/cares/cares/src/lib/ares_llist.c +63 -0
- data/third_party/cares/cares/src/lib/ares_llist.h +39 -0
- data/third_party/cares/cares/src/lib/ares_mkquery.c +24 -0
- data/third_party/cares/cares/src/lib/ares_nameser.h +482 -0
- data/third_party/cares/cares/src/lib/ares_nowarn.c +260 -0
- data/third_party/cares/cares/src/lib/ares_nowarn.h +61 -0
- data/third_party/cares/cares/src/lib/ares_options.c +406 -0
- data/third_party/cares/cares/src/lib/ares_parse_a_reply.c +209 -0
- data/third_party/cares/cares/src/lib/ares_parse_aaaa_reply.c +212 -0
- data/third_party/cares/cares/src/lib/ares_parse_caa_reply.c +199 -0
- data/third_party/cares/cares/src/lib/ares_parse_mx_reply.c +164 -0
- data/third_party/cares/cares/src/lib/ares_parse_naptr_reply.c +183 -0
- data/third_party/cares/cares/src/lib/ares_parse_ns_reply.c +177 -0
- data/third_party/cares/cares/src/lib/ares_parse_ptr_reply.c +228 -0
- data/third_party/cares/cares/src/lib/ares_parse_soa_reply.c +179 -0
- data/third_party/cares/cares/src/lib/ares_parse_srv_reply.c +168 -0
- data/third_party/cares/cares/src/lib/ares_parse_txt_reply.c +214 -0
- data/third_party/cares/cares/src/lib/ares_platform.c +11042 -0
- data/third_party/cares/cares/src/lib/ares_platform.h +43 -0
- data/third_party/cares/cares/src/lib/ares_private.h +423 -0
- data/third_party/cares/cares/src/lib/ares_process.c +1548 -0
- data/third_party/cares/cares/src/lib/ares_query.c +180 -0
- data/third_party/cares/cares/src/lib/ares_search.c +321 -0
- data/third_party/cares/cares/src/lib/ares_send.c +131 -0
- data/third_party/cares/cares/src/lib/ares_setup.h +220 -0
- data/third_party/cares/cares/src/lib/ares_strcasecmp.c +66 -0
- data/third_party/cares/cares/src/lib/ares_strcasecmp.h +30 -0
- data/third_party/cares/cares/src/lib/ares_strdup.c +49 -0
- data/third_party/cares/cares/src/lib/ares_strdup.h +24 -0
- data/third_party/cares/cares/src/lib/ares_strerror.c +56 -0
- data/third_party/cares/cares/src/lib/ares_strsplit.c +178 -0
- data/third_party/cares/cares/src/lib/ares_strsplit.h +43 -0
- data/third_party/cares/cares/src/lib/ares_timeout.c +88 -0
- data/third_party/cares/cares/src/lib/ares_version.c +11 -0
- data/third_party/cares/cares/src/lib/ares_writev.c +79 -0
- data/third_party/cares/cares/src/lib/ares_writev.h +36 -0
- data/third_party/cares/cares/src/lib/bitncmp.c +59 -0
- data/third_party/cares/cares/src/lib/bitncmp.h +26 -0
- data/third_party/cares/cares/src/lib/config-dos.h +115 -0
- data/third_party/cares/cares/src/lib/config-win32.h +351 -0
- data/third_party/cares/cares/src/lib/inet_net_pton.c +444 -0
- data/third_party/cares/cares/src/lib/inet_ntop.c +201 -0
- data/third_party/cares/cares/src/lib/setup_once.h +554 -0
- data/third_party/cares/cares/src/lib/windows_port.c +22 -0
- data/third_party/cares/config_darwin/ares_config.h +428 -0
- data/third_party/cares/config_freebsd/ares_config.h +505 -0
- data/third_party/cares/config_linux/ares_config.h +461 -0
- data/third_party/cares/config_openbsd/ares_config.h +505 -0
- data/third_party/re2/re2/bitmap256.h +117 -0
- data/third_party/re2/re2/bitstate.cc +385 -0
- data/third_party/re2/re2/compile.cc +1261 -0
- data/third_party/re2/re2/dfa.cc +2118 -0
- data/third_party/re2/re2/filtered_re2.cc +137 -0
- data/third_party/re2/re2/filtered_re2.h +114 -0
- data/third_party/re2/re2/mimics_pcre.cc +197 -0
- data/third_party/re2/re2/nfa.cc +713 -0
- data/third_party/re2/re2/onepass.cc +623 -0
- data/third_party/re2/re2/parse.cc +2483 -0
- data/third_party/re2/re2/perl_groups.cc +119 -0
- data/third_party/re2/re2/pod_array.h +55 -0
- data/third_party/re2/re2/prefilter.cc +711 -0
- data/third_party/re2/re2/prefilter.h +108 -0
- data/third_party/re2/re2/prefilter_tree.cc +407 -0
- data/third_party/re2/re2/prefilter_tree.h +139 -0
- data/third_party/re2/re2/prog.cc +1166 -0
- data/third_party/re2/re2/prog.h +455 -0
- data/third_party/re2/re2/re2.cc +1331 -0
- data/third_party/re2/re2/re2.h +1017 -0
- data/third_party/re2/re2/regexp.cc +987 -0
- data/third_party/re2/re2/regexp.h +665 -0
- data/third_party/re2/re2/set.cc +176 -0
- data/third_party/re2/re2/set.h +85 -0
- data/third_party/re2/re2/simplify.cc +665 -0
- data/third_party/re2/re2/sparse_array.h +392 -0
- data/third_party/re2/re2/sparse_set.h +264 -0
- data/third_party/re2/re2/stringpiece.cc +65 -0
- data/third_party/re2/re2/stringpiece.h +210 -0
- data/third_party/re2/re2/tostring.cc +351 -0
- data/third_party/re2/re2/unicode_casefold.cc +582 -0
- data/third_party/re2/re2/unicode_casefold.h +78 -0
- data/third_party/re2/re2/unicode_groups.cc +6269 -0
- data/third_party/re2/re2/unicode_groups.h +67 -0
- data/third_party/re2/re2/walker-inl.h +246 -0
- data/third_party/re2/util/benchmark.h +156 -0
- data/third_party/re2/util/flags.h +26 -0
- data/third_party/re2/util/logging.h +109 -0
- data/third_party/re2/util/malloc_counter.h +19 -0
- data/third_party/re2/util/mix.h +41 -0
- data/third_party/re2/util/mutex.h +148 -0
- data/third_party/re2/util/pcre.cc +1025 -0
- data/third_party/re2/util/pcre.h +681 -0
- data/third_party/re2/util/rune.cc +260 -0
- data/third_party/re2/util/strutil.cc +149 -0
- data/third_party/re2/util/strutil.h +21 -0
- data/third_party/re2/util/test.h +50 -0
- data/third_party/re2/util/utf.h +44 -0
- data/third_party/re2/util/util.h +42 -0
- data/third_party/upb/third_party/utf8_range/naive.c +92 -0
- data/third_party/upb/third_party/utf8_range/range2-neon.c +157 -0
- data/third_party/upb/third_party/utf8_range/range2-sse.c +170 -0
- data/third_party/upb/third_party/utf8_range/utf8_range.h +9 -0
- data/third_party/upb/upb/decode.c +1125 -0
- data/third_party/upb/upb/decode.h +94 -0
- data/third_party/upb/upb/decode_fast.c +1055 -0
- data/third_party/upb/upb/decode_fast.h +153 -0
- data/third_party/upb/upb/decode_internal.h +211 -0
- data/third_party/upb/upb/def.c +3261 -0
- data/third_party/upb/upb/def.h +409 -0
- data/third_party/upb/upb/def.hpp +438 -0
- data/third_party/upb/upb/encode.c +604 -0
- data/third_party/upb/upb/encode.h +71 -0
- data/third_party/upb/upb/json_encode.c +776 -0
- data/third_party/upb/upb/json_encode.h +62 -0
- data/third_party/upb/upb/msg.c +428 -0
- data/third_party/upb/upb/msg.h +114 -0
- data/third_party/upb/upb/msg_internal.h +831 -0
- data/third_party/upb/upb/port_def.inc +261 -0
- data/third_party/upb/upb/port_undef.inc +62 -0
- data/third_party/upb/upb/reflection.c +480 -0
- data/third_party/upb/upb/reflection.h +220 -0
- data/third_party/upb/upb/reflection.hpp +37 -0
- data/third_party/upb/upb/table.c +926 -0
- data/third_party/upb/upb/table_internal.h +385 -0
- data/third_party/upb/upb/text_encode.c +472 -0
- data/third_party/upb/upb/text_encode.h +64 -0
- data/third_party/upb/upb/upb.c +362 -0
- data/third_party/upb/upb/upb.h +373 -0
- data/third_party/upb/upb/upb.hpp +115 -0
- data/third_party/upb/upb/upb_internal.h +68 -0
- data/third_party/xxhash/xxhash.h +5580 -0
- data/third_party/zlib/adler32.c +186 -0
- data/third_party/zlib/compress.c +86 -0
- data/third_party/zlib/crc32.c +1116 -0
- data/third_party/zlib/crc32.h +9446 -0
- data/third_party/zlib/deflate.c +2211 -0
- data/third_party/zlib/deflate.h +346 -0
- data/third_party/zlib/gzclose.c +25 -0
- data/third_party/zlib/gzguts.h +219 -0
- data/third_party/zlib/gzlib.c +639 -0
- data/third_party/zlib/gzread.c +652 -0
- data/third_party/zlib/gzwrite.c +677 -0
- data/third_party/zlib/infback.c +641 -0
- data/third_party/zlib/inffast.c +323 -0
- data/third_party/zlib/inffast.h +11 -0
- data/third_party/zlib/inffixed.h +94 -0
- data/third_party/zlib/inflate.c +1592 -0
- data/third_party/zlib/inflate.h +126 -0
- data/third_party/zlib/inftrees.c +304 -0
- data/third_party/zlib/inftrees.h +62 -0
- data/third_party/zlib/trees.c +1182 -0
- data/third_party/zlib/trees.h +128 -0
- data/third_party/zlib/uncompr.c +93 -0
- data/third_party/zlib/zconf.h +534 -0
- data/third_party/zlib/zlib.h +1935 -0
- data/third_party/zlib/zutil.c +325 -0
- data/third_party/zlib/zutil.h +274 -0
- metadata +2486 -38
- data/grpc_c.32.ruby +0 -0
- data/grpc_c.64.ruby +0 -0
@@ -0,0 +1,2456 @@
|
|
1
|
+
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
|
2
|
+
* All rights reserved.
|
3
|
+
*
|
4
|
+
* This package is an SSL implementation written
|
5
|
+
* by Eric Young (eay@cryptsoft.com).
|
6
|
+
* The implementation was written so as to conform with Netscapes SSL.
|
7
|
+
*
|
8
|
+
* This library is free for commercial and non-commercial use as long as
|
9
|
+
* the following conditions are aheared to. The following conditions
|
10
|
+
* apply to all code found in this distribution, be it the RC4, RSA,
|
11
|
+
* lhash, DES, etc., code; not just the SSL code. The SSL documentation
|
12
|
+
* included with this distribution is covered by the same copyright terms
|
13
|
+
* except that the holder is Tim Hudson (tjh@cryptsoft.com).
|
14
|
+
*
|
15
|
+
* Copyright remains Eric Young's, and as such any Copyright notices in
|
16
|
+
* the code are not to be removed.
|
17
|
+
* If this package is used in a product, Eric Young should be given attribution
|
18
|
+
* as the author of the parts of the library used.
|
19
|
+
* This can be in the form of a textual message at program startup or
|
20
|
+
* in documentation (online or textual) provided with the package.
|
21
|
+
*
|
22
|
+
* Redistribution and use in source and binary forms, with or without
|
23
|
+
* modification, are permitted provided that the following conditions
|
24
|
+
* are met:
|
25
|
+
* 1. Redistributions of source code must retain the copyright
|
26
|
+
* notice, this list of conditions and the following disclaimer.
|
27
|
+
* 2. Redistributions in binary form must reproduce the above copyright
|
28
|
+
* notice, this list of conditions and the following disclaimer in the
|
29
|
+
* documentation and/or other materials provided with the distribution.
|
30
|
+
* 3. All advertising materials mentioning features or use of this software
|
31
|
+
* must display the following acknowledgement:
|
32
|
+
* "This product includes cryptographic software written by
|
33
|
+
* Eric Young (eay@cryptsoft.com)"
|
34
|
+
* The word 'cryptographic' can be left out if the rouines from the library
|
35
|
+
* being used are not cryptographic related :-).
|
36
|
+
* 4. If you include any Windows specific code (or a derivative thereof) from
|
37
|
+
* the apps directory (application code) you must include an acknowledgement:
|
38
|
+
* "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
|
39
|
+
*
|
40
|
+
* THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
|
41
|
+
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
42
|
+
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
43
|
+
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
44
|
+
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
45
|
+
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
46
|
+
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
47
|
+
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
48
|
+
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
49
|
+
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
50
|
+
* SUCH DAMAGE.
|
51
|
+
*
|
52
|
+
* The licence and distribution terms for any publically available version or
|
53
|
+
* derivative of this code cannot be changed. i.e. this code cannot simply be
|
54
|
+
* copied and put under another distribution licence
|
55
|
+
* [including the GNU Public Licence.] */
|
56
|
+
|
57
|
+
#include <ctype.h>
|
58
|
+
#include <string.h>
|
59
|
+
#include <time.h>
|
60
|
+
|
61
|
+
#include <openssl/asn1.h>
|
62
|
+
#include <openssl/err.h>
|
63
|
+
#include <openssl/evp.h>
|
64
|
+
#include <openssl/mem.h>
|
65
|
+
#include <openssl/obj.h>
|
66
|
+
#include <openssl/thread.h>
|
67
|
+
#include <openssl/x509.h>
|
68
|
+
#include <openssl/x509v3.h>
|
69
|
+
|
70
|
+
#include "internal.h"
|
71
|
+
#include "../internal.h"
|
72
|
+
#include "../x509v3/internal.h"
|
73
|
+
|
74
|
+
static CRYPTO_EX_DATA_CLASS g_ex_data_class =
|
75
|
+
CRYPTO_EX_DATA_CLASS_INIT_WITH_APP_DATA;
|
76
|
+
|
77
|
+
/* CRL score values */
|
78
|
+
|
79
|
+
/* No unhandled critical extensions */
|
80
|
+
|
81
|
+
#define CRL_SCORE_NOCRITICAL 0x100
|
82
|
+
|
83
|
+
/* certificate is within CRL scope */
|
84
|
+
|
85
|
+
#define CRL_SCORE_SCOPE 0x080
|
86
|
+
|
87
|
+
/* CRL times valid */
|
88
|
+
|
89
|
+
#define CRL_SCORE_TIME 0x040
|
90
|
+
|
91
|
+
/* Issuer name matches certificate */
|
92
|
+
|
93
|
+
#define CRL_SCORE_ISSUER_NAME 0x020
|
94
|
+
|
95
|
+
/* If this score or above CRL is probably valid */
|
96
|
+
|
97
|
+
#define CRL_SCORE_VALID (CRL_SCORE_NOCRITICAL|CRL_SCORE_TIME|CRL_SCORE_SCOPE)
|
98
|
+
|
99
|
+
/* CRL issuer is certificate issuer */
|
100
|
+
|
101
|
+
#define CRL_SCORE_ISSUER_CERT 0x018
|
102
|
+
|
103
|
+
/* CRL issuer is on certificate path */
|
104
|
+
|
105
|
+
#define CRL_SCORE_SAME_PATH 0x008
|
106
|
+
|
107
|
+
/* CRL issuer matches CRL AKID */
|
108
|
+
|
109
|
+
#define CRL_SCORE_AKID 0x004
|
110
|
+
|
111
|
+
/* Have a delta CRL with valid times */
|
112
|
+
|
113
|
+
#define CRL_SCORE_TIME_DELTA 0x002
|
114
|
+
|
115
|
+
static int null_callback(int ok, X509_STORE_CTX *e);
|
116
|
+
static int check_issued(X509_STORE_CTX *ctx, X509 *x, X509 *issuer);
|
117
|
+
static X509 *find_issuer(X509_STORE_CTX *ctx, STACK_OF(X509) *sk, X509 *x);
|
118
|
+
static int check_chain_extensions(X509_STORE_CTX *ctx);
|
119
|
+
static int check_name_constraints(X509_STORE_CTX *ctx);
|
120
|
+
static int check_id(X509_STORE_CTX *ctx);
|
121
|
+
static int check_trust(X509_STORE_CTX *ctx);
|
122
|
+
static int check_revocation(X509_STORE_CTX *ctx);
|
123
|
+
static int check_cert(X509_STORE_CTX *ctx);
|
124
|
+
static int check_policy(X509_STORE_CTX *ctx);
|
125
|
+
|
126
|
+
static int get_crl_score(X509_STORE_CTX *ctx, X509 **pissuer,
|
127
|
+
unsigned int *preasons, X509_CRL *crl, X509 *x);
|
128
|
+
static int get_crl_delta(X509_STORE_CTX *ctx,
|
129
|
+
X509_CRL **pcrl, X509_CRL **pdcrl, X509 *x);
|
130
|
+
static void get_delta_sk(X509_STORE_CTX *ctx, X509_CRL **dcrl,
|
131
|
+
int *pcrl_score, X509_CRL *base,
|
132
|
+
STACK_OF(X509_CRL) *crls);
|
133
|
+
static void crl_akid_check(X509_STORE_CTX *ctx, X509_CRL *crl, X509 **pissuer,
|
134
|
+
int *pcrl_score);
|
135
|
+
static int crl_crldp_check(X509 *x, X509_CRL *crl, int crl_score,
|
136
|
+
unsigned int *preasons);
|
137
|
+
static int check_crl_path(X509_STORE_CTX *ctx, X509 *x);
|
138
|
+
static int check_crl_chain(X509_STORE_CTX *ctx,
|
139
|
+
STACK_OF(X509) *cert_path,
|
140
|
+
STACK_OF(X509) *crl_path);
|
141
|
+
|
142
|
+
static int internal_verify(X509_STORE_CTX *ctx);
|
143
|
+
|
144
|
+
static int null_callback(int ok, X509_STORE_CTX *e)
|
145
|
+
{
|
146
|
+
return ok;
|
147
|
+
}
|
148
|
+
|
149
|
+
/* cert_self_signed checks if |x| is self-signed. If |x| is valid, it returns
|
150
|
+
* one and sets |*out_is_self_signed| to the result. If |x| is invalid, it
|
151
|
+
* returns zero. */
|
152
|
+
static int cert_self_signed(X509 *x, int *out_is_self_signed)
|
153
|
+
{
|
154
|
+
if (!x509v3_cache_extensions(x)) {
|
155
|
+
return 0;
|
156
|
+
}
|
157
|
+
*out_is_self_signed = (x->ex_flags & EXFLAG_SS) != 0;
|
158
|
+
return 1;
|
159
|
+
}
|
160
|
+
|
161
|
+
/* Given a certificate try and find an exact match in the store */
|
162
|
+
|
163
|
+
static X509 *lookup_cert_match(X509_STORE_CTX *ctx, X509 *x)
|
164
|
+
{
|
165
|
+
STACK_OF(X509) *certs;
|
166
|
+
X509 *xtmp = NULL;
|
167
|
+
size_t i;
|
168
|
+
/* Lookup all certs with matching subject name */
|
169
|
+
certs = ctx->lookup_certs(ctx, X509_get_subject_name(x));
|
170
|
+
if (certs == NULL)
|
171
|
+
return NULL;
|
172
|
+
/* Look for exact match */
|
173
|
+
for (i = 0; i < sk_X509_num(certs); i++) {
|
174
|
+
xtmp = sk_X509_value(certs, i);
|
175
|
+
if (!X509_cmp(xtmp, x))
|
176
|
+
break;
|
177
|
+
}
|
178
|
+
if (i < sk_X509_num(certs))
|
179
|
+
X509_up_ref(xtmp);
|
180
|
+
else
|
181
|
+
xtmp = NULL;
|
182
|
+
sk_X509_pop_free(certs, X509_free);
|
183
|
+
return xtmp;
|
184
|
+
}
|
185
|
+
|
186
|
+
int X509_verify_cert(X509_STORE_CTX *ctx)
|
187
|
+
{
|
188
|
+
X509 *x, *xtmp, *xtmp2, *chain_ss = NULL;
|
189
|
+
int bad_chain = 0;
|
190
|
+
X509_VERIFY_PARAM *param = ctx->param;
|
191
|
+
int depth, i, ok = 0;
|
192
|
+
int num, j, retry, trust;
|
193
|
+
int (*cb) (int xok, X509_STORE_CTX *xctx);
|
194
|
+
STACK_OF(X509) *sktmp = NULL;
|
195
|
+
if (ctx->cert == NULL) {
|
196
|
+
OPENSSL_PUT_ERROR(X509, X509_R_NO_CERT_SET_FOR_US_TO_VERIFY);
|
197
|
+
ctx->error = X509_V_ERR_INVALID_CALL;
|
198
|
+
return -1;
|
199
|
+
}
|
200
|
+
if (ctx->chain != NULL) {
|
201
|
+
/*
|
202
|
+
* This X509_STORE_CTX has already been used to verify a cert. We
|
203
|
+
* cannot do another one.
|
204
|
+
*/
|
205
|
+
OPENSSL_PUT_ERROR(X509, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
|
206
|
+
ctx->error = X509_V_ERR_INVALID_CALL;
|
207
|
+
return -1;
|
208
|
+
}
|
209
|
+
|
210
|
+
cb = ctx->verify_cb;
|
211
|
+
|
212
|
+
/*
|
213
|
+
* first we make sure the chain we are going to build is present and that
|
214
|
+
* the first entry is in place
|
215
|
+
*/
|
216
|
+
ctx->chain = sk_X509_new_null();
|
217
|
+
if (ctx->chain == NULL || !sk_X509_push(ctx->chain, ctx->cert)) {
|
218
|
+
OPENSSL_PUT_ERROR(X509, ERR_R_MALLOC_FAILURE);
|
219
|
+
ctx->error = X509_V_ERR_OUT_OF_MEM;
|
220
|
+
goto end;
|
221
|
+
}
|
222
|
+
X509_up_ref(ctx->cert);
|
223
|
+
ctx->last_untrusted = 1;
|
224
|
+
|
225
|
+
/* We use a temporary STACK so we can chop and hack at it. */
|
226
|
+
if (ctx->untrusted != NULL
|
227
|
+
&& (sktmp = sk_X509_dup(ctx->untrusted)) == NULL) {
|
228
|
+
OPENSSL_PUT_ERROR(X509, ERR_R_MALLOC_FAILURE);
|
229
|
+
ctx->error = X509_V_ERR_OUT_OF_MEM;
|
230
|
+
goto end;
|
231
|
+
}
|
232
|
+
|
233
|
+
num = sk_X509_num(ctx->chain);
|
234
|
+
x = sk_X509_value(ctx->chain, num - 1);
|
235
|
+
depth = param->depth;
|
236
|
+
|
237
|
+
for (;;) {
|
238
|
+
/* If we have enough, we break */
|
239
|
+
if (depth < num)
|
240
|
+
break; /* FIXME: If this happens, we should take
|
241
|
+
* note of it and, if appropriate, use the
|
242
|
+
* X509_V_ERR_CERT_CHAIN_TOO_LONG error code
|
243
|
+
* later. */
|
244
|
+
|
245
|
+
int is_self_signed;
|
246
|
+
if (!cert_self_signed(x, &is_self_signed)) {
|
247
|
+
ctx->error = X509_V_ERR_INVALID_EXTENSION;
|
248
|
+
goto end;
|
249
|
+
}
|
250
|
+
|
251
|
+
/* If we are self signed, we break */
|
252
|
+
if (is_self_signed)
|
253
|
+
break;
|
254
|
+
/*
|
255
|
+
* If asked see if we can find issuer in trusted store first
|
256
|
+
*/
|
257
|
+
if (ctx->param->flags & X509_V_FLAG_TRUSTED_FIRST) {
|
258
|
+
ok = ctx->get_issuer(&xtmp, ctx, x);
|
259
|
+
if (ok < 0) {
|
260
|
+
ctx->error = X509_V_ERR_STORE_LOOKUP;
|
261
|
+
goto end;
|
262
|
+
}
|
263
|
+
/*
|
264
|
+
* If successful for now free up cert so it will be picked up
|
265
|
+
* again later.
|
266
|
+
*/
|
267
|
+
if (ok > 0) {
|
268
|
+
X509_free(xtmp);
|
269
|
+
break;
|
270
|
+
}
|
271
|
+
}
|
272
|
+
|
273
|
+
/* If we were passed a cert chain, use it first */
|
274
|
+
if (sktmp != NULL) {
|
275
|
+
xtmp = find_issuer(ctx, sktmp, x);
|
276
|
+
if (xtmp != NULL) {
|
277
|
+
if (!sk_X509_push(ctx->chain, xtmp)) {
|
278
|
+
OPENSSL_PUT_ERROR(X509, ERR_R_MALLOC_FAILURE);
|
279
|
+
ctx->error = X509_V_ERR_OUT_OF_MEM;
|
280
|
+
ok = 0;
|
281
|
+
goto end;
|
282
|
+
}
|
283
|
+
X509_up_ref(xtmp);
|
284
|
+
(void)sk_X509_delete_ptr(sktmp, xtmp);
|
285
|
+
ctx->last_untrusted++;
|
286
|
+
x = xtmp;
|
287
|
+
num++;
|
288
|
+
/*
|
289
|
+
* reparse the full chain for the next one
|
290
|
+
*/
|
291
|
+
continue;
|
292
|
+
}
|
293
|
+
}
|
294
|
+
break;
|
295
|
+
}
|
296
|
+
|
297
|
+
/* Remember how many untrusted certs we have */
|
298
|
+
j = num;
|
299
|
+
/*
|
300
|
+
* at this point, chain should contain a list of untrusted certificates.
|
301
|
+
* We now need to add at least one trusted one, if possible, otherwise we
|
302
|
+
* complain.
|
303
|
+
*/
|
304
|
+
|
305
|
+
do {
|
306
|
+
/*
|
307
|
+
* Examine last certificate in chain and see if it is self signed.
|
308
|
+
*/
|
309
|
+
i = sk_X509_num(ctx->chain);
|
310
|
+
x = sk_X509_value(ctx->chain, i - 1);
|
311
|
+
|
312
|
+
int is_self_signed;
|
313
|
+
if (!cert_self_signed(x, &is_self_signed)) {
|
314
|
+
ctx->error = X509_V_ERR_INVALID_EXTENSION;
|
315
|
+
goto end;
|
316
|
+
}
|
317
|
+
|
318
|
+
if (is_self_signed) {
|
319
|
+
/* we have a self signed certificate */
|
320
|
+
if (sk_X509_num(ctx->chain) == 1) {
|
321
|
+
/*
|
322
|
+
* We have a single self signed certificate: see if we can
|
323
|
+
* find it in the store. We must have an exact match to avoid
|
324
|
+
* possible impersonation.
|
325
|
+
*/
|
326
|
+
ok = ctx->get_issuer(&xtmp, ctx, x);
|
327
|
+
if ((ok <= 0) || X509_cmp(x, xtmp)) {
|
328
|
+
ctx->error = X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT;
|
329
|
+
ctx->current_cert = x;
|
330
|
+
ctx->error_depth = i - 1;
|
331
|
+
if (ok == 1)
|
332
|
+
X509_free(xtmp);
|
333
|
+
bad_chain = 1;
|
334
|
+
ok = cb(0, ctx);
|
335
|
+
if (!ok)
|
336
|
+
goto end;
|
337
|
+
} else {
|
338
|
+
/*
|
339
|
+
* We have a match: replace certificate with store
|
340
|
+
* version so we get any trust settings.
|
341
|
+
*/
|
342
|
+
X509_free(x);
|
343
|
+
x = xtmp;
|
344
|
+
(void)sk_X509_set(ctx->chain, i - 1, x);
|
345
|
+
ctx->last_untrusted = 0;
|
346
|
+
}
|
347
|
+
} else {
|
348
|
+
/*
|
349
|
+
* extract and save self signed certificate for later use
|
350
|
+
*/
|
351
|
+
chain_ss = sk_X509_pop(ctx->chain);
|
352
|
+
ctx->last_untrusted--;
|
353
|
+
num--;
|
354
|
+
j--;
|
355
|
+
x = sk_X509_value(ctx->chain, num - 1);
|
356
|
+
}
|
357
|
+
}
|
358
|
+
/* We now lookup certs from the certificate store */
|
359
|
+
for (;;) {
|
360
|
+
/* If we have enough, we break */
|
361
|
+
if (depth < num)
|
362
|
+
break;
|
363
|
+
if (!cert_self_signed(x, &is_self_signed)) {
|
364
|
+
ctx->error = X509_V_ERR_INVALID_EXTENSION;
|
365
|
+
goto end;
|
366
|
+
}
|
367
|
+
/* If we are self signed, we break */
|
368
|
+
if (is_self_signed)
|
369
|
+
break;
|
370
|
+
ok = ctx->get_issuer(&xtmp, ctx, x);
|
371
|
+
|
372
|
+
if (ok < 0) {
|
373
|
+
ctx->error = X509_V_ERR_STORE_LOOKUP;
|
374
|
+
goto end;
|
375
|
+
}
|
376
|
+
if (ok == 0)
|
377
|
+
break;
|
378
|
+
x = xtmp;
|
379
|
+
if (!sk_X509_push(ctx->chain, x)) {
|
380
|
+
X509_free(xtmp);
|
381
|
+
OPENSSL_PUT_ERROR(X509, ERR_R_MALLOC_FAILURE);
|
382
|
+
ctx->error = X509_V_ERR_OUT_OF_MEM;
|
383
|
+
ok = 0;
|
384
|
+
goto end;
|
385
|
+
}
|
386
|
+
num++;
|
387
|
+
}
|
388
|
+
|
389
|
+
/* we now have our chain, lets check it... */
|
390
|
+
trust = check_trust(ctx);
|
391
|
+
|
392
|
+
/* If explicitly rejected error */
|
393
|
+
if (trust == X509_TRUST_REJECTED) {
|
394
|
+
ok = 0;
|
395
|
+
goto end;
|
396
|
+
}
|
397
|
+
/*
|
398
|
+
* If it's not explicitly trusted then check if there is an alternative
|
399
|
+
* chain that could be used. We only do this if we haven't already
|
400
|
+
* checked via TRUSTED_FIRST and the user hasn't switched off alternate
|
401
|
+
* chain checking
|
402
|
+
*/
|
403
|
+
retry = 0;
|
404
|
+
if (trust != X509_TRUST_TRUSTED
|
405
|
+
&& !(ctx->param->flags & X509_V_FLAG_TRUSTED_FIRST)
|
406
|
+
&& !(ctx->param->flags & X509_V_FLAG_NO_ALT_CHAINS)) {
|
407
|
+
while (j-- > 1) {
|
408
|
+
xtmp2 = sk_X509_value(ctx->chain, j - 1);
|
409
|
+
ok = ctx->get_issuer(&xtmp, ctx, xtmp2);
|
410
|
+
if (ok < 0)
|
411
|
+
goto end;
|
412
|
+
/* Check if we found an alternate chain */
|
413
|
+
if (ok > 0) {
|
414
|
+
/*
|
415
|
+
* Free up the found cert we'll add it again later
|
416
|
+
*/
|
417
|
+
X509_free(xtmp);
|
418
|
+
|
419
|
+
/*
|
420
|
+
* Dump all the certs above this point - we've found an
|
421
|
+
* alternate chain
|
422
|
+
*/
|
423
|
+
while (num > j) {
|
424
|
+
xtmp = sk_X509_pop(ctx->chain);
|
425
|
+
X509_free(xtmp);
|
426
|
+
num--;
|
427
|
+
}
|
428
|
+
ctx->last_untrusted = sk_X509_num(ctx->chain);
|
429
|
+
retry = 1;
|
430
|
+
break;
|
431
|
+
}
|
432
|
+
}
|
433
|
+
}
|
434
|
+
} while (retry);
|
435
|
+
|
436
|
+
/*
|
437
|
+
* If not explicitly trusted then indicate error unless it's a single
|
438
|
+
* self signed certificate in which case we've indicated an error already
|
439
|
+
* and set bad_chain == 1
|
440
|
+
*/
|
441
|
+
if (trust != X509_TRUST_TRUSTED && !bad_chain) {
|
442
|
+
if ((chain_ss == NULL) || !ctx->check_issued(ctx, x, chain_ss)) {
|
443
|
+
if (ctx->last_untrusted >= num)
|
444
|
+
ctx->error = X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY;
|
445
|
+
else
|
446
|
+
ctx->error = X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT;
|
447
|
+
ctx->current_cert = x;
|
448
|
+
} else {
|
449
|
+
|
450
|
+
sk_X509_push(ctx->chain, chain_ss);
|
451
|
+
num++;
|
452
|
+
ctx->last_untrusted = num;
|
453
|
+
ctx->current_cert = chain_ss;
|
454
|
+
ctx->error = X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN;
|
455
|
+
chain_ss = NULL;
|
456
|
+
}
|
457
|
+
|
458
|
+
ctx->error_depth = num - 1;
|
459
|
+
bad_chain = 1;
|
460
|
+
ok = cb(0, ctx);
|
461
|
+
if (!ok)
|
462
|
+
goto end;
|
463
|
+
}
|
464
|
+
|
465
|
+
/* We have the chain complete: now we need to check its purpose */
|
466
|
+
ok = check_chain_extensions(ctx);
|
467
|
+
|
468
|
+
if (!ok)
|
469
|
+
goto end;
|
470
|
+
|
471
|
+
ok = check_id(ctx);
|
472
|
+
|
473
|
+
if (!ok)
|
474
|
+
goto end;
|
475
|
+
|
476
|
+
/*
|
477
|
+
* Check revocation status: we do this after copying parameters because
|
478
|
+
* they may be needed for CRL signature verification.
|
479
|
+
*/
|
480
|
+
|
481
|
+
ok = ctx->check_revocation(ctx);
|
482
|
+
if (!ok)
|
483
|
+
goto end;
|
484
|
+
|
485
|
+
int err = X509_chain_check_suiteb(&ctx->error_depth, NULL, ctx->chain,
|
486
|
+
ctx->param->flags);
|
487
|
+
if (err != X509_V_OK) {
|
488
|
+
ctx->error = err;
|
489
|
+
ctx->current_cert = sk_X509_value(ctx->chain, ctx->error_depth);
|
490
|
+
ok = cb(0, ctx);
|
491
|
+
if (!ok)
|
492
|
+
goto end;
|
493
|
+
}
|
494
|
+
|
495
|
+
/* At this point, we have a chain and need to verify it */
|
496
|
+
if (ctx->verify != NULL)
|
497
|
+
ok = ctx->verify(ctx);
|
498
|
+
else
|
499
|
+
ok = internal_verify(ctx);
|
500
|
+
if (!ok)
|
501
|
+
goto end;
|
502
|
+
|
503
|
+
/* Check name constraints */
|
504
|
+
|
505
|
+
ok = check_name_constraints(ctx);
|
506
|
+
if (!ok)
|
507
|
+
goto end;
|
508
|
+
|
509
|
+
/* If we get this far evaluate policies */
|
510
|
+
if (!bad_chain && (ctx->param->flags & X509_V_FLAG_POLICY_CHECK))
|
511
|
+
ok = ctx->check_policy(ctx);
|
512
|
+
|
513
|
+
end:
|
514
|
+
if (sktmp != NULL)
|
515
|
+
sk_X509_free(sktmp);
|
516
|
+
if (chain_ss != NULL)
|
517
|
+
X509_free(chain_ss);
|
518
|
+
|
519
|
+
/* Safety net, error returns must set ctx->error */
|
520
|
+
if (ok <= 0 && ctx->error == X509_V_OK)
|
521
|
+
ctx->error = X509_V_ERR_UNSPECIFIED;
|
522
|
+
return ok;
|
523
|
+
}
|
524
|
+
|
525
|
+
/*
|
526
|
+
* Given a STACK_OF(X509) find the issuer of cert (if any)
|
527
|
+
*/
|
528
|
+
|
529
|
+
static X509 *find_issuer(X509_STORE_CTX *ctx, STACK_OF(X509) *sk, X509 *x)
|
530
|
+
{
|
531
|
+
size_t i;
|
532
|
+
X509 *issuer;
|
533
|
+
for (i = 0; i < sk_X509_num(sk); i++) {
|
534
|
+
issuer = sk_X509_value(sk, i);
|
535
|
+
if (ctx->check_issued(ctx, x, issuer))
|
536
|
+
return issuer;
|
537
|
+
}
|
538
|
+
return NULL;
|
539
|
+
}
|
540
|
+
|
541
|
+
/* Given a possible certificate and issuer check them */
|
542
|
+
|
543
|
+
static int check_issued(X509_STORE_CTX *ctx, X509 *x, X509 *issuer)
|
544
|
+
{
|
545
|
+
int ret;
|
546
|
+
ret = X509_check_issued(issuer, x);
|
547
|
+
if (ret == X509_V_OK)
|
548
|
+
return 1;
|
549
|
+
/* If we haven't asked for issuer errors don't set ctx */
|
550
|
+
if (!(ctx->param->flags & X509_V_FLAG_CB_ISSUER_CHECK))
|
551
|
+
return 0;
|
552
|
+
|
553
|
+
ctx->error = ret;
|
554
|
+
ctx->current_cert = x;
|
555
|
+
ctx->current_issuer = issuer;
|
556
|
+
return ctx->verify_cb(0, ctx);
|
557
|
+
}
|
558
|
+
|
559
|
+
/* Alternative lookup method: look from a STACK stored in other_ctx */
|
560
|
+
|
561
|
+
static int get_issuer_sk(X509 **issuer, X509_STORE_CTX *ctx, X509 *x)
|
562
|
+
{
|
563
|
+
*issuer = find_issuer(ctx, ctx->other_ctx, x);
|
564
|
+
if (*issuer) {
|
565
|
+
X509_up_ref(*issuer);
|
566
|
+
return 1;
|
567
|
+
} else
|
568
|
+
return 0;
|
569
|
+
}
|
570
|
+
|
571
|
+
/*
|
572
|
+
* Check a certificate chains extensions for consistency with the supplied
|
573
|
+
* purpose
|
574
|
+
*/
|
575
|
+
|
576
|
+
static int check_chain_extensions(X509_STORE_CTX *ctx)
|
577
|
+
{
|
578
|
+
int i, ok = 0, plen = 0;
|
579
|
+
X509 *x;
|
580
|
+
int (*cb) (int xok, X509_STORE_CTX *xctx);
|
581
|
+
int proxy_path_length = 0;
|
582
|
+
int purpose;
|
583
|
+
int allow_proxy_certs;
|
584
|
+
cb = ctx->verify_cb;
|
585
|
+
|
586
|
+
enum {
|
587
|
+
// ca_or_leaf allows either type of certificate so that direct use of
|
588
|
+
// self-signed certificates works.
|
589
|
+
ca_or_leaf,
|
590
|
+
must_be_ca,
|
591
|
+
must_not_be_ca,
|
592
|
+
} ca_requirement;
|
593
|
+
|
594
|
+
/* CRL path validation */
|
595
|
+
if (ctx->parent) {
|
596
|
+
allow_proxy_certs = 0;
|
597
|
+
purpose = X509_PURPOSE_CRL_SIGN;
|
598
|
+
} else {
|
599
|
+
allow_proxy_certs =
|
600
|
+
! !(ctx->param->flags & X509_V_FLAG_ALLOW_PROXY_CERTS);
|
601
|
+
purpose = ctx->param->purpose;
|
602
|
+
}
|
603
|
+
|
604
|
+
ca_requirement = ca_or_leaf;
|
605
|
+
|
606
|
+
/* Check all untrusted certificates */
|
607
|
+
for (i = 0; i < ctx->last_untrusted; i++) {
|
608
|
+
int ret;
|
609
|
+
x = sk_X509_value(ctx->chain, i);
|
610
|
+
if (!(ctx->param->flags & X509_V_FLAG_IGNORE_CRITICAL)
|
611
|
+
&& (x->ex_flags & EXFLAG_CRITICAL)) {
|
612
|
+
ctx->error = X509_V_ERR_UNHANDLED_CRITICAL_EXTENSION;
|
613
|
+
ctx->error_depth = i;
|
614
|
+
ctx->current_cert = x;
|
615
|
+
ok = cb(0, ctx);
|
616
|
+
if (!ok)
|
617
|
+
goto end;
|
618
|
+
}
|
619
|
+
if (!allow_proxy_certs && (x->ex_flags & EXFLAG_PROXY)) {
|
620
|
+
ctx->error = X509_V_ERR_PROXY_CERTIFICATES_NOT_ALLOWED;
|
621
|
+
ctx->error_depth = i;
|
622
|
+
ctx->current_cert = x;
|
623
|
+
ok = cb(0, ctx);
|
624
|
+
if (!ok)
|
625
|
+
goto end;
|
626
|
+
}
|
627
|
+
|
628
|
+
switch (ca_requirement) {
|
629
|
+
case ca_or_leaf:
|
630
|
+
ret = 1;
|
631
|
+
break;
|
632
|
+
case must_not_be_ca:
|
633
|
+
if (X509_check_ca(x)) {
|
634
|
+
ret = 0;
|
635
|
+
ctx->error = X509_V_ERR_INVALID_NON_CA;
|
636
|
+
} else
|
637
|
+
ret = 1;
|
638
|
+
break;
|
639
|
+
case must_be_ca:
|
640
|
+
if (!X509_check_ca(x)) {
|
641
|
+
ret = 0;
|
642
|
+
ctx->error = X509_V_ERR_INVALID_CA;
|
643
|
+
} else
|
644
|
+
ret = 1;
|
645
|
+
break;
|
646
|
+
default:
|
647
|
+
// impossible.
|
648
|
+
ret = 0;
|
649
|
+
}
|
650
|
+
|
651
|
+
if (ret == 0) {
|
652
|
+
ctx->error_depth = i;
|
653
|
+
ctx->current_cert = x;
|
654
|
+
ok = cb(0, ctx);
|
655
|
+
if (!ok)
|
656
|
+
goto end;
|
657
|
+
}
|
658
|
+
if (ctx->param->purpose > 0) {
|
659
|
+
ret = X509_check_purpose(x, purpose, ca_requirement == must_be_ca);
|
660
|
+
if (ret != 1) {
|
661
|
+
ret = 0;
|
662
|
+
ctx->error = X509_V_ERR_INVALID_PURPOSE;
|
663
|
+
ctx->error_depth = i;
|
664
|
+
ctx->current_cert = x;
|
665
|
+
ok = cb(0, ctx);
|
666
|
+
if (!ok)
|
667
|
+
goto end;
|
668
|
+
}
|
669
|
+
}
|
670
|
+
/* Check pathlen if not self issued */
|
671
|
+
if ((i > 1) && !(x->ex_flags & EXFLAG_SI)
|
672
|
+
&& (x->ex_pathlen != -1)
|
673
|
+
&& (plen > (x->ex_pathlen + proxy_path_length + 1))) {
|
674
|
+
ctx->error = X509_V_ERR_PATH_LENGTH_EXCEEDED;
|
675
|
+
ctx->error_depth = i;
|
676
|
+
ctx->current_cert = x;
|
677
|
+
ok = cb(0, ctx);
|
678
|
+
if (!ok)
|
679
|
+
goto end;
|
680
|
+
}
|
681
|
+
/* Increment path length if not self issued */
|
682
|
+
if (!(x->ex_flags & EXFLAG_SI))
|
683
|
+
plen++;
|
684
|
+
/*
|
685
|
+
* If this certificate is a proxy certificate, the next certificate
|
686
|
+
* must be another proxy certificate or a EE certificate. If not,
|
687
|
+
* the next certificate must be a CA certificate.
|
688
|
+
*/
|
689
|
+
if (x->ex_flags & EXFLAG_PROXY) {
|
690
|
+
if (x->ex_pcpathlen != -1 && i > x->ex_pcpathlen) {
|
691
|
+
ctx->error = X509_V_ERR_PROXY_PATH_LENGTH_EXCEEDED;
|
692
|
+
ctx->error_depth = i;
|
693
|
+
ctx->current_cert = x;
|
694
|
+
ok = cb(0, ctx);
|
695
|
+
if (!ok)
|
696
|
+
goto end;
|
697
|
+
}
|
698
|
+
proxy_path_length++;
|
699
|
+
ca_requirement = must_not_be_ca;
|
700
|
+
} else {
|
701
|
+
ca_requirement = must_be_ca;
|
702
|
+
}
|
703
|
+
}
|
704
|
+
ok = 1;
|
705
|
+
end:
|
706
|
+
return ok;
|
707
|
+
}
|
708
|
+
|
709
|
+
static int reject_dns_name_in_common_name(X509 *x509)
|
710
|
+
{
|
711
|
+
X509_NAME *name = X509_get_subject_name(x509);
|
712
|
+
int i = -1;
|
713
|
+
for (;;) {
|
714
|
+
i = X509_NAME_get_index_by_NID(name, NID_commonName, i);
|
715
|
+
if (i == -1) {
|
716
|
+
return X509_V_OK;
|
717
|
+
}
|
718
|
+
|
719
|
+
X509_NAME_ENTRY *entry = X509_NAME_get_entry(name, i);
|
720
|
+
ASN1_STRING *common_name = X509_NAME_ENTRY_get_data(entry);
|
721
|
+
unsigned char *idval;
|
722
|
+
int idlen = ASN1_STRING_to_UTF8(&idval, common_name);
|
723
|
+
if (idlen < 0) {
|
724
|
+
return X509_V_ERR_OUT_OF_MEM;
|
725
|
+
}
|
726
|
+
/* Only process attributes that look like host names. Note it is
|
727
|
+
* important that this check be mirrored in |X509_check_host|. */
|
728
|
+
int looks_like_dns = x509v3_looks_like_dns_name(idval, (size_t)idlen);
|
729
|
+
OPENSSL_free(idval);
|
730
|
+
if (looks_like_dns) {
|
731
|
+
return X509_V_ERR_NAME_CONSTRAINTS_WITHOUT_SANS;
|
732
|
+
}
|
733
|
+
}
|
734
|
+
}
|
735
|
+
|
736
|
+
static int check_name_constraints(X509_STORE_CTX *ctx)
|
737
|
+
{
|
738
|
+
int i, j, rv;
|
739
|
+
int has_name_constraints = 0;
|
740
|
+
/* Check name constraints for all certificates */
|
741
|
+
for (i = sk_X509_num(ctx->chain) - 1; i >= 0; i--) {
|
742
|
+
X509 *x = sk_X509_value(ctx->chain, i);
|
743
|
+
/* Ignore self issued certs unless last in chain */
|
744
|
+
if (i && (x->ex_flags & EXFLAG_SI))
|
745
|
+
continue;
|
746
|
+
/*
|
747
|
+
* Check against constraints for all certificates higher in chain
|
748
|
+
* including trust anchor. Trust anchor not strictly speaking needed
|
749
|
+
* but if it includes constraints it is to be assumed it expects them
|
750
|
+
* to be obeyed.
|
751
|
+
*/
|
752
|
+
for (j = sk_X509_num(ctx->chain) - 1; j > i; j--) {
|
753
|
+
NAME_CONSTRAINTS *nc = sk_X509_value(ctx->chain, j)->nc;
|
754
|
+
if (nc) {
|
755
|
+
has_name_constraints = 1;
|
756
|
+
rv = NAME_CONSTRAINTS_check(x, nc);
|
757
|
+
switch (rv) {
|
758
|
+
case X509_V_OK:
|
759
|
+
continue;
|
760
|
+
case X509_V_ERR_OUT_OF_MEM:
|
761
|
+
ctx->error = rv;
|
762
|
+
return 0;
|
763
|
+
default:
|
764
|
+
ctx->error = rv;
|
765
|
+
ctx->error_depth = i;
|
766
|
+
ctx->current_cert = x;
|
767
|
+
if (!ctx->verify_cb(0, ctx))
|
768
|
+
return 0;
|
769
|
+
break;
|
770
|
+
}
|
771
|
+
}
|
772
|
+
}
|
773
|
+
}
|
774
|
+
|
775
|
+
/* Name constraints do not match against the common name, but
|
776
|
+
* |X509_check_host| still implements the legacy behavior where, on
|
777
|
+
* certificates lacking a SAN list, DNS-like names in the common name are
|
778
|
+
* checked instead.
|
779
|
+
*
|
780
|
+
* While we could apply the name constraints to the common name, name
|
781
|
+
* constraints are rare enough that can hold such certificates to a higher
|
782
|
+
* standard. Note this does not make "DNS-like" heuristic failures any
|
783
|
+
* worse. A decorative common-name misidentified as a DNS name would fail
|
784
|
+
* the name constraint anyway. */
|
785
|
+
X509 *leaf = sk_X509_value(ctx->chain, 0);
|
786
|
+
if (has_name_constraints && leaf->altname == NULL) {
|
787
|
+
rv = reject_dns_name_in_common_name(leaf);
|
788
|
+
switch (rv) {
|
789
|
+
case X509_V_OK:
|
790
|
+
break;
|
791
|
+
case X509_V_ERR_OUT_OF_MEM:
|
792
|
+
ctx->error = rv;
|
793
|
+
return 0;
|
794
|
+
default:
|
795
|
+
ctx->error = rv;
|
796
|
+
ctx->error_depth = i;
|
797
|
+
ctx->current_cert = leaf;
|
798
|
+
if (!ctx->verify_cb(0, ctx))
|
799
|
+
return 0;
|
800
|
+
break;
|
801
|
+
}
|
802
|
+
}
|
803
|
+
|
804
|
+
return 1;
|
805
|
+
}
|
806
|
+
|
807
|
+
static int check_id_error(X509_STORE_CTX *ctx, int errcode)
|
808
|
+
{
|
809
|
+
ctx->error = errcode;
|
810
|
+
ctx->current_cert = ctx->cert;
|
811
|
+
ctx->error_depth = 0;
|
812
|
+
return ctx->verify_cb(0, ctx);
|
813
|
+
}
|
814
|
+
|
815
|
+
static int check_hosts(X509 *x, X509_VERIFY_PARAM *param)
|
816
|
+
{
|
817
|
+
size_t i;
|
818
|
+
size_t n = sk_OPENSSL_STRING_num(param->hosts);
|
819
|
+
char *name;
|
820
|
+
|
821
|
+
if (param->peername != NULL) {
|
822
|
+
OPENSSL_free(param->peername);
|
823
|
+
param->peername = NULL;
|
824
|
+
}
|
825
|
+
for (i = 0; i < n; ++i) {
|
826
|
+
name = sk_OPENSSL_STRING_value(param->hosts, i);
|
827
|
+
if (X509_check_host(x, name, strlen(name), param->hostflags,
|
828
|
+
¶m->peername) > 0)
|
829
|
+
return 1;
|
830
|
+
}
|
831
|
+
return n == 0;
|
832
|
+
}
|
833
|
+
|
834
|
+
static int check_id(X509_STORE_CTX *ctx)
|
835
|
+
{
|
836
|
+
X509_VERIFY_PARAM *vpm = ctx->param;
|
837
|
+
X509 *x = ctx->cert;
|
838
|
+
if (vpm->poison) {
|
839
|
+
if (!check_id_error(ctx, X509_V_ERR_INVALID_CALL))
|
840
|
+
return 0;
|
841
|
+
}
|
842
|
+
if (vpm->hosts && check_hosts(x, vpm) <= 0) {
|
843
|
+
if (!check_id_error(ctx, X509_V_ERR_HOSTNAME_MISMATCH))
|
844
|
+
return 0;
|
845
|
+
}
|
846
|
+
if (vpm->email && X509_check_email(x, vpm->email, vpm->emaillen, 0) <= 0) {
|
847
|
+
if (!check_id_error(ctx, X509_V_ERR_EMAIL_MISMATCH))
|
848
|
+
return 0;
|
849
|
+
}
|
850
|
+
if (vpm->ip && X509_check_ip(x, vpm->ip, vpm->iplen, 0) <= 0) {
|
851
|
+
if (!check_id_error(ctx, X509_V_ERR_IP_ADDRESS_MISMATCH))
|
852
|
+
return 0;
|
853
|
+
}
|
854
|
+
return 1;
|
855
|
+
}
|
856
|
+
|
857
|
+
static int check_trust(X509_STORE_CTX *ctx)
|
858
|
+
{
|
859
|
+
size_t i;
|
860
|
+
int ok;
|
861
|
+
X509 *x = NULL;
|
862
|
+
int (*cb) (int xok, X509_STORE_CTX *xctx);
|
863
|
+
cb = ctx->verify_cb;
|
864
|
+
/* Check all trusted certificates in chain */
|
865
|
+
for (i = ctx->last_untrusted; i < sk_X509_num(ctx->chain); i++) {
|
866
|
+
x = sk_X509_value(ctx->chain, i);
|
867
|
+
ok = X509_check_trust(x, ctx->param->trust, 0);
|
868
|
+
/* If explicitly trusted return trusted */
|
869
|
+
if (ok == X509_TRUST_TRUSTED)
|
870
|
+
return X509_TRUST_TRUSTED;
|
871
|
+
/*
|
872
|
+
* If explicitly rejected notify callback and reject if not
|
873
|
+
* overridden.
|
874
|
+
*/
|
875
|
+
if (ok == X509_TRUST_REJECTED) {
|
876
|
+
ctx->error_depth = i;
|
877
|
+
ctx->current_cert = x;
|
878
|
+
ctx->error = X509_V_ERR_CERT_REJECTED;
|
879
|
+
ok = cb(0, ctx);
|
880
|
+
if (!ok)
|
881
|
+
return X509_TRUST_REJECTED;
|
882
|
+
}
|
883
|
+
}
|
884
|
+
/*
|
885
|
+
* If we accept partial chains and have at least one trusted certificate
|
886
|
+
* return success.
|
887
|
+
*/
|
888
|
+
if (ctx->param->flags & X509_V_FLAG_PARTIAL_CHAIN) {
|
889
|
+
X509 *mx;
|
890
|
+
if (ctx->last_untrusted < (int)sk_X509_num(ctx->chain))
|
891
|
+
return X509_TRUST_TRUSTED;
|
892
|
+
x = sk_X509_value(ctx->chain, 0);
|
893
|
+
mx = lookup_cert_match(ctx, x);
|
894
|
+
if (mx) {
|
895
|
+
(void)sk_X509_set(ctx->chain, 0, mx);
|
896
|
+
X509_free(x);
|
897
|
+
ctx->last_untrusted = 0;
|
898
|
+
return X509_TRUST_TRUSTED;
|
899
|
+
}
|
900
|
+
}
|
901
|
+
|
902
|
+
/*
|
903
|
+
* If no trusted certs in chain at all return untrusted and allow
|
904
|
+
* standard (no issuer cert) etc errors to be indicated.
|
905
|
+
*/
|
906
|
+
return X509_TRUST_UNTRUSTED;
|
907
|
+
}
|
908
|
+
|
909
|
+
static int check_revocation(X509_STORE_CTX *ctx)
|
910
|
+
{
|
911
|
+
int i, last, ok;
|
912
|
+
if (!(ctx->param->flags & X509_V_FLAG_CRL_CHECK))
|
913
|
+
return 1;
|
914
|
+
if (ctx->param->flags & X509_V_FLAG_CRL_CHECK_ALL)
|
915
|
+
last = sk_X509_num(ctx->chain) - 1;
|
916
|
+
else {
|
917
|
+
/* If checking CRL paths this isn't the EE certificate */
|
918
|
+
if (ctx->parent)
|
919
|
+
return 1;
|
920
|
+
last = 0;
|
921
|
+
}
|
922
|
+
for (i = 0; i <= last; i++) {
|
923
|
+
ctx->error_depth = i;
|
924
|
+
ok = check_cert(ctx);
|
925
|
+
if (!ok)
|
926
|
+
return ok;
|
927
|
+
}
|
928
|
+
return 1;
|
929
|
+
}
|
930
|
+
|
931
|
+
static int check_cert(X509_STORE_CTX *ctx)
|
932
|
+
{
|
933
|
+
X509_CRL *crl = NULL, *dcrl = NULL;
|
934
|
+
X509 *x;
|
935
|
+
int ok = 0, cnum;
|
936
|
+
unsigned int last_reasons;
|
937
|
+
cnum = ctx->error_depth;
|
938
|
+
x = sk_X509_value(ctx->chain, cnum);
|
939
|
+
ctx->current_cert = x;
|
940
|
+
ctx->current_issuer = NULL;
|
941
|
+
ctx->current_crl_score = 0;
|
942
|
+
ctx->current_reasons = 0;
|
943
|
+
while (ctx->current_reasons != CRLDP_ALL_REASONS) {
|
944
|
+
last_reasons = ctx->current_reasons;
|
945
|
+
/* Try to retrieve relevant CRL */
|
946
|
+
if (ctx->get_crl)
|
947
|
+
ok = ctx->get_crl(ctx, &crl, x);
|
948
|
+
else
|
949
|
+
ok = get_crl_delta(ctx, &crl, &dcrl, x);
|
950
|
+
/*
|
951
|
+
* If error looking up CRL, nothing we can do except notify callback
|
952
|
+
*/
|
953
|
+
if (!ok) {
|
954
|
+
ctx->error = X509_V_ERR_UNABLE_TO_GET_CRL;
|
955
|
+
ok = ctx->verify_cb(0, ctx);
|
956
|
+
goto err;
|
957
|
+
}
|
958
|
+
ctx->current_crl = crl;
|
959
|
+
ok = ctx->check_crl(ctx, crl);
|
960
|
+
if (!ok)
|
961
|
+
goto err;
|
962
|
+
|
963
|
+
if (dcrl) {
|
964
|
+
ok = ctx->check_crl(ctx, dcrl);
|
965
|
+
if (!ok)
|
966
|
+
goto err;
|
967
|
+
ok = ctx->cert_crl(ctx, dcrl, x);
|
968
|
+
if (!ok)
|
969
|
+
goto err;
|
970
|
+
} else
|
971
|
+
ok = 1;
|
972
|
+
|
973
|
+
/* Don't look in full CRL if delta reason is removefromCRL */
|
974
|
+
if (ok != 2) {
|
975
|
+
ok = ctx->cert_crl(ctx, crl, x);
|
976
|
+
if (!ok)
|
977
|
+
goto err;
|
978
|
+
}
|
979
|
+
|
980
|
+
X509_CRL_free(crl);
|
981
|
+
X509_CRL_free(dcrl);
|
982
|
+
crl = NULL;
|
983
|
+
dcrl = NULL;
|
984
|
+
/*
|
985
|
+
* If reasons not updated we wont get anywhere by another iteration,
|
986
|
+
* so exit loop.
|
987
|
+
*/
|
988
|
+
if (last_reasons == ctx->current_reasons) {
|
989
|
+
ctx->error = X509_V_ERR_UNABLE_TO_GET_CRL;
|
990
|
+
ok = ctx->verify_cb(0, ctx);
|
991
|
+
goto err;
|
992
|
+
}
|
993
|
+
}
|
994
|
+
err:
|
995
|
+
X509_CRL_free(crl);
|
996
|
+
X509_CRL_free(dcrl);
|
997
|
+
|
998
|
+
ctx->current_crl = NULL;
|
999
|
+
return ok;
|
1000
|
+
|
1001
|
+
}
|
1002
|
+
|
1003
|
+
/* Check CRL times against values in X509_STORE_CTX */
|
1004
|
+
|
1005
|
+
static int check_crl_time(X509_STORE_CTX *ctx, X509_CRL *crl, int notify)
|
1006
|
+
{
|
1007
|
+
time_t *ptime;
|
1008
|
+
int i;
|
1009
|
+
if (notify)
|
1010
|
+
ctx->current_crl = crl;
|
1011
|
+
if (ctx->param->flags & X509_V_FLAG_USE_CHECK_TIME)
|
1012
|
+
ptime = &ctx->param->check_time;
|
1013
|
+
else
|
1014
|
+
ptime = NULL;
|
1015
|
+
|
1016
|
+
i = X509_cmp_time(X509_CRL_get0_lastUpdate(crl), ptime);
|
1017
|
+
if (i == 0) {
|
1018
|
+
if (!notify)
|
1019
|
+
return 0;
|
1020
|
+
ctx->error = X509_V_ERR_ERROR_IN_CRL_LAST_UPDATE_FIELD;
|
1021
|
+
if (!ctx->verify_cb(0, ctx))
|
1022
|
+
return 0;
|
1023
|
+
}
|
1024
|
+
|
1025
|
+
if (i > 0) {
|
1026
|
+
if (!notify)
|
1027
|
+
return 0;
|
1028
|
+
ctx->error = X509_V_ERR_CRL_NOT_YET_VALID;
|
1029
|
+
if (!ctx->verify_cb(0, ctx))
|
1030
|
+
return 0;
|
1031
|
+
}
|
1032
|
+
|
1033
|
+
if (X509_CRL_get0_nextUpdate(crl)) {
|
1034
|
+
i = X509_cmp_time(X509_CRL_get0_nextUpdate(crl), ptime);
|
1035
|
+
|
1036
|
+
if (i == 0) {
|
1037
|
+
if (!notify)
|
1038
|
+
return 0;
|
1039
|
+
ctx->error = X509_V_ERR_ERROR_IN_CRL_NEXT_UPDATE_FIELD;
|
1040
|
+
if (!ctx->verify_cb(0, ctx))
|
1041
|
+
return 0;
|
1042
|
+
}
|
1043
|
+
/* Ignore expiry of base CRL is delta is valid */
|
1044
|
+
if ((i < 0) && !(ctx->current_crl_score & CRL_SCORE_TIME_DELTA)) {
|
1045
|
+
if (!notify)
|
1046
|
+
return 0;
|
1047
|
+
ctx->error = X509_V_ERR_CRL_HAS_EXPIRED;
|
1048
|
+
if (!ctx->verify_cb(0, ctx))
|
1049
|
+
return 0;
|
1050
|
+
}
|
1051
|
+
}
|
1052
|
+
|
1053
|
+
if (notify)
|
1054
|
+
ctx->current_crl = NULL;
|
1055
|
+
|
1056
|
+
return 1;
|
1057
|
+
}
|
1058
|
+
|
1059
|
+
static int get_crl_sk(X509_STORE_CTX *ctx, X509_CRL **pcrl, X509_CRL **pdcrl,
|
1060
|
+
X509 **pissuer, int *pscore, unsigned int *preasons,
|
1061
|
+
STACK_OF(X509_CRL) *crls)
|
1062
|
+
{
|
1063
|
+
int crl_score, best_score = *pscore;
|
1064
|
+
size_t i;
|
1065
|
+
unsigned int reasons, best_reasons = 0;
|
1066
|
+
X509 *x = ctx->current_cert;
|
1067
|
+
X509_CRL *crl, *best_crl = NULL;
|
1068
|
+
X509 *crl_issuer = NULL, *best_crl_issuer = NULL;
|
1069
|
+
|
1070
|
+
for (i = 0; i < sk_X509_CRL_num(crls); i++) {
|
1071
|
+
crl = sk_X509_CRL_value(crls, i);
|
1072
|
+
reasons = *preasons;
|
1073
|
+
crl_score = get_crl_score(ctx, &crl_issuer, &reasons, crl, x);
|
1074
|
+
if (crl_score < best_score || crl_score == 0)
|
1075
|
+
continue;
|
1076
|
+
/* If current CRL is equivalent use it if it is newer */
|
1077
|
+
if (crl_score == best_score && best_crl != NULL) {
|
1078
|
+
int day, sec;
|
1079
|
+
if (ASN1_TIME_diff(&day, &sec, X509_CRL_get0_lastUpdate(best_crl),
|
1080
|
+
X509_CRL_get0_lastUpdate(crl)) == 0)
|
1081
|
+
continue;
|
1082
|
+
/*
|
1083
|
+
* ASN1_TIME_diff never returns inconsistent signs for |day|
|
1084
|
+
* and |sec|.
|
1085
|
+
*/
|
1086
|
+
if (day <= 0 && sec <= 0)
|
1087
|
+
continue;
|
1088
|
+
}
|
1089
|
+
best_crl = crl;
|
1090
|
+
best_crl_issuer = crl_issuer;
|
1091
|
+
best_score = crl_score;
|
1092
|
+
best_reasons = reasons;
|
1093
|
+
}
|
1094
|
+
|
1095
|
+
if (best_crl) {
|
1096
|
+
if (*pcrl)
|
1097
|
+
X509_CRL_free(*pcrl);
|
1098
|
+
*pcrl = best_crl;
|
1099
|
+
*pissuer = best_crl_issuer;
|
1100
|
+
*pscore = best_score;
|
1101
|
+
*preasons = best_reasons;
|
1102
|
+
X509_CRL_up_ref(best_crl);
|
1103
|
+
if (*pdcrl) {
|
1104
|
+
X509_CRL_free(*pdcrl);
|
1105
|
+
*pdcrl = NULL;
|
1106
|
+
}
|
1107
|
+
get_delta_sk(ctx, pdcrl, pscore, best_crl, crls);
|
1108
|
+
}
|
1109
|
+
|
1110
|
+
if (best_score >= CRL_SCORE_VALID)
|
1111
|
+
return 1;
|
1112
|
+
|
1113
|
+
return 0;
|
1114
|
+
}
|
1115
|
+
|
1116
|
+
/*
|
1117
|
+
* Compare two CRL extensions for delta checking purposes. They should be
|
1118
|
+
* both present or both absent. If both present all fields must be identical.
|
1119
|
+
*/
|
1120
|
+
|
1121
|
+
static int crl_extension_match(X509_CRL *a, X509_CRL *b, int nid)
|
1122
|
+
{
|
1123
|
+
ASN1_OCTET_STRING *exta, *extb;
|
1124
|
+
int i;
|
1125
|
+
i = X509_CRL_get_ext_by_NID(a, nid, -1);
|
1126
|
+
if (i >= 0) {
|
1127
|
+
/* Can't have multiple occurrences */
|
1128
|
+
if (X509_CRL_get_ext_by_NID(a, nid, i) != -1)
|
1129
|
+
return 0;
|
1130
|
+
exta = X509_EXTENSION_get_data(X509_CRL_get_ext(a, i));
|
1131
|
+
} else
|
1132
|
+
exta = NULL;
|
1133
|
+
|
1134
|
+
i = X509_CRL_get_ext_by_NID(b, nid, -1);
|
1135
|
+
|
1136
|
+
if (i >= 0) {
|
1137
|
+
|
1138
|
+
if (X509_CRL_get_ext_by_NID(b, nid, i) != -1)
|
1139
|
+
return 0;
|
1140
|
+
extb = X509_EXTENSION_get_data(X509_CRL_get_ext(b, i));
|
1141
|
+
} else
|
1142
|
+
extb = NULL;
|
1143
|
+
|
1144
|
+
if (!exta && !extb)
|
1145
|
+
return 1;
|
1146
|
+
|
1147
|
+
if (!exta || !extb)
|
1148
|
+
return 0;
|
1149
|
+
|
1150
|
+
if (ASN1_OCTET_STRING_cmp(exta, extb))
|
1151
|
+
return 0;
|
1152
|
+
|
1153
|
+
return 1;
|
1154
|
+
}
|
1155
|
+
|
1156
|
+
/* See if a base and delta are compatible */
|
1157
|
+
|
1158
|
+
static int check_delta_base(X509_CRL *delta, X509_CRL *base)
|
1159
|
+
{
|
1160
|
+
/* Delta CRL must be a delta */
|
1161
|
+
if (!delta->base_crl_number)
|
1162
|
+
return 0;
|
1163
|
+
/* Base must have a CRL number */
|
1164
|
+
if (!base->crl_number)
|
1165
|
+
return 0;
|
1166
|
+
/* Issuer names must match */
|
1167
|
+
if (X509_NAME_cmp(X509_CRL_get_issuer(base), X509_CRL_get_issuer(delta)))
|
1168
|
+
return 0;
|
1169
|
+
/* AKID and IDP must match */
|
1170
|
+
if (!crl_extension_match(delta, base, NID_authority_key_identifier))
|
1171
|
+
return 0;
|
1172
|
+
if (!crl_extension_match(delta, base, NID_issuing_distribution_point))
|
1173
|
+
return 0;
|
1174
|
+
/* Delta CRL base number must not exceed Full CRL number. */
|
1175
|
+
if (ASN1_INTEGER_cmp(delta->base_crl_number, base->crl_number) > 0)
|
1176
|
+
return 0;
|
1177
|
+
/* Delta CRL number must exceed full CRL number */
|
1178
|
+
if (ASN1_INTEGER_cmp(delta->crl_number, base->crl_number) > 0)
|
1179
|
+
return 1;
|
1180
|
+
return 0;
|
1181
|
+
}
|
1182
|
+
|
1183
|
+
/*
|
1184
|
+
* For a given base CRL find a delta... maybe extend to delta scoring or
|
1185
|
+
* retrieve a chain of deltas...
|
1186
|
+
*/
|
1187
|
+
|
1188
|
+
static void get_delta_sk(X509_STORE_CTX *ctx, X509_CRL **dcrl, int *pscore,
|
1189
|
+
X509_CRL *base, STACK_OF(X509_CRL) *crls)
|
1190
|
+
{
|
1191
|
+
X509_CRL *delta;
|
1192
|
+
size_t i;
|
1193
|
+
if (!(ctx->param->flags & X509_V_FLAG_USE_DELTAS))
|
1194
|
+
return;
|
1195
|
+
if (!((ctx->current_cert->ex_flags | base->flags) & EXFLAG_FRESHEST))
|
1196
|
+
return;
|
1197
|
+
for (i = 0; i < sk_X509_CRL_num(crls); i++) {
|
1198
|
+
delta = sk_X509_CRL_value(crls, i);
|
1199
|
+
if (check_delta_base(delta, base)) {
|
1200
|
+
if (check_crl_time(ctx, delta, 0))
|
1201
|
+
*pscore |= CRL_SCORE_TIME_DELTA;
|
1202
|
+
X509_CRL_up_ref(delta);
|
1203
|
+
*dcrl = delta;
|
1204
|
+
return;
|
1205
|
+
}
|
1206
|
+
}
|
1207
|
+
*dcrl = NULL;
|
1208
|
+
}
|
1209
|
+
|
1210
|
+
/*
|
1211
|
+
* For a given CRL return how suitable it is for the supplied certificate
|
1212
|
+
* 'x'. The return value is a mask of several criteria. If the issuer is not
|
1213
|
+
* the certificate issuer this is returned in *pissuer. The reasons mask is
|
1214
|
+
* also used to determine if the CRL is suitable: if no new reasons the CRL
|
1215
|
+
* is rejected, otherwise reasons is updated.
|
1216
|
+
*/
|
1217
|
+
|
1218
|
+
static int get_crl_score(X509_STORE_CTX *ctx, X509 **pissuer,
|
1219
|
+
unsigned int *preasons, X509_CRL *crl, X509 *x)
|
1220
|
+
{
|
1221
|
+
|
1222
|
+
int crl_score = 0;
|
1223
|
+
unsigned int tmp_reasons = *preasons, crl_reasons;
|
1224
|
+
|
1225
|
+
/* First see if we can reject CRL straight away */
|
1226
|
+
|
1227
|
+
/* Invalid IDP cannot be processed */
|
1228
|
+
if (crl->idp_flags & IDP_INVALID)
|
1229
|
+
return 0;
|
1230
|
+
/* Reason codes or indirect CRLs need extended CRL support */
|
1231
|
+
if (!(ctx->param->flags & X509_V_FLAG_EXTENDED_CRL_SUPPORT)) {
|
1232
|
+
if (crl->idp_flags & (IDP_INDIRECT | IDP_REASONS))
|
1233
|
+
return 0;
|
1234
|
+
} else if (crl->idp_flags & IDP_REASONS) {
|
1235
|
+
/* If no new reasons reject */
|
1236
|
+
if (!(crl->idp_reasons & ~tmp_reasons))
|
1237
|
+
return 0;
|
1238
|
+
}
|
1239
|
+
/* Don't process deltas at this stage */
|
1240
|
+
else if (crl->base_crl_number)
|
1241
|
+
return 0;
|
1242
|
+
/* If issuer name doesn't match certificate need indirect CRL */
|
1243
|
+
if (X509_NAME_cmp(X509_get_issuer_name(x), X509_CRL_get_issuer(crl))) {
|
1244
|
+
if (!(crl->idp_flags & IDP_INDIRECT))
|
1245
|
+
return 0;
|
1246
|
+
} else
|
1247
|
+
crl_score |= CRL_SCORE_ISSUER_NAME;
|
1248
|
+
|
1249
|
+
if (!(crl->flags & EXFLAG_CRITICAL))
|
1250
|
+
crl_score |= CRL_SCORE_NOCRITICAL;
|
1251
|
+
|
1252
|
+
/* Check expiry */
|
1253
|
+
if (check_crl_time(ctx, crl, 0))
|
1254
|
+
crl_score |= CRL_SCORE_TIME;
|
1255
|
+
|
1256
|
+
/* Check authority key ID and locate certificate issuer */
|
1257
|
+
crl_akid_check(ctx, crl, pissuer, &crl_score);
|
1258
|
+
|
1259
|
+
/* If we can't locate certificate issuer at this point forget it */
|
1260
|
+
|
1261
|
+
if (!(crl_score & CRL_SCORE_AKID))
|
1262
|
+
return 0;
|
1263
|
+
|
1264
|
+
/* Check cert for matching CRL distribution points */
|
1265
|
+
|
1266
|
+
if (crl_crldp_check(x, crl, crl_score, &crl_reasons)) {
|
1267
|
+
/* If no new reasons reject */
|
1268
|
+
if (!(crl_reasons & ~tmp_reasons))
|
1269
|
+
return 0;
|
1270
|
+
tmp_reasons |= crl_reasons;
|
1271
|
+
crl_score |= CRL_SCORE_SCOPE;
|
1272
|
+
}
|
1273
|
+
|
1274
|
+
*preasons = tmp_reasons;
|
1275
|
+
|
1276
|
+
return crl_score;
|
1277
|
+
|
1278
|
+
}
|
1279
|
+
|
1280
|
+
static void crl_akid_check(X509_STORE_CTX *ctx, X509_CRL *crl,
|
1281
|
+
X509 **pissuer, int *pcrl_score)
|
1282
|
+
{
|
1283
|
+
X509 *crl_issuer = NULL;
|
1284
|
+
X509_NAME *cnm = X509_CRL_get_issuer(crl);
|
1285
|
+
int cidx = ctx->error_depth;
|
1286
|
+
size_t i;
|
1287
|
+
|
1288
|
+
if ((size_t)cidx != sk_X509_num(ctx->chain) - 1)
|
1289
|
+
cidx++;
|
1290
|
+
|
1291
|
+
crl_issuer = sk_X509_value(ctx->chain, cidx);
|
1292
|
+
|
1293
|
+
if (X509_check_akid(crl_issuer, crl->akid) == X509_V_OK) {
|
1294
|
+
if (*pcrl_score & CRL_SCORE_ISSUER_NAME) {
|
1295
|
+
*pcrl_score |= CRL_SCORE_AKID | CRL_SCORE_ISSUER_CERT;
|
1296
|
+
*pissuer = crl_issuer;
|
1297
|
+
return;
|
1298
|
+
}
|
1299
|
+
}
|
1300
|
+
|
1301
|
+
for (cidx++; cidx < (int)sk_X509_num(ctx->chain); cidx++) {
|
1302
|
+
crl_issuer = sk_X509_value(ctx->chain, cidx);
|
1303
|
+
if (X509_NAME_cmp(X509_get_subject_name(crl_issuer), cnm))
|
1304
|
+
continue;
|
1305
|
+
if (X509_check_akid(crl_issuer, crl->akid) == X509_V_OK) {
|
1306
|
+
*pcrl_score |= CRL_SCORE_AKID | CRL_SCORE_SAME_PATH;
|
1307
|
+
*pissuer = crl_issuer;
|
1308
|
+
return;
|
1309
|
+
}
|
1310
|
+
}
|
1311
|
+
|
1312
|
+
/* Anything else needs extended CRL support */
|
1313
|
+
|
1314
|
+
if (!(ctx->param->flags & X509_V_FLAG_EXTENDED_CRL_SUPPORT))
|
1315
|
+
return;
|
1316
|
+
|
1317
|
+
/*
|
1318
|
+
* Otherwise the CRL issuer is not on the path. Look for it in the set of
|
1319
|
+
* untrusted certificates.
|
1320
|
+
*/
|
1321
|
+
for (i = 0; i < sk_X509_num(ctx->untrusted); i++) {
|
1322
|
+
crl_issuer = sk_X509_value(ctx->untrusted, i);
|
1323
|
+
if (X509_NAME_cmp(X509_get_subject_name(crl_issuer), cnm))
|
1324
|
+
continue;
|
1325
|
+
if (X509_check_akid(crl_issuer, crl->akid) == X509_V_OK) {
|
1326
|
+
*pissuer = crl_issuer;
|
1327
|
+
*pcrl_score |= CRL_SCORE_AKID;
|
1328
|
+
return;
|
1329
|
+
}
|
1330
|
+
}
|
1331
|
+
}
|
1332
|
+
|
1333
|
+
/*
|
1334
|
+
* Check the path of a CRL issuer certificate. This creates a new
|
1335
|
+
* X509_STORE_CTX and populates it with most of the parameters from the
|
1336
|
+
* parent. This could be optimised somewhat since a lot of path checking will
|
1337
|
+
* be duplicated by the parent, but this will rarely be used in practice.
|
1338
|
+
*/
|
1339
|
+
|
1340
|
+
static int check_crl_path(X509_STORE_CTX *ctx, X509 *x)
|
1341
|
+
{
|
1342
|
+
X509_STORE_CTX crl_ctx;
|
1343
|
+
int ret;
|
1344
|
+
/* Don't allow recursive CRL path validation */
|
1345
|
+
if (ctx->parent)
|
1346
|
+
return 0;
|
1347
|
+
if (!X509_STORE_CTX_init(&crl_ctx, ctx->ctx, x, ctx->untrusted))
|
1348
|
+
return -1;
|
1349
|
+
|
1350
|
+
crl_ctx.crls = ctx->crls;
|
1351
|
+
/* Copy verify params across */
|
1352
|
+
X509_STORE_CTX_set0_param(&crl_ctx, ctx->param);
|
1353
|
+
|
1354
|
+
crl_ctx.parent = ctx;
|
1355
|
+
crl_ctx.verify_cb = ctx->verify_cb;
|
1356
|
+
|
1357
|
+
/* Verify CRL issuer */
|
1358
|
+
ret = X509_verify_cert(&crl_ctx);
|
1359
|
+
|
1360
|
+
if (ret <= 0)
|
1361
|
+
goto err;
|
1362
|
+
|
1363
|
+
/* Check chain is acceptable */
|
1364
|
+
|
1365
|
+
ret = check_crl_chain(ctx, ctx->chain, crl_ctx.chain);
|
1366
|
+
err:
|
1367
|
+
X509_STORE_CTX_cleanup(&crl_ctx);
|
1368
|
+
return ret;
|
1369
|
+
}
|
1370
|
+
|
1371
|
+
/*
|
1372
|
+
* RFC 3280 says nothing about the relationship between CRL path and
|
1373
|
+
* certificate path, which could lead to situations where a certificate could
|
1374
|
+
* be revoked or validated by a CA not authorised to do so. RFC 5280 is more
|
1375
|
+
* strict and states that the two paths must end in the same trust anchor,
|
1376
|
+
* though some discussions remain... until this is resolved we use the
|
1377
|
+
* RFC 5280 version
|
1378
|
+
*/
|
1379
|
+
|
1380
|
+
static int check_crl_chain(X509_STORE_CTX *ctx,
|
1381
|
+
STACK_OF(X509) *cert_path,
|
1382
|
+
STACK_OF(X509) *crl_path)
|
1383
|
+
{
|
1384
|
+
X509 *cert_ta, *crl_ta;
|
1385
|
+
cert_ta = sk_X509_value(cert_path, sk_X509_num(cert_path) - 1);
|
1386
|
+
crl_ta = sk_X509_value(crl_path, sk_X509_num(crl_path) - 1);
|
1387
|
+
if (!X509_cmp(cert_ta, crl_ta))
|
1388
|
+
return 1;
|
1389
|
+
return 0;
|
1390
|
+
}
|
1391
|
+
|
1392
|
+
/*
|
1393
|
+
* Check for match between two dist point names: three separate cases. 1.
|
1394
|
+
* Both are relative names and compare X509_NAME types. 2. One full, one
|
1395
|
+
* relative. Compare X509_NAME to GENERAL_NAMES. 3. Both are full names and
|
1396
|
+
* compare two GENERAL_NAMES. 4. One is NULL: automatic match.
|
1397
|
+
*/
|
1398
|
+
|
1399
|
+
static int idp_check_dp(DIST_POINT_NAME *a, DIST_POINT_NAME *b)
|
1400
|
+
{
|
1401
|
+
X509_NAME *nm = NULL;
|
1402
|
+
GENERAL_NAMES *gens = NULL;
|
1403
|
+
GENERAL_NAME *gena, *genb;
|
1404
|
+
size_t i, j;
|
1405
|
+
if (!a || !b)
|
1406
|
+
return 1;
|
1407
|
+
if (a->type == 1) {
|
1408
|
+
if (!a->dpname)
|
1409
|
+
return 0;
|
1410
|
+
/* Case 1: two X509_NAME */
|
1411
|
+
if (b->type == 1) {
|
1412
|
+
if (!b->dpname)
|
1413
|
+
return 0;
|
1414
|
+
if (!X509_NAME_cmp(a->dpname, b->dpname))
|
1415
|
+
return 1;
|
1416
|
+
else
|
1417
|
+
return 0;
|
1418
|
+
}
|
1419
|
+
/* Case 2: set name and GENERAL_NAMES appropriately */
|
1420
|
+
nm = a->dpname;
|
1421
|
+
gens = b->name.fullname;
|
1422
|
+
} else if (b->type == 1) {
|
1423
|
+
if (!b->dpname)
|
1424
|
+
return 0;
|
1425
|
+
/* Case 2: set name and GENERAL_NAMES appropriately */
|
1426
|
+
gens = a->name.fullname;
|
1427
|
+
nm = b->dpname;
|
1428
|
+
}
|
1429
|
+
|
1430
|
+
/* Handle case 2 with one GENERAL_NAMES and one X509_NAME */
|
1431
|
+
if (nm) {
|
1432
|
+
for (i = 0; i < sk_GENERAL_NAME_num(gens); i++) {
|
1433
|
+
gena = sk_GENERAL_NAME_value(gens, i);
|
1434
|
+
if (gena->type != GEN_DIRNAME)
|
1435
|
+
continue;
|
1436
|
+
if (!X509_NAME_cmp(nm, gena->d.directoryName))
|
1437
|
+
return 1;
|
1438
|
+
}
|
1439
|
+
return 0;
|
1440
|
+
}
|
1441
|
+
|
1442
|
+
/* Else case 3: two GENERAL_NAMES */
|
1443
|
+
|
1444
|
+
for (i = 0; i < sk_GENERAL_NAME_num(a->name.fullname); i++) {
|
1445
|
+
gena = sk_GENERAL_NAME_value(a->name.fullname, i);
|
1446
|
+
for (j = 0; j < sk_GENERAL_NAME_num(b->name.fullname); j++) {
|
1447
|
+
genb = sk_GENERAL_NAME_value(b->name.fullname, j);
|
1448
|
+
if (!GENERAL_NAME_cmp(gena, genb))
|
1449
|
+
return 1;
|
1450
|
+
}
|
1451
|
+
}
|
1452
|
+
|
1453
|
+
return 0;
|
1454
|
+
|
1455
|
+
}
|
1456
|
+
|
1457
|
+
static int crldp_check_crlissuer(DIST_POINT *dp, X509_CRL *crl, int crl_score)
|
1458
|
+
{
|
1459
|
+
size_t i;
|
1460
|
+
X509_NAME *nm = X509_CRL_get_issuer(crl);
|
1461
|
+
/* If no CRLissuer return is successful iff don't need a match */
|
1462
|
+
if (!dp->CRLissuer)
|
1463
|
+
return ! !(crl_score & CRL_SCORE_ISSUER_NAME);
|
1464
|
+
for (i = 0; i < sk_GENERAL_NAME_num(dp->CRLissuer); i++) {
|
1465
|
+
GENERAL_NAME *gen = sk_GENERAL_NAME_value(dp->CRLissuer, i);
|
1466
|
+
if (gen->type != GEN_DIRNAME)
|
1467
|
+
continue;
|
1468
|
+
if (!X509_NAME_cmp(gen->d.directoryName, nm))
|
1469
|
+
return 1;
|
1470
|
+
}
|
1471
|
+
return 0;
|
1472
|
+
}
|
1473
|
+
|
1474
|
+
/* Check CRLDP and IDP */
|
1475
|
+
|
1476
|
+
static int crl_crldp_check(X509 *x, X509_CRL *crl, int crl_score,
|
1477
|
+
unsigned int *preasons)
|
1478
|
+
{
|
1479
|
+
size_t i;
|
1480
|
+
if (crl->idp_flags & IDP_ONLYATTR)
|
1481
|
+
return 0;
|
1482
|
+
if (x->ex_flags & EXFLAG_CA) {
|
1483
|
+
if (crl->idp_flags & IDP_ONLYUSER)
|
1484
|
+
return 0;
|
1485
|
+
} else {
|
1486
|
+
if (crl->idp_flags & IDP_ONLYCA)
|
1487
|
+
return 0;
|
1488
|
+
}
|
1489
|
+
*preasons = crl->idp_reasons;
|
1490
|
+
for (i = 0; i < sk_DIST_POINT_num(x->crldp); i++) {
|
1491
|
+
DIST_POINT *dp = sk_DIST_POINT_value(x->crldp, i);
|
1492
|
+
if (crldp_check_crlissuer(dp, crl, crl_score)) {
|
1493
|
+
if (!crl->idp || idp_check_dp(dp->distpoint, crl->idp->distpoint)) {
|
1494
|
+
*preasons &= dp->dp_reasons;
|
1495
|
+
return 1;
|
1496
|
+
}
|
1497
|
+
}
|
1498
|
+
}
|
1499
|
+
if ((!crl->idp || !crl->idp->distpoint)
|
1500
|
+
&& (crl_score & CRL_SCORE_ISSUER_NAME))
|
1501
|
+
return 1;
|
1502
|
+
return 0;
|
1503
|
+
}
|
1504
|
+
|
1505
|
+
/*
|
1506
|
+
* Retrieve CRL corresponding to current certificate. If deltas enabled try
|
1507
|
+
* to find a delta CRL too
|
1508
|
+
*/
|
1509
|
+
|
1510
|
+
static int get_crl_delta(X509_STORE_CTX *ctx,
|
1511
|
+
X509_CRL **pcrl, X509_CRL **pdcrl, X509 *x)
|
1512
|
+
{
|
1513
|
+
int ok;
|
1514
|
+
X509 *issuer = NULL;
|
1515
|
+
int crl_score = 0;
|
1516
|
+
unsigned int reasons;
|
1517
|
+
X509_CRL *crl = NULL, *dcrl = NULL;
|
1518
|
+
STACK_OF(X509_CRL) *skcrl;
|
1519
|
+
X509_NAME *nm = X509_get_issuer_name(x);
|
1520
|
+
reasons = ctx->current_reasons;
|
1521
|
+
ok = get_crl_sk(ctx, &crl, &dcrl,
|
1522
|
+
&issuer, &crl_score, &reasons, ctx->crls);
|
1523
|
+
|
1524
|
+
if (ok)
|
1525
|
+
goto done;
|
1526
|
+
|
1527
|
+
/* Lookup CRLs from store */
|
1528
|
+
|
1529
|
+
skcrl = ctx->lookup_crls(ctx, nm);
|
1530
|
+
|
1531
|
+
/* If no CRLs found and a near match from get_crl_sk use that */
|
1532
|
+
if (!skcrl && crl)
|
1533
|
+
goto done;
|
1534
|
+
|
1535
|
+
get_crl_sk(ctx, &crl, &dcrl, &issuer, &crl_score, &reasons, skcrl);
|
1536
|
+
|
1537
|
+
sk_X509_CRL_pop_free(skcrl, X509_CRL_free);
|
1538
|
+
|
1539
|
+
done:
|
1540
|
+
|
1541
|
+
/* If we got any kind of CRL use it and return success */
|
1542
|
+
if (crl) {
|
1543
|
+
ctx->current_issuer = issuer;
|
1544
|
+
ctx->current_crl_score = crl_score;
|
1545
|
+
ctx->current_reasons = reasons;
|
1546
|
+
*pcrl = crl;
|
1547
|
+
*pdcrl = dcrl;
|
1548
|
+
return 1;
|
1549
|
+
}
|
1550
|
+
|
1551
|
+
return 0;
|
1552
|
+
}
|
1553
|
+
|
1554
|
+
/* Check CRL validity */
|
1555
|
+
static int check_crl(X509_STORE_CTX *ctx, X509_CRL *crl)
|
1556
|
+
{
|
1557
|
+
X509 *issuer = NULL;
|
1558
|
+
EVP_PKEY *ikey = NULL;
|
1559
|
+
int ok = 0, chnum, cnum;
|
1560
|
+
cnum = ctx->error_depth;
|
1561
|
+
chnum = sk_X509_num(ctx->chain) - 1;
|
1562
|
+
/* if we have an alternative CRL issuer cert use that */
|
1563
|
+
if (ctx->current_issuer)
|
1564
|
+
issuer = ctx->current_issuer;
|
1565
|
+
|
1566
|
+
/*
|
1567
|
+
* Else find CRL issuer: if not last certificate then issuer is next
|
1568
|
+
* certificate in chain.
|
1569
|
+
*/
|
1570
|
+
else if (cnum < chnum)
|
1571
|
+
issuer = sk_X509_value(ctx->chain, cnum + 1);
|
1572
|
+
else {
|
1573
|
+
issuer = sk_X509_value(ctx->chain, chnum);
|
1574
|
+
/* If not self signed, can't check signature */
|
1575
|
+
if (!ctx->check_issued(ctx, issuer, issuer)) {
|
1576
|
+
ctx->error = X509_V_ERR_UNABLE_TO_GET_CRL_ISSUER;
|
1577
|
+
ok = ctx->verify_cb(0, ctx);
|
1578
|
+
if (!ok)
|
1579
|
+
goto err;
|
1580
|
+
}
|
1581
|
+
}
|
1582
|
+
|
1583
|
+
if (issuer) {
|
1584
|
+
/*
|
1585
|
+
* Skip most tests for deltas because they have already been done
|
1586
|
+
*/
|
1587
|
+
if (!crl->base_crl_number) {
|
1588
|
+
/* Check for cRLSign bit if keyUsage present */
|
1589
|
+
if ((issuer->ex_flags & EXFLAG_KUSAGE) &&
|
1590
|
+
!(issuer->ex_kusage & KU_CRL_SIGN)) {
|
1591
|
+
ctx->error = X509_V_ERR_KEYUSAGE_NO_CRL_SIGN;
|
1592
|
+
ok = ctx->verify_cb(0, ctx);
|
1593
|
+
if (!ok)
|
1594
|
+
goto err;
|
1595
|
+
}
|
1596
|
+
|
1597
|
+
if (!(ctx->current_crl_score & CRL_SCORE_SCOPE)) {
|
1598
|
+
ctx->error = X509_V_ERR_DIFFERENT_CRL_SCOPE;
|
1599
|
+
ok = ctx->verify_cb(0, ctx);
|
1600
|
+
if (!ok)
|
1601
|
+
goto err;
|
1602
|
+
}
|
1603
|
+
|
1604
|
+
if (!(ctx->current_crl_score & CRL_SCORE_SAME_PATH)) {
|
1605
|
+
if (check_crl_path(ctx, ctx->current_issuer) <= 0) {
|
1606
|
+
ctx->error = X509_V_ERR_CRL_PATH_VALIDATION_ERROR;
|
1607
|
+
ok = ctx->verify_cb(0, ctx);
|
1608
|
+
if (!ok)
|
1609
|
+
goto err;
|
1610
|
+
}
|
1611
|
+
}
|
1612
|
+
|
1613
|
+
if (crl->idp_flags & IDP_INVALID) {
|
1614
|
+
ctx->error = X509_V_ERR_INVALID_EXTENSION;
|
1615
|
+
ok = ctx->verify_cb(0, ctx);
|
1616
|
+
if (!ok)
|
1617
|
+
goto err;
|
1618
|
+
}
|
1619
|
+
|
1620
|
+
}
|
1621
|
+
|
1622
|
+
if (!(ctx->current_crl_score & CRL_SCORE_TIME)) {
|
1623
|
+
ok = check_crl_time(ctx, crl, 1);
|
1624
|
+
if (!ok)
|
1625
|
+
goto err;
|
1626
|
+
}
|
1627
|
+
|
1628
|
+
/* Attempt to get issuer certificate public key */
|
1629
|
+
ikey = X509_get_pubkey(issuer);
|
1630
|
+
|
1631
|
+
if (!ikey) {
|
1632
|
+
ctx->error = X509_V_ERR_UNABLE_TO_DECODE_ISSUER_PUBLIC_KEY;
|
1633
|
+
ok = ctx->verify_cb(0, ctx);
|
1634
|
+
if (!ok)
|
1635
|
+
goto err;
|
1636
|
+
} else {
|
1637
|
+
int rv;
|
1638
|
+
rv = X509_CRL_check_suiteb(crl, ikey, ctx->param->flags);
|
1639
|
+
if (rv != X509_V_OK) {
|
1640
|
+
ctx->error = rv;
|
1641
|
+
ok = ctx->verify_cb(0, ctx);
|
1642
|
+
if (!ok)
|
1643
|
+
goto err;
|
1644
|
+
}
|
1645
|
+
/* Verify CRL signature */
|
1646
|
+
if (X509_CRL_verify(crl, ikey) <= 0) {
|
1647
|
+
ctx->error = X509_V_ERR_CRL_SIGNATURE_FAILURE;
|
1648
|
+
ok = ctx->verify_cb(0, ctx);
|
1649
|
+
if (!ok)
|
1650
|
+
goto err;
|
1651
|
+
}
|
1652
|
+
}
|
1653
|
+
}
|
1654
|
+
|
1655
|
+
ok = 1;
|
1656
|
+
|
1657
|
+
err:
|
1658
|
+
EVP_PKEY_free(ikey);
|
1659
|
+
return ok;
|
1660
|
+
}
|
1661
|
+
|
1662
|
+
/* Check certificate against CRL */
|
1663
|
+
static int cert_crl(X509_STORE_CTX *ctx, X509_CRL *crl, X509 *x)
|
1664
|
+
{
|
1665
|
+
int ok;
|
1666
|
+
X509_REVOKED *rev;
|
1667
|
+
/*
|
1668
|
+
* The rules changed for this... previously if a CRL contained unhandled
|
1669
|
+
* critical extensions it could still be used to indicate a certificate
|
1670
|
+
* was revoked. This has since been changed since critical extension can
|
1671
|
+
* change the meaning of CRL entries.
|
1672
|
+
*/
|
1673
|
+
if (!(ctx->param->flags & X509_V_FLAG_IGNORE_CRITICAL)
|
1674
|
+
&& (crl->flags & EXFLAG_CRITICAL)) {
|
1675
|
+
ctx->error = X509_V_ERR_UNHANDLED_CRITICAL_CRL_EXTENSION;
|
1676
|
+
ok = ctx->verify_cb(0, ctx);
|
1677
|
+
if (!ok)
|
1678
|
+
return 0;
|
1679
|
+
}
|
1680
|
+
/*
|
1681
|
+
* Look for serial number of certificate in CRL If found make sure reason
|
1682
|
+
* is not removeFromCRL.
|
1683
|
+
*/
|
1684
|
+
if (X509_CRL_get0_by_cert(crl, &rev, x)) {
|
1685
|
+
if (rev->reason == CRL_REASON_REMOVE_FROM_CRL)
|
1686
|
+
return 2;
|
1687
|
+
ctx->error = X509_V_ERR_CERT_REVOKED;
|
1688
|
+
ok = ctx->verify_cb(0, ctx);
|
1689
|
+
if (!ok)
|
1690
|
+
return 0;
|
1691
|
+
}
|
1692
|
+
|
1693
|
+
return 1;
|
1694
|
+
}
|
1695
|
+
|
1696
|
+
static int check_policy(X509_STORE_CTX *ctx)
|
1697
|
+
{
|
1698
|
+
int ret;
|
1699
|
+
if (ctx->parent)
|
1700
|
+
return 1;
|
1701
|
+
ret = X509_policy_check(&ctx->tree, &ctx->explicit_policy, ctx->chain,
|
1702
|
+
ctx->param->policies, ctx->param->flags);
|
1703
|
+
if (ret == 0) {
|
1704
|
+
OPENSSL_PUT_ERROR(X509, ERR_R_MALLOC_FAILURE);
|
1705
|
+
ctx->error = X509_V_ERR_OUT_OF_MEM;
|
1706
|
+
return 0;
|
1707
|
+
}
|
1708
|
+
/* Invalid or inconsistent extensions */
|
1709
|
+
if (ret == -1) {
|
1710
|
+
/*
|
1711
|
+
* Locate certificates with bad extensions and notify callback.
|
1712
|
+
*/
|
1713
|
+
X509 *x;
|
1714
|
+
size_t i;
|
1715
|
+
for (i = 1; i < sk_X509_num(ctx->chain); i++) {
|
1716
|
+
x = sk_X509_value(ctx->chain, i);
|
1717
|
+
if (!(x->ex_flags & EXFLAG_INVALID_POLICY))
|
1718
|
+
continue;
|
1719
|
+
ctx->current_cert = x;
|
1720
|
+
ctx->error = X509_V_ERR_INVALID_POLICY_EXTENSION;
|
1721
|
+
if (!ctx->verify_cb(0, ctx))
|
1722
|
+
return 0;
|
1723
|
+
}
|
1724
|
+
return 1;
|
1725
|
+
}
|
1726
|
+
if (ret == -2) {
|
1727
|
+
ctx->current_cert = NULL;
|
1728
|
+
ctx->error = X509_V_ERR_NO_EXPLICIT_POLICY;
|
1729
|
+
return ctx->verify_cb(0, ctx);
|
1730
|
+
}
|
1731
|
+
|
1732
|
+
if (ctx->param->flags & X509_V_FLAG_NOTIFY_POLICY) {
|
1733
|
+
ctx->current_cert = NULL;
|
1734
|
+
/*
|
1735
|
+
* Verification errors need to be "sticky", a callback may have allowed
|
1736
|
+
* an SSL handshake to continue despite an error, and we must then
|
1737
|
+
* remain in an error state. Therefore, we MUST NOT clear earlier
|
1738
|
+
* verification errors by setting the error to X509_V_OK.
|
1739
|
+
*/
|
1740
|
+
if (!ctx->verify_cb(2, ctx))
|
1741
|
+
return 0;
|
1742
|
+
}
|
1743
|
+
|
1744
|
+
return 1;
|
1745
|
+
}
|
1746
|
+
|
1747
|
+
static int check_cert_time(X509_STORE_CTX *ctx, X509 *x)
|
1748
|
+
{
|
1749
|
+
time_t *ptime;
|
1750
|
+
int i;
|
1751
|
+
|
1752
|
+
if (ctx->param->flags & X509_V_FLAG_USE_CHECK_TIME)
|
1753
|
+
ptime = &ctx->param->check_time;
|
1754
|
+
else
|
1755
|
+
ptime = NULL;
|
1756
|
+
|
1757
|
+
i = X509_cmp_time(X509_get_notBefore(x), ptime);
|
1758
|
+
if (i == 0) {
|
1759
|
+
ctx->error = X509_V_ERR_ERROR_IN_CERT_NOT_BEFORE_FIELD;
|
1760
|
+
ctx->current_cert = x;
|
1761
|
+
if (!ctx->verify_cb(0, ctx))
|
1762
|
+
return 0;
|
1763
|
+
}
|
1764
|
+
|
1765
|
+
if (i > 0) {
|
1766
|
+
ctx->error = X509_V_ERR_CERT_NOT_YET_VALID;
|
1767
|
+
ctx->current_cert = x;
|
1768
|
+
if (!ctx->verify_cb(0, ctx))
|
1769
|
+
return 0;
|
1770
|
+
}
|
1771
|
+
|
1772
|
+
i = X509_cmp_time(X509_get_notAfter(x), ptime);
|
1773
|
+
if (i == 0) {
|
1774
|
+
ctx->error = X509_V_ERR_ERROR_IN_CERT_NOT_AFTER_FIELD;
|
1775
|
+
ctx->current_cert = x;
|
1776
|
+
if (!ctx->verify_cb(0, ctx))
|
1777
|
+
return 0;
|
1778
|
+
}
|
1779
|
+
|
1780
|
+
if (i < 0) {
|
1781
|
+
ctx->error = X509_V_ERR_CERT_HAS_EXPIRED;
|
1782
|
+
ctx->current_cert = x;
|
1783
|
+
if (!ctx->verify_cb(0, ctx))
|
1784
|
+
return 0;
|
1785
|
+
}
|
1786
|
+
|
1787
|
+
return 1;
|
1788
|
+
}
|
1789
|
+
|
1790
|
+
static int internal_verify(X509_STORE_CTX *ctx)
|
1791
|
+
{
|
1792
|
+
int ok = 0, n;
|
1793
|
+
X509 *xs, *xi;
|
1794
|
+
EVP_PKEY *pkey = NULL;
|
1795
|
+
int (*cb) (int xok, X509_STORE_CTX *xctx);
|
1796
|
+
|
1797
|
+
cb = ctx->verify_cb;
|
1798
|
+
|
1799
|
+
n = sk_X509_num(ctx->chain);
|
1800
|
+
ctx->error_depth = n - 1;
|
1801
|
+
n--;
|
1802
|
+
xi = sk_X509_value(ctx->chain, n);
|
1803
|
+
|
1804
|
+
if (ctx->check_issued(ctx, xi, xi))
|
1805
|
+
xs = xi;
|
1806
|
+
else {
|
1807
|
+
if (ctx->param->flags & X509_V_FLAG_PARTIAL_CHAIN) {
|
1808
|
+
xs = xi;
|
1809
|
+
goto check_cert;
|
1810
|
+
}
|
1811
|
+
if (n <= 0) {
|
1812
|
+
ctx->error = X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE;
|
1813
|
+
ctx->current_cert = xi;
|
1814
|
+
ok = cb(0, ctx);
|
1815
|
+
goto end;
|
1816
|
+
} else {
|
1817
|
+
n--;
|
1818
|
+
ctx->error_depth = n;
|
1819
|
+
xs = sk_X509_value(ctx->chain, n);
|
1820
|
+
}
|
1821
|
+
}
|
1822
|
+
|
1823
|
+
/* ctx->error=0; not needed */
|
1824
|
+
while (n >= 0) {
|
1825
|
+
ctx->error_depth = n;
|
1826
|
+
|
1827
|
+
/*
|
1828
|
+
* Skip signature check for self signed certificates unless
|
1829
|
+
* explicitly asked for. It doesn't add any security and just wastes
|
1830
|
+
* time.
|
1831
|
+
*/
|
1832
|
+
if (xs != xi || (ctx->param->flags & X509_V_FLAG_CHECK_SS_SIGNATURE)) {
|
1833
|
+
if ((pkey = X509_get_pubkey(xi)) == NULL) {
|
1834
|
+
ctx->error = X509_V_ERR_UNABLE_TO_DECODE_ISSUER_PUBLIC_KEY;
|
1835
|
+
ctx->current_cert = xi;
|
1836
|
+
ok = (*cb) (0, ctx);
|
1837
|
+
if (!ok)
|
1838
|
+
goto end;
|
1839
|
+
} else if (X509_verify(xs, pkey) <= 0) {
|
1840
|
+
ctx->error = X509_V_ERR_CERT_SIGNATURE_FAILURE;
|
1841
|
+
ctx->current_cert = xs;
|
1842
|
+
ok = (*cb) (0, ctx);
|
1843
|
+
if (!ok) {
|
1844
|
+
EVP_PKEY_free(pkey);
|
1845
|
+
goto end;
|
1846
|
+
}
|
1847
|
+
}
|
1848
|
+
EVP_PKEY_free(pkey);
|
1849
|
+
pkey = NULL;
|
1850
|
+
}
|
1851
|
+
|
1852
|
+
check_cert:
|
1853
|
+
ok = check_cert_time(ctx, xs);
|
1854
|
+
if (!ok)
|
1855
|
+
goto end;
|
1856
|
+
|
1857
|
+
/* The last error (if any) is still in the error value */
|
1858
|
+
ctx->current_issuer = xi;
|
1859
|
+
ctx->current_cert = xs;
|
1860
|
+
ok = (*cb) (1, ctx);
|
1861
|
+
if (!ok)
|
1862
|
+
goto end;
|
1863
|
+
|
1864
|
+
n--;
|
1865
|
+
if (n >= 0) {
|
1866
|
+
xi = xs;
|
1867
|
+
xs = sk_X509_value(ctx->chain, n);
|
1868
|
+
}
|
1869
|
+
}
|
1870
|
+
ok = 1;
|
1871
|
+
end:
|
1872
|
+
return ok;
|
1873
|
+
}
|
1874
|
+
|
1875
|
+
int X509_cmp_current_time(const ASN1_TIME *ctm)
|
1876
|
+
{
|
1877
|
+
return X509_cmp_time(ctm, NULL);
|
1878
|
+
}
|
1879
|
+
|
1880
|
+
int X509_cmp_time(const ASN1_TIME *ctm, time_t *cmp_time)
|
1881
|
+
{
|
1882
|
+
static const size_t utctime_length = sizeof("YYMMDDHHMMSSZ") - 1;
|
1883
|
+
static const size_t generalizedtime_length = sizeof("YYYYMMDDHHMMSSZ") - 1;
|
1884
|
+
ASN1_TIME *asn1_cmp_time = NULL;
|
1885
|
+
int i, day, sec, ret = 0;
|
1886
|
+
|
1887
|
+
/*
|
1888
|
+
* Note that ASN.1 allows much more slack in the time format than RFC 5280.
|
1889
|
+
* In RFC 5280, the representation is fixed:
|
1890
|
+
* UTCTime: YYMMDDHHMMSSZ
|
1891
|
+
* GeneralizedTime: YYYYMMDDHHMMSSZ
|
1892
|
+
*
|
1893
|
+
* We do NOT currently enforce the following RFC 5280 requirement:
|
1894
|
+
* "CAs conforming to this profile MUST always encode certificate
|
1895
|
+
* validity dates through the year 2049 as UTCTime; certificate validity
|
1896
|
+
* dates in 2050 or later MUST be encoded as GeneralizedTime."
|
1897
|
+
*/
|
1898
|
+
switch (ctm->type) {
|
1899
|
+
case V_ASN1_UTCTIME:
|
1900
|
+
if (ctm->length != (int)(utctime_length))
|
1901
|
+
return 0;
|
1902
|
+
break;
|
1903
|
+
case V_ASN1_GENERALIZEDTIME:
|
1904
|
+
if (ctm->length != (int)(generalizedtime_length))
|
1905
|
+
return 0;
|
1906
|
+
break;
|
1907
|
+
default:
|
1908
|
+
return 0;
|
1909
|
+
}
|
1910
|
+
|
1911
|
+
/**
|
1912
|
+
* Verify the format: the ASN.1 functions we use below allow a more
|
1913
|
+
* flexible format than what's mandated by RFC 5280.
|
1914
|
+
* Digit and date ranges will be verified in the conversion methods.
|
1915
|
+
*/
|
1916
|
+
for (i = 0; i < ctm->length - 1; i++) {
|
1917
|
+
if (!isdigit(ctm->data[i]))
|
1918
|
+
return 0;
|
1919
|
+
}
|
1920
|
+
if (ctm->data[ctm->length - 1] != 'Z')
|
1921
|
+
return 0;
|
1922
|
+
|
1923
|
+
/*
|
1924
|
+
* There is ASN1_UTCTIME_cmp_time_t but no
|
1925
|
+
* ASN1_GENERALIZEDTIME_cmp_time_t or ASN1_TIME_cmp_time_t,
|
1926
|
+
* so we go through ASN.1
|
1927
|
+
*/
|
1928
|
+
asn1_cmp_time = X509_time_adj(NULL, 0, cmp_time);
|
1929
|
+
if (asn1_cmp_time == NULL)
|
1930
|
+
goto err;
|
1931
|
+
if (!ASN1_TIME_diff(&day, &sec, ctm, asn1_cmp_time))
|
1932
|
+
goto err;
|
1933
|
+
|
1934
|
+
/*
|
1935
|
+
* X509_cmp_time comparison is <=.
|
1936
|
+
* The return value 0 is reserved for errors.
|
1937
|
+
*/
|
1938
|
+
ret = (day >= 0 && sec >= 0) ? -1 : 1;
|
1939
|
+
|
1940
|
+
err:
|
1941
|
+
ASN1_TIME_free(asn1_cmp_time);
|
1942
|
+
return ret;
|
1943
|
+
}
|
1944
|
+
|
1945
|
+
ASN1_TIME *X509_gmtime_adj(ASN1_TIME *s, long offset_sec)
|
1946
|
+
{
|
1947
|
+
return X509_time_adj(s, offset_sec, NULL);
|
1948
|
+
}
|
1949
|
+
|
1950
|
+
ASN1_TIME *X509_time_adj(ASN1_TIME *s, long offset_sec, time_t *in_tm)
|
1951
|
+
{
|
1952
|
+
return X509_time_adj_ex(s, 0, offset_sec, in_tm);
|
1953
|
+
}
|
1954
|
+
|
1955
|
+
ASN1_TIME *X509_time_adj_ex(ASN1_TIME *s,
|
1956
|
+
int offset_day, long offset_sec, time_t *in_tm)
|
1957
|
+
{
|
1958
|
+
time_t t = 0;
|
1959
|
+
|
1960
|
+
if (in_tm) {
|
1961
|
+
t = *in_tm;
|
1962
|
+
} else {
|
1963
|
+
time(&t);
|
1964
|
+
}
|
1965
|
+
|
1966
|
+
return ASN1_TIME_adj(s, t, offset_day, offset_sec);
|
1967
|
+
}
|
1968
|
+
|
1969
|
+
/* Make a delta CRL as the diff between two full CRLs */
|
1970
|
+
|
1971
|
+
X509_CRL *X509_CRL_diff(X509_CRL *base, X509_CRL *newer,
|
1972
|
+
EVP_PKEY *skey, const EVP_MD *md, unsigned int flags)
|
1973
|
+
{
|
1974
|
+
X509_CRL *crl = NULL;
|
1975
|
+
int i;
|
1976
|
+
size_t j;
|
1977
|
+
STACK_OF(X509_REVOKED) *revs = NULL;
|
1978
|
+
/* CRLs can't be delta already */
|
1979
|
+
if (base->base_crl_number || newer->base_crl_number) {
|
1980
|
+
OPENSSL_PUT_ERROR(X509, X509_R_CRL_ALREADY_DELTA);
|
1981
|
+
return NULL;
|
1982
|
+
}
|
1983
|
+
/* Base and new CRL must have a CRL number */
|
1984
|
+
if (!base->crl_number || !newer->crl_number) {
|
1985
|
+
OPENSSL_PUT_ERROR(X509, X509_R_NO_CRL_NUMBER);
|
1986
|
+
return NULL;
|
1987
|
+
}
|
1988
|
+
/* Issuer names must match */
|
1989
|
+
if (X509_NAME_cmp(X509_CRL_get_issuer(base), X509_CRL_get_issuer(newer))) {
|
1990
|
+
OPENSSL_PUT_ERROR(X509, X509_R_ISSUER_MISMATCH);
|
1991
|
+
return NULL;
|
1992
|
+
}
|
1993
|
+
/* AKID and IDP must match */
|
1994
|
+
if (!crl_extension_match(base, newer, NID_authority_key_identifier)) {
|
1995
|
+
OPENSSL_PUT_ERROR(X509, X509_R_AKID_MISMATCH);
|
1996
|
+
return NULL;
|
1997
|
+
}
|
1998
|
+
if (!crl_extension_match(base, newer, NID_issuing_distribution_point)) {
|
1999
|
+
OPENSSL_PUT_ERROR(X509, X509_R_IDP_MISMATCH);
|
2000
|
+
return NULL;
|
2001
|
+
}
|
2002
|
+
/* Newer CRL number must exceed full CRL number */
|
2003
|
+
if (ASN1_INTEGER_cmp(newer->crl_number, base->crl_number) <= 0) {
|
2004
|
+
OPENSSL_PUT_ERROR(X509, X509_R_NEWER_CRL_NOT_NEWER);
|
2005
|
+
return NULL;
|
2006
|
+
}
|
2007
|
+
/* CRLs must verify */
|
2008
|
+
if (skey && (X509_CRL_verify(base, skey) <= 0 ||
|
2009
|
+
X509_CRL_verify(newer, skey) <= 0)) {
|
2010
|
+
OPENSSL_PUT_ERROR(X509, X509_R_CRL_VERIFY_FAILURE);
|
2011
|
+
return NULL;
|
2012
|
+
}
|
2013
|
+
/* Create new CRL */
|
2014
|
+
crl = X509_CRL_new();
|
2015
|
+
if (!crl || !X509_CRL_set_version(crl, X509_CRL_VERSION_2))
|
2016
|
+
goto memerr;
|
2017
|
+
/* Set issuer name */
|
2018
|
+
if (!X509_CRL_set_issuer_name(crl, X509_CRL_get_issuer(newer)))
|
2019
|
+
goto memerr;
|
2020
|
+
|
2021
|
+
if (!X509_CRL_set1_lastUpdate(crl, X509_CRL_get0_lastUpdate(newer)))
|
2022
|
+
goto memerr;
|
2023
|
+
if (!X509_CRL_set1_nextUpdate(crl, X509_CRL_get0_nextUpdate(newer)))
|
2024
|
+
goto memerr;
|
2025
|
+
|
2026
|
+
/* Set base CRL number: must be critical */
|
2027
|
+
|
2028
|
+
if (!X509_CRL_add1_ext_i2d(crl, NID_delta_crl, base->crl_number, 1, 0))
|
2029
|
+
goto memerr;
|
2030
|
+
|
2031
|
+
/*
|
2032
|
+
* Copy extensions across from newest CRL to delta: this will set CRL
|
2033
|
+
* number to correct value too.
|
2034
|
+
*/
|
2035
|
+
|
2036
|
+
for (i = 0; i < X509_CRL_get_ext_count(newer); i++) {
|
2037
|
+
X509_EXTENSION *ext;
|
2038
|
+
ext = X509_CRL_get_ext(newer, i);
|
2039
|
+
if (!X509_CRL_add_ext(crl, ext, -1))
|
2040
|
+
goto memerr;
|
2041
|
+
}
|
2042
|
+
|
2043
|
+
/* Go through revoked entries, copying as needed */
|
2044
|
+
|
2045
|
+
revs = X509_CRL_get_REVOKED(newer);
|
2046
|
+
|
2047
|
+
for (j = 0; j < sk_X509_REVOKED_num(revs); j++) {
|
2048
|
+
X509_REVOKED *rvn, *rvtmp;
|
2049
|
+
rvn = sk_X509_REVOKED_value(revs, j);
|
2050
|
+
/*
|
2051
|
+
* Add only if not also in base. TODO: need something cleverer here
|
2052
|
+
* for some more complex CRLs covering multiple CAs.
|
2053
|
+
*/
|
2054
|
+
if (!X509_CRL_get0_by_serial(base, &rvtmp, rvn->serialNumber)) {
|
2055
|
+
rvtmp = X509_REVOKED_dup(rvn);
|
2056
|
+
if (!rvtmp)
|
2057
|
+
goto memerr;
|
2058
|
+
if (!X509_CRL_add0_revoked(crl, rvtmp)) {
|
2059
|
+
X509_REVOKED_free(rvtmp);
|
2060
|
+
goto memerr;
|
2061
|
+
}
|
2062
|
+
}
|
2063
|
+
}
|
2064
|
+
/* TODO: optionally prune deleted entries */
|
2065
|
+
|
2066
|
+
if (skey && md && !X509_CRL_sign(crl, skey, md))
|
2067
|
+
goto memerr;
|
2068
|
+
|
2069
|
+
return crl;
|
2070
|
+
|
2071
|
+
memerr:
|
2072
|
+
OPENSSL_PUT_ERROR(X509, ERR_R_MALLOC_FAILURE);
|
2073
|
+
if (crl)
|
2074
|
+
X509_CRL_free(crl);
|
2075
|
+
return NULL;
|
2076
|
+
}
|
2077
|
+
|
2078
|
+
int X509_STORE_CTX_get_ex_new_index(long argl, void *argp,
|
2079
|
+
CRYPTO_EX_unused * unused,
|
2080
|
+
CRYPTO_EX_dup *dup_unused,
|
2081
|
+
CRYPTO_EX_free *free_func)
|
2082
|
+
{
|
2083
|
+
/*
|
2084
|
+
* This function is (usually) called only once, by
|
2085
|
+
* SSL_get_ex_data_X509_STORE_CTX_idx (ssl/ssl_cert.c).
|
2086
|
+
*/
|
2087
|
+
int index;
|
2088
|
+
if (!CRYPTO_get_ex_new_index(&g_ex_data_class, &index, argl, argp,
|
2089
|
+
free_func)) {
|
2090
|
+
return -1;
|
2091
|
+
}
|
2092
|
+
return index;
|
2093
|
+
}
|
2094
|
+
|
2095
|
+
int X509_STORE_CTX_set_ex_data(X509_STORE_CTX *ctx, int idx, void *data)
|
2096
|
+
{
|
2097
|
+
return CRYPTO_set_ex_data(&ctx->ex_data, idx, data);
|
2098
|
+
}
|
2099
|
+
|
2100
|
+
void *X509_STORE_CTX_get_ex_data(X509_STORE_CTX *ctx, int idx)
|
2101
|
+
{
|
2102
|
+
return CRYPTO_get_ex_data(&ctx->ex_data, idx);
|
2103
|
+
}
|
2104
|
+
|
2105
|
+
int X509_STORE_CTX_get_error(X509_STORE_CTX *ctx)
|
2106
|
+
{
|
2107
|
+
return ctx->error;
|
2108
|
+
}
|
2109
|
+
|
2110
|
+
void X509_STORE_CTX_set_error(X509_STORE_CTX *ctx, int err)
|
2111
|
+
{
|
2112
|
+
ctx->error = err;
|
2113
|
+
}
|
2114
|
+
|
2115
|
+
int X509_STORE_CTX_get_error_depth(X509_STORE_CTX *ctx)
|
2116
|
+
{
|
2117
|
+
return ctx->error_depth;
|
2118
|
+
}
|
2119
|
+
|
2120
|
+
X509 *X509_STORE_CTX_get_current_cert(X509_STORE_CTX *ctx)
|
2121
|
+
{
|
2122
|
+
return ctx->current_cert;
|
2123
|
+
}
|
2124
|
+
|
2125
|
+
STACK_OF(X509) *X509_STORE_CTX_get_chain(X509_STORE_CTX *ctx)
|
2126
|
+
{
|
2127
|
+
return ctx->chain;
|
2128
|
+
}
|
2129
|
+
|
2130
|
+
STACK_OF(X509) *X509_STORE_CTX_get0_chain(X509_STORE_CTX *ctx)
|
2131
|
+
{
|
2132
|
+
return ctx->chain;
|
2133
|
+
}
|
2134
|
+
|
2135
|
+
STACK_OF(X509) *X509_STORE_CTX_get1_chain(X509_STORE_CTX *ctx)
|
2136
|
+
{
|
2137
|
+
if (!ctx->chain)
|
2138
|
+
return NULL;
|
2139
|
+
return X509_chain_up_ref(ctx->chain);
|
2140
|
+
}
|
2141
|
+
|
2142
|
+
X509 *X509_STORE_CTX_get0_current_issuer(X509_STORE_CTX *ctx)
|
2143
|
+
{
|
2144
|
+
return ctx->current_issuer;
|
2145
|
+
}
|
2146
|
+
|
2147
|
+
X509_CRL *X509_STORE_CTX_get0_current_crl(X509_STORE_CTX *ctx)
|
2148
|
+
{
|
2149
|
+
return ctx->current_crl;
|
2150
|
+
}
|
2151
|
+
|
2152
|
+
X509_STORE_CTX *X509_STORE_CTX_get0_parent_ctx(X509_STORE_CTX *ctx)
|
2153
|
+
{
|
2154
|
+
return ctx->parent;
|
2155
|
+
}
|
2156
|
+
|
2157
|
+
void X509_STORE_CTX_set_cert(X509_STORE_CTX *ctx, X509 *x)
|
2158
|
+
{
|
2159
|
+
ctx->cert = x;
|
2160
|
+
}
|
2161
|
+
|
2162
|
+
void X509_STORE_CTX_set_chain(X509_STORE_CTX *ctx, STACK_OF(X509) *sk)
|
2163
|
+
{
|
2164
|
+
ctx->untrusted = sk;
|
2165
|
+
}
|
2166
|
+
|
2167
|
+
STACK_OF(X509) *X509_STORE_CTX_get0_untrusted(X509_STORE_CTX *ctx)
|
2168
|
+
{
|
2169
|
+
return ctx->untrusted;
|
2170
|
+
}
|
2171
|
+
|
2172
|
+
void X509_STORE_CTX_set0_crls(X509_STORE_CTX *ctx, STACK_OF(X509_CRL) *sk)
|
2173
|
+
{
|
2174
|
+
ctx->crls = sk;
|
2175
|
+
}
|
2176
|
+
|
2177
|
+
int X509_STORE_CTX_set_purpose(X509_STORE_CTX *ctx, int purpose)
|
2178
|
+
{
|
2179
|
+
return X509_STORE_CTX_purpose_inherit(ctx, 0, purpose, 0);
|
2180
|
+
}
|
2181
|
+
|
2182
|
+
int X509_STORE_CTX_set_trust(X509_STORE_CTX *ctx, int trust)
|
2183
|
+
{
|
2184
|
+
return X509_STORE_CTX_purpose_inherit(ctx, 0, 0, trust);
|
2185
|
+
}
|
2186
|
+
|
2187
|
+
/*
|
2188
|
+
* This function is used to set the X509_STORE_CTX purpose and trust values.
|
2189
|
+
* This is intended to be used when another structure has its own trust and
|
2190
|
+
* purpose values which (if set) will be inherited by the ctx. If they aren't
|
2191
|
+
* set then we will usually have a default purpose in mind which should then
|
2192
|
+
* be used to set the trust value. An example of this is SSL use: an SSL
|
2193
|
+
* structure will have its own purpose and trust settings which the
|
2194
|
+
* application can set: if they aren't set then we use the default of SSL
|
2195
|
+
* client/server.
|
2196
|
+
*/
|
2197
|
+
|
2198
|
+
int X509_STORE_CTX_purpose_inherit(X509_STORE_CTX *ctx, int def_purpose,
|
2199
|
+
int purpose, int trust)
|
2200
|
+
{
|
2201
|
+
int idx;
|
2202
|
+
/* If purpose not set use default */
|
2203
|
+
if (!purpose)
|
2204
|
+
purpose = def_purpose;
|
2205
|
+
/* If we have a purpose then check it is valid */
|
2206
|
+
if (purpose) {
|
2207
|
+
X509_PURPOSE *ptmp;
|
2208
|
+
idx = X509_PURPOSE_get_by_id(purpose);
|
2209
|
+
if (idx == -1) {
|
2210
|
+
OPENSSL_PUT_ERROR(X509, X509_R_UNKNOWN_PURPOSE_ID);
|
2211
|
+
return 0;
|
2212
|
+
}
|
2213
|
+
ptmp = X509_PURPOSE_get0(idx);
|
2214
|
+
if (ptmp->trust == X509_TRUST_DEFAULT) {
|
2215
|
+
idx = X509_PURPOSE_get_by_id(def_purpose);
|
2216
|
+
if (idx == -1) {
|
2217
|
+
OPENSSL_PUT_ERROR(X509, X509_R_UNKNOWN_PURPOSE_ID);
|
2218
|
+
return 0;
|
2219
|
+
}
|
2220
|
+
ptmp = X509_PURPOSE_get0(idx);
|
2221
|
+
}
|
2222
|
+
/* If trust not set then get from purpose default */
|
2223
|
+
if (!trust)
|
2224
|
+
trust = ptmp->trust;
|
2225
|
+
}
|
2226
|
+
if (trust) {
|
2227
|
+
idx = X509_TRUST_get_by_id(trust);
|
2228
|
+
if (idx == -1) {
|
2229
|
+
OPENSSL_PUT_ERROR(X509, X509_R_UNKNOWN_TRUST_ID);
|
2230
|
+
return 0;
|
2231
|
+
}
|
2232
|
+
}
|
2233
|
+
|
2234
|
+
if (purpose && !ctx->param->purpose)
|
2235
|
+
ctx->param->purpose = purpose;
|
2236
|
+
if (trust && !ctx->param->trust)
|
2237
|
+
ctx->param->trust = trust;
|
2238
|
+
return 1;
|
2239
|
+
}
|
2240
|
+
|
2241
|
+
X509_STORE_CTX *X509_STORE_CTX_new(void)
|
2242
|
+
{
|
2243
|
+
X509_STORE_CTX *ctx;
|
2244
|
+
ctx = (X509_STORE_CTX *)OPENSSL_malloc(sizeof(X509_STORE_CTX));
|
2245
|
+
if (!ctx) {
|
2246
|
+
OPENSSL_PUT_ERROR(X509, ERR_R_MALLOC_FAILURE);
|
2247
|
+
return NULL;
|
2248
|
+
}
|
2249
|
+
X509_STORE_CTX_zero(ctx);
|
2250
|
+
return ctx;
|
2251
|
+
}
|
2252
|
+
|
2253
|
+
void X509_STORE_CTX_zero(X509_STORE_CTX *ctx)
|
2254
|
+
{
|
2255
|
+
OPENSSL_memset(ctx, 0, sizeof(X509_STORE_CTX));
|
2256
|
+
}
|
2257
|
+
|
2258
|
+
void X509_STORE_CTX_free(X509_STORE_CTX *ctx)
|
2259
|
+
{
|
2260
|
+
if (ctx == NULL) {
|
2261
|
+
return;
|
2262
|
+
}
|
2263
|
+
X509_STORE_CTX_cleanup(ctx);
|
2264
|
+
OPENSSL_free(ctx);
|
2265
|
+
}
|
2266
|
+
|
2267
|
+
int X509_STORE_CTX_init(X509_STORE_CTX *ctx, X509_STORE *store, X509 *x509,
|
2268
|
+
STACK_OF(X509) *chain)
|
2269
|
+
{
|
2270
|
+
X509_STORE_CTX_zero(ctx);
|
2271
|
+
ctx->ctx = store;
|
2272
|
+
ctx->cert = x509;
|
2273
|
+
ctx->untrusted = chain;
|
2274
|
+
|
2275
|
+
CRYPTO_new_ex_data(&ctx->ex_data);
|
2276
|
+
|
2277
|
+
if (store == NULL) {
|
2278
|
+
OPENSSL_PUT_ERROR(X509, ERR_R_PASSED_NULL_PARAMETER);
|
2279
|
+
goto err;
|
2280
|
+
}
|
2281
|
+
|
2282
|
+
ctx->param = X509_VERIFY_PARAM_new();
|
2283
|
+
if (!ctx->param)
|
2284
|
+
goto err;
|
2285
|
+
|
2286
|
+
/*
|
2287
|
+
* Inherit callbacks and flags from X509_STORE.
|
2288
|
+
*/
|
2289
|
+
|
2290
|
+
ctx->verify_cb = store->verify_cb;
|
2291
|
+
ctx->cleanup = store->cleanup;
|
2292
|
+
|
2293
|
+
if (!X509_VERIFY_PARAM_inherit(ctx->param, store->param) ||
|
2294
|
+
!X509_VERIFY_PARAM_inherit(ctx->param,
|
2295
|
+
X509_VERIFY_PARAM_lookup("default"))) {
|
2296
|
+
goto err;
|
2297
|
+
}
|
2298
|
+
|
2299
|
+
if (store->check_issued)
|
2300
|
+
ctx->check_issued = store->check_issued;
|
2301
|
+
else
|
2302
|
+
ctx->check_issued = check_issued;
|
2303
|
+
|
2304
|
+
if (store->get_issuer)
|
2305
|
+
ctx->get_issuer = store->get_issuer;
|
2306
|
+
else
|
2307
|
+
ctx->get_issuer = X509_STORE_CTX_get1_issuer;
|
2308
|
+
|
2309
|
+
if (store->verify_cb)
|
2310
|
+
ctx->verify_cb = store->verify_cb;
|
2311
|
+
else
|
2312
|
+
ctx->verify_cb = null_callback;
|
2313
|
+
|
2314
|
+
if (store->verify)
|
2315
|
+
ctx->verify = store->verify;
|
2316
|
+
else
|
2317
|
+
ctx->verify = internal_verify;
|
2318
|
+
|
2319
|
+
if (store->check_revocation)
|
2320
|
+
ctx->check_revocation = store->check_revocation;
|
2321
|
+
else
|
2322
|
+
ctx->check_revocation = check_revocation;
|
2323
|
+
|
2324
|
+
if (store->get_crl)
|
2325
|
+
ctx->get_crl = store->get_crl;
|
2326
|
+
else
|
2327
|
+
ctx->get_crl = NULL;
|
2328
|
+
|
2329
|
+
if (store->check_crl)
|
2330
|
+
ctx->check_crl = store->check_crl;
|
2331
|
+
else
|
2332
|
+
ctx->check_crl = check_crl;
|
2333
|
+
|
2334
|
+
if (store->cert_crl)
|
2335
|
+
ctx->cert_crl = store->cert_crl;
|
2336
|
+
else
|
2337
|
+
ctx->cert_crl = cert_crl;
|
2338
|
+
|
2339
|
+
if (store->lookup_certs)
|
2340
|
+
ctx->lookup_certs = store->lookup_certs;
|
2341
|
+
else
|
2342
|
+
ctx->lookup_certs = X509_STORE_get1_certs;
|
2343
|
+
|
2344
|
+
if (store->lookup_crls)
|
2345
|
+
ctx->lookup_crls = store->lookup_crls;
|
2346
|
+
else
|
2347
|
+
ctx->lookup_crls = X509_STORE_get1_crls;
|
2348
|
+
|
2349
|
+
ctx->check_policy = check_policy;
|
2350
|
+
|
2351
|
+
return 1;
|
2352
|
+
|
2353
|
+
err:
|
2354
|
+
CRYPTO_free_ex_data(&g_ex_data_class, ctx, &ctx->ex_data);
|
2355
|
+
if (ctx->param != NULL) {
|
2356
|
+
X509_VERIFY_PARAM_free(ctx->param);
|
2357
|
+
}
|
2358
|
+
|
2359
|
+
OPENSSL_memset(ctx, 0, sizeof(X509_STORE_CTX));
|
2360
|
+
OPENSSL_PUT_ERROR(X509, ERR_R_MALLOC_FAILURE);
|
2361
|
+
return 0;
|
2362
|
+
}
|
2363
|
+
|
2364
|
+
/*
|
2365
|
+
* Set alternative lookup method: just a STACK of trusted certificates. This
|
2366
|
+
* avoids X509_STORE nastiness where it isn't needed.
|
2367
|
+
*/
|
2368
|
+
|
2369
|
+
void X509_STORE_CTX_trusted_stack(X509_STORE_CTX *ctx, STACK_OF(X509) *sk)
|
2370
|
+
{
|
2371
|
+
ctx->other_ctx = sk;
|
2372
|
+
ctx->get_issuer = get_issuer_sk;
|
2373
|
+
}
|
2374
|
+
|
2375
|
+
void X509_STORE_CTX_cleanup(X509_STORE_CTX *ctx)
|
2376
|
+
{
|
2377
|
+
/* We need to be idempotent because, unfortunately, |X509_STORE_CTX_free|
|
2378
|
+
* also calls this function. */
|
2379
|
+
if (ctx->cleanup != NULL) {
|
2380
|
+
ctx->cleanup(ctx);
|
2381
|
+
ctx->cleanup = NULL;
|
2382
|
+
}
|
2383
|
+
if (ctx->param != NULL) {
|
2384
|
+
if (ctx->parent == NULL)
|
2385
|
+
X509_VERIFY_PARAM_free(ctx->param);
|
2386
|
+
ctx->param = NULL;
|
2387
|
+
}
|
2388
|
+
if (ctx->tree != NULL) {
|
2389
|
+
X509_policy_tree_free(ctx->tree);
|
2390
|
+
ctx->tree = NULL;
|
2391
|
+
}
|
2392
|
+
if (ctx->chain != NULL) {
|
2393
|
+
sk_X509_pop_free(ctx->chain, X509_free);
|
2394
|
+
ctx->chain = NULL;
|
2395
|
+
}
|
2396
|
+
CRYPTO_free_ex_data(&g_ex_data_class, ctx, &(ctx->ex_data));
|
2397
|
+
OPENSSL_memset(&ctx->ex_data, 0, sizeof(CRYPTO_EX_DATA));
|
2398
|
+
}
|
2399
|
+
|
2400
|
+
void X509_STORE_CTX_set_depth(X509_STORE_CTX *ctx, int depth)
|
2401
|
+
{
|
2402
|
+
X509_VERIFY_PARAM_set_depth(ctx->param, depth);
|
2403
|
+
}
|
2404
|
+
|
2405
|
+
void X509_STORE_CTX_set_flags(X509_STORE_CTX *ctx, unsigned long flags)
|
2406
|
+
{
|
2407
|
+
X509_VERIFY_PARAM_set_flags(ctx->param, flags);
|
2408
|
+
}
|
2409
|
+
|
2410
|
+
void X509_STORE_CTX_set_time(X509_STORE_CTX *ctx, unsigned long flags,
|
2411
|
+
time_t t)
|
2412
|
+
{
|
2413
|
+
X509_VERIFY_PARAM_set_time(ctx->param, t);
|
2414
|
+
}
|
2415
|
+
|
2416
|
+
X509 *X509_STORE_CTX_get0_cert(X509_STORE_CTX *ctx)
|
2417
|
+
{
|
2418
|
+
return ctx->cert;
|
2419
|
+
}
|
2420
|
+
|
2421
|
+
void X509_STORE_CTX_set_verify_cb(X509_STORE_CTX *ctx,
|
2422
|
+
int (*verify_cb) (int, X509_STORE_CTX *))
|
2423
|
+
{
|
2424
|
+
ctx->verify_cb = verify_cb;
|
2425
|
+
}
|
2426
|
+
|
2427
|
+
X509_POLICY_TREE *X509_STORE_CTX_get0_policy_tree(X509_STORE_CTX *ctx)
|
2428
|
+
{
|
2429
|
+
return ctx->tree;
|
2430
|
+
}
|
2431
|
+
|
2432
|
+
int X509_STORE_CTX_get_explicit_policy(X509_STORE_CTX *ctx)
|
2433
|
+
{
|
2434
|
+
return ctx->explicit_policy;
|
2435
|
+
}
|
2436
|
+
|
2437
|
+
int X509_STORE_CTX_set_default(X509_STORE_CTX *ctx, const char *name)
|
2438
|
+
{
|
2439
|
+
const X509_VERIFY_PARAM *param;
|
2440
|
+
param = X509_VERIFY_PARAM_lookup(name);
|
2441
|
+
if (!param)
|
2442
|
+
return 0;
|
2443
|
+
return X509_VERIFY_PARAM_inherit(ctx->param, param);
|
2444
|
+
}
|
2445
|
+
|
2446
|
+
X509_VERIFY_PARAM *X509_STORE_CTX_get0_param(X509_STORE_CTX *ctx)
|
2447
|
+
{
|
2448
|
+
return ctx->param;
|
2449
|
+
}
|
2450
|
+
|
2451
|
+
void X509_STORE_CTX_set0_param(X509_STORE_CTX *ctx, X509_VERIFY_PARAM *param)
|
2452
|
+
{
|
2453
|
+
if (ctx->param)
|
2454
|
+
X509_VERIFY_PARAM_free(ctx->param);
|
2455
|
+
ctx->param = param;
|
2456
|
+
}
|