grpc 1.45.0-x86_64-linux → 1.46.2-x86_64-linux
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of grpc might be problematic. Click here for more details.
- checksums.yaml +4 -4
- data/.yardopts +1 -0
- data/Makefile +3195 -0
- data/include/grpc/byte_buffer.h +27 -0
- data/include/grpc/byte_buffer_reader.h +26 -0
- data/include/grpc/census.h +40 -0
- data/include/grpc/compression.h +75 -0
- data/include/grpc/event_engine/README.md +38 -0
- data/include/grpc/event_engine/endpoint_config.h +43 -0
- data/include/grpc/event_engine/event_engine.h +399 -0
- data/include/grpc/event_engine/internal/memory_allocator_impl.h +68 -0
- data/include/grpc/event_engine/memory_allocator.h +226 -0
- data/include/grpc/event_engine/memory_request.h +57 -0
- data/include/grpc/event_engine/port.h +39 -0
- data/include/grpc/fork.h +26 -0
- data/include/grpc/grpc.h +605 -0
- data/include/grpc/grpc_cronet.h +38 -0
- data/include/grpc/grpc_posix.h +63 -0
- data/include/grpc/grpc_security.h +1259 -0
- data/include/grpc/grpc_security_constants.h +152 -0
- data/include/grpc/impl/codegen/README.md +22 -0
- data/include/grpc/impl/codegen/atm.h +97 -0
- data/include/grpc/impl/codegen/atm_gcc_atomic.h +93 -0
- data/include/grpc/impl/codegen/atm_gcc_sync.h +87 -0
- data/include/grpc/impl/codegen/atm_windows.h +134 -0
- data/include/grpc/impl/codegen/byte_buffer.h +103 -0
- data/include/grpc/impl/codegen/byte_buffer_reader.h +44 -0
- data/include/grpc/impl/codegen/compression_types.h +108 -0
- data/include/grpc/impl/codegen/connectivity_state.h +46 -0
- data/include/grpc/impl/codegen/fork.h +50 -0
- data/include/grpc/impl/codegen/gpr_slice.h +71 -0
- data/include/grpc/impl/codegen/gpr_types.h +61 -0
- data/include/grpc/impl/codegen/grpc_types.h +816 -0
- data/include/grpc/impl/codegen/log.h +112 -0
- data/include/grpc/impl/codegen/port_platform.h +723 -0
- data/include/grpc/impl/codegen/propagation_bits.h +54 -0
- data/include/grpc/impl/codegen/slice.h +132 -0
- data/include/grpc/impl/codegen/status.h +156 -0
- data/include/grpc/impl/codegen/sync.h +68 -0
- data/include/grpc/impl/codegen/sync_abseil.h +38 -0
- data/include/grpc/impl/codegen/sync_custom.h +40 -0
- data/include/grpc/impl/codegen/sync_generic.h +51 -0
- data/include/grpc/impl/codegen/sync_posix.h +54 -0
- data/include/grpc/impl/codegen/sync_windows.h +42 -0
- data/include/grpc/load_reporting.h +48 -0
- data/include/grpc/module.modulemap +64 -0
- data/include/grpc/slice.h +161 -0
- data/include/grpc/slice_buffer.h +84 -0
- data/include/grpc/status.h +26 -0
- data/include/grpc/support/alloc.h +52 -0
- data/include/grpc/support/atm.h +26 -0
- data/include/grpc/support/atm_gcc_atomic.h +26 -0
- data/include/grpc/support/atm_gcc_sync.h +26 -0
- data/include/grpc/support/atm_windows.h +26 -0
- data/include/grpc/support/cpu.h +44 -0
- data/include/grpc/support/log.h +26 -0
- data/include/grpc/support/log_windows.h +38 -0
- data/include/grpc/support/port_platform.h +24 -0
- data/include/grpc/support/string_util.h +51 -0
- data/include/grpc/support/sync.h +282 -0
- data/include/grpc/support/sync_abseil.h +26 -0
- data/include/grpc/support/sync_custom.h +26 -0
- data/include/grpc/support/sync_generic.h +26 -0
- data/include/grpc/support/sync_posix.h +26 -0
- data/include/grpc/support/sync_windows.h +26 -0
- data/include/grpc/support/thd_id.h +44 -0
- data/include/grpc/support/time.h +92 -0
- data/include/grpc/support/workaround_list.h +31 -0
- data/src/core/ext/filters/census/grpc_context.cc +39 -0
- data/src/core/ext/filters/channel_idle/channel_idle_filter.cc +309 -0
- data/src/core/ext/filters/channel_idle/channel_idle_filter.h +122 -0
- data/src/core/ext/filters/channel_idle/idle_filter_state.cc +96 -0
- data/src/core/ext/filters/channel_idle/idle_filter_state.h +66 -0
- data/src/core/ext/filters/client_channel/backend_metric.cc +79 -0
- data/src/core/ext/filters/client_channel/backend_metric.h +37 -0
- data/src/core/ext/filters/client_channel/backup_poller.cc +187 -0
- data/src/core/ext/filters/client_channel/backup_poller.h +42 -0
- data/src/core/ext/filters/client_channel/channel_connectivity.cc +220 -0
- data/src/core/ext/filters/client_channel/client_channel.cc +3243 -0
- data/src/core/ext/filters/client_channel/client_channel.h +585 -0
- data/src/core/ext/filters/client_channel/client_channel_channelz.cc +96 -0
- data/src/core/ext/filters/client_channel/client_channel_channelz.h +75 -0
- data/src/core/ext/filters/client_channel/client_channel_factory.cc +56 -0
- data/src/core/ext/filters/client_channel/client_channel_factory.h +46 -0
- data/src/core/ext/filters/client_channel/client_channel_plugin.cc +67 -0
- data/src/core/ext/filters/client_channel/config_selector.cc +59 -0
- data/src/core/ext/filters/client_channel/config_selector.h +145 -0
- data/src/core/ext/filters/client_channel/connector.h +79 -0
- data/src/core/ext/filters/client_channel/dynamic_filters.cc +189 -0
- data/src/core/ext/filters/client_channel/dynamic_filters.h +99 -0
- data/src/core/ext/filters/client_channel/global_subchannel_pool.cc +63 -0
- data/src/core/ext/filters/client_channel/global_subchannel_pool.h +60 -0
- data/src/core/ext/filters/client_channel/health/health_check_client.cc +163 -0
- data/src/core/ext/filters/client_channel/health/health_check_client.h +41 -0
- data/src/core/ext/filters/client_channel/http_connect_handshaker.cc +387 -0
- data/src/core/ext/filters/client_channel/http_connect_handshaker.h +42 -0
- data/src/core/ext/filters/client_channel/http_proxy.cc +212 -0
- data/src/core/ext/filters/client_channel/http_proxy.h +45 -0
- data/src/core/ext/filters/client_channel/lb_policy/address_filtering.cc +97 -0
- data/src/core/ext/filters/client_channel/lb_policy/address_filtering.h +102 -0
- data/src/core/ext/filters/client_channel/lb_policy/child_policy_handler.cc +304 -0
- data/src/core/ext/filters/client_channel/lb_policy/child_policy_handler.h +83 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/client_load_reporting_filter.cc +145 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/client_load_reporting_filter.h +29 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb.cc +1885 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb.h +40 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_balancer_addresses.cc +76 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_balancer_addresses.h +37 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_client_stats.cc +92 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_client_stats.h +76 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/load_balancer_api.cc +192 -0
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/load_balancer_api.h +74 -0
- data/src/core/ext/filters/client_channel/lb_policy/pick_first/pick_first.cc +540 -0
- data/src/core/ext/filters/client_channel/lb_policy/priority/priority.cc +967 -0
- data/src/core/ext/filters/client_channel/lb_policy/ring_hash/ring_hash.cc +804 -0
- data/src/core/ext/filters/client_channel/lb_policy/ring_hash/ring_hash.h +37 -0
- data/src/core/ext/filters/client_channel/lb_policy/rls/rls.cc +2542 -0
- data/src/core/ext/filters/client_channel/lb_policy/round_robin/round_robin.cc +504 -0
- data/src/core/ext/filters/client_channel/lb_policy/subchannel_list.h +431 -0
- data/src/core/ext/filters/client_channel/lb_policy/weighted_target/weighted_target.cc +776 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/cds.cc +704 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds.h +60 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_channel_args.h +29 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_cluster_impl.cc +872 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_cluster_manager.cc +710 -0
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_cluster_resolver.cc +1215 -0
- data/src/core/ext/filters/client_channel/lb_policy.cc +132 -0
- data/src/core/ext/filters/client_channel/lb_policy.h +457 -0
- data/src/core/ext/filters/client_channel/lb_policy_factory.h +48 -0
- data/src/core/ext/filters/client_channel/lb_policy_registry.cc +185 -0
- data/src/core/ext/filters/client_channel/lb_policy_registry.h +65 -0
- data/src/core/ext/filters/client_channel/local_subchannel_pool.cc +56 -0
- data/src/core/ext/filters/client_channel/local_subchannel_pool.h +58 -0
- data/src/core/ext/filters/client_channel/proxy_mapper.h +54 -0
- data/src/core/ext/filters/client_channel/proxy_mapper_registry.cc +89 -0
- data/src/core/ext/filters/client_channel/proxy_mapper_registry.h +50 -0
- data/src/core/ext/filters/client_channel/resolver/binder/binder_resolver.cc +133 -0
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/dns_resolver_ares.cc +500 -0
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver.h +84 -0
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver_event_engine.cc +31 -0
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver_posix.cc +114 -0
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver_windows.cc +883 -0
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper.cc +1113 -0
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper.h +115 -0
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper_event_engine.cc +28 -0
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper_posix.cc +29 -0
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper_windows.cc +34 -0
- data/src/core/ext/filters/client_channel/resolver/dns/dns_resolver_selection.cc +28 -0
- data/src/core/ext/filters/client_channel/resolver/dns/dns_resolver_selection.h +29 -0
- data/src/core/ext/filters/client_channel/resolver/dns/native/dns_resolver.cc +169 -0
- data/src/core/ext/filters/client_channel/resolver/fake/fake_resolver.cc +381 -0
- data/src/core/ext/filters/client_channel/resolver/fake/fake_resolver.h +96 -0
- data/src/core/ext/filters/client_channel/resolver/google_c2p/google_c2p_resolver.cc +400 -0
- data/src/core/ext/filters/client_channel/resolver/polling_resolver.cc +201 -0
- data/src/core/ext/filters/client_channel/resolver/polling_resolver.h +106 -0
- data/src/core/ext/filters/client_channel/resolver/sockaddr/sockaddr_resolver.cc +196 -0
- data/src/core/ext/filters/client_channel/resolver/xds/xds_resolver.cc +1066 -0
- data/src/core/ext/filters/client_channel/resolver/xds/xds_resolver.h +28 -0
- data/src/core/ext/filters/client_channel/resolver_result_parsing.cc +186 -0
- data/src/core/ext/filters/client_channel/resolver_result_parsing.h +105 -0
- data/src/core/ext/filters/client_channel/retry_filter.cc +2655 -0
- data/src/core/ext/filters/client_channel/retry_filter.h +30 -0
- data/src/core/ext/filters/client_channel/retry_service_config.cc +314 -0
- data/src/core/ext/filters/client_channel/retry_service_config.h +102 -0
- data/src/core/ext/filters/client_channel/retry_throttle.cc +148 -0
- data/src/core/ext/filters/client_channel/retry_throttle.h +85 -0
- data/src/core/ext/filters/client_channel/service_config_channel_arg_filter.cc +157 -0
- data/src/core/ext/filters/client_channel/subchannel.cc +1014 -0
- data/src/core/ext/filters/client_channel/subchannel.h +382 -0
- data/src/core/ext/filters/client_channel/subchannel_interface.h +130 -0
- data/src/core/ext/filters/client_channel/subchannel_pool_interface.cc +126 -0
- data/src/core/ext/filters/client_channel/subchannel_pool_interface.h +106 -0
- data/src/core/ext/filters/client_channel/subchannel_stream_client.cc +544 -0
- data/src/core/ext/filters/client_channel/subchannel_stream_client.h +214 -0
- data/src/core/ext/filters/deadline/deadline_filter.cc +392 -0
- data/src/core/ext/filters/deadline/deadline_filter.h +87 -0
- data/src/core/ext/filters/fault_injection/fault_injection_filter.cc +258 -0
- data/src/core/ext/filters/fault_injection/fault_injection_filter.h +62 -0
- data/src/core/ext/filters/fault_injection/service_config_parser.cc +179 -0
- data/src/core/ext/filters/fault_injection/service_config_parser.h +91 -0
- data/src/core/ext/filters/http/client/http_client_filter.cc +141 -0
- data/src/core/ext/filters/http/client/http_client_filter.h +48 -0
- data/src/core/ext/filters/http/client_authority_filter.cc +95 -0
- data/src/core/ext/filters/http/client_authority_filter.h +53 -0
- data/src/core/ext/filters/http/http_filters_plugin.cc +90 -0
- data/src/core/ext/filters/http/message_compress/message_compress_filter.cc +456 -0
- data/src/core/ext/filters/http/message_compress/message_compress_filter.h +53 -0
- data/src/core/ext/filters/http/message_compress/message_decompress_filter.cc +386 -0
- data/src/core/ext/filters/http/message_compress/message_decompress_filter.h +31 -0
- data/src/core/ext/filters/http/server/http_server_filter.cc +322 -0
- data/src/core/ext/filters/http/server/http_server_filter.h +29 -0
- data/src/core/ext/filters/message_size/message_size_filter.cc +394 -0
- data/src/core/ext/filters/message_size/message_size_filter.h +73 -0
- data/src/core/ext/filters/rbac/rbac_filter.cc +162 -0
- data/src/core/ext/filters/rbac/rbac_filter.h +76 -0
- data/src/core/ext/filters/rbac/rbac_service_config_parser.cc +606 -0
- data/src/core/ext/filters/rbac/rbac_service_config_parser.h +75 -0
- data/src/core/ext/filters/server_config_selector/server_config_selector.cc +61 -0
- data/src/core/ext/filters/server_config_selector/server_config_selector.h +71 -0
- data/src/core/ext/filters/server_config_selector/server_config_selector_filter.cc +143 -0
- data/src/core/ext/filters/server_config_selector/server_config_selector_filter.h +32 -0
- data/src/core/ext/transport/chttp2/alpn/alpn.cc +45 -0
- data/src/core/ext/transport/chttp2/alpn/alpn.h +36 -0
- data/src/core/ext/transport/chttp2/client/chttp2_connector.cc +495 -0
- data/src/core/ext/transport/chttp2/client/chttp2_connector.h +75 -0
- data/src/core/ext/transport/chttp2/server/chttp2_server.cc +1101 -0
- data/src/core/ext/transport/chttp2/server/chttp2_server.h +47 -0
- data/src/core/ext/transport/chttp2/transport/bin_decoder.cc +252 -0
- data/src/core/ext/transport/chttp2/transport/bin_decoder.h +57 -0
- data/src/core/ext/transport/chttp2/transport/bin_encoder.cc +231 -0
- data/src/core/ext/transport/chttp2/transport/bin_encoder.h +42 -0
- data/src/core/ext/transport/chttp2/transport/chttp2_transport.cc +3375 -0
- data/src/core/ext/transport/chttp2/transport/chttp2_transport.h +71 -0
- data/src/core/ext/transport/chttp2/transport/context_list.cc +67 -0
- data/src/core/ext/transport/chttp2/transport/context_list.h +51 -0
- data/src/core/ext/transport/chttp2/transport/flow_control.cc +430 -0
- data/src/core/ext/transport/chttp2/transport/flow_control.h +488 -0
- data/src/core/ext/transport/chttp2/transport/frame.h +47 -0
- data/src/core/ext/transport/chttp2/transport/frame_data.cc +307 -0
- data/src/core/ext/transport/chttp2/transport/frame_data.h +83 -0
- data/src/core/ext/transport/chttp2/transport/frame_goaway.cc +187 -0
- data/src/core/ext/transport/chttp2/transport/frame_goaway.h +63 -0
- data/src/core/ext/transport/chttp2/transport/frame_ping.cc +132 -0
- data/src/core/ext/transport/chttp2/transport/frame_ping.h +46 -0
- data/src/core/ext/transport/chttp2/transport/frame_rst_stream.cc +123 -0
- data/src/core/ext/transport/chttp2/transport/frame_rst_stream.h +51 -0
- data/src/core/ext/transport/chttp2/transport/frame_settings.cc +275 -0
- data/src/core/ext/transport/chttp2/transport/frame_settings.h +62 -0
- data/src/core/ext/transport/chttp2/transport/frame_window_update.cc +123 -0
- data/src/core/ext/transport/chttp2/transport/frame_window_update.h +43 -0
- data/src/core/ext/transport/chttp2/transport/hpack_constants.h +41 -0
- data/src/core/ext/transport/chttp2/transport/hpack_encoder.cc +667 -0
- data/src/core/ext/transport/chttp2/transport/hpack_encoder.h +219 -0
- data/src/core/ext/transport/chttp2/transport/hpack_encoder_table.cc +86 -0
- data/src/core/ext/transport/chttp2/transport/hpack_encoder_table.h +71 -0
- data/src/core/ext/transport/chttp2/transport/hpack_parser.cc +1379 -0
- data/src/core/ext/transport/chttp2/transport/hpack_parser.h +135 -0
- data/src/core/ext/transport/chttp2/transport/hpack_parser_table.cc +239 -0
- data/src/core/ext/transport/chttp2/transport/hpack_parser_table.h +115 -0
- data/src/core/ext/transport/chttp2/transport/http2_settings.cc +62 -0
- data/src/core/ext/transport/chttp2/transport/http2_settings.h +61 -0
- data/src/core/ext/transport/chttp2/transport/huffsyms.cc +92 -0
- data/src/core/ext/transport/chttp2/transport/huffsyms.h +32 -0
- data/src/core/ext/transport/chttp2/transport/internal.h +865 -0
- data/src/core/ext/transport/chttp2/transport/parsing.cc +653 -0
- data/src/core/ext/transport/chttp2/transport/stream_lists.cc +216 -0
- data/src/core/ext/transport/chttp2/transport/stream_map.cc +177 -0
- data/src/core/ext/transport/chttp2/transport/stream_map.h +67 -0
- data/src/core/ext/transport/chttp2/transport/varint.cc +62 -0
- data/src/core/ext/transport/chttp2/transport/varint.h +71 -0
- data/src/core/ext/transport/chttp2/transport/writing.cc +661 -0
- data/src/core/ext/transport/inproc/inproc_plugin.cc +24 -0
- data/src/core/ext/transport/inproc/inproc_transport.cc +1321 -0
- data/src/core/ext/transport/inproc/inproc_transport.h +32 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/certs.upb.c +117 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/certs.upb.h +482 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/clusters.upb.c +121 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/clusters.upb.h +553 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/config_dump.upb.c +444 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/config_dump.upb.h +2156 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/init_dump.upb.c +56 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/init_dump.upb.h +151 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/listeners.upb.c +62 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/listeners.upb.h +160 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/memory.upb.c +46 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/memory.upb.h +124 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/metrics.upb.c +43 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/metrics.upb.h +102 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/mutex_stats.upb.c +43 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/mutex_stats.upb.h +97 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/server_info.upb.c +106 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/server_info.upb.h +605 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/tap.upb.c +48 -0
- data/src/core/ext/upb-generated/envoy/admin/v3/tap.upb.h +103 -0
- data/src/core/ext/upb-generated/envoy/annotations/deprecation.upb.c +60 -0
- data/src/core/ext/upb-generated/envoy/annotations/deprecation.upb.h +81 -0
- data/src/core/ext/upb-generated/envoy/annotations/resource.upb.c +53 -0
- data/src/core/ext/upb-generated/envoy/annotations/resource.upb.h +99 -0
- data/src/core/ext/upb-generated/envoy/config/accesslog/v3/accesslog.upb.c +270 -0
- data/src/core/ext/upb-generated/envoy/config/accesslog/v3/accesslog.upb.h +1240 -0
- data/src/core/ext/upb-generated/envoy/config/bootstrap/v3/bootstrap.upb.c +411 -0
- data/src/core/ext/upb-generated/envoy/config/bootstrap/v3/bootstrap.upb.h +2161 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/circuit_breaker.upb.c +95 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/circuit_breaker.upb.h +382 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/cluster.upb.c +543 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/cluster.upb.h +2961 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/filter.upb.c +48 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/filter.upb.h +103 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/outlier_detection.upb.c +89 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/outlier_detection.upb.h +545 -0
- data/src/core/ext/upb-generated/envoy/config/common/matcher/v3/matcher.upb.c +299 -0
- data/src/core/ext/upb-generated/envoy/config/common/matcher/v3/matcher.upb.h +1381 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/address.upb.c +145 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/address.upb.h +636 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/backoff.upb.c +49 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/backoff.upb.h +116 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/base.upb.c +419 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/base.upb.h +1783 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/config_source.upb.c +163 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/config_source.upb.h +778 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/event_service_config.upb.c +47 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/event_service_config.upb.h +100 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/extension.upb.c +47 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/extension.upb.h +103 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/grpc_method_list.upb.c +58 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/grpc_method_list.upb.h +151 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/grpc_service.upb.c +269 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/grpc_service.upb.h +1277 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/health_check.upb.c +220 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/health_check.upb.h +1219 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/http_uri.upb.c +49 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/http_uri.upb.h +122 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/protocol.upb.c +322 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/protocol.upb.h +1686 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/proxy_protocol.upb.c +40 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/proxy_protocol.upb.h +84 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/resolver.upb.c +60 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/resolver.upb.h +169 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/socket_option.upb.c +47 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/socket_option.upb.h +144 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/substitution_format_string.upb.c +56 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/substitution_format_string.upb.h +178 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/udp_socket_config.upb.c +48 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/udp_socket_config.upb.h +118 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint.upb.c +106 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint.upb.h +348 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint_components.upb.c +144 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint_components.upb.h +623 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/load_report.upb.c +129 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/load_report.upb.h +568 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/api_listener.upb.c +46 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/api_listener.upb.h +94 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/listener.upb.c +165 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/listener.upb.h +886 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/listener_components.upb.c +186 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/listener_components.upb.h +941 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/quic_config.upb.c +63 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/quic_config.upb.h +234 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/udp_listener_config.upb.c +56 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/udp_listener_config.upb.h +154 -0
- data/src/core/ext/upb-generated/envoy/config/metrics/v3/metrics_service.upb.c +53 -0
- data/src/core/ext/upb-generated/envoy/config/metrics/v3/metrics_service.upb.h +136 -0
- data/src/core/ext/upb-generated/envoy/config/metrics/v3/stats.upb.c +165 -0
- data/src/core/ext/upb-generated/envoy/config/metrics/v3/stats.upb.h +716 -0
- data/src/core/ext/upb-generated/envoy/config/overload/v3/overload.upb.c +174 -0
- data/src/core/ext/upb-generated/envoy/config/overload/v3/overload.upb.h +721 -0
- data/src/core/ext/upb-generated/envoy/config/rbac/v3/rbac.upb.c +209 -0
- data/src/core/ext/upb-generated/envoy/config/rbac/v3/rbac.upb.h +1008 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/route.upb.c +101 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/route.upb.h +443 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/route_components.upb.c +1051 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/route_components.upb.h +5956 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/scoped_route.upb.c +79 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/scoped_route.upb.h +255 -0
- data/src/core/ext/upb-generated/envoy/config/tap/v3/common.upb.c +222 -0
- data/src/core/ext/upb-generated/envoy/config/tap/v3/common.upb.h +1052 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/datadog.upb.c +44 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/datadog.upb.h +88 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/dynamic_ot.upb.c +49 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/dynamic_ot.upb.h +103 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/http_tracer.upb.c +63 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/http_tracer.upb.h +167 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/lightstep.upb.c +52 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/lightstep.upb.h +134 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/opencensus.upb.c +63 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/opencensus.upb.h +250 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/service.upb.c +47 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/service.upb.h +94 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/skywalking.upb.c +69 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/skywalking.upb.h +213 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/trace.upb.c +32 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/trace.upb.h +42 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/xray.upb.c +71 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/xray.upb.h +218 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/zipkin.upb.c +54 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/zipkin.upb.h +146 -0
- data/src/core/ext/upb-generated/envoy/extensions/clusters/aggregate/v3/cluster.upb.c +42 -0
- data/src/core/ext/upb-generated/envoy/extensions/clusters/aggregate/v3/cluster.upb.h +85 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/common/fault/v3/fault.upb.c +96 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/common/fault/v3/fault.upb.h +375 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/http/fault/v3/fault.upb.c +94 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/http/fault/v3/fault.upb.h +433 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/http/rbac/v3/rbac.upb.c +64 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/http/rbac/v3/rbac.upb.h +183 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/http/router/v3/router.upb.c +55 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/http/router/v3/router.upb.h +168 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upb.c +463 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upb.h +2606 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/cert.upb.c +28 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/cert.upb.h +38 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/common.upb.c +175 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/common.upb.h +880 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/secret.upb.c +88 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/secret.upb.h +308 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/tls.upb.c +191 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/tls.upb.h +1035 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/tls_spiffe_validator_config.upb.c +62 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/tls_spiffe_validator_config.upb.h +160 -0
- data/src/core/ext/upb-generated/envoy/service/discovery/v3/ads.upb.c +38 -0
- data/src/core/ext/upb-generated/envoy/service/discovery/v3/ads.upb.h +70 -0
- data/src/core/ext/upb-generated/envoy/service/discovery/v3/discovery.upb.c +165 -0
- data/src/core/ext/upb-generated/envoy/service/discovery/v3/discovery.upb.h +755 -0
- data/src/core/ext/upb-generated/envoy/service/load_stats/v3/lrs.upb.c +68 -0
- data/src/core/ext/upb-generated/envoy/service/load_stats/v3/lrs.upb.h +210 -0
- data/src/core/ext/upb-generated/envoy/service/status/v3/csds.upb.c +138 -0
- data/src/core/ext/upb-generated/envoy/service/status/v3/csds.upb.h +631 -0
- data/src/core/ext/upb-generated/envoy/type/http/v3/cookie.upb.c +48 -0
- data/src/core/ext/upb-generated/envoy/type/http/v3/cookie.upb.h +112 -0
- data/src/core/ext/upb-generated/envoy/type/http/v3/path_transformation.upb.c +76 -0
- data/src/core/ext/upb-generated/envoy/type/http/v3/path_transformation.upb.h +249 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/http_inputs.upb.c +74 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/http_inputs.upb.h +214 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/metadata.upb.c +62 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/metadata.upb.h +188 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/node.upb.c +49 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/node.upb.h +117 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/number.upb.c +48 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/number.upb.h +113 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/path.upb.c +47 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/path.upb.h +100 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/regex.upb.c +80 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/regex.upb.h +234 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/string.upb.c +67 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/string.upb.h +218 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/struct.upb.c +60 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/struct.upb.h +170 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/value.upb.c +78 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/value.upb.h +294 -0
- data/src/core/ext/upb-generated/envoy/type/metadata/v3/metadata.upb.c +107 -0
- data/src/core/ext/upb-generated/envoy/type/metadata/v3/metadata.upb.h +429 -0
- data/src/core/ext/upb-generated/envoy/type/tracing/v3/custom_tag.upb.c +107 -0
- data/src/core/ext/upb-generated/envoy/type/tracing/v3/custom_tag.upb.h +419 -0
- data/src/core/ext/upb-generated/envoy/type/v3/hash_policy.upb.c +66 -0
- data/src/core/ext/upb-generated/envoy/type/v3/hash_policy.upb.h +201 -0
- data/src/core/ext/upb-generated/envoy/type/v3/http.upb.c +26 -0
- data/src/core/ext/upb-generated/envoy/type/v3/http.upb.h +39 -0
- data/src/core/ext/upb-generated/envoy/type/v3/http_status.upb.c +42 -0
- data/src/core/ext/upb-generated/envoy/type/v3/http_status.upb.h +139 -0
- data/src/core/ext/upb-generated/envoy/type/v3/percent.upb.c +54 -0
- data/src/core/ext/upb-generated/envoy/type/v3/percent.upb.h +139 -0
- data/src/core/ext/upb-generated/envoy/type/v3/range.upb.c +66 -0
- data/src/core/ext/upb-generated/envoy/type/v3/range.upb.h +196 -0
- data/src/core/ext/upb-generated/envoy/type/v3/ratelimit_unit.upb.c +26 -0
- data/src/core/ext/upb-generated/envoy/type/v3/ratelimit_unit.upb.h +41 -0
- data/src/core/ext/upb-generated/envoy/type/v3/semantic_version.upb.c +43 -0
- data/src/core/ext/upb-generated/envoy/type/v3/semantic_version.upb.h +97 -0
- data/src/core/ext/upb-generated/envoy/type/v3/token_bucket.upb.c +51 -0
- data/src/core/ext/upb-generated/envoy/type/v3/token_bucket.upb.h +127 -0
- data/src/core/ext/upb-generated/google/api/annotations.upb.c +40 -0
- data/src/core/ext/upb-generated/google/api/annotations.upb.h +53 -0
- data/src/core/ext/upb-generated/google/api/expr/v1alpha1/checked.upb.c +271 -0
- data/src/core/ext/upb-generated/google/api/expr/v1alpha1/checked.upb.h +1236 -0
- data/src/core/ext/upb-generated/google/api/expr/v1alpha1/syntax.upb.c +283 -0
- data/src/core/ext/upb-generated/google/api/expr/v1alpha1/syntax.upb.h +1338 -0
- data/src/core/ext/upb-generated/google/api/http.upb.c +81 -0
- data/src/core/ext/upb-generated/google/api/http.upb.h +331 -0
- data/src/core/ext/upb-generated/google/api/httpbody.upb.c +46 -0
- data/src/core/ext/upb-generated/google/api/httpbody.upb.h +111 -0
- data/src/core/ext/upb-generated/google/protobuf/any.upb.c +40 -0
- data/src/core/ext/upb-generated/google/protobuf/any.upb.h +88 -0
- data/src/core/ext/upb-generated/google/protobuf/descriptor.upb.c +577 -0
- data/src/core/ext/upb-generated/google/protobuf/descriptor.upb.h +3095 -0
- data/src/core/ext/upb-generated/google/protobuf/duration.upb.c +40 -0
- data/src/core/ext/upb-generated/google/protobuf/duration.upb.h +88 -0
- data/src/core/ext/upb-generated/google/protobuf/empty.upb.c +35 -0
- data/src/core/ext/upb-generated/google/protobuf/empty.upb.h +70 -0
- data/src/core/ext/upb-generated/google/protobuf/struct.upb.c +95 -0
- data/src/core/ext/upb-generated/google/protobuf/struct.upb.h +317 -0
- data/src/core/ext/upb-generated/google/protobuf/timestamp.upb.c +40 -0
- data/src/core/ext/upb-generated/google/protobuf/timestamp.upb.h +88 -0
- data/src/core/ext/upb-generated/google/protobuf/wrappers.upb.c +127 -0
- data/src/core/ext/upb-generated/google/protobuf/wrappers.upb.h +439 -0
- data/src/core/ext/upb-generated/google/rpc/status.upb.c +46 -0
- data/src/core/ext/upb-generated/google/rpc/status.upb.h +111 -0
- data/src/core/ext/upb-generated/opencensus/proto/trace/v1/trace_config.upb.c +84 -0
- data/src/core/ext/upb-generated/opencensus/proto/trace/v1/trace_config.upb.h +319 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/altscontext.upb.c +63 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/altscontext.upb.h +184 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/handshaker.upb.c +240 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/handshaker.upb.h +1133 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/transport_security_common.upb.c +57 -0
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/transport_security_common.upb.h +174 -0
- data/src/core/ext/upb-generated/src/proto/grpc/health/v1/health.upb.c +50 -0
- data/src/core/ext/upb-generated/src/proto/grpc/health/v1/health.upb.h +131 -0
- data/src/core/ext/upb-generated/src/proto/grpc/lb/v1/load_balancer.upb.c +161 -0
- data/src/core/ext/upb-generated/src/proto/grpc/lb/v1/load_balancer.upb.h +669 -0
- data/src/core/ext/upb-generated/src/proto/grpc/lookup/v1/rls.upb.c +70 -0
- data/src/core/ext/upb-generated/src/proto/grpc/lookup/v1/rls.upb.h +208 -0
- data/src/core/ext/upb-generated/src/proto/grpc/lookup/v1/rls_config.upb.c +175 -0
- data/src/core/ext/upb-generated/src/proto/grpc/lookup/v1/rls_config.upb.h +764 -0
- data/src/core/ext/upb-generated/udpa/annotations/migrate.upb.c +110 -0
- data/src/core/ext/upb-generated/udpa/annotations/migrate.upb.h +278 -0
- data/src/core/ext/upb-generated/udpa/annotations/security.upb.c +55 -0
- data/src/core/ext/upb-generated/udpa/annotations/security.upb.h +108 -0
- data/src/core/ext/upb-generated/udpa/annotations/sensitive.upb.c +38 -0
- data/src/core/ext/upb-generated/udpa/annotations/sensitive.upb.h +46 -0
- data/src/core/ext/upb-generated/udpa/annotations/status.upb.c +54 -0
- data/src/core/ext/upb-generated/udpa/annotations/status.upb.h +115 -0
- data/src/core/ext/upb-generated/udpa/annotations/versioning.upb.c +53 -0
- data/src/core/ext/upb-generated/udpa/annotations/versioning.upb.h +99 -0
- data/src/core/ext/upb-generated/validate/validate.upb.c +560 -0
- data/src/core/ext/upb-generated/validate/validate.upb.h +4013 -0
- data/src/core/ext/upb-generated/xds/annotations/v3/migrate.upb.c +110 -0
- data/src/core/ext/upb-generated/xds/annotations/v3/migrate.upb.h +278 -0
- data/src/core/ext/upb-generated/xds/annotations/v3/security.upb.c +55 -0
- data/src/core/ext/upb-generated/xds/annotations/v3/security.upb.h +108 -0
- data/src/core/ext/upb-generated/xds/annotations/v3/sensitive.upb.c +38 -0
- data/src/core/ext/upb-generated/xds/annotations/v3/sensitive.upb.h +46 -0
- data/src/core/ext/upb-generated/xds/annotations/v3/status.upb.c +105 -0
- data/src/core/ext/upb-generated/xds/annotations/v3/status.upb.h +290 -0
- data/src/core/ext/upb-generated/xds/annotations/v3/versioning.upb.c +53 -0
- data/src/core/ext/upb-generated/xds/annotations/v3/versioning.upb.h +99 -0
- data/src/core/ext/upb-generated/xds/core/v3/authority.upb.c +41 -0
- data/src/core/ext/upb-generated/xds/core/v3/authority.upb.h +79 -0
- data/src/core/ext/upb-generated/xds/core/v3/collection_entry.upb.c +66 -0
- data/src/core/ext/upb-generated/xds/core/v3/collection_entry.upb.h +200 -0
- data/src/core/ext/upb-generated/xds/core/v3/context_params.upb.c +56 -0
- data/src/core/ext/upb-generated/xds/core/v3/context_params.upb.h +115 -0
- data/src/core/ext/upb-generated/xds/core/v3/extension.upb.c +46 -0
- data/src/core/ext/upb-generated/xds/core/v3/extension.upb.h +103 -0
- data/src/core/ext/upb-generated/xds/core/v3/resource.upb.c +49 -0
- data/src/core/ext/upb-generated/xds/core/v3/resource.upb.h +127 -0
- data/src/core/ext/upb-generated/xds/core/v3/resource_locator.upb.c +68 -0
- data/src/core/ext/upb-generated/xds/core/v3/resource_locator.upb.h +240 -0
- data/src/core/ext/upb-generated/xds/core/v3/resource_name.upb.c +49 -0
- data/src/core/ext/upb-generated/xds/core/v3/resource_name.upb.h +121 -0
- data/src/core/ext/upb-generated/xds/data/orca/v3/orca_load_report.upb.c +73 -0
- data/src/core/ext/upb-generated/xds/data/orca/v3/orca_load_report.upb.h +187 -0
- data/src/core/ext/upb-generated/xds/type/matcher/v3/matcher.upb.c +207 -0
- data/src/core/ext/upb-generated/xds/type/matcher/v3/matcher.upb.h +878 -0
- data/src/core/ext/upb-generated/xds/type/matcher/v3/regex.upb.c +52 -0
- data/src/core/ext/upb-generated/xds/type/matcher/v3/regex.upb.h +143 -0
- data/src/core/ext/upb-generated/xds/type/matcher/v3/string.upb.c +65 -0
- data/src/core/ext/upb-generated/xds/type/matcher/v3/string.upb.h +218 -0
- data/src/core/ext/upb-generated/xds/type/v3/typed_struct.upb.c +46 -0
- data/src/core/ext/upb-generated/xds/type/v3/typed_struct.upb.h +103 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/certs.upbdefs.c +84 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/certs.upbdefs.h +55 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/clusters.upbdefs.c +127 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/clusters.upbdefs.h +50 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/config_dump.upbdefs.c +309 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/config_dump.upbdefs.h +140 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/init_dump.upbdefs.c +43 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/init_dump.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/listeners.upbdefs.c +53 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/listeners.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/memory.upbdefs.c +49 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/memory.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/metrics.upbdefs.c +46 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/metrics.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/mutex_stats.upbdefs.c +46 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/mutex_stats.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/server_info.upbdefs.c +142 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/server_info.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/tap.upbdefs.c +51 -0
- data/src/core/ext/upbdefs-generated/envoy/admin/v3/tap.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/annotations/deprecation.upbdefs.c +48 -0
- data/src/core/ext/upbdefs-generated/envoy/annotations/deprecation.upbdefs.h +30 -0
- data/src/core/ext/upbdefs-generated/envoy/annotations/resource.upbdefs.c +38 -0
- data/src/core/ext/upbdefs-generated/envoy/annotations/resource.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/accesslog/v3/accesslog.upbdefs.c +222 -0
- data/src/core/ext/upbdefs-generated/envoy/config/accesslog/v3/accesslog.upbdefs.h +105 -0
- data/src/core/ext/upbdefs-generated/envoy/config/bootstrap/v3/bootstrap.upbdefs.c +393 -0
- data/src/core/ext/upbdefs-generated/envoy/config/bootstrap/v3/bootstrap.upbdefs.h +120 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/circuit_breaker.upbdefs.c +98 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/circuit_breaker.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/cluster.upbdefs.c +557 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/cluster.upbdefs.h +155 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/filter.upbdefs.c +51 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/filter.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/outlier_detection.upbdefs.c +138 -0
- data/src/core/ext/upbdefs-generated/envoy/config/cluster/v3/outlier_detection.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/common/matcher/v3/matcher.upbdefs.c +206 -0
- data/src/core/ext/upbdefs-generated/envoy/config/common/matcher/v3/matcher.upbdefs.h +105 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/address.upbdefs.c +112 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/address.upbdefs.h +65 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/backoff.upbdefs.c +54 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/backoff.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/base.upbdefs.c +267 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/base.upbdefs.h +150 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/config_source.upbdefs.c +168 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/config_source.upbdefs.h +65 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/event_service_config.upbdefs.c +53 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/event_service_config.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/extension.upbdefs.c +47 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/extension.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/grpc_method_list.upbdefs.c +53 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/grpc_method_list.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/grpc_service.upbdefs.c +235 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/grpc_service.upbdefs.h +100 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/health_check.upbdefs.c +228 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/health_check.upbdefs.h +75 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/http_uri.upbdefs.c +53 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/http_uri.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/protocol.upbdefs.c +298 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/protocol.upbdefs.h +110 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/proxy_protocol.upbdefs.c +41 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/proxy_protocol.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/resolver.upbdefs.c +55 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/resolver.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/socket_option.upbdefs.c +57 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/socket_option.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/substitution_format_string.upbdefs.c +70 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/substitution_format_string.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/udp_socket_config.upbdefs.c +49 -0
- data/src/core/ext/upbdefs-generated/envoy/config/core/v3/udp_socket_config.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/endpoint/v3/endpoint.upbdefs.c +99 -0
- data/src/core/ext/upbdefs-generated/envoy/config/endpoint/v3/endpoint.upbdefs.h +50 -0
- data/src/core/ext/upbdefs-generated/envoy/config/endpoint/v3/endpoint_components.upbdefs.c +128 -0
- data/src/core/ext/upbdefs-generated/envoy/config/endpoint/v3/endpoint_components.upbdefs.h +60 -0
- data/src/core/ext/upbdefs-generated/envoy/config/endpoint/v3/load_report.upbdefs.c +136 -0
- data/src/core/ext/upbdefs-generated/envoy/config/endpoint/v3/load_report.upbdefs.h +55 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/api_listener.upbdefs.c +48 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/api_listener.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/listener.upbdefs.c +197 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/listener.upbdefs.h +60 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/listener_components.upbdefs.c +190 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/listener_components.upbdefs.h +65 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/quic_config.upbdefs.c +88 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/quic_config.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/udp_listener_config.upbdefs.c +63 -0
- data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/udp_listener_config.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/config/metrics/v3/metrics_service.upbdefs.c +69 -0
- data/src/core/ext/upbdefs-generated/envoy/config/metrics/v3/metrics_service.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/metrics/v3/stats.upbdefs.c +125 -0
- data/src/core/ext/upbdefs-generated/envoy/config/metrics/v3/stats.upbdefs.h +70 -0
- data/src/core/ext/upbdefs-generated/envoy/config/overload/v3/overload.upbdefs.c +134 -0
- data/src/core/ext/upbdefs-generated/envoy/config/overload/v3/overload.upbdefs.h +75 -0
- data/src/core/ext/upbdefs-generated/envoy/config/rbac/v3/rbac.upbdefs.c +190 -0
- data/src/core/ext/upbdefs-generated/envoy/config/rbac/v3/rbac.upbdefs.h +70 -0
- data/src/core/ext/upbdefs-generated/envoy/config/route/v3/route.upbdefs.c +115 -0
- data/src/core/ext/upbdefs-generated/envoy/config/route/v3/route.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/config/route/v3/route_components.upbdefs.c +896 -0
- data/src/core/ext/upbdefs-generated/envoy/config/route/v3/route_components.upbdefs.h +295 -0
- data/src/core/ext/upbdefs-generated/envoy/config/route/v3/scoped_route.upbdefs.c +77 -0
- data/src/core/ext/upbdefs-generated/envoy/config/route/v3/scoped_route.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/config/tap/v3/common.upbdefs.c +188 -0
- data/src/core/ext/upbdefs-generated/envoy/config/tap/v3/common.upbdefs.h +85 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/datadog.upbdefs.c +54 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/datadog.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/dynamic_ot.upbdefs.c +57 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/dynamic_ot.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/http_tracer.upbdefs.c +57 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/http_tracer.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/lightstep.upbdefs.c +72 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/lightstep.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/opencensus.upbdefs.c +99 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/opencensus.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/service.upbdefs.c +52 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/service.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/skywalking.upbdefs.c +71 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/skywalking.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/trace.upbdefs.c +57 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/trace.upbdefs.h +30 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/xray.upbdefs.c +75 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/xray.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/zipkin.upbdefs.c +77 -0
- data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/zipkin.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/clusters/aggregate/v3/cluster.upbdefs.c +50 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/clusters/aggregate/v3/cluster.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/common/fault/v3/fault.upbdefs.c +92 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/common/fault/v3/fault.upbdefs.h +55 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/http/fault/v3/fault.upbdefs.c +117 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/http/fault/v3/fault.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/http/rbac/v3/rbac.upbdefs.c +59 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/http/rbac/v3/rbac.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/http/router/v3/router.upbdefs.c +78 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/http/router/v3/router.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upbdefs.c +551 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upbdefs.h +130 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/cert.upbdefs.c +48 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/cert.upbdefs.h +30 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/common.upbdefs.c +210 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/common.upbdefs.h +65 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/secret.upbdefs.c +91 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/secret.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/tls.upbdefs.c +254 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/tls.upbdefs.h +65 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/tls_spiffe_validator_config.upbdefs.c +58 -0
- data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/tls_spiffe_validator_config.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/service/discovery/v3/ads.upbdefs.c +58 -0
- data/src/core/ext/upbdefs-generated/envoy/service/discovery/v3/ads.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/service/discovery/v3/discovery.upbdefs.c +128 -0
- data/src/core/ext/upbdefs-generated/envoy/service/discovery/v3/discovery.upbdefs.h +65 -0
- data/src/core/ext/upbdefs-generated/envoy/service/load_stats/v3/lrs.upbdefs.c +76 -0
- data/src/core/ext/upbdefs-generated/envoy/service/load_stats/v3/lrs.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/service/status/v3/csds.upbdefs.c +153 -0
- data/src/core/ext/upbdefs-generated/envoy/service/status/v3/csds.upbdefs.h +55 -0
- data/src/core/ext/upbdefs-generated/envoy/type/http/v3/cookie.upbdefs.c +46 -0
- data/src/core/ext/upbdefs-generated/envoy/type/http/v3/cookie.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/type/http/v3/path_transformation.upbdefs.c +56 -0
- data/src/core/ext/upbdefs-generated/envoy/type/http/v3/path_transformation.upbdefs.h +50 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/http_inputs.upbdefs.c +52 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/http_inputs.upbdefs.h +50 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/metadata.upbdefs.c +61 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/metadata.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/node.upbdefs.c +54 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/node.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/number.upbdefs.c +52 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/number.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/path.upbdefs.c +51 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/path.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/regex.upbdefs.c +70 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/regex.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/string.upbdefs.c +65 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/string.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/struct.upbdefs.c +58 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/struct.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/value.upbdefs.c +75 -0
- data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/value.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/type/metadata/v3/metadata.upbdefs.c +78 -0
- data/src/core/ext/upbdefs-generated/envoy/type/metadata/v3/metadata.upbdefs.h +65 -0
- data/src/core/ext/upbdefs-generated/envoy/type/tracing/v3/custom_tag.upbdefs.c +85 -0
- data/src/core/ext/upbdefs-generated/envoy/type/tracing/v3/custom_tag.upbdefs.h +55 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/hash_policy.upbdefs.c +53 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/hash_policy.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/http.upbdefs.c +36 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/http.upbdefs.h +30 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/http_status.upbdefs.c +94 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/http_status.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/percent.upbdefs.c +54 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/percent.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/range.upbdefs.c +48 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/range.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/ratelimit_unit.upbdefs.c +38 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/ratelimit_unit.upbdefs.h +30 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/semantic_version.upbdefs.c +44 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/semantic_version.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/token_bucket.upbdefs.c +57 -0
- data/src/core/ext/upbdefs-generated/envoy/type/v3/token_bucket.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/google/api/annotations.upbdefs.c +40 -0
- data/src/core/ext/upbdefs-generated/google/api/annotations.upbdefs.h +30 -0
- data/src/core/ext/upbdefs-generated/google/api/expr/v1alpha1/checked.upbdefs.c +154 -0
- data/src/core/ext/upbdefs-generated/google/api/expr/v1alpha1/checked.upbdefs.h +95 -0
- data/src/core/ext/upbdefs-generated/google/api/expr/v1alpha1/syntax.upbdefs.c +153 -0
- data/src/core/ext/upbdefs-generated/google/api/expr/v1alpha1/syntax.upbdefs.h +100 -0
- data/src/core/ext/upbdefs-generated/google/api/http.upbdefs.c +52 -0
- data/src/core/ext/upbdefs-generated/google/api/http.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/google/api/httpbody.upbdefs.c +39 -0
- data/src/core/ext/upbdefs-generated/google/api/httpbody.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/any.upbdefs.c +34 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/any.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/descriptor.upbdefs.c +329 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/descriptor.upbdefs.h +165 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/duration.upbdefs.c +35 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/duration.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/empty.upbdefs.c +32 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/empty.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/struct.upbdefs.c +54 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/struct.upbdefs.h +50 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/timestamp.upbdefs.c +35 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/timestamp.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/wrappers.upbdefs.c +45 -0
- data/src/core/ext/upbdefs-generated/google/protobuf/wrappers.upbdefs.h +75 -0
- data/src/core/ext/upbdefs-generated/google/rpc/status.upbdefs.c +37 -0
- data/src/core/ext/upbdefs-generated/google/rpc/status.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/opencensus/proto/trace/v1/trace_config.upbdefs.c +67 -0
- data/src/core/ext/upbdefs-generated/opencensus/proto/trace/v1/trace_config.upbdefs.h +50 -0
- data/src/core/ext/upbdefs-generated/src/proto/grpc/lookup/v1/rls_config.upbdefs.c +99 -0
- data/src/core/ext/upbdefs-generated/src/proto/grpc/lookup/v1/rls_config.upbdefs.h +75 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/migrate.upbdefs.c +62 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/migrate.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/security.upbdefs.c +47 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/security.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/sensitive.upbdefs.c +34 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/sensitive.upbdefs.h +30 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/status.upbdefs.c +46 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/status.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/versioning.upbdefs.c +39 -0
- data/src/core/ext/upbdefs-generated/udpa/annotations/versioning.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/validate/validate.upbdefs.c +283 -0
- data/src/core/ext/upbdefs-generated/validate/validate.upbdefs.h +145 -0
- data/src/core/ext/upbdefs-generated/xds/annotations/v3/migrate.upbdefs.c +63 -0
- data/src/core/ext/upbdefs-generated/xds/annotations/v3/migrate.upbdefs.h +45 -0
- data/src/core/ext/upbdefs-generated/xds/annotations/v3/security.upbdefs.c +47 -0
- data/src/core/ext/upbdefs-generated/xds/annotations/v3/security.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/xds/annotations/v3/sensitive.upbdefs.c +35 -0
- data/src/core/ext/upbdefs-generated/xds/annotations/v3/sensitive.upbdefs.h +30 -0
- data/src/core/ext/upbdefs-generated/xds/annotations/v3/status.upbdefs.c +64 -0
- data/src/core/ext/upbdefs-generated/xds/annotations/v3/status.upbdefs.h +50 -0
- data/src/core/ext/upbdefs-generated/xds/annotations/v3/versioning.upbdefs.c +40 -0
- data/src/core/ext/upbdefs-generated/xds/annotations/v3/versioning.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/authority.upbdefs.c +38 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/authority.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/collection_entry.upbdefs.c +56 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/collection_entry.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/context_params.upbdefs.c +39 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/context_params.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/extension.upbdefs.c +41 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/extension.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/resource.upbdefs.c +45 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/resource.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/resource_locator.upbdefs.c +61 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/resource_locator.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/resource_name.upbdefs.c +46 -0
- data/src/core/ext/upbdefs-generated/xds/core/v3/resource_name.upbdefs.h +35 -0
- data/src/core/ext/upbdefs-generated/xds/type/matcher/v3/matcher.upbdefs.c +126 -0
- data/src/core/ext/upbdefs-generated/xds/type/matcher/v3/matcher.upbdefs.h +80 -0
- data/src/core/ext/upbdefs-generated/xds/type/matcher/v3/regex.upbdefs.c +40 -0
- data/src/core/ext/upbdefs-generated/xds/type/matcher/v3/regex.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/xds/type/matcher/v3/string.upbdefs.c +52 -0
- data/src/core/ext/upbdefs-generated/xds/type/matcher/v3/string.upbdefs.h +40 -0
- data/src/core/ext/upbdefs-generated/xds/type/v3/typed_struct.upbdefs.c +40 -0
- data/src/core/ext/upbdefs-generated/xds/type/v3/typed_struct.upbdefs.h +35 -0
- data/src/core/ext/xds/certificate_provider_factory.h +61 -0
- data/src/core/ext/xds/certificate_provider_registry.cc +103 -0
- data/src/core/ext/xds/certificate_provider_registry.h +57 -0
- data/src/core/ext/xds/certificate_provider_store.cc +95 -0
- data/src/core/ext/xds/certificate_provider_store.h +121 -0
- data/src/core/ext/xds/file_watcher_certificate_provider_factory.cc +144 -0
- data/src/core/ext/xds/file_watcher_certificate_provider_factory.h +69 -0
- data/src/core/ext/xds/upb_utils.h +67 -0
- data/src/core/ext/xds/xds_api.cc +730 -0
- data/src/core/ext/xds/xds_api.h +191 -0
- data/src/core/ext/xds/xds_bootstrap.cc +570 -0
- data/src/core/ext/xds/xds_bootstrap.h +141 -0
- data/src/core/ext/xds/xds_certificate_provider.cc +407 -0
- data/src/core/ext/xds/xds_certificate_provider.h +159 -0
- data/src/core/ext/xds/xds_channel_args.h +32 -0
- data/src/core/ext/xds/xds_channel_stack_modifier.cc +109 -0
- data/src/core/ext/xds/xds_channel_stack_modifier.h +53 -0
- data/src/core/ext/xds/xds_client.cc +2510 -0
- data/src/core/ext/xds/xds_client.h +347 -0
- data/src/core/ext/xds/xds_client_stats.cc +160 -0
- data/src/core/ext/xds/xds_client_stats.h +241 -0
- data/src/core/ext/xds/xds_cluster.cc +453 -0
- data/src/core/ext/xds/xds_cluster.h +108 -0
- data/src/core/ext/xds/xds_cluster_specifier_plugin.cc +142 -0
- data/src/core/ext/xds/xds_cluster_specifier_plugin.h +79 -0
- data/src/core/ext/xds/xds_common_types.cc +388 -0
- data/src/core/ext/xds/xds_common_types.h +95 -0
- data/src/core/ext/xds/xds_endpoint.cc +371 -0
- data/src/core/ext/xds/xds_endpoint.h +135 -0
- data/src/core/ext/xds/xds_http_fault_filter.cc +227 -0
- data/src/core/ext/xds/xds_http_fault_filter.h +64 -0
- data/src/core/ext/xds/xds_http_filters.cc +122 -0
- data/src/core/ext/xds/xds_http_filters.h +133 -0
- data/src/core/ext/xds/xds_http_rbac_filter.cc +563 -0
- data/src/core/ext/xds/xds_http_rbac_filter.h +54 -0
- data/src/core/ext/xds/xds_listener.cc +1039 -0
- data/src/core/ext/xds/xds_listener.h +220 -0
- data/src/core/ext/xds/xds_resource_type.cc +33 -0
- data/src/core/ext/xds/xds_resource_type.h +98 -0
- data/src/core/ext/xds/xds_resource_type_impl.h +87 -0
- data/src/core/ext/xds/xds_route_config.cc +1122 -0
- data/src/core/ext/xds/xds_route_config.h +218 -0
- data/src/core/ext/xds/xds_routing.cc +250 -0
- data/src/core/ext/xds/xds_routing.h +101 -0
- data/src/core/ext/xds/xds_server_config_fetcher.cc +1314 -0
- data/src/core/lib/address_utils/parse_address.cc +340 -0
- data/src/core/lib/address_utils/parse_address.h +82 -0
- data/src/core/lib/address_utils/sockaddr_utils.cc +409 -0
- data/src/core/lib/address_utils/sockaddr_utils.h +95 -0
- data/src/core/lib/avl/avl.h +458 -0
- data/src/core/lib/backoff/backoff.cc +49 -0
- data/src/core/lib/backoff/backoff.h +89 -0
- data/src/core/lib/channel/call_finalization.h +86 -0
- data/src/core/lib/channel/call_tracer.h +88 -0
- data/src/core/lib/channel/channel_args.cc +538 -0
- data/src/core/lib/channel/channel_args.h +347 -0
- data/src/core/lib/channel/channel_args_preconditioning.cc +42 -0
- data/src/core/lib/channel/channel_args_preconditioning.h +61 -0
- data/src/core/lib/channel/channel_stack.cc +274 -0
- data/src/core/lib/channel/channel_stack.h +345 -0
- data/src/core/lib/channel/channel_stack_builder.cc +64 -0
- data/src/core/lib/channel/channel_stack_builder.h +127 -0
- data/src/core/lib/channel/channel_stack_builder_impl.cc +102 -0
- data/src/core/lib/channel/channel_stack_builder_impl.h +48 -0
- data/src/core/lib/channel/channel_trace.cc +190 -0
- data/src/core/lib/channel/channel_trace.h +135 -0
- data/src/core/lib/channel/channelz.cc +597 -0
- data/src/core/lib/channel/channelz.h +357 -0
- data/src/core/lib/channel/channelz_registry.cc +285 -0
- data/src/core/lib/channel/channelz_registry.h +99 -0
- data/src/core/lib/channel/connected_channel.cc +250 -0
- data/src/core/lib/channel/connected_channel.h +34 -0
- data/src/core/lib/channel/context.h +63 -0
- data/src/core/lib/channel/handshaker.cc +222 -0
- data/src/core/lib/channel/handshaker.h +161 -0
- data/src/core/lib/channel/handshaker_factory.h +50 -0
- data/src/core/lib/channel/handshaker_registry.cc +50 -0
- data/src/core/lib/channel/handshaker_registry.h +71 -0
- data/src/core/lib/channel/promise_based_filter.cc +1002 -0
- data/src/core/lib/channel/promise_based_filter.h +437 -0
- data/src/core/lib/channel/status_util.cc +109 -0
- data/src/core/lib/channel/status_util.h +67 -0
- data/src/core/lib/compression/compression.cc +91 -0
- data/src/core/lib/compression/compression_internal.cc +217 -0
- data/src/core/lib/compression/compression_internal.h +92 -0
- data/src/core/lib/compression/message_compress.cc +192 -0
- data/src/core/lib/compression/message_compress.h +40 -0
- data/src/core/lib/config/core_configuration.cc +104 -0
- data/src/core/lib/config/core_configuration.h +196 -0
- data/src/core/lib/debug/stats.cc +172 -0
- data/src/core/lib/debug/stats.h +71 -0
- data/src/core/lib/debug/stats_data.cc +685 -0
- data/src/core/lib/debug/stats_data.h +553 -0
- data/src/core/lib/debug/trace.cc +155 -0
- data/src/core/lib/debug/trace.h +132 -0
- data/src/core/lib/event_engine/channel_args_endpoint_config.cc +46 -0
- data/src/core/lib/event_engine/channel_args_endpoint_config.h +42 -0
- data/src/core/lib/event_engine/default_event_engine_factory.cc +27 -0
- data/src/core/lib/event_engine/event_engine.cc +52 -0
- data/src/core/lib/event_engine/event_engine_factory.h +36 -0
- data/src/core/lib/event_engine/memory_allocator.cc +66 -0
- data/src/core/lib/event_engine/resolved_address.cc +39 -0
- data/src/core/lib/event_engine/sockaddr.cc +40 -0
- data/src/core/lib/event_engine/sockaddr.h +44 -0
- data/src/core/lib/gpr/alloc.cc +76 -0
- data/src/core/lib/gpr/alloc.h +28 -0
- data/src/core/lib/gpr/atm.cc +35 -0
- data/src/core/lib/gpr/cpu_iphone.cc +44 -0
- data/src/core/lib/gpr/cpu_linux.cc +82 -0
- data/src/core/lib/gpr/cpu_posix.cc +83 -0
- data/src/core/lib/gpr/cpu_windows.cc +33 -0
- data/src/core/lib/gpr/env.h +40 -0
- data/src/core/lib/gpr/env_linux.cc +75 -0
- data/src/core/lib/gpr/env_posix.cc +46 -0
- data/src/core/lib/gpr/env_windows.cc +74 -0
- data/src/core/lib/gpr/log.cc +140 -0
- data/src/core/lib/gpr/log_android.cc +77 -0
- data/src/core/lib/gpr/log_linux.cc +114 -0
- data/src/core/lib/gpr/log_posix.cc +110 -0
- data/src/core/lib/gpr/log_windows.cc +116 -0
- data/src/core/lib/gpr/murmur_hash.cc +82 -0
- data/src/core/lib/gpr/murmur_hash.h +29 -0
- data/src/core/lib/gpr/spinlock.h +53 -0
- data/src/core/lib/gpr/string.cc +343 -0
- data/src/core/lib/gpr/string.h +112 -0
- data/src/core/lib/gpr/string_posix.cc +72 -0
- data/src/core/lib/gpr/string_util_windows.cc +82 -0
- data/src/core/lib/gpr/string_windows.cc +69 -0
- data/src/core/lib/gpr/string_windows.h +32 -0
- data/src/core/lib/gpr/sync.cc +124 -0
- data/src/core/lib/gpr/sync_abseil.cc +114 -0
- data/src/core/lib/gpr/sync_posix.cc +171 -0
- data/src/core/lib/gpr/sync_windows.cc +120 -0
- data/src/core/lib/gpr/time.cc +265 -0
- data/src/core/lib/gpr/time_posix.cc +186 -0
- data/src/core/lib/gpr/time_precise.cc +168 -0
- data/src/core/lib/gpr/time_precise.h +70 -0
- data/src/core/lib/gpr/time_windows.cc +99 -0
- data/src/core/lib/gpr/tls.h +158 -0
- data/src/core/lib/gpr/tmpfile.h +32 -0
- data/src/core/lib/gpr/tmpfile_msys.cc +58 -0
- data/src/core/lib/gpr/tmpfile_posix.cc +69 -0
- data/src/core/lib/gpr/tmpfile_windows.cc +69 -0
- data/src/core/lib/gpr/useful.h +131 -0
- data/src/core/lib/gpr/wrap_memcpy.cc +43 -0
- data/src/core/lib/gprpp/atomic_utils.h +47 -0
- data/src/core/lib/gprpp/bitset.h +207 -0
- data/src/core/lib/gprpp/capture.h +76 -0
- data/src/core/lib/gprpp/chunked_vector.h +253 -0
- data/src/core/lib/gprpp/construct_destruct.h +39 -0
- data/src/core/lib/gprpp/cpp_impl_of.h +49 -0
- data/src/core/lib/gprpp/debug_location.h +55 -0
- data/src/core/lib/gprpp/dual_ref_counted.h +330 -0
- data/src/core/lib/gprpp/examine_stack.cc +43 -0
- data/src/core/lib/gprpp/examine_stack.h +46 -0
- data/src/core/lib/gprpp/fork.cc +244 -0
- data/src/core/lib/gprpp/fork.h +103 -0
- data/src/core/lib/gprpp/global_config.h +95 -0
- data/src/core/lib/gprpp/global_config_custom.h +29 -0
- data/src/core/lib/gprpp/global_config_env.cc +137 -0
- data/src/core/lib/gprpp/global_config_env.h +131 -0
- data/src/core/lib/gprpp/global_config_generic.h +44 -0
- data/src/core/lib/gprpp/host_port.cc +112 -0
- data/src/core/lib/gprpp/host_port.h +56 -0
- data/src/core/lib/gprpp/manual_constructor.h +215 -0
- data/src/core/lib/gprpp/match.h +73 -0
- data/src/core/lib/gprpp/memory.h +57 -0
- data/src/core/lib/gprpp/mpscq.cc +108 -0
- data/src/core/lib/gprpp/mpscq.h +99 -0
- data/src/core/lib/gprpp/orphanable.h +125 -0
- data/src/core/lib/gprpp/overload.h +59 -0
- data/src/core/lib/gprpp/ref_counted.h +351 -0
- data/src/core/lib/gprpp/ref_counted_ptr.h +351 -0
- data/src/core/lib/gprpp/single_set_ptr.h +87 -0
- data/src/core/lib/gprpp/stat.h +38 -0
- data/src/core/lib/gprpp/stat_posix.cc +49 -0
- data/src/core/lib/gprpp/stat_windows.cc +48 -0
- data/src/core/lib/gprpp/status_helper.cc +435 -0
- data/src/core/lib/gprpp/status_helper.h +181 -0
- data/src/core/lib/gprpp/sync.h +198 -0
- data/src/core/lib/gprpp/table.h +434 -0
- data/src/core/lib/gprpp/thd.h +174 -0
- data/src/core/lib/gprpp/thd_posix.cc +209 -0
- data/src/core/lib/gprpp/thd_windows.cc +171 -0
- data/src/core/lib/gprpp/time.cc +198 -0
- data/src/core/lib/gprpp/time.h +292 -0
- data/src/core/lib/gprpp/time_util.cc +77 -0
- data/src/core/lib/gprpp/time_util.h +42 -0
- data/src/core/lib/http/format_request.cc +107 -0
- data/src/core/lib/http/format_request.h +36 -0
- data/src/core/lib/http/httpcli.cc +396 -0
- data/src/core/lib/http/httpcli.h +223 -0
- data/src/core/lib/http/httpcli_security_connector.cc +204 -0
- data/src/core/lib/http/httpcli_ssl_credentials.h +37 -0
- data/src/core/lib/http/parser.cc +463 -0
- data/src/core/lib/http/parser.h +127 -0
- data/src/core/lib/iomgr/block_annotate.h +57 -0
- data/src/core/lib/iomgr/buffer_list.cc +307 -0
- data/src/core/lib/iomgr/buffer_list.h +163 -0
- data/src/core/lib/iomgr/call_combiner.cc +291 -0
- data/src/core/lib/iomgr/call_combiner.h +215 -0
- data/src/core/lib/iomgr/cfstream_handle.cc +210 -0
- data/src/core/lib/iomgr/cfstream_handle.h +90 -0
- data/src/core/lib/iomgr/closure.h +276 -0
- data/src/core/lib/iomgr/combiner.cc +350 -0
- data/src/core/lib/iomgr/combiner.h +89 -0
- data/src/core/lib/iomgr/dualstack_socket_posix.cc +48 -0
- data/src/core/lib/iomgr/dynamic_annotations.h +67 -0
- data/src/core/lib/iomgr/endpoint.cc +67 -0
- data/src/core/lib/iomgr/endpoint.h +107 -0
- data/src/core/lib/iomgr/endpoint_cfstream.cc +372 -0
- data/src/core/lib/iomgr/endpoint_cfstream.h +49 -0
- data/src/core/lib/iomgr/endpoint_pair.h +34 -0
- data/src/core/lib/iomgr/endpoint_pair_event_engine.cc +32 -0
- data/src/core/lib/iomgr/endpoint_pair_posix.cc +75 -0
- data/src/core/lib/iomgr/endpoint_pair_windows.cc +86 -0
- data/src/core/lib/iomgr/error.cc +988 -0
- data/src/core/lib/iomgr/error.h +440 -0
- data/src/core/lib/iomgr/error_cfstream.cc +59 -0
- data/src/core/lib/iomgr/error_cfstream.h +31 -0
- data/src/core/lib/iomgr/error_internal.h +66 -0
- data/src/core/lib/iomgr/ev_apple.cc +360 -0
- data/src/core/lib/iomgr/ev_apple.h +43 -0
- data/src/core/lib/iomgr/ev_epoll1_linux.cc +1365 -0
- data/src/core/lib/iomgr/ev_epoll1_linux.h +31 -0
- data/src/core/lib/iomgr/ev_poll_posix.cc +1430 -0
- data/src/core/lib/iomgr/ev_poll_posix.h +29 -0
- data/src/core/lib/iomgr/ev_posix.cc +416 -0
- data/src/core/lib/iomgr/ev_posix.h +207 -0
- data/src/core/lib/iomgr/ev_windows.cc +30 -0
- data/src/core/lib/iomgr/event_engine/closure.cc +77 -0
- data/src/core/lib/iomgr/event_engine/closure.h +42 -0
- data/src/core/lib/iomgr/event_engine/endpoint.cc +172 -0
- data/src/core/lib/iomgr/event_engine/endpoint.h +52 -0
- data/src/core/lib/iomgr/event_engine/iomgr.cc +85 -0
- data/src/core/lib/iomgr/event_engine/pollset.cc +87 -0
- data/src/core/lib/iomgr/event_engine/pollset.h +25 -0
- data/src/core/lib/iomgr/event_engine/promise.h +51 -0
- data/src/core/lib/iomgr/event_engine/resolved_address_internal.cc +47 -0
- data/src/core/lib/iomgr/event_engine/resolved_address_internal.h +37 -0
- data/src/core/lib/iomgr/event_engine/resolver.cc +133 -0
- data/src/core/lib/iomgr/event_engine/resolver.h +56 -0
- data/src/core/lib/iomgr/event_engine/tcp.cc +296 -0
- data/src/core/lib/iomgr/event_engine/timer.cc +62 -0
- data/src/core/lib/iomgr/exec_ctx.cc +155 -0
- data/src/core/lib/iomgr/exec_ctx.h +359 -0
- data/src/core/lib/iomgr/executor/mpmcqueue.cc +182 -0
- data/src/core/lib/iomgr/executor/mpmcqueue.h +171 -0
- data/src/core/lib/iomgr/executor/threadpool.cc +136 -0
- data/src/core/lib/iomgr/executor/threadpool.h +150 -0
- data/src/core/lib/iomgr/executor.cc +461 -0
- data/src/core/lib/iomgr/executor.h +122 -0
- data/src/core/lib/iomgr/fork_posix.cc +120 -0
- data/src/core/lib/iomgr/fork_windows.cc +41 -0
- data/src/core/lib/iomgr/gethostname.h +26 -0
- data/src/core/lib/iomgr/gethostname_fallback.cc +30 -0
- data/src/core/lib/iomgr/gethostname_host_name_max.cc +40 -0
- data/src/core/lib/iomgr/gethostname_sysconf.cc +40 -0
- data/src/core/lib/iomgr/grpc_if_nametoindex.h +30 -0
- data/src/core/lib/iomgr/grpc_if_nametoindex_posix.cc +42 -0
- data/src/core/lib/iomgr/grpc_if_nametoindex_unsupported.cc +38 -0
- data/src/core/lib/iomgr/internal_errqueue.cc +68 -0
- data/src/core/lib/iomgr/internal_errqueue.h +191 -0
- data/src/core/lib/iomgr/iocp_windows.cc +158 -0
- data/src/core/lib/iomgr/iocp_windows.h +48 -0
- data/src/core/lib/iomgr/iomgr.cc +196 -0
- data/src/core/lib/iomgr/iomgr.h +60 -0
- data/src/core/lib/iomgr/iomgr_internal.cc +53 -0
- data/src/core/lib/iomgr/iomgr_internal.h +74 -0
- data/src/core/lib/iomgr/iomgr_posix.cc +90 -0
- data/src/core/lib/iomgr/iomgr_posix_cfstream.cc +200 -0
- data/src/core/lib/iomgr/iomgr_windows.cc +105 -0
- data/src/core/lib/iomgr/load_file.cc +81 -0
- data/src/core/lib/iomgr/load_file.h +35 -0
- data/src/core/lib/iomgr/lockfree_event.cc +278 -0
- data/src/core/lib/iomgr/lockfree_event.h +72 -0
- data/src/core/lib/iomgr/nameser.h +106 -0
- data/src/core/lib/iomgr/polling_entity.cc +96 -0
- data/src/core/lib/iomgr/polling_entity.h +74 -0
- data/src/core/lib/iomgr/pollset.cc +56 -0
- data/src/core/lib/iomgr/pollset.h +99 -0
- data/src/core/lib/iomgr/pollset_set.cc +55 -0
- data/src/core/lib/iomgr/pollset_set.h +55 -0
- data/src/core/lib/iomgr/pollset_set_windows.cc +52 -0
- data/src/core/lib/iomgr/pollset_set_windows.h +26 -0
- data/src/core/lib/iomgr/pollset_windows.cc +243 -0
- data/src/core/lib/iomgr/pollset_windows.h +70 -0
- data/src/core/lib/iomgr/port.h +216 -0
- data/src/core/lib/iomgr/python_util.h +47 -0
- data/src/core/lib/iomgr/resolve_address.cc +36 -0
- data/src/core/lib/iomgr/resolve_address.h +86 -0
- data/src/core/lib/iomgr/resolve_address_impl.h +59 -0
- data/src/core/lib/iomgr/resolve_address_posix.cc +186 -0
- data/src/core/lib/iomgr/resolve_address_posix.h +47 -0
- data/src/core/lib/iomgr/resolve_address_windows.cc +171 -0
- data/src/core/lib/iomgr/resolve_address_windows.h +47 -0
- data/src/core/lib/iomgr/resolved_address.h +39 -0
- data/src/core/lib/iomgr/sockaddr.h +33 -0
- data/src/core/lib/iomgr/sockaddr_posix.h +55 -0
- data/src/core/lib/iomgr/sockaddr_utils_posix.cc +62 -0
- data/src/core/lib/iomgr/sockaddr_windows.h +55 -0
- data/src/core/lib/iomgr/socket_factory_posix.cc +95 -0
- data/src/core/lib/iomgr/socket_factory_posix.h +69 -0
- data/src/core/lib/iomgr/socket_mutator.cc +97 -0
- data/src/core/lib/iomgr/socket_mutator.h +84 -0
- data/src/core/lib/iomgr/socket_utils.h +47 -0
- data/src/core/lib/iomgr/socket_utils_common_posix.cc +498 -0
- data/src/core/lib/iomgr/socket_utils_linux.cc +42 -0
- data/src/core/lib/iomgr/socket_utils_posix.cc +58 -0
- data/src/core/lib/iomgr/socket_utils_posix.h +163 -0
- data/src/core/lib/iomgr/socket_utils_windows.cc +47 -0
- data/src/core/lib/iomgr/socket_windows.cc +202 -0
- data/src/core/lib/iomgr/socket_windows.h +127 -0
- data/src/core/lib/iomgr/tcp_client.cc +36 -0
- data/src/core/lib/iomgr/tcp_client.h +55 -0
- data/src/core/lib/iomgr/tcp_client_cfstream.cc +197 -0
- data/src/core/lib/iomgr/tcp_client_posix.cc +344 -0
- data/src/core/lib/iomgr/tcp_client_posix.h +69 -0
- data/src/core/lib/iomgr/tcp_client_windows.cc +232 -0
- data/src/core/lib/iomgr/tcp_posix.cc +1902 -0
- data/src/core/lib/iomgr/tcp_posix.h +65 -0
- data/src/core/lib/iomgr/tcp_server.cc +77 -0
- data/src/core/lib/iomgr/tcp_server.h +147 -0
- data/src/core/lib/iomgr/tcp_server_posix.cc +650 -0
- data/src/core/lib/iomgr/tcp_server_utils_posix.h +129 -0
- data/src/core/lib/iomgr/tcp_server_utils_posix_common.cc +224 -0
- data/src/core/lib/iomgr/tcp_server_utils_posix_ifaddrs.cc +176 -0
- data/src/core/lib/iomgr/tcp_server_utils_posix_noifaddrs.cc +36 -0
- data/src/core/lib/iomgr/tcp_server_windows.cc +561 -0
- data/src/core/lib/iomgr/tcp_windows.cc +532 -0
- data/src/core/lib/iomgr/tcp_windows.h +53 -0
- data/src/core/lib/iomgr/time_averaged_stats.cc +64 -0
- data/src/core/lib/iomgr/time_averaged_stats.h +72 -0
- data/src/core/lib/iomgr/timer.cc +46 -0
- data/src/core/lib/iomgr/timer.h +136 -0
- data/src/core/lib/iomgr/timer_generic.cc +737 -0
- data/src/core/lib/iomgr/timer_generic.h +40 -0
- data/src/core/lib/iomgr/timer_heap.cc +134 -0
- data/src/core/lib/iomgr/timer_heap.h +43 -0
- data/src/core/lib/iomgr/timer_manager.cc +364 -0
- data/src/core/lib/iomgr/timer_manager.h +41 -0
- data/src/core/lib/iomgr/unix_sockets_posix.cc +96 -0
- data/src/core/lib/iomgr/unix_sockets_posix.h +46 -0
- data/src/core/lib/iomgr/unix_sockets_posix_noop.cc +53 -0
- data/src/core/lib/iomgr/wakeup_fd_eventfd.cc +82 -0
- data/src/core/lib/iomgr/wakeup_fd_nospecial.cc +39 -0
- data/src/core/lib/iomgr/wakeup_fd_pipe.cc +99 -0
- data/src/core/lib/iomgr/wakeup_fd_pipe.h +28 -0
- data/src/core/lib/iomgr/wakeup_fd_posix.cc +70 -0
- data/src/core/lib/iomgr/wakeup_fd_posix.h +98 -0
- data/src/core/lib/iomgr/work_serializer.cc +231 -0
- data/src/core/lib/iomgr/work_serializer.h +93 -0
- data/src/core/lib/json/json.h +250 -0
- data/src/core/lib/json/json_reader.cc +897 -0
- data/src/core/lib/json/json_util.cc +126 -0
- data/src/core/lib/json/json_util.h +154 -0
- data/src/core/lib/json/json_writer.cc +335 -0
- data/src/core/lib/matchers/matchers.cc +327 -0
- data/src/core/lib/matchers/matchers.h +160 -0
- data/src/core/lib/profiling/basic_timers.cc +295 -0
- data/src/core/lib/profiling/stap_timers.cc +50 -0
- data/src/core/lib/profiling/timers.h +94 -0
- data/src/core/lib/promise/activity.cc +121 -0
- data/src/core/lib/promise/activity.h +540 -0
- data/src/core/lib/promise/arena_promise.h +188 -0
- data/src/core/lib/promise/call_push_pull.h +144 -0
- data/src/core/lib/promise/context.h +86 -0
- data/src/core/lib/promise/detail/basic_seq.h +496 -0
- data/src/core/lib/promise/detail/promise_factory.h +189 -0
- data/src/core/lib/promise/detail/promise_like.h +85 -0
- data/src/core/lib/promise/detail/status.h +50 -0
- data/src/core/lib/promise/detail/switch.h +1455 -0
- data/src/core/lib/promise/exec_ctx_wakeup_scheduler.h +48 -0
- data/src/core/lib/promise/intra_activity_waiter.h +49 -0
- data/src/core/lib/promise/latch.h +104 -0
- data/src/core/lib/promise/loop.h +134 -0
- data/src/core/lib/promise/map.h +88 -0
- data/src/core/lib/promise/poll.h +66 -0
- data/src/core/lib/promise/promise.h +95 -0
- data/src/core/lib/promise/race.h +84 -0
- data/src/core/lib/promise/seq.h +89 -0
- data/src/core/lib/promise/sleep.cc +74 -0
- data/src/core/lib/promise/sleep.h +66 -0
- data/src/core/lib/promise/try_seq.h +157 -0
- data/src/core/lib/resolver/resolver.cc +79 -0
- data/src/core/lib/resolver/resolver.h +135 -0
- data/src/core/lib/resolver/resolver_factory.h +76 -0
- data/src/core/lib/resolver/resolver_registry.cc +156 -0
- data/src/core/lib/resolver/resolver_registry.h +113 -0
- data/src/core/lib/resolver/server_address.cc +170 -0
- data/src/core/lib/resolver/server_address.h +144 -0
- data/src/core/lib/resource_quota/api.cc +83 -0
- data/src/core/lib/resource_quota/api.h +40 -0
- data/src/core/lib/resource_quota/arena.cc +107 -0
- data/src/core/lib/resource_quota/arena.h +142 -0
- data/src/core/lib/resource_quota/memory_quota.cc +478 -0
- data/src/core/lib/resource_quota/memory_quota.h +457 -0
- data/src/core/lib/resource_quota/resource_quota.cc +33 -0
- data/src/core/lib/resource_quota/resource_quota.h +66 -0
- data/src/core/lib/resource_quota/thread_quota.cc +43 -0
- data/src/core/lib/resource_quota/thread_quota.h +57 -0
- data/src/core/lib/resource_quota/trace.cc +19 -0
- data/src/core/lib/resource_quota/trace.h +24 -0
- data/src/core/lib/security/authorization/authorization_engine.h +44 -0
- data/src/core/lib/security/authorization/authorization_policy_provider.h +40 -0
- data/src/core/lib/security/authorization/authorization_policy_provider_vtable.cc +46 -0
- data/src/core/lib/security/authorization/evaluate_args.cc +212 -0
- data/src/core/lib/security/authorization/evaluate_args.h +92 -0
- data/src/core/lib/security/authorization/grpc_authorization_engine.cc +60 -0
- data/src/core/lib/security/authorization/grpc_authorization_engine.h +62 -0
- data/src/core/lib/security/authorization/grpc_server_authz_filter.cc +106 -0
- data/src/core/lib/security/authorization/grpc_server_authz_filter.h +50 -0
- data/src/core/lib/security/authorization/matchers.cc +227 -0
- data/src/core/lib/security/authorization/matchers.h +211 -0
- data/src/core/lib/security/authorization/rbac_policy.cc +442 -0
- data/src/core/lib/security/authorization/rbac_policy.h +171 -0
- data/src/core/lib/security/context/security_context.cc +327 -0
- data/src/core/lib/security/context/security_context.h +159 -0
- data/src/core/lib/security/credentials/alts/alts_credentials.cc +112 -0
- data/src/core/lib/security/credentials/alts/alts_credentials.h +119 -0
- data/src/core/lib/security/credentials/alts/check_gcp_environment.cc +72 -0
- data/src/core/lib/security/credentials/alts/check_gcp_environment.h +57 -0
- data/src/core/lib/security/credentials/alts/check_gcp_environment_linux.cc +68 -0
- data/src/core/lib/security/credentials/alts/check_gcp_environment_no_op.cc +33 -0
- data/src/core/lib/security/credentials/alts/check_gcp_environment_windows.cc +102 -0
- data/src/core/lib/security/credentials/alts/grpc_alts_credentials_client_options.cc +127 -0
- data/src/core/lib/security/credentials/alts/grpc_alts_credentials_options.cc +46 -0
- data/src/core/lib/security/credentials/alts/grpc_alts_credentials_options.h +75 -0
- data/src/core/lib/security/credentials/alts/grpc_alts_credentials_server_options.cc +59 -0
- data/src/core/lib/security/credentials/call_creds_util.cc +87 -0
- data/src/core/lib/security/credentials/call_creds_util.h +42 -0
- data/src/core/lib/security/credentials/channel_creds_registry.h +97 -0
- data/src/core/lib/security/credentials/channel_creds_registry_init.cc +70 -0
- data/src/core/lib/security/credentials/composite/composite_credentials.cc +171 -0
- data/src/core/lib/security/credentials/composite/composite_credentials.h +119 -0
- data/src/core/lib/security/credentials/credentials.cc +163 -0
- data/src/core/lib/security/credentials/credentials.h +285 -0
- data/src/core/lib/security/credentials/external/aws_external_account_credentials.cc +419 -0
- data/src/core/lib/security/credentials/external/aws_external_account_credentials.h +82 -0
- data/src/core/lib/security/credentials/external/aws_request_signer.cc +214 -0
- data/src/core/lib/security/credentials/external/aws_request_signer.h +72 -0
- data/src/core/lib/security/credentials/external/external_account_credentials.cc +544 -0
- data/src/core/lib/security/credentials/external/external_account_credentials.h +118 -0
- data/src/core/lib/security/credentials/external/file_external_account_credentials.cc +135 -0
- data/src/core/lib/security/credentials/external/file_external_account_credentials.h +49 -0
- data/src/core/lib/security/credentials/external/url_external_account_credentials.cc +230 -0
- data/src/core/lib/security/credentials/external/url_external_account_credentials.h +61 -0
- data/src/core/lib/security/credentials/fake/fake_credentials.cc +109 -0
- data/src/core/lib/security/credentials/fake/fake_credentials.h +88 -0
- data/src/core/lib/security/credentials/google_default/credentials_generic.cc +42 -0
- data/src/core/lib/security/credentials/google_default/google_default_credentials.cc +470 -0
- data/src/core/lib/security/credentials/google_default/google_default_credentials.h +93 -0
- data/src/core/lib/security/credentials/iam/iam_credentials.cc +74 -0
- data/src/core/lib/security/credentials/iam/iam_credentials.h +55 -0
- data/src/core/lib/security/credentials/insecure/insecure_credentials.cc +63 -0
- data/src/core/lib/security/credentials/insecure/insecure_credentials.h +57 -0
- data/src/core/lib/security/credentials/jwt/json_token.cc +286 -0
- data/src/core/lib/security/credentials/jwt/json_token.h +76 -0
- data/src/core/lib/security/credentials/jwt/jwt_credentials.cc +180 -0
- data/src/core/lib/security/credentials/jwt/jwt_credentials.h +93 -0
- data/src/core/lib/security/credentials/jwt/jwt_verifier.cc +933 -0
- data/src/core/lib/security/credentials/jwt/jwt_verifier.h +122 -0
- data/src/core/lib/security/credentials/local/local_credentials.cc +65 -0
- data/src/core/lib/security/credentials/local/local_credentials.h +71 -0
- data/src/core/lib/security/credentials/oauth2/oauth2_credentials.cc +736 -0
- data/src/core/lib/security/credentials/oauth2/oauth2_credentials.h +200 -0
- data/src/core/lib/security/credentials/plugin/plugin_credentials.cc +211 -0
- data/src/core/lib/security/credentials/plugin/plugin_credentials.h +101 -0
- data/src/core/lib/security/credentials/ssl/ssl_credentials.cc +378 -0
- data/src/core/lib/security/credentials/ssl/ssl_credentials.h +119 -0
- data/src/core/lib/security/credentials/tls/grpc_tls_certificate_distributor.cc +348 -0
- data/src/core/lib/security/credentials/tls/grpc_tls_certificate_distributor.h +217 -0
- data/src/core/lib/security/credentials/tls/grpc_tls_certificate_provider.cc +454 -0
- data/src/core/lib/security/credentials/tls/grpc_tls_certificate_provider.h +195 -0
- data/src/core/lib/security/credentials/tls/grpc_tls_certificate_verifier.cc +209 -0
- data/src/core/lib/security/credentials/tls/grpc_tls_certificate_verifier.h +145 -0
- data/src/core/lib/security/credentials/tls/grpc_tls_credentials_options.cc +123 -0
- data/src/core/lib/security/credentials/tls/grpc_tls_credentials_options.h +117 -0
- data/src/core/lib/security/credentials/tls/tls_credentials.cc +147 -0
- data/src/core/lib/security/credentials/tls/tls_credentials.h +68 -0
- data/src/core/lib/security/credentials/tls/tls_utils.cc +123 -0
- data/src/core/lib/security/credentials/tls/tls_utils.h +51 -0
- data/src/core/lib/security/credentials/xds/xds_credentials.cc +237 -0
- data/src/core/lib/security/credentials/xds/xds_credentials.h +100 -0
- data/src/core/lib/security/security_connector/alts/alts_security_connector.cc +305 -0
- data/src/core/lib/security/security_connector/alts/alts_security_connector.h +76 -0
- data/src/core/lib/security/security_connector/fake/fake_security_connector.cc +318 -0
- data/src/core/lib/security/security_connector/fake/fake_security_connector.h +43 -0
- data/src/core/lib/security/security_connector/insecure/insecure_security_connector.cc +111 -0
- data/src/core/lib/security/security_connector/insecure/insecure_security_connector.h +92 -0
- data/src/core/lib/security/security_connector/load_system_roots.h +33 -0
- data/src/core/lib/security/security_connector/load_system_roots_fallback.cc +33 -0
- data/src/core/lib/security/security_connector/load_system_roots_linux.cc +170 -0
- data/src/core/lib/security/security_connector/load_system_roots_linux.h +46 -0
- data/src/core/lib/security/security_connector/local/local_security_connector.cc +289 -0
- data/src/core/lib/security/security_connector/local/local_security_connector.h +59 -0
- data/src/core/lib/security/security_connector/security_connector.cc +125 -0
- data/src/core/lib/security/security_connector/security_connector.h +187 -0
- data/src/core/lib/security/security_connector/ssl/ssl_security_connector.cc +450 -0
- data/src/core/lib/security/security_connector/ssl/ssl_security_connector.h +81 -0
- data/src/core/lib/security/security_connector/ssl_utils.cc +617 -0
- data/src/core/lib/security/security_connector/ssl_utils.h +184 -0
- data/src/core/lib/security/security_connector/ssl_utils_config.cc +32 -0
- data/src/core/lib/security/security_connector/ssl_utils_config.h +30 -0
- data/src/core/lib/security/security_connector/tls/tls_security_connector.cc +826 -0
- data/src/core/lib/security/security_connector/tls/tls_security_connector.h +266 -0
- data/src/core/lib/security/transport/auth_filters.h +69 -0
- data/src/core/lib/security/transport/client_auth_filter.cc +210 -0
- data/src/core/lib/security/transport/secure_endpoint.cc +511 -0
- data/src/core/lib/security/transport/secure_endpoint.h +42 -0
- data/src/core/lib/security/transport/security_handshaker.cc +652 -0
- data/src/core/lib/security/transport/security_handshaker.h +46 -0
- data/src/core/lib/security/transport/server_auth_filter.cc +337 -0
- data/src/core/lib/security/transport/tsi_error.cc +28 -0
- data/src/core/lib/security/transport/tsi_error.h +30 -0
- data/src/core/lib/security/util/json_util.cc +70 -0
- data/src/core/lib/security/util/json_util.h +45 -0
- data/src/core/lib/service_config/service_config.h +82 -0
- data/src/core/lib/service_config/service_config_call_data.h +72 -0
- data/src/core/lib/service_config/service_config_impl.cc +230 -0
- data/src/core/lib/service_config/service_config_impl.h +125 -0
- data/src/core/lib/service_config/service_config_parser.cc +93 -0
- data/src/core/lib/service_config/service_config_parser.h +106 -0
- data/src/core/lib/slice/b64.cc +239 -0
- data/src/core/lib/slice/b64.h +50 -0
- data/src/core/lib/slice/percent_encoding.cc +156 -0
- data/src/core/lib/slice/percent_encoding.h +60 -0
- data/src/core/lib/slice/slice.cc +489 -0
- data/src/core/lib/slice/slice.h +384 -0
- data/src/core/lib/slice/slice_api.cc +39 -0
- data/src/core/lib/slice/slice_buffer.cc +417 -0
- data/src/core/lib/slice/slice_internal.h +104 -0
- data/src/core/lib/slice/slice_refcount.cc +35 -0
- data/src/core/lib/slice/slice_refcount.h +46 -0
- data/src/core/lib/slice/slice_refcount_base.h +61 -0
- data/src/core/lib/slice/slice_split.cc +100 -0
- data/src/core/lib/slice/slice_split.h +40 -0
- data/src/core/lib/slice/slice_string_helpers.cc +44 -0
- data/src/core/lib/slice/slice_string_helpers.h +38 -0
- data/src/core/lib/surface/api_trace.cc +25 -0
- data/src/core/lib/surface/api_trace.h +53 -0
- data/src/core/lib/surface/builtins.cc +49 -0
- data/src/core/lib/surface/builtins.h +26 -0
- data/src/core/lib/surface/byte_buffer.cc +92 -0
- data/src/core/lib/surface/byte_buffer_reader.cc +101 -0
- data/src/core/lib/surface/call.cc +1967 -0
- data/src/core/lib/surface/call.h +117 -0
- data/src/core/lib/surface/call_details.cc +41 -0
- data/src/core/lib/surface/call_log_batch.cc +111 -0
- data/src/core/lib/surface/call_test_only.h +43 -0
- data/src/core/lib/surface/channel.cc +504 -0
- data/src/core/lib/surface/channel.h +167 -0
- data/src/core/lib/surface/channel_init.cc +55 -0
- data/src/core/lib/surface/channel_init.h +82 -0
- data/src/core/lib/surface/channel_ping.cc +63 -0
- data/src/core/lib/surface/channel_stack_type.cc +59 -0
- data/src/core/lib/surface/channel_stack_type.h +47 -0
- data/src/core/lib/surface/completion_queue.cc +1430 -0
- data/src/core/lib/surface/completion_queue.h +98 -0
- data/src/core/lib/surface/completion_queue_factory.cc +88 -0
- data/src/core/lib/surface/completion_queue_factory.h +39 -0
- data/src/core/lib/surface/event_string.cc +62 -0
- data/src/core/lib/surface/event_string.h +31 -0
- data/src/core/lib/surface/init.cc +288 -0
- data/src/core/lib/surface/init.h +33 -0
- data/src/core/lib/surface/lame_client.cc +199 -0
- data/src/core/lib/surface/lame_client.h +33 -0
- data/src/core/lib/surface/metadata_array.cc +36 -0
- data/src/core/lib/surface/server.cc +1569 -0
- data/src/core/lib/surface/server.h +495 -0
- data/src/core/lib/surface/validate_metadata.cc +136 -0
- data/src/core/lib/surface/validate_metadata.h +45 -0
- data/src/core/lib/surface/version.cc +28 -0
- data/src/core/lib/transport/bdp_estimator.cc +86 -0
- data/src/core/lib/transport/bdp_estimator.h +95 -0
- data/src/core/lib/transport/byte_stream.cc +164 -0
- data/src/core/lib/transport/byte_stream.h +166 -0
- data/src/core/lib/transport/connectivity_state.cc +188 -0
- data/src/core/lib/transport/connectivity_state.h +145 -0
- data/src/core/lib/transport/error_utils.cc +193 -0
- data/src/core/lib/transport/error_utils.h +59 -0
- data/src/core/lib/transport/http2_errors.h +41 -0
- data/src/core/lib/transport/metadata_batch.h +1394 -0
- data/src/core/lib/transport/parsed_metadata.cc +37 -0
- data/src/core/lib/transport/parsed_metadata.h +401 -0
- data/src/core/lib/transport/pid_controller.cc +51 -0
- data/src/core/lib/transport/pid_controller.h +116 -0
- data/src/core/lib/transport/status_conversion.cc +92 -0
- data/src/core/lib/transport/status_conversion.h +38 -0
- data/src/core/lib/transport/timeout_encoding.cc +288 -0
- data/src/core/lib/transport/timeout_encoding.h +68 -0
- data/src/core/lib/transport/transport.cc +241 -0
- data/src/core/lib/transport/transport.h +570 -0
- data/src/core/lib/transport/transport_impl.h +85 -0
- data/src/core/lib/transport/transport_op_string.cc +147 -0
- data/src/core/lib/uri/uri_parser.cc +365 -0
- data/src/core/lib/uri/uri_parser.h +103 -0
- data/src/core/plugin_registry/grpc_plugin_registry.cc +129 -0
- data/src/core/plugin_registry/grpc_plugin_registry_extra.cc +85 -0
- data/src/core/tsi/alts/crypt/aes_gcm.cc +690 -0
- data/src/core/tsi/alts/crypt/gsec.cc +190 -0
- data/src/core/tsi/alts/crypt/gsec.h +459 -0
- data/src/core/tsi/alts/frame_protector/alts_counter.cc +118 -0
- data/src/core/tsi/alts/frame_protector/alts_counter.h +98 -0
- data/src/core/tsi/alts/frame_protector/alts_crypter.cc +66 -0
- data/src/core/tsi/alts/frame_protector/alts_crypter.h +255 -0
- data/src/core/tsi/alts/frame_protector/alts_frame_protector.cc +408 -0
- data/src/core/tsi/alts/frame_protector/alts_frame_protector.h +55 -0
- data/src/core/tsi/alts/frame_protector/alts_record_protocol_crypter_common.cc +114 -0
- data/src/core/tsi/alts/frame_protector/alts_record_protocol_crypter_common.h +114 -0
- data/src/core/tsi/alts/frame_protector/alts_seal_privacy_integrity_crypter.cc +105 -0
- data/src/core/tsi/alts/frame_protector/alts_unseal_privacy_integrity_crypter.cc +103 -0
- data/src/core/tsi/alts/frame_protector/frame_handler.cc +219 -0
- data/src/core/tsi/alts/frame_protector/frame_handler.h +236 -0
- data/src/core/tsi/alts/handshaker/alts_handshaker_client.cc +908 -0
- data/src/core/tsi/alts/handshaker/alts_handshaker_client.h +160 -0
- data/src/core/tsi/alts/handshaker/alts_shared_resource.cc +91 -0
- data/src/core/tsi/alts/handshaker/alts_shared_resource.h +73 -0
- data/src/core/tsi/alts/handshaker/alts_tsi_handshaker.cc +713 -0
- data/src/core/tsi/alts/handshaker/alts_tsi_handshaker.h +104 -0
- data/src/core/tsi/alts/handshaker/alts_tsi_handshaker_private.h +89 -0
- data/src/core/tsi/alts/handshaker/alts_tsi_utils.cc +64 -0
- data/src/core/tsi/alts/handshaker/alts_tsi_utils.h +53 -0
- data/src/core/tsi/alts/handshaker/transport_security_common_api.cc +223 -0
- data/src/core/tsi/alts/handshaker/transport_security_common_api.h +171 -0
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_integrity_only_record_protocol.cc +226 -0
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_integrity_only_record_protocol.h +54 -0
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_privacy_integrity_record_protocol.cc +144 -0
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_privacy_integrity_record_protocol.h +49 -0
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_record_protocol.h +91 -0
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_record_protocol_common.cc +174 -0
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_grpc_record_protocol_common.h +99 -0
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_iovec_record_protocol.cc +478 -0
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_iovec_record_protocol.h +199 -0
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_zero_copy_grpc_protector.cc +307 -0
- data/src/core/tsi/alts/zero_copy_frame_protector/alts_zero_copy_grpc_protector.h +57 -0
- data/src/core/tsi/fake_transport_security.cc +809 -0
- data/src/core/tsi/fake_transport_security.h +47 -0
- data/src/core/tsi/local_transport_security.cc +170 -0
- data/src/core/tsi/local_transport_security.h +47 -0
- data/src/core/tsi/ssl/key_logging/ssl_key_logging.cc +141 -0
- data/src/core/tsi/ssl/key_logging/ssl_key_logging.h +81 -0
- data/src/core/tsi/ssl/session_cache/ssl_session.h +69 -0
- data/src/core/tsi/ssl/session_cache/ssl_session_boringssl.cc +57 -0
- data/src/core/tsi/ssl/session_cache/ssl_session_cache.cc +179 -0
- data/src/core/tsi/ssl/session_cache/ssl_session_cache.h +90 -0
- data/src/core/tsi/ssl/session_cache/ssl_session_openssl.cc +75 -0
- data/src/core/tsi/ssl_transport_security.cc +2417 -0
- data/src/core/tsi/ssl_transport_security.h +405 -0
- data/src/core/tsi/ssl_types.h +42 -0
- data/src/core/tsi/transport_security.cc +384 -0
- data/src/core/tsi/transport_security.h +142 -0
- data/src/core/tsi/transport_security_grpc.cc +73 -0
- data/src/core/tsi/transport_security_grpc.h +80 -0
- data/src/core/tsi/transport_security_interface.h +509 -0
- data/src/ruby/ext/grpc/extconf.rb +1 -1
- data/src/ruby/lib/grpc/2.5/grpc_c.so +0 -0
- data/src/ruby/lib/grpc/2.6/grpc_c.so +0 -0
- data/src/ruby/lib/grpc/2.7/grpc_c.so +0 -0
- data/src/ruby/lib/grpc/3.0/grpc_c.so +0 -0
- data/src/ruby/lib/grpc/3.1/grpc_c.so +0 -0
- data/src/ruby/lib/grpc/generic/active_call.rb +7 -1
- data/src/ruby/lib/grpc/grpc.rb +1 -1
- data/src/ruby/lib/grpc/grpc_c.so +0 -0
- data/src/ruby/lib/grpc/version.rb +1 -1
- data/src/ruby/pb/generate_proto_ruby.sh +1 -0
- data/third_party/abseil-cpp/absl/algorithm/algorithm.h +159 -0
- data/third_party/abseil-cpp/absl/algorithm/container.h +1774 -0
- data/third_party/abseil-cpp/absl/base/attributes.h +735 -0
- data/third_party/abseil-cpp/absl/base/call_once.h +219 -0
- data/third_party/abseil-cpp/absl/base/casts.h +187 -0
- data/third_party/abseil-cpp/absl/base/config.h +772 -0
- data/third_party/abseil-cpp/absl/base/const_init.h +76 -0
- data/third_party/abseil-cpp/absl/base/dynamic_annotations.h +471 -0
- data/third_party/abseil-cpp/absl/base/internal/atomic_hook.h +200 -0
- data/third_party/abseil-cpp/absl/base/internal/cycleclock.cc +107 -0
- data/third_party/abseil-cpp/absl/base/internal/cycleclock.h +94 -0
- data/third_party/abseil-cpp/absl/base/internal/direct_mmap.h +169 -0
- data/third_party/abseil-cpp/absl/base/internal/dynamic_annotations.h +398 -0
- data/third_party/abseil-cpp/absl/base/internal/endian.h +327 -0
- data/third_party/abseil-cpp/absl/base/internal/errno_saver.h +43 -0
- data/third_party/abseil-cpp/absl/base/internal/fast_type_id.h +48 -0
- data/third_party/abseil-cpp/absl/base/internal/hide_ptr.h +51 -0
- data/third_party/abseil-cpp/absl/base/internal/identity.h +37 -0
- data/third_party/abseil-cpp/absl/base/internal/inline_variable.h +107 -0
- data/third_party/abseil-cpp/absl/base/internal/invoke.h +187 -0
- data/third_party/abseil-cpp/absl/base/internal/low_level_alloc.cc +620 -0
- data/third_party/abseil-cpp/absl/base/internal/low_level_alloc.h +126 -0
- data/third_party/abseil-cpp/absl/base/internal/low_level_scheduling.h +134 -0
- data/third_party/abseil-cpp/absl/base/internal/per_thread_tls.h +52 -0
- data/third_party/abseil-cpp/absl/base/internal/raw_logging.cc +242 -0
- data/third_party/abseil-cpp/absl/base/internal/raw_logging.h +195 -0
- data/third_party/abseil-cpp/absl/base/internal/scheduling_mode.h +58 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock.cc +229 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock.h +248 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_akaros.inc +35 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_linux.inc +74 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_posix.inc +46 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_wait.cc +81 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_wait.h +95 -0
- data/third_party/abseil-cpp/absl/base/internal/spinlock_win32.inc +37 -0
- data/third_party/abseil-cpp/absl/base/internal/sysinfo.cc +508 -0
- data/third_party/abseil-cpp/absl/base/internal/sysinfo.h +74 -0
- data/third_party/abseil-cpp/absl/base/internal/thread_annotations.h +271 -0
- data/third_party/abseil-cpp/absl/base/internal/thread_identity.cc +155 -0
- data/third_party/abseil-cpp/absl/base/internal/thread_identity.h +265 -0
- data/third_party/abseil-cpp/absl/base/internal/throw_delegate.cc +212 -0
- data/third_party/abseil-cpp/absl/base/internal/throw_delegate.h +75 -0
- data/third_party/abseil-cpp/absl/base/internal/tsan_mutex_interface.h +68 -0
- data/third_party/abseil-cpp/absl/base/internal/unaligned_access.h +82 -0
- data/third_party/abseil-cpp/absl/base/internal/unscaledcycleclock.cc +154 -0
- data/third_party/abseil-cpp/absl/base/internal/unscaledcycleclock.h +124 -0
- data/third_party/abseil-cpp/absl/base/log_severity.cc +27 -0
- data/third_party/abseil-cpp/absl/base/log_severity.h +121 -0
- data/third_party/abseil-cpp/absl/base/macros.h +158 -0
- data/third_party/abseil-cpp/absl/base/optimization.h +244 -0
- data/third_party/abseil-cpp/absl/base/options.h +238 -0
- data/third_party/abseil-cpp/absl/base/policy_checks.h +111 -0
- data/third_party/abseil-cpp/absl/base/port.h +25 -0
- data/third_party/abseil-cpp/absl/base/thread_annotations.h +335 -0
- data/third_party/abseil-cpp/absl/container/fixed_array.h +527 -0
- data/third_party/abseil-cpp/absl/container/flat_hash_map.h +606 -0
- data/third_party/abseil-cpp/absl/container/inlined_vector.h +855 -0
- data/third_party/abseil-cpp/absl/container/internal/common.h +206 -0
- data/third_party/abseil-cpp/absl/container/internal/compressed_tuple.h +290 -0
- data/third_party/abseil-cpp/absl/container/internal/container_memory.h +460 -0
- data/third_party/abseil-cpp/absl/container/internal/hash_function_defaults.h +163 -0
- data/third_party/abseil-cpp/absl/container/internal/hash_policy_traits.h +208 -0
- data/third_party/abseil-cpp/absl/container/internal/hashtable_debug_hooks.h +85 -0
- data/third_party/abseil-cpp/absl/container/internal/hashtablez_sampler.cc +190 -0
- data/third_party/abseil-cpp/absl/container/internal/hashtablez_sampler.h +281 -0
- data/third_party/abseil-cpp/absl/container/internal/hashtablez_sampler_force_weak_definition.cc +31 -0
- data/third_party/abseil-cpp/absl/container/internal/have_sse.h +50 -0
- data/third_party/abseil-cpp/absl/container/internal/inlined_vector.h +932 -0
- data/third_party/abseil-cpp/absl/container/internal/layout.h +743 -0
- data/third_party/abseil-cpp/absl/container/internal/raw_hash_map.h +198 -0
- data/third_party/abseil-cpp/absl/container/internal/raw_hash_set.cc +67 -0
- data/third_party/abseil-cpp/absl/container/internal/raw_hash_set.h +2034 -0
- data/third_party/abseil-cpp/absl/debugging/internal/address_is_readable.cc +139 -0
- data/third_party/abseil-cpp/absl/debugging/internal/address_is_readable.h +32 -0
- data/third_party/abseil-cpp/absl/debugging/internal/demangle.cc +1959 -0
- data/third_party/abseil-cpp/absl/debugging/internal/demangle.h +71 -0
- data/third_party/abseil-cpp/absl/debugging/internal/elf_mem_image.cc +383 -0
- data/third_party/abseil-cpp/absl/debugging/internal/elf_mem_image.h +138 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_aarch64-inl.inc +199 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_arm-inl.inc +134 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_config.h +87 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_emscripten-inl.inc +110 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_generic-inl.inc +108 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_powerpc-inl.inc +253 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_riscv-inl.inc +234 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_unimplemented-inl.inc +24 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_win32-inl.inc +93 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_x86-inl.inc +364 -0
- data/third_party/abseil-cpp/absl/debugging/internal/symbolize.h +153 -0
- data/third_party/abseil-cpp/absl/debugging/internal/vdso_support.cc +191 -0
- data/third_party/abseil-cpp/absl/debugging/internal/vdso_support.h +158 -0
- data/third_party/abseil-cpp/absl/debugging/stacktrace.cc +142 -0
- data/third_party/abseil-cpp/absl/debugging/stacktrace.h +231 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize.cc +38 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize.h +99 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize_darwin.inc +101 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize_elf.inc +1574 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize_emscripten.inc +72 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize_unimplemented.inc +40 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize_win32.inc +81 -0
- data/third_party/abseil-cpp/absl/functional/bind_front.h +184 -0
- data/third_party/abseil-cpp/absl/functional/function_ref.h +142 -0
- data/third_party/abseil-cpp/absl/functional/internal/front_binder.h +95 -0
- data/third_party/abseil-cpp/absl/functional/internal/function_ref.h +106 -0
- data/third_party/abseil-cpp/absl/hash/hash.h +347 -0
- data/third_party/abseil-cpp/absl/hash/internal/city.cc +349 -0
- data/third_party/abseil-cpp/absl/hash/internal/city.h +78 -0
- data/third_party/abseil-cpp/absl/hash/internal/hash.cc +69 -0
- data/third_party/abseil-cpp/absl/hash/internal/hash.h +1096 -0
- data/third_party/abseil-cpp/absl/hash/internal/low_level_hash.cc +123 -0
- data/third_party/abseil-cpp/absl/hash/internal/low_level_hash.h +50 -0
- data/third_party/abseil-cpp/absl/memory/memory.h +699 -0
- data/third_party/abseil-cpp/absl/meta/type_traits.h +797 -0
- data/third_party/abseil-cpp/absl/numeric/bits.h +177 -0
- data/third_party/abseil-cpp/absl/numeric/int128.cc +383 -0
- data/third_party/abseil-cpp/absl/numeric/int128.h +1165 -0
- data/third_party/abseil-cpp/absl/numeric/int128_have_intrinsic.inc +296 -0
- data/third_party/abseil-cpp/absl/numeric/int128_no_intrinsic.inc +311 -0
- data/third_party/abseil-cpp/absl/numeric/internal/bits.h +358 -0
- data/third_party/abseil-cpp/absl/numeric/internal/representation.h +55 -0
- data/third_party/abseil-cpp/absl/profiling/internal/exponential_biased.cc +93 -0
- data/third_party/abseil-cpp/absl/profiling/internal/exponential_biased.h +130 -0
- data/third_party/abseil-cpp/absl/profiling/internal/sample_recorder.h +230 -0
- data/third_party/abseil-cpp/absl/random/bernoulli_distribution.h +200 -0
- data/third_party/abseil-cpp/absl/random/beta_distribution.h +427 -0
- data/third_party/abseil-cpp/absl/random/discrete_distribution.cc +98 -0
- data/third_party/abseil-cpp/absl/random/discrete_distribution.h +247 -0
- data/third_party/abseil-cpp/absl/random/distributions.h +452 -0
- data/third_party/abseil-cpp/absl/random/exponential_distribution.h +165 -0
- data/third_party/abseil-cpp/absl/random/gaussian_distribution.cc +104 -0
- data/third_party/abseil-cpp/absl/random/gaussian_distribution.h +275 -0
- data/third_party/abseil-cpp/absl/random/internal/distribution_caller.h +92 -0
- data/third_party/abseil-cpp/absl/random/internal/fast_uniform_bits.h +268 -0
- data/third_party/abseil-cpp/absl/random/internal/fastmath.h +57 -0
- data/third_party/abseil-cpp/absl/random/internal/generate_real.h +144 -0
- data/third_party/abseil-cpp/absl/random/internal/iostream_state_saver.h +245 -0
- data/third_party/abseil-cpp/absl/random/internal/nonsecure_base.h +150 -0
- data/third_party/abseil-cpp/absl/random/internal/pcg_engine.h +308 -0
- data/third_party/abseil-cpp/absl/random/internal/platform.h +171 -0
- data/third_party/abseil-cpp/absl/random/internal/pool_urbg.cc +253 -0
- data/third_party/abseil-cpp/absl/random/internal/pool_urbg.h +131 -0
- data/third_party/abseil-cpp/absl/random/internal/randen.cc +91 -0
- data/third_party/abseil-cpp/absl/random/internal/randen.h +102 -0
- data/third_party/abseil-cpp/absl/random/internal/randen_detect.cc +221 -0
- data/third_party/abseil-cpp/absl/random/internal/randen_detect.h +33 -0
- data/third_party/abseil-cpp/absl/random/internal/randen_engine.h +239 -0
- data/third_party/abseil-cpp/absl/random/internal/randen_hwaes.cc +526 -0
- data/third_party/abseil-cpp/absl/random/internal/randen_hwaes.h +50 -0
- data/third_party/abseil-cpp/absl/random/internal/randen_round_keys.cc +462 -0
- data/third_party/abseil-cpp/absl/random/internal/randen_slow.cc +471 -0
- data/third_party/abseil-cpp/absl/random/internal/randen_slow.h +40 -0
- data/third_party/abseil-cpp/absl/random/internal/randen_traits.h +88 -0
- data/third_party/abseil-cpp/absl/random/internal/salted_seed_seq.h +167 -0
- data/third_party/abseil-cpp/absl/random/internal/seed_material.cc +267 -0
- data/third_party/abseil-cpp/absl/random/internal/seed_material.h +104 -0
- data/third_party/abseil-cpp/absl/random/internal/traits.h +101 -0
- data/third_party/abseil-cpp/absl/random/internal/uniform_helper.h +244 -0
- data/third_party/abseil-cpp/absl/random/internal/wide_multiply.h +111 -0
- data/third_party/abseil-cpp/absl/random/log_uniform_int_distribution.h +257 -0
- data/third_party/abseil-cpp/absl/random/poisson_distribution.h +258 -0
- data/third_party/abseil-cpp/absl/random/random.h +189 -0
- data/third_party/abseil-cpp/absl/random/seed_gen_exception.cc +46 -0
- data/third_party/abseil-cpp/absl/random/seed_gen_exception.h +55 -0
- data/third_party/abseil-cpp/absl/random/seed_sequences.cc +29 -0
- data/third_party/abseil-cpp/absl/random/seed_sequences.h +110 -0
- data/third_party/abseil-cpp/absl/random/uniform_int_distribution.h +275 -0
- data/third_party/abseil-cpp/absl/random/uniform_real_distribution.h +202 -0
- data/third_party/abseil-cpp/absl/random/zipf_distribution.h +271 -0
- data/third_party/abseil-cpp/absl/status/internal/status_internal.h +69 -0
- data/third_party/abseil-cpp/absl/status/internal/statusor_internal.h +396 -0
- data/third_party/abseil-cpp/absl/status/status.cc +444 -0
- data/third_party/abseil-cpp/absl/status/status.h +882 -0
- data/third_party/abseil-cpp/absl/status/status_payload_printer.cc +38 -0
- data/third_party/abseil-cpp/absl/status/status_payload_printer.h +51 -0
- data/third_party/abseil-cpp/absl/status/statusor.cc +103 -0
- data/third_party/abseil-cpp/absl/status/statusor.h +770 -0
- data/third_party/abseil-cpp/absl/strings/ascii.cc +200 -0
- data/third_party/abseil-cpp/absl/strings/ascii.h +242 -0
- data/third_party/abseil-cpp/absl/strings/charconv.cc +984 -0
- data/third_party/abseil-cpp/absl/strings/charconv.h +120 -0
- data/third_party/abseil-cpp/absl/strings/cord.cc +2047 -0
- data/third_party/abseil-cpp/absl/strings/cord.h +1521 -0
- data/third_party/abseil-cpp/absl/strings/escaping.cc +949 -0
- data/third_party/abseil-cpp/absl/strings/escaping.h +164 -0
- data/third_party/abseil-cpp/absl/strings/internal/char_map.h +156 -0
- data/third_party/abseil-cpp/absl/strings/internal/charconv_bigint.cc +359 -0
- data/third_party/abseil-cpp/absl/strings/internal/charconv_bigint.h +423 -0
- data/third_party/abseil-cpp/absl/strings/internal/charconv_parse.cc +504 -0
- data/third_party/abseil-cpp/absl/strings/internal/charconv_parse.h +99 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_internal.cc +89 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_internal.h +620 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_btree.cc +1128 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_btree.h +939 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_btree_navigator.cc +185 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_btree_navigator.h +265 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_btree_reader.cc +68 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_btree_reader.h +211 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_consume.cc +129 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_consume.h +50 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_flat.h +146 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_ring.cc +771 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_ring.h +607 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_rep_ring_reader.h +118 -0
- data/third_party/abseil-cpp/absl/strings/internal/cordz_functions.cc +96 -0
- data/third_party/abseil-cpp/absl/strings/internal/cordz_functions.h +85 -0
- data/third_party/abseil-cpp/absl/strings/internal/cordz_handle.cc +139 -0
- data/third_party/abseil-cpp/absl/strings/internal/cordz_handle.h +131 -0
- data/third_party/abseil-cpp/absl/strings/internal/cordz_info.cc +445 -0
- data/third_party/abseil-cpp/absl/strings/internal/cordz_info.h +298 -0
- data/third_party/abseil-cpp/absl/strings/internal/cordz_statistics.h +87 -0
- data/third_party/abseil-cpp/absl/strings/internal/cordz_update_scope.h +71 -0
- data/third_party/abseil-cpp/absl/strings/internal/cordz_update_tracker.h +121 -0
- data/third_party/abseil-cpp/absl/strings/internal/escaping.cc +180 -0
- data/third_party/abseil-cpp/absl/strings/internal/escaping.h +58 -0
- data/third_party/abseil-cpp/absl/strings/internal/memutil.cc +112 -0
- data/third_party/abseil-cpp/absl/strings/internal/memutil.h +148 -0
- data/third_party/abseil-cpp/absl/strings/internal/ostringstream.cc +36 -0
- data/third_party/abseil-cpp/absl/strings/internal/ostringstream.h +89 -0
- data/third_party/abseil-cpp/absl/strings/internal/resize_uninitialized.h +119 -0
- data/third_party/abseil-cpp/absl/strings/internal/stl_type_traits.h +248 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/arg.cc +488 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/arg.h +526 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/bind.cc +258 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/bind.h +217 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/checker.h +333 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/extension.cc +75 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/extension.h +445 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/float_conversion.cc +1423 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/float_conversion.h +37 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/output.cc +72 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/output.h +96 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/parser.cc +339 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_format/parser.h +357 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_join_internal.h +314 -0
- data/third_party/abseil-cpp/absl/strings/internal/str_split_internal.h +430 -0
- data/third_party/abseil-cpp/absl/strings/internal/string_constant.h +64 -0
- data/third_party/abseil-cpp/absl/strings/internal/utf8.cc +53 -0
- data/third_party/abseil-cpp/absl/strings/internal/utf8.h +50 -0
- data/third_party/abseil-cpp/absl/strings/match.cc +43 -0
- data/third_party/abseil-cpp/absl/strings/match.h +100 -0
- data/third_party/abseil-cpp/absl/strings/numbers.cc +1093 -0
- data/third_party/abseil-cpp/absl/strings/numbers.h +300 -0
- data/third_party/abseil-cpp/absl/strings/str_cat.cc +246 -0
- data/third_party/abseil-cpp/absl/strings/str_cat.h +408 -0
- data/third_party/abseil-cpp/absl/strings/str_format.h +812 -0
- data/third_party/abseil-cpp/absl/strings/str_join.h +293 -0
- data/third_party/abseil-cpp/absl/strings/str_replace.cc +82 -0
- data/third_party/abseil-cpp/absl/strings/str_replace.h +219 -0
- data/third_party/abseil-cpp/absl/strings/str_split.cc +139 -0
- data/third_party/abseil-cpp/absl/strings/str_split.h +548 -0
- data/third_party/abseil-cpp/absl/strings/string_view.cc +230 -0
- data/third_party/abseil-cpp/absl/strings/string_view.h +710 -0
- data/third_party/abseil-cpp/absl/strings/strip.h +91 -0
- data/third_party/abseil-cpp/absl/strings/substitute.cc +172 -0
- data/third_party/abseil-cpp/absl/strings/substitute.h +721 -0
- data/third_party/abseil-cpp/absl/synchronization/barrier.cc +52 -0
- data/third_party/abseil-cpp/absl/synchronization/barrier.h +79 -0
- data/third_party/abseil-cpp/absl/synchronization/blocking_counter.cc +67 -0
- data/third_party/abseil-cpp/absl/synchronization/blocking_counter.h +101 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/create_thread_identity.cc +140 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/create_thread_identity.h +60 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/futex.h +154 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/graphcycles.cc +698 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/graphcycles.h +141 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/kernel_timeout.h +156 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/per_thread_sem.cc +106 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/per_thread_sem.h +115 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/waiter.cc +428 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/waiter.h +155 -0
- data/third_party/abseil-cpp/absl/synchronization/mutex.cc +2751 -0
- data/third_party/abseil-cpp/absl/synchronization/mutex.h +1082 -0
- data/third_party/abseil-cpp/absl/synchronization/notification.cc +78 -0
- data/third_party/abseil-cpp/absl/synchronization/notification.h +123 -0
- data/third_party/abseil-cpp/absl/time/civil_time.cc +173 -0
- data/third_party/abseil-cpp/absl/time/civil_time.h +538 -0
- data/third_party/abseil-cpp/absl/time/clock.cc +585 -0
- data/third_party/abseil-cpp/absl/time/clock.h +74 -0
- data/third_party/abseil-cpp/absl/time/duration.cc +954 -0
- data/third_party/abseil-cpp/absl/time/format.cc +160 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/civil_time.h +332 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/civil_time_detail.h +628 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/time_zone.h +459 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/include/cctz/zone_info_source.h +102 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/civil_time_detail.cc +94 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_fixed.cc +140 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_fixed.h +52 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_format.cc +1029 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_if.cc +45 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_if.h +77 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_impl.cc +113 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_impl.h +93 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_info.cc +1027 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_info.h +137 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_libc.cc +315 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_libc.h +55 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_lookup.cc +236 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_posix.cc +159 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/time_zone_posix.h +132 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/tzfile.h +122 -0
- data/third_party/abseil-cpp/absl/time/internal/cctz/src/zone_info_source.cc +115 -0
- data/third_party/abseil-cpp/absl/time/internal/get_current_time_chrono.inc +31 -0
- data/third_party/abseil-cpp/absl/time/internal/get_current_time_posix.inc +24 -0
- data/third_party/abseil-cpp/absl/time/time.cc +500 -0
- data/third_party/abseil-cpp/absl/time/time.h +1616 -0
- data/third_party/abseil-cpp/absl/types/bad_optional_access.cc +48 -0
- data/third_party/abseil-cpp/absl/types/bad_optional_access.h +78 -0
- data/third_party/abseil-cpp/absl/types/bad_variant_access.cc +64 -0
- data/third_party/abseil-cpp/absl/types/bad_variant_access.h +82 -0
- data/third_party/abseil-cpp/absl/types/internal/optional.h +396 -0
- data/third_party/abseil-cpp/absl/types/internal/span.h +128 -0
- data/third_party/abseil-cpp/absl/types/internal/variant.h +1646 -0
- data/third_party/abseil-cpp/absl/types/optional.h +776 -0
- data/third_party/abseil-cpp/absl/types/span.h +726 -0
- data/third_party/abseil-cpp/absl/types/variant.h +866 -0
- data/third_party/abseil-cpp/absl/utility/utility.h +350 -0
- data/third_party/address_sorting/address_sorting.c +375 -0
- data/third_party/address_sorting/address_sorting_internal.h +70 -0
- data/third_party/address_sorting/address_sorting_posix.c +98 -0
- data/third_party/address_sorting/address_sorting_windows.c +95 -0
- data/third_party/address_sorting/include/address_sorting/address_sorting.h +115 -0
- data/third_party/boringssl-with-bazel/err_data.c +1493 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_bitstr.c +284 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_bool.c +122 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_d2i_fp.c +91 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_dup.c +87 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_enum.c +195 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_gentm.c +266 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_i2d_fp.c +88 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_int.c +420 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_mbstr.c +298 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_object.c +299 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_octet.c +77 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_print.c +83 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_strex.c +650 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_strnid.c +266 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_time.c +212 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_type.c +163 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_utctm.c +264 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_utf8.c +236 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/asn1_lib.c +452 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/asn1_par.c +80 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/asn_pack.c +101 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/charmap.h +15 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/f_int.c +102 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/f_string.c +91 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/internal.h +224 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_dec.c +969 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_enc.c +710 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_fre.c +233 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_new.c +332 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_typ.c +131 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_utl.c +281 -0
- data/third_party/boringssl-with-bazel/src/crypto/asn1/time_support.c +206 -0
- data/third_party/boringssl-with-bazel/src/crypto/base64/base64.c +482 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/bio.c +702 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/bio_mem.c +324 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/connect.c +541 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/fd.c +275 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/file.c +311 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/hexdump.c +192 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/internal.h +111 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/pair.c +483 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/printf.c +115 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/socket.c +192 -0
- data/third_party/boringssl-with-bazel/src/crypto/bio/socket_helper.c +122 -0
- data/third_party/boringssl-with-bazel/src/crypto/blake2/blake2.c +156 -0
- data/third_party/boringssl-with-bazel/src/crypto/bn_extra/bn_asn1.c +57 -0
- data/third_party/boringssl-with-bazel/src/crypto/bn_extra/convert.c +470 -0
- data/third_party/boringssl-with-bazel/src/crypto/buf/buf.c +172 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/asn1_compat.c +52 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/ber.c +266 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/cbb.c +728 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/cbs.c +711 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/internal.h +96 -0
- data/third_party/boringssl-with-bazel/src/crypto/bytestring/unicode.c +155 -0
- data/third_party/boringssl-with-bazel/src/crypto/chacha/chacha.c +175 -0
- data/third_party/boringssl-with-bazel/src/crypto/chacha/internal.h +45 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/cipher_extra.c +127 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/derive_key.c +152 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_aesccm.c +447 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_aesctrhmac.c +283 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_aesgcmsiv.c +891 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_chacha20poly1305.c +343 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_null.c +85 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_rc2.c +462 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_rc4.c +87 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_tls.c +601 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/internal.h +226 -0
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/tls_cbc.c +338 -0
- data/third_party/boringssl-with-bazel/src/crypto/cmac/cmac.c +278 -0
- data/third_party/boringssl-with-bazel/src/crypto/conf/conf.c +821 -0
- data/third_party/boringssl-with-bazel/src/crypto/conf/conf_def.h +127 -0
- data/third_party/boringssl-with-bazel/src/crypto/conf/internal.h +31 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-aarch64-fuchsia.c +55 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-aarch64-linux.c +62 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-aarch64-win.c +41 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-arm-linux.c +229 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-arm-linux.h +201 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-arm.c +38 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-intel.c +291 -0
- data/third_party/boringssl-with-bazel/src/crypto/cpu-ppc64le.c +38 -0
- data/third_party/boringssl-with-bazel/src/crypto/crypto.c +226 -0
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/curve25519.c +2159 -0
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/curve25519_tables.h +7872 -0
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/internal.h +146 -0
- data/third_party/boringssl-with-bazel/src/crypto/curve25519/spake25519.c +539 -0
- data/third_party/boringssl-with-bazel/src/crypto/dh_extra/dh_asn1.c +160 -0
- data/third_party/boringssl-with-bazel/src/crypto/dh_extra/params.c +272 -0
- data/third_party/boringssl-with-bazel/src/crypto/digest_extra/digest_extra.c +268 -0
- data/third_party/boringssl-with-bazel/src/crypto/dsa/dsa.c +967 -0
- data/third_party/boringssl-with-bazel/src/crypto/dsa/dsa_asn1.c +390 -0
- data/third_party/boringssl-with-bazel/src/crypto/dsa/internal.h +34 -0
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/ec_asn1.c +559 -0
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/ec_derive.c +95 -0
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/hash_to_curve.c +385 -0
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/internal.h +56 -0
- data/third_party/boringssl-with-bazel/src/crypto/ecdh_extra/ecdh_extra.c +124 -0
- data/third_party/boringssl-with-bazel/src/crypto/ecdsa_extra/ecdsa_asn1.c +267 -0
- data/third_party/boringssl-with-bazel/src/crypto/engine/engine.c +99 -0
- data/third_party/boringssl-with-bazel/src/crypto/err/err.c +857 -0
- data/third_party/boringssl-with-bazel/src/crypto/err/internal.h +58 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/digestsign.c +231 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/evp.c +456 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/evp_asn1.c +547 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/evp_ctx.c +484 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/internal.h +269 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_dsa_asn1.c +277 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_ec.c +286 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_ec_asn1.c +255 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_ed25519.c +104 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_ed25519_asn1.c +221 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_rsa.c +648 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_rsa_asn1.c +194 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_x25519.c +110 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/p_x25519_asn1.c +248 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/pbkdf.c +146 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/print.c +489 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/scrypt.c +211 -0
- data/third_party/boringssl-with-bazel/src/crypto/evp/sign.c +151 -0
- data/third_party/boringssl-with-bazel/src/crypto/ex_data.c +261 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/aes.c +108 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/aes_nohw.c +1282 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/internal.h +238 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/key_wrap.c +236 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/mode_wrappers.c +122 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bcm.c +266 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/add.c +316 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/asm/x86_64-gcc.c +541 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/bn.c +438 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/bytes.c +230 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/cmp.c +200 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/ctx.c +236 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/div.c +902 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/div_extra.c +87 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/exponentiation.c +1288 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/gcd.c +378 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/gcd_extra.c +326 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/generic.c +711 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/internal.h +715 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/jacobi.c +146 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/montgomery.c +502 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/montgomery_inv.c +186 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/mul.c +749 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/prime.c +1064 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/random.c +341 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/rsaz_exp.c +226 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/rsaz_exp.h +104 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/shift.c +364 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/sqrt.c +498 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/aead.c +284 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/cipher.c +648 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/e_aes.c +1473 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/e_des.c +237 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/internal.h +128 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/delocate.h +89 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/des/des.c +784 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/des/internal.h +238 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/dh/check.c +217 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/dh/dh.c +456 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/digest/digest.c +282 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/digest/digests.c +304 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/digest/internal.h +112 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/digest/md32_common.h +195 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec.c +1268 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec_key.c +472 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec_montgomery.c +524 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/felem.c +100 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/internal.h +772 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/oct.c +328 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p224-64.c +1180 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256-x86_64-table.h +9497 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256-x86_64.c +633 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256-x86_64.h +153 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256.c +740 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256_table.h +297 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/scalar.c +175 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/simple.c +357 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/simple_mul.c +270 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/util.c +255 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/wnaf.c +270 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ecdh/ecdh.c +122 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ecdsa/ecdsa.c +338 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ecdsa/internal.h +39 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/fips_shared_support.c +32 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/hmac/hmac.c +228 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/md4/md4.c +240 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/md5/internal.h +37 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/md5/md5.c +284 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/cbc.c +178 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/cfb.c +203 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/ctr.c +201 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/gcm.c +733 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/gcm_nohw.c +304 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/internal.h +420 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/ofb.c +97 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/polyval.c +91 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/ctrdrbg.c +202 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/fork_detect.c +137 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/fork_detect.h +49 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/getrandom_fillin.h +64 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/internal.h +184 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/rand.c +457 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/urandom.c +401 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/blinding.c +243 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/internal.h +131 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/padding.c +695 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/rsa.c +935 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/rsa_impl.c +1416 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/self_check/fips.c +79 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/self_check/self_check.c +874 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/internal.h +53 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/sha1-altivec.c +361 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/sha1.c +357 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/sha256.c +321 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/sha512.c +508 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/tls/internal.h +39 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/tls/kdf.c +165 -0
- data/third_party/boringssl-with-bazel/src/crypto/hkdf/hkdf.c +112 -0
- data/third_party/boringssl-with-bazel/src/crypto/hpke/hpke.c +618 -0
- data/third_party/boringssl-with-bazel/src/crypto/hrss/hrss.c +2198 -0
- data/third_party/boringssl-with-bazel/src/crypto/hrss/internal.h +68 -0
- data/third_party/boringssl-with-bazel/src/crypto/internal.h +959 -0
- data/third_party/boringssl-with-bazel/src/crypto/lhash/internal.h +253 -0
- data/third_party/boringssl-with-bazel/src/crypto/lhash/lhash.c +353 -0
- data/third_party/boringssl-with-bazel/src/crypto/mem.c +410 -0
- data/third_party/boringssl-with-bazel/src/crypto/obj/obj.c +553 -0
- data/third_party/boringssl-with-bazel/src/crypto/obj/obj_dat.h +11585 -0
- data/third_party/boringssl-with-bazel/src/crypto/obj/obj_xref.c +122 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_all.c +252 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_info.c +358 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_lib.c +769 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_oth.c +87 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_pk8.c +255 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_pkey.c +214 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_x509.c +65 -0
- data/third_party/boringssl-with-bazel/src/crypto/pem/pem_xaux.c +65 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs7/internal.h +58 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs7/pkcs7.c +193 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs7/pkcs7_x509.c +526 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs8/internal.h +137 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs8/p5_pbev2.c +316 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs8/pkcs8.c +530 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs8/pkcs8_x509.c +1383 -0
- data/third_party/boringssl-with-bazel/src/crypto/poly1305/internal.h +41 -0
- data/third_party/boringssl-with-bazel/src/crypto/poly1305/poly1305.c +321 -0
- data/third_party/boringssl-with-bazel/src/crypto/poly1305/poly1305_arm.c +307 -0
- data/third_party/boringssl-with-bazel/src/crypto/poly1305/poly1305_vec.c +860 -0
- data/third_party/boringssl-with-bazel/src/crypto/pool/internal.h +49 -0
- data/third_party/boringssl-with-bazel/src/crypto/pool/pool.c +257 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/deterministic.c +56 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/forkunsafe.c +46 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/fuchsia.c +34 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/passive.c +34 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/rand_extra.c +74 -0
- data/third_party/boringssl-with-bazel/src/crypto/rand_extra/windows.c +73 -0
- data/third_party/boringssl-with-bazel/src/crypto/rc4/rc4.c +98 -0
- data/third_party/boringssl-with-bazel/src/crypto/refcount_c11.c +67 -0
- data/third_party/boringssl-with-bazel/src/crypto/refcount_lock.c +53 -0
- data/third_party/boringssl-with-bazel/src/crypto/rsa_extra/rsa_asn1.c +324 -0
- data/third_party/boringssl-with-bazel/src/crypto/rsa_extra/rsa_print.c +22 -0
- data/third_party/boringssl-with-bazel/src/crypto/siphash/siphash.c +82 -0
- data/third_party/boringssl-with-bazel/src/crypto/stack/stack.c +425 -0
- data/third_party/boringssl-with-bazel/src/crypto/thread.c +110 -0
- data/third_party/boringssl-with-bazel/src/crypto/thread_none.c +59 -0
- data/third_party/boringssl-with-bazel/src/crypto/thread_pthread.c +182 -0
- data/third_party/boringssl-with-bazel/src/crypto/thread_win.c +260 -0
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/internal.h +318 -0
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/pmbtoken.c +1399 -0
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/trust_token.c +858 -0
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/voprf.c +766 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/a_digest.c +96 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/a_sign.c +128 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/a_verify.c +118 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/algorithm.c +163 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/asn1_gen.c +826 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/by_dir.c +459 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/by_file.c +277 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/i2d_pr.c +83 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/internal.h +404 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/name_print.c +246 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/rsa_pss.c +400 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/t_crl.c +130 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/t_req.c +246 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/t_x509.c +365 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/t_x509a.c +116 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509.c +90 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_att.c +358 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_cmp.c +461 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_d2.c +106 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_def.c +103 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_ext.c +212 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_lu.c +830 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_obj.c +199 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_req.c +304 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_set.c +240 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_trs.c +331 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_txt.c +204 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_v3.c +281 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_vfy.c +2456 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_vpm.c +651 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509cset.c +284 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509name.c +388 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509rset.c +84 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509spki.c +137 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_algor.c +153 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_all.c +386 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_attrib.c +98 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_crl.c +565 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_exten.c +77 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_info.c +98 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_name.c +544 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_pkey.c +106 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_pubkey.c +217 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_req.c +106 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_sig.c +94 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_spki.c +80 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_val.c +71 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_x509.c +394 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_x509a.c +201 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/ext_dat.h +138 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/internal.h +289 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_cache.c +287 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_data.c +132 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_lib.c +155 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_map.c +131 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_node.c +189 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_tree.c +843 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_akey.c +226 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_akeya.c +72 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_alt.c +640 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_bcons.c +133 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_bitst.c +144 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_conf.c +468 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_cpols.c +500 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_crld.c +563 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_enum.c +106 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_extku.c +148 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_genn.c +266 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_ia5.c +121 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_info.c +218 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_int.c +91 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_lib.c +379 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_ncons.c +558 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_ocsp.c +68 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_pci.c +289 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_pcia.c +57 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_pcons.c +139 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_pmaps.c +154 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_prn.c +230 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_purp.c +929 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_skey.c +156 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_utl.c +1437 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/aead.h +480 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/aes.h +207 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/arm_arch.h +240 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/asn1.h +2039 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/asn1_mac.h +18 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/asn1t.h +718 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/base.h +627 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/base64.h +198 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/bio.h +939 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/blake2.h +62 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/blowfish.h +93 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/bn.h +1057 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/buf.h +137 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/buffer.h +18 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/bytestring.h +586 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/cast.h +96 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/chacha.h +41 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/cipher.h +673 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/cmac.h +91 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/conf.h +183 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/cpu.h +202 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/crypto.h +169 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/curve25519.h +201 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/des.h +183 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/dh.h +353 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/digest.h +348 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/dsa.h +443 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/dtls1.h +16 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/e_os2.h +18 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ec.h +442 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ec_key.h +357 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ecdh.h +118 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ecdsa.h +236 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/engine.h +109 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/err.h +466 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/evp.h +1083 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/evp_errors.h +99 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ex_data.h +203 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/hkdf.h +68 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/hmac.h +186 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/hpke.h +350 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/hrss.h +102 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/is_boringssl.h +16 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/lhash.h +81 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/md4.h +108 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/md5.h +109 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/mem.h +184 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/nid.h +4259 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/obj.h +256 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/obj_mac.h +18 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/objects.h +18 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/opensslconf.h +70 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/opensslv.h +18 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ossl_typ.h +18 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/pem.h +483 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/pkcs12.h +18 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/pkcs7.h +239 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/pkcs8.h +282 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/poly1305.h +49 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/pool.h +108 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/rand.h +114 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/rc4.h +96 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ripemd.h +108 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/rsa.h +855 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/safestack.h +16 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/sha.h +294 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/siphash.h +37 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/span.h +222 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/srtp.h +18 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ssl.h +5624 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ssl3.h +333 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/stack.h +542 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/thread.h +191 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/tls1.h +647 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/trust_token.h +310 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/type_check.h +90 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/x509.h +2419 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/x509_vfy.h +18 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/x509v3.h +1021 -0
- data/third_party/boringssl-with-bazel/src/ssl/bio_ssl.cc +192 -0
- data/third_party/boringssl-with-bazel/src/ssl/d1_both.cc +835 -0
- data/third_party/boringssl-with-bazel/src/ssl/d1_lib.cc +268 -0
- data/third_party/boringssl-with-bazel/src/ssl/d1_pkt.cc +273 -0
- data/third_party/boringssl-with-bazel/src/ssl/d1_srtp.cc +232 -0
- data/third_party/boringssl-with-bazel/src/ssl/dtls_method.cc +200 -0
- data/third_party/boringssl-with-bazel/src/ssl/dtls_record.cc +353 -0
- data/third_party/boringssl-with-bazel/src/ssl/encrypted_client_hello.cc +1084 -0
- data/third_party/boringssl-with-bazel/src/ssl/extensions.cc +4325 -0
- data/third_party/boringssl-with-bazel/src/ssl/handoff.cc +986 -0
- data/third_party/boringssl-with-bazel/src/ssl/handshake.cc +758 -0
- data/third_party/boringssl-with-bazel/src/ssl/handshake_client.cc +1986 -0
- data/third_party/boringssl-with-bazel/src/ssl/handshake_server.cc +1956 -0
- data/third_party/boringssl-with-bazel/src/ssl/internal.h +3953 -0
- data/third_party/boringssl-with-bazel/src/ssl/s3_both.cc +730 -0
- data/third_party/boringssl-with-bazel/src/ssl/s3_lib.cc +219 -0
- data/third_party/boringssl-with-bazel/src/ssl/s3_pkt.cc +453 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_aead_ctx.cc +432 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_asn1.cc +896 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_buffer.cc +306 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_cert.cc +1014 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_cipher.cc +1717 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_file.cc +585 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_key_share.cc +400 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_lib.cc +3072 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_privkey.cc +837 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_session.cc +1342 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_stat.cc +233 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_transcript.cc +272 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_versions.cc +402 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_x509.cc +1363 -0
- data/third_party/boringssl-with-bazel/src/ssl/t1_enc.cc +384 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls13_both.cc +733 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls13_client.cc +1122 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls13_enc.cc +582 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls13_server.cc +1349 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls_method.cc +319 -0
- data/third_party/boringssl-with-bazel/src/ssl/tls_record.cc +705 -0
- data/third_party/boringssl-with-bazel/src/third_party/fiat/curve25519_32.h +981 -0
- data/third_party/boringssl-with-bazel/src/third_party/fiat/curve25519_64.h +619 -0
- data/third_party/boringssl-with-bazel/src/third_party/fiat/p256_32.h +3147 -0
- data/third_party/boringssl-with-bazel/src/third_party/fiat/p256_64.h +1226 -0
- data/third_party/cares/ares_build.h +223 -0
- data/third_party/cares/cares/include/ares.h +742 -0
- data/third_party/cares/cares/include/ares_dns.h +112 -0
- data/third_party/cares/cares/include/ares_rules.h +125 -0
- data/third_party/cares/cares/include/ares_version.h +24 -0
- data/third_party/cares/cares/src/lib/ares__close_sockets.c +61 -0
- data/third_party/cares/cares/src/lib/ares__get_hostent.c +260 -0
- data/third_party/cares/cares/src/lib/ares__parse_into_addrinfo.c +260 -0
- data/third_party/cares/cares/src/lib/ares__read_line.c +73 -0
- data/third_party/cares/cares/src/lib/ares__readaddrinfo.c +264 -0
- data/third_party/cares/cares/src/lib/ares__sortaddrinfo.c +499 -0
- data/third_party/cares/cares/src/lib/ares__timeval.c +111 -0
- data/third_party/cares/cares/src/lib/ares_android.c +444 -0
- data/third_party/cares/cares/src/lib/ares_android.h +27 -0
- data/third_party/cares/cares/src/lib/ares_cancel.c +63 -0
- data/third_party/cares/cares/src/lib/ares_create_query.c +197 -0
- data/third_party/cares/cares/src/lib/ares_data.c +240 -0
- data/third_party/cares/cares/src/lib/ares_data.h +74 -0
- data/third_party/cares/cares/src/lib/ares_destroy.c +113 -0
- data/third_party/cares/cares/src/lib/ares_expand_name.c +300 -0
- data/third_party/cares/cares/src/lib/ares_expand_string.c +67 -0
- data/third_party/cares/cares/src/lib/ares_fds.c +59 -0
- data/third_party/cares/cares/src/lib/ares_free_hostent.c +43 -0
- data/third_party/cares/cares/src/lib/ares_free_string.c +25 -0
- data/third_party/cares/cares/src/lib/ares_freeaddrinfo.c +59 -0
- data/third_party/cares/cares/src/lib/ares_getaddrinfo.c +772 -0
- data/third_party/cares/cares/src/lib/ares_getenv.c +28 -0
- data/third_party/cares/cares/src/lib/ares_getenv.h +26 -0
- data/third_party/cares/cares/src/lib/ares_gethostbyaddr.c +287 -0
- data/third_party/cares/cares/src/lib/ares_gethostbyname.c +534 -0
- data/third_party/cares/cares/src/lib/ares_getnameinfo.c +447 -0
- data/third_party/cares/cares/src/lib/ares_getsock.c +66 -0
- data/third_party/cares/cares/src/lib/ares_inet_net_pton.h +25 -0
- data/third_party/cares/cares/src/lib/ares_init.c +2654 -0
- data/third_party/cares/cares/src/lib/ares_iphlpapi.h +221 -0
- data/third_party/cares/cares/src/lib/ares_ipv6.h +85 -0
- data/third_party/cares/cares/src/lib/ares_library_init.c +200 -0
- data/third_party/cares/cares/src/lib/ares_library_init.h +43 -0
- data/third_party/cares/cares/src/lib/ares_llist.c +63 -0
- data/third_party/cares/cares/src/lib/ares_llist.h +39 -0
- data/third_party/cares/cares/src/lib/ares_mkquery.c +24 -0
- data/third_party/cares/cares/src/lib/ares_nameser.h +482 -0
- data/third_party/cares/cares/src/lib/ares_nowarn.c +260 -0
- data/third_party/cares/cares/src/lib/ares_nowarn.h +61 -0
- data/third_party/cares/cares/src/lib/ares_options.c +406 -0
- data/third_party/cares/cares/src/lib/ares_parse_a_reply.c +209 -0
- data/third_party/cares/cares/src/lib/ares_parse_aaaa_reply.c +212 -0
- data/third_party/cares/cares/src/lib/ares_parse_caa_reply.c +199 -0
- data/third_party/cares/cares/src/lib/ares_parse_mx_reply.c +164 -0
- data/third_party/cares/cares/src/lib/ares_parse_naptr_reply.c +183 -0
- data/third_party/cares/cares/src/lib/ares_parse_ns_reply.c +177 -0
- data/third_party/cares/cares/src/lib/ares_parse_ptr_reply.c +228 -0
- data/third_party/cares/cares/src/lib/ares_parse_soa_reply.c +179 -0
- data/third_party/cares/cares/src/lib/ares_parse_srv_reply.c +168 -0
- data/third_party/cares/cares/src/lib/ares_parse_txt_reply.c +214 -0
- data/third_party/cares/cares/src/lib/ares_platform.c +11042 -0
- data/third_party/cares/cares/src/lib/ares_platform.h +43 -0
- data/third_party/cares/cares/src/lib/ares_private.h +423 -0
- data/third_party/cares/cares/src/lib/ares_process.c +1548 -0
- data/third_party/cares/cares/src/lib/ares_query.c +180 -0
- data/third_party/cares/cares/src/lib/ares_search.c +321 -0
- data/third_party/cares/cares/src/lib/ares_send.c +131 -0
- data/third_party/cares/cares/src/lib/ares_setup.h +220 -0
- data/third_party/cares/cares/src/lib/ares_strcasecmp.c +66 -0
- data/third_party/cares/cares/src/lib/ares_strcasecmp.h +30 -0
- data/third_party/cares/cares/src/lib/ares_strdup.c +49 -0
- data/third_party/cares/cares/src/lib/ares_strdup.h +24 -0
- data/third_party/cares/cares/src/lib/ares_strerror.c +56 -0
- data/third_party/cares/cares/src/lib/ares_strsplit.c +178 -0
- data/third_party/cares/cares/src/lib/ares_strsplit.h +43 -0
- data/third_party/cares/cares/src/lib/ares_timeout.c +88 -0
- data/third_party/cares/cares/src/lib/ares_version.c +11 -0
- data/third_party/cares/cares/src/lib/ares_writev.c +79 -0
- data/third_party/cares/cares/src/lib/ares_writev.h +36 -0
- data/third_party/cares/cares/src/lib/bitncmp.c +59 -0
- data/third_party/cares/cares/src/lib/bitncmp.h +26 -0
- data/third_party/cares/cares/src/lib/config-dos.h +115 -0
- data/third_party/cares/cares/src/lib/config-win32.h +351 -0
- data/third_party/cares/cares/src/lib/inet_net_pton.c +444 -0
- data/third_party/cares/cares/src/lib/inet_ntop.c +201 -0
- data/third_party/cares/cares/src/lib/setup_once.h +554 -0
- data/third_party/cares/cares/src/lib/windows_port.c +22 -0
- data/third_party/cares/config_darwin/ares_config.h +428 -0
- data/third_party/cares/config_freebsd/ares_config.h +505 -0
- data/third_party/cares/config_linux/ares_config.h +461 -0
- data/third_party/cares/config_openbsd/ares_config.h +505 -0
- data/third_party/re2/re2/bitmap256.h +117 -0
- data/third_party/re2/re2/bitstate.cc +385 -0
- data/third_party/re2/re2/compile.cc +1261 -0
- data/third_party/re2/re2/dfa.cc +2118 -0
- data/third_party/re2/re2/filtered_re2.cc +137 -0
- data/third_party/re2/re2/filtered_re2.h +114 -0
- data/third_party/re2/re2/mimics_pcre.cc +197 -0
- data/third_party/re2/re2/nfa.cc +713 -0
- data/third_party/re2/re2/onepass.cc +623 -0
- data/third_party/re2/re2/parse.cc +2483 -0
- data/third_party/re2/re2/perl_groups.cc +119 -0
- data/third_party/re2/re2/pod_array.h +55 -0
- data/third_party/re2/re2/prefilter.cc +711 -0
- data/third_party/re2/re2/prefilter.h +108 -0
- data/third_party/re2/re2/prefilter_tree.cc +407 -0
- data/third_party/re2/re2/prefilter_tree.h +139 -0
- data/third_party/re2/re2/prog.cc +1166 -0
- data/third_party/re2/re2/prog.h +455 -0
- data/third_party/re2/re2/re2.cc +1331 -0
- data/third_party/re2/re2/re2.h +1017 -0
- data/third_party/re2/re2/regexp.cc +987 -0
- data/third_party/re2/re2/regexp.h +665 -0
- data/third_party/re2/re2/set.cc +176 -0
- data/third_party/re2/re2/set.h +85 -0
- data/third_party/re2/re2/simplify.cc +665 -0
- data/third_party/re2/re2/sparse_array.h +392 -0
- data/third_party/re2/re2/sparse_set.h +264 -0
- data/third_party/re2/re2/stringpiece.cc +65 -0
- data/third_party/re2/re2/stringpiece.h +210 -0
- data/third_party/re2/re2/tostring.cc +351 -0
- data/third_party/re2/re2/unicode_casefold.cc +582 -0
- data/third_party/re2/re2/unicode_casefold.h +78 -0
- data/third_party/re2/re2/unicode_groups.cc +6269 -0
- data/third_party/re2/re2/unicode_groups.h +67 -0
- data/third_party/re2/re2/walker-inl.h +246 -0
- data/third_party/re2/util/benchmark.h +156 -0
- data/third_party/re2/util/flags.h +26 -0
- data/third_party/re2/util/logging.h +109 -0
- data/third_party/re2/util/malloc_counter.h +19 -0
- data/third_party/re2/util/mix.h +41 -0
- data/third_party/re2/util/mutex.h +148 -0
- data/third_party/re2/util/pcre.cc +1025 -0
- data/third_party/re2/util/pcre.h +681 -0
- data/third_party/re2/util/rune.cc +260 -0
- data/third_party/re2/util/strutil.cc +149 -0
- data/third_party/re2/util/strutil.h +21 -0
- data/third_party/re2/util/test.h +50 -0
- data/third_party/re2/util/utf.h +44 -0
- data/third_party/re2/util/util.h +42 -0
- data/third_party/upb/third_party/utf8_range/naive.c +92 -0
- data/third_party/upb/third_party/utf8_range/range2-neon.c +157 -0
- data/third_party/upb/third_party/utf8_range/range2-sse.c +170 -0
- data/third_party/upb/third_party/utf8_range/utf8_range.h +9 -0
- data/third_party/upb/upb/decode.c +1125 -0
- data/third_party/upb/upb/decode.h +94 -0
- data/third_party/upb/upb/decode_fast.c +1055 -0
- data/third_party/upb/upb/decode_fast.h +153 -0
- data/third_party/upb/upb/decode_internal.h +211 -0
- data/third_party/upb/upb/def.c +3261 -0
- data/third_party/upb/upb/def.h +409 -0
- data/third_party/upb/upb/def.hpp +438 -0
- data/third_party/upb/upb/encode.c +604 -0
- data/third_party/upb/upb/encode.h +71 -0
- data/third_party/upb/upb/json_encode.c +776 -0
- data/third_party/upb/upb/json_encode.h +62 -0
- data/third_party/upb/upb/msg.c +428 -0
- data/third_party/upb/upb/msg.h +114 -0
- data/third_party/upb/upb/msg_internal.h +831 -0
- data/third_party/upb/upb/port_def.inc +261 -0
- data/third_party/upb/upb/port_undef.inc +62 -0
- data/third_party/upb/upb/reflection.c +480 -0
- data/third_party/upb/upb/reflection.h +220 -0
- data/third_party/upb/upb/reflection.hpp +37 -0
- data/third_party/upb/upb/table.c +926 -0
- data/third_party/upb/upb/table_internal.h +385 -0
- data/third_party/upb/upb/text_encode.c +472 -0
- data/third_party/upb/upb/text_encode.h +64 -0
- data/third_party/upb/upb/upb.c +362 -0
- data/third_party/upb/upb/upb.h +373 -0
- data/third_party/upb/upb/upb.hpp +115 -0
- data/third_party/upb/upb/upb_internal.h +68 -0
- data/third_party/xxhash/xxhash.h +5580 -0
- data/third_party/zlib/adler32.c +186 -0
- data/third_party/zlib/compress.c +86 -0
- data/third_party/zlib/crc32.c +1116 -0
- data/third_party/zlib/crc32.h +9446 -0
- data/third_party/zlib/deflate.c +2211 -0
- data/third_party/zlib/deflate.h +346 -0
- data/third_party/zlib/gzclose.c +25 -0
- data/third_party/zlib/gzguts.h +219 -0
- data/third_party/zlib/gzlib.c +639 -0
- data/third_party/zlib/gzread.c +652 -0
- data/third_party/zlib/gzwrite.c +677 -0
- data/third_party/zlib/infback.c +641 -0
- data/third_party/zlib/inffast.c +323 -0
- data/third_party/zlib/inffast.h +11 -0
- data/third_party/zlib/inffixed.h +94 -0
- data/third_party/zlib/inflate.c +1592 -0
- data/third_party/zlib/inflate.h +126 -0
- data/third_party/zlib/inftrees.c +304 -0
- data/third_party/zlib/inftrees.h +62 -0
- data/third_party/zlib/trees.c +1182 -0
- data/third_party/zlib/trees.h +128 -0
- data/third_party/zlib/uncompr.c +93 -0
- data/third_party/zlib/zconf.h +534 -0
- data/third_party/zlib/zlib.h +1935 -0
- data/third_party/zlib/zutil.c +325 -0
- data/third_party/zlib/zutil.h +274 -0
- metadata +2486 -38
- data/grpc_c.32.ruby +0 -0
- data/grpc_c.64.ruby +0 -0
@@ -0,0 +1,1956 @@
|
|
1
|
+
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
|
2
|
+
* All rights reserved.
|
3
|
+
*
|
4
|
+
* This package is an SSL implementation written
|
5
|
+
* by Eric Young (eay@cryptsoft.com).
|
6
|
+
* The implementation was written so as to conform with Netscapes SSL.
|
7
|
+
*
|
8
|
+
* This library is free for commercial and non-commercial use as long as
|
9
|
+
* the following conditions are aheared to. The following conditions
|
10
|
+
* apply to all code found in this distribution, be it the RC4, RSA,
|
11
|
+
* lhash, DES, etc., code; not just the SSL code. The SSL documentation
|
12
|
+
* included with this distribution is covered by the same copyright terms
|
13
|
+
* except that the holder is Tim Hudson (tjh@cryptsoft.com).
|
14
|
+
*
|
15
|
+
* Copyright remains Eric Young's, and as such any Copyright notices in
|
16
|
+
* the code are not to be removed.
|
17
|
+
* If this package is used in a product, Eric Young should be given attribution
|
18
|
+
* as the author of the parts of the library used.
|
19
|
+
* This can be in the form of a textual message at program startup or
|
20
|
+
* in documentation (online or textual) provided with the package.
|
21
|
+
*
|
22
|
+
* Redistribution and use in source and binary forms, with or without
|
23
|
+
* modification, are permitted provided that the following conditions
|
24
|
+
* are met:
|
25
|
+
* 1. Redistributions of source code must retain the copyright
|
26
|
+
* notice, this list of conditions and the following disclaimer.
|
27
|
+
* 2. Redistributions in binary form must reproduce the above copyright
|
28
|
+
* notice, this list of conditions and the following disclaimer in the
|
29
|
+
* documentation and/or other materials provided with the distribution.
|
30
|
+
* 3. All advertising materials mentioning features or use of this software
|
31
|
+
* must display the following acknowledgement:
|
32
|
+
* "This product includes cryptographic software written by
|
33
|
+
* Eric Young (eay@cryptsoft.com)"
|
34
|
+
* The word 'cryptographic' can be left out if the rouines from the library
|
35
|
+
* being used are not cryptographic related :-).
|
36
|
+
* 4. If you include any Windows specific code (or a derivative thereof) from
|
37
|
+
* the apps directory (application code) you must include an acknowledgement:
|
38
|
+
* "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
|
39
|
+
*
|
40
|
+
* THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
|
41
|
+
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
42
|
+
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
43
|
+
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
44
|
+
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
45
|
+
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
46
|
+
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
47
|
+
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
48
|
+
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
49
|
+
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
50
|
+
* SUCH DAMAGE.
|
51
|
+
*
|
52
|
+
* The licence and distribution terms for any publically available version or
|
53
|
+
* derivative of this code cannot be changed. i.e. this code cannot simply be
|
54
|
+
* copied and put under another distribution licence
|
55
|
+
* [including the GNU Public Licence.]
|
56
|
+
*/
|
57
|
+
/* ====================================================================
|
58
|
+
* Copyright (c) 1998-2007 The OpenSSL Project. All rights reserved.
|
59
|
+
*
|
60
|
+
* Redistribution and use in source and binary forms, with or without
|
61
|
+
* modification, are permitted provided that the following conditions
|
62
|
+
* are met:
|
63
|
+
*
|
64
|
+
* 1. Redistributions of source code must retain the above copyright
|
65
|
+
* notice, this list of conditions and the following disclaimer.
|
66
|
+
*
|
67
|
+
* 2. Redistributions in binary form must reproduce the above copyright
|
68
|
+
* notice, this list of conditions and the following disclaimer in
|
69
|
+
* the documentation and/or other materials provided with the
|
70
|
+
* distribution.
|
71
|
+
*
|
72
|
+
* 3. All advertising materials mentioning features or use of this
|
73
|
+
* software must display the following acknowledgment:
|
74
|
+
* "This product includes software developed by the OpenSSL Project
|
75
|
+
* for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
|
76
|
+
*
|
77
|
+
* 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
|
78
|
+
* endorse or promote products derived from this software without
|
79
|
+
* prior written permission. For written permission, please contact
|
80
|
+
* openssl-core@openssl.org.
|
81
|
+
*
|
82
|
+
* 5. Products derived from this software may not be called "OpenSSL"
|
83
|
+
* nor may "OpenSSL" appear in their names without prior written
|
84
|
+
* permission of the OpenSSL Project.
|
85
|
+
*
|
86
|
+
* 6. Redistributions of any form whatsoever must retain the following
|
87
|
+
* acknowledgment:
|
88
|
+
* "This product includes software developed by the OpenSSL Project
|
89
|
+
* for use in the OpenSSL Toolkit (http://www.openssl.org/)"
|
90
|
+
*
|
91
|
+
* THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
|
92
|
+
* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
93
|
+
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
|
94
|
+
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
|
95
|
+
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
96
|
+
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
|
97
|
+
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
|
98
|
+
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
99
|
+
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
|
100
|
+
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
101
|
+
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
|
102
|
+
* OF THE POSSIBILITY OF SUCH DAMAGE.
|
103
|
+
* ====================================================================
|
104
|
+
*
|
105
|
+
* This product includes cryptographic software written by Eric Young
|
106
|
+
* (eay@cryptsoft.com). This product includes software written by Tim
|
107
|
+
* Hudson (tjh@cryptsoft.com).
|
108
|
+
*
|
109
|
+
*/
|
110
|
+
/* ====================================================================
|
111
|
+
* Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
|
112
|
+
*
|
113
|
+
* Portions of the attached software ("Contribution") are developed by
|
114
|
+
* SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project.
|
115
|
+
*
|
116
|
+
* The Contribution is licensed pursuant to the OpenSSL open source
|
117
|
+
* license provided above.
|
118
|
+
*
|
119
|
+
* ECC cipher suite support in OpenSSL originally written by
|
120
|
+
* Vipul Gupta and Sumit Gupta of Sun Microsystems Laboratories.
|
121
|
+
*
|
122
|
+
*/
|
123
|
+
/* ====================================================================
|
124
|
+
* Copyright 2005 Nokia. All rights reserved.
|
125
|
+
*
|
126
|
+
* The portions of the attached software ("Contribution") is developed by
|
127
|
+
* Nokia Corporation and is licensed pursuant to the OpenSSL open source
|
128
|
+
* license.
|
129
|
+
*
|
130
|
+
* The Contribution, originally written by Mika Kousa and Pasi Eronen of
|
131
|
+
* Nokia Corporation, consists of the "PSK" (Pre-Shared Key) ciphersuites
|
132
|
+
* support (see RFC 4279) to OpenSSL.
|
133
|
+
*
|
134
|
+
* No patent licenses or other rights except those expressly stated in
|
135
|
+
* the OpenSSL open source license shall be deemed granted or received
|
136
|
+
* expressly, by implication, estoppel, or otherwise.
|
137
|
+
*
|
138
|
+
* No assurances are provided by Nokia that the Contribution does not
|
139
|
+
* infringe the patent or other intellectual property rights of any third
|
140
|
+
* party or that the license provides you with all the necessary rights
|
141
|
+
* to make use of the Contribution.
|
142
|
+
*
|
143
|
+
* THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. IN
|
144
|
+
* ADDITION TO THE DISCLAIMERS INCLUDED IN THE LICENSE, NOKIA
|
145
|
+
* SPECIFICALLY DISCLAIMS ANY LIABILITY FOR CLAIMS BROUGHT BY YOU OR ANY
|
146
|
+
* OTHER ENTITY BASED ON INFRINGEMENT OF INTELLECTUAL PROPERTY RIGHTS OR
|
147
|
+
* OTHERWISE. */
|
148
|
+
|
149
|
+
#include <openssl/ssl.h>
|
150
|
+
|
151
|
+
#include <assert.h>
|
152
|
+
#include <string.h>
|
153
|
+
|
154
|
+
#include <openssl/bn.h>
|
155
|
+
#include <openssl/bytestring.h>
|
156
|
+
#include <openssl/cipher.h>
|
157
|
+
#include <openssl/curve25519.h>
|
158
|
+
#include <openssl/digest.h>
|
159
|
+
#include <openssl/ec.h>
|
160
|
+
#include <openssl/ecdsa.h>
|
161
|
+
#include <openssl/err.h>
|
162
|
+
#include <openssl/evp.h>
|
163
|
+
#include <openssl/hmac.h>
|
164
|
+
#include <openssl/md5.h>
|
165
|
+
#include <openssl/mem.h>
|
166
|
+
#include <openssl/nid.h>
|
167
|
+
#include <openssl/rand.h>
|
168
|
+
#include <openssl/x509.h>
|
169
|
+
|
170
|
+
#include "internal.h"
|
171
|
+
#include "../crypto/internal.h"
|
172
|
+
|
173
|
+
|
174
|
+
BSSL_NAMESPACE_BEGIN
|
175
|
+
|
176
|
+
bool ssl_client_cipher_list_contains_cipher(
|
177
|
+
const SSL_CLIENT_HELLO *client_hello, uint16_t id) {
|
178
|
+
CBS cipher_suites;
|
179
|
+
CBS_init(&cipher_suites, client_hello->cipher_suites,
|
180
|
+
client_hello->cipher_suites_len);
|
181
|
+
|
182
|
+
while (CBS_len(&cipher_suites) > 0) {
|
183
|
+
uint16_t got_id;
|
184
|
+
if (!CBS_get_u16(&cipher_suites, &got_id)) {
|
185
|
+
return false;
|
186
|
+
}
|
187
|
+
|
188
|
+
if (got_id == id) {
|
189
|
+
return true;
|
190
|
+
}
|
191
|
+
}
|
192
|
+
|
193
|
+
return false;
|
194
|
+
}
|
195
|
+
|
196
|
+
static bool negotiate_version(SSL_HANDSHAKE *hs, uint8_t *out_alert,
|
197
|
+
const SSL_CLIENT_HELLO *client_hello) {
|
198
|
+
SSL *const ssl = hs->ssl;
|
199
|
+
assert(!ssl->s3->have_version);
|
200
|
+
CBS supported_versions, versions;
|
201
|
+
if (ssl_client_hello_get_extension(client_hello, &supported_versions,
|
202
|
+
TLSEXT_TYPE_supported_versions)) {
|
203
|
+
if (!CBS_get_u8_length_prefixed(&supported_versions, &versions) ||
|
204
|
+
CBS_len(&supported_versions) != 0 ||
|
205
|
+
CBS_len(&versions) == 0) {
|
206
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_DECODE_ERROR);
|
207
|
+
*out_alert = SSL_AD_DECODE_ERROR;
|
208
|
+
return false;
|
209
|
+
}
|
210
|
+
} else {
|
211
|
+
// Convert the ClientHello version to an equivalent supported_versions
|
212
|
+
// extension.
|
213
|
+
static const uint8_t kTLSVersions[] = {
|
214
|
+
0x03, 0x03, // TLS 1.2
|
215
|
+
0x03, 0x02, // TLS 1.1
|
216
|
+
0x03, 0x01, // TLS 1
|
217
|
+
};
|
218
|
+
|
219
|
+
static const uint8_t kDTLSVersions[] = {
|
220
|
+
0xfe, 0xfd, // DTLS 1.2
|
221
|
+
0xfe, 0xff, // DTLS 1.0
|
222
|
+
};
|
223
|
+
|
224
|
+
size_t versions_len = 0;
|
225
|
+
if (SSL_is_dtls(ssl)) {
|
226
|
+
if (client_hello->version <= DTLS1_2_VERSION) {
|
227
|
+
versions_len = 4;
|
228
|
+
} else if (client_hello->version <= DTLS1_VERSION) {
|
229
|
+
versions_len = 2;
|
230
|
+
}
|
231
|
+
CBS_init(&versions, kDTLSVersions + sizeof(kDTLSVersions) - versions_len,
|
232
|
+
versions_len);
|
233
|
+
} else {
|
234
|
+
if (client_hello->version >= TLS1_2_VERSION) {
|
235
|
+
versions_len = 6;
|
236
|
+
} else if (client_hello->version >= TLS1_1_VERSION) {
|
237
|
+
versions_len = 4;
|
238
|
+
} else if (client_hello->version >= TLS1_VERSION) {
|
239
|
+
versions_len = 2;
|
240
|
+
}
|
241
|
+
CBS_init(&versions, kTLSVersions + sizeof(kTLSVersions) - versions_len,
|
242
|
+
versions_len);
|
243
|
+
}
|
244
|
+
}
|
245
|
+
|
246
|
+
if (!ssl_negotiate_version(hs, out_alert, &ssl->version, &versions)) {
|
247
|
+
return false;
|
248
|
+
}
|
249
|
+
|
250
|
+
// At this point, the connection's version is known and |ssl->version| is
|
251
|
+
// fixed. Begin enforcing the record-layer version.
|
252
|
+
ssl->s3->have_version = true;
|
253
|
+
ssl->s3->aead_write_ctx->SetVersionIfNullCipher(ssl->version);
|
254
|
+
|
255
|
+
// Handle FALLBACK_SCSV.
|
256
|
+
if (ssl_client_cipher_list_contains_cipher(client_hello,
|
257
|
+
SSL3_CK_FALLBACK_SCSV & 0xffff) &&
|
258
|
+
ssl_protocol_version(ssl) < hs->max_version) {
|
259
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_INAPPROPRIATE_FALLBACK);
|
260
|
+
*out_alert = SSL3_AD_INAPPROPRIATE_FALLBACK;
|
261
|
+
return false;
|
262
|
+
}
|
263
|
+
|
264
|
+
return true;
|
265
|
+
}
|
266
|
+
|
267
|
+
static UniquePtr<STACK_OF(SSL_CIPHER)> ssl_parse_client_cipher_list(
|
268
|
+
const SSL_CLIENT_HELLO *client_hello) {
|
269
|
+
CBS cipher_suites;
|
270
|
+
CBS_init(&cipher_suites, client_hello->cipher_suites,
|
271
|
+
client_hello->cipher_suites_len);
|
272
|
+
|
273
|
+
UniquePtr<STACK_OF(SSL_CIPHER)> sk(sk_SSL_CIPHER_new_null());
|
274
|
+
if (!sk) {
|
275
|
+
OPENSSL_PUT_ERROR(SSL, ERR_R_MALLOC_FAILURE);
|
276
|
+
return nullptr;
|
277
|
+
}
|
278
|
+
|
279
|
+
while (CBS_len(&cipher_suites) > 0) {
|
280
|
+
uint16_t cipher_suite;
|
281
|
+
|
282
|
+
if (!CBS_get_u16(&cipher_suites, &cipher_suite)) {
|
283
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_ERROR_IN_RECEIVED_CIPHER_LIST);
|
284
|
+
return nullptr;
|
285
|
+
}
|
286
|
+
|
287
|
+
const SSL_CIPHER *c = SSL_get_cipher_by_value(cipher_suite);
|
288
|
+
if (c != NULL && !sk_SSL_CIPHER_push(sk.get(), c)) {
|
289
|
+
OPENSSL_PUT_ERROR(SSL, ERR_R_MALLOC_FAILURE);
|
290
|
+
return nullptr;
|
291
|
+
}
|
292
|
+
}
|
293
|
+
|
294
|
+
return sk;
|
295
|
+
}
|
296
|
+
|
297
|
+
// ssl_get_compatible_server_ciphers determines the key exchange and
|
298
|
+
// authentication cipher suite masks compatible with the server configuration
|
299
|
+
// and current ClientHello parameters of |hs|. It sets |*out_mask_k| to the key
|
300
|
+
// exchange mask and |*out_mask_a| to the authentication mask.
|
301
|
+
static void ssl_get_compatible_server_ciphers(SSL_HANDSHAKE *hs,
|
302
|
+
uint32_t *out_mask_k,
|
303
|
+
uint32_t *out_mask_a) {
|
304
|
+
uint32_t mask_k = 0;
|
305
|
+
uint32_t mask_a = 0;
|
306
|
+
|
307
|
+
if (ssl_has_certificate(hs)) {
|
308
|
+
mask_a |= ssl_cipher_auth_mask_for_key(hs->local_pubkey.get());
|
309
|
+
if (EVP_PKEY_id(hs->local_pubkey.get()) == EVP_PKEY_RSA) {
|
310
|
+
mask_k |= SSL_kRSA;
|
311
|
+
}
|
312
|
+
}
|
313
|
+
|
314
|
+
// Check for a shared group to consider ECDHE ciphers.
|
315
|
+
uint16_t unused;
|
316
|
+
if (tls1_get_shared_group(hs, &unused)) {
|
317
|
+
mask_k |= SSL_kECDHE;
|
318
|
+
}
|
319
|
+
|
320
|
+
// PSK requires a server callback.
|
321
|
+
if (hs->config->psk_server_callback != NULL) {
|
322
|
+
mask_k |= SSL_kPSK;
|
323
|
+
mask_a |= SSL_aPSK;
|
324
|
+
}
|
325
|
+
|
326
|
+
*out_mask_k = mask_k;
|
327
|
+
*out_mask_a = mask_a;
|
328
|
+
}
|
329
|
+
|
330
|
+
static const SSL_CIPHER *choose_cipher(
|
331
|
+
SSL_HANDSHAKE *hs, const SSL_CLIENT_HELLO *client_hello,
|
332
|
+
const SSLCipherPreferenceList *server_pref) {
|
333
|
+
SSL *const ssl = hs->ssl;
|
334
|
+
const STACK_OF(SSL_CIPHER) *prio, *allow;
|
335
|
+
// in_group_flags will either be NULL, or will point to an array of bytes
|
336
|
+
// which indicate equal-preference groups in the |prio| stack. See the
|
337
|
+
// comment about |in_group_flags| in the |SSLCipherPreferenceList|
|
338
|
+
// struct.
|
339
|
+
const bool *in_group_flags;
|
340
|
+
// group_min contains the minimal index so far found in a group, or -1 if no
|
341
|
+
// such value exists yet.
|
342
|
+
int group_min = -1;
|
343
|
+
|
344
|
+
UniquePtr<STACK_OF(SSL_CIPHER)> client_pref =
|
345
|
+
ssl_parse_client_cipher_list(client_hello);
|
346
|
+
if (!client_pref) {
|
347
|
+
return nullptr;
|
348
|
+
}
|
349
|
+
|
350
|
+
if (ssl->options & SSL_OP_CIPHER_SERVER_PREFERENCE) {
|
351
|
+
prio = server_pref->ciphers.get();
|
352
|
+
in_group_flags = server_pref->in_group_flags;
|
353
|
+
allow = client_pref.get();
|
354
|
+
} else {
|
355
|
+
prio = client_pref.get();
|
356
|
+
in_group_flags = NULL;
|
357
|
+
allow = server_pref->ciphers.get();
|
358
|
+
}
|
359
|
+
|
360
|
+
uint32_t mask_k, mask_a;
|
361
|
+
ssl_get_compatible_server_ciphers(hs, &mask_k, &mask_a);
|
362
|
+
|
363
|
+
for (size_t i = 0; i < sk_SSL_CIPHER_num(prio); i++) {
|
364
|
+
const SSL_CIPHER *c = sk_SSL_CIPHER_value(prio, i);
|
365
|
+
|
366
|
+
size_t cipher_index;
|
367
|
+
if (// Check if the cipher is supported for the current version.
|
368
|
+
SSL_CIPHER_get_min_version(c) <= ssl_protocol_version(ssl) &&
|
369
|
+
ssl_protocol_version(ssl) <= SSL_CIPHER_get_max_version(c) &&
|
370
|
+
// Check the cipher is supported for the server configuration.
|
371
|
+
(c->algorithm_mkey & mask_k) &&
|
372
|
+
(c->algorithm_auth & mask_a) &&
|
373
|
+
// Check the cipher is in the |allow| list.
|
374
|
+
sk_SSL_CIPHER_find(allow, &cipher_index, c)) {
|
375
|
+
if (in_group_flags != NULL && in_group_flags[i]) {
|
376
|
+
// This element of |prio| is in a group. Update the minimum index found
|
377
|
+
// so far and continue looking.
|
378
|
+
if (group_min == -1 || (size_t)group_min > cipher_index) {
|
379
|
+
group_min = cipher_index;
|
380
|
+
}
|
381
|
+
} else {
|
382
|
+
if (group_min != -1 && (size_t)group_min < cipher_index) {
|
383
|
+
cipher_index = group_min;
|
384
|
+
}
|
385
|
+
return sk_SSL_CIPHER_value(allow, cipher_index);
|
386
|
+
}
|
387
|
+
}
|
388
|
+
|
389
|
+
if (in_group_flags != NULL && !in_group_flags[i] && group_min != -1) {
|
390
|
+
// We are about to leave a group, but we found a match in it, so that's
|
391
|
+
// our answer.
|
392
|
+
return sk_SSL_CIPHER_value(allow, group_min);
|
393
|
+
}
|
394
|
+
}
|
395
|
+
|
396
|
+
return nullptr;
|
397
|
+
}
|
398
|
+
|
399
|
+
static enum ssl_hs_wait_t do_start_accept(SSL_HANDSHAKE *hs) {
|
400
|
+
ssl_do_info_callback(hs->ssl, SSL_CB_HANDSHAKE_START, 1);
|
401
|
+
hs->state = state12_read_client_hello;
|
402
|
+
return ssl_hs_ok;
|
403
|
+
}
|
404
|
+
|
405
|
+
// is_probably_jdk11_with_tls13 returns whether |client_hello| was probably sent
|
406
|
+
// from a JDK 11 client with both TLS 1.3 and a prior version enabled.
|
407
|
+
static bool is_probably_jdk11_with_tls13(const SSL_CLIENT_HELLO *client_hello) {
|
408
|
+
// JDK 11 ClientHellos contain a number of unusual properties which should
|
409
|
+
// limit false positives.
|
410
|
+
|
411
|
+
// JDK 11 does not support ChaCha20-Poly1305. This is unusual: many modern
|
412
|
+
// clients implement ChaCha20-Poly1305.
|
413
|
+
if (ssl_client_cipher_list_contains_cipher(
|
414
|
+
client_hello, TLS1_CK_CHACHA20_POLY1305_SHA256 & 0xffff)) {
|
415
|
+
return false;
|
416
|
+
}
|
417
|
+
|
418
|
+
// JDK 11 always sends extensions in a particular order.
|
419
|
+
constexpr uint16_t kMaxFragmentLength = 0x0001;
|
420
|
+
constexpr uint16_t kStatusRequestV2 = 0x0011;
|
421
|
+
static CONSTEXPR_ARRAY struct {
|
422
|
+
uint16_t id;
|
423
|
+
bool required;
|
424
|
+
} kJavaExtensions[] = {
|
425
|
+
{TLSEXT_TYPE_server_name, false},
|
426
|
+
{kMaxFragmentLength, false},
|
427
|
+
{TLSEXT_TYPE_status_request, false},
|
428
|
+
{TLSEXT_TYPE_supported_groups, true},
|
429
|
+
{TLSEXT_TYPE_ec_point_formats, false},
|
430
|
+
{TLSEXT_TYPE_signature_algorithms, true},
|
431
|
+
// Java always sends signature_algorithms_cert.
|
432
|
+
{TLSEXT_TYPE_signature_algorithms_cert, true},
|
433
|
+
{TLSEXT_TYPE_application_layer_protocol_negotiation, false},
|
434
|
+
{kStatusRequestV2, false},
|
435
|
+
{TLSEXT_TYPE_extended_master_secret, false},
|
436
|
+
{TLSEXT_TYPE_supported_versions, true},
|
437
|
+
{TLSEXT_TYPE_cookie, false},
|
438
|
+
{TLSEXT_TYPE_psk_key_exchange_modes, true},
|
439
|
+
{TLSEXT_TYPE_key_share, true},
|
440
|
+
{TLSEXT_TYPE_renegotiate, false},
|
441
|
+
{TLSEXT_TYPE_pre_shared_key, false},
|
442
|
+
};
|
443
|
+
Span<const uint8_t> sigalgs, sigalgs_cert;
|
444
|
+
bool has_status_request = false, has_status_request_v2 = false;
|
445
|
+
CBS extensions, supported_groups;
|
446
|
+
CBS_init(&extensions, client_hello->extensions, client_hello->extensions_len);
|
447
|
+
for (const auto &java_extension : kJavaExtensions) {
|
448
|
+
CBS copy = extensions;
|
449
|
+
uint16_t id;
|
450
|
+
if (CBS_get_u16(©, &id) && id == java_extension.id) {
|
451
|
+
// The next extension is the one we expected.
|
452
|
+
extensions = copy;
|
453
|
+
CBS body;
|
454
|
+
if (!CBS_get_u16_length_prefixed(&extensions, &body)) {
|
455
|
+
return false;
|
456
|
+
}
|
457
|
+
switch (id) {
|
458
|
+
case TLSEXT_TYPE_status_request:
|
459
|
+
has_status_request = true;
|
460
|
+
break;
|
461
|
+
case kStatusRequestV2:
|
462
|
+
has_status_request_v2 = true;
|
463
|
+
break;
|
464
|
+
case TLSEXT_TYPE_signature_algorithms:
|
465
|
+
sigalgs = body;
|
466
|
+
break;
|
467
|
+
case TLSEXT_TYPE_signature_algorithms_cert:
|
468
|
+
sigalgs_cert = body;
|
469
|
+
break;
|
470
|
+
case TLSEXT_TYPE_supported_groups:
|
471
|
+
supported_groups = body;
|
472
|
+
break;
|
473
|
+
}
|
474
|
+
} else if (java_extension.required) {
|
475
|
+
return false;
|
476
|
+
}
|
477
|
+
}
|
478
|
+
if (CBS_len(&extensions) != 0) {
|
479
|
+
return false;
|
480
|
+
}
|
481
|
+
|
482
|
+
// JDK 11 never advertises X25519. It is not offered by default, and
|
483
|
+
// -Djdk.tls.namedGroups=x25519 does not work. This is unusual: many modern
|
484
|
+
// clients implement X25519.
|
485
|
+
while (CBS_len(&supported_groups) > 0) {
|
486
|
+
uint16_t group;
|
487
|
+
if (!CBS_get_u16(&supported_groups, &group) ||
|
488
|
+
group == SSL_CURVE_X25519) {
|
489
|
+
return false;
|
490
|
+
}
|
491
|
+
}
|
492
|
+
|
493
|
+
if (// JDK 11 always sends the same contents in signature_algorithms and
|
494
|
+
// signature_algorithms_cert. This is unusual: signature_algorithms_cert,
|
495
|
+
// if omitted, is treated as if it were signature_algorithms.
|
496
|
+
sigalgs != sigalgs_cert ||
|
497
|
+
// When TLS 1.2 or below is enabled, JDK 11 sends status_request_v2 iff it
|
498
|
+
// sends status_request. This is unusual: status_request_v2 is not widely
|
499
|
+
// implemented.
|
500
|
+
has_status_request != has_status_request_v2) {
|
501
|
+
return false;
|
502
|
+
}
|
503
|
+
|
504
|
+
return true;
|
505
|
+
}
|
506
|
+
|
507
|
+
static bool decrypt_ech(SSL_HANDSHAKE *hs, uint8_t *out_alert,
|
508
|
+
const SSL_CLIENT_HELLO *client_hello) {
|
509
|
+
SSL *const ssl = hs->ssl;
|
510
|
+
CBS body;
|
511
|
+
if (!ssl_client_hello_get_extension(client_hello, &body,
|
512
|
+
TLSEXT_TYPE_encrypted_client_hello)) {
|
513
|
+
return true;
|
514
|
+
}
|
515
|
+
uint8_t type;
|
516
|
+
if (!CBS_get_u8(&body, &type)) {
|
517
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_DECODE_ERROR);
|
518
|
+
*out_alert = SSL_AD_DECODE_ERROR;
|
519
|
+
return false;
|
520
|
+
}
|
521
|
+
if (type != ECH_CLIENT_OUTER) {
|
522
|
+
return true;
|
523
|
+
}
|
524
|
+
// This is a ClientHelloOuter ECH extension. Attempt to decrypt it.
|
525
|
+
uint8_t config_id;
|
526
|
+
uint16_t kdf_id, aead_id;
|
527
|
+
CBS enc, payload;
|
528
|
+
if (!CBS_get_u16(&body, &kdf_id) || //
|
529
|
+
!CBS_get_u16(&body, &aead_id) || //
|
530
|
+
!CBS_get_u8(&body, &config_id) ||
|
531
|
+
!CBS_get_u16_length_prefixed(&body, &enc) ||
|
532
|
+
!CBS_get_u16_length_prefixed(&body, &payload) || //
|
533
|
+
CBS_len(&body) != 0) {
|
534
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_DECODE_ERROR);
|
535
|
+
*out_alert = SSL_AD_DECODE_ERROR;
|
536
|
+
return false;
|
537
|
+
}
|
538
|
+
|
539
|
+
{
|
540
|
+
MutexReadLock lock(&ssl->ctx->lock);
|
541
|
+
hs->ech_keys = UpRef(ssl->ctx->ech_keys);
|
542
|
+
}
|
543
|
+
|
544
|
+
if (!hs->ech_keys) {
|
545
|
+
ssl->s3->ech_status = ssl_ech_rejected;
|
546
|
+
return true;
|
547
|
+
}
|
548
|
+
|
549
|
+
for (const auto &config : hs->ech_keys->configs) {
|
550
|
+
hs->ech_hpke_ctx.Reset();
|
551
|
+
if (config_id != config->ech_config().config_id ||
|
552
|
+
!config->SetupContext(hs->ech_hpke_ctx.get(), kdf_id, aead_id, enc)) {
|
553
|
+
// Ignore the error and try another ECHConfig.
|
554
|
+
ERR_clear_error();
|
555
|
+
continue;
|
556
|
+
}
|
557
|
+
Array<uint8_t> encoded_client_hello_inner;
|
558
|
+
bool is_decrypt_error;
|
559
|
+
if (!ssl_client_hello_decrypt(hs->ech_hpke_ctx.get(),
|
560
|
+
&encoded_client_hello_inner,
|
561
|
+
&is_decrypt_error, client_hello, payload)) {
|
562
|
+
if (is_decrypt_error) {
|
563
|
+
// Ignore the error and try another ECHConfig.
|
564
|
+
ERR_clear_error();
|
565
|
+
continue;
|
566
|
+
}
|
567
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_DECRYPTION_FAILED);
|
568
|
+
return false;
|
569
|
+
}
|
570
|
+
|
571
|
+
// Recover the ClientHelloInner from the EncodedClientHelloInner.
|
572
|
+
bssl::Array<uint8_t> client_hello_inner;
|
573
|
+
if (!ssl_decode_client_hello_inner(ssl, out_alert, &client_hello_inner,
|
574
|
+
encoded_client_hello_inner,
|
575
|
+
client_hello)) {
|
576
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_DECODE_ERROR);
|
577
|
+
return false;
|
578
|
+
}
|
579
|
+
hs->ech_client_hello_buf = std::move(client_hello_inner);
|
580
|
+
hs->ech_config_id = config_id;
|
581
|
+
ssl->s3->ech_status = ssl_ech_accepted;
|
582
|
+
return true;
|
583
|
+
}
|
584
|
+
|
585
|
+
// If we did not accept ECH, proceed with the ClientHelloOuter. Note this
|
586
|
+
// could be key mismatch or ECH GREASE, so we must complete the handshake
|
587
|
+
// as usual, except EncryptedExtensions will contain retry configs.
|
588
|
+
ssl->s3->ech_status = ssl_ech_rejected;
|
589
|
+
return true;
|
590
|
+
}
|
591
|
+
|
592
|
+
static bool extract_sni(SSL_HANDSHAKE *hs, uint8_t *out_alert,
|
593
|
+
const SSL_CLIENT_HELLO *client_hello) {
|
594
|
+
SSL *const ssl = hs->ssl;
|
595
|
+
CBS sni;
|
596
|
+
if (!ssl_client_hello_get_extension(client_hello, &sni,
|
597
|
+
TLSEXT_TYPE_server_name)) {
|
598
|
+
// No SNI extension to parse.
|
599
|
+
return true;
|
600
|
+
}
|
601
|
+
|
602
|
+
CBS server_name_list, host_name;
|
603
|
+
uint8_t name_type;
|
604
|
+
if (!CBS_get_u16_length_prefixed(&sni, &server_name_list) ||
|
605
|
+
!CBS_get_u8(&server_name_list, &name_type) ||
|
606
|
+
// Although the server_name extension was intended to be extensible to
|
607
|
+
// new name types and multiple names, OpenSSL 1.0.x had a bug which meant
|
608
|
+
// different name types will cause an error. Further, RFC 4366 originally
|
609
|
+
// defined syntax inextensibly. RFC 6066 corrected this mistake, but
|
610
|
+
// adding new name types is no longer feasible.
|
611
|
+
//
|
612
|
+
// Act as if the extensibility does not exist to simplify parsing.
|
613
|
+
!CBS_get_u16_length_prefixed(&server_name_list, &host_name) ||
|
614
|
+
CBS_len(&server_name_list) != 0 ||
|
615
|
+
CBS_len(&sni) != 0) {
|
616
|
+
*out_alert = SSL_AD_DECODE_ERROR;
|
617
|
+
return false;
|
618
|
+
}
|
619
|
+
|
620
|
+
if (name_type != TLSEXT_NAMETYPE_host_name ||
|
621
|
+
CBS_len(&host_name) == 0 ||
|
622
|
+
CBS_len(&host_name) > TLSEXT_MAXLEN_host_name ||
|
623
|
+
CBS_contains_zero_byte(&host_name)) {
|
624
|
+
*out_alert = SSL_AD_UNRECOGNIZED_NAME;
|
625
|
+
return false;
|
626
|
+
}
|
627
|
+
|
628
|
+
// Copy the hostname as a string.
|
629
|
+
char *raw = nullptr;
|
630
|
+
if (!CBS_strdup(&host_name, &raw)) {
|
631
|
+
*out_alert = SSL_AD_INTERNAL_ERROR;
|
632
|
+
return false;
|
633
|
+
}
|
634
|
+
ssl->s3->hostname.reset(raw);
|
635
|
+
|
636
|
+
hs->should_ack_sni = true;
|
637
|
+
return true;
|
638
|
+
}
|
639
|
+
|
640
|
+
static enum ssl_hs_wait_t do_read_client_hello(SSL_HANDSHAKE *hs) {
|
641
|
+
SSL *const ssl = hs->ssl;
|
642
|
+
|
643
|
+
SSLMessage msg;
|
644
|
+
if (!ssl->method->get_message(ssl, &msg)) {
|
645
|
+
return ssl_hs_read_message;
|
646
|
+
}
|
647
|
+
|
648
|
+
if (!ssl_check_message_type(ssl, msg, SSL3_MT_CLIENT_HELLO)) {
|
649
|
+
return ssl_hs_error;
|
650
|
+
}
|
651
|
+
|
652
|
+
SSL_CLIENT_HELLO client_hello;
|
653
|
+
if (!ssl_client_hello_init(ssl, &client_hello, msg.body)) {
|
654
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_DECODE_ERROR);
|
655
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR);
|
656
|
+
return ssl_hs_error;
|
657
|
+
}
|
658
|
+
|
659
|
+
// ClientHello should be the end of the flight. We check this early to cover
|
660
|
+
// all protocol versions.
|
661
|
+
if (ssl->method->has_unprocessed_handshake_data(ssl)) {
|
662
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_UNEXPECTED_MESSAGE);
|
663
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_EXCESS_HANDSHAKE_DATA);
|
664
|
+
return ssl_hs_error;
|
665
|
+
}
|
666
|
+
|
667
|
+
if (hs->config->handoff) {
|
668
|
+
return ssl_hs_handoff;
|
669
|
+
}
|
670
|
+
|
671
|
+
uint8_t alert = SSL_AD_DECODE_ERROR;
|
672
|
+
if (!decrypt_ech(hs, &alert, &client_hello)) {
|
673
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, alert);
|
674
|
+
return ssl_hs_error;
|
675
|
+
}
|
676
|
+
|
677
|
+
// ECH may have changed which ClientHello we process. Update |msg| and
|
678
|
+
// |client_hello| in case.
|
679
|
+
if (!hs->GetClientHello(&msg, &client_hello)) {
|
680
|
+
OPENSSL_PUT_ERROR(SSL, ERR_R_INTERNAL_ERROR);
|
681
|
+
return ssl_hs_error;
|
682
|
+
}
|
683
|
+
|
684
|
+
if (!extract_sni(hs, &alert, &client_hello)) {
|
685
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, alert);
|
686
|
+
return ssl_hs_error;
|
687
|
+
}
|
688
|
+
|
689
|
+
hs->state = state12_read_client_hello_after_ech;
|
690
|
+
return ssl_hs_ok;
|
691
|
+
}
|
692
|
+
|
693
|
+
static enum ssl_hs_wait_t do_read_client_hello_after_ech(SSL_HANDSHAKE *hs) {
|
694
|
+
SSL *const ssl = hs->ssl;
|
695
|
+
|
696
|
+
SSLMessage msg_unused;
|
697
|
+
SSL_CLIENT_HELLO client_hello;
|
698
|
+
if (!hs->GetClientHello(&msg_unused, &client_hello)) {
|
699
|
+
return ssl_hs_error;
|
700
|
+
}
|
701
|
+
|
702
|
+
// Run the early callback.
|
703
|
+
if (ssl->ctx->select_certificate_cb != NULL) {
|
704
|
+
switch (ssl->ctx->select_certificate_cb(&client_hello)) {
|
705
|
+
case ssl_select_cert_retry:
|
706
|
+
return ssl_hs_certificate_selection_pending;
|
707
|
+
|
708
|
+
case ssl_select_cert_error:
|
709
|
+
// Connection rejected.
|
710
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_CONNECTION_REJECTED);
|
711
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_HANDSHAKE_FAILURE);
|
712
|
+
return ssl_hs_error;
|
713
|
+
|
714
|
+
default:
|
715
|
+
/* fallthrough */;
|
716
|
+
}
|
717
|
+
}
|
718
|
+
|
719
|
+
// Freeze the version range after the early callback.
|
720
|
+
if (!ssl_get_version_range(hs, &hs->min_version, &hs->max_version)) {
|
721
|
+
return ssl_hs_error;
|
722
|
+
}
|
723
|
+
|
724
|
+
if (hs->config->jdk11_workaround &&
|
725
|
+
is_probably_jdk11_with_tls13(&client_hello)) {
|
726
|
+
hs->apply_jdk11_workaround = true;
|
727
|
+
}
|
728
|
+
|
729
|
+
uint8_t alert = SSL_AD_DECODE_ERROR;
|
730
|
+
if (!negotiate_version(hs, &alert, &client_hello)) {
|
731
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, alert);
|
732
|
+
return ssl_hs_error;
|
733
|
+
}
|
734
|
+
|
735
|
+
hs->client_version = client_hello.version;
|
736
|
+
if (client_hello.random_len != SSL3_RANDOM_SIZE) {
|
737
|
+
OPENSSL_PUT_ERROR(SSL, ERR_R_INTERNAL_ERROR);
|
738
|
+
return ssl_hs_error;
|
739
|
+
}
|
740
|
+
OPENSSL_memcpy(ssl->s3->client_random, client_hello.random,
|
741
|
+
client_hello.random_len);
|
742
|
+
|
743
|
+
// Only null compression is supported. TLS 1.3 further requires the peer
|
744
|
+
// advertise no other compression.
|
745
|
+
if (OPENSSL_memchr(client_hello.compression_methods, 0,
|
746
|
+
client_hello.compression_methods_len) == NULL ||
|
747
|
+
(ssl_protocol_version(ssl) >= TLS1_3_VERSION &&
|
748
|
+
client_hello.compression_methods_len != 1)) {
|
749
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_INVALID_COMPRESSION_LIST);
|
750
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_ILLEGAL_PARAMETER);
|
751
|
+
return ssl_hs_error;
|
752
|
+
}
|
753
|
+
|
754
|
+
// TLS extensions.
|
755
|
+
if (!ssl_parse_clienthello_tlsext(hs, &client_hello)) {
|
756
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_PARSE_TLSEXT);
|
757
|
+
return ssl_hs_error;
|
758
|
+
}
|
759
|
+
|
760
|
+
hs->state = state12_select_certificate;
|
761
|
+
return ssl_hs_ok;
|
762
|
+
}
|
763
|
+
|
764
|
+
static enum ssl_hs_wait_t do_select_certificate(SSL_HANDSHAKE *hs) {
|
765
|
+
SSL *const ssl = hs->ssl;
|
766
|
+
|
767
|
+
// Call |cert_cb| to update server certificates if required.
|
768
|
+
if (hs->config->cert->cert_cb != NULL) {
|
769
|
+
int rv = hs->config->cert->cert_cb(ssl, hs->config->cert->cert_cb_arg);
|
770
|
+
if (rv == 0) {
|
771
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_CERT_CB_ERROR);
|
772
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_INTERNAL_ERROR);
|
773
|
+
return ssl_hs_error;
|
774
|
+
}
|
775
|
+
if (rv < 0) {
|
776
|
+
return ssl_hs_x509_lookup;
|
777
|
+
}
|
778
|
+
}
|
779
|
+
|
780
|
+
if (!ssl_on_certificate_selected(hs)) {
|
781
|
+
return ssl_hs_error;
|
782
|
+
}
|
783
|
+
|
784
|
+
if (hs->ocsp_stapling_requested &&
|
785
|
+
ssl->ctx->legacy_ocsp_callback != nullptr) {
|
786
|
+
switch (ssl->ctx->legacy_ocsp_callback(
|
787
|
+
ssl, ssl->ctx->legacy_ocsp_callback_arg)) {
|
788
|
+
case SSL_TLSEXT_ERR_OK:
|
789
|
+
break;
|
790
|
+
case SSL_TLSEXT_ERR_NOACK:
|
791
|
+
hs->ocsp_stapling_requested = false;
|
792
|
+
break;
|
793
|
+
default:
|
794
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_OCSP_CB_ERROR);
|
795
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_INTERNAL_ERROR);
|
796
|
+
return ssl_hs_error;
|
797
|
+
}
|
798
|
+
}
|
799
|
+
|
800
|
+
if (ssl_protocol_version(ssl) >= TLS1_3_VERSION) {
|
801
|
+
// Jump to the TLS 1.3 state machine.
|
802
|
+
hs->state = state12_tls13;
|
803
|
+
return ssl_hs_ok;
|
804
|
+
}
|
805
|
+
|
806
|
+
// It should not be possible to negotiate TLS 1.2 with ECH. The
|
807
|
+
// ClientHelloInner decoding function rejects ClientHellos which offer TLS 1.2
|
808
|
+
// or below.
|
809
|
+
assert(ssl->s3->ech_status != ssl_ech_accepted);
|
810
|
+
|
811
|
+
// TODO(davidben): Also compute hints for TLS 1.2. When doing so, update the
|
812
|
+
// check in bssl_shim.cc to test this.
|
813
|
+
if (hs->hints_requested) {
|
814
|
+
return ssl_hs_hints_ready;
|
815
|
+
}
|
816
|
+
|
817
|
+
ssl->s3->early_data_reason = ssl_early_data_protocol_version;
|
818
|
+
|
819
|
+
SSLMessage msg_unused;
|
820
|
+
SSL_CLIENT_HELLO client_hello;
|
821
|
+
if (!hs->GetClientHello(&msg_unused, &client_hello)) {
|
822
|
+
return ssl_hs_error;
|
823
|
+
}
|
824
|
+
|
825
|
+
// Negotiate the cipher suite. This must be done after |cert_cb| so the
|
826
|
+
// certificate is finalized.
|
827
|
+
SSLCipherPreferenceList *prefs = hs->config->cipher_list
|
828
|
+
? hs->config->cipher_list.get()
|
829
|
+
: ssl->ctx->cipher_list.get();
|
830
|
+
hs->new_cipher = choose_cipher(hs, &client_hello, prefs);
|
831
|
+
if (hs->new_cipher == NULL) {
|
832
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_NO_SHARED_CIPHER);
|
833
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_HANDSHAKE_FAILURE);
|
834
|
+
return ssl_hs_error;
|
835
|
+
}
|
836
|
+
|
837
|
+
hs->state = state12_select_parameters;
|
838
|
+
return ssl_hs_ok;
|
839
|
+
}
|
840
|
+
|
841
|
+
static enum ssl_hs_wait_t do_tls13(SSL_HANDSHAKE *hs) {
|
842
|
+
enum ssl_hs_wait_t wait = tls13_server_handshake(hs);
|
843
|
+
if (wait == ssl_hs_ok) {
|
844
|
+
hs->state = state12_finish_server_handshake;
|
845
|
+
return ssl_hs_ok;
|
846
|
+
}
|
847
|
+
|
848
|
+
return wait;
|
849
|
+
}
|
850
|
+
|
851
|
+
static enum ssl_hs_wait_t do_select_parameters(SSL_HANDSHAKE *hs) {
|
852
|
+
SSL *const ssl = hs->ssl;
|
853
|
+
|
854
|
+
SSLMessage msg;
|
855
|
+
if (!ssl->method->get_message(ssl, &msg)) {
|
856
|
+
return ssl_hs_read_message;
|
857
|
+
}
|
858
|
+
|
859
|
+
SSL_CLIENT_HELLO client_hello;
|
860
|
+
if (!ssl_client_hello_init(ssl, &client_hello, msg.body)) {
|
861
|
+
return ssl_hs_error;
|
862
|
+
}
|
863
|
+
|
864
|
+
hs->session_id_len = client_hello.session_id_len;
|
865
|
+
// This is checked in |ssl_client_hello_init|.
|
866
|
+
assert(hs->session_id_len <= sizeof(hs->session_id));
|
867
|
+
OPENSSL_memcpy(hs->session_id, client_hello.session_id, hs->session_id_len);
|
868
|
+
|
869
|
+
// Determine whether we are doing session resumption.
|
870
|
+
UniquePtr<SSL_SESSION> session;
|
871
|
+
bool tickets_supported = false, renew_ticket = false;
|
872
|
+
enum ssl_hs_wait_t wait = ssl_get_prev_session(
|
873
|
+
hs, &session, &tickets_supported, &renew_ticket, &client_hello);
|
874
|
+
if (wait != ssl_hs_ok) {
|
875
|
+
return wait;
|
876
|
+
}
|
877
|
+
|
878
|
+
if (session) {
|
879
|
+
if (session->extended_master_secret && !hs->extended_master_secret) {
|
880
|
+
// A ClientHello without EMS that attempts to resume a session with EMS
|
881
|
+
// is fatal to the connection.
|
882
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_RESUMED_EMS_SESSION_WITHOUT_EMS_EXTENSION);
|
883
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_HANDSHAKE_FAILURE);
|
884
|
+
return ssl_hs_error;
|
885
|
+
}
|
886
|
+
|
887
|
+
if (!ssl_session_is_resumable(hs, session.get()) ||
|
888
|
+
// If the client offers the EMS extension, but the previous session
|
889
|
+
// didn't use it, then negotiate a new session.
|
890
|
+
hs->extended_master_secret != session->extended_master_secret) {
|
891
|
+
session.reset();
|
892
|
+
}
|
893
|
+
}
|
894
|
+
|
895
|
+
if (session) {
|
896
|
+
// Use the old session.
|
897
|
+
hs->ticket_expected = renew_ticket;
|
898
|
+
ssl->session = std::move(session);
|
899
|
+
ssl->s3->session_reused = true;
|
900
|
+
hs->can_release_private_key = true;
|
901
|
+
} else {
|
902
|
+
hs->ticket_expected = tickets_supported;
|
903
|
+
ssl_set_session(ssl, nullptr);
|
904
|
+
if (!ssl_get_new_session(hs)) {
|
905
|
+
return ssl_hs_error;
|
906
|
+
}
|
907
|
+
|
908
|
+
// Assign a session ID if not using session tickets.
|
909
|
+
if (!hs->ticket_expected &&
|
910
|
+
(ssl->ctx->session_cache_mode & SSL_SESS_CACHE_SERVER)) {
|
911
|
+
hs->new_session->session_id_length = SSL3_SSL_SESSION_ID_LENGTH;
|
912
|
+
RAND_bytes(hs->new_session->session_id,
|
913
|
+
hs->new_session->session_id_length);
|
914
|
+
}
|
915
|
+
}
|
916
|
+
|
917
|
+
if (ssl->ctx->dos_protection_cb != NULL &&
|
918
|
+
ssl->ctx->dos_protection_cb(&client_hello) == 0) {
|
919
|
+
// Connection rejected for DOS reasons.
|
920
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_CONNECTION_REJECTED);
|
921
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_INTERNAL_ERROR);
|
922
|
+
return ssl_hs_error;
|
923
|
+
}
|
924
|
+
|
925
|
+
if (ssl->session == NULL) {
|
926
|
+
hs->new_session->cipher = hs->new_cipher;
|
927
|
+
|
928
|
+
// Determine whether to request a client certificate.
|
929
|
+
hs->cert_request = !!(hs->config->verify_mode & SSL_VERIFY_PEER);
|
930
|
+
// Only request a certificate if Channel ID isn't negotiated.
|
931
|
+
if ((hs->config->verify_mode & SSL_VERIFY_PEER_IF_NO_OBC) &&
|
932
|
+
hs->channel_id_negotiated) {
|
933
|
+
hs->cert_request = false;
|
934
|
+
}
|
935
|
+
// CertificateRequest may only be sent in certificate-based ciphers.
|
936
|
+
if (!ssl_cipher_uses_certificate_auth(hs->new_cipher)) {
|
937
|
+
hs->cert_request = false;
|
938
|
+
}
|
939
|
+
|
940
|
+
if (!hs->cert_request) {
|
941
|
+
// OpenSSL returns X509_V_OK when no certificates are requested. This is
|
942
|
+
// classed by them as a bug, but it's assumed by at least NGINX.
|
943
|
+
hs->new_session->verify_result = X509_V_OK;
|
944
|
+
}
|
945
|
+
}
|
946
|
+
|
947
|
+
// HTTP/2 negotiation depends on the cipher suite, so ALPN negotiation was
|
948
|
+
// deferred. Complete it now.
|
949
|
+
uint8_t alert = SSL_AD_DECODE_ERROR;
|
950
|
+
if (!ssl_negotiate_alpn(hs, &alert, &client_hello)) {
|
951
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, alert);
|
952
|
+
return ssl_hs_error;
|
953
|
+
}
|
954
|
+
|
955
|
+
// Now that all parameters are known, initialize the handshake hash and hash
|
956
|
+
// the ClientHello.
|
957
|
+
if (!hs->transcript.InitHash(ssl_protocol_version(ssl), hs->new_cipher) ||
|
958
|
+
!ssl_hash_message(hs, msg)) {
|
959
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_INTERNAL_ERROR);
|
960
|
+
return ssl_hs_error;
|
961
|
+
}
|
962
|
+
|
963
|
+
// Handback includes the whole handshake transcript, so we cannot free the
|
964
|
+
// transcript buffer in the handback case.
|
965
|
+
if (!hs->cert_request && !hs->handback) {
|
966
|
+
hs->transcript.FreeBuffer();
|
967
|
+
}
|
968
|
+
|
969
|
+
ssl->method->next_message(ssl);
|
970
|
+
|
971
|
+
hs->state = state12_send_server_hello;
|
972
|
+
return ssl_hs_ok;
|
973
|
+
}
|
974
|
+
|
975
|
+
static void copy_suffix(Span<uint8_t> out, Span<const uint8_t> in) {
|
976
|
+
out = out.last(in.size());
|
977
|
+
OPENSSL_memcpy(out.data(), in.data(), in.size());
|
978
|
+
}
|
979
|
+
|
980
|
+
static enum ssl_hs_wait_t do_send_server_hello(SSL_HANDSHAKE *hs) {
|
981
|
+
SSL *const ssl = hs->ssl;
|
982
|
+
|
983
|
+
// We only accept ChannelIDs on connections with ECDHE in order to avoid a
|
984
|
+
// known attack while we fix ChannelID itself.
|
985
|
+
if (hs->channel_id_negotiated &&
|
986
|
+
(hs->new_cipher->algorithm_mkey & SSL_kECDHE) == 0) {
|
987
|
+
hs->channel_id_negotiated = false;
|
988
|
+
}
|
989
|
+
|
990
|
+
// If this is a resumption and the original handshake didn't support
|
991
|
+
// ChannelID then we didn't record the original handshake hashes in the
|
992
|
+
// session and so cannot resume with ChannelIDs.
|
993
|
+
if (ssl->session != NULL &&
|
994
|
+
ssl->session->original_handshake_hash_len == 0) {
|
995
|
+
hs->channel_id_negotiated = false;
|
996
|
+
}
|
997
|
+
|
998
|
+
struct OPENSSL_timeval now;
|
999
|
+
ssl_get_current_time(ssl, &now);
|
1000
|
+
ssl->s3->server_random[0] = now.tv_sec >> 24;
|
1001
|
+
ssl->s3->server_random[1] = now.tv_sec >> 16;
|
1002
|
+
ssl->s3->server_random[2] = now.tv_sec >> 8;
|
1003
|
+
ssl->s3->server_random[3] = now.tv_sec;
|
1004
|
+
if (!RAND_bytes(ssl->s3->server_random + 4, SSL3_RANDOM_SIZE - 4)) {
|
1005
|
+
return ssl_hs_error;
|
1006
|
+
}
|
1007
|
+
|
1008
|
+
// Implement the TLS 1.3 anti-downgrade feature.
|
1009
|
+
if (ssl_supports_version(hs, TLS1_3_VERSION)) {
|
1010
|
+
if (ssl_protocol_version(ssl) == TLS1_2_VERSION) {
|
1011
|
+
if (hs->apply_jdk11_workaround) {
|
1012
|
+
// JDK 11 implements the TLS 1.3 downgrade signal, so we cannot send it
|
1013
|
+
// here. However, the signal is only effective if all TLS 1.2
|
1014
|
+
// ServerHellos produced by the server are marked. Thus we send a
|
1015
|
+
// different non-standard signal for the time being, until JDK 11.0.2 is
|
1016
|
+
// released and clients have updated.
|
1017
|
+
copy_suffix(ssl->s3->server_random, kJDK11DowngradeRandom);
|
1018
|
+
} else {
|
1019
|
+
copy_suffix(ssl->s3->server_random, kTLS13DowngradeRandom);
|
1020
|
+
}
|
1021
|
+
} else {
|
1022
|
+
copy_suffix(ssl->s3->server_random, kTLS12DowngradeRandom);
|
1023
|
+
}
|
1024
|
+
}
|
1025
|
+
|
1026
|
+
Span<const uint8_t> session_id;
|
1027
|
+
if (ssl->session != nullptr) {
|
1028
|
+
// Echo the session ID from the ClientHello to indicate resumption.
|
1029
|
+
session_id = MakeConstSpan(hs->session_id, hs->session_id_len);
|
1030
|
+
} else {
|
1031
|
+
session_id = MakeConstSpan(hs->new_session->session_id,
|
1032
|
+
hs->new_session->session_id_length);
|
1033
|
+
}
|
1034
|
+
|
1035
|
+
ScopedCBB cbb;
|
1036
|
+
CBB body, session_id_bytes;
|
1037
|
+
if (!ssl->method->init_message(ssl, cbb.get(), &body, SSL3_MT_SERVER_HELLO) ||
|
1038
|
+
!CBB_add_u16(&body, ssl->version) ||
|
1039
|
+
!CBB_add_bytes(&body, ssl->s3->server_random, SSL3_RANDOM_SIZE) ||
|
1040
|
+
!CBB_add_u8_length_prefixed(&body, &session_id_bytes) ||
|
1041
|
+
!CBB_add_bytes(&session_id_bytes, session_id.data(), session_id.size()) ||
|
1042
|
+
!CBB_add_u16(&body, SSL_CIPHER_get_protocol_id(hs->new_cipher)) ||
|
1043
|
+
!CBB_add_u8(&body, 0 /* no compression */) ||
|
1044
|
+
!ssl_add_serverhello_tlsext(hs, &body) ||
|
1045
|
+
!ssl_add_message_cbb(ssl, cbb.get())) {
|
1046
|
+
OPENSSL_PUT_ERROR(SSL, ERR_R_INTERNAL_ERROR);
|
1047
|
+
return ssl_hs_error;
|
1048
|
+
}
|
1049
|
+
|
1050
|
+
if (ssl->session != NULL) {
|
1051
|
+
hs->state = state12_send_server_finished;
|
1052
|
+
} else {
|
1053
|
+
hs->state = state12_send_server_certificate;
|
1054
|
+
}
|
1055
|
+
return ssl_hs_ok;
|
1056
|
+
}
|
1057
|
+
|
1058
|
+
static enum ssl_hs_wait_t do_send_server_certificate(SSL_HANDSHAKE *hs) {
|
1059
|
+
SSL *const ssl = hs->ssl;
|
1060
|
+
ScopedCBB cbb;
|
1061
|
+
|
1062
|
+
if (ssl_cipher_uses_certificate_auth(hs->new_cipher)) {
|
1063
|
+
if (!ssl_has_certificate(hs)) {
|
1064
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_NO_CERTIFICATE_SET);
|
1065
|
+
return ssl_hs_error;
|
1066
|
+
}
|
1067
|
+
|
1068
|
+
if (!ssl_output_cert_chain(hs)) {
|
1069
|
+
return ssl_hs_error;
|
1070
|
+
}
|
1071
|
+
|
1072
|
+
if (hs->certificate_status_expected) {
|
1073
|
+
CBB body, ocsp_response;
|
1074
|
+
if (!ssl->method->init_message(ssl, cbb.get(), &body,
|
1075
|
+
SSL3_MT_CERTIFICATE_STATUS) ||
|
1076
|
+
!CBB_add_u8(&body, TLSEXT_STATUSTYPE_ocsp) ||
|
1077
|
+
!CBB_add_u24_length_prefixed(&body, &ocsp_response) ||
|
1078
|
+
!CBB_add_bytes(
|
1079
|
+
&ocsp_response,
|
1080
|
+
CRYPTO_BUFFER_data(hs->config->cert->ocsp_response.get()),
|
1081
|
+
CRYPTO_BUFFER_len(hs->config->cert->ocsp_response.get())) ||
|
1082
|
+
!ssl_add_message_cbb(ssl, cbb.get())) {
|
1083
|
+
OPENSSL_PUT_ERROR(SSL, ERR_R_INTERNAL_ERROR);
|
1084
|
+
return ssl_hs_error;
|
1085
|
+
}
|
1086
|
+
}
|
1087
|
+
}
|
1088
|
+
|
1089
|
+
// Assemble ServerKeyExchange parameters if needed.
|
1090
|
+
uint32_t alg_k = hs->new_cipher->algorithm_mkey;
|
1091
|
+
uint32_t alg_a = hs->new_cipher->algorithm_auth;
|
1092
|
+
if (ssl_cipher_requires_server_key_exchange(hs->new_cipher) ||
|
1093
|
+
((alg_a & SSL_aPSK) && hs->config->psk_identity_hint)) {
|
1094
|
+
// Pre-allocate enough room to comfortably fit an ECDHE public key. Prepend
|
1095
|
+
// the client and server randoms for the signing transcript.
|
1096
|
+
CBB child;
|
1097
|
+
if (!CBB_init(cbb.get(), SSL3_RANDOM_SIZE * 2 + 128) ||
|
1098
|
+
!CBB_add_bytes(cbb.get(), ssl->s3->client_random, SSL3_RANDOM_SIZE) ||
|
1099
|
+
!CBB_add_bytes(cbb.get(), ssl->s3->server_random, SSL3_RANDOM_SIZE)) {
|
1100
|
+
return ssl_hs_error;
|
1101
|
+
}
|
1102
|
+
|
1103
|
+
// PSK ciphers begin with an identity hint.
|
1104
|
+
if (alg_a & SSL_aPSK) {
|
1105
|
+
size_t len = hs->config->psk_identity_hint == nullptr
|
1106
|
+
? 0
|
1107
|
+
: strlen(hs->config->psk_identity_hint.get());
|
1108
|
+
if (!CBB_add_u16_length_prefixed(cbb.get(), &child) ||
|
1109
|
+
!CBB_add_bytes(&child,
|
1110
|
+
(const uint8_t *)hs->config->psk_identity_hint.get(),
|
1111
|
+
len)) {
|
1112
|
+
return ssl_hs_error;
|
1113
|
+
}
|
1114
|
+
}
|
1115
|
+
|
1116
|
+
if (alg_k & SSL_kECDHE) {
|
1117
|
+
// Determine the group to use.
|
1118
|
+
uint16_t group_id;
|
1119
|
+
if (!tls1_get_shared_group(hs, &group_id)) {
|
1120
|
+
OPENSSL_PUT_ERROR(SSL, ERR_R_INTERNAL_ERROR);
|
1121
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_HANDSHAKE_FAILURE);
|
1122
|
+
return ssl_hs_error;
|
1123
|
+
}
|
1124
|
+
hs->new_session->group_id = group_id;
|
1125
|
+
|
1126
|
+
// Set up ECDH, generate a key, and emit the public half.
|
1127
|
+
hs->key_shares[0] = SSLKeyShare::Create(group_id);
|
1128
|
+
if (!hs->key_shares[0] ||
|
1129
|
+
!CBB_add_u8(cbb.get(), NAMED_CURVE_TYPE) ||
|
1130
|
+
!CBB_add_u16(cbb.get(), group_id) ||
|
1131
|
+
!CBB_add_u8_length_prefixed(cbb.get(), &child) ||
|
1132
|
+
!hs->key_shares[0]->Offer(&child)) {
|
1133
|
+
return ssl_hs_error;
|
1134
|
+
}
|
1135
|
+
} else {
|
1136
|
+
assert(alg_k & SSL_kPSK);
|
1137
|
+
}
|
1138
|
+
|
1139
|
+
if (!CBBFinishArray(cbb.get(), &hs->server_params)) {
|
1140
|
+
return ssl_hs_error;
|
1141
|
+
}
|
1142
|
+
}
|
1143
|
+
|
1144
|
+
hs->state = state12_send_server_key_exchange;
|
1145
|
+
return ssl_hs_ok;
|
1146
|
+
}
|
1147
|
+
|
1148
|
+
static enum ssl_hs_wait_t do_send_server_key_exchange(SSL_HANDSHAKE *hs) {
|
1149
|
+
SSL *const ssl = hs->ssl;
|
1150
|
+
|
1151
|
+
if (hs->server_params.size() == 0) {
|
1152
|
+
hs->state = state12_send_server_hello_done;
|
1153
|
+
return ssl_hs_ok;
|
1154
|
+
}
|
1155
|
+
|
1156
|
+
ScopedCBB cbb;
|
1157
|
+
CBB body, child;
|
1158
|
+
if (!ssl->method->init_message(ssl, cbb.get(), &body,
|
1159
|
+
SSL3_MT_SERVER_KEY_EXCHANGE) ||
|
1160
|
+
// |hs->server_params| contains a prefix for signing.
|
1161
|
+
hs->server_params.size() < 2 * SSL3_RANDOM_SIZE ||
|
1162
|
+
!CBB_add_bytes(&body, hs->server_params.data() + 2 * SSL3_RANDOM_SIZE,
|
1163
|
+
hs->server_params.size() - 2 * SSL3_RANDOM_SIZE)) {
|
1164
|
+
return ssl_hs_error;
|
1165
|
+
}
|
1166
|
+
|
1167
|
+
// Add a signature.
|
1168
|
+
if (ssl_cipher_uses_certificate_auth(hs->new_cipher)) {
|
1169
|
+
if (!ssl_has_private_key(hs)) {
|
1170
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_INTERNAL_ERROR);
|
1171
|
+
return ssl_hs_error;
|
1172
|
+
}
|
1173
|
+
|
1174
|
+
// Determine the signature algorithm.
|
1175
|
+
uint16_t signature_algorithm;
|
1176
|
+
if (!tls1_choose_signature_algorithm(hs, &signature_algorithm)) {
|
1177
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_HANDSHAKE_FAILURE);
|
1178
|
+
return ssl_hs_error;
|
1179
|
+
}
|
1180
|
+
if (ssl_protocol_version(ssl) >= TLS1_2_VERSION) {
|
1181
|
+
if (!CBB_add_u16(&body, signature_algorithm)) {
|
1182
|
+
OPENSSL_PUT_ERROR(SSL, ERR_R_INTERNAL_ERROR);
|
1183
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_INTERNAL_ERROR);
|
1184
|
+
return ssl_hs_error;
|
1185
|
+
}
|
1186
|
+
}
|
1187
|
+
|
1188
|
+
// Add space for the signature.
|
1189
|
+
const size_t max_sig_len = EVP_PKEY_size(hs->local_pubkey.get());
|
1190
|
+
uint8_t *ptr;
|
1191
|
+
if (!CBB_add_u16_length_prefixed(&body, &child) ||
|
1192
|
+
!CBB_reserve(&child, &ptr, max_sig_len)) {
|
1193
|
+
return ssl_hs_error;
|
1194
|
+
}
|
1195
|
+
|
1196
|
+
size_t sig_len;
|
1197
|
+
switch (ssl_private_key_sign(hs, ptr, &sig_len, max_sig_len,
|
1198
|
+
signature_algorithm, hs->server_params)) {
|
1199
|
+
case ssl_private_key_success:
|
1200
|
+
if (!CBB_did_write(&child, sig_len)) {
|
1201
|
+
return ssl_hs_error;
|
1202
|
+
}
|
1203
|
+
break;
|
1204
|
+
case ssl_private_key_failure:
|
1205
|
+
return ssl_hs_error;
|
1206
|
+
case ssl_private_key_retry:
|
1207
|
+
return ssl_hs_private_key_operation;
|
1208
|
+
}
|
1209
|
+
}
|
1210
|
+
|
1211
|
+
hs->can_release_private_key = true;
|
1212
|
+
if (!ssl_add_message_cbb(ssl, cbb.get())) {
|
1213
|
+
return ssl_hs_error;
|
1214
|
+
}
|
1215
|
+
|
1216
|
+
hs->server_params.Reset();
|
1217
|
+
|
1218
|
+
hs->state = state12_send_server_hello_done;
|
1219
|
+
return ssl_hs_ok;
|
1220
|
+
}
|
1221
|
+
|
1222
|
+
static enum ssl_hs_wait_t do_send_server_hello_done(SSL_HANDSHAKE *hs) {
|
1223
|
+
SSL *const ssl = hs->ssl;
|
1224
|
+
|
1225
|
+
ScopedCBB cbb;
|
1226
|
+
CBB body;
|
1227
|
+
|
1228
|
+
if (hs->cert_request) {
|
1229
|
+
CBB cert_types, sigalgs_cbb;
|
1230
|
+
if (!ssl->method->init_message(ssl, cbb.get(), &body,
|
1231
|
+
SSL3_MT_CERTIFICATE_REQUEST) ||
|
1232
|
+
!CBB_add_u8_length_prefixed(&body, &cert_types) ||
|
1233
|
+
!CBB_add_u8(&cert_types, SSL3_CT_RSA_SIGN) ||
|
1234
|
+
!CBB_add_u8(&cert_types, TLS_CT_ECDSA_SIGN) ||
|
1235
|
+
(ssl_protocol_version(ssl) >= TLS1_2_VERSION &&
|
1236
|
+
(!CBB_add_u16_length_prefixed(&body, &sigalgs_cbb) ||
|
1237
|
+
!tls12_add_verify_sigalgs(hs, &sigalgs_cbb))) ||
|
1238
|
+
!ssl_add_client_CA_list(hs, &body) ||
|
1239
|
+
!ssl_add_message_cbb(ssl, cbb.get())) {
|
1240
|
+
OPENSSL_PUT_ERROR(SSL, ERR_R_INTERNAL_ERROR);
|
1241
|
+
return ssl_hs_error;
|
1242
|
+
}
|
1243
|
+
}
|
1244
|
+
|
1245
|
+
if (!ssl->method->init_message(ssl, cbb.get(), &body,
|
1246
|
+
SSL3_MT_SERVER_HELLO_DONE) ||
|
1247
|
+
!ssl_add_message_cbb(ssl, cbb.get())) {
|
1248
|
+
OPENSSL_PUT_ERROR(SSL, ERR_R_INTERNAL_ERROR);
|
1249
|
+
return ssl_hs_error;
|
1250
|
+
}
|
1251
|
+
|
1252
|
+
hs->state = state12_read_client_certificate;
|
1253
|
+
return ssl_hs_flush;
|
1254
|
+
}
|
1255
|
+
|
1256
|
+
static enum ssl_hs_wait_t do_read_client_certificate(SSL_HANDSHAKE *hs) {
|
1257
|
+
SSL *const ssl = hs->ssl;
|
1258
|
+
|
1259
|
+
if (hs->handback && hs->new_cipher->algorithm_mkey == SSL_kECDHE) {
|
1260
|
+
return ssl_hs_handback;
|
1261
|
+
}
|
1262
|
+
if (!hs->cert_request) {
|
1263
|
+
hs->state = state12_verify_client_certificate;
|
1264
|
+
return ssl_hs_ok;
|
1265
|
+
}
|
1266
|
+
|
1267
|
+
SSLMessage msg;
|
1268
|
+
if (!ssl->method->get_message(ssl, &msg)) {
|
1269
|
+
return ssl_hs_read_message;
|
1270
|
+
}
|
1271
|
+
|
1272
|
+
if (!ssl_check_message_type(ssl, msg, SSL3_MT_CERTIFICATE)) {
|
1273
|
+
return ssl_hs_error;
|
1274
|
+
}
|
1275
|
+
|
1276
|
+
if (!ssl_hash_message(hs, msg)) {
|
1277
|
+
return ssl_hs_error;
|
1278
|
+
}
|
1279
|
+
|
1280
|
+
CBS certificate_msg = msg.body;
|
1281
|
+
uint8_t alert = SSL_AD_DECODE_ERROR;
|
1282
|
+
if (!ssl_parse_cert_chain(&alert, &hs->new_session->certs, &hs->peer_pubkey,
|
1283
|
+
hs->config->retain_only_sha256_of_client_certs
|
1284
|
+
? hs->new_session->peer_sha256
|
1285
|
+
: nullptr,
|
1286
|
+
&certificate_msg, ssl->ctx->pool)) {
|
1287
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, alert);
|
1288
|
+
return ssl_hs_error;
|
1289
|
+
}
|
1290
|
+
|
1291
|
+
if (CBS_len(&certificate_msg) != 0 ||
|
1292
|
+
!ssl->ctx->x509_method->session_cache_objects(hs->new_session.get())) {
|
1293
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_DECODE_ERROR);
|
1294
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR);
|
1295
|
+
return ssl_hs_error;
|
1296
|
+
}
|
1297
|
+
|
1298
|
+
if (sk_CRYPTO_BUFFER_num(hs->new_session->certs.get()) == 0) {
|
1299
|
+
// No client certificate so the handshake buffer may be discarded.
|
1300
|
+
hs->transcript.FreeBuffer();
|
1301
|
+
|
1302
|
+
if (hs->config->verify_mode & SSL_VERIFY_FAIL_IF_NO_PEER_CERT) {
|
1303
|
+
// Fail for TLS only if we required a certificate
|
1304
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_PEER_DID_NOT_RETURN_A_CERTIFICATE);
|
1305
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_HANDSHAKE_FAILURE);
|
1306
|
+
return ssl_hs_error;
|
1307
|
+
}
|
1308
|
+
|
1309
|
+
// OpenSSL returns X509_V_OK when no certificates are received. This is
|
1310
|
+
// classed by them as a bug, but it's assumed by at least NGINX.
|
1311
|
+
hs->new_session->verify_result = X509_V_OK;
|
1312
|
+
} else if (hs->config->retain_only_sha256_of_client_certs) {
|
1313
|
+
// The hash will have been filled in.
|
1314
|
+
hs->new_session->peer_sha256_valid = 1;
|
1315
|
+
}
|
1316
|
+
|
1317
|
+
ssl->method->next_message(ssl);
|
1318
|
+
hs->state = state12_verify_client_certificate;
|
1319
|
+
return ssl_hs_ok;
|
1320
|
+
}
|
1321
|
+
|
1322
|
+
static enum ssl_hs_wait_t do_verify_client_certificate(SSL_HANDSHAKE *hs) {
|
1323
|
+
if (sk_CRYPTO_BUFFER_num(hs->new_session->certs.get()) > 0) {
|
1324
|
+
switch (ssl_verify_peer_cert(hs)) {
|
1325
|
+
case ssl_verify_ok:
|
1326
|
+
break;
|
1327
|
+
case ssl_verify_invalid:
|
1328
|
+
return ssl_hs_error;
|
1329
|
+
case ssl_verify_retry:
|
1330
|
+
return ssl_hs_certificate_verify;
|
1331
|
+
}
|
1332
|
+
}
|
1333
|
+
|
1334
|
+
hs->state = state12_read_client_key_exchange;
|
1335
|
+
return ssl_hs_ok;
|
1336
|
+
}
|
1337
|
+
|
1338
|
+
static enum ssl_hs_wait_t do_read_client_key_exchange(SSL_HANDSHAKE *hs) {
|
1339
|
+
SSL *const ssl = hs->ssl;
|
1340
|
+
SSLMessage msg;
|
1341
|
+
if (!ssl->method->get_message(ssl, &msg)) {
|
1342
|
+
return ssl_hs_read_message;
|
1343
|
+
}
|
1344
|
+
|
1345
|
+
if (!ssl_check_message_type(ssl, msg, SSL3_MT_CLIENT_KEY_EXCHANGE)) {
|
1346
|
+
return ssl_hs_error;
|
1347
|
+
}
|
1348
|
+
|
1349
|
+
CBS client_key_exchange = msg.body;
|
1350
|
+
uint32_t alg_k = hs->new_cipher->algorithm_mkey;
|
1351
|
+
uint32_t alg_a = hs->new_cipher->algorithm_auth;
|
1352
|
+
|
1353
|
+
// If using a PSK key exchange, parse the PSK identity.
|
1354
|
+
if (alg_a & SSL_aPSK) {
|
1355
|
+
CBS psk_identity;
|
1356
|
+
|
1357
|
+
// If using PSK, the ClientKeyExchange contains a psk_identity. If PSK,
|
1358
|
+
// then this is the only field in the message.
|
1359
|
+
if (!CBS_get_u16_length_prefixed(&client_key_exchange, &psk_identity) ||
|
1360
|
+
((alg_k & SSL_kPSK) && CBS_len(&client_key_exchange) != 0)) {
|
1361
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_DECODE_ERROR);
|
1362
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR);
|
1363
|
+
return ssl_hs_error;
|
1364
|
+
}
|
1365
|
+
|
1366
|
+
if (CBS_len(&psk_identity) > PSK_MAX_IDENTITY_LEN ||
|
1367
|
+
CBS_contains_zero_byte(&psk_identity)) {
|
1368
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_DATA_LENGTH_TOO_LONG);
|
1369
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_ILLEGAL_PARAMETER);
|
1370
|
+
return ssl_hs_error;
|
1371
|
+
}
|
1372
|
+
char *raw = nullptr;
|
1373
|
+
if (!CBS_strdup(&psk_identity, &raw)) {
|
1374
|
+
OPENSSL_PUT_ERROR(SSL, ERR_R_MALLOC_FAILURE);
|
1375
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_INTERNAL_ERROR);
|
1376
|
+
return ssl_hs_error;
|
1377
|
+
}
|
1378
|
+
hs->new_session->psk_identity.reset(raw);
|
1379
|
+
}
|
1380
|
+
|
1381
|
+
// Depending on the key exchange method, compute |premaster_secret|.
|
1382
|
+
Array<uint8_t> premaster_secret;
|
1383
|
+
if (alg_k & SSL_kRSA) {
|
1384
|
+
CBS encrypted_premaster_secret;
|
1385
|
+
if (!CBS_get_u16_length_prefixed(&client_key_exchange,
|
1386
|
+
&encrypted_premaster_secret) ||
|
1387
|
+
CBS_len(&client_key_exchange) != 0) {
|
1388
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_DECODE_ERROR);
|
1389
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR);
|
1390
|
+
return ssl_hs_error;
|
1391
|
+
}
|
1392
|
+
|
1393
|
+
// Allocate a buffer large enough for an RSA decryption.
|
1394
|
+
Array<uint8_t> decrypt_buf;
|
1395
|
+
if (!decrypt_buf.Init(EVP_PKEY_size(hs->local_pubkey.get()))) {
|
1396
|
+
return ssl_hs_error;
|
1397
|
+
}
|
1398
|
+
|
1399
|
+
// Decrypt with no padding. PKCS#1 padding will be removed as part of the
|
1400
|
+
// timing-sensitive code below.
|
1401
|
+
size_t decrypt_len;
|
1402
|
+
switch (ssl_private_key_decrypt(hs, decrypt_buf.data(), &decrypt_len,
|
1403
|
+
decrypt_buf.size(),
|
1404
|
+
encrypted_premaster_secret)) {
|
1405
|
+
case ssl_private_key_success:
|
1406
|
+
break;
|
1407
|
+
case ssl_private_key_failure:
|
1408
|
+
return ssl_hs_error;
|
1409
|
+
case ssl_private_key_retry:
|
1410
|
+
return ssl_hs_private_key_operation;
|
1411
|
+
}
|
1412
|
+
|
1413
|
+
if (decrypt_len != decrypt_buf.size()) {
|
1414
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_DECRYPTION_FAILED);
|
1415
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECRYPT_ERROR);
|
1416
|
+
return ssl_hs_error;
|
1417
|
+
}
|
1418
|
+
|
1419
|
+
CONSTTIME_SECRET(decrypt_buf.data(), decrypt_len);
|
1420
|
+
|
1421
|
+
// Prepare a random premaster, to be used on invalid padding. See RFC 5246,
|
1422
|
+
// section 7.4.7.1.
|
1423
|
+
if (!premaster_secret.Init(SSL_MAX_MASTER_KEY_LENGTH) ||
|
1424
|
+
!RAND_bytes(premaster_secret.data(), premaster_secret.size())) {
|
1425
|
+
return ssl_hs_error;
|
1426
|
+
}
|
1427
|
+
|
1428
|
+
// The smallest padded premaster is 11 bytes of overhead. Small keys are
|
1429
|
+
// publicly invalid.
|
1430
|
+
if (decrypt_len < 11 + premaster_secret.size()) {
|
1431
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_DECRYPTION_FAILED);
|
1432
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECRYPT_ERROR);
|
1433
|
+
return ssl_hs_error;
|
1434
|
+
}
|
1435
|
+
|
1436
|
+
// Check the padding. See RFC 3447, section 7.2.2.
|
1437
|
+
size_t padding_len = decrypt_len - premaster_secret.size();
|
1438
|
+
uint8_t good = constant_time_eq_int_8(decrypt_buf[0], 0) &
|
1439
|
+
constant_time_eq_int_8(decrypt_buf[1], 2);
|
1440
|
+
for (size_t i = 2; i < padding_len - 1; i++) {
|
1441
|
+
good &= ~constant_time_is_zero_8(decrypt_buf[i]);
|
1442
|
+
}
|
1443
|
+
good &= constant_time_is_zero_8(decrypt_buf[padding_len - 1]);
|
1444
|
+
|
1445
|
+
// The premaster secret must begin with |client_version|. This too must be
|
1446
|
+
// checked in constant time (http://eprint.iacr.org/2003/052/).
|
1447
|
+
good &= constant_time_eq_8(decrypt_buf[padding_len],
|
1448
|
+
(unsigned)(hs->client_version >> 8));
|
1449
|
+
good &= constant_time_eq_8(decrypt_buf[padding_len + 1],
|
1450
|
+
(unsigned)(hs->client_version & 0xff));
|
1451
|
+
|
1452
|
+
// Select, in constant time, either the decrypted premaster or the random
|
1453
|
+
// premaster based on |good|.
|
1454
|
+
for (size_t i = 0; i < premaster_secret.size(); i++) {
|
1455
|
+
premaster_secret[i] = constant_time_select_8(
|
1456
|
+
good, decrypt_buf[padding_len + i], premaster_secret[i]);
|
1457
|
+
}
|
1458
|
+
} else if (alg_k & SSL_kECDHE) {
|
1459
|
+
// Parse the ClientKeyExchange.
|
1460
|
+
CBS peer_key;
|
1461
|
+
if (!CBS_get_u8_length_prefixed(&client_key_exchange, &peer_key) ||
|
1462
|
+
CBS_len(&client_key_exchange) != 0) {
|
1463
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_DECODE_ERROR);
|
1464
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR);
|
1465
|
+
return ssl_hs_error;
|
1466
|
+
}
|
1467
|
+
|
1468
|
+
// Compute the premaster.
|
1469
|
+
uint8_t alert = SSL_AD_DECODE_ERROR;
|
1470
|
+
if (!hs->key_shares[0]->Finish(&premaster_secret, &alert, peer_key)) {
|
1471
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, alert);
|
1472
|
+
return ssl_hs_error;
|
1473
|
+
}
|
1474
|
+
|
1475
|
+
// The key exchange state may now be discarded.
|
1476
|
+
hs->key_shares[0].reset();
|
1477
|
+
hs->key_shares[1].reset();
|
1478
|
+
} else if (!(alg_k & SSL_kPSK)) {
|
1479
|
+
OPENSSL_PUT_ERROR(SSL, ERR_R_INTERNAL_ERROR);
|
1480
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_HANDSHAKE_FAILURE);
|
1481
|
+
return ssl_hs_error;
|
1482
|
+
}
|
1483
|
+
|
1484
|
+
// For a PSK cipher suite, the actual pre-master secret is combined with the
|
1485
|
+
// pre-shared key.
|
1486
|
+
if (alg_a & SSL_aPSK) {
|
1487
|
+
if (hs->config->psk_server_callback == NULL) {
|
1488
|
+
OPENSSL_PUT_ERROR(SSL, ERR_R_INTERNAL_ERROR);
|
1489
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_INTERNAL_ERROR);
|
1490
|
+
return ssl_hs_error;
|
1491
|
+
}
|
1492
|
+
|
1493
|
+
// Look up the key for the identity.
|
1494
|
+
uint8_t psk[PSK_MAX_PSK_LEN];
|
1495
|
+
unsigned psk_len = hs->config->psk_server_callback(
|
1496
|
+
ssl, hs->new_session->psk_identity.get(), psk, sizeof(psk));
|
1497
|
+
if (psk_len > PSK_MAX_PSK_LEN) {
|
1498
|
+
OPENSSL_PUT_ERROR(SSL, ERR_R_INTERNAL_ERROR);
|
1499
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_INTERNAL_ERROR);
|
1500
|
+
return ssl_hs_error;
|
1501
|
+
} else if (psk_len == 0) {
|
1502
|
+
// PSK related to the given identity not found.
|
1503
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_PSK_IDENTITY_NOT_FOUND);
|
1504
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_UNKNOWN_PSK_IDENTITY);
|
1505
|
+
return ssl_hs_error;
|
1506
|
+
}
|
1507
|
+
|
1508
|
+
if (alg_k & SSL_kPSK) {
|
1509
|
+
// In plain PSK, other_secret is a block of 0s with the same length as the
|
1510
|
+
// pre-shared key.
|
1511
|
+
if (!premaster_secret.Init(psk_len)) {
|
1512
|
+
return ssl_hs_error;
|
1513
|
+
}
|
1514
|
+
OPENSSL_memset(premaster_secret.data(), 0, premaster_secret.size());
|
1515
|
+
}
|
1516
|
+
|
1517
|
+
ScopedCBB new_premaster;
|
1518
|
+
CBB child;
|
1519
|
+
if (!CBB_init(new_premaster.get(),
|
1520
|
+
2 + psk_len + 2 + premaster_secret.size()) ||
|
1521
|
+
!CBB_add_u16_length_prefixed(new_premaster.get(), &child) ||
|
1522
|
+
!CBB_add_bytes(&child, premaster_secret.data(),
|
1523
|
+
premaster_secret.size()) ||
|
1524
|
+
!CBB_add_u16_length_prefixed(new_premaster.get(), &child) ||
|
1525
|
+
!CBB_add_bytes(&child, psk, psk_len) ||
|
1526
|
+
!CBBFinishArray(new_premaster.get(), &premaster_secret)) {
|
1527
|
+
OPENSSL_PUT_ERROR(SSL, ERR_R_MALLOC_FAILURE);
|
1528
|
+
return ssl_hs_error;
|
1529
|
+
}
|
1530
|
+
}
|
1531
|
+
|
1532
|
+
if (!ssl_hash_message(hs, msg)) {
|
1533
|
+
return ssl_hs_error;
|
1534
|
+
}
|
1535
|
+
|
1536
|
+
// Compute the master secret.
|
1537
|
+
hs->new_session->secret_length = tls1_generate_master_secret(
|
1538
|
+
hs, hs->new_session->secret, premaster_secret);
|
1539
|
+
if (hs->new_session->secret_length == 0) {
|
1540
|
+
return ssl_hs_error;
|
1541
|
+
}
|
1542
|
+
hs->new_session->extended_master_secret = hs->extended_master_secret;
|
1543
|
+
CONSTTIME_DECLASSIFY(hs->new_session->secret, hs->new_session->secret_length);
|
1544
|
+
hs->can_release_private_key = true;
|
1545
|
+
|
1546
|
+
ssl->method->next_message(ssl);
|
1547
|
+
hs->state = state12_read_client_certificate_verify;
|
1548
|
+
return ssl_hs_ok;
|
1549
|
+
}
|
1550
|
+
|
1551
|
+
static enum ssl_hs_wait_t do_read_client_certificate_verify(SSL_HANDSHAKE *hs) {
|
1552
|
+
SSL *const ssl = hs->ssl;
|
1553
|
+
|
1554
|
+
// Only RSA and ECDSA client certificates are supported, so a
|
1555
|
+
// CertificateVerify is required if and only if there's a client certificate.
|
1556
|
+
if (!hs->peer_pubkey) {
|
1557
|
+
hs->transcript.FreeBuffer();
|
1558
|
+
hs->state = state12_read_change_cipher_spec;
|
1559
|
+
return ssl_hs_ok;
|
1560
|
+
}
|
1561
|
+
|
1562
|
+
SSLMessage msg;
|
1563
|
+
if (!ssl->method->get_message(ssl, &msg)) {
|
1564
|
+
return ssl_hs_read_message;
|
1565
|
+
}
|
1566
|
+
|
1567
|
+
if (!ssl_check_message_type(ssl, msg, SSL3_MT_CERTIFICATE_VERIFY)) {
|
1568
|
+
return ssl_hs_error;
|
1569
|
+
}
|
1570
|
+
|
1571
|
+
// The peer certificate must be valid for signing.
|
1572
|
+
const CRYPTO_BUFFER *leaf =
|
1573
|
+
sk_CRYPTO_BUFFER_value(hs->new_session->certs.get(), 0);
|
1574
|
+
CBS leaf_cbs;
|
1575
|
+
CRYPTO_BUFFER_init_CBS(leaf, &leaf_cbs);
|
1576
|
+
if (!ssl_cert_check_key_usage(&leaf_cbs, key_usage_digital_signature)) {
|
1577
|
+
return ssl_hs_error;
|
1578
|
+
}
|
1579
|
+
|
1580
|
+
CBS certificate_verify = msg.body, signature;
|
1581
|
+
|
1582
|
+
// Determine the signature algorithm.
|
1583
|
+
uint16_t signature_algorithm = 0;
|
1584
|
+
if (ssl_protocol_version(ssl) >= TLS1_2_VERSION) {
|
1585
|
+
if (!CBS_get_u16(&certificate_verify, &signature_algorithm)) {
|
1586
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_DECODE_ERROR);
|
1587
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR);
|
1588
|
+
return ssl_hs_error;
|
1589
|
+
}
|
1590
|
+
uint8_t alert = SSL_AD_DECODE_ERROR;
|
1591
|
+
if (!tls12_check_peer_sigalg(hs, &alert, signature_algorithm)) {
|
1592
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, alert);
|
1593
|
+
return ssl_hs_error;
|
1594
|
+
}
|
1595
|
+
hs->new_session->peer_signature_algorithm = signature_algorithm;
|
1596
|
+
} else if (!tls1_get_legacy_signature_algorithm(&signature_algorithm,
|
1597
|
+
hs->peer_pubkey.get())) {
|
1598
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_PEER_ERROR_UNSUPPORTED_CERTIFICATE_TYPE);
|
1599
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_UNSUPPORTED_CERTIFICATE);
|
1600
|
+
return ssl_hs_error;
|
1601
|
+
}
|
1602
|
+
|
1603
|
+
// Parse and verify the signature.
|
1604
|
+
if (!CBS_get_u16_length_prefixed(&certificate_verify, &signature) ||
|
1605
|
+
CBS_len(&certificate_verify) != 0) {
|
1606
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_DECODE_ERROR);
|
1607
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR);
|
1608
|
+
return ssl_hs_error;
|
1609
|
+
}
|
1610
|
+
|
1611
|
+
if (!ssl_public_key_verify(ssl, signature, signature_algorithm,
|
1612
|
+
hs->peer_pubkey.get(), hs->transcript.buffer())) {
|
1613
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_BAD_SIGNATURE);
|
1614
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECRYPT_ERROR);
|
1615
|
+
return ssl_hs_error;
|
1616
|
+
}
|
1617
|
+
|
1618
|
+
// The handshake buffer is no longer necessary, and we may hash the current
|
1619
|
+
// message.
|
1620
|
+
hs->transcript.FreeBuffer();
|
1621
|
+
if (!ssl_hash_message(hs, msg)) {
|
1622
|
+
return ssl_hs_error;
|
1623
|
+
}
|
1624
|
+
|
1625
|
+
ssl->method->next_message(ssl);
|
1626
|
+
hs->state = state12_read_change_cipher_spec;
|
1627
|
+
return ssl_hs_ok;
|
1628
|
+
}
|
1629
|
+
|
1630
|
+
static enum ssl_hs_wait_t do_read_change_cipher_spec(SSL_HANDSHAKE *hs) {
|
1631
|
+
if (hs->handback && hs->ssl->session != NULL) {
|
1632
|
+
return ssl_hs_handback;
|
1633
|
+
}
|
1634
|
+
hs->state = state12_process_change_cipher_spec;
|
1635
|
+
return ssl_hs_read_change_cipher_spec;
|
1636
|
+
}
|
1637
|
+
|
1638
|
+
static enum ssl_hs_wait_t do_process_change_cipher_spec(SSL_HANDSHAKE *hs) {
|
1639
|
+
if (!tls1_change_cipher_state(hs, evp_aead_open)) {
|
1640
|
+
return ssl_hs_error;
|
1641
|
+
}
|
1642
|
+
|
1643
|
+
hs->state = state12_read_next_proto;
|
1644
|
+
return ssl_hs_ok;
|
1645
|
+
}
|
1646
|
+
|
1647
|
+
static enum ssl_hs_wait_t do_read_next_proto(SSL_HANDSHAKE *hs) {
|
1648
|
+
SSL *const ssl = hs->ssl;
|
1649
|
+
|
1650
|
+
if (!hs->next_proto_neg_seen) {
|
1651
|
+
hs->state = state12_read_channel_id;
|
1652
|
+
return ssl_hs_ok;
|
1653
|
+
}
|
1654
|
+
|
1655
|
+
SSLMessage msg;
|
1656
|
+
if (!ssl->method->get_message(ssl, &msg)) {
|
1657
|
+
return ssl_hs_read_message;
|
1658
|
+
}
|
1659
|
+
|
1660
|
+
if (!ssl_check_message_type(ssl, msg, SSL3_MT_NEXT_PROTO) ||
|
1661
|
+
!ssl_hash_message(hs, msg)) {
|
1662
|
+
return ssl_hs_error;
|
1663
|
+
}
|
1664
|
+
|
1665
|
+
CBS next_protocol = msg.body, selected_protocol, padding;
|
1666
|
+
if (!CBS_get_u8_length_prefixed(&next_protocol, &selected_protocol) ||
|
1667
|
+
!CBS_get_u8_length_prefixed(&next_protocol, &padding) ||
|
1668
|
+
CBS_len(&next_protocol) != 0) {
|
1669
|
+
OPENSSL_PUT_ERROR(SSL, SSL_R_DECODE_ERROR);
|
1670
|
+
ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR);
|
1671
|
+
return ssl_hs_error;
|
1672
|
+
}
|
1673
|
+
|
1674
|
+
if (!ssl->s3->next_proto_negotiated.CopyFrom(selected_protocol)) {
|
1675
|
+
return ssl_hs_error;
|
1676
|
+
}
|
1677
|
+
|
1678
|
+
ssl->method->next_message(ssl);
|
1679
|
+
hs->state = state12_read_channel_id;
|
1680
|
+
return ssl_hs_ok;
|
1681
|
+
}
|
1682
|
+
|
1683
|
+
static enum ssl_hs_wait_t do_read_channel_id(SSL_HANDSHAKE *hs) {
|
1684
|
+
SSL *const ssl = hs->ssl;
|
1685
|
+
|
1686
|
+
if (!hs->channel_id_negotiated) {
|
1687
|
+
hs->state = state12_read_client_finished;
|
1688
|
+
return ssl_hs_ok;
|
1689
|
+
}
|
1690
|
+
|
1691
|
+
SSLMessage msg;
|
1692
|
+
if (!ssl->method->get_message(ssl, &msg)) {
|
1693
|
+
return ssl_hs_read_message;
|
1694
|
+
}
|
1695
|
+
|
1696
|
+
if (!ssl_check_message_type(ssl, msg, SSL3_MT_CHANNEL_ID) ||
|
1697
|
+
!tls1_verify_channel_id(hs, msg) ||
|
1698
|
+
!ssl_hash_message(hs, msg)) {
|
1699
|
+
return ssl_hs_error;
|
1700
|
+
}
|
1701
|
+
|
1702
|
+
ssl->method->next_message(ssl);
|
1703
|
+
hs->state = state12_read_client_finished;
|
1704
|
+
return ssl_hs_ok;
|
1705
|
+
}
|
1706
|
+
|
1707
|
+
static enum ssl_hs_wait_t do_read_client_finished(SSL_HANDSHAKE *hs) {
|
1708
|
+
SSL *const ssl = hs->ssl;
|
1709
|
+
enum ssl_hs_wait_t wait = ssl_get_finished(hs);
|
1710
|
+
if (wait != ssl_hs_ok) {
|
1711
|
+
return wait;
|
1712
|
+
}
|
1713
|
+
|
1714
|
+
if (ssl->session != NULL) {
|
1715
|
+
hs->state = state12_finish_server_handshake;
|
1716
|
+
} else {
|
1717
|
+
hs->state = state12_send_server_finished;
|
1718
|
+
}
|
1719
|
+
|
1720
|
+
// If this is a full handshake with ChannelID then record the handshake
|
1721
|
+
// hashes in |hs->new_session| in case we need them to verify a
|
1722
|
+
// ChannelID signature on a resumption of this session in the future.
|
1723
|
+
if (ssl->session == NULL && ssl->s3->channel_id_valid &&
|
1724
|
+
!tls1_record_handshake_hashes_for_channel_id(hs)) {
|
1725
|
+
return ssl_hs_error;
|
1726
|
+
}
|
1727
|
+
|
1728
|
+
return ssl_hs_ok;
|
1729
|
+
}
|
1730
|
+
|
1731
|
+
static enum ssl_hs_wait_t do_send_server_finished(SSL_HANDSHAKE *hs) {
|
1732
|
+
SSL *const ssl = hs->ssl;
|
1733
|
+
|
1734
|
+
if (hs->ticket_expected) {
|
1735
|
+
const SSL_SESSION *session;
|
1736
|
+
UniquePtr<SSL_SESSION> session_copy;
|
1737
|
+
if (ssl->session == NULL) {
|
1738
|
+
// Fix the timeout to measure from the ticket issuance time.
|
1739
|
+
ssl_session_rebase_time(ssl, hs->new_session.get());
|
1740
|
+
session = hs->new_session.get();
|
1741
|
+
} else {
|
1742
|
+
// We are renewing an existing session. Duplicate the session to adjust
|
1743
|
+
// the timeout.
|
1744
|
+
session_copy =
|
1745
|
+
SSL_SESSION_dup(ssl->session.get(), SSL_SESSION_INCLUDE_NONAUTH);
|
1746
|
+
if (!session_copy) {
|
1747
|
+
return ssl_hs_error;
|
1748
|
+
}
|
1749
|
+
|
1750
|
+
ssl_session_rebase_time(ssl, session_copy.get());
|
1751
|
+
session = session_copy.get();
|
1752
|
+
}
|
1753
|
+
|
1754
|
+
ScopedCBB cbb;
|
1755
|
+
CBB body, ticket;
|
1756
|
+
if (!ssl->method->init_message(ssl, cbb.get(), &body,
|
1757
|
+
SSL3_MT_NEW_SESSION_TICKET) ||
|
1758
|
+
!CBB_add_u32(&body, session->timeout) ||
|
1759
|
+
!CBB_add_u16_length_prefixed(&body, &ticket) ||
|
1760
|
+
!ssl_encrypt_ticket(hs, &ticket, session) ||
|
1761
|
+
!ssl_add_message_cbb(ssl, cbb.get())) {
|
1762
|
+
return ssl_hs_error;
|
1763
|
+
}
|
1764
|
+
}
|
1765
|
+
|
1766
|
+
if (!ssl->method->add_change_cipher_spec(ssl) ||
|
1767
|
+
!tls1_change_cipher_state(hs, evp_aead_seal) ||
|
1768
|
+
!ssl_send_finished(hs)) {
|
1769
|
+
return ssl_hs_error;
|
1770
|
+
}
|
1771
|
+
|
1772
|
+
if (ssl->session != NULL) {
|
1773
|
+
hs->state = state12_read_change_cipher_spec;
|
1774
|
+
} else {
|
1775
|
+
hs->state = state12_finish_server_handshake;
|
1776
|
+
}
|
1777
|
+
return ssl_hs_flush;
|
1778
|
+
}
|
1779
|
+
|
1780
|
+
static enum ssl_hs_wait_t do_finish_server_handshake(SSL_HANDSHAKE *hs) {
|
1781
|
+
SSL *const ssl = hs->ssl;
|
1782
|
+
|
1783
|
+
if (hs->handback) {
|
1784
|
+
return ssl_hs_handback;
|
1785
|
+
}
|
1786
|
+
|
1787
|
+
ssl->method->on_handshake_complete(ssl);
|
1788
|
+
|
1789
|
+
// If we aren't retaining peer certificates then we can discard it now.
|
1790
|
+
if (hs->new_session != NULL &&
|
1791
|
+
hs->config->retain_only_sha256_of_client_certs) {
|
1792
|
+
hs->new_session->certs.reset();
|
1793
|
+
ssl->ctx->x509_method->session_clear(hs->new_session.get());
|
1794
|
+
}
|
1795
|
+
|
1796
|
+
bool has_new_session = hs->new_session != nullptr;
|
1797
|
+
if (has_new_session) {
|
1798
|
+
assert(ssl->session == nullptr);
|
1799
|
+
ssl->s3->established_session = std::move(hs->new_session);
|
1800
|
+
ssl->s3->established_session->not_resumable = false;
|
1801
|
+
} else {
|
1802
|
+
assert(ssl->session != nullptr);
|
1803
|
+
ssl->s3->established_session = UpRef(ssl->session);
|
1804
|
+
}
|
1805
|
+
|
1806
|
+
hs->handshake_finalized = true;
|
1807
|
+
ssl->s3->initial_handshake_complete = true;
|
1808
|
+
if (has_new_session) {
|
1809
|
+
ssl_update_cache(ssl);
|
1810
|
+
}
|
1811
|
+
|
1812
|
+
hs->state = state12_done;
|
1813
|
+
return ssl_hs_ok;
|
1814
|
+
}
|
1815
|
+
|
1816
|
+
enum ssl_hs_wait_t ssl_server_handshake(SSL_HANDSHAKE *hs) {
|
1817
|
+
while (hs->state != state12_done) {
|
1818
|
+
enum ssl_hs_wait_t ret = ssl_hs_error;
|
1819
|
+
enum tls12_server_hs_state_t state =
|
1820
|
+
static_cast<enum tls12_server_hs_state_t>(hs->state);
|
1821
|
+
switch (state) {
|
1822
|
+
case state12_start_accept:
|
1823
|
+
ret = do_start_accept(hs);
|
1824
|
+
break;
|
1825
|
+
case state12_read_client_hello:
|
1826
|
+
ret = do_read_client_hello(hs);
|
1827
|
+
break;
|
1828
|
+
case state12_read_client_hello_after_ech:
|
1829
|
+
ret = do_read_client_hello_after_ech(hs);
|
1830
|
+
break;
|
1831
|
+
case state12_select_certificate:
|
1832
|
+
ret = do_select_certificate(hs);
|
1833
|
+
break;
|
1834
|
+
case state12_tls13:
|
1835
|
+
ret = do_tls13(hs);
|
1836
|
+
break;
|
1837
|
+
case state12_select_parameters:
|
1838
|
+
ret = do_select_parameters(hs);
|
1839
|
+
break;
|
1840
|
+
case state12_send_server_hello:
|
1841
|
+
ret = do_send_server_hello(hs);
|
1842
|
+
break;
|
1843
|
+
case state12_send_server_certificate:
|
1844
|
+
ret = do_send_server_certificate(hs);
|
1845
|
+
break;
|
1846
|
+
case state12_send_server_key_exchange:
|
1847
|
+
ret = do_send_server_key_exchange(hs);
|
1848
|
+
break;
|
1849
|
+
case state12_send_server_hello_done:
|
1850
|
+
ret = do_send_server_hello_done(hs);
|
1851
|
+
break;
|
1852
|
+
case state12_read_client_certificate:
|
1853
|
+
ret = do_read_client_certificate(hs);
|
1854
|
+
break;
|
1855
|
+
case state12_verify_client_certificate:
|
1856
|
+
ret = do_verify_client_certificate(hs);
|
1857
|
+
break;
|
1858
|
+
case state12_read_client_key_exchange:
|
1859
|
+
ret = do_read_client_key_exchange(hs);
|
1860
|
+
break;
|
1861
|
+
case state12_read_client_certificate_verify:
|
1862
|
+
ret = do_read_client_certificate_verify(hs);
|
1863
|
+
break;
|
1864
|
+
case state12_read_change_cipher_spec:
|
1865
|
+
ret = do_read_change_cipher_spec(hs);
|
1866
|
+
break;
|
1867
|
+
case state12_process_change_cipher_spec:
|
1868
|
+
ret = do_process_change_cipher_spec(hs);
|
1869
|
+
break;
|
1870
|
+
case state12_read_next_proto:
|
1871
|
+
ret = do_read_next_proto(hs);
|
1872
|
+
break;
|
1873
|
+
case state12_read_channel_id:
|
1874
|
+
ret = do_read_channel_id(hs);
|
1875
|
+
break;
|
1876
|
+
case state12_read_client_finished:
|
1877
|
+
ret = do_read_client_finished(hs);
|
1878
|
+
break;
|
1879
|
+
case state12_send_server_finished:
|
1880
|
+
ret = do_send_server_finished(hs);
|
1881
|
+
break;
|
1882
|
+
case state12_finish_server_handshake:
|
1883
|
+
ret = do_finish_server_handshake(hs);
|
1884
|
+
break;
|
1885
|
+
case state12_done:
|
1886
|
+
ret = ssl_hs_ok;
|
1887
|
+
break;
|
1888
|
+
}
|
1889
|
+
|
1890
|
+
if (hs->state != state) {
|
1891
|
+
ssl_do_info_callback(hs->ssl, SSL_CB_ACCEPT_LOOP, 1);
|
1892
|
+
}
|
1893
|
+
|
1894
|
+
if (ret != ssl_hs_ok) {
|
1895
|
+
return ret;
|
1896
|
+
}
|
1897
|
+
}
|
1898
|
+
|
1899
|
+
ssl_do_info_callback(hs->ssl, SSL_CB_HANDSHAKE_DONE, 1);
|
1900
|
+
return ssl_hs_ok;
|
1901
|
+
}
|
1902
|
+
|
1903
|
+
const char *ssl_server_handshake_state(SSL_HANDSHAKE *hs) {
|
1904
|
+
enum tls12_server_hs_state_t state =
|
1905
|
+
static_cast<enum tls12_server_hs_state_t>(hs->state);
|
1906
|
+
switch (state) {
|
1907
|
+
case state12_start_accept:
|
1908
|
+
return "TLS server start_accept";
|
1909
|
+
case state12_read_client_hello:
|
1910
|
+
return "TLS server read_client_hello";
|
1911
|
+
case state12_read_client_hello_after_ech:
|
1912
|
+
return "TLS server read_client_hello_after_ech";
|
1913
|
+
case state12_select_certificate:
|
1914
|
+
return "TLS server select_certificate";
|
1915
|
+
case state12_tls13:
|
1916
|
+
return tls13_server_handshake_state(hs);
|
1917
|
+
case state12_select_parameters:
|
1918
|
+
return "TLS server select_parameters";
|
1919
|
+
case state12_send_server_hello:
|
1920
|
+
return "TLS server send_server_hello";
|
1921
|
+
case state12_send_server_certificate:
|
1922
|
+
return "TLS server send_server_certificate";
|
1923
|
+
case state12_send_server_key_exchange:
|
1924
|
+
return "TLS server send_server_key_exchange";
|
1925
|
+
case state12_send_server_hello_done:
|
1926
|
+
return "TLS server send_server_hello_done";
|
1927
|
+
case state12_read_client_certificate:
|
1928
|
+
return "TLS server read_client_certificate";
|
1929
|
+
case state12_verify_client_certificate:
|
1930
|
+
return "TLS server verify_client_certificate";
|
1931
|
+
case state12_read_client_key_exchange:
|
1932
|
+
return "TLS server read_client_key_exchange";
|
1933
|
+
case state12_read_client_certificate_verify:
|
1934
|
+
return "TLS server read_client_certificate_verify";
|
1935
|
+
case state12_read_change_cipher_spec:
|
1936
|
+
return "TLS server read_change_cipher_spec";
|
1937
|
+
case state12_process_change_cipher_spec:
|
1938
|
+
return "TLS server process_change_cipher_spec";
|
1939
|
+
case state12_read_next_proto:
|
1940
|
+
return "TLS server read_next_proto";
|
1941
|
+
case state12_read_channel_id:
|
1942
|
+
return "TLS server read_channel_id";
|
1943
|
+
case state12_read_client_finished:
|
1944
|
+
return "TLS server read_client_finished";
|
1945
|
+
case state12_send_server_finished:
|
1946
|
+
return "TLS server send_server_finished";
|
1947
|
+
case state12_finish_server_handshake:
|
1948
|
+
return "TLS server finish_server_handshake";
|
1949
|
+
case state12_done:
|
1950
|
+
return "TLS server done";
|
1951
|
+
}
|
1952
|
+
|
1953
|
+
return "TLS server unknown";
|
1954
|
+
}
|
1955
|
+
|
1956
|
+
BSSL_NAMESPACE_END
|