grpc 1.53.2 → 1.54.0

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of grpc might be problematic. Click here for more details.

Files changed (693) hide show
  1. checksums.yaml +4 -4
  2. data/Makefile +78 -66
  3. data/include/grpc/event_engine/event_engine.h +30 -14
  4. data/include/grpc/grpc_security.h +4 -0
  5. data/include/grpc/support/port_platform.h +4 -4
  6. data/src/core/ext/filters/backend_metrics/backend_metric_filter.cc +11 -0
  7. data/src/core/ext/filters/client_channel/backend_metric.cc +6 -0
  8. data/src/core/ext/filters/client_channel/backup_poller.cc +2 -11
  9. data/src/core/ext/filters/client_channel/backup_poller.h +0 -3
  10. data/src/core/ext/filters/client_channel/client_channel.cc +848 -813
  11. data/src/core/ext/filters/client_channel/client_channel.h +131 -173
  12. data/src/core/ext/filters/client_channel/client_channel_internal.h +114 -0
  13. data/src/core/ext/filters/client_channel/config_selector.h +4 -3
  14. data/src/core/ext/filters/client_channel/lb_policy/backend_metric_data.h +6 -1
  15. data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb.cc +17 -18
  16. data/src/core/ext/filters/client_channel/lb_policy/ring_hash/ring_hash.cc +134 -151
  17. data/src/core/ext/filters/client_channel/lb_policy/rls/rls.cc +2 -16
  18. data/src/core/ext/filters/client_channel/lb_policy/round_robin/round_robin.cc +14 -10
  19. data/src/core/ext/filters/client_channel/lb_policy/weighted_round_robin/weighted_round_robin.cc +68 -30
  20. data/src/core/ext/filters/client_channel/lb_policy/weighted_target/weighted_target.cc +11 -3
  21. data/src/core/ext/filters/client_channel/lb_policy/xds/xds_cluster_impl.cc +8 -1
  22. data/src/core/ext/filters/client_channel/lb_policy/xds/xds_cluster_manager.cc +2 -5
  23. data/src/core/ext/filters/client_channel/lb_policy/xds/xds_override_host.cc +2 -2
  24. data/src/core/ext/filters/client_channel/resolver/dns/c_ares/dns_resolver_ares.cc +30 -38
  25. data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver_windows.cc +4 -4
  26. data/src/core/ext/filters/client_channel/resolver/dns/native/dns_resolver.cc +20 -26
  27. data/src/core/ext/filters/client_channel/resolver/google_c2p/google_c2p_resolver.cc +31 -179
  28. data/src/core/ext/filters/client_channel/resolver/polling_resolver.cc +1 -2
  29. data/src/core/ext/filters/client_channel/resolver/polling_resolver.h +1 -2
  30. data/src/core/ext/filters/client_channel/resolver/xds/xds_resolver.cc +4 -2
  31. data/src/core/ext/filters/client_channel/retry_filter.cc +95 -102
  32. data/src/core/ext/filters/client_channel/subchannel.cc +2 -4
  33. data/src/core/ext/filters/client_channel/subchannel_stream_client.cc +26 -27
  34. data/src/core/ext/filters/client_channel/subchannel_stream_client.h +8 -5
  35. data/src/core/ext/filters/http/client/http_client_filter.cc +3 -3
  36. data/src/core/ext/filters/http/http_filters_plugin.cc +1 -12
  37. data/src/core/ext/filters/http/message_compress/compression_filter.cc +27 -11
  38. data/src/core/ext/filters/message_size/message_size_filter.cc +141 -224
  39. data/src/core/ext/filters/message_size/message_size_filter.h +48 -3
  40. data/src/core/ext/filters/stateful_session/stateful_session_filter.cc +7 -6
  41. data/src/core/ext/gcp/metadata_query.cc +142 -0
  42. data/src/core/ext/gcp/metadata_query.h +82 -0
  43. data/src/core/ext/transport/chttp2/server/chttp2_server.cc +70 -55
  44. data/src/core/ext/transport/chttp2/transport/bin_encoder.cc +8 -12
  45. data/src/core/ext/transport/chttp2/transport/bin_encoder.h +1 -5
  46. data/src/core/ext/transport/chttp2/transport/chttp2_transport.cc +116 -58
  47. data/src/core/ext/transport/chttp2/transport/flow_control.cc +5 -2
  48. data/src/core/ext/transport/chttp2/transport/flow_control.h +2 -1
  49. data/src/core/ext/transport/chttp2/transport/frame_settings.cc +4 -1
  50. data/src/core/ext/transport/chttp2/transport/hpack_encoder.cc +222 -118
  51. data/src/core/ext/transport/chttp2/transport/hpack_encoder.h +113 -295
  52. data/src/core/ext/transport/chttp2/transport/hpack_encoder_table.cc +0 -2
  53. data/src/core/ext/transport/chttp2/transport/hpack_encoder_table.h +0 -2
  54. data/src/core/ext/transport/chttp2/transport/hpack_parser.cc +277 -451
  55. data/src/core/ext/transport/chttp2/transport/hpack_parser.h +1 -3
  56. data/src/core/ext/transport/chttp2/transport/hpack_parser_table.cc +12 -14
  57. data/src/core/ext/transport/chttp2/transport/hpack_parser_table.h +1 -9
  58. data/src/core/ext/transport/chttp2/transport/internal.h +16 -3
  59. data/src/core/ext/transport/chttp2/transport/parsing.cc +3 -2
  60. data/src/core/ext/transport/chttp2/transport/writing.cc +10 -5
  61. data/src/core/ext/transport/inproc/inproc_transport.cc +20 -14
  62. data/src/core/ext/upb-generated/envoy/config/bootstrap/v3/bootstrap.upb.c +5 -3
  63. data/src/core/ext/upb-generated/envoy/config/bootstrap/v3/bootstrap.upb.h +22 -0
  64. data/src/core/ext/upb-generated/envoy/config/core/v3/protocol.upb.c +5 -3
  65. data/src/core/ext/upb-generated/envoy/config/core/v3/protocol.upb.h +22 -0
  66. data/src/core/ext/upb-generated/envoy/config/core/v3/proxy_protocol.upb.c +23 -5
  67. data/src/core/ext/upb-generated/envoy/config/core/v3/proxy_protocol.upb.h +94 -3
  68. data/src/core/ext/upb-generated/envoy/config/listener/v3/listener.upb.c +23 -2
  69. data/src/core/ext/upb-generated/envoy/config/listener/v3/listener.upb.h +120 -0
  70. data/src/core/ext/upb-generated/envoy/config/listener/v3/quic_config.upb.c +6 -3
  71. data/src/core/ext/upb-generated/envoy/config/listener/v3/quic_config.upb.h +22 -0
  72. data/src/core/ext/upb-generated/envoy/config/rbac/v3/rbac.upb.c +24 -6
  73. data/src/core/ext/upb-generated/envoy/config/rbac/v3/rbac.upb.h +111 -12
  74. data/src/core/ext/upb-generated/envoy/config/route/v3/route_components.upb.c +9 -7
  75. data/src/core/ext/upb-generated/envoy/config/route/v3/route_components.upb.h +27 -9
  76. data/src/core/ext/upb-generated/envoy/config/trace/v3/opentelemetry.upb.c +0 -1
  77. data/src/core/ext/upb-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upb.c +11 -7
  78. data/src/core/ext/upb-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upb.h +56 -12
  79. data/src/core/ext/upb-generated/envoy/extensions/load_balancing_policies/client_side_weighted_round_robin/v3/client_side_weighted_round_robin.upb.c +5 -3
  80. data/src/core/ext/upb-generated/envoy/extensions/load_balancing_policies/client_side_weighted_round_robin/v3/client_side_weighted_round_robin.upb.h +24 -0
  81. data/src/core/ext/upb-generated/envoy/extensions/load_balancing_policies/ring_hash/v3/ring_hash.upb.c +5 -3
  82. data/src/core/ext/upb-generated/envoy/extensions/load_balancing_policies/ring_hash/v3/ring_hash.upb.h +24 -0
  83. data/src/core/ext/upb-generated/envoy/type/matcher/v3/http_inputs.upb.c +13 -2
  84. data/src/core/ext/upb-generated/envoy/type/matcher/v3/http_inputs.upb.h +49 -0
  85. data/src/core/ext/upb-generated/xds/data/orca/v3/orca_load_report.upb.c +24 -9
  86. data/src/core/ext/upb-generated/xds/data/orca/v3/orca_load_report.upb.h +66 -12
  87. data/src/core/ext/upbdefs-generated/envoy/config/bootstrap/v3/bootstrap.upbdefs.c +191 -187
  88. data/src/core/ext/upbdefs-generated/envoy/config/core/v3/protocol.upbdefs.c +139 -136
  89. data/src/core/ext/upbdefs-generated/envoy/config/core/v3/proxy_protocol.upbdefs.c +31 -15
  90. data/src/core/ext/upbdefs-generated/envoy/config/core/v3/proxy_protocol.upbdefs.h +5 -0
  91. data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/listener.upbdefs.c +12 -9
  92. data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/listener.upbdefs.h +15 -0
  93. data/src/core/ext/upbdefs-generated/envoy/config/listener/v3/quic_config.upbdefs.c +54 -45
  94. data/src/core/ext/upbdefs-generated/envoy/config/rbac/v3/rbac.upbdefs.c +135 -119
  95. data/src/core/ext/upbdefs-generated/envoy/config/rbac/v3/rbac.upbdefs.h +5 -0
  96. data/src/core/ext/upbdefs-generated/envoy/config/route/v3/route_components.upbdefs.c +100 -97
  97. data/src/core/ext/upbdefs-generated/envoy/config/trace/v3/opentelemetry.upbdefs.c +15 -18
  98. data/src/core/ext/upbdefs-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upbdefs.c +272 -264
  99. data/src/core/ext/upbdefs-generated/envoy/extensions/transport_sockets/tls/v3/tls.upbdefs.c +117 -117
  100. data/src/core/ext/upbdefs-generated/envoy/service/discovery/v3/ads.upbdefs.c +5 -5
  101. data/src/core/ext/upbdefs-generated/envoy/service/load_stats/v3/lrs.upbdefs.c +5 -5
  102. data/src/core/ext/upbdefs-generated/envoy/service/status/v3/csds.upbdefs.c +5 -5
  103. data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/http_inputs.upbdefs.c +12 -9
  104. data/src/core/ext/upbdefs-generated/envoy/type/matcher/v3/http_inputs.upbdefs.h +5 -0
  105. data/src/core/ext/xds/xds_channel_stack_modifier.cc +1 -2
  106. data/src/core/ext/xds/xds_client_stats.cc +29 -15
  107. data/src/core/ext/xds/xds_client_stats.h +24 -20
  108. data/src/core/ext/xds/xds_endpoint.cc +5 -2
  109. data/src/core/ext/xds/xds_endpoint.h +9 -1
  110. data/src/core/ext/xds/xds_http_rbac_filter.cc +1 -1
  111. data/src/core/ext/xds/xds_lb_policy_registry.cc +13 -0
  112. data/src/core/ext/xds/xds_transport_grpc.cc +1 -1
  113. data/src/core/lib/channel/call_finalization.h +1 -1
  114. data/src/core/lib/channel/call_tracer.cc +51 -0
  115. data/src/core/lib/channel/call_tracer.h +101 -38
  116. data/src/core/lib/channel/connected_channel.cc +483 -1050
  117. data/src/core/lib/channel/context.h +8 -1
  118. data/src/core/lib/channel/promise_based_filter.cc +106 -42
  119. data/src/core/lib/channel/promise_based_filter.h +27 -13
  120. data/src/core/lib/channel/server_call_tracer_filter.cc +110 -0
  121. data/src/core/lib/config/config_vars.cc +151 -0
  122. data/src/core/lib/config/config_vars.h +127 -0
  123. data/src/core/lib/config/config_vars_non_generated.cc +51 -0
  124. data/src/core/lib/config/load_config.cc +66 -0
  125. data/src/core/lib/config/load_config.h +49 -0
  126. data/src/core/lib/debug/trace.cc +5 -6
  127. data/src/core/lib/debug/trace.h +0 -5
  128. data/src/core/lib/event_engine/event_engine.cc +37 -2
  129. data/src/core/lib/event_engine/handle_containers.h +7 -22
  130. data/src/core/lib/event_engine/memory_allocator_factory.h +47 -0
  131. data/src/core/lib/event_engine/posix_engine/ev_poll_posix.cc +0 -4
  132. data/src/core/lib/event_engine/posix_engine/event_poller_posix_default.cc +3 -9
  133. data/src/core/lib/event_engine/posix_engine/posix_endpoint.cc +48 -15
  134. data/src/core/lib/event_engine/posix_engine/posix_endpoint.h +8 -8
  135. data/src/core/lib/event_engine/posix_engine/posix_engine.cc +6 -5
  136. data/src/core/lib/event_engine/posix_engine/posix_engine.h +0 -1
  137. data/src/core/lib/event_engine/posix_engine/posix_engine_listener.cc +6 -32
  138. data/src/core/lib/event_engine/posix_engine/posix_engine_listener.h +0 -3
  139. data/src/core/lib/event_engine/posix_engine/tcp_socket_utils.cc +27 -18
  140. data/src/core/lib/event_engine/posix_engine/tcp_socket_utils.h +0 -3
  141. data/src/core/lib/event_engine/resolved_address.cc +2 -1
  142. data/src/core/lib/event_engine/windows/win_socket.cc +0 -1
  143. data/src/core/lib/event_engine/windows/windows_endpoint.cc +129 -82
  144. data/src/core/lib/event_engine/windows/windows_endpoint.h +21 -5
  145. data/src/core/lib/event_engine/windows/windows_engine.cc +39 -18
  146. data/src/core/lib/event_engine/windows/windows_engine.h +2 -1
  147. data/src/core/lib/event_engine/windows/windows_listener.cc +370 -0
  148. data/src/core/lib/event_engine/windows/windows_listener.h +155 -0
  149. data/src/core/lib/experiments/config.cc +3 -10
  150. data/src/core/lib/experiments/experiments.cc +7 -0
  151. data/src/core/lib/experiments/experiments.h +9 -1
  152. data/src/core/lib/gpr/log.cc +15 -28
  153. data/src/core/lib/gprpp/fork.cc +8 -14
  154. data/src/core/lib/gprpp/orphanable.h +4 -3
  155. data/src/core/lib/gprpp/per_cpu.h +9 -3
  156. data/src/core/lib/gprpp/{thd_posix.cc → posix/thd.cc} +49 -37
  157. data/src/core/lib/gprpp/ref_counted.h +33 -34
  158. data/src/core/lib/gprpp/thd.h +16 -0
  159. data/src/core/lib/gprpp/time.cc +1 -0
  160. data/src/core/lib/gprpp/time.h +4 -4
  161. data/src/core/lib/gprpp/{thd_windows.cc → windows/thd.cc} +2 -2
  162. data/src/core/lib/iomgr/call_combiner.h +2 -2
  163. data/src/core/lib/iomgr/endpoint_cfstream.cc +4 -2
  164. data/src/core/lib/iomgr/ev_posix.cc +13 -53
  165. data/src/core/lib/iomgr/ev_posix.h +0 -3
  166. data/src/core/lib/iomgr/event_engine_shims/endpoint.cc +103 -76
  167. data/src/core/lib/iomgr/iomgr.cc +4 -8
  168. data/src/core/lib/iomgr/iomgr_windows.cc +8 -2
  169. data/src/core/lib/iomgr/pollset_set_windows.cc +9 -9
  170. data/src/core/lib/iomgr/pollset_windows.cc +1 -1
  171. data/src/core/lib/iomgr/socket_utils_common_posix.cc +16 -3
  172. data/src/core/lib/iomgr/tcp_client_windows.cc +2 -2
  173. data/src/core/lib/iomgr/tcp_posix.cc +0 -1
  174. data/src/core/lib/iomgr/tcp_server_posix.cc +19 -55
  175. data/src/core/lib/iomgr/tcp_server_utils_posix.h +0 -12
  176. data/src/core/lib/iomgr/tcp_server_utils_posix_common.cc +0 -21
  177. data/src/core/lib/iomgr/tcp_server_windows.cc +176 -9
  178. data/src/core/lib/iomgr/tcp_windows.cc +12 -8
  179. data/src/core/lib/load_balancing/lb_policy.cc +9 -13
  180. data/src/core/lib/load_balancing/lb_policy.h +4 -2
  181. data/src/core/lib/promise/activity.cc +22 -6
  182. data/src/core/lib/promise/activity.h +61 -24
  183. data/src/core/lib/promise/cancel_callback.h +77 -0
  184. data/src/core/lib/promise/detail/basic_seq.h +1 -1
  185. data/src/core/lib/promise/detail/promise_factory.h +4 -0
  186. data/src/core/lib/promise/for_each.h +176 -0
  187. data/src/core/lib/promise/if.h +9 -0
  188. data/src/core/lib/promise/interceptor_list.h +23 -2
  189. data/src/core/lib/promise/latch.h +89 -3
  190. data/src/core/lib/promise/loop.h +13 -9
  191. data/src/core/lib/promise/map.h +7 -0
  192. data/src/core/lib/promise/party.cc +286 -0
  193. data/src/core/lib/promise/party.h +499 -0
  194. data/src/core/lib/promise/pipe.h +197 -57
  195. data/src/core/lib/promise/poll.h +48 -0
  196. data/src/core/lib/promise/promise.h +2 -2
  197. data/src/core/lib/resource_quota/arena.cc +19 -3
  198. data/src/core/lib/resource_quota/arena.h +119 -5
  199. data/src/core/lib/resource_quota/memory_quota.cc +1 -1
  200. data/src/core/lib/security/credentials/external/aws_external_account_credentials.cc +12 -35
  201. data/src/core/lib/security/credentials/external/aws_external_account_credentials.h +1 -0
  202. data/src/core/lib/security/credentials/google_default/google_default_credentials.cc +0 -59
  203. data/src/core/lib/security/credentials/oauth2/oauth2_credentials.cc +10 -5
  204. data/src/core/lib/security/credentials/oauth2/oauth2_credentials.h +1 -1
  205. data/src/core/lib/security/credentials/tls/grpc_tls_certificate_provider.cc +13 -0
  206. data/src/core/lib/security/credentials/tls/grpc_tls_certificate_provider.h +2 -0
  207. data/src/core/lib/security/security_connector/load_system_roots_supported.cc +5 -9
  208. data/src/core/lib/security/security_connector/ssl_utils.cc +11 -25
  209. data/src/core/lib/security/security_connector/tls/tls_security_connector.cc +12 -0
  210. data/src/core/lib/security/transport/secure_endpoint.cc +4 -2
  211. data/src/core/lib/security/transport/server_auth_filter.cc +20 -2
  212. data/src/core/lib/slice/slice.cc +1 -1
  213. data/src/core/lib/surface/builtins.cc +2 -0
  214. data/src/core/lib/surface/call.cc +926 -1024
  215. data/src/core/lib/surface/call.h +10 -0
  216. data/src/core/lib/surface/lame_client.cc +1 -0
  217. data/src/core/lib/surface/validate_metadata.cc +42 -43
  218. data/src/core/lib/surface/validate_metadata.h +0 -9
  219. data/src/core/lib/surface/version.cc +2 -2
  220. data/src/core/lib/transport/batch_builder.cc +179 -0
  221. data/src/core/lib/transport/batch_builder.h +468 -0
  222. data/src/core/lib/transport/bdp_estimator.cc +7 -7
  223. data/src/core/lib/transport/bdp_estimator.h +10 -6
  224. data/src/core/lib/transport/custom_metadata.h +30 -0
  225. data/src/core/lib/transport/metadata_batch.cc +5 -2
  226. data/src/core/lib/transport/metadata_batch.h +17 -113
  227. data/src/core/lib/transport/parsed_metadata.h +6 -16
  228. data/src/core/lib/transport/timeout_encoding.cc +6 -1
  229. data/src/core/lib/transport/transport.cc +30 -2
  230. data/src/core/lib/transport/transport.h +70 -14
  231. data/src/core/lib/transport/transport_impl.h +7 -0
  232. data/src/core/lib/transport/transport_op_string.cc +52 -42
  233. data/src/core/plugin_registry/grpc_plugin_registry.cc +2 -2
  234. data/src/core/tsi/alts/frame_protector/alts_frame_protector.cc +1 -0
  235. data/src/core/tsi/alts/handshaker/alts_handshaker_client.cc +21 -4
  236. data/src/core/tsi/alts/handshaker/alts_handshaker_client.h +5 -0
  237. data/src/core/tsi/alts/handshaker/alts_tsi_handshaker.cc +1 -1
  238. data/src/core/tsi/ssl_transport_security.cc +4 -2
  239. data/src/ruby/lib/grpc/version.rb +1 -1
  240. data/third_party/abseil-cpp/absl/base/config.h +1 -1
  241. data/third_party/abseil-cpp/absl/flags/commandlineflag.cc +34 -0
  242. data/third_party/abseil-cpp/absl/flags/commandlineflag.h +200 -0
  243. data/third_party/abseil-cpp/absl/flags/config.h +68 -0
  244. data/third_party/abseil-cpp/absl/flags/declare.h +73 -0
  245. data/third_party/abseil-cpp/absl/flags/flag.cc +38 -0
  246. data/third_party/abseil-cpp/absl/flags/flag.h +310 -0
  247. data/{src/core/lib/gprpp/global_config_custom.h → third_party/abseil-cpp/absl/flags/internal/commandlineflag.cc} +11 -14
  248. data/third_party/abseil-cpp/absl/flags/internal/commandlineflag.h +68 -0
  249. data/third_party/abseil-cpp/absl/flags/internal/flag.cc +615 -0
  250. data/third_party/abseil-cpp/absl/flags/internal/flag.h +800 -0
  251. data/third_party/abseil-cpp/absl/flags/internal/flag_msvc.inc +116 -0
  252. data/third_party/abseil-cpp/absl/flags/internal/path_util.h +62 -0
  253. data/third_party/abseil-cpp/absl/flags/internal/private_handle_accessor.cc +65 -0
  254. data/third_party/abseil-cpp/absl/flags/internal/private_handle_accessor.h +61 -0
  255. data/third_party/abseil-cpp/absl/flags/internal/program_name.cc +60 -0
  256. data/third_party/abseil-cpp/absl/flags/internal/program_name.h +50 -0
  257. data/third_party/abseil-cpp/absl/flags/internal/registry.h +97 -0
  258. data/third_party/abseil-cpp/absl/flags/internal/sequence_lock.h +187 -0
  259. data/third_party/abseil-cpp/absl/flags/marshalling.cc +241 -0
  260. data/third_party/abseil-cpp/absl/flags/marshalling.h +356 -0
  261. data/third_party/abseil-cpp/absl/flags/reflection.cc +354 -0
  262. data/third_party/abseil-cpp/absl/flags/reflection.h +90 -0
  263. data/third_party/abseil-cpp/absl/flags/usage_config.cc +165 -0
  264. data/third_party/abseil-cpp/absl/flags/usage_config.h +135 -0
  265. data/third_party/abseil-cpp/absl/strings/internal/cord_internal.h +12 -8
  266. data/third_party/boringssl-with-bazel/err_data.c +728 -712
  267. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_bitstr.c +177 -177
  268. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_bool.c +28 -55
  269. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_d2i_fp.c +21 -23
  270. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_dup.c +20 -23
  271. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_gentm.c +66 -185
  272. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_i2d_fp.c +18 -21
  273. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_int.c +356 -311
  274. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_mbstr.c +174 -194
  275. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_object.c +146 -210
  276. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_octet.c +6 -9
  277. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_strex.c +346 -526
  278. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_strnid.c +110 -131
  279. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_time.c +130 -116
  280. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_type.c +93 -60
  281. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_utctm.c +93 -181
  282. data/third_party/boringssl-with-bazel/src/crypto/asn1/asn1_lib.c +242 -305
  283. data/third_party/boringssl-with-bazel/src/crypto/asn1/asn1_par.c +41 -18
  284. data/third_party/boringssl-with-bazel/src/crypto/asn1/asn_pack.c +30 -33
  285. data/third_party/boringssl-with-bazel/src/crypto/asn1/f_int.c +36 -33
  286. data/third_party/boringssl-with-bazel/src/crypto/asn1/f_string.c +29 -26
  287. data/third_party/boringssl-with-bazel/src/crypto/asn1/internal.h +133 -88
  288. data/third_party/boringssl-with-bazel/src/crypto/asn1/posix_time.c +230 -0
  289. data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_dec.c +791 -791
  290. data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_enc.c +526 -526
  291. data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_fre.c +114 -135
  292. data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_new.c +201 -207
  293. data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_typ.c +21 -26
  294. data/third_party/boringssl-with-bazel/src/crypto/asn1/tasn_utl.c +55 -68
  295. data/third_party/boringssl-with-bazel/src/crypto/base64/base64.c +2 -4
  296. data/third_party/boringssl-with-bazel/src/crypto/bio/bio.c +11 -7
  297. data/third_party/boringssl-with-bazel/src/crypto/bio/bio_mem.c +4 -4
  298. data/third_party/boringssl-with-bazel/src/crypto/bio/connect.c +15 -9
  299. data/third_party/boringssl-with-bazel/src/crypto/bio/fd.c +4 -4
  300. data/third_party/boringssl-with-bazel/src/crypto/bio/file.c +17 -10
  301. data/third_party/boringssl-with-bazel/src/crypto/bio/pair.c +1 -3
  302. data/third_party/boringssl-with-bazel/src/crypto/bio/printf.c +0 -13
  303. data/third_party/boringssl-with-bazel/src/crypto/bio/socket.c +3 -6
  304. data/third_party/boringssl-with-bazel/src/crypto/bio/socket_helper.c +2 -0
  305. data/third_party/boringssl-with-bazel/src/crypto/blake2/blake2.c +9 -5
  306. data/third_party/boringssl-with-bazel/src/crypto/bn_extra/convert.c +10 -23
  307. data/third_party/boringssl-with-bazel/src/crypto/buf/buf.c +2 -6
  308. data/third_party/boringssl-with-bazel/src/crypto/bytestring/asn1_compat.c +2 -1
  309. data/third_party/boringssl-with-bazel/src/crypto/bytestring/ber.c +29 -28
  310. data/third_party/boringssl-with-bazel/src/crypto/bytestring/cbb.c +161 -201
  311. data/third_party/boringssl-with-bazel/src/crypto/bytestring/cbs.c +254 -39
  312. data/third_party/boringssl-with-bazel/src/crypto/bytestring/internal.h +2 -2
  313. data/third_party/boringssl-with-bazel/src/crypto/chacha/chacha.c +0 -2
  314. data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/derive_key.c +4 -4
  315. data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_aesctrhmac.c +9 -8
  316. data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_aesgcmsiv.c +37 -75
  317. data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_chacha20poly1305.c +8 -10
  318. data/third_party/boringssl-with-bazel/src/crypto/{fipsmodule/cipher → cipher_extra}/e_des.c +100 -78
  319. data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_null.c +1 -0
  320. data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_rc2.c +1 -0
  321. data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_rc4.c +2 -0
  322. data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/e_tls.c +6 -12
  323. data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/internal.h +14 -11
  324. data/third_party/boringssl-with-bazel/src/crypto/conf/conf.c +6 -10
  325. data/third_party/boringssl-with-bazel/src/crypto/conf/conf_def.h +0 -1
  326. data/third_party/boringssl-with-bazel/src/crypto/conf/internal.h +12 -0
  327. data/third_party/boringssl-with-bazel/src/crypto/cpu_aarch64_apple.c +74 -0
  328. data/third_party/boringssl-with-bazel/src/crypto/cpu_aarch64_freebsd.c +62 -0
  329. data/third_party/boringssl-with-bazel/src/crypto/{cpu-aarch64-fuchsia.c → cpu_aarch64_fuchsia.c} +8 -7
  330. data/third_party/boringssl-with-bazel/src/crypto/{cpu-aarch64-linux.c → cpu_aarch64_linux.c} +6 -4
  331. data/third_party/boringssl-with-bazel/src/crypto/{cpu-aarch64-win.c → cpu_aarch64_win.c} +4 -4
  332. data/third_party/boringssl-with-bazel/src/crypto/{cpu-arm.c → cpu_arm.c} +1 -1
  333. data/third_party/boringssl-with-bazel/src/crypto/cpu_arm_freebsd.c +55 -0
  334. data/third_party/boringssl-with-bazel/src/crypto/{cpu-arm-linux.c → cpu_arm_linux.c} +11 -90
  335. data/third_party/boringssl-with-bazel/src/crypto/{cpu-arm-linux.h → cpu_arm_linux.h} +0 -38
  336. data/third_party/boringssl-with-bazel/src/crypto/{cpu-intel.c → cpu_intel.c} +1 -2
  337. data/third_party/boringssl-with-bazel/src/crypto/crypto.c +25 -20
  338. data/third_party/boringssl-with-bazel/src/crypto/curve25519/curve25519.c +16 -27
  339. data/third_party/boringssl-with-bazel/src/crypto/curve25519/spake25519.c +17 -32
  340. data/third_party/boringssl-with-bazel/src/crypto/{fipsmodule/des → des}/des.c +232 -232
  341. data/third_party/boringssl-with-bazel/src/crypto/{fipsmodule/des → des}/internal.h +1 -1
  342. data/third_party/boringssl-with-bazel/src/crypto/dh_extra/dh_asn1.c +1 -0
  343. data/third_party/boringssl-with-bazel/src/crypto/dh_extra/params.c +232 -29
  344. data/third_party/boringssl-with-bazel/src/crypto/digest_extra/digest_extra.c +0 -3
  345. data/third_party/boringssl-with-bazel/src/crypto/dsa/dsa.c +39 -16
  346. data/third_party/boringssl-with-bazel/src/crypto/dsa/dsa_asn1.c +37 -7
  347. data/third_party/boringssl-with-bazel/src/crypto/dsa/internal.h +3 -3
  348. data/third_party/boringssl-with-bazel/src/crypto/ec_extra/ec_asn1.c +11 -36
  349. data/third_party/boringssl-with-bazel/src/crypto/ec_extra/hash_to_curve.c +214 -99
  350. data/third_party/boringssl-with-bazel/src/crypto/ec_extra/internal.h +21 -5
  351. data/third_party/boringssl-with-bazel/src/crypto/ecdsa_extra/ecdsa_asn1.c +2 -4
  352. data/third_party/boringssl-with-bazel/src/crypto/err/err.c +83 -60
  353. data/third_party/boringssl-with-bazel/src/crypto/evp/evp.c +46 -12
  354. data/third_party/boringssl-with-bazel/src/crypto/evp/evp_asn1.c +3 -3
  355. data/third_party/boringssl-with-bazel/src/crypto/evp/evp_ctx.c +25 -23
  356. data/third_party/boringssl-with-bazel/src/crypto/evp/internal.h +43 -9
  357. data/third_party/boringssl-with-bazel/src/crypto/evp/p_dsa_asn1.c +75 -44
  358. data/third_party/boringssl-with-bazel/src/crypto/evp/p_ec.c +19 -25
  359. data/third_party/boringssl-with-bazel/src/crypto/evp/p_ec_asn1.c +96 -45
  360. data/third_party/boringssl-with-bazel/src/crypto/evp/p_ed25519.c +7 -8
  361. data/third_party/boringssl-with-bazel/src/crypto/evp/p_ed25519_asn1.c +26 -23
  362. data/third_party/boringssl-with-bazel/src/crypto/evp/p_hkdf.c +233 -0
  363. data/third_party/boringssl-with-bazel/src/crypto/evp/p_rsa.c +5 -5
  364. data/third_party/boringssl-with-bazel/src/crypto/evp/p_rsa_asn1.c +42 -25
  365. data/third_party/boringssl-with-bazel/src/crypto/evp/p_x25519.c +4 -5
  366. data/third_party/boringssl-with-bazel/src/crypto/evp/p_x25519_asn1.c +35 -47
  367. data/third_party/boringssl-with-bazel/src/crypto/evp/print.c +135 -244
  368. data/third_party/boringssl-with-bazel/src/crypto/evp/scrypt.c +2 -4
  369. data/third_party/boringssl-with-bazel/src/crypto/evp/sign.c +15 -10
  370. data/third_party/boringssl-with-bazel/src/crypto/ex_data.c +29 -15
  371. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/aes.c +0 -2
  372. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/aes_nohw.c +13 -14
  373. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/internal.h +3 -13
  374. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/key_wrap.c +13 -7
  375. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/mode_wrappers.c +9 -7
  376. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bcm.c +35 -27
  377. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/bn.c +16 -26
  378. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/bytes.c +88 -60
  379. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/cmp.c +4 -3
  380. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/ctx.c +0 -2
  381. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/div.c +1 -1
  382. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/div_extra.c +1 -1
  383. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/exponentiation.c +99 -113
  384. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/gcd.c +0 -1
  385. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/gcd_extra.c +5 -3
  386. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/generic.c +112 -168
  387. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/internal.h +86 -31
  388. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/montgomery.c +11 -6
  389. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/montgomery_inv.c +4 -5
  390. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/mul.c +4 -5
  391. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/prime.c +13 -0
  392. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/random.c +13 -5
  393. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/rsaz_exp.c +19 -108
  394. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/rsaz_exp.h +19 -15
  395. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/shift.c +15 -16
  396. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/sqrt.c +22 -21
  397. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/aead.c +3 -0
  398. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/cipher.c +79 -19
  399. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/e_aes.c +102 -99
  400. data/third_party/boringssl-with-bazel/src/crypto/{cipher_extra → fipsmodule/cipher}/e_aesccm.c +52 -46
  401. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/internal.h +39 -0
  402. data/third_party/boringssl-with-bazel/src/crypto/{cmac → fipsmodule/cmac}/cmac.c +55 -11
  403. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/dh/check.c +2 -3
  404. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/dh/dh.c +21 -6
  405. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/dh/internal.h +56 -0
  406. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/digest/digest.c +5 -3
  407. data/third_party/boringssl-with-bazel/src/crypto/{evp → fipsmodule/digestsign}/digestsign.c +51 -15
  408. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec.c +25 -25
  409. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec_key.c +91 -17
  410. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/ec_montgomery.c +5 -5
  411. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/internal.h +34 -12
  412. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/oct.c +54 -23
  413. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p224-64.c +44 -60
  414. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/{p256-x86_64-table.h → p256-nistz-table.h} +1 -1
  415. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/{p256-x86_64.c → p256-nistz.c} +60 -53
  416. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/{p256-x86_64.h → p256-nistz.h} +5 -13
  417. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256.c +48 -36
  418. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/scalar.c +2 -8
  419. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/simple.c +2 -7
  420. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/simple_mul.c +2 -3
  421. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/wnaf.c +0 -1
  422. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ecdh/ecdh.c +8 -0
  423. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ecdsa/ecdsa.c +42 -14
  424. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ecdsa/internal.h +6 -0
  425. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/hmac/hmac.c +52 -24
  426. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/cbc.c +9 -15
  427. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/cfb.c +1 -4
  428. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/ctr.c +2 -4
  429. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/gcm.c +71 -43
  430. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/internal.h +14 -16
  431. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/ofb.c +1 -4
  432. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/ctrdrbg.c +31 -13
  433. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/fork_detect.c +16 -8
  434. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/fork_detect.h +3 -2
  435. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/getrandom_fillin.h +2 -2
  436. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/internal.h +9 -38
  437. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/rand.c +73 -59
  438. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/urandom.c +11 -45
  439. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/blinding.c +0 -1
  440. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/internal.h +22 -0
  441. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/padding.c +63 -52
  442. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/rsa.c +107 -62
  443. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/rsa_impl.c +58 -31
  444. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/self_check/fips.c +41 -0
  445. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/self_check/self_check.c +523 -422
  446. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/service_indicator/internal.h +89 -0
  447. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/service_indicator/service_indicator.c +334 -0
  448. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/internal.h +3 -12
  449. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/sha1.c +2 -0
  450. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/sha256.c +12 -8
  451. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/sha512.c +14 -12
  452. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/tls/kdf.c +19 -6
  453. data/third_party/boringssl-with-bazel/src/crypto/hpke/hpke.c +32 -14
  454. data/third_party/boringssl-with-bazel/src/crypto/hrss/hrss.c +65 -29
  455. data/third_party/boringssl-with-bazel/src/crypto/internal.h +373 -18
  456. data/third_party/boringssl-with-bazel/src/crypto/kyber/internal.h +61 -0
  457. data/third_party/boringssl-with-bazel/src/crypto/kyber/keccak.c +205 -0
  458. data/third_party/boringssl-with-bazel/src/crypto/lhash/internal.h +13 -1
  459. data/third_party/boringssl-with-bazel/src/crypto/mem.c +220 -13
  460. data/third_party/boringssl-with-bazel/src/crypto/obj/obj.c +19 -7
  461. data/third_party/boringssl-with-bazel/src/crypto/obj/obj_dat.h +13 -1
  462. data/third_party/boringssl-with-bazel/src/crypto/pem/pem_all.c +81 -90
  463. data/third_party/boringssl-with-bazel/src/crypto/pem/pem_info.c +150 -245
  464. data/third_party/boringssl-with-bazel/src/crypto/pem/pem_lib.c +629 -613
  465. data/third_party/boringssl-with-bazel/src/crypto/pem/pem_oth.c +17 -17
  466. data/third_party/boringssl-with-bazel/src/crypto/pem/pem_pk8.c +142 -149
  467. data/third_party/boringssl-with-bazel/src/crypto/pem/pem_pkey.c +99 -131
  468. data/third_party/boringssl-with-bazel/src/crypto/pem/pem_x509.c +0 -1
  469. data/third_party/boringssl-with-bazel/src/crypto/pem/pem_xaux.c +0 -1
  470. data/third_party/boringssl-with-bazel/src/crypto/pkcs7/pkcs7_x509.c +0 -1
  471. data/third_party/boringssl-with-bazel/src/crypto/pkcs8/pkcs8.c +0 -3
  472. data/third_party/boringssl-with-bazel/src/crypto/pkcs8/pkcs8_x509.c +36 -66
  473. data/third_party/boringssl-with-bazel/src/crypto/poly1305/poly1305.c +31 -38
  474. data/third_party/boringssl-with-bazel/src/crypto/poly1305/poly1305_arm.c +2 -1
  475. data/third_party/boringssl-with-bazel/src/crypto/poly1305/poly1305_vec.c +18 -31
  476. data/third_party/boringssl-with-bazel/src/crypto/pool/internal.h +1 -0
  477. data/third_party/boringssl-with-bazel/src/crypto/pool/pool.c +8 -1
  478. data/third_party/boringssl-with-bazel/src/crypto/rand_extra/passive.c +129 -5
  479. data/third_party/boringssl-with-bazel/src/crypto/refcount_c11.c +0 -2
  480. data/third_party/boringssl-with-bazel/src/crypto/refcount_lock.c +3 -4
  481. data/third_party/boringssl-with-bazel/src/crypto/siphash/siphash.c +8 -11
  482. data/third_party/boringssl-with-bazel/src/crypto/stack/stack.c +61 -27
  483. data/third_party/boringssl-with-bazel/src/crypto/thread_pthread.c +10 -13
  484. data/third_party/boringssl-with-bazel/src/crypto/thread_win.c +10 -13
  485. data/third_party/boringssl-with-bazel/src/crypto/trust_token/internal.h +66 -34
  486. data/third_party/boringssl-with-bazel/src/crypto/trust_token/pmbtoken.c +190 -77
  487. data/third_party/boringssl-with-bazel/src/crypto/trust_token/trust_token.c +81 -284
  488. data/third_party/boringssl-with-bazel/src/crypto/trust_token/voprf.c +109 -42
  489. data/third_party/boringssl-with-bazel/src/crypto/x509/a_digest.c +22 -24
  490. data/third_party/boringssl-with-bazel/src/crypto/x509/a_sign.c +54 -55
  491. data/third_party/boringssl-with-bazel/src/crypto/x509/a_verify.c +32 -34
  492. data/third_party/boringssl-with-bazel/src/crypto/x509/algorithm.c +32 -16
  493. data/third_party/boringssl-with-bazel/src/crypto/x509/asn1_gen.c +465 -704
  494. data/third_party/boringssl-with-bazel/src/crypto/x509/by_dir.c +284 -331
  495. data/third_party/boringssl-with-bazel/src/crypto/x509/by_file.c +183 -178
  496. data/third_party/boringssl-with-bazel/src/crypto/x509/i2d_pr.c +11 -15
  497. data/third_party/boringssl-with-bazel/src/crypto/x509/internal.h +67 -50
  498. data/third_party/boringssl-with-bazel/src/crypto/x509/name_print.c +153 -150
  499. data/third_party/boringssl-with-bazel/src/crypto/x509/policy.c +786 -0
  500. data/third_party/boringssl-with-bazel/src/crypto/x509/rsa_pss.c +95 -102
  501. data/third_party/boringssl-with-bazel/src/crypto/x509/t_crl.c +72 -57
  502. data/third_party/boringssl-with-bazel/src/crypto/x509/t_req.c +12 -10
  503. data/third_party/boringssl-with-bazel/src/crypto/x509/t_x509.c +227 -252
  504. data/third_party/boringssl-with-bazel/src/crypto/x509/t_x509a.c +52 -47
  505. data/third_party/boringssl-with-bazel/src/crypto/x509/x509.c +3 -4
  506. data/third_party/boringssl-with-bazel/src/crypto/x509/x509_att.c +230 -224
  507. data/third_party/boringssl-with-bazel/src/crypto/x509/x509_cmp.c +161 -327
  508. data/third_party/boringssl-with-bazel/src/crypto/x509/x509_d2.c +37 -33
  509. data/third_party/boringssl-with-bazel/src/crypto/x509/x509_def.c +14 -31
  510. data/third_party/boringssl-with-bazel/src/crypto/x509/x509_ext.c +55 -85
  511. data/third_party/boringssl-with-bazel/src/crypto/x509/x509_lu.c +534 -618
  512. data/third_party/boringssl-with-bazel/src/crypto/x509/x509_obj.c +129 -122
  513. data/third_party/boringssl-with-bazel/src/crypto/x509/x509_req.c +116 -182
  514. data/third_party/boringssl-with-bazel/src/crypto/x509/x509_set.c +132 -132
  515. data/third_party/boringssl-with-bazel/src/crypto/x509/x509_trs.c +181 -202
  516. data/third_party/boringssl-with-bazel/src/crypto/x509/x509_txt.c +64 -79
  517. data/third_party/boringssl-with-bazel/src/crypto/x509/x509_v3.c +175 -160
  518. data/third_party/boringssl-with-bazel/src/crypto/x509/x509_vfy.c +1865 -2050
  519. data/third_party/boringssl-with-bazel/src/crypto/x509/x509_vpm.c +433 -462
  520. data/third_party/boringssl-with-bazel/src/crypto/x509/x509cset.c +156 -163
  521. data/third_party/boringssl-with-bazel/src/crypto/x509/x509name.c +267 -263
  522. data/third_party/boringssl-with-bazel/src/crypto/x509/x509rset.c +40 -15
  523. data/third_party/boringssl-with-bazel/src/crypto/x509/x509spki.c +59 -63
  524. data/third_party/boringssl-with-bazel/src/crypto/x509/x_algor.c +63 -67
  525. data/third_party/boringssl-with-bazel/src/crypto/x509/x_all.c +114 -144
  526. data/third_party/boringssl-with-bazel/src/crypto/x509/x_attrib.c +25 -26
  527. data/third_party/boringssl-with-bazel/src/crypto/x509/x_crl.c +326 -415
  528. data/third_party/boringssl-with-bazel/src/crypto/x509/x_exten.c +8 -7
  529. data/third_party/boringssl-with-bazel/src/crypto/x509/x_info.c +30 -28
  530. data/third_party/boringssl-with-bazel/src/crypto/x509/x_name.c +354 -370
  531. data/third_party/boringssl-with-bazel/src/crypto/x509/x_pkey.c +37 -32
  532. data/third_party/boringssl-with-bazel/src/crypto/x509/x_pubkey.c +116 -119
  533. data/third_party/boringssl-with-bazel/src/crypto/x509/x_req.c +36 -26
  534. data/third_party/boringssl-with-bazel/src/crypto/x509/x_sig.c +3 -4
  535. data/third_party/boringssl-with-bazel/src/crypto/x509/x_spki.c +10 -13
  536. data/third_party/boringssl-with-bazel/src/crypto/x509/x_val.c +3 -4
  537. data/third_party/boringssl-with-bazel/src/crypto/x509/x_x509.c +419 -261
  538. data/third_party/boringssl-with-bazel/src/crypto/x509/x_x509a.c +113 -105
  539. data/third_party/boringssl-with-bazel/src/crypto/x509v3/ext_dat.h +11 -15
  540. data/third_party/boringssl-with-bazel/src/crypto/x509v3/internal.h +78 -170
  541. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_akey.c +126 -131
  542. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_akeya.c +3 -4
  543. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_alt.c +465 -469
  544. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_bcons.c +56 -54
  545. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_bitst.c +46 -49
  546. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_conf.c +309 -346
  547. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_cpols.c +341 -365
  548. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_crld.c +429 -393
  549. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_enum.c +29 -24
  550. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_extku.c +65 -59
  551. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_genn.c +125 -121
  552. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_ia5.c +43 -42
  553. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_info.c +122 -125
  554. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_int.c +50 -20
  555. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_lib.c +247 -253
  556. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_ncons.c +386 -389
  557. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_ocsp.c +45 -32
  558. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_pcons.c +57 -54
  559. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_pmaps.c +63 -67
  560. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_prn.c +143 -136
  561. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_purp.c +664 -707
  562. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_skey.c +83 -75
  563. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_utl.c +1062 -1146
  564. data/third_party/boringssl-with-bazel/src/include/openssl/aead.h +8 -4
  565. data/third_party/boringssl-with-bazel/src/include/openssl/arm_arch.h +28 -48
  566. data/third_party/boringssl-with-bazel/src/include/openssl/asn1.h +211 -187
  567. data/third_party/boringssl-with-bazel/src/include/openssl/asn1t.h +26 -78
  568. data/third_party/boringssl-with-bazel/src/include/openssl/base.h +19 -14
  569. data/third_party/boringssl-with-bazel/src/include/openssl/bio.h +21 -2
  570. data/third_party/boringssl-with-bazel/src/include/openssl/bn.h +49 -17
  571. data/third_party/boringssl-with-bazel/src/include/openssl/bytestring.h +99 -29
  572. data/third_party/boringssl-with-bazel/src/include/openssl/cipher.h +49 -60
  573. data/third_party/boringssl-with-bazel/src/include/openssl/conf.h +2 -15
  574. data/third_party/boringssl-with-bazel/src/include/openssl/cpu.h +16 -200
  575. data/third_party/boringssl-with-bazel/src/include/openssl/crypto.h +34 -0
  576. data/third_party/boringssl-with-bazel/src/include/openssl/ctrdrbg.h +82 -0
  577. data/third_party/boringssl-with-bazel/src/include/openssl/dh.h +32 -30
  578. data/third_party/boringssl-with-bazel/src/include/openssl/digest.h +7 -0
  579. data/third_party/boringssl-with-bazel/src/include/openssl/dsa.h +4 -0
  580. data/third_party/boringssl-with-bazel/src/include/openssl/ec.h +48 -5
  581. data/third_party/boringssl-with-bazel/src/include/openssl/ec_key.h +37 -8
  582. data/third_party/boringssl-with-bazel/src/include/openssl/ecdsa.h +1 -0
  583. data/third_party/boringssl-with-bazel/src/include/openssl/err.h +33 -5
  584. data/third_party/boringssl-with-bazel/src/include/openssl/evp.h +22 -30
  585. data/third_party/boringssl-with-bazel/src/include/openssl/ex_data.h +1 -1
  586. data/third_party/boringssl-with-bazel/src/include/openssl/hmac.h +7 -0
  587. data/third_party/boringssl-with-bazel/src/include/openssl/hpke.h +41 -16
  588. data/third_party/boringssl-with-bazel/src/include/openssl/kdf.h +91 -0
  589. data/third_party/boringssl-with-bazel/src/include/openssl/mem.h +74 -8
  590. data/third_party/boringssl-with-bazel/src/include/openssl/nid.h +13 -0
  591. data/third_party/boringssl-with-bazel/src/include/openssl/opensslconf.h +1 -0
  592. data/third_party/boringssl-with-bazel/src/include/openssl/pem.h +11 -15
  593. data/third_party/boringssl-with-bazel/src/include/openssl/pkcs8.h +8 -0
  594. data/third_party/boringssl-with-bazel/src/include/openssl/rand.h +12 -1
  595. data/third_party/boringssl-with-bazel/src/include/openssl/rsa.h +7 -4
  596. data/third_party/boringssl-with-bazel/src/include/openssl/service_indicator.h +96 -0
  597. data/third_party/boringssl-with-bazel/src/include/openssl/span.h +13 -21
  598. data/third_party/boringssl-with-bazel/src/include/openssl/ssl.h +139 -75
  599. data/third_party/boringssl-with-bazel/src/include/openssl/ssl3.h +1 -6
  600. data/third_party/boringssl-with-bazel/src/include/openssl/stack.h +384 -286
  601. data/third_party/boringssl-with-bazel/src/include/openssl/thread.h +5 -6
  602. data/third_party/boringssl-with-bazel/src/include/openssl/time.h +41 -0
  603. data/third_party/boringssl-with-bazel/src/include/openssl/tls1.h +18 -7
  604. data/third_party/boringssl-with-bazel/src/include/openssl/trust_token.h +49 -23
  605. data/third_party/boringssl-with-bazel/src/include/openssl/type_check.h +0 -11
  606. data/third_party/boringssl-with-bazel/src/include/openssl/x509.h +1592 -1074
  607. data/third_party/boringssl-with-bazel/src/include/openssl/x509v3.h +202 -205
  608. data/third_party/boringssl-with-bazel/src/ssl/bio_ssl.cc +2 -2
  609. data/third_party/boringssl-with-bazel/src/ssl/d1_both.cc +6 -13
  610. data/third_party/boringssl-with-bazel/src/ssl/d1_pkt.cc +17 -18
  611. data/third_party/boringssl-with-bazel/src/ssl/dtls_method.cc +4 -5
  612. data/third_party/boringssl-with-bazel/src/ssl/dtls_record.cc +25 -33
  613. data/third_party/boringssl-with-bazel/src/ssl/encrypted_client_hello.cc +34 -20
  614. data/third_party/boringssl-with-bazel/src/ssl/extensions.cc +65 -34
  615. data/third_party/boringssl-with-bazel/src/ssl/handoff.cc +198 -54
  616. data/third_party/boringssl-with-bazel/src/ssl/handshake.cc +5 -5
  617. data/third_party/boringssl-with-bazel/src/ssl/handshake_client.cc +32 -28
  618. data/third_party/boringssl-with-bazel/src/ssl/handshake_server.cc +76 -44
  619. data/third_party/boringssl-with-bazel/src/ssl/internal.h +130 -98
  620. data/third_party/boringssl-with-bazel/src/ssl/s3_both.cc +27 -11
  621. data/third_party/boringssl-with-bazel/src/ssl/s3_lib.cc +2 -2
  622. data/third_party/boringssl-with-bazel/src/ssl/s3_pkt.cc +91 -75
  623. data/third_party/boringssl-with-bazel/src/ssl/ssl_aead_ctx.cc +8 -10
  624. data/third_party/boringssl-with-bazel/src/ssl/ssl_asn1.cc +39 -65
  625. data/third_party/boringssl-with-bazel/src/ssl/ssl_buffer.cc +1 -0
  626. data/third_party/boringssl-with-bazel/src/ssl/ssl_cert.cc +5 -9
  627. data/third_party/boringssl-with-bazel/src/ssl/ssl_cipher.cc +30 -33
  628. data/third_party/boringssl-with-bazel/src/ssl/ssl_file.cc +77 -100
  629. data/third_party/boringssl-with-bazel/src/ssl/ssl_key_share.cc +120 -107
  630. data/third_party/boringssl-with-bazel/src/ssl/ssl_lib.cc +164 -30
  631. data/third_party/boringssl-with-bazel/src/ssl/ssl_privkey.cc +150 -60
  632. data/third_party/boringssl-with-bazel/src/ssl/ssl_session.cc +22 -11
  633. data/third_party/boringssl-with-bazel/src/ssl/ssl_x509.cc +22 -6
  634. data/third_party/boringssl-with-bazel/src/ssl/t1_enc.cc +15 -13
  635. data/third_party/boringssl-with-bazel/src/ssl/tls13_both.cc +5 -43
  636. data/third_party/boringssl-with-bazel/src/ssl/tls13_client.cc +7 -4
  637. data/third_party/boringssl-with-bazel/src/ssl/tls13_enc.cc +2 -2
  638. data/third_party/boringssl-with-bazel/src/ssl/tls13_server.cc +22 -34
  639. data/third_party/boringssl-with-bazel/src/ssl/tls_method.cc +2 -2
  640. data/third_party/boringssl-with-bazel/src/ssl/tls_record.cc +16 -98
  641. data/third_party/boringssl-with-bazel/src/third_party/fiat/curve25519_32.h +1241 -657
  642. data/third_party/boringssl-with-bazel/src/third_party/fiat/curve25519_64.h +751 -398
  643. data/third_party/boringssl-with-bazel/src/third_party/fiat/p256_32.h +3551 -1938
  644. data/third_party/boringssl-with-bazel/src/third_party/fiat/p256_64.h +1272 -487
  645. metadata +103 -70
  646. data/src/core/ext/filters/client_channel/lb_call_state_internal.h +0 -39
  647. data/src/core/ext/filters/client_channel/resolver/dns/dns_resolver_selection.cc +0 -30
  648. data/src/core/ext/filters/client_channel/resolver/dns/dns_resolver_selection.h +0 -29
  649. data/src/core/lib/gprpp/global_config.h +0 -93
  650. data/src/core/lib/gprpp/global_config_env.cc +0 -140
  651. data/src/core/lib/gprpp/global_config_env.h +0 -133
  652. data/src/core/lib/gprpp/global_config_generic.h +0 -40
  653. data/src/core/lib/promise/intra_activity_waiter.h +0 -55
  654. data/src/core/lib/security/security_connector/ssl_utils_config.cc +0 -32
  655. data/src/core/lib/security/security_connector/ssl_utils_config.h +0 -29
  656. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_enum.c +0 -195
  657. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_print.c +0 -83
  658. data/third_party/boringssl-with-bazel/src/crypto/asn1/a_utf8.c +0 -236
  659. data/third_party/boringssl-with-bazel/src/crypto/asn1/charmap.h +0 -15
  660. data/third_party/boringssl-with-bazel/src/crypto/asn1/time_support.c +0 -206
  661. data/third_party/boringssl-with-bazel/src/crypto/cpu-ppc64le.c +0 -38
  662. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/sha1-altivec.c +0 -361
  663. data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_cache.c +0 -287
  664. data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_data.c +0 -132
  665. data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_lib.c +0 -155
  666. data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_map.c +0 -131
  667. data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_node.c +0 -189
  668. data/third_party/boringssl-with-bazel/src/crypto/x509v3/pcy_tree.c +0 -843
  669. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_pci.c +0 -289
  670. data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_pcia.c +0 -57
  671. /data/src/core/lib/gpr/{log_android.cc → android/log.cc} +0 -0
  672. /data/src/core/lib/gpr/{cpu_iphone.cc → iphone/cpu.cc} +0 -0
  673. /data/src/core/lib/gpr/{cpu_linux.cc → linux/cpu.cc} +0 -0
  674. /data/src/core/lib/gpr/{log_linux.cc → linux/log.cc} +0 -0
  675. /data/src/core/lib/gpr/{tmpfile_msys.cc → msys/tmpfile.cc} +0 -0
  676. /data/src/core/lib/gpr/{cpu_posix.cc → posix/cpu.cc} +0 -0
  677. /data/src/core/lib/gpr/{log_posix.cc → posix/log.cc} +0 -0
  678. /data/src/core/lib/gpr/{string_posix.cc → posix/string.cc} +0 -0
  679. /data/src/core/lib/gpr/{sync_posix.cc → posix/sync.cc} +0 -0
  680. /data/src/core/lib/gpr/{time_posix.cc → posix/time.cc} +0 -0
  681. /data/src/core/lib/gpr/{tmpfile_posix.cc → posix/tmpfile.cc} +0 -0
  682. /data/src/core/lib/gpr/{cpu_windows.cc → windows/cpu.cc} +0 -0
  683. /data/src/core/lib/gpr/{log_windows.cc → windows/log.cc} +0 -0
  684. /data/src/core/lib/gpr/{string_windows.cc → windows/string.cc} +0 -0
  685. /data/src/core/lib/gpr/{string_util_windows.cc → windows/string_util.cc} +0 -0
  686. /data/src/core/lib/gpr/{sync_windows.cc → windows/sync.cc} +0 -0
  687. /data/src/core/lib/gpr/{time_windows.cc → windows/time.cc} +0 -0
  688. /data/src/core/lib/gpr/{tmpfile_windows.cc → windows/tmpfile.cc} +0 -0
  689. /data/src/core/lib/gprpp/{env_linux.cc → linux/env.cc} +0 -0
  690. /data/src/core/lib/gprpp/{env_posix.cc → posix/env.cc} +0 -0
  691. /data/src/core/lib/gprpp/{stat_posix.cc → posix/stat.cc} +0 -0
  692. /data/src/core/lib/gprpp/{env_windows.cc → windows/env.cc} +0 -0
  693. /data/src/core/lib/gprpp/{stat_windows.cc → windows/stat.cc} +0 -0
@@ -1,4 +1,3 @@
1
- /* v3_crld.c */
2
1
  /*
3
2
  * Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL project
4
3
  * 1999.
@@ -66,119 +65,142 @@
66
65
  #include <openssl/obj.h>
67
66
  #include <openssl/x509v3.h>
68
67
 
69
- #include "internal.h"
70
68
  #include "../x509/internal.h"
69
+ #include "internal.h"
71
70
 
72
71
 
73
- static void *v2i_crld(const X509V3_EXT_METHOD *method,
74
- X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval);
72
+ static void *v2i_crld(const X509V3_EXT_METHOD *method, const X509V3_CTX *ctx,
73
+ const STACK_OF(CONF_VALUE) *nval);
75
74
  static int i2r_crldp(const X509V3_EXT_METHOD *method, void *pcrldp, BIO *out,
76
75
  int indent);
77
76
 
78
77
  const X509V3_EXT_METHOD v3_crld = {
79
- NID_crl_distribution_points, 0, ASN1_ITEM_ref(CRL_DIST_POINTS),
80
- 0, 0, 0, 0,
81
- 0, 0,
78
+ NID_crl_distribution_points,
79
+ 0,
80
+ ASN1_ITEM_ref(CRL_DIST_POINTS),
81
+ 0,
82
+ 0,
83
+ 0,
84
+ 0,
85
+ 0,
86
+ 0,
82
87
  0,
83
88
  v2i_crld,
84
- i2r_crldp, 0,
85
- NULL
89
+ i2r_crldp,
90
+ 0,
91
+ NULL,
86
92
  };
87
93
 
88
94
  const X509V3_EXT_METHOD v3_freshest_crl = {
89
- NID_freshest_crl, 0, ASN1_ITEM_ref(CRL_DIST_POINTS),
90
- 0, 0, 0, 0,
91
- 0, 0,
95
+ NID_freshest_crl,
96
+ 0,
97
+ ASN1_ITEM_ref(CRL_DIST_POINTS),
98
+ 0,
99
+ 0,
100
+ 0,
101
+ 0,
102
+ 0,
103
+ 0,
92
104
  0,
93
105
  v2i_crld,
94
- i2r_crldp, 0,
95
- NULL
106
+ i2r_crldp,
107
+ 0,
108
+ NULL,
96
109
  };
97
110
 
98
- static STACK_OF(GENERAL_NAME) *gnames_from_sectname(X509V3_CTX *ctx,
99
- char *sect)
100
- {
101
- STACK_OF(CONF_VALUE) *gnsect;
102
- STACK_OF(GENERAL_NAME) *gens;
103
- if (*sect == '@')
104
- gnsect = X509V3_get_section(ctx, sect + 1);
105
- else
106
- gnsect = X509V3_parse_list(sect);
107
- if (!gnsect) {
108
- OPENSSL_PUT_ERROR(X509V3, X509V3_R_SECTION_NOT_FOUND);
109
- return NULL;
110
- }
111
- gens = v2i_GENERAL_NAMES(NULL, ctx, gnsect);
112
- if (*sect == '@')
113
- X509V3_section_free(ctx, gnsect);
114
- else
115
- sk_CONF_VALUE_pop_free(gnsect, X509V3_conf_free);
116
- return gens;
111
+ static STACK_OF(GENERAL_NAME) *gnames_from_sectname(const X509V3_CTX *ctx,
112
+ char *sect) {
113
+ const STACK_OF(CONF_VALUE) *gnsect;
114
+ STACK_OF(CONF_VALUE) *gnsect_owned = NULL;
115
+ if (*sect == '@') {
116
+ gnsect = X509V3_get_section(ctx, sect + 1);
117
+ } else {
118
+ gnsect_owned = X509V3_parse_list(sect);
119
+ gnsect = gnsect_owned;
120
+ }
121
+ if (!gnsect) {
122
+ OPENSSL_PUT_ERROR(X509V3, X509V3_R_SECTION_NOT_FOUND);
123
+ return NULL;
124
+ }
125
+ STACK_OF(GENERAL_NAME) *gens = v2i_GENERAL_NAMES(NULL, ctx, gnsect);
126
+ sk_CONF_VALUE_pop_free(gnsect_owned, X509V3_conf_free);
127
+ return gens;
117
128
  }
118
129
 
119
- static int set_dist_point_name(DIST_POINT_NAME **pdp, X509V3_CTX *ctx,
120
- CONF_VALUE *cnf)
121
- {
122
- STACK_OF(GENERAL_NAME) *fnm = NULL;
123
- STACK_OF(X509_NAME_ENTRY) *rnm = NULL;
124
- if (!strncmp(cnf->name, "fullname", 9)) {
125
- fnm = gnames_from_sectname(ctx, cnf->value);
126
- if (!fnm)
127
- goto err;
128
- } else if (!strcmp(cnf->name, "relativename")) {
129
- int ret;
130
- STACK_OF(CONF_VALUE) *dnsect;
131
- X509_NAME *nm;
132
- nm = X509_NAME_new();
133
- if (!nm)
134
- return -1;
135
- dnsect = X509V3_get_section(ctx, cnf->value);
136
- if (!dnsect) {
137
- OPENSSL_PUT_ERROR(X509V3, X509V3_R_SECTION_NOT_FOUND);
138
- return -1;
139
- }
140
- ret = X509V3_NAME_from_section(nm, dnsect, MBSTRING_ASC);
141
- X509V3_section_free(ctx, dnsect);
142
- rnm = nm->entries;
143
- nm->entries = NULL;
144
- X509_NAME_free(nm);
145
- if (!ret || sk_X509_NAME_ENTRY_num(rnm) <= 0)
146
- goto err;
147
- /*
148
- * Since its a name fragment can't have more than one RDNSequence
149
- */
150
- if (sk_X509_NAME_ENTRY_value(rnm,
151
- sk_X509_NAME_ENTRY_num(rnm) - 1)->set) {
152
- OPENSSL_PUT_ERROR(X509V3, X509V3_R_INVALID_MULTIPLE_RDNS);
153
- goto err;
154
- }
155
- } else
156
- return 0;
157
-
158
- if (*pdp) {
159
- OPENSSL_PUT_ERROR(X509V3, X509V3_R_DISTPOINT_ALREADY_SET);
160
- goto err;
130
+ // set_dist_point_name decodes a DistributionPointName from |cnf| and writes the
131
+ // result in |*pdp|. It returns 1 on success, -1 on error, and 0 if |cnf| used
132
+ // an unrecognized input type. The zero return can be used by callers to support
133
+ // additional syntax.
134
+ static int set_dist_point_name(DIST_POINT_NAME **pdp, const X509V3_CTX *ctx,
135
+ const CONF_VALUE *cnf) {
136
+ STACK_OF(GENERAL_NAME) *fnm = NULL;
137
+ STACK_OF(X509_NAME_ENTRY) *rnm = NULL;
138
+ if (!strncmp(cnf->name, "fullname", 9)) {
139
+ // If |cnf| comes from |X509V3_parse_list|, which is possible for a v2i
140
+ // function, |cnf->value| may be NULL.
141
+ if (cnf->value == NULL) {
142
+ OPENSSL_PUT_ERROR(X509V3, X509V3_R_MISSING_VALUE);
143
+ return -1;
161
144
  }
162
-
163
- *pdp = DIST_POINT_NAME_new();
164
- if (!*pdp)
165
- goto err;
166
- if (fnm) {
167
- (*pdp)->type = 0;
168
- (*pdp)->name.fullname = fnm;
169
- } else {
170
- (*pdp)->type = 1;
171
- (*pdp)->name.relativename = rnm;
145
+ fnm = gnames_from_sectname(ctx, cnf->value);
146
+ if (!fnm) {
147
+ goto err;
172
148
  }
173
-
174
- return 1;
175
-
176
- err:
177
- if (fnm)
178
- sk_GENERAL_NAME_pop_free(fnm, GENERAL_NAME_free);
179
- if (rnm)
180
- sk_X509_NAME_ENTRY_pop_free(rnm, X509_NAME_ENTRY_free);
181
- return -1;
149
+ } else if (!strcmp(cnf->name, "relativename")) {
150
+ // If |cnf| comes from |X509V3_parse_list|, which is possible for a v2i
151
+ // function, |cnf->value| may be NULL.
152
+ if (cnf->value == NULL) {
153
+ OPENSSL_PUT_ERROR(X509V3, X509V3_R_MISSING_VALUE);
154
+ return -1;
155
+ }
156
+ const STACK_OF(CONF_VALUE) *dnsect = X509V3_get_section(ctx, cnf->value);
157
+ if (!dnsect) {
158
+ OPENSSL_PUT_ERROR(X509V3, X509V3_R_SECTION_NOT_FOUND);
159
+ return -1;
160
+ }
161
+ X509_NAME *nm = X509_NAME_new();
162
+ if (!nm) {
163
+ return -1;
164
+ }
165
+ int ret = X509V3_NAME_from_section(nm, dnsect, MBSTRING_ASC);
166
+ rnm = nm->entries;
167
+ nm->entries = NULL;
168
+ X509_NAME_free(nm);
169
+ if (!ret || sk_X509_NAME_ENTRY_num(rnm) <= 0) {
170
+ goto err;
171
+ }
172
+ // There can only be one RDN in nameRelativeToCRLIssuer.
173
+ if (sk_X509_NAME_ENTRY_value(rnm, sk_X509_NAME_ENTRY_num(rnm) - 1)->set) {
174
+ OPENSSL_PUT_ERROR(X509V3, X509V3_R_INVALID_MULTIPLE_RDNS);
175
+ goto err;
176
+ }
177
+ } else {
178
+ return 0;
179
+ }
180
+
181
+ if (*pdp) {
182
+ OPENSSL_PUT_ERROR(X509V3, X509V3_R_DISTPOINT_ALREADY_SET);
183
+ goto err;
184
+ }
185
+
186
+ *pdp = DIST_POINT_NAME_new();
187
+ if (!*pdp) {
188
+ goto err;
189
+ }
190
+ if (fnm) {
191
+ (*pdp)->type = 0;
192
+ (*pdp)->name.fullname = fnm;
193
+ } else {
194
+ (*pdp)->type = 1;
195
+ (*pdp)->name.relativename = rnm;
196
+ }
197
+
198
+ return 1;
199
+
200
+ err:
201
+ sk_GENERAL_NAME_pop_free(fnm, GENERAL_NAME_free);
202
+ sk_X509_NAME_ENTRY_pop_free(rnm, X509_NAME_ENTRY_free);
203
+ return -1;
182
204
  }
183
205
 
184
206
  static const BIT_STRING_BITNAME reason_flags[] = {
@@ -191,373 +213,387 @@ static const BIT_STRING_BITNAME reason_flags[] = {
191
213
  {6, "Certificate Hold", "certificateHold"},
192
214
  {7, "Privilege Withdrawn", "privilegeWithdrawn"},
193
215
  {8, "AA Compromise", "AACompromise"},
194
- {-1, NULL, NULL}
195
- };
196
-
197
- static int set_reasons(ASN1_BIT_STRING **preas, char *value)
198
- {
199
- STACK_OF(CONF_VALUE) *rsk = NULL;
216
+ {-1, NULL, NULL}};
217
+
218
+ static int set_reasons(ASN1_BIT_STRING **preas, const char *value) {
219
+ if (*preas) {
220
+ // Duplicate "reasons" or "onlysomereasons" key.
221
+ OPENSSL_PUT_ERROR(X509V3, X509V3_R_INVALID_VALUE);
222
+ return 0;
223
+ }
224
+ int ret = 0;
225
+ STACK_OF(CONF_VALUE) *rsk = X509V3_parse_list(value);
226
+ if (!rsk) {
227
+ return 0;
228
+ }
229
+ for (size_t i = 0; i < sk_CONF_VALUE_num(rsk); i++) {
230
+ const char *bnam = sk_CONF_VALUE_value(rsk, i)->name;
231
+ if (!*preas) {
232
+ *preas = ASN1_BIT_STRING_new();
233
+ if (!*preas) {
234
+ goto err;
235
+ }
236
+ }
200
237
  const BIT_STRING_BITNAME *pbn;
201
- const char *bnam;
202
- size_t i;
203
- int ret = 0;
204
- rsk = X509V3_parse_list(value);
205
- if (!rsk)
206
- return 0;
207
- if (*preas)
208
- return 0;
209
- for (i = 0; i < sk_CONF_VALUE_num(rsk); i++) {
210
- bnam = sk_CONF_VALUE_value(rsk, i)->name;
211
- if (!*preas) {
212
- *preas = ASN1_BIT_STRING_new();
213
- if (!*preas)
214
- goto err;
215
- }
216
- for (pbn = reason_flags; pbn->lname; pbn++) {
217
- if (!strcmp(pbn->sname, bnam)) {
218
- if (!ASN1_BIT_STRING_set_bit(*preas, pbn->bitnum, 1))
219
- goto err;
220
- break;
221
- }
238
+ for (pbn = reason_flags; pbn->lname; pbn++) {
239
+ if (!strcmp(pbn->sname, bnam)) {
240
+ if (!ASN1_BIT_STRING_set_bit(*preas, pbn->bitnum, 1)) {
241
+ goto err;
222
242
  }
223
- if (!pbn->lname)
224
- goto err;
243
+ break;
244
+ }
225
245
  }
226
- ret = 1;
246
+ if (!pbn->lname) {
247
+ goto err;
248
+ }
249
+ }
250
+ ret = 1;
227
251
 
228
- err:
229
- sk_CONF_VALUE_pop_free(rsk, X509V3_conf_free);
230
- return ret;
252
+ err:
253
+ sk_CONF_VALUE_pop_free(rsk, X509V3_conf_free);
254
+ return ret;
231
255
  }
232
256
 
233
- static int print_reasons(BIO *out, const char *rname,
234
- ASN1_BIT_STRING *rflags, int indent)
235
- {
236
- int first = 1;
237
- const BIT_STRING_BITNAME *pbn;
238
- BIO_printf(out, "%*s%s:\n%*s", indent, "", rname, indent + 2, "");
239
- for (pbn = reason_flags; pbn->lname; pbn++) {
240
- if (ASN1_BIT_STRING_get_bit(rflags, pbn->bitnum)) {
241
- if (first)
242
- first = 0;
243
- else
244
- BIO_puts(out, ", ");
245
- BIO_puts(out, pbn->lname);
246
- }
257
+ static int print_reasons(BIO *out, const char *rname, ASN1_BIT_STRING *rflags,
258
+ int indent) {
259
+ int first = 1;
260
+ const BIT_STRING_BITNAME *pbn;
261
+ BIO_printf(out, "%*s%s:\n%*s", indent, "", rname, indent + 2, "");
262
+ for (pbn = reason_flags; pbn->lname; pbn++) {
263
+ if (ASN1_BIT_STRING_get_bit(rflags, pbn->bitnum)) {
264
+ if (first) {
265
+ first = 0;
266
+ } else {
267
+ BIO_puts(out, ", ");
268
+ }
269
+ BIO_puts(out, pbn->lname);
247
270
  }
248
- if (first)
249
- BIO_puts(out, "<EMPTY>\n");
250
- else
251
- BIO_puts(out, "\n");
252
- return 1;
271
+ }
272
+ if (first) {
273
+ BIO_puts(out, "<EMPTY>\n");
274
+ } else {
275
+ BIO_puts(out, "\n");
276
+ }
277
+ return 1;
253
278
  }
254
279
 
255
- static DIST_POINT *crldp_from_section(X509V3_CTX *ctx,
256
- STACK_OF(CONF_VALUE) *nval)
257
- {
258
- size_t i;
259
- CONF_VALUE *cnf;
260
- DIST_POINT *point = NULL;
261
- point = DIST_POINT_new();
262
- if (!point)
280
+ static DIST_POINT *crldp_from_section(const X509V3_CTX *ctx,
281
+ const STACK_OF(CONF_VALUE) *nval) {
282
+ DIST_POINT *point = NULL;
283
+ point = DIST_POINT_new();
284
+ if (!point) {
285
+ goto err;
286
+ }
287
+ for (size_t i = 0; i < sk_CONF_VALUE_num(nval); i++) {
288
+ const CONF_VALUE *cnf = sk_CONF_VALUE_value(nval, i);
289
+ int ret = set_dist_point_name(&point->distpoint, ctx, cnf);
290
+ if (ret > 0) {
291
+ continue;
292
+ }
293
+ if (ret < 0) {
294
+ goto err;
295
+ }
296
+ if (!strcmp(cnf->name, "reasons")) {
297
+ if (!set_reasons(&point->reasons, cnf->value)) {
263
298
  goto err;
264
- for (i = 0; i < sk_CONF_VALUE_num(nval); i++) {
265
- int ret;
266
- cnf = sk_CONF_VALUE_value(nval, i);
267
- ret = set_dist_point_name(&point->distpoint, ctx, cnf);
268
- if (ret > 0)
269
- continue;
270
- if (ret < 0)
271
- goto err;
272
- if (!strcmp(cnf->name, "reasons")) {
273
- if (!set_reasons(&point->reasons, cnf->value))
274
- goto err;
275
- } else if (!strcmp(cnf->name, "CRLissuer")) {
276
- point->CRLissuer = gnames_from_sectname(ctx, cnf->value);
277
- if (!point->CRLissuer)
278
- goto err;
279
- }
299
+ }
300
+ } else if (!strcmp(cnf->name, "CRLissuer")) {
301
+ GENERAL_NAMES_free(point->CRLissuer);
302
+ point->CRLissuer = gnames_from_sectname(ctx, cnf->value);
303
+ if (!point->CRLissuer) {
304
+ goto err;
305
+ }
280
306
  }
307
+ }
281
308
 
282
- return point;
309
+ return point;
283
310
 
284
- err:
285
- if (point)
286
- DIST_POINT_free(point);
287
- return NULL;
311
+ err:
312
+ DIST_POINT_free(point);
313
+ return NULL;
288
314
  }
289
315
 
290
- static void *v2i_crld(const X509V3_EXT_METHOD *method,
291
- X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval)
292
- {
293
- STACK_OF(DIST_POINT) *crld = NULL;
294
- GENERAL_NAMES *gens = NULL;
295
- GENERAL_NAME *gen = NULL;
296
- CONF_VALUE *cnf;
297
- size_t i;
298
- if (!(crld = sk_DIST_POINT_new_null()))
299
- goto merr;
300
- for (i = 0; i < sk_CONF_VALUE_num(nval); i++) {
301
- DIST_POINT *point;
302
- cnf = sk_CONF_VALUE_value(nval, i);
303
- if (!cnf->value) {
304
- STACK_OF(CONF_VALUE) *dpsect;
305
- dpsect = X509V3_get_section(ctx, cnf->name);
306
- if (!dpsect)
307
- goto err;
308
- point = crldp_from_section(ctx, dpsect);
309
- X509V3_section_free(ctx, dpsect);
310
- if (!point)
311
- goto err;
312
- if (!sk_DIST_POINT_push(crld, point)) {
313
- DIST_POINT_free(point);
314
- goto merr;
315
- }
316
- } else {
317
- if (!(gen = v2i_GENERAL_NAME(method, ctx, cnf)))
318
- goto err;
319
- if (!(gens = GENERAL_NAMES_new()))
320
- goto merr;
321
- if (!sk_GENERAL_NAME_push(gens, gen))
322
- goto merr;
323
- gen = NULL;
324
- if (!(point = DIST_POINT_new()))
325
- goto merr;
326
- if (!sk_DIST_POINT_push(crld, point)) {
327
- DIST_POINT_free(point);
328
- goto merr;
329
- }
330
- if (!(point->distpoint = DIST_POINT_NAME_new()))
331
- goto merr;
332
- point->distpoint->name.fullname = gens;
333
- point->distpoint->type = 0;
334
- gens = NULL;
335
- }
316
+ static void *v2i_crld(const X509V3_EXT_METHOD *method, const X509V3_CTX *ctx,
317
+ const STACK_OF(CONF_VALUE) *nval) {
318
+ STACK_OF(DIST_POINT) *crld = NULL;
319
+ GENERAL_NAMES *gens = NULL;
320
+ GENERAL_NAME *gen = NULL;
321
+ if (!(crld = sk_DIST_POINT_new_null())) {
322
+ goto err;
323
+ }
324
+ for (size_t i = 0; i < sk_CONF_VALUE_num(nval); i++) {
325
+ DIST_POINT *point;
326
+ const CONF_VALUE *cnf = sk_CONF_VALUE_value(nval, i);
327
+ if (!cnf->value) {
328
+ const STACK_OF(CONF_VALUE) *dpsect = X509V3_get_section(ctx, cnf->name);
329
+ if (!dpsect) {
330
+ goto err;
331
+ }
332
+ point = crldp_from_section(ctx, dpsect);
333
+ if (!point) {
334
+ goto err;
335
+ }
336
+ if (!sk_DIST_POINT_push(crld, point)) {
337
+ DIST_POINT_free(point);
338
+ goto err;
339
+ }
340
+ } else {
341
+ if (!(gen = v2i_GENERAL_NAME(method, ctx, cnf))) {
342
+ goto err;
343
+ }
344
+ if (!(gens = GENERAL_NAMES_new())) {
345
+ goto err;
346
+ }
347
+ if (!sk_GENERAL_NAME_push(gens, gen)) {
348
+ goto err;
349
+ }
350
+ gen = NULL;
351
+ if (!(point = DIST_POINT_new())) {
352
+ goto err;
353
+ }
354
+ if (!sk_DIST_POINT_push(crld, point)) {
355
+ DIST_POINT_free(point);
356
+ goto err;
357
+ }
358
+ if (!(point->distpoint = DIST_POINT_NAME_new())) {
359
+ goto err;
360
+ }
361
+ point->distpoint->name.fullname = gens;
362
+ point->distpoint->type = 0;
363
+ gens = NULL;
336
364
  }
337
- return crld;
338
-
339
- merr:
340
- OPENSSL_PUT_ERROR(X509V3, ERR_R_MALLOC_FAILURE);
341
- err:
342
- GENERAL_NAME_free(gen);
343
- GENERAL_NAMES_free(gens);
344
- sk_DIST_POINT_pop_free(crld, DIST_POINT_free);
345
- return NULL;
365
+ }
366
+ return crld;
367
+
368
+ err:
369
+ GENERAL_NAME_free(gen);
370
+ GENERAL_NAMES_free(gens);
371
+ sk_DIST_POINT_pop_free(crld, DIST_POINT_free);
372
+ return NULL;
346
373
  }
347
374
 
348
375
  static int dpn_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
349
- void *exarg)
350
- {
351
- DIST_POINT_NAME *dpn = (DIST_POINT_NAME *)*pval;
376
+ void *exarg) {
377
+ DIST_POINT_NAME *dpn = (DIST_POINT_NAME *)*pval;
352
378
 
353
- switch (operation) {
379
+ switch (operation) {
354
380
  case ASN1_OP_NEW_POST:
355
- dpn->dpname = NULL;
356
- break;
381
+ dpn->dpname = NULL;
382
+ break;
357
383
 
358
384
  case ASN1_OP_FREE_POST:
359
- if (dpn->dpname)
360
- X509_NAME_free(dpn->dpname);
361
- break;
362
- }
363
- return 1;
385
+ X509_NAME_free(dpn->dpname);
386
+ break;
387
+ }
388
+ return 1;
364
389
  }
365
390
 
366
391
 
367
392
  ASN1_CHOICE_cb(DIST_POINT_NAME, dpn_cb) = {
368
- ASN1_IMP_SEQUENCE_OF(DIST_POINT_NAME, name.fullname, GENERAL_NAME, 0),
369
- ASN1_IMP_SET_OF(DIST_POINT_NAME, name.relativename, X509_NAME_ENTRY, 1)
393
+ ASN1_IMP_SEQUENCE_OF(DIST_POINT_NAME, name.fullname, GENERAL_NAME, 0),
394
+ ASN1_IMP_SET_OF(DIST_POINT_NAME, name.relativename, X509_NAME_ENTRY, 1),
370
395
  } ASN1_CHOICE_END_cb(DIST_POINT_NAME, DIST_POINT_NAME, type)
371
396
 
372
-
373
397
  IMPLEMENT_ASN1_FUNCTIONS(DIST_POINT_NAME)
374
398
 
375
399
  ASN1_SEQUENCE(DIST_POINT) = {
376
- ASN1_EXP_OPT(DIST_POINT, distpoint, DIST_POINT_NAME, 0),
377
- ASN1_IMP_OPT(DIST_POINT, reasons, ASN1_BIT_STRING, 1),
378
- ASN1_IMP_SEQUENCE_OF_OPT(DIST_POINT, CRLissuer, GENERAL_NAME, 2)
400
+ ASN1_EXP_OPT(DIST_POINT, distpoint, DIST_POINT_NAME, 0),
401
+ ASN1_IMP_OPT(DIST_POINT, reasons, ASN1_BIT_STRING, 1),
402
+ ASN1_IMP_SEQUENCE_OF_OPT(DIST_POINT, CRLissuer, GENERAL_NAME, 2),
379
403
  } ASN1_SEQUENCE_END(DIST_POINT)
380
404
 
381
405
  IMPLEMENT_ASN1_FUNCTIONS(DIST_POINT)
382
406
 
383
- ASN1_ITEM_TEMPLATE(CRL_DIST_POINTS) =
384
- ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, CRLDistributionPoints, DIST_POINT)
407
+ ASN1_ITEM_TEMPLATE(CRL_DIST_POINTS) = ASN1_EX_TEMPLATE_TYPE(
408
+ ASN1_TFLG_SEQUENCE_OF, 0, CRLDistributionPoints, DIST_POINT)
385
409
  ASN1_ITEM_TEMPLATE_END(CRL_DIST_POINTS)
386
410
 
387
411
  IMPLEMENT_ASN1_FUNCTIONS(CRL_DIST_POINTS)
388
412
 
389
413
  ASN1_SEQUENCE(ISSUING_DIST_POINT) = {
390
- ASN1_EXP_OPT(ISSUING_DIST_POINT, distpoint, DIST_POINT_NAME, 0),
391
- ASN1_IMP_OPT(ISSUING_DIST_POINT, onlyuser, ASN1_FBOOLEAN, 1),
392
- ASN1_IMP_OPT(ISSUING_DIST_POINT, onlyCA, ASN1_FBOOLEAN, 2),
393
- ASN1_IMP_OPT(ISSUING_DIST_POINT, onlysomereasons, ASN1_BIT_STRING, 3),
394
- ASN1_IMP_OPT(ISSUING_DIST_POINT, indirectCRL, ASN1_FBOOLEAN, 4),
395
- ASN1_IMP_OPT(ISSUING_DIST_POINT, onlyattr, ASN1_FBOOLEAN, 5)
414
+ ASN1_EXP_OPT(ISSUING_DIST_POINT, distpoint, DIST_POINT_NAME, 0),
415
+ ASN1_IMP_OPT(ISSUING_DIST_POINT, onlyuser, ASN1_FBOOLEAN, 1),
416
+ ASN1_IMP_OPT(ISSUING_DIST_POINT, onlyCA, ASN1_FBOOLEAN, 2),
417
+ ASN1_IMP_OPT(ISSUING_DIST_POINT, onlysomereasons, ASN1_BIT_STRING, 3),
418
+ ASN1_IMP_OPT(ISSUING_DIST_POINT, indirectCRL, ASN1_FBOOLEAN, 4),
419
+ ASN1_IMP_OPT(ISSUING_DIST_POINT, onlyattr, ASN1_FBOOLEAN, 5),
396
420
  } ASN1_SEQUENCE_END(ISSUING_DIST_POINT)
397
421
 
398
422
  IMPLEMENT_ASN1_FUNCTIONS(ISSUING_DIST_POINT)
399
423
 
400
424
  static int i2r_idp(const X509V3_EXT_METHOD *method, void *pidp, BIO *out,
401
425
  int indent);
402
- static void *v2i_idp(const X509V3_EXT_METHOD *method, X509V3_CTX *ctx,
403
- STACK_OF(CONF_VALUE) *nval);
426
+ static void *v2i_idp(const X509V3_EXT_METHOD *method, const X509V3_CTX *ctx,
427
+ const STACK_OF(CONF_VALUE) *nval);
404
428
 
405
429
  const X509V3_EXT_METHOD v3_idp = {
406
- NID_issuing_distribution_point, X509V3_EXT_MULTILINE,
430
+ NID_issuing_distribution_point,
431
+ X509V3_EXT_MULTILINE,
407
432
  ASN1_ITEM_ref(ISSUING_DIST_POINT),
408
- 0, 0, 0, 0,
409
- 0, 0,
433
+ 0,
434
+ 0,
435
+ 0,
436
+ 0,
437
+ 0,
438
+ 0,
410
439
  0,
411
440
  v2i_idp,
412
- i2r_idp, 0,
413
- NULL
441
+ i2r_idp,
442
+ 0,
443
+ NULL,
414
444
  };
415
445
 
416
- static void *v2i_idp(const X509V3_EXT_METHOD *method, X509V3_CTX *ctx,
417
- STACK_OF(CONF_VALUE) *nval)
418
- {
419
- ISSUING_DIST_POINT *idp = NULL;
420
- CONF_VALUE *cnf;
421
- char *name, *val;
422
- size_t i;
423
- int ret;
424
- idp = ISSUING_DIST_POINT_new();
425
- if (!idp)
426
- goto merr;
427
- for (i = 0; i < sk_CONF_VALUE_num(nval); i++) {
428
- cnf = sk_CONF_VALUE_value(nval, i);
429
- name = cnf->name;
430
- val = cnf->value;
431
- ret = set_dist_point_name(&idp->distpoint, ctx, cnf);
432
- if (ret > 0)
433
- continue;
434
- if (ret < 0)
435
- goto err;
436
- if (!strcmp(name, "onlyuser")) {
437
- if (!X509V3_get_value_bool(cnf, &idp->onlyuser))
438
- goto err;
439
- } else if (!strcmp(name, "onlyCA")) {
440
- if (!X509V3_get_value_bool(cnf, &idp->onlyCA))
441
- goto err;
442
- } else if (!strcmp(name, "onlyAA")) {
443
- if (!X509V3_get_value_bool(cnf, &idp->onlyattr))
444
- goto err;
445
- } else if (!strcmp(name, "indirectCRL")) {
446
- if (!X509V3_get_value_bool(cnf, &idp->indirectCRL))
447
- goto err;
448
- } else if (!strcmp(name, "onlysomereasons")) {
449
- if (!set_reasons(&idp->onlysomereasons, val))
450
- goto err;
451
- } else {
452
- OPENSSL_PUT_ERROR(X509V3, X509V3_R_INVALID_NAME);
453
- X509V3_conf_err(cnf);
454
- goto err;
455
- }
446
+ static void *v2i_idp(const X509V3_EXT_METHOD *method, const X509V3_CTX *ctx,
447
+ const STACK_OF(CONF_VALUE) *nval) {
448
+ ISSUING_DIST_POINT *idp = ISSUING_DIST_POINT_new();
449
+ if (!idp) {
450
+ goto err;
451
+ }
452
+ for (size_t i = 0; i < sk_CONF_VALUE_num(nval); i++) {
453
+ const CONF_VALUE *cnf = sk_CONF_VALUE_value(nval, i);
454
+ const char *name = cnf->name;
455
+ const char *val = cnf->value;
456
+ int ret = set_dist_point_name(&idp->distpoint, ctx, cnf);
457
+ if (ret > 0) {
458
+ continue;
459
+ }
460
+ if (ret < 0) {
461
+ goto err;
456
462
  }
457
- return idp;
463
+ if (!strcmp(name, "onlyuser")) {
464
+ if (!X509V3_get_value_bool(cnf, &idp->onlyuser)) {
465
+ goto err;
466
+ }
467
+ } else if (!strcmp(name, "onlyCA")) {
468
+ if (!X509V3_get_value_bool(cnf, &idp->onlyCA)) {
469
+ goto err;
470
+ }
471
+ } else if (!strcmp(name, "onlyAA")) {
472
+ if (!X509V3_get_value_bool(cnf, &idp->onlyattr)) {
473
+ goto err;
474
+ }
475
+ } else if (!strcmp(name, "indirectCRL")) {
476
+ if (!X509V3_get_value_bool(cnf, &idp->indirectCRL)) {
477
+ goto err;
478
+ }
479
+ } else if (!strcmp(name, "onlysomereasons")) {
480
+ if (!set_reasons(&idp->onlysomereasons, val)) {
481
+ goto err;
482
+ }
483
+ } else {
484
+ OPENSSL_PUT_ERROR(X509V3, X509V3_R_INVALID_NAME);
485
+ X509V3_conf_err(cnf);
486
+ goto err;
487
+ }
488
+ }
489
+ return idp;
458
490
 
459
- merr:
460
- OPENSSL_PUT_ERROR(X509V3, ERR_R_MALLOC_FAILURE);
461
- err:
462
- ISSUING_DIST_POINT_free(idp);
463
- return NULL;
491
+ err:
492
+ ISSUING_DIST_POINT_free(idp);
493
+ return NULL;
464
494
  }
465
495
 
466
- static int print_gens(BIO *out, STACK_OF(GENERAL_NAME) *gens, int indent)
467
- {
468
- size_t i;
469
- for (i = 0; i < sk_GENERAL_NAME_num(gens); i++) {
470
- BIO_printf(out, "%*s", indent + 2, "");
471
- GENERAL_NAME_print(out, sk_GENERAL_NAME_value(gens, i));
472
- BIO_puts(out, "\n");
473
- }
474
- return 1;
496
+ static int print_gens(BIO *out, STACK_OF(GENERAL_NAME) *gens, int indent) {
497
+ size_t i;
498
+ for (i = 0; i < sk_GENERAL_NAME_num(gens); i++) {
499
+ BIO_printf(out, "%*s", indent + 2, "");
500
+ GENERAL_NAME_print(out, sk_GENERAL_NAME_value(gens, i));
501
+ BIO_puts(out, "\n");
502
+ }
503
+ return 1;
475
504
  }
476
505
 
477
- static int print_distpoint(BIO *out, DIST_POINT_NAME *dpn, int indent)
478
- {
479
- if (dpn->type == 0) {
480
- BIO_printf(out, "%*sFull Name:\n", indent, "");
481
- print_gens(out, dpn->name.fullname, indent);
482
- } else {
483
- X509_NAME ntmp;
484
- ntmp.entries = dpn->name.relativename;
485
- BIO_printf(out, "%*sRelative Name:\n%*s", indent, "", indent + 2, "");
486
- X509_NAME_print_ex(out, &ntmp, 0, XN_FLAG_ONELINE);
487
- BIO_puts(out, "\n");
488
- }
489
- return 1;
506
+ static int print_distpoint(BIO *out, DIST_POINT_NAME *dpn, int indent) {
507
+ if (dpn->type == 0) {
508
+ BIO_printf(out, "%*sFull Name:\n", indent, "");
509
+ print_gens(out, dpn->name.fullname, indent);
510
+ } else {
511
+ X509_NAME ntmp;
512
+ ntmp.entries = dpn->name.relativename;
513
+ BIO_printf(out, "%*sRelative Name:\n%*s", indent, "", indent + 2, "");
514
+ X509_NAME_print_ex(out, &ntmp, 0, XN_FLAG_ONELINE);
515
+ BIO_puts(out, "\n");
516
+ }
517
+ return 1;
490
518
  }
491
519
 
492
520
  static int i2r_idp(const X509V3_EXT_METHOD *method, void *pidp, BIO *out,
493
- int indent)
494
- {
495
- ISSUING_DIST_POINT *idp = pidp;
496
- if (idp->distpoint)
497
- print_distpoint(out, idp->distpoint, indent);
498
- if (idp->onlyuser > 0)
499
- BIO_printf(out, "%*sOnly User Certificates\n", indent, "");
500
- if (idp->onlyCA > 0)
501
- BIO_printf(out, "%*sOnly CA Certificates\n", indent, "");
502
- if (idp->indirectCRL > 0)
503
- BIO_printf(out, "%*sIndirect CRL\n", indent, "");
504
- if (idp->onlysomereasons)
505
- print_reasons(out, "Only Some Reasons", idp->onlysomereasons, indent);
506
- if (idp->onlyattr > 0)
507
- BIO_printf(out, "%*sOnly Attribute Certificates\n", indent, "");
508
- if (!idp->distpoint && (idp->onlyuser <= 0) && (idp->onlyCA <= 0)
509
- && (idp->indirectCRL <= 0) && !idp->onlysomereasons
510
- && (idp->onlyattr <= 0))
511
- BIO_printf(out, "%*s<EMPTY>\n", indent, "");
512
-
513
- return 1;
521
+ int indent) {
522
+ ISSUING_DIST_POINT *idp = pidp;
523
+ if (idp->distpoint) {
524
+ print_distpoint(out, idp->distpoint, indent);
525
+ }
526
+ if (idp->onlyuser > 0) {
527
+ BIO_printf(out, "%*sOnly User Certificates\n", indent, "");
528
+ }
529
+ if (idp->onlyCA > 0) {
530
+ BIO_printf(out, "%*sOnly CA Certificates\n", indent, "");
531
+ }
532
+ if (idp->indirectCRL > 0) {
533
+ BIO_printf(out, "%*sIndirect CRL\n", indent, "");
534
+ }
535
+ if (idp->onlysomereasons) {
536
+ print_reasons(out, "Only Some Reasons", idp->onlysomereasons, indent);
537
+ }
538
+ if (idp->onlyattr > 0) {
539
+ BIO_printf(out, "%*sOnly Attribute Certificates\n", indent, "");
540
+ }
541
+ if (!idp->distpoint && (idp->onlyuser <= 0) && (idp->onlyCA <= 0) &&
542
+ (idp->indirectCRL <= 0) && !idp->onlysomereasons &&
543
+ (idp->onlyattr <= 0)) {
544
+ BIO_printf(out, "%*s<EMPTY>\n", indent, "");
545
+ }
546
+
547
+ return 1;
514
548
  }
515
549
 
516
550
  static int i2r_crldp(const X509V3_EXT_METHOD *method, void *pcrldp, BIO *out,
517
- int indent)
518
- {
519
- STACK_OF(DIST_POINT) *crld = pcrldp;
520
- DIST_POINT *point;
521
- size_t i;
522
- for (i = 0; i < sk_DIST_POINT_num(crld); i++) {
523
- BIO_puts(out, "\n");
524
- point = sk_DIST_POINT_value(crld, i);
525
- if (point->distpoint)
526
- print_distpoint(out, point->distpoint, indent);
527
- if (point->reasons)
528
- print_reasons(out, "Reasons", point->reasons, indent);
529
- if (point->CRLissuer) {
530
- BIO_printf(out, "%*sCRL Issuer:\n", indent, "");
531
- print_gens(out, point->CRLissuer, indent);
532
- }
551
+ int indent) {
552
+ STACK_OF(DIST_POINT) *crld = pcrldp;
553
+ DIST_POINT *point;
554
+ size_t i;
555
+ for (i = 0; i < sk_DIST_POINT_num(crld); i++) {
556
+ BIO_puts(out, "\n");
557
+ point = sk_DIST_POINT_value(crld, i);
558
+ if (point->distpoint) {
559
+ print_distpoint(out, point->distpoint, indent);
533
560
  }
534
- return 1;
535
- }
536
-
537
- int DIST_POINT_set_dpname(DIST_POINT_NAME *dpn, X509_NAME *iname)
538
- {
539
- size_t i;
540
- STACK_OF(X509_NAME_ENTRY) *frag;
541
- X509_NAME_ENTRY *ne;
542
- if (!dpn || (dpn->type != 1))
543
- return 1;
544
- frag = dpn->name.relativename;
545
- dpn->dpname = X509_NAME_dup(iname);
546
- if (!dpn->dpname)
547
- return 0;
548
- for (i = 0; i < sk_X509_NAME_ENTRY_num(frag); i++) {
549
- ne = sk_X509_NAME_ENTRY_value(frag, i);
550
- if (!X509_NAME_add_entry(dpn->dpname, ne, -1, i ? 0 : 1)) {
551
- X509_NAME_free(dpn->dpname);
552
- dpn->dpname = NULL;
553
- return 0;
554
- }
561
+ if (point->reasons) {
562
+ print_reasons(out, "Reasons", point->reasons, indent);
555
563
  }
556
- /* generate cached encoding of name */
557
- if (i2d_X509_NAME(dpn->dpname, NULL) < 0) {
558
- X509_NAME_free(dpn->dpname);
559
- dpn->dpname = NULL;
560
- return 0;
564
+ if (point->CRLissuer) {
565
+ BIO_printf(out, "%*sCRL Issuer:\n", indent, "");
566
+ print_gens(out, point->CRLissuer, indent);
561
567
  }
568
+ }
569
+ return 1;
570
+ }
571
+
572
+ int DIST_POINT_set_dpname(DIST_POINT_NAME *dpn, X509_NAME *iname) {
573
+ size_t i;
574
+ STACK_OF(X509_NAME_ENTRY) *frag;
575
+ X509_NAME_ENTRY *ne;
576
+ if (!dpn || (dpn->type != 1)) {
562
577
  return 1;
578
+ }
579
+ frag = dpn->name.relativename;
580
+ dpn->dpname = X509_NAME_dup(iname);
581
+ if (!dpn->dpname) {
582
+ return 0;
583
+ }
584
+ for (i = 0; i < sk_X509_NAME_ENTRY_num(frag); i++) {
585
+ ne = sk_X509_NAME_ENTRY_value(frag, i);
586
+ if (!X509_NAME_add_entry(dpn->dpname, ne, -1, i ? 0 : 1)) {
587
+ X509_NAME_free(dpn->dpname);
588
+ dpn->dpname = NULL;
589
+ return 0;
590
+ }
591
+ }
592
+ // generate cached encoding of name
593
+ if (i2d_X509_NAME(dpn->dpname, NULL) < 0) {
594
+ X509_NAME_free(dpn->dpname);
595
+ dpn->dpname = NULL;
596
+ return 0;
597
+ }
598
+ return 1;
563
599
  }