aboutsummaryrefslogtreecommitdiffhomepage
path: root/src/core/security/security_context.c
Commit message (Collapse)AuthorAge
* clang-format all sourceGravatar Craig Tiller2015-08-18
|
* Putting the auth metadata processor on the server creds.Gravatar Julien Boeuf2015-07-21
|
* Cannot figure out server filter logic for error in auth md processing.Gravatar Julien Boeuf2015-07-17
| | | | | | | | | - Positive tests pass even if we will have to change the interface to add the processor to the server credentials (will be done in a separate pull request). - ASAN leaks for the error case. - The client should get a GRPC_STATUS_UNAUTHENTICATED as opposed to GPRC_STATUS_INTERNAL.
* Server auth metadata processor.Gravatar Julien Boeuf2015-07-16
| | | | | | | | | | - Right now it is a global function: would be better to have this per (secure) port. - Changed the interface of the auth_context slightly to make it more friendly. - Positive tests pass. Still need some work on error case (have a negative case as well). - Fixing cpp auth context tests so that they use the shiny new C API.
* Resolve commentsGravatar yang-g2015-07-09
|
* SSL refcounting fixesGravatar Craig Tiller2015-06-30
| | | | | | Handle the case where we recreate an auth context. Add (opt-in) debugging for refcounts on auth contexts.
* Expose gpr_asprintf and gpr_strdupGravatar Masood Malekghassemi2015-06-03
|
* Addressing comments.Gravatar Julien Boeuf2015-05-20
|
* API for auth context and server-side secure transport only impl.Gravatar Julien Boeuf2015-05-20
| | | | | | | | Still TODO: - a way to plug a metadata processing (somewhat elsewhere but did not one to overload this already large PR). - plug-in the auth context on the client side. - Better end to end testing.
* Addressing comments.Gravatar Julien Boeuf2015-05-08
|
* Refactoring of core security to remove the factories.Gravatar Julien Boeuf2015-04-17
| | | | | - Renamed security_context -> security_connector. - Credentials are now responsible for creating their own connectors.
* Adding option to add a null terminator when loading a file.Gravatar Julien Boeuf2015-04-15
| | | | | | - This will take care of a potential issue with default credentials where the slice pointer is casted as const char * for APIs that need a null terminated string.
* Share mdctx between secure channelsGravatar Craig Tiller2015-04-14
|
* strcmp: change all !str[n]cmp to str[n]cmp == 0Gravatar Ronnie Sahlberg2015-03-07
| | | | | | | | Change all !str[n]cmp to be str[n]cmp == 0 consistently across the codebase. Issue #231 Signed-off-by: Ronnie Sahlberg <ronniesahlberg@gmail.com>
* Merge github.com:grpc/grpc into creditGravatar Craig Tiller2015-02-26
|\
| * Strip port in peer name checkGravatar Craig Tiller2015-02-25
| | | | | | | | | | | | | | This string comes from an authority field, which is allowed to contain a ':' port (see https://tools.ietf.org/html/rfc3986#section-3.2). We need to strip it before performing host name verification.
| * Merge pull request #776 from jboeuf/ssl_cipher_suitesGravatar Abhishek Kumar2015-02-24
| |\ | | | | | | Using HTTP2 compliant cipher suites by default.
| | * Addressing comments.Gravatar Julien Boeuf2015-02-24
| | |
| | * Using HTTP2 compliant cipher suites by default.Gravatar Julien Boeuf2015-02-24
| | | | | | | | | | | | | | | | | | - Added a way to override the cipher suites with an environment variable so that we can still do interop testing with java7. - Takes care of #681.
| * | Removing port from checked ssl target name.Gravatar Julien Boeuf2015-02-24
| |/ | | | | | | - Should fix #746.
* | Merge github.com:grpc/grpc into creditGravatar Craig Tiller2015-02-23
|\|
| * Merge pull request #710 from jboeuf/default_google_credsGravatar Craig Tiller2015-02-23
| |\ | | | | | | Added support for default credentials.
| | * Addressing iniitial feedback.Gravatar Julien Boeuf2015-02-23
| | | | | | | | | | | | | | | | | | | | | - Renaming default credentials -> google default credentials. - Various other things in cpp: - Adding Cpp wrapping for JWT Tokens. - Renaming ComposeCredentials -> CompositeCredentials.
* | | Update C++ server with new core APIGravatar Craig Tiller2015-02-23
|/ / | | | | | | And reflects the C++ API in ServerBuilder.
* | Actually installing root certificates on the system.Gravatar Nicolas "Pixel" Noble2015-02-22
| |
* | Merge branch 'master' of github.com:google/grpc into installed_ssl_roots-patchGravatar Nicolas "Pixel" Noble2015-02-22
|\|
| * Merge pull request #641 from jboeuf/jwt_id_tokenGravatar Yang Gao2015-02-21
| |\ | | | | | | Implementing JWT credentials (a.k.a JWT ID Tokens).
* | | Adding roots.pem from Mozilla and associated logic.Gravatar Julien Boeuf2015-02-20
|/ / | | | | | | | | | | | | - The roots.pem file has been generated from https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt using https://github.com/agl/extract-nss-root-certs
* | Merge pull request #665 from nicolasnoble/ssl-prefixGravatar jboeuf2015-02-20
|\ \ | | | | | | Defining an installation prefix for grpc's root certs at compilation time.
| * | Defining an installation prefix for grpc's root certs at compilation time.Gravatar Nicolas "Pixel" Noble2015-02-20
| | |
* | | Removing the hardcoded SSL roots.Gravatar Julien Boeuf2015-02-20
|/ / | | | | | | | | | | - Makes 2 tests fail: - httpcli_test - interop_test
* | Revert "Adding a constant for a well known place where the SSL roots are ↵Gravatar Nicolas Noble2015-02-19
| | | | | | | | installed."
* | Adding a constant for a well known place where the SSL roots are installed.Gravatar Julien Boeuf2015-02-19
| |
| * Implementing JWT credentials (a.k.a JWT ID Tokens).Gravatar Julien Boeuf2015-02-19
|/ | | | - Not tested end to end yet
* Add missing new-lines at end of fileGravatar Craig Tiller2015-02-18
|
* Update copyright to 2015Gravatar Craig Tiller2015-02-18
|
* Fixing memleak.Gravatar Julien Boeuf2015-02-17
| | | | - Fixes #542
* Adding call host (:authority header) check in the secure channel.Gravatar Julien Boeuf2015-02-10
| | | | | | | - Fixes #405. - This change is not tested as it should (only end to end and no negative testing). Will do better when we have testing framework for filters.
* Adding support for loading the SSL roots from an environment variable.Gravatar Julien Boeuf2015-02-02
| | | | | | - Had to add support for files and environment variables as well. - I can't compile on windows so I'm sure there will be some issues. - Tested end-to-end with the simple ssl fullstack test.
* Move string.h to internal codeGravatar Craig Tiller2015-01-23
|
* Changing the SSL (Server) Credentials API.Gravatar Julien Boeuf2015-01-20
| | | | | | | | | | | | | | - Changed the unsigned char * + size to NULL terminated strings which makes sense for the PEM format. I may change TSI later (but the impact will hopefully be much more limited). - Added a way to pass multiple key/cert pairs to servers which is needed when hosting more than one domain. - Removed the C++ SSL credentials tests as we are going to have an option to not specify the roots which will then be derived from the environment (well-known platform dependent locations and/or environment variable). - Fixed the php build which is the only one added in the run_test.py. This change will certainly break node, python and ruby.
* Use clang-format-3.5Gravatar Craig Tiller2015-01-18
|
* Changing size type in Transport Security (TSI) from uint32_t to size_t:Gravatar Julien Boeuf2015-01-15
| | | | Will remove grpc impedance mismatch.
* Review changes for :scheme conversion to http[s]Gravatar David Klempner2015-01-14
| | | | | | 1. scheme_from_args should return const char* 2. Rename grpc.scheme arg to grpc.http2_scheme, and define a macro for it.
* Send a scheme of http or https as appropriate, rather than grpc.Gravatar David Klempner2015-01-13
| | | | | | This requires additional logic to determine whether to send http or https. This change assumes a default of http, and plumbs down https through a synthesized channel arg when using the ssl transport.
* clang-format codebaseGravatar Craig Tiller2015-01-13
|
* Moving the google-internal security code in their own files.Gravatar jboeuf2015-01-12
| | | | | | | | | | Checked that the opensource version still builds. Just addressing core for now. We will do c++ later. Change on 2015/01/12 by jboeuf <jboeuf@google.com> ------------- Created by MOE: http://code.google.com/p/moe-java MOE_MIGRATED_REVID=83804014
* Add ServiceAccount Credentials wrapping and handle credentials creationGravatar yangg2015-01-12
| | | | | | | | failure. Change on 2015/01/09 by yangg <yangg@google.com> ------------- Created by MOE: http://code.google.com/p/moe-java MOE_MIGRATED_REVID=83634736
* Remove endpoint/ directories.Gravatar ctiller2014-12-17
| | | | | | | | | | Fold endpoint interface into iomgr, move secure_endpoint into security/. This will make it easier for endpoint to rely on some iomgr defined types (like pollset). Change on 2014/12/17 by ctiller <ctiller@google.com> ------------- Created by MOE: http://code.google.com/p/moe-java MOE_MIGRATED_REVID=82338036
* Advertise h2-16, h2-15, h2-14, and accept any of them.Gravatar ctiller2014-12-10
| | | | | | | | (Fixing the rollback from earlier - we were passing '1' as the protocol count, not num_alpn_protocols) Change on 2014/12/10 by ctiller <ctiller@google.com> ------------- Created by MOE: http://code.google.com/p/moe-java MOE_MIGRATED_REVID=81783755
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-23 20:43:50 +0000