aboutsummaryrefslogtreecommitdiffhomepage
path: root/test/core/security
Commit message (Collapse)AuthorAge
* use a new gcp env check mechansimGravatar Yihua Zhang2018-05-18
|
* Add ALTS fuzzerGravatar Yihua Zhang2018-05-08
|
* incorporate alts to google default credsGravatar Yihua Zhang2018-05-03
|
* fix namespace of security_connector test functionsGravatar jiangtaoli20162018-04-27
|
* gRPC core: strip zone-id from IPv6 hosts before TLS verificationGravatar David Cowden2018-04-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When initiating a connection to an IPv6 peer using an address that is not globally scoped, there may be ambiguity regarding which zone the destination address applies to when multiple links of the same scope are present. The scoped address architecture and zone-id syntax are described in rfc4007 and rfc 6874, respectively: * https://tools.ietf.org/html/rfc4007#section-6 * https://tools.ietf.org/html/rfc6874 This patch allows host name verification performed during TLS session establishment, and on a per-call basis, to work correctly when the peer presents a certificate with a non-global IPv6 address listed as one of its alternate names. Whether arbitrary certificate authorities choose issue certificates of this nature, or not, is outside the scope of gRPC. The zone-id is separated from the address using a percent (%) character. It is considered a system implementation detail and guidance suggests it be stripped from any paths or addresses egressing a host because it is irrelevant and meaningless otherwise. It would not make sense for a server to present a certificate containing non-global IPv6 addresses with zone-ids present nor would it work unless two hosts happened to be using the same zone-id. ssl_host_matches_name is prefixed with grpc_ because it has been promoted to the global namespace for testing. Resolves #14371
* Add C++ experimental API extensions for ALTS C stackGravatar Yihua Zhang2018-04-16
|
* cache default SSL root cert storeGravatar jiangtaoli20162018-03-23
|
* Add ALTS code to grpc/coreGravatar Yihua Zhang2018-03-08
|
* Revert "Add ALTS C stack to gRPC core"Gravatar Sree Kuchibhotla2018-03-07
|
* Add ALTS code to grpc/coreGravatar Yihua Zhang2018-03-06
|
* Merge pull request #14469 from adelez/foundry_integrationGravatar adelez2018-02-22
|\ | | | | Add more bazel tests
* \ Merge pull request #14437 from yihuazhang/security_connector_replacementGravatar Mark D. Roth2018-02-21
|\ \ | | | | | | Security connector replacement
| | * Add more bazel testsGravatar Adele Zhou2018-02-20
| |/ |/|
| * place security_connector in its own subdirectoryGravatar Yihua Zhang2018-02-20
| |
* | Fix the fuzzer corpus path.Gravatar Adele Zhou2018-02-16
|/
* Run clang fmtGravatar Noah Eisen2018-02-09
|
* Autofix c casts to c++ castsGravatar Noah Eisen2018-02-09
|
* Merge branch 'master' into gpr_reviewGravatar Vijay Pai2018-02-08
|\
* | Privatize useful.h and avl.hGravatar Vijay Pai2018-02-02
| |
| * Move cmdline and subprocess from public gpr to test/core/utilGravatar Vijay Pai2018-01-25
|/
* Split lib/support into lib/gpr and lib/gpr++.Gravatar Mark D. Roth2018-01-18
|
* windows needs fflush after fprintfGravatar Jan Tattermusch2018-01-12
|
* Revert "Revert "All instances of exec_ctx being passed around in src/core ↵Gravatar Yash Tibrewal2017-12-06
| | | | removed""
* Revert "All instances of exec_ctx being passed around in src/core removed"Gravatar Yash Tibrewal2017-12-06
|
* Merge master into execctxGravatar Yash Tibrewal2017-12-05
|\
| * Pass a pollset_set to some client handshakers.Gravatar Dan Born2017-12-04
| |
* | Remove _ prefixed variable namesGravatar Yash Tibrewal2017-11-29
| |
* | Fix tests to call grpc_init and grpc_shutdown before using exec_ctxGravatar Yash Tibrewal2017-11-28
| |
* | A few src/core fixes due to missing exec_ctx_finishGravatar Yash Tibrewal2017-11-21
| |
* | Merge masterGravatar Yash Tibrewal2017-11-16
|\|
* | Move ExecCtx to grpc_core namespace. Make exec_ctx a private static in ↵Gravatar Yash Tibrewal2017-11-14
| | | | | | | | ExecCtx and some minor changes
* | Address some PR commentsGravatar Yash Tibrewal2017-11-14
| |
| * clang-format after nullptr changesGravatar Craig Tiller2017-11-10
| |
| * Enable clang-tidy as a sanity check, fix up all known failuresGravatar Craig Tiller2017-11-10
| |
* | Merge with masterGravatar Yash Tibrewal2017-11-09
|\|
| * Merge masterGravatar Yash Tibrewal2017-11-06
| |\
| | * Merge github.com:grpc/grpc into 50Gravatar Craig Tiller2017-11-06
| | |\
| | | * Removing port 443 for the service name (used as audience) when the url is https.Gravatar Julien Boeuf2017-11-03
| | | |
| | * | Update clang-format to 5.0Gravatar Craig Tiller2017-11-03
| | |/
| * | LLVMfuzzer extern CGravatar Yash Tibrewal2017-10-31
| | |
| * | BUILD changes. test languauge to C++Gravatar Yash Tibrewal2017-10-31
| | |
| * | some BUILD changes and designated initializersGravatar Yash Tibrewal2017-10-30
| | |
| * | BUILD files changes for bazelGravatar Yash Tibrewal2017-10-30
| | |
| * | Remove unnecessary extern CsGravatar Yash Tibrewal2017-10-25
| | |
| * | ssl_credentials_tests C++izedGravatar Yash Tibrewal2017-10-25
| | |
| * | Merge branch 'master' into testc++izeGravatar Yash Tibrewal2017-10-25
| |\|
| * | rename all test core files to cc and a lot of C++ style conversionsGravatar Yash Tibrewal2017-10-25
| | |
| | * Expose conversion of grpc to tsi cert pairsGravatar Justin Burke2017-10-23
| |/
* / Removing instances of exec_ctx being passed around in functions inGravatar Yash Tibrewal2017-10-18
|/ | | | | | | | | | | src/core. exec_ctx is now a thread_local pointer of type ExecCtx instead of grpc_exec_ctx which is initialized whenever ExecCtx is instantiated. ExecCtx also keeps track of the previous exec_ctx so that nesting of exec_ctx is allowed. This means that there is only one exec_ctx being used at any time. Also, grpc_exec_ctx_finish is called in the destructor of the object, and the previous exec_ctx is restored to avoid breaking current functionality. The code still explicitly calls grpc_exec_ctx_finish because removing all such instances causes the code to break.
* Merge github.com:grpc/grpc into flowctl+millisGravatar Craig Tiller2017-09-29
|\