aboutsummaryrefslogtreecommitdiffhomepage
path: root/test/core/security
Commit message (Collapse)AuthorAge
* Merge pull request #17547 from markdroth/alignment_cleanupGravatar Mark D. Roth2018-12-20
|\ | | | | Remove now-unnecessary workarounds for alignment issues.
| * Remove now-unnecessary workarounds for alignment issues.Gravatar Mark D. Roth2018-12-18
| |
* | Merge remote-tracking branch 'upstream/master' into ↵Gravatar yang-g2018-12-17
|\| | | | | | | gpr_test_util_to_grpc_test_util
| * Move security credentials, connectors, and auth context to C++Gravatar Soheil Hassas Yeganeh2018-12-13
| | | | | | | | | | | | | | This is to use `grpc_core::RefCount` to improve performnace. This commit also replaces explicit C vtables, with C++ vtable with its own compile time assertions and performance benefits. It also makes use of `RefCountedPtr` wherever possible.
* | Fix BUILD files. Manually edit bzl filesGravatar yang-g2018-12-06
| |
| * bring back original network test for metadata server detectionGravatar Yihua Zhang2018-12-05
|/
* change tests to use the new class instead of grpc_test_initGravatar yang-g2018-11-30
|
* move helper function into namespaceGravatar yang-g2018-10-26
|
* Remove the internal cache for google_default_credentialsGravatar yang-g2018-10-26
|
* Merge pull request #16963 from yihuazhang/security_connector_refactor_newGravatar yihuaz2018-10-24
|\ | | | | security connector refactor
| * security connector refactorGravatar Yihua Zhang2018-10-22
| |
* | Do not pass interested_parties during handshakeGravatar Yihua Zhang2018-10-12
|/
* Add changes in #16782Gravatar Yihua Zhang2018-10-05
|
* Turn loading system root certificate as defaultGravatar jiangtaoli20162018-09-04
|
* Fix a number of spelling errors.Gravatar Chris Lamb2018-08-22
|
* Added system roots feature to load roots from OS trust storeGravatar tdbhacks2018-08-09
| | | | | | Added a flag-guarded feature that allows gRPC to load TLS/SSL roots from the OS trust store. This is the Linux-specific implementation of such feature.
* Don't segfault when product name from BIOS is emptyGravatar Dan Rosart2018-07-03
| | | | Somehow some Dell servers we're trying to run a gRPC client on have an empty product name in the BIOS. When gRPC tries to creadte default credentials, it checks whether it's running on GCE by strcmp()ing the contents of /sys/class/dmi/id/product_name to some magic strings. When it reads that file, it gets only a newline; in trim() it skips over the newline in both directions, and since end < start it returns nullptr. This causes a segfault in the strcmp() call. Since a machine without a product name clearly isn't GCE, change it to return false instead.
* Include port_platform in gcp_environment tests.Gravatar Dan Rosart2018-06-27
| | | | | | | Both the Windows and Linux tests use platform-specific macros to determine whether they should execute, but they weren't including the file where those macros were defined, so they were always running the else case of that check, which meant they weren't testing anything.
* Revert "Revert "Add suppressions to sanitizers for bazel builds""Gravatar adelez2018-06-15
|
* Revert "Add suppressions to sanitizers for bazel builds"Gravatar Nicolas Noble2018-06-14
|
* Add data param to grpc_cc_libraryGravatar Adele Zhou2018-06-13
|
* use a new gcp env check mechansimGravatar Yihua Zhang2018-05-18
|
* Add ALTS fuzzerGravatar Yihua Zhang2018-05-08
|
* incorporate alts to google default credsGravatar Yihua Zhang2018-05-03
|
* fix namespace of security_connector test functionsGravatar jiangtaoli20162018-04-27
|
* gRPC core: strip zone-id from IPv6 hosts before TLS verificationGravatar David Cowden2018-04-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When initiating a connection to an IPv6 peer using an address that is not globally scoped, there may be ambiguity regarding which zone the destination address applies to when multiple links of the same scope are present. The scoped address architecture and zone-id syntax are described in rfc4007 and rfc 6874, respectively: * https://tools.ietf.org/html/rfc4007#section-6 * https://tools.ietf.org/html/rfc6874 This patch allows host name verification performed during TLS session establishment, and on a per-call basis, to work correctly when the peer presents a certificate with a non-global IPv6 address listed as one of its alternate names. Whether arbitrary certificate authorities choose issue certificates of this nature, or not, is outside the scope of gRPC. The zone-id is separated from the address using a percent (%) character. It is considered a system implementation detail and guidance suggests it be stripped from any paths or addresses egressing a host because it is irrelevant and meaningless otherwise. It would not make sense for a server to present a certificate containing non-global IPv6 addresses with zone-ids present nor would it work unless two hosts happened to be using the same zone-id. ssl_host_matches_name is prefixed with grpc_ because it has been promoted to the global namespace for testing. Resolves #14371
* Add C++ experimental API extensions for ALTS C stackGravatar Yihua Zhang2018-04-16
|
* cache default SSL root cert storeGravatar jiangtaoli20162018-03-23
|
* Add ALTS code to grpc/coreGravatar Yihua Zhang2018-03-08
|
* Revert "Add ALTS C stack to gRPC core"Gravatar Sree Kuchibhotla2018-03-07
|
* Add ALTS code to grpc/coreGravatar Yihua Zhang2018-03-06
|
* Merge pull request #14469 from adelez/foundry_integrationGravatar adelez2018-02-22
|\ | | | | Add more bazel tests
* \ Merge pull request #14437 from yihuazhang/security_connector_replacementGravatar Mark D. Roth2018-02-21
|\ \ | | | | | | Security connector replacement
| | * Add more bazel testsGravatar Adele Zhou2018-02-20
| |/ |/|
| * place security_connector in its own subdirectoryGravatar Yihua Zhang2018-02-20
| |
* | Fix the fuzzer corpus path.Gravatar Adele Zhou2018-02-16
|/
* Run clang fmtGravatar Noah Eisen2018-02-09
|
* Autofix c casts to c++ castsGravatar Noah Eisen2018-02-09
|
* Merge branch 'master' into gpr_reviewGravatar Vijay Pai2018-02-08
|\
* | Privatize useful.h and avl.hGravatar Vijay Pai2018-02-02
| |
| * Move cmdline and subprocess from public gpr to test/core/utilGravatar Vijay Pai2018-01-25
|/
* Split lib/support into lib/gpr and lib/gpr++.Gravatar Mark D. Roth2018-01-18
|
* windows needs fflush after fprintfGravatar Jan Tattermusch2018-01-12
|
* Revert "Revert "All instances of exec_ctx being passed around in src/core ↵Gravatar Yash Tibrewal2017-12-06
| | | | removed""
* Revert "All instances of exec_ctx being passed around in src/core removed"Gravatar Yash Tibrewal2017-12-06
|
* Merge master into execctxGravatar Yash Tibrewal2017-12-05
|\
| * Pass a pollset_set to some client handshakers.Gravatar Dan Born2017-12-04
| |
* | Remove _ prefixed variable namesGravatar Yash Tibrewal2017-11-29
| |
* | Fix tests to call grpc_init and grpc_shutdown before using exec_ctxGravatar Yash Tibrewal2017-11-28
| |
* | A few src/core fixes due to missing exec_ctx_finishGravatar Yash Tibrewal2017-11-21
| |