legacy-libs/grpc/deps/grpc/src/core/lib/security/credentials/ssl/ssl_credentials.h

   1 /*
   2  *
   3  * Copyright 2016 gRPC authors.
   4  *
   5  * Licensed under the Apache License, Version 2.0 (the "License");
   6  * you may not use this file except in compliance with the License.
   7  * You may obtain a copy of the License at
   8  *
   9  *     http://www.apache.org/licenses/LICENSE-2.0
  10  *
  11  * Unless required by applicable law or agreed to in writing, software
  12  * distributed under the License is distributed on an "AS IS" BASIS,
  13  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  14  * See the License for the specific language governing permissions and
  15  * limitations under the License.
  16  *
  17  */
  18 #ifndef GRPC_CORE_LIB_SECURITY_CREDENTIALS_SSL_SSL_CREDENTIALS_H
  19 #define GRPC_CORE_LIB_SECURITY_CREDENTIALS_SSL_SSL_CREDENTIALS_H
  20
  21 #include <grpc/support/port_platform.h>
  22
  23 #include "src/core/lib/security/credentials/credentials.h"
  24
  25 #include "src/core/lib/security/security_connector/ssl/ssl_security_connector.h"
  26
  27 class grpc_ssl_credentials : public grpc_channel_credentials {
  28  public:
  29   grpc_ssl_credentials(const char* pem_root_certs,
  30                        grpc_ssl_pem_key_cert_pair* pem_key_cert_pair,
  31                        const grpc_ssl_verify_peer_options* verify_options);
  32
  33   ~grpc_ssl_credentials() override;
  34
  35   grpc_core::RefCountedPtr<grpc_channel_security_connector>
  36   create_security_connector(
  37       grpc_core::RefCountedPtr<grpc_call_credentials> call_creds,
  38       const char* target, const grpc_channel_args* args,
  39       grpc_channel_args** new_args) override;
  40
  41  private:
  42   void build_config(const char* pem_root_certs,
  43                     grpc_ssl_pem_key_cert_pair* pem_key_cert_pair,
  44                     const grpc_ssl_verify_peer_options* verify_options);
  45
  46   grpc_ssl_config config_;
  47 };
  48
  49 struct grpc_ssl_server_certificate_config {
  50   grpc_ssl_pem_key_cert_pair* pem_key_cert_pairs = nullptr;
  51   size_t num_key_cert_pairs = 0;
  52   char* pem_root_certs = nullptr;
  53 };
  54
  55 struct grpc_ssl_server_certificate_config_fetcher {
  56   grpc_ssl_server_certificate_config_callback cb = nullptr;
  57   void* user_data;
  58 };
  59
  60 class grpc_ssl_server_credentials final : public grpc_server_credentials {
  61  public:
  62   grpc_ssl_server_credentials(
  63       const grpc_ssl_server_credentials_options& options);
  64   ~grpc_ssl_server_credentials() override;
  65
  66   grpc_core::RefCountedPtr<grpc_server_security_connector>
  67   create_security_connector() override;
  68
  69   bool has_cert_config_fetcher() const {
  70     return certificate_config_fetcher_.cb != nullptr;
  71   }
  72
  73   grpc_ssl_certificate_config_reload_status FetchCertConfig(
  74       grpc_ssl_server_certificate_config** config) {
  75     GPR_DEBUG_ASSERT(has_cert_config_fetcher());
  76     return certificate_config_fetcher_.cb(certificate_config_fetcher_.user_data,
  77                                           config);
  78   }
  79
  80   const grpc_ssl_server_config& config() const { return config_; }
  81
  82  private:
  83   void build_config(
  84       const char* pem_root_certs,
  85       grpc_ssl_pem_key_cert_pair* pem_key_cert_pairs, size_t num_key_cert_pairs,
  86       grpc_ssl_client_certificate_request_type client_certificate_request);
  87
  88   grpc_ssl_server_config config_;
  89   grpc_ssl_server_certificate_config_fetcher certificate_config_fetcher_;
  90 };
  91
  92 tsi_ssl_pem_key_cert_pair* grpc_convert_grpc_to_tsi_cert_pairs(
  93     const grpc_ssl_pem_key_cert_pair* pem_key_cert_pairs,
  94     size_t num_key_cert_pairs);
  95
  96 void grpc_tsi_ssl_pem_key_cert_pairs_destroy(tsi_ssl_pem_key_cert_pair* kp,
  97                                              size_t num_key_cert_pairs);
  98
  99 #endif /* GRPC_CORE_LIB_SECURITY_CREDENTIALS_SSL_SSL_CREDENTIALS_H */