[tls] Add copy constructor for TlsCredentialsOptions

include/grpcpp/security/tls_credentials_options.h

@@ -45,6 +45,12 @@ class TlsCredentialsOptions {
   // will be used in the TLS handshake
   TlsCredentialsOptions();
   ~TlsCredentialsOptions();
+
+  // Copy constructor does a deep copy of the underlying pointer. No assignment
+  // permitted
+  TlsCredentialsOptions(const TlsCredentialsOptions& other);
+  TlsCredentialsOptions& operator=(const TlsCredentialsOptions& other) = delete;
+
   // ---- Setters for member fields ----
   // Sets the certificate provider used to store root certs and identity certs.
   void set_certificate_provider(

src/cpp/common/tls_credentials_options.cc

@@ -39,6 +39,12 @@ TlsCredentialsOptions::~TlsCredentialsOptions() {
   grpc_tls_credentials_options_destroy(c_credentials_options_);
 }
 
+TlsCredentialsOptions::TlsCredentialsOptions(
+    const TlsCredentialsOptions& other) {
+  c_credentials_options_ =
+      grpc_tls_credentials_options_copy(other.c_credentials_options_);
+}
+
 void TlsCredentialsOptions::set_certificate_provider(
     std::shared_ptr<CertificateProviderInterface> certificate_provider) {
   certificate_provider_ = certificate_provider;

test/cpp/client/credentials_test.cc

@@ -423,6 +423,24 @@ TEST(CredentialsTest, TlsChannelCredentialsWithCrlProviderAndDirectory) {
   GPR_ASSERT(channel_credentials.get() != nullptr);
 }
 
+TEST(CredentialsTest, TlsCredentialsOptionsCopyConstructor) {
+  // define a class that grants access to the internal
+  // grpc_tls_credentials_options pointer
+  class TlsTestCredentialsOptions
+      : public grpc::experimental::TlsCredentialsOptions {
+   public:
+    grpc_tls_credentials_options* internal_cred_opts() {
+      return mutable_c_credentials_options();
+    }
+  };
+  TlsTestCredentialsOptions options;
+  TlsTestCredentialsOptions copied_options = options;
+
+  // Make sure the copy constructor cloned the internal pointer
+  GPR_ASSERT(options.internal_cred_opts() !=
+             copied_options.internal_cred_opts());
+}
+
 TEST(CredentialsTest, TlsCredentialsOptionsDoesNotLeak) {
   TlsCredentialsOptions options;
   (void)options;