[ssl] Support Windows system roots. (#34874)
This PR is copied from #34276, since I did not have permissions to add commits to it. That PR has been verified to work (see the top-level description). This PR just makes the gRPC tests pass (e.g. adding includes, clang formatting).
Closes #34874
COPYBARA_INTEGRATE_REVIEW=https://github.com/grpc/grpc/pull/34874 from matthewstevenson88:pull_34276 d5fb73e5b2
PiperOrigin-RevId: 609107146
pull/35966/head
Matthew Stevenson
1 year ago
committed by
Copybara-Service
parent
d54074c570
commit
51bccbdcf9
19 changed files with 134 additions and 6 deletions
@ -0,0 +1,87 @@ |
|||||||
|
//
|
||||||
|
//
|
||||||
|
// Copyright 2023 gRPC authors.
|
||||||
|
//
|
||||||
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
// you may not use this file except in compliance with the License.
|
||||||
|
// You may obtain a copy of the License at
|
||||||
|
//
|
||||||
|
// http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
//
|
||||||
|
// Unless required by applicable law or agreed to in writing, software
|
||||||
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
// See the License for the specific language governing permissions and
|
||||||
|
// limitations under the License.
|
||||||
|
//
|
||||||
|
//
|
||||||
|
|
||||||
|
#include <grpc/support/port_platform.h> |
||||||
|
|
||||||
|
#if defined(GPR_WINDOWS) |
||||||
|
|
||||||
|
#pragma comment(lib, "crypt32") |
||||||
|
|
||||||
|
#include <esent.h> |
||||||
|
#include <wincrypt.h> |
||||||
|
|
||||||
|
#include <vector> |
||||||
|
|
||||||
|
#include <grpc/slice.h> |
||||||
|
#include <grpc/slice_buffer.h> |
||||||
|
#include <grpc/support/alloc.h> |
||||||
|
#include <grpc/support/log.h> |
||||||
|
|
||||||
|
#include "src/core/lib/gpr/useful.h" |
||||||
|
#include "src/core/lib/security/security_connector/load_system_roots.h" |
||||||
|
#include "src/core/lib/slice/slice_internal.h" |
||||||
|
|
||||||
|
namespace grpc_core { |
||||||
|
namespace { |
||||||
|
|
||||||
|
std::string Utf8Encode(const std::wstring& wstr) { |
||||||
|
if (wstr.empty()) return ""; |
||||||
|
|
||||||
|
int size_needed = WideCharToMultiByte(CP_UTF8, 0, &wstr[0], (int)wstr.size(), |
||||||
|
NULL, 0, NULL, NULL); |
||||||
|
std::string str_to(size_needed, 0); |
||||||
|
WideCharToMultiByte(CP_UTF8, 0, &wstr[0], (int)wstr.size(), &str_to[0], |
||||||
|
size_needed, NULL, NULL); |
||||||
|
return str_to; |
||||||
|
} |
||||||
|
|
||||||
|
} // namespace
|
||||||
|
|
||||||
|
grpc_slice LoadSystemRootCerts() { |
||||||
|
std::string bundle_string; |
||||||
|
|
||||||
|
// Open root certificate store.
|
||||||
|
HANDLE root_cert_store = CertOpenSystemStoreW(NULL, L"ROOT"); |
||||||
|
if (!root_cert_store) { |
||||||
|
return grpc_empty_slice(); |
||||||
|
} |
||||||
|
|
||||||
|
// Load all root certificates from certificate store.
|
||||||
|
PCCERT_CONTEXT cert = NULL; |
||||||
|
while ((cert = CertEnumCertificatesInStore(root_cert_store, cert)) != NULL) { |
||||||
|
// Append each certificate in PEM format.
|
||||||
|
DWORD size = 0; |
||||||
|
CryptBinaryToStringW(cert->pbCertEncoded, cert->cbCertEncoded, |
||||||
|
CRYPT_STRING_BASE64HEADER, NULL, &size); |
||||||
|
std::vector<WCHAR> pem(size); |
||||||
|
CryptBinaryToStringW(cert->pbCertEncoded, cert->cbCertEncoded, |
||||||
|
CRYPT_STRING_BASE64HEADER, pem.data(), &size); |
||||||
|
bundle_string += Utf8Encode(pem.data()); |
||||||
|
} |
||||||
|
|
||||||
|
CertCloseStore(root_cert_store, 0); |
||||||
|
if (bundle_string.size() == 0) { |
||||||
|
return grpc_empty_slice(); |
||||||
|
} |
||||||
|
|
||||||
|
return grpc_slice_from_cpp_string(std::move(bundle_string)); |
||||||
|
} |
||||||
|
|
||||||
|
} // namespace grpc_core
|
||||||
|
|
||||||
|
#endif // GPR_WINDOWS
|
||||||
Loading…
Reference in new issue