Ashitha Santhosh
1290364374
Plumb subject field and add to authz flow. ( #27615 )
...
* Plumb subject field and add to authz flow.
* formatting
* Test on empty principal
* resolving comments
* resolving comment
* update subject check in test
3 years ago
ZhenLian
2e14f6fa70
Support Custom Post-handshake Verification in TlsCredentials ( #25631 )
...
* custom verification refactoring - post-handshake verification
3 years ago
Ashitha Santhosh
835eacc32d
Check for mtls authenticated ( #27360 )
...
* Check for mtls authenticated.
4 years ago
Ashitha Santhosh
9bbdb70cdc
Add uri sans ( #26362 )
...
* Add uri sans
4 years ago
Ashitha Santhosh
0570bd9205
Plumbs SAN fields to tsi_peer. ( #25874 )
4 years ago
ZhenLian
f6b69a659b
Add Comments For Getting Peer Cert Full Chain ( #25942 )
4 years ago
Matthew Stevenson
32c0846d45
Add TLS 1.2 testing.
5 years ago
ZhenLian
9f92365657
Expose Peer SPIFFE Identity
5 years ago
Akshay Kumar
02371b7569
FullChainExperimental-01-200106-ssl_transport_security_test-4
5 years ago
Yihua Zhang
e10d90ba27
add security level negotiation between call creds and channel.
5 years ago
Akshay Kumar
db11b94f25
FullChainExperimental-01-200103
5 years ago
Zhen Lian
618771dc6a
[Exposing ALTS Context 2/2] Utility Wrapper Class
...
This PR contains:
1. An ALTS context exposed for users to use, and a GetAltsContextFromAuthContext() function to get ALTS context from an AuthContext. Functionality-wise this part is similar with a previous PR https://github.com/grpc/grpc/pull/21536 , but in this PR, we adjusted the code structure and made some minor changes to better suit function clientAuthzCheck()
2. A clientAuthzCheck() function for users to check if the server is authorized
5 years ago
Guantao Liu
b341ddf72b
Revert "[Exposing ALTS Context 2/2] Utility Wrapper Class"
5 years ago
Zhen Lian
98391c8f76
[Exposing ALTS Context 2/2] Utility Wrapper Class
5 years ago
yuangongji (A)
8c27e86b8b
some typo errors
6 years ago
Yihua Zhang
0531d3d3ad
extend local credentials to support tcp loopback
6 years ago
Jan Tattermusch
bc8f515fb8
clang format
7 years ago
Jan Tattermusch
2bc7b8e0a3
address comments
7 years ago
Jan Tattermusch
458775d4f9
improve wording
7 years ago
Jan Tattermusch
fe20ad62a0
improve doc comments for security constants
7 years ago
Yihua Zhang
acc6ba0c24
Add C++ wrapper for local credentials
7 years ago
Ruslan Nigmatullin
7ae3733cab
[grpc] Add SSL session client cache support
7 years ago
ncteisen
01a7547a3f
Re 89 the public headers
7 years ago
ncteisen
adbfbd5977
Remove all extern C
7 years ago
Justin Burke
c1d354d7f2
Support SSL server certificate reloading.
8 years ago
Jan Tattermusch
7897ae9308
auto-fix most of licenses
8 years ago
Alexander Polcyn
d809a15ec4
cpp doc nits
8 years ago
Deepak Lukose
dba4c5fd01
Add various options to verify ssl/tls client cert including letting the
...
application handle the authentication.
9 years ago