grpc/core at f44949cbb0be0f2dda67b3d516123804df1d01ef - grpc

The C based gRPC (C++, Python, Ruby, Objective-C, PHP, C#) https://grpc.io/

David Cowden 116fd29a36 gRPC core: strip zone-id from IPv6 hosts before TLS verification When initiating a connection to an IPv6 peer using an address that is not globally scoped, there may be ambiguity regarding which zone the destination address applies to when multiple links of the same scope are present. The scoped address architecture and zone-id syntax are described in rfc4007 and rfc 6874, respectively: * https://tools.ietf.org/html/rfc4007#section-6 * https://tools.ietf.org/html/rfc6874 This patch allows host name verification performed during TLS session establishment, and on a per-call basis, to work correctly when the peer presents a certificate with a non-global IPv6 address listed as one of its alternate names. Whether arbitrary certificate authorities choose issue certificates of this nature, or not, is outside the scope of gRPC. The zone-id is separated from the address using a percent (%) character. It is considered a system implementation detail and guidance suggests it be stripped from any paths or addresses egressing a host because it is irrelevant and meaningless otherwise. It would not make sense for a server to present a certificate containing non-global IPv6 addresses with zone-ids present nor would it work unless two hosts happened to be using the same zone-id. ssl_host_matches_name is prefixed with grpc_ because it has been promoted to the global namespace for testing. Resolves #14371		7 years ago
..
avl	Run clang fmt	7 years ago
backoff	Run clang fmt	7 years ago
bad_client	C++ize gpr_thread as grpc_core::Thread, make it 2-phase init (construct/Start)	7 years ago
bad_ssl	Fix fuzzer tests for Bazel	7 years ago
channel	Merge branch 'master' of github.com:grpc/grpc into authority_header	7 years ago
client_channel	Clean up test cases in dns_resolver_test.	7 years ago
compression	Remove unnecessary includes of exec_ctx.h	7 years ago
debug	Use stack frame size limits for consistency with internal builds	7 years ago
end2end	Fix retry code handling of internally triggered recv_trailing_metadata.	7 years ago
fling	Run clang fmt	7 years ago
gpr	Stop including inttypes.h in gRPC core public header in Apple platforms	7 years ago
gprpp	Avoid warnings from LLVM -Wself-assign.	7 years ago
handshake	Add tracer for handshakers.	7 years ago
http	Add logging for helping debug httpcli tests	7 years ago
iomgr	use renamed function in test for cheking so_reuseport	7 years ago
json	Autofix c casts to c++ casts	7 years ago
memory_usage	Run clang fmt	7 years ago
nanopb	clang-format	7 years ago
network_benchmarks	Fix low level benchmark	7 years ago
profiling	Fix another typo	8 years ago
security	gRPC core: strip zone-id from IPv6 hosts before TLS verification	7 years ago
slice	Remove unnecessary includes of exec_ctx.h	7 years ago
statistics	C++ize gpr_thread as grpc_core::Thread, make it 2-phase init (construct/Start)	7 years ago
surface	Add C++ experimental API extensions for ALTS C stack	7 years ago
transport	Remove unnecessary includes of exec_ctx.h	7 years ago
tsi	Merge pull request #15047 from davidben/ssl-session-access	7 years ago
util	Fix a memory leak	7 years ago