Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 1 | /* |
| 2 | * |
Craig Tiller | 0605995 | 2015-02-18 08:34:56 -0800 | [diff] [blame] | 3 | * Copyright 2015, Google Inc. |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 4 | * All rights reserved. |
| 5 | * |
| 6 | * Redistribution and use in source and binary forms, with or without |
| 7 | * modification, are permitted provided that the following conditions are |
| 8 | * met: |
| 9 | * |
| 10 | * * Redistributions of source code must retain the above copyright |
| 11 | * notice, this list of conditions and the following disclaimer. |
| 12 | * * Redistributions in binary form must reproduce the above |
| 13 | * copyright notice, this list of conditions and the following disclaimer |
| 14 | * in the documentation and/or other materials provided with the |
| 15 | * distribution. |
| 16 | * * Neither the name of Google Inc. nor the names of its |
| 17 | * contributors may be used to endorse or promote products derived from |
| 18 | * this software without specific prior written permission. |
| 19 | * |
| 20 | * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS |
| 21 | * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT |
| 22 | * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR |
| 23 | * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT |
| 24 | * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, |
| 25 | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT |
| 26 | * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, |
| 27 | * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY |
| 28 | * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
| 29 | * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE |
| 30 | * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
| 31 | * |
| 32 | */ |
| 33 | |
| 34 | #include <grpc/grpc.h> |
| 35 | |
| 36 | #include <stdlib.h> |
| 37 | #include <string.h> |
| 38 | |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 39 | #include <grpc/support/alloc.h> |
| 40 | |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 41 | #include "src/core/channel/channel_args.h" |
| 42 | #include "src/core/channel/client_channel.h" |
David Garcia Quintas | 5927aec | 2015-06-18 17:24:44 -0700 | [diff] [blame] | 43 | #include "src/core/channel/compress_filter.h" |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 44 | #include "src/core/channel/http_client_filter.h" |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 45 | #include "src/core/client_config/resolver_registry.h" |
ctiller | 18b49ab | 2014-12-09 14:39:16 -0800 | [diff] [blame] | 46 | #include "src/core/iomgr/tcp_client.h" |
Julien Boeuf | c6f8d0a | 2015-05-11 22:40:02 -0700 | [diff] [blame] | 47 | #include "src/core/security/auth_filters.h" |
Julien Boeuf | 7d1d9ca | 2015-04-17 14:38:48 -0700 | [diff] [blame] | 48 | #include "src/core/security/credentials.h" |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 49 | #include "src/core/security/secure_transport_setup.h" |
| 50 | #include "src/core/surface/channel.h" |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 51 | #include "src/core/transport/chttp2_transport.h" |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 52 | #include "src/core/tsi/transport_security_interface.h" |
| 53 | |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 54 | typedef struct { |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 55 | grpc_connector base; |
| 56 | gpr_refcount refs; |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 57 | |
Julien Boeuf | 7d1d9ca | 2015-04-17 14:38:48 -0700 | [diff] [blame] | 58 | grpc_channel_security_connector *security_connector; |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 59 | |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 60 | grpc_iomgr_closure *notify; |
| 61 | grpc_connect_in_args args; |
| 62 | grpc_connect_out_args *result; |
| 63 | } connector; |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 64 | |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 65 | static void connector_ref(grpc_connector *con) { |
| 66 | connector *c = (connector *)con; |
| 67 | gpr_ref(&c->refs); |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 68 | } |
| 69 | |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 70 | static void connector_unref(grpc_connector *con) { |
| 71 | connector *c = (connector *)con; |
| 72 | if (gpr_unref(&c->refs)) { |
| 73 | gpr_free(c); |
| 74 | } |
| 75 | } |
| 76 | |
| 77 | static void on_secure_transport_setup_done(void *arg, |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 78 | grpc_security_status status, |
yang-g | 097468d | 2015-07-15 22:51:39 -0700 | [diff] [blame] | 79 | grpc_endpoint *wrapped_endpoint, |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 80 | grpc_endpoint *secure_endpoint) { |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 81 | connector *c = arg; |
| 82 | grpc_iomgr_closure *notify; |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 83 | if (status != GRPC_SECURITY_OK) { |
| 84 | gpr_log(GPR_ERROR, "Secure transport setup failed with error %d.", status); |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 85 | memset(c->result, 0, sizeof(*c->result)); |
Craig Tiller | 43a2b17 | 2015-02-18 17:17:51 -0800 | [diff] [blame] | 86 | } else { |
Craig Tiller | 825b21c | 2015-07-06 08:35:02 -0700 | [diff] [blame] | 87 | c->result->transport = grpc_create_chttp2_transport( |
| 88 | c->args.channel_args, secure_endpoint, c->args.metadata_context, 1); |
| 89 | grpc_chttp2_transport_start_reading(c->result->transport, NULL, 0); |
Craig Tiller | d9a5088 | 2015-06-29 15:57:36 -0700 | [diff] [blame] | 90 | c->result->filters = gpr_malloc(sizeof(grpc_channel_filter *) * 2); |
| 91 | c->result->filters[0] = &grpc_client_auth_filter; |
| 92 | c->result->filters[1] = &grpc_http_client_filter; |
| 93 | c->result->num_filters = 2; |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 94 | } |
Craig Tiller | d9a5088 | 2015-06-29 15:57:36 -0700 | [diff] [blame] | 95 | notify = c->notify; |
| 96 | c->notify = NULL; |
| 97 | grpc_iomgr_add_callback(notify); |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 98 | } |
| 99 | |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 100 | static void connected(void *arg, grpc_endpoint *tcp) { |
| 101 | connector *c = arg; |
| 102 | grpc_iomgr_closure *notify; |
| 103 | if (tcp != NULL) { |
| 104 | grpc_setup_secure_transport(&c->security_connector->base, tcp, |
| 105 | on_secure_transport_setup_done, c); |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 106 | } else { |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 107 | memset(c->result, 0, sizeof(*c->result)); |
| 108 | notify = c->notify; |
| 109 | c->notify = NULL; |
| 110 | grpc_iomgr_add_callback(notify); |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 111 | } |
| 112 | } |
| 113 | |
Craig Tiller | 079a11b | 2015-06-30 10:07:15 -0700 | [diff] [blame] | 114 | static void connector_connect(grpc_connector *con, |
| 115 | const grpc_connect_in_args *args, |
| 116 | grpc_connect_out_args *result, |
| 117 | grpc_iomgr_closure *notify) { |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 118 | connector *c = (connector *)con; |
| 119 | GPR_ASSERT(c->notify == NULL); |
| 120 | GPR_ASSERT(notify->cb); |
| 121 | c->notify = notify; |
| 122 | c->args = *args; |
| 123 | c->result = result; |
Craig Tiller | 079a11b | 2015-06-30 10:07:15 -0700 | [diff] [blame] | 124 | grpc_tcp_client_connect(connected, c, args->interested_parties, args->addr, |
| 125 | args->addr_len, args->deadline); |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 126 | } |
| 127 | |
Craig Tiller | 079a11b | 2015-06-30 10:07:15 -0700 | [diff] [blame] | 128 | static const grpc_connector_vtable connector_vtable = { |
| 129 | connector_ref, connector_unref, connector_connect}; |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 130 | |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 131 | typedef struct { |
| 132 | grpc_subchannel_factory base; |
| 133 | gpr_refcount refs; |
| 134 | grpc_mdctx *mdctx; |
Craig Tiller | d9a5088 | 2015-06-29 15:57:36 -0700 | [diff] [blame] | 135 | grpc_channel_args *merge_args; |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 136 | grpc_channel_security_connector *security_connector; |
| 137 | } subchannel_factory; |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 138 | |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 139 | static void subchannel_factory_ref(grpc_subchannel_factory *scf) { |
| 140 | subchannel_factory *f = (subchannel_factory *)scf; |
| 141 | gpr_ref(&f->refs); |
| 142 | } |
| 143 | |
| 144 | static void subchannel_factory_unref(grpc_subchannel_factory *scf) { |
| 145 | subchannel_factory *f = (subchannel_factory *)scf; |
| 146 | if (gpr_unref(&f->refs)) { |
Craig Tiller | b367153 | 2015-07-01 10:37:40 -0700 | [diff] [blame] | 147 | GRPC_SECURITY_CONNECTOR_UNREF(&f->security_connector->base, |
| 148 | "subchannel_factory"); |
Craig Tiller | 6806e1e | 2015-06-30 10:28:29 -0700 | [diff] [blame] | 149 | grpc_channel_args_destroy(f->merge_args); |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 150 | grpc_mdctx_unref(f->mdctx); |
| 151 | gpr_free(f); |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 152 | } |
| 153 | } |
| 154 | |
Craig Tiller | 079a11b | 2015-06-30 10:07:15 -0700 | [diff] [blame] | 155 | static grpc_subchannel *subchannel_factory_create_subchannel( |
| 156 | grpc_subchannel_factory *scf, grpc_subchannel_args *args) { |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 157 | subchannel_factory *f = (subchannel_factory *)scf; |
| 158 | connector *c = gpr_malloc(sizeof(*c)); |
Craig Tiller | d9a5088 | 2015-06-29 15:57:36 -0700 | [diff] [blame] | 159 | grpc_channel_args *final_args = |
| 160 | grpc_channel_args_merge(args->args, f->merge_args); |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 161 | grpc_subchannel *s; |
| 162 | memset(c, 0, sizeof(*c)); |
| 163 | c->base.vtable = &connector_vtable; |
| 164 | c->security_connector = f->security_connector; |
| 165 | gpr_ref_init(&c->refs, 1); |
| 166 | args->mdctx = f->mdctx; |
Craig Tiller | d9a5088 | 2015-06-29 15:57:36 -0700 | [diff] [blame] | 167 | args->args = final_args; |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 168 | s = grpc_subchannel_create(&c->base, args); |
| 169 | grpc_connector_unref(&c->base); |
Craig Tiller | d9a5088 | 2015-06-29 15:57:36 -0700 | [diff] [blame] | 170 | grpc_channel_args_destroy(final_args); |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 171 | return s; |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 172 | } |
| 173 | |
Craig Tiller | 079a11b | 2015-06-30 10:07:15 -0700 | [diff] [blame] | 174 | static const grpc_subchannel_factory_vtable subchannel_factory_vtable = { |
| 175 | subchannel_factory_ref, subchannel_factory_unref, |
| 176 | subchannel_factory_create_subchannel}; |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 177 | |
| 178 | /* Create a secure client channel: |
| 179 | Asynchronously: - resolve target |
| 180 | - connect to it (trying alternatives as presented) |
| 181 | - perform handshakes */ |
Julien Boeuf | 7d1d9ca | 2015-04-17 14:38:48 -0700 | [diff] [blame] | 182 | grpc_channel *grpc_secure_channel_create(grpc_credentials *creds, |
| 183 | const char *target, |
| 184 | const grpc_channel_args *args) { |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 185 | grpc_channel *channel; |
Julien Boeuf | 7d1d9ca | 2015-04-17 14:38:48 -0700 | [diff] [blame] | 186 | grpc_arg connector_arg; |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 187 | grpc_channel_args *args_copy; |
Julien Boeuf | 7d1d9ca | 2015-04-17 14:38:48 -0700 | [diff] [blame] | 188 | grpc_channel_args *new_args_from_connector; |
Craig Tiller | 1a727fd | 2015-04-24 13:21:22 -0700 | [diff] [blame] | 189 | grpc_channel_security_connector *connector; |
Julien Boeuf | 7d1d9ca | 2015-04-17 14:38:48 -0700 | [diff] [blame] | 190 | grpc_mdctx *mdctx; |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 191 | grpc_resolver *resolver; |
| 192 | subchannel_factory *f; |
Julien Boeuf | 54b2192 | 2015-02-04 16:39:35 -0800 | [diff] [blame] | 193 | #define MAX_FILTERS 3 |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 194 | const grpc_channel_filter *filters[MAX_FILTERS]; |
| 195 | int n = 0; |
Julien Boeuf | 7d1d9ca | 2015-04-17 14:38:48 -0700 | [diff] [blame] | 196 | |
| 197 | if (grpc_find_security_connector_in_args(args) != NULL) { |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 198 | gpr_log(GPR_ERROR, "Cannot set security context in channel args."); |
Craig Tiller | 1b22b9d | 2015-07-20 13:42:22 -0700 | [diff] [blame^] | 199 | return grpc_lame_client_channel_create(target); |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 200 | } |
| 201 | |
Julien Boeuf | 7d1d9ca | 2015-04-17 14:38:48 -0700 | [diff] [blame] | 202 | if (grpc_credentials_create_security_connector( |
| 203 | creds, target, args, NULL, &connector, &new_args_from_connector) != |
| 204 | GRPC_SECURITY_OK) { |
Craig Tiller | 1b22b9d | 2015-07-20 13:42:22 -0700 | [diff] [blame^] | 205 | return grpc_lame_client_channel_create(target); |
Julien Boeuf | 7d1d9ca | 2015-04-17 14:38:48 -0700 | [diff] [blame] | 206 | } |
Julien Boeuf | 75c9b6f | 2015-05-29 13:12:12 -0700 | [diff] [blame] | 207 | mdctx = grpc_mdctx_create(); |
Julien Boeuf | 7d1d9ca | 2015-04-17 14:38:48 -0700 | [diff] [blame] | 208 | |
Julien Boeuf | 7d1d9ca | 2015-04-17 14:38:48 -0700 | [diff] [blame] | 209 | connector_arg = grpc_security_connector_to_arg(&connector->base); |
| 210 | args_copy = grpc_channel_args_copy_and_add( |
| 211 | new_args_from_connector != NULL ? new_args_from_connector : args, |
Craig Tiller | d9a5088 | 2015-06-29 15:57:36 -0700 | [diff] [blame] | 212 | &connector_arg, 1); |
Alistair Veitch | 9686dab | 2015-05-26 14:26:47 -0700 | [diff] [blame] | 213 | /* TODO(census) |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 214 | if (grpc_channel_args_is_census_enabled(args)) { |
| 215 | filters[n++] = &grpc_client_census_filter; |
Alistair Veitch | 9686dab | 2015-05-26 14:26:47 -0700 | [diff] [blame] | 216 | } */ |
David Garcia Quintas | d7d9ce2 | 2015-06-30 23:29:03 -0700 | [diff] [blame] | 217 | filters[n++] = &grpc_compress_filter; |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 218 | filters[n++] = &grpc_client_channel_filter; |
| 219 | GPR_ASSERT(n <= MAX_FILTERS); |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 220 | |
| 221 | f = gpr_malloc(sizeof(*f)); |
| 222 | f->base.vtable = &subchannel_factory_vtable; |
| 223 | gpr_ref_init(&f->refs, 1); |
Craig Tiller | 614e27a | 2015-06-30 09:32:17 -0700 | [diff] [blame] | 224 | grpc_mdctx_ref(mdctx); |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 225 | f->mdctx = mdctx; |
Craig Tiller | 5d44c06 | 2015-07-01 08:55:28 -0700 | [diff] [blame] | 226 | GRPC_SECURITY_CONNECTOR_REF(&connector->base, "subchannel_factory"); |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 227 | f->security_connector = connector; |
Craig Tiller | d9a5088 | 2015-06-29 15:57:36 -0700 | [diff] [blame] | 228 | f->merge_args = grpc_channel_args_copy(args_copy); |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 229 | resolver = grpc_resolver_create(target, &f->base); |
| 230 | if (!resolver) { |
| 231 | return NULL; |
| 232 | } |
| 233 | |
Craig Tiller | 1b22b9d | 2015-07-20 13:42:22 -0700 | [diff] [blame^] | 234 | channel = |
| 235 | grpc_channel_create_from_filters(target, filters, n, args_copy, mdctx, 1); |
Craig Tiller | 079a11b | 2015-06-30 10:07:15 -0700 | [diff] [blame] | 236 | grpc_client_channel_set_resolver(grpc_channel_get_channel_stack(channel), |
| 237 | resolver); |
Craig Tiller | 614e27a | 2015-06-30 09:32:17 -0700 | [diff] [blame] | 238 | GRPC_RESOLVER_UNREF(resolver, "create"); |
Craig Tiller | 5d44c06 | 2015-07-01 08:55:28 -0700 | [diff] [blame] | 239 | grpc_subchannel_factory_unref(&f->base); |
| 240 | GRPC_SECURITY_CONNECTOR_UNREF(&connector->base, "channel_create"); |
Craig Tiller | acf0f07 | 2015-06-29 08:24:16 -0700 | [diff] [blame] | 241 | |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 242 | grpc_channel_args_destroy(args_copy); |
Julien Boeuf | 7d1d9ca | 2015-04-17 14:38:48 -0700 | [diff] [blame] | 243 | if (new_args_from_connector != NULL) { |
| 244 | grpc_channel_args_destroy(new_args_from_connector); |
| 245 | } |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 246 | |
Nicolas Noble | b7ebd3b | 2014-11-26 16:33:03 -0800 | [diff] [blame] | 247 | return channel; |
Craig Tiller | 190d360 | 2015-02-18 09:23:38 -0800 | [diff] [blame] | 248 | } |