Go to the source code of this file.
Macro Definition Documentation
◆ GRPC_DEFAULT_SSL_ROOTS_FILE_PATH_ENV_VAR
| #define GRPC_DEFAULT_SSL_ROOTS_FILE_PATH_ENV_VAR "GRPC_DEFAULT_SSL_ROOTS_FILE_PATH" |
Environment variable that points to the default SSL roots file. This file must be a PEM encoded file with all the roots such as the one that can be downloaded from https://pki.google.com/roots.pem.
Definition at line 57 of file grpc_security_constants.h.
◆ GRPC_GOOGLE_CREDENTIALS_ENV_VAR
| #define GRPC_GOOGLE_CREDENTIALS_ENV_VAR "GOOGLE_APPLICATION_CREDENTIALS" |
Environment variable that points to the google default application credentials json key or refresh token. Used in the grpc_google_default_credentials_create function.
Definition at line 63 of file grpc_security_constants.h.
◆ GRPC_PEER_DNS_PROPERTY_NAME
| #define GRPC_PEER_DNS_PROPERTY_NAME "peer_dns" |
Definition at line 48 of file grpc_security_constants.h.
◆ GRPC_PEER_EMAIL_PROPERTY_NAME
| #define GRPC_PEER_EMAIL_PROPERTY_NAME "peer_email" |
Definition at line 51 of file grpc_security_constants.h.
◆ GRPC_PEER_IP_PROPERTY_NAME
| #define GRPC_PEER_IP_PROPERTY_NAME "peer_ip" |
Definition at line 52 of file grpc_security_constants.h.
◆ GRPC_PEER_SPIFFE_ID_PROPERTY_NAME
| #define GRPC_PEER_SPIFFE_ID_PROPERTY_NAME "peer_spiffe_id" |
Definition at line 49 of file grpc_security_constants.h.
◆ GRPC_PEER_URI_PROPERTY_NAME
| #define GRPC_PEER_URI_PROPERTY_NAME "peer_uri" |
Definition at line 50 of file grpc_security_constants.h.
◆ GRPC_SSL_SESSION_REUSED_PROPERTY
| #define GRPC_SSL_SESSION_REUSED_PROPERTY "ssl_session_reused" |
Definition at line 46 of file grpc_security_constants.h.
◆ GRPC_SSL_TRANSPORT_SECURITY_TYPE
| #define GRPC_SSL_TRANSPORT_SECURITY_TYPE "ssl" |
Definition at line 27 of file grpc_security_constants.h.
◆ GRPC_TLS_TRANSPORT_SECURITY_TYPE
| #define GRPC_TLS_TRANSPORT_SECURITY_TYPE "tls" |
Definition at line 28 of file grpc_security_constants.h.
◆ GRPC_TRANSPORT_SECURITY_LEVEL_PROPERTY_NAME
| #define GRPC_TRANSPORT_SECURITY_LEVEL_PROPERTY_NAME "security_level" |
Definition at line 47 of file grpc_security_constants.h.
◆ GRPC_TRANSPORT_SECURITY_TYPE_PROPERTY_NAME
| #define GRPC_TRANSPORT_SECURITY_TYPE_PROPERTY_NAME "transport_security_type" |
Definition at line 26 of file grpc_security_constants.h.
◆ GRPC_X509_CN_PROPERTY_NAME
| #define GRPC_X509_CN_PROPERTY_NAME "x509_common_name" |
Definition at line 30 of file grpc_security_constants.h.
◆ GRPC_X509_PEM_CERT_CHAIN_PROPERTY_NAME
| #define GRPC_X509_PEM_CERT_CHAIN_PROPERTY_NAME "x509_pem_cert_chain" |
Definition at line 45 of file grpc_security_constants.h.
◆ GRPC_X509_PEM_CERT_PROPERTY_NAME
| #define GRPC_X509_PEM_CERT_PROPERTY_NAME "x509_pem_cert" |
Definition at line 33 of file grpc_security_constants.h.
◆ GRPC_X509_SAN_PROPERTY_NAME
| #define GRPC_X509_SAN_PROPERTY_NAME "x509_subject_alternative_name" |
Definition at line 32 of file grpc_security_constants.h.
◆ GRPC_X509_SUBJECT_PROPERTY_NAME
| #define GRPC_X509_SUBJECT_PROPERTY_NAME "x509_subject" |
Definition at line 31 of file grpc_security_constants.h.
Enumeration Type Documentation
◆ grpc_local_connect_type
Type of local connections for which local channel/server credentials will be applied. It supports UDS and local TCP connections.
| Enumerator | |
|---|---|
| UDS | |
| LOCAL_TCP | |
Definition at line 143 of file grpc_security_constants.h.
◆ grpc_security_level
| enum grpc_security_level |
| Enumerator | |
|---|---|
| GRPC_SECURITY_MIN | |
| GRPC_SECURITY_NONE | |
| GRPC_INTEGRITY_ONLY | |
| GRPC_PRIVACY_AND_INTEGRITY | |
| GRPC_SECURITY_MAX | |
Definition at line 131 of file grpc_security_constants.h.
◆ grpc_ssl_certificate_config_reload_status
Callback results for dynamically loading a SSL certificate config.
| Enumerator | |
|---|---|
| GRPC_SSL_CERTIFICATE_CONFIG_RELOAD_UNCHANGED | |
| GRPC_SSL_CERTIFICATE_CONFIG_RELOAD_NEW | |
| GRPC_SSL_CERTIFICATE_CONFIG_RELOAD_FAIL | |
Definition at line 73 of file grpc_security_constants.h.
◆ grpc_ssl_client_certificate_request_type
| Enumerator | |
|---|---|
| GRPC_SSL_DONT_REQUEST_CLIENT_CERTIFICATE | Server does not request client certificate. The certificate presented by the client is not checked by the server at all. (A client may present a self signed or signed certificate or not present a certificate at all and any of those option would be accepted) |
| GRPC_SSL_REQUEST_CLIENT_CERTIFICATE_BUT_DONT_VERIFY | Server requests client certificate but does not enforce that the client presents a certificate. If the client presents a certificate, the client authentication is left to the application (the necessary metadata will be available to the application via authentication context properties, see grpc_auth_context). The client's key certificate pair must be valid for the SSL connection to be established. |
| GRPC_SSL_REQUEST_CLIENT_CERTIFICATE_AND_VERIFY | Server requests client certificate but does not enforce that the client presents a certificate. If the client presents a certificate, the client authentication is done by the gRPC framework. (For a successful connection the client needs to either present a certificate that can be verified against the root certificate configured by the server or not present a certificate at all) The client's key certificate pair must be valid for the SSL connection to be established. |
| GRPC_SSL_REQUEST_AND_REQUIRE_CLIENT_CERTIFICATE_BUT_DONT_VERIFY | Server requests client certificate and enforces that the client presents a certificate. If the client presents a certificate, the client authentication is left to the application (the necessary metadata will be available to the application via authentication context properties, see grpc_auth_context). The client's key certificate pair must be valid for the SSL connection to be established. |
| GRPC_SSL_REQUEST_AND_REQUIRE_CLIENT_CERTIFICATE_AND_VERIFY | Server requests client certificate and enforces that the client presents a certificate. The certificate presented by the client is verified by the gRPC framework. (For a successful connection the client needs to present a certificate that can be verified against the root certificate configured by the server) The client's key certificate pair must be valid for the SSL connection to be established. |
Definition at line 79 of file grpc_security_constants.h.
◆ grpc_ssl_roots_override_result
Results for the SSL roots override callback.
| Enumerator | |
|---|---|
| GRPC_SSL_ROOTS_OVERRIDE_OK | |
| GRPC_SSL_ROOTS_OVERRIDE_FAIL_PERMANENTLY | |
| GRPC_SSL_ROOTS_OVERRIDE_FAIL | Do not try fallback options. |
Definition at line 66 of file grpc_security_constants.h.
◆ grpc_tls_version
| enum grpc_tls_version |
The TLS versions that are supported by the SSL stack.
| Enumerator | |
|---|---|
| TLS1_2 | |
| TLS1_3 | |
Definition at line 146 of file grpc_security_constants.h.