Skip to content
Closed
Changes from 1 commit
Commits
Show all changes
62 commits
Select commit Hold shift + click to select a range
ed5072e
Add Docker fiels for xds example server and client.
kannanjgithub May 20, 2025
c8be933
Merge branch 'grpc:master' into master
kannanjgithub Jun 3, 2025
63997fd
Merge branch 'grpc:master' into master
kannanjgithub Jun 6, 2025
6263cce
Changes needed for System root certs to work. Commented out the chang…
kannanjgithub Jul 1, 2025
5e794bf
In-progress changes.
kannanjgithub Jul 29, 2025
30ffa7b
Save changes.
kannanjgithub Aug 3, 2025
42c9df0
Save changes.
kannanjgithub Aug 11, 2025
f12bc61
save changed
kannanjgithub Aug 15, 2025
e9c4e3c
Save changes.
kannanjgithub Aug 19, 2025
dd8fa02
Save changes.
kannanjgithub Sep 1, 2025
a371065
Save changes.
kannanjgithub Sep 1, 2025
a6f1bc9
XdsX509TrustManager changes for auto sni san validation.
kannanjgithub Sep 2, 2025
a576df0
Fallback flag when no sni is available to send to specify to use xds …
kannanjgithub Sep 2, 2025
ce1f2d0
Save changes
kannanjgithub Sep 2, 2025
5a4f758
Unit test for auto host sni hostname propagation to ClientSecurityHan…
kannanjgithub Sep 3, 2025
4076998
Save changes.
kannanjgithub Sep 8, 2025
968d564
Save changes.
kannanjgithub Sep 8, 2025
4cf653d
Merge branch 'master' into systemrootcerts-ignore-trusted-root-updates
kannanjgithub Sep 8, 2025
6c1898a
Save changes.
kannanjgithub Sep 8, 2025
5be2aa2
Save changes.
kannanjgithub Sep 8, 2025
90abe55
style
kannanjgithub Sep 9, 2025
4c44e4c
Add comment and rename some confusing method names.
kannanjgithub Sep 9, 2025
ae74a9e
Merge branch 'clientsidenormaltls-systemrootcert-handle' into systemr…
kannanjgithub Sep 9, 2025
199cc69
style.
kannanjgithub Sep 9, 2025
37cd044
Handle Sslcontext updates for System root certs with and without Mtls.
kannanjgithub Sep 10, 2025
14a91e7
Merge branch 'systemrootcerts-ignore-trusted-root-updates' into syste…
kannanjgithub Sep 10, 2025
6958b4e
Merge fixes
kannanjgithub Sep 10, 2025
139805e
Style changes.
kannanjgithub Sep 10, 2025
4417fcc
Fix some mistakes in code.
kannanjgithub Sep 10, 2025
7f48afa
Remove special-casing for System root certs in SslContextProviderSupp…
kannanjgithub Sep 11, 2025
d2b722a
Formatting changes.
kannanjgithub Sep 11, 2025
e116552
Merge branch 'systemrootcerts-ignore-trusted-root-updates' into syste…
kannanjgithub Sep 11, 2025
acb8fa5
Merge with changes to not special case system root certs in SslContex…
kannanjgithub Sep 11, 2025
13200fa
nit
kannanjgithub Sep 11, 2025
e95725d
Trust manager handling for system root certs.
kannanjgithub Sep 11, 2025
180f373
Fix style
kannanjgithub Sep 11, 2025
381beb2
Fixes.
kannanjgithub Sep 11, 2025
18f5d5a
Fix unit tests to cover both mtls and non-mtls for system root certs.
kannanjgithub Sep 11, 2025
e18d6cd
Suppress warning.
kannanjgithub Sep 12, 2025
b8dba99
Merge branch 'systemrootcerts-ignore-trusted-root-updates' into syste…
kannanjgithub Sep 12, 2025
2ecbdb9
Save changes.
kannanjgithub Sep 12, 2025
3845e16
Use non wildcard SAN in the SAN matchers in validation context.
kannanjgithub Sep 12, 2025
825b954
Merge branch 'systemrootcerts-ignore-trusted-root-updates' into syste…
kannanjgithub Sep 12, 2025
0ca4f8b
Save changes.
kannanjgithub Sep 15, 2025
92f3182
Save changes.
kannanjgithub Sep 16, 2025
2f5ba5d
Save changes.
kannanjgithub Sep 17, 2025
2985cc3
Fixes.
kannanjgithub Sep 17, 2025
011a9ea
Allow trustedRootCerts to be present in static CertificateValidationC…
kannanjgithub Sep 17, 2025
b828098
Pass extended trust manager to protocol negotiator.
kannanjgithub Sep 19, 2025
c19a24f
Trust manager not needed on server side when invoking SslProvider.Cal…
kannanjgithub Sep 19, 2025
5ba39b3
Remove whitespace only formatting done by wrong indendation settings …
kannanjgithub Sep 19, 2025
f135943
xds: Plumb system root certs similarly to CertProviders
ejona86 Sep 22, 2025
220e428
Save changes
kannanjgithub Sep 23, 2025
0d5eb0a
Fix certs not updated for handshake.
kannanjgithub Sep 23, 2025
08391fb
Merge branch 'master' into systemrootcerts-ignore-trusted-root-updates
kannanjgithub Sep 23, 2025
d6acdfc
Merge branch 'ejona86_xds_system_cert' into systemrootcerts-ignore-tr…
kannanjgithub Sep 23, 2025
c14a488
More fixes for system root certs.
kannanjgithub Sep 23, 2025
733f57c
More fixes for system root certs.
kannanjgithub Sep 23, 2025
967fe8c
Address review comment to remove reundant if block
kannanjgithub Sep 24, 2025
26733ab
Merge branch 'systemrootcerts-ignore-trusted-root-updates' into syste…
kannanjgithub Sep 24, 2025
9a817f8
Merge from system root certs PR.
kannanjgithub Sep 24, 2025
107cbd8
Some more changes needed after the changes in the base branch.
kannanjgithub Sep 24, 2025
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Address review comment to remove reundant if block
  • Loading branch information
kannanjgithub committed Sep 24, 2025
commit 967fe8c268c4ac611f90a7a3c9a5a22942534f05
Original file line number Diff line number Diff line change
Expand Up @@ -82,9 +82,7 @@ protected CertProviderSslContextProvider(
} else {
certHandle = null;
}
if (createRootCertInstance && sharedCertInstance) {
rootCertHandle = () -> { };
} else if (createRootCertInstance && !sharedCertInstance) {
if (createRootCertInstance && !sharedCertInstance) {
CertificateProviderInfo certProviderInstanceConfig =
getCertProviderConfig(certProviders, rootCertInstance.getInstanceName());
rootCertHandle = certProviderInstanceConfig == null ? null
Expand Down