Setup the message bridge key sharing services
This implements 2 new services that will be used to share the active
SCTP authentication key. For context, if SCTP authentication is wanted,
then we will need a way to securely distribute a shared key across every
node. We use gRPC to distribute the key.
* message_bridge_auth_server
This service should only run in one node. It generates a 128-bit
random-key during initialization. It sets up the gRPC service using
mutual-TLS authentication.
* message_bridge_auth_client
This service will run in every node. It listens for requests
in /aos aos.message_bridge.SctpConfigRequest and requests the
active key from the gRPC server which gets propagated into /aos
aos.message_bridge.SctpConfig. message_bridge reads this value and sets
the authentication key (previous change in relation).
These have some additional side-effects:
* This change also forces us to bring in an appropriate version of GRPC,
which itself forces updates to protobuf and other dependencies. We
take the opportunity to remove the protobuf subtree in favor of
a more sanitized import in the WORKSPACE.
* The various upgrades also upgraded our version of buildifier,
which now performs more aggressive linting.
* Our version of abseil was upgraded, which now forces you to only
have access to const references to things stored in absl::btree_set's
(see https://github.com/abseil/abseil-cpp/commit/a74b796ab3f114f6991479c9ad9e4c1a0dad3a4b).
Change-Id: I870b8f93451056e011cefa3cdf3c5dc01c19a6f9
Signed-off-by: James Kuszmaul <james.kuszmaul@bluerivertech.com>
Signed-off-by: Adam Snaider <adsnaider@gmail.com>
diff --git a/third_party/abseil/abseil.patch b/third_party/abseil/abseil.patch
index 981a7bc..6c7f380 100644
--- a/third_party/abseil/abseil.patch
+++ b/third_party/abseil/abseil.patch
@@ -51,7 +51,7 @@
+ "-Wno-shorten-64-to-32"
+ "-Wno-stringop-overflow"
)
-
+
list(APPEND ABSL_LLVM_TEST_FLAGS
@@ -133,7 +153,7 @@ list(APPEND ABSL_LLVM_TEST_FLAGS
"-Woverlength-strings"
@@ -128,7 +128,7 @@
+ "-Wno-shorten-64-to-32",
+ "-Wno-stringop-overflow",
]
-
+
ABSL_LLVM_TEST_FLAGS = [
@@ -134,7 +154,7 @@ ABSL_LLVM_TEST_FLAGS = [
"-Woverlength-strings",
@@ -191,7 +191,7 @@
+ "-Wno-shorten-64-to-32",
+ "-Wno-stringop-overflow",
]
-
+
ABSL_LLVM_TEST_ADDITIONAL_FLAGS = [
diff --git a/absl/random/internal/BUILD.bazel b/absl/random/internal/BUILD.bazel
index 81ca669b..e839860e 100644
@@ -222,9 +222,9 @@
--- a/absl/time/internal/cctz/BUILD.bazel
+++ b/absl/time/internal/cctz/BUILD.bazel
@@ -16,6 +16,13 @@ package(features = ["-parse_headers"])
-
+
licenses(["notice"])
-
+
+load(
+ "//absl:copts/configure_copts.bzl",
+ "ABSL_DEFAULT_COPTS",
@@ -233,7 +233,7 @@
+)
+
### libraries
-
+
cc_library(
@@ -24,6 +31,8 @@ cc_library(
hdrs = [
@@ -253,3 +253,23 @@
# OS X and iOS no longer use `linkopts = ["-framework CoreFoundation"]`
# as (1) bazel adds it automatically, and (2) it caused problems when
# cross-compiling for Android.
+diff --git a/absl/copts/configure_copts.bzl b/absl/copts/configure_copts.bzl
+index ca5f26da..0b10dc0b 100644
+--- a/absl/copts/configure_copts.bzl
++++ b/absl/copts/configure_copts.bzl
+@@ -46,13 +46,8 @@ ABSL_DEFAULT_LINKOPTS = select({
+ # environment to build an accelerated RandenHwAes library.
+ ABSL_RANDOM_RANDEN_COPTS = select({
+ # APPLE
+- ":cpu_darwin_x86_64": ABSL_RANDOM_HWAES_X64_FLAGS,
+- ":cpu_darwin": ABSL_RANDOM_HWAES_X64_FLAGS,
+- ":cpu_x64_windows_msvc": ABSL_RANDOM_HWAES_MSVC_X64_FLAGS,
+- ":cpu_x64_windows": ABSL_RANDOM_HWAES_MSVC_X64_FLAGS,
+- ":cpu_k8": ABSL_RANDOM_HWAES_X64_FLAGS,
+- ":cpu_ppc": ["-mcrypto"],
+- ":cpu_aarch64": ABSL_RANDOM_HWAES_ARM64_FLAGS,
++ "@platforms//cpu:x86_64": ABSL_RANDOM_HWAES_X64_FLAGS,
++ "@platforms//cpu:aarch64": ABSL_RANDOM_HWAES_ARM64_FLAGS,
+
+ # Supported by default or unsupported.
+ "//conditions:default": [],