Skip to content

Commit 4a0cfd2

Browse files
hslatmanhslatman
authored
Merge pull request smallstep#797 from smallstep/herman/scep-macos-renewal-fixes
Fix macOS SCEP client issues
2 parents c57dfee + c7c5c3c commit 4a0cfd2

File tree

12 files changed

+160
-126
lines changed

12 files changed

+160
-126
lines changed

‎authority/authority.go

+1-7
Original file line numberDiff line numberDiff line change
@@ -437,13 +437,6 @@ func (a *Authority) init() error {
437437
}
438438
}
439439

440-
// Check if a KMS with decryption capability is required and available
441-
if a.requiresDecrypter() {
442-
if _, ok := a.keyManager.(kmsapi.Decrypter); !ok {
443-
return errors.New("keymanager doesn't provide crypto.Decrypter")
444-
}
445-
}
446-
447440
// TODO: decide if this is a good approach for providing the SCEP functionality
448441
// It currently mirrors the logic for the x509CAService
449442
if a.requiresSCEPService() && a.scepService == nil {
@@ -454,6 +447,7 @@ func (a *Authority) init() error {
454447
if err != nil {
455448
return err
456449
}
450+
options.CertificateChain = append(options.CertificateChain, a.rootX509Certs...)
457451
options.Signer, err = a.keyManager.CreateSigner(&kmsapi.CreateSignerRequest{
458452
SigningKey: a.config.IntermediateKey,
459453
Password: []byte(a.password),

‎authority/authority_test.go

+1-51
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,6 @@ import (
66
"crypto/sha256"
77
"crypto/x509"
88
"encoding/hex"
9-
"fmt"
109
"net"
1110
"os"
1211
"reflect"
@@ -328,7 +327,6 @@ func TestAuthority_CloseForReload(t *testing.T) {
328327
}
329328

330329
func testScepAuthority(t *testing.T, opts ...Option) *Authority {
331-
332330
p := provisioner.List{
333331
&provisioner.SCEP{
334332
Name: "scep1",
@@ -353,39 +351,15 @@ func testScepAuthority(t *testing.T, opts ...Option) *Authority {
353351
}
354352

355353
func TestAuthority_GetSCEPService(t *testing.T) {
356-
auth := testScepAuthority(t)
357-
fmt.Println(auth)
358-
354+
_ = testScepAuthority(t)
359355
p := provisioner.List{
360356
&provisioner.SCEP{
361357
Name: "scep1",
362358
Type: "SCEP",
363359
},
364360
}
365-
366361
type fields struct {
367362
config *Config
368-
// keyManager kms.KeyManager
369-
// provisioners *provisioner.Collection
370-
// db db.AuthDB
371-
// templates *templates.Templates
372-
// x509CAService cas.CertificateAuthorityService
373-
// rootX509Certs []*x509.Certificate
374-
// federatedX509Certs []*x509.Certificate
375-
// certificates *sync.Map
376-
// scepService *scep.Service
377-
// sshCAUserCertSignKey ssh.Signer
378-
// sshCAHostCertSignKey ssh.Signer
379-
// sshCAUserCerts []ssh.PublicKey
380-
// sshCAHostCerts []ssh.PublicKey
381-
// sshCAUserFederatedCerts []ssh.PublicKey
382-
// sshCAHostFederatedCerts []ssh.PublicKey
383-
// initOnce bool
384-
// startTime time.Time
385-
// sshBastionFunc func(ctx context.Context, user, hostname string) (*Bastion, error)
386-
// sshCheckHostFunc func(ctx context.Context, principal string, tok string, roots []*x509.Certificate) (bool, error)
387-
// sshGetHostsFunc func(ctx context.Context, cert *x509.Certificate) ([]Host, error)
388-
// getIdentityFunc provisioner.GetIdentityFunc
389363
}
390364
tests := []struct {
391365
name string
@@ -434,30 +408,6 @@ func TestAuthority_GetSCEPService(t *testing.T) {
434408
}
435409
for _, tt := range tests {
436410
t.Run(tt.name, func(t *testing.T) {
437-
// a := &Authority{
438-
// config: tt.fields.config,
439-
// keyManager: tt.fields.keyManager,
440-
// provisioners: tt.fields.provisioners,
441-
// db: tt.fields.db,
442-
// templates: tt.fields.templates,
443-
// x509CAService: tt.fields.x509CAService,
444-
// rootX509Certs: tt.fields.rootX509Certs,
445-
// federatedX509Certs: tt.fields.federatedX509Certs,
446-
// certificates: tt.fields.certificates,
447-
// scepService: tt.fields.scepService,
448-
// sshCAUserCertSignKey: tt.fields.sshCAUserCertSignKey,
449-
// sshCAHostCertSignKey: tt.fields.sshCAHostCertSignKey,
450-
// sshCAUserCerts: tt.fields.sshCAUserCerts,
451-
// sshCAHostCerts: tt.fields.sshCAHostCerts,
452-
// sshCAUserFederatedCerts: tt.fields.sshCAUserFederatedCerts,
453-
// sshCAHostFederatedCerts: tt.fields.sshCAHostFederatedCerts,
454-
// initOnce: tt.fields.initOnce,
455-
// startTime: tt.fields.startTime,
456-
// sshBastionFunc: tt.fields.sshBastionFunc,
457-
// sshCheckHostFunc: tt.fields.sshCheckHostFunc,
458-
// sshGetHostsFunc: tt.fields.sshGetHostsFunc,
459-
// getIdentityFunc: tt.fields.getIdentityFunc,
460-
// }
461411
a, err := New(tt.fields.config)
462412
if (err != nil) != tt.wantErr {
463413
t.Errorf("Authority.New(), error = %v, wantErr %v", err, tt.wantErr)

‎authority/provisioner/scep.go

+32-5
Original file line numberDiff line numberDiff line change
@@ -18,13 +18,21 @@ type SCEP struct {
1818
ForceCN bool `json:"forceCN,omitempty"`
1919
ChallengePassword string `json:"challenge,omitempty"`
2020
Capabilities []string `json:"capabilities,omitempty"`
21+
// IncludeRoot makes the provisioner return the CA root in addition to the
22+
// intermediate in the GetCACerts response
23+
IncludeRoot bool `json:"includeRoot,omitempty"`
2124
// MinimumPublicKeyLength is the minimum length for public keys in CSRs
22-
MinimumPublicKeyLength int `json:"minimumPublicKeyLength,omitempty"`
23-
Options *Options `json:"options,omitempty"`
24-
Claims *Claims `json:"claims,omitempty"`
25-
claimer *Claimer
25+
MinimumPublicKeyLength int `json:"minimumPublicKeyLength,omitempty"`
26+
// Numerical identifier for the ContentEncryptionAlgorithm as defined in github.com/mozilla-services/pkcs7
27+
// at https://github.com/mozilla-services/pkcs7/blob/33d05740a3526e382af6395d3513e73d4e66d1cb/encrypt.go#L63
28+
// Defaults to 0, being DES-CBC
29+
EncryptionAlgorithmIdentifier int `json:"encryptionAlgorithmIdentifier,omitempty"`
30+
Options *Options `json:"options,omitempty"`
31+
Claims *Claims `json:"claims,omitempty"`
32+
claimer *Claimer
2633

2734
secretChallengePassword string
35+
encryptionAlgorithm int
2836
}
2937

3038
// GetID returns the provisioner unique identifier.
@@ -97,7 +105,12 @@ func (s *SCEP) Init(config Config) (err error) {
97105
}
98106

99107
if s.MinimumPublicKeyLength%8 != 0 {
100-
return errors.Errorf("only minimum public keys exactly divisible by 8 are supported; %d is not exactly divisible by 8", s.MinimumPublicKeyLength)
108+
return errors.Errorf("%d bits is not exactly divisible by 8", s.MinimumPublicKeyLength)
109+
}
110+
111+
s.encryptionAlgorithm = s.EncryptionAlgorithmIdentifier // TODO(hs): we might want to upgrade the default security to AES-CBC?
112+
if s.encryptionAlgorithm < 0 || s.encryptionAlgorithm > 4 {
113+
return errors.New("only encryption algorithm identifiers from 0 to 4 are valid")
101114
}
102115

103116
// TODO: add other, SCEP specific, options?
@@ -129,3 +142,17 @@ func (s *SCEP) GetChallengePassword() string {
129142
func (s *SCEP) GetCapabilities() []string {
130143
return s.Capabilities
131144
}
145+
146+
// ShouldIncludeRootInChain indicates if the CA should
147+
// return its intermediate, which is currently used for
148+
// both signing and decryption, as well as the root in
149+
// its chain.
150+
func (s *SCEP) ShouldIncludeRootInChain() bool {
151+
return s.IncludeRoot
152+
}
153+
154+
// GetContentEncryptionAlgorithm returns the numeric identifier
155+
// for the pkcs7 package encryption algorithm to use.
156+
func (s *SCEP) GetContentEncryptionAlgorithm() int {
157+
return s.encryptionAlgorithm
158+
}

‎authority/provisioners.go

+21-4
Original file line numberDiff line numberDiff line change
@@ -712,6 +712,21 @@ func ProvisionerToCertificates(p *linkedca.Provisioner) (provisioner.Interface,
712712
Claims: claims,
713713
Options: options,
714714
}, nil
715+
case *linkedca.ProvisionerDetails_SCEP:
716+
cfg := d.SCEP
717+
return &provisioner.SCEP{
718+
ID: p.Id,
719+
Type: p.Type.String(),
720+
Name: p.Name,
721+
ForceCN: cfg.ForceCn,
722+
ChallengePassword: cfg.Challenge,
723+
Capabilities: cfg.Capabilities,
724+
IncludeRoot: cfg.IncludeRoot,
725+
MinimumPublicKeyLength: int(cfg.MinimumPublicKeyLength),
726+
EncryptionAlgorithmIdentifier: int(cfg.EncryptionAlgorithmIdentifier),
727+
Claims: claims,
728+
Options: options,
729+
}, nil
715730
case *linkedca.ProvisionerDetails_Nebula:
716731
var roots []byte
717732
for i, root := range d.Nebula.GetRoots() {
@@ -944,10 +959,12 @@ func ProvisionerToLinkedca(p provisioner.Interface) (*linkedca.Provisioner, erro
944959
Details: &linkedca.ProvisionerDetails{
945960
Data: &linkedca.ProvisionerDetails_SCEP{
946961
SCEP: &linkedca.SCEPProvisioner{
947-
ForceCn: p.ForceCN,
948-
Challenge: p.GetChallengePassword(),
949-
Capabilities: p.Capabilities,
950-
MinimumPublicKeyLength: int32(p.MinimumPublicKeyLength),
962+
ForceCn: p.ForceCN,
963+
Challenge: p.GetChallengePassword(),
964+
Capabilities: p.Capabilities,
965+
MinimumPublicKeyLength: int32(p.MinimumPublicKeyLength),
966+
IncludeRoot: p.IncludeRoot,
967+
EncryptionAlgorithmIdentifier: int32(p.EncryptionAlgorithmIdentifier),
951968
},
952969
},
953970
},

‎ca/ca.go

+18-5
Original file line numberDiff line numberDiff line change
@@ -417,11 +417,6 @@ func (ca *CA) getTLSConfig(auth *authority.Authority) (*tls.Config, error) {
417417
}
418418
}
419419

420-
certPool := x509.NewCertPool()
421-
for _, crt := range auth.GetRootCertificates() {
422-
certPool.AddCert(crt)
423-
}
424-
425420
// GetCertificate will only be called if the client supplies SNI
426421
// information or if tlsConfig.Certificates is empty.
427422
// When client requests are made using an IP address (as opposed to a domain
@@ -432,6 +427,24 @@ func (ca *CA) getTLSConfig(auth *authority.Authority) (*tls.Config, error) {
432427
tlsConfig.Certificates = []tls.Certificate{}
433428
tlsConfig.GetCertificate = ca.renewer.GetCertificateForCA
434429

430+
// initialize a certificate pool with root CA certificates to trust when doing mTLS.
431+
certPool := x509.NewCertPool()
432+
for _, crt := range auth.GetRootCertificates() {
433+
certPool.AddCert(crt)
434+
}
435+
436+
// adding the intermediate CA certificates to the pool will allow clients that
437+
// do mTLS but don't send an intermediate to successfully connect. The intermediates
438+
// added here are used when building a certificate chain.
439+
intermediates := tlsCrt.Certificate[1:]
440+
for _, certBytes := range intermediates {
441+
cert, err := x509.ParseCertificate(certBytes)
442+
if err != nil {
443+
return nil, err
444+
}
445+
certPool.AddCert(cert)
446+
}
447+
435448
// Add support for mutual tls to renew certificates
436449
tlsConfig.ClientAuth = tls.VerifyClientCertIfGiven
437450
tlsConfig.ClientCAs = certPool

‎cas/cloudcas/cloudcas_test.go

+2-1
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,7 @@ import (
3131
longrunningpb "google.golang.org/genproto/googleapis/longrunning"
3232
"google.golang.org/grpc"
3333
"google.golang.org/grpc/codes"
34+
"google.golang.org/grpc/credentials/insecure"
3435
"google.golang.org/grpc/status"
3536
"google.golang.org/grpc/test/bufconn"
3637
"google.golang.org/protobuf/types/known/anypb"
@@ -852,7 +853,7 @@ func TestCloudCAS_CreateCertificateAuthority(t *testing.T) {
852853
defer srv.Stop()
853854

854855
// Create fake privateca client
855-
conn, err := grpc.DialContext(context.Background(), "", grpc.WithInsecure(),
856+
conn, err := grpc.DialContext(context.Background(), "", grpc.WithTransportCredentials(insecure.NewCredentials()),
856857
grpc.WithContextDialer(func(context.Context, string) (net.Conn, error) {
857858
return lis.Dial()
858859
}))

‎go.mod

+5-4
Original file line numberDiff line numberDiff line change
@@ -35,12 +35,13 @@ require (
3535
go.mozilla.org/pkcs7 v0.0.0-20210826202110-33d05740a352
3636
go.step.sm/cli-utils v0.7.0
3737
go.step.sm/crypto v0.15.0
38-
go.step.sm/linkedca v0.9.0
38+
go.step.sm/linkedca v0.9.2
3939
golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3
40-
golang.org/x/net v0.0.0-20211216030914-fe4d6282115f
40+
golang.org/x/net v0.0.0-20220114011407-0dd24b26b47d
41+
golang.org/x/sys v0.0.0-20220114195835-da31bd327af9 // indirect
4142
google.golang.org/api v0.47.0
42-
google.golang.org/genproto v0.0.0-20210719143636-1d5a45f8e492
43-
google.golang.org/grpc v1.39.0
43+
google.golang.org/genproto v0.0.0-20220118154757-00ab72f36ad5
44+
google.golang.org/grpc v1.43.0
4445
google.golang.org/protobuf v1.27.1
4546
gopkg.in/square/go-jose.v2 v2.6.0
4647
)

‎go.sum

+16-9
Original file line numberDiff line numberDiff line change
@@ -148,7 +148,11 @@ github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDk
148148
github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc=
149149
github.com/cncf/udpa/go v0.0.0-20200629203442-efcf912fb354/go.mod h1:WmhPx2Nbnhtbo57+VJT5O0JRkEi1Wbu0z5j0R8u5Hbk=
150150
github.com/cncf/udpa/go v0.0.0-20201120205902-5459f2c99403/go.mod h1:WmhPx2Nbnhtbo57+VJT5O0JRkEi1Wbu0z5j0R8u5Hbk=
151+
github.com/cncf/udpa/go v0.0.0-20210930031921-04548b0d99d4/go.mod h1:6pvJx4me5XPnfI9Z40ddWsdw2W/uZgQLFXToKeRcDiI=
151152
github.com/cncf/xds/go v0.0.0-20210312221358-fbca930ec8ed/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
153+
github.com/cncf/xds/go v0.0.0-20210805033703-aa0b78936158/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
154+
github.com/cncf/xds/go v0.0.0-20210922020428-25de7278fc84/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
155+
github.com/cncf/xds/go v0.0.0-20211011173535-cb28da3451f1/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
152156
github.com/cockroachdb/datadriven v0.0.0-20190809214429-80d97fb3cbaa/go.mod h1:zn76sxSg3SzpJ0PPJaLDCu+Bu0Lg3sKTORVIj19EIF8=
153157
github.com/codahale/hdrhistogram v0.0.0-20161010025455-3a0bb77429bd/go.mod h1:sE/e/2PUdi/liOCUjSTXgM1o87ZssimdTWN964YiIeI=
154158
github.com/coreos/etcd v3.3.10+incompatible/go.mod h1:uF7uidLiAD3TWHmW31ZFd/JWoc32PjwdhPthX9715RE=
@@ -196,6 +200,7 @@ github.com/envoyproxy/go-control-plane v0.9.7/go.mod h1:cwu0lG7PUMfa9snN8LXBig5y
196200
github.com/envoyproxy/go-control-plane v0.9.9-0.20201210154907-fd9021fe5dad/go.mod h1:cXg6YxExXjJnVBQHBLXeUAgxn2UodCpnH306RInaBQk=
197201
github.com/envoyproxy/go-control-plane v0.9.9-0.20210217033140-668b12f5399d/go.mod h1:cXg6YxExXjJnVBQHBLXeUAgxn2UodCpnH306RInaBQk=
198202
github.com/envoyproxy/go-control-plane v0.9.9-0.20210512163311-63b5d3c536b0/go.mod h1:hliV/p42l8fGbc6Y9bQ70uLwIvmJyVE5k4iMKlh8wCQ=
203+
github.com/envoyproxy/go-control-plane v0.9.10-0.20210907150352-cf90f659a021/go.mod h1:AFq3mo9L8Lqqiid3OhADV3RfLJnjiw63cSpi+fDTRC0=
199204
github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c=
200205
github.com/fatih/color v1.7.0/go.mod h1:Zm6kSWBoL9eyXnKyktHP6abPY2pDugNf5KwzbycvMj4=
201206
github.com/flynn/noise v1.0.0/go.mod h1:xbMo+0i6+IGbYdJhF31t2eR1BIU0CYc12+BNAKwUTag=
@@ -607,8 +612,8 @@ go.step.sm/cli-utils v0.7.0/go.mod h1:Ur6bqA/yl636kCUJbp30J7Unv5JJ226eW2KqXPDwF/
607612
go.step.sm/crypto v0.9.0/go.mod h1:+CYG05Mek1YDqi5WK0ERc6cOpKly2i/a5aZmU1sfGj0=
608613
go.step.sm/crypto v0.15.0 h1:VioBln+x3+RoejgeBhvxkLGVYdWRy6PFiAaUUN29/E0=
609614
go.step.sm/crypto v0.15.0/go.mod h1:3G0yQr5lQqfEG0CMYz8apC/qMtjLRQlzflL2AxkcN+g=
610-
go.step.sm/linkedca v0.9.0 h1:xKXZoRXy4B7LeGBZozq62IQ0p3v8dT33O9UOMpVtRtI=
611-
go.step.sm/linkedca v0.9.0/go.mod h1:5uTRjozEGSPAZal9xJqlaD38cvJcLe3o1VAFVjqcORo=
615+
go.step.sm/linkedca v0.9.2 h1:CpAkd174sLXFfrOZrbPEiTzik91QRj3+L0omsiwsiok=
616+
go.step.sm/linkedca v0.9.2/go.mod h1:5uTRjozEGSPAZal9xJqlaD38cvJcLe3o1VAFVjqcORo=
612617
go.uber.org/atomic v1.3.2/go.mod h1:gD2HeocX3+yG+ygLZcrzQJaqmWj9AIm7n08wl/qW/PE=
613618
go.uber.org/atomic v1.5.0/go.mod h1:sABNBOSYdrvTF6hTgEIbc7YasKWGhgEQZyfxyTvoXHQ=
614619
go.uber.org/multierr v1.1.0/go.mod h1:wR5kodmAFQ0UK8QlbwjlSNy0Z68gJhDJUG5sjR94q/0=
@@ -717,8 +722,9 @@ golang.org/x/net v0.0.0-20210525063256-abc453219eb5/go.mod h1:9nx3DQGgdP8bBQD5qx
717722
golang.org/x/net v0.0.0-20210805182204-aaa1db679c0d/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
718723
golang.org/x/net v0.0.0-20211020060615-d418f374d309/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
719724
golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
720-
golang.org/x/net v0.0.0-20211216030914-fe4d6282115f h1:hEYJvxw1lSnWIl8X9ofsYMklzaDs90JI2az5YMd4fPM=
721725
golang.org/x/net v0.0.0-20211216030914-fe4d6282115f/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
726+
golang.org/x/net v0.0.0-20220114011407-0dd24b26b47d h1:1n1fc535VhN8SYtD4cDUyNlfpAF2ROMM9+11equK3hs=
727+
golang.org/x/net v0.0.0-20220114011407-0dd24b26b47d/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
722728
golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
723729
golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
724730
golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
@@ -813,8 +819,9 @@ golang.org/x/sys v0.0.0-20210809222454-d867a43fc93e/go.mod h1:oPkhp1MJrh7nUepCBc
813819
golang.org/x/sys v0.0.0-20210915083310-ed5796bab164/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
814820
golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
815821
golang.org/x/sys v0.0.0-20211031064116-611d5d643895/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
816-
golang.org/x/sys v0.0.0-20211103235746-7861aae1554b h1:1VkfZQv42XQlA/jchYumAnv1UPo6RgF9rJFkTgZIxO4=
817822
golang.org/x/sys v0.0.0-20211103235746-7861aae1554b/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
823+
golang.org/x/sys v0.0.0-20220114195835-da31bd327af9 h1:XfKQ4OlFl8okEOr5UvAqFRVj8pY/4yfcXrddB8qAbU0=
824+
golang.org/x/sys v0.0.0-20220114195835-da31bd327af9/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
818825
golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
819826
golang.org/x/term v0.0.0-20210927222741-03fcf44c2211 h1:JGgROgKl9N8DuW20oFS5gxc+lE67/N3FcwmBPMe7ArY=
820827
golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
@@ -889,7 +896,6 @@ golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4f
889896
golang.org/x/tools v0.1.0/go.mod h1:xkSsbof2nBLbhDlRMhhhyNLN/zl3eTqcnHD5viDpcZ0=
890897
golang.org/x/tools v0.1.1/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
891898
golang.org/x/tools v0.1.2/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
892-
golang.org/x/tools v0.1.5/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
893899
golang.org/x/tools v0.1.7/go.mod h1:LGqMHiF4EqQNHR1JncWGqT5BVaXmza+X+BDGol+dOxo=
894900
golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
895901
golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
@@ -974,8 +980,8 @@ google.golang.org/genproto v0.0.0-20210319143718-93e7006c17a6/go.mod h1:FWY/as6D
974980
google.golang.org/genproto v0.0.0-20210402141018-6c239bbf2bb1/go.mod h1:9lPAdzaEmUacj36I+k7YKbEc5CXzPIeORRgDAUOu28A=
975981
google.golang.org/genproto v0.0.0-20210513213006-bf773b8c8384/go.mod h1:P3QM42oQyzQSnHPnZ/vqoCdDmzH28fzWByN9asMeM8A=
976982
google.golang.org/genproto v0.0.0-20210602131652-f16073e35f0c/go.mod h1:UODoCrxHCcBojKKwX1terBiRUaqAsFqJiF615XL43r0=
977-
google.golang.org/genproto v0.0.0-20210719143636-1d5a45f8e492 h1:7yQQsvnwjfEahbNNEKcBHv3mR+HnB1ctGY/z1JXzx8M=
978-
google.golang.org/genproto v0.0.0-20210719143636-1d5a45f8e492/go.mod h1:ob2IJxKrgPT52GcgX759i1sleT07tiKowYBGbczaW48=
983+
google.golang.org/genproto v0.0.0-20220118154757-00ab72f36ad5 h1:zzNejm+EgrbLfDZ6lu9Uud2IVvHySPl8vQzf04laR5Q=
984+
google.golang.org/genproto v0.0.0-20220118154757-00ab72f36ad5/go.mod h1:5CzLGKJ67TSI2B9POpiiyGha0AjJvZIUgRMt1dSmuhc=
979985
google.golang.org/grpc v1.17.0/go.mod h1:6QZJwpn2B+Zp71q/5VxRsJ6NXXVCE5NRUHRo+f3cWCs=
980986
google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
981987
google.golang.org/grpc v1.20.0/go.mod h1:chYK+tFQF0nDUGJgXMSgLCQk3phJEuONr2DCgLDdAQM=
@@ -1003,8 +1009,9 @@ google.golang.org/grpc v1.36.1/go.mod h1:qjiiYl8FncCW8feJPdyg3v6XW24KsRHe+dy9BAG
10031009
google.golang.org/grpc v1.37.0/go.mod h1:NREThFqKR1f3iQ6oBuvc5LadQuXVGo9rkm5ZGrQdJfM=
10041010
google.golang.org/grpc v1.37.1/go.mod h1:NREThFqKR1f3iQ6oBuvc5LadQuXVGo9rkm5ZGrQdJfM=
10051011
google.golang.org/grpc v1.38.0/go.mod h1:NREThFqKR1f3iQ6oBuvc5LadQuXVGo9rkm5ZGrQdJfM=
1006-
google.golang.org/grpc v1.39.0 h1:Klz8I9kdtkIN6EpHHUOMLCYhTn/2WAe5a0s1hcBkdTI=
1007-
google.golang.org/grpc v1.39.0/go.mod h1:PImNr+rS9TWYb2O4/emRugxiyHZ5JyHW5F+RPnDzfrE=
1012+
google.golang.org/grpc v1.40.0/go.mod h1:ogyxbiOoUXAkP+4+xa6PZSE9DZgIHtSpzjDTB9KAK34=
1013+
google.golang.org/grpc v1.43.0 h1:Eeu7bZtDZ2DpRCsLhUlcrLnvYaMK1Gz86a+hMVvELmM=
1014+
google.golang.org/grpc v1.43.0/go.mod h1:k+4IHHFw41K8+bbowsex27ge2rCb65oeWqe4jJ590SU=
10081015
google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.1.0/go.mod h1:6Kw0yEErY5E/yWrBtf03jp27GLLJujG4z/JK95pnjjw=
10091016
google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
10101017
google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=

0 commit comments

Comments
 (0)