grpc-native: Add default TLS support

Signed-off-by: Johannes Zottele <[email protected]>

Author: Jozott00

grpc/grpc-core/src/commonTest/kotlin/kotlinx/rpc/grpc/test/proto/GrpcbInTlsTest.kt

@@ -0,0 +1,35 @@
+/*
+ * Copyright 2023-2025 JetBrains s.r.o and contributors. Use of this source code is governed by the Apache 2.0 license.
+ */
+
+package kotlinx.rpc.grpc.test.proto
+
+import hello.HelloRequest
+import hello.HelloService
+import hello.invoke
+import kotlinx.coroutines.test.runTest
+import kotlinx.rpc.grpc.GrpcClient
+import kotlinx.rpc.withService
+import kotlin.test.Test
+
+
+class GrpcbInTlsTest {
+
+    val grpcClient = GrpcClient("grpcb.in", 9001) {
+//        usePlaintext()
+    }
+
+    @Test
+    fun testTlsCall() = runTest {
+        val service = grpcClient.withService<HelloService>()
+
+        val request = HelloRequest {
+            greeting = "Postman"
+        }
+        val result = service.SayHello(request)
+
+        println(result.reply)
+    }
+
+
+}

grpc/grpc-core/src/commonTest/proto/grpcb_in_hello.proto

@@ -0,0 +1,22 @@
+syntax = "proto2";
+
+//    grpc://grpcb.in:9000 (without TLS)
+//    grpc://grpcb.in:9001 (with TLS)
+
+
+package hello;
+
+service HelloService {
+  rpc SayHello(HelloRequest) returns (HelloResponse);
+  rpc LotsOfReplies(HelloRequest) returns (stream HelloResponse);
+  rpc LotsOfGreetings(stream HelloRequest) returns (HelloResponse);
+  rpc BidiHello(stream HelloRequest) returns (stream HelloResponse);
+}
+
+message HelloRequest {
+  optional string greeting = 1;
+}
+
+message HelloResponse {
+  required string reply = 1;
+}

grpc/grpc-core/src/nativeMain/kotlin/kotlinx/rpc/grpc/ManagedChannel.native.kt

@@ -9,6 +9,7 @@ package kotlinx.rpc.grpc
 import kotlinx.rpc.grpc.internal.GrpcChannel
 import kotlinx.rpc.grpc.internal.GrpcChannelCredentials
 import kotlinx.rpc.grpc.internal.GrpcInsecureChannelCredentials
+import kotlinx.rpc.grpc.internal.GrpcSslChannelCredentials
 import kotlinx.rpc.grpc.internal.NativeManagedChannel
 import kotlinx.rpc.grpc.internal.internalError
 
@@ -29,17 +30,17 @@ public actual abstract class ManagedChannelBuilder<T : ManagedChannelBuilder<T>>
 internal class NativeManagedChannelBuilder(
     private val target: String,
 ) : ManagedChannelBuilder<NativeManagedChannelBuilder>() {
-    private var credentials: GrpcChannelCredentials? = null
+    private var credentials: Lazy<GrpcChannelCredentials> = lazy { GrpcSslChannelCredentials() }
 
     override fun usePlaintext(): NativeManagedChannelBuilder {
-        credentials = GrpcInsecureChannelCredentials()
+        credentials = lazy { GrpcInsecureChannelCredentials() }
         return this
     }
 
     fun buildChannel(): NativeManagedChannel {
         return NativeManagedChannel(
             target,
-            credentials = credentials ?: error("No credentials set"),
+            credentials = credentials.value,
         )
     }
 

grpc/grpc-core/src/nativeMain/kotlin/kotlinx/rpc/grpc/internal/NativeManagedChannel.kt

@@ -11,6 +11,7 @@ import cnames.structs.grpc_channel_credentials
 import kotlinx.atomicfu.atomic
 import kotlinx.cinterop.CPointer
 import kotlinx.cinterop.ExperimentalForeignApi
+import kotlinx.cinterop.memScoped
 import kotlinx.coroutines.CompletableDeferred
 import kotlinx.coroutines.Job
 import kotlinx.coroutines.SupervisorJob
@@ -27,13 +28,14 @@ import libkgrpc.grpc_channel_credentials_release
 import libkgrpc.grpc_channel_destroy
 import libkgrpc.grpc_insecure_credentials_create
 import libkgrpc.grpc_slice_unref
+import libkgrpc.grpc_ssl_credentials_create_ex
 import kotlin.coroutines.cancellation.CancellationException
 import kotlin.experimental.ExperimentalNativeApi
 import kotlin.native.ref.createCleaner
 import kotlin.time.Duration
 
 /**
- * Wrapper for [cnames.structs.grpc_channel_credentials].
+ * Wrapper for [grpc_channel_credentials].
  */
 internal sealed class GrpcChannelCredentials(
     internal val raw: CPointer<grpc_channel_credentials>,
@@ -47,8 +49,28 @@ internal sealed class GrpcChannelCredentials(
  * Insecure credentials.
  */
 internal class GrpcInsecureChannelCredentials() :
-    GrpcChannelCredentials(grpc_insecure_credentials_create() ?: error("Failed to create channel credentials"))
+    GrpcChannelCredentials(
+        grpc_insecure_credentials_create() ?: error("grpc_insecure_credentials_create() returned null")
+    )
 
+/**
+ * SSL credentials.
+ */
+internal class GrpcSslChannelCredentials(
+    raw: CPointer<grpc_channel_credentials>,
+) : GrpcChannelCredentials(raw) {
+
+    constructor() : this(
+        memScoped {
+            grpc_ssl_credentials_create_ex(
+                null,
+                null,
+                null,
+                null
+            ) ?: error("grpc_ssl_credentials_create() returned null")
+        }
+    )
+}
 
 /**
  * Native implementation of [ManagedChannel].

protobuf/protobuf-core/src/commonMain/kotlin/kotlinx/rpc/protobuf/internal/ProtobufException.kt

@@ -13,7 +13,7 @@ public class ProtobufDecodingException : ProtobufException {
     public constructor(message: String, cause: Throwable? = null) : super(message, cause)
 
     public companion object Companion {
-        internal fun missingRequiredField(messageName: String, fieldName: String) =
+        public fun missingRequiredField(messageName: String, fieldName: String): ProtobufDecodingException =
             ProtobufDecodingException("Message '$messageName' is missing a required field: $fieldName")
 
         internal fun negativeSize() = ProtobufDecodingException(

tests/compiler-plugin-tests/src/test-gen/kotlinx/rpc/codegen/test/runners/BoxTestGenerated.java

@@ -7,51 +7,53 @@
 package kotlinx.rpc.codegen.test.runners;
 
 import com.intellij.testFramework.TestDataPath;
-import org.jetbrains.kotlin.test.util.KtTestUtil;
 import org.jetbrains.kotlin.test.TargetBackend;
 import org.jetbrains.kotlin.test.TestMetadata;
+import org.jetbrains.kotlin.test.util.KtTestUtil;
 import org.junit.jupiter.api.Test;
 
 import java.io.File;
 import java.util.regex.Pattern;
 
-/** This class is generated by {@link kotlinx.rpc.codegen.test.GenerateTestsKt}. DO NOT MODIFY MANUALLY */
+/**
+ * This class is generated by {@link kotlinx.rpc.codegen.test.GenerateTestsKt}. DO NOT MODIFY MANUALLY
+ */
 @SuppressWarnings("all")
 @TestMetadata("src/testData/box")
 @TestDataPath("$PROJECT_ROOT")
 public class BoxTestGenerated extends AbstractBoxTest {
-  @Test
-  public void testAllFilesPresentInBox() {
-    KtTestUtil.assertAllTestsPresentByMetadataWithExcluded(this.getClass(), new File("src/testData/box"), Pattern.compile("^(.+)\\.kt$"), null, TargetBackend.JVM_IR, true);
-  }
-
-  @Test
-  @TestMetadata("customParameterTypes.kt")
-  public void testCustomParameterTypes() {
-    runTest("src/testData/box/customParameterTypes.kt");
-  }
-
-  @Test
-  @TestMetadata("flowParameter.kt")
-  public void testFlowParameter() {
-    runTest("src/testData/box/flowParameter.kt");
-  }
-
-  @Test
-  @TestMetadata("grpc.kt")
-  public void testGrpc() {
-    runTest("src/testData/box/grpc.kt");
-  }
-
-  @Test
-  @TestMetadata("multiModule.kt")
-  public void testMultiModule() {
-    runTest("src/testData/box/multiModule.kt");
-  }
-
-  @Test
-  @TestMetadata("simple.kt")
-  public void testSimple() {
-    runTest("src/testData/box/simple.kt");
-  }
+    @Test
+    public void testAllFilesPresentInBox() {
+        KtTestUtil.assertAllTestsPresentByMetadataWithExcluded(this.getClass(), new File("src/testData/box"), Pattern.compile("^(.+)\\.kt$"), null, TargetBackend.JVM_IR, true);
+    }
+
+    @Test
+    @TestMetadata("customParameterTypes.kt")
+    public void testCustomParameterTypes() {
+        runTest("src/testData/box/customParameterTypes.kt");
+    }
+
+    @Test
+    @TestMetadata("flowParameter.kt")
+    public void testFlowParameter() {
+        runTest("src/testData/box/flowParameter.kt");
+    }
+
+    @Test
+    @TestMetadata("grpc.kt")
+    public void testGrpc() {
+        runTest("src/testData/box/grpc.kt");
+    }
+
+    @Test
+    @TestMetadata("multiModule.kt")
+    public void testMultiModule() {
+        runTest("src/testData/box/multiModule.kt");
+    }
+
+    @Test
+    @TestMetadata("simple.kt")
+    public void testSimple() {
+        runTest("src/testData/box/simple.kt");
+    }
 }

tests/compiler-plugin-tests/src/test-gen/kotlinx/rpc/codegen/test/runners/DiagnosticTestGenerated.java

@@ -7,57 +7,59 @@
 package kotlinx.rpc.codegen.test.runners;
 
 import com.intellij.testFramework.TestDataPath;
-import org.jetbrains.kotlin.test.util.KtTestUtil;
 import org.jetbrains.kotlin.test.TargetBackend;
 import org.jetbrains.kotlin.test.TestMetadata;
+import org.jetbrains.kotlin.test.util.KtTestUtil;
 import org.junit.jupiter.api.Test;
 
 import java.io.File;
 import java.util.regex.Pattern;
 
-/** This class is generated by {@link kotlinx.rpc.codegen.test.GenerateTestsKt}. DO NOT MODIFY MANUALLY */
+/**
+ * This class is generated by {@link kotlinx.rpc.codegen.test.GenerateTestsKt}. DO NOT MODIFY MANUALLY
+ */
 @SuppressWarnings("all")
 @TestMetadata("src/testData/diagnostics")
 @TestDataPath("$PROJECT_ROOT")
 public class DiagnosticTestGenerated extends AbstractDiagnosticTest {
-  @Test
-  public void testAllFilesPresentInDiagnostics() {
-    KtTestUtil.assertAllTestsPresentByMetadataWithExcluded(this.getClass(), new File("src/testData/diagnostics"), Pattern.compile("^(.+)\\.kt$"), null, TargetBackend.JVM_IR, true);
-  }
-
-  @Test
-  @TestMetadata("checkedAnnotation.kt")
-  public void testCheckedAnnotation() {
-    runTest("src/testData/diagnostics/checkedAnnotation.kt");
-  }
-
-  @Test
-  @TestMetadata("grpc.kt")
-  public void testGrpc() {
-    runTest("src/testData/diagnostics/grpc.kt");
-  }
-
-  @Test
-  @TestMetadata("rpcChecked.kt")
-  public void testRpcChecked() {
-    runTest("src/testData/diagnostics/rpcChecked.kt");
-  }
-
-  @Test
-  @TestMetadata("rpcService.kt")
-  public void testRpcService() {
-    runTest("src/testData/diagnostics/rpcService.kt");
-  }
-
-  @Test
-  @TestMetadata("strictMode.kt")
-  public void testStrictMode() {
-    runTest("src/testData/diagnostics/strictMode.kt");
-  }
-
-  @Test
-  @TestMetadata("withCodec.kt")
-  public void testWithCodec() {
-    runTest("src/testData/diagnostics/withCodec.kt");
-  }
+    @Test
+    public void testAllFilesPresentInDiagnostics() {
+        KtTestUtil.assertAllTestsPresentByMetadataWithExcluded(this.getClass(), new File("src/testData/diagnostics"), Pattern.compile("^(.+)\\.kt$"), null, TargetBackend.JVM_IR, true);
+    }
+
+    @Test
+    @TestMetadata("checkedAnnotation.kt")
+    public void testCheckedAnnotation() {
+        runTest("src/testData/diagnostics/checkedAnnotation.kt");
+    }
+
+    @Test
+    @TestMetadata("grpc.kt")
+    public void testGrpc() {
+        runTest("src/testData/diagnostics/grpc.kt");
+    }
+
+    @Test
+    @TestMetadata("rpcChecked.kt")
+    public void testRpcChecked() {
+        runTest("src/testData/diagnostics/rpcChecked.kt");
+    }
+
+    @Test
+    @TestMetadata("rpcService.kt")
+    public void testRpcService() {
+        runTest("src/testData/diagnostics/rpcService.kt");
+    }
+
+    @Test
+    @TestMetadata("strictMode.kt")
+    public void testStrictMode() {
+        runTest("src/testData/diagnostics/strictMode.kt");
+    }
+
+    @Test
+    @TestMetadata("withCodec.kt")
+    public void testWithCodec() {
+        runTest("src/testData/diagnostics/withCodec.kt");
+    }
 }