text: /*
   *
   * Copyright 2015, Google Inc.
   * All rights reserved.
   *
   * Redistribution and use in source and binary forms, with or without
   * modification, are permitted provided that the following conditions are
   * met:
   *
   *     * Redistributions of source code must retain the above copyright
   * notice, this list of conditions and the following disclaimer.
   *     * Redistributions in binary form must reproduce the above
   * copyright notice, this list of conditions and the following disclaimer
   * in the documentation and/or other materials provided with the
   * distribution.
   *     * Neither the name of Google Inc. nor the names of its
   * contributors may be used to endorse or promote products derived from
   * this software without specific prior written permission.
   *
   * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
   * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
   * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
   * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
   * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
   * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
   * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
   * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
   * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
   * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
   * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
   *
   */
  
  #include "channel_credentials.h"
  #include "call_credentials.h"
  
  #ifdef HAVE_CONFIG_H
  #include "config.h"
  #endif
  
  #include <php.h>
  #include <php_ini.h>
  #include <ext/standard/info.h>
  #include <ext/spl/spl_exceptions.h>
  #include "php_grpc.h"
  
  #include <zend_exceptions.h>
  #include <zend_hash.h>
  
  #include <grpc/support/alloc.h>
  #include <grpc/grpc.h>
  #include <grpc/grpc_security.h>
  
  zend_class_entry *grpc_ce_channel_credentials;
  
  static char *default_pem_root_certs = NULL;
  
  static grpc_ssl_roots_override_result get_ssl_roots_override(
      char **pem_root_certs) {
    *pem_root_certs = default_pem_root_certs;
    if (default_pem_root_certs == NULL) {
      return GRPC_SSL_ROOTS_OVERRIDE_FAIL;
    }
    return GRPC_SSL_ROOTS_OVERRIDE_OK;
  }
  
  /* Frees and destroys an instance of wrapped_grpc_channel_credentials */
  void free_wrapped_grpc_channel_credentials(void *object TSRMLS_DC) {
    wrapped_grpc_channel_credentials *creds =
        (wrapped_grpc_channel_credentials *)object;
    if (creds->wrapped != NULL) {
      grpc_channel_credentials_release(creds->wrapped);
    }
    efree(creds);
  }
  
  /* Initializes an instance of wrapped_grpc_channel_credentials to be
   * associated with an object of a class specified by class_type */
  zend_object_value create_wrapped_grpc_channel_credentials(
      zend_class_entry *class_type TSRMLS_DC) {
    zend_object_value retval;
    wrapped_grpc_channel_credentials *intern;
  
    intern = (wrapped_grpc_channel_credentials *)emalloc(
        sizeof(wrapped_grpc_channel_credentials));
    memset(intern, 0, sizeof(wrapped_grpc_channel_credentials));
  
    zend_object_std_init(&intern->std, class_type TSRMLS_CC);
    object_properties_init(&intern->std, class_type);
    retval.handle = zend_objects_store_put(
        intern, (zend_objects_store_dtor_t)zend_objects_destroy_object,
        free_wrapped_grpc_channel_credentials, NULL TSRMLS_CC);
    retval.handlers = zend_get_std_object_handlers();
    return retval;
  }
  
  zval *grpc_php_wrap_channel_credentials(grpc_channel_credentials *wrapped TSRMLS_DC) {
    zval *credentials_object;
    MAKE_STD_ZVAL(credentials_object);
    object_init_ex(credentials_object, grpc_ce_channel_credentials);
    wrapped_grpc_channel_credentials *credentials =
        (wrapped_grpc_channel_credentials *)zend_object_store_get_object(
            credentials_object TSRMLS_CC);
    credentials->wrapped = wrapped;
    return credentials_object;
  }
  
  /**
   * Set default roots pem.
   * @param string pem_roots PEM encoding of the server root certificates
   * @return void
   */
  PHP_METHOD(ChannelCredentials, setDefaultRootsPem) {
    char *pem_roots;
    int pem_roots_length;
    if (zend_parse_parameters(ZEND_NUM_ARGS() TSRMLS_CC, "s", &pem_roots,
                              &pem_roots_length) == FAILURE) {
      zend_throw_exception(spl_ce_InvalidArgumentException,
                           "setDefaultRootsPem expects 1 string", 1 TSRMLS_CC);
      return;
    }
    default_pem_root_certs = gpr_malloc((pem_roots_length + 1) * sizeof(char));
    memcpy(default_pem_root_certs, pem_roots, pem_roots_length + 1);
  }
  
  /**
   * Create a default channel credentials object.
   * @return ChannelCredentials The new default channel credentials object
   */
  PHP_METHOD(ChannelCredentials, createDefault) {
    grpc_channel_credentials *creds = grpc_google_default_credentials_create();
    zval *creds_object = grpc_php_wrap_channel_credentials(creds TSRMLS_CC);
    RETURN_DESTROY_ZVAL(creds_object);
  }
  
  /**
   * Create SSL credentials.
   * @param string pem_root_certs PEM encoding of the server root certificates
   * @param string pem_private_key PEM encoding of the client's private key
   *     (optional)
   * @param string pem_cert_chain PEM encoding of the client's certificate chain
   *     (optional)
   * @return ChannelCredentials The new SSL credentials object
   */
  PHP_METHOD(ChannelCredentials, createSsl) {
    char *pem_root_certs = NULL;
    grpc_ssl_pem_key_cert_pair pem_key_cert_pair;
  
    int root_certs_length = 0, private_key_length = 0, cert_chain_length = 0;
  
    pem_key_cert_pair.private_key = pem_key_cert_pair.cert_chain = NULL;
  
    /* "|s!s!s! == 3 optional nullable strings */
    if (zend_parse_parameters(ZEND_NUM_ARGS() TSRMLS_CC, "|s!s!s!",
                              &pem_root_certs, &root_certs_length,
                              &pem_key_cert_pair.private_key,
                              &private_key_length,
                              &pem_key_cert_pair.cert_chain,
                              &cert_chain_length) == FAILURE) {
      zend_throw_exception(spl_ce_InvalidArgumentException,
                           "createSsl expects 3 optional strings", 1 TSRMLS_CC);
      return;
    }
    grpc_channel_credentials *creds = grpc_ssl_credentials_create(
        pem_root_certs,
        pem_key_cert_pair.private_key == NULL ? NULL : &pem_key_cert_pair, NULL);
    zval *creds_object = grpc_php_wrap_channel_credentials(creds TSRMLS_CC);
    RETURN_DESTROY_ZVAL(creds_object);
  }
  
  /**
   * Create composite credentials from two existing credentials.
   * @param ChannelCredentials cred1 The first credential
   * @param CallCredentials cred2 The second credential
   * @return ChannelCredentials The new composite credentials object
   */
  PHP_METHOD(ChannelCredentials, createComposite) {
    zval *cred1_obj;
    zval *cred2_obj;
  
    /* "OO" == 3 Objects */
    if (zend_parse_parameters(ZEND_NUM_ARGS() TSRMLS_CC, "OO", &cred1_obj,
                              grpc_ce_channel_credentials, &cred2_obj,
                              grpc_ce_call_credentials) == FAILURE) {
      zend_throw_exception(spl_ce_InvalidArgumentException,
                           "createComposite expects 2 Credentials", 1 TSRMLS_CC);
      return;
    }
    wrapped_grpc_channel_credentials *cred1 =
        (wrapped_grpc_channel_credentials *)zend_object_store_get_object(
            cred1_obj TSRMLS_CC);
    wrapped_grpc_call_credentials *cred2 =
        (wrapped_grpc_call_credentials *)zend_object_store_get_object(
            cred2_obj TSRMLS_CC);
    grpc_channel_credentials *creds =
        grpc_composite_channel_credentials_create(cred1->wrapped, cred2->wrapped,
                                                  NULL);
    zval *creds_object = grpc_php_wrap_channel_credentials(creds TSRMLS_CC);
    RETURN_DESTROY_ZVAL(creds_object);
  }
  
  /**
   * Create insecure channel credentials
   * @return null
   */
  PHP_METHOD(ChannelCredentials, createInsecure) {
    RETURN_NULL();
  }
  
  static zend_function_entry channel_credentials_methods[] = {
    PHP_ME(ChannelCredentials, setDefaultRootsPem, NULL,
           ZEND_ACC_PUBLIC | ZEND_ACC_STATIC)
    PHP_ME(ChannelCredentials, createDefault, NULL,
           ZEND_ACC_PUBLIC | ZEND_ACC_STATIC)
    PHP_ME(ChannelCredentials, createSsl, NULL,
           ZEND_ACC_PUBLIC | ZEND_ACC_STATIC)
    PHP_ME(ChannelCredentials, createComposite, NULL,
           ZEND_ACC_PUBLIC | ZEND_ACC_STATIC)
    PHP_ME(ChannelCredentials, createInsecure, NULL,
           ZEND_ACC_PUBLIC | ZEND_ACC_STATIC)
    PHP_FE_END};
  
  void grpc_init_channel_credentials(TSRMLS_D) {
    zend_class_entry ce;
    INIT_CLASS_ENTRY(ce, "Grpc\\ChannelCredentials",
                     channel_credentials_methods);
    grpc_set_ssl_roots_override_callback(get_ssl_roots_override);
    ce.create_object = create_wrapped_grpc_channel_credentials;
    grpc_ce_channel_credentials = zend_register_internal_class(&ce TSRMLS_CC);
  }
  