Embed the default roots.pem in the gRPC library binary.

Package.swift

@@ -22,6 +22,7 @@ let package = Package(
            dependencies: ["CgRPC"]),
     Target(name: "CgRPC",
            dependencies: ["BoringSSL"]),
+    Target(name: "RootsEncoder")
   ],
   dependencies: [
     .Package(url: "https://github.com/Zewo/zlib.git", majorVersion: 0, minor: 4),

Sources/RootsEncoder/main.swift

@@ -0,0 +1,69 @@
+/*
+ * Copyright 2017, gRPC Authors All rights reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import Foundation
+
+var s = ""
+s += "/*\n"
+s += " *\n"
+s += " * Copyright 2017, Google Inc.\n"
+s += " * All rights reserved.\n"
+s += " *\n"
+s += " * Redistribution and use in source and binary forms, with or without\n"
+s += " * modification, are permitted provided that the following conditions are\n"
+s += " * met:\n"
+s += " *\n"
+s += " *     * Redistributions of source code must retain the above copyright\n"
+s += " * notice, this list of conditions and the following disclaimer.\n"
+s += " *     * Redistributions in binary form must reproduce the above\n"
+s += " * copyright notice, this list of conditions and the following disclaimer\n"
+s += " * in the documentation and/or other materials provided with the\n"
+s += " * distribution.\n"
+s += " *     * Neither the name of Google Inc. nor the names of its\n"
+s += " * contributors may be used to endorse or promote products derived from\n"
+s += " * this software without specific prior written permission.\n"
+s += " *\n"
+s += " * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n"
+s += " * \"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\n"
+s += " * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\n"
+s += " * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\n"
+s += " * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\n"
+s += " * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\n"
+s += " * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\n"
+s += " * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\n"
+s += " * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n"
+s += " * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\n"
+s += " * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"
+s += " *\n"
+s += " */\n"
+s += "// GENERATED: DO NOT EDIT\n"
+s += "//\n"
+s += "// This file contain a function that returns the default roots.pem.\n"
+s += "//\n"
+s += "import Foundation\n"
+s += "\n"
+s += "func roots_pem() -> String? {\n"
+let fileURL = URL(fileURLWithPath:"Assets/roots.pem")
+let filedata = try Data(contentsOf:fileURL)
+let encoding = filedata.base64EncodedString()
+s += "  let roots = \n"
+s += "    \"" + encoding + "\"\n"
+s += "  if let data = Data(base64Encoded: roots, options:[]) {\n"
+s += "    return String(data:data, encoding:.utf8)\n"
+s += "  } else {\n"
+s += "    return nil\n"
+s += "  }\n"
+s += "}\n"
+print(s)

Sources/gRPC/Channel.swift

@@ -53,11 +53,7 @@ public class Channel {
     if let certificates = certificates {
       underlyingChannel = cgrpc_channel_create_secure(address, certificates, host)
     } else {
-      let bundle = Bundle(for: Channel.self)
-      let url = bundle.url(forResource: "roots", withExtension: "pem")!
-      let data = try! Data(contentsOf: url)
-      let s = String(data: data, encoding: .ascii)
-      underlyingChannel = cgrpc_channel_create_secure(address, s, host)
+      underlyingChannel = cgrpc_channel_create_secure(address, roots_pem(), host)
     }
     completionQueue = CompletionQueue(underlyingCompletionQueue:cgrpc_channel_completion_queue(underlyingChannel))
     completionQueue.name = "Client" // only for debugging