{"id":13712853,"url":"https://github.com/yasushi-saito/grpc-ssl-example","last_synced_at":"2025-03-16T02:17:17.299Z","repository":{"id":139545804,"uuid":"254753867","full_name":"yasushi-saito/grpc-ssl-example","owner":"yasushi-saito","description":"Example of using grpc-c++ w/ self-signed certificates","archived":false,"fork":false,"pushed_at":"2021-02-06T06:46:07.000Z","size":17,"stargazers_count":12,"open_issues_count":2,"forks_count":3,"subscribers_count":3,"default_branch":"master","last_synced_at":"2024-11-13T23:32:41.299Z","etag":null,"topics":["cpp","go","grpc","self-signed-certificate","ssl","tls"],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/yasushi-saito.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-04-10T23:10:15.000Z","updated_at":"2023-03-09T01:22:54.000Z","dependencies_parsed_at":"2024-05-16T19:00:31.922Z","dependency_job_id":null,"html_url":"https://github.com/yasushi-saito/grpc-ssl-example","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/yasushi-saito%2Fgrpc-ssl-example","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/yasushi-saito%2Fgrpc-ssl-example/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/yasushi-saito%2Fgrpc-ssl-example/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/yasushi-saito%2Fgrpc-ssl-example/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/yasushi-saito","download_url":"https://codeload.github.com/yasushi-saito/grpc-ssl-example/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243814895,"owners_count":20352038,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cpp","go","grpc","self-signed-certificate","ssl","tls"],"created_at":"2024-08-02T23:01:23.585Z","updated_at":"2025-03-16T02:17:17.272Z","avatar_url":"https://github.com/yasushi-saito.png","language":"Go","funding_links":[],"categories":["Repositories"],"sub_categories":[],"readme":"\n# Example of using self-signed TLS certificate in c++ and go grpc.\n\n- Go client and server\n- C++ client only\n\nThe go server generates the following PEM files and stores them under go/certs.\n\n- root CA\n- root key (i.e., server private key)\n- client cert\n- client private key\n\nThe clients use (root CA, client cert, client key) to talk to the server.\n\n## Running the example\n\nFirst compile and run Go client + server:\n\n    cd go\n    go generate\n    go run .\n\nthen compile and run the C++ client, while go server is still running.\n\n    cd cppclient\n    bazel build --incompatible_require_linker_input_cc_api=false ...\n    ../bazel-bin/cppclient/client\n\n## Tricky parts\n\nThe C++ GRPC code doesn't understand 512 bit ECDSA keys. We must use 256 bit\nones.\n\nThe C++ GRPC, as of 1.28, doesn't support skipping server common-name\nverification. So we perform the following workaround:\n\n- We start the C++ client w/ the full server verification.\n\n- But we pass a grpc::ChannelArgs to rewrite the target name for the purpose of\n  CN verification.\n\nI ope this workaround becomes unneccessary in a future.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fyasushi-saito%2Fgrpc-ssl-example","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fyasushi-saito%2Fgrpc-ssl-example","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fyasushi-saito%2Fgrpc-ssl-example/lists"}