https://github.com/yasushi-saito/grpc-ssl-example

Example of using grpc-c++ w/ self-signed certificates
https://github.com/yasushi-saito/grpc-ssl-example

cpp go grpc self-signed-certificate ssl tls

Last synced: 29 days ago
JSON representation

Example of using grpc-c++ w/ self-signed certificates

• Host: GitHub
• URL: https://github.com/yasushi-saito/grpc-ssl-example
• Owner: yasushi-saito
• License: apache-2.0
• Created: 2020-04-10T23:10:15.000Z (over 4 years ago)
• Default Branch: master
• Last Pushed: 2021-02-06T06:46:07.000Z (almost 4 years ago)
• Last Synced: 2024-08-03T23:24:55.660Z (4 months ago)
• Topics: cpp, go, grpc, self-signed-certificate, ssl, tls
• Language: Go
• Size: 16.6 KB
• Stars: 12
• Watchers: 3
• Forks: 3
• Open Issues: 2
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-golang-repositories - grpc-ssl-example - c++ w/ self-signed certificates (Repositories)

README

        

# Example of using self-signed TLS certificate in c++ and go grpc.

- Go client and server

- C++ client only

The go server generates the following PEM files and stores them under go/certs.

- root CA

- root key (i.e., server private key)

- client cert

- client private key

The clients use (root CA, client cert, client key) to talk to the server.

## Running the example

First compile and run Go client + server:

    cd go

    go generate

    go run .

then compile and run the C++ client, while go server is still running.

    cd cppclient

    bazel build --incompatible_require_linker_input_cc_api=false ...

    ../bazel-bin/cppclient/client

## Tricky parts

The C++ GRPC code doesn't understand 512 bit ECDSA keys. We must use 256 bit

ones.

The C++ GRPC, as of 1.28, doesn't support skipping server common-name

verification. So we perform the following workaround:

- We start the C++ client w/ the full server verification.

- But we pass a grpc::ChannelArgs to rewrite the target name for the purpose of

  CN verification.

I ope this workaround becomes unneccessary in a future.