[C based] - Access TLS Server certificate on client side

29 views
Skip to first unread message

leguilly...@gmail.com

unread,
Sep 27, 2018, 7:09:31 PM9/27/18
to grpc.io
Hi all, 

I tried gitter without luck so I am allowing myself to send my question here.

I am using grpc using TLS, and I would like to retrieve the server certificate on the client side (ideally in C#, but I am already trying to figure out if it is even feasible in C++). I managed to get the client certificate on the server side using the ServerCallContext, and I could find people discussing doing this in go (https://github.com/grpc/grpc-go/issues/1240) and Java (https://github.com/grpc/grpc-java/issues/4348) but could find nothing regarding the C based implementation, and digging through the code I am starting to think that there is simply no support for it at any level.

* Can somebody confirm this or point me to how it can be done?
* If it is impossible to do at the moment, would it be a big task to actually implement this access?

Nicolas Noble

unread,
Sep 28, 2018, 1:47:59 AM9/28/18
to leguilly...@gmail.com, grpc.io
In the C core, this is done using verify_peer_options

--
You received this message because you are subscribed to the Google Groups "grpc.io" group.
To unsubscribe from this group and stop receiving emails from it, send an email to grpc-io+u...@googlegroups.com.
To post to this group, send email to grp...@googlegroups.com.
Visit this group at https://groups.google.com/group/grpc-io.
To view this discussion on the web visit https://groups.google.com/d/msgid/grpc-io/601c04df-80fc-4563-85ef-b8a5676002bf%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

leguilly...@gmail.com

unread,
Sep 28, 2018, 7:48:07 AM9/28/18
to grpc.io
Thank you very much for your answer, it looks like this is what I was after, I will dig into it.
Reply all
Reply to author
Forward
0 new messages