Does gRPC support password protected SSL keys?

[chris....@gmail.com]

Looking to use SSL in my client application. The SSL keys we use are often passphrase encrypted. Libcurl supports passing in the passphrase as an option, but I've been unable to find any such option in gRPC.

[Carl Mastrangelo]

What language?

[chris....@gmail.com]

For my needs specifically, C++, though ideally this would be supported across all languages as part of general SSL support in gRPC.

[Carl Mastrangelo]

And just to clarify, I think you are talking about PKCS 12 for the key encryption?     I am more familiar with Java so my experience is limitted.  That said, in Java you can pass a keystore into into your SSL context when creating the Server (or channel).    Also IIRC, Go got support for encrypted keys a while back.

[chris....@gmail.com]

They keys are in PEM format. I'm unsure if they were converted from PKCS12 prior to that.

[jian...@google.com]

This feature is not supported in gRPC c core right now. I have created an issue for tracking this feature.

https://github.com/grpc/grpc/issues/14216