C++ separate endpoint and SSL server name in client.

[gs...@outlook.com]

Is it possible in GRPC C++ to separate the endpoint used in the TCP connection from the server name that is verified by SSL?

The simple case for an SSL client connection setup is this:

auto channel = grpc::CreateChannel("myhost.domain:50051", grpc::SslCredentials(grpc::SslCredentialsOptions()));

The host name "myhost.domain" is used to make the TCP connection and is used by SSL to verify the servers certificate.

I would like to connect to  a TCP address as endpoint (e.g. "10.1.2.3:50051") and to let SSL verify that the server name in the certificate is "myhost.domain".

Is this possible and how ?

Thanks

[Muxi Yan]

This is probably what you are looking for: https://github.com/grpc/grpc/blob/7bf82de9eda0aa8fecfe5edb33834f1b272be30b/include/grpcpp/support/channel_arguments_impl.h#L66

[gs...@outlook.com]

Yes this seems to solve the problem, but the comments say:

should never be used in production

What is the reason? 

Is this option unsafe or unstable?

Thanks

Guido 

[Alexander Polcyn]

It might be interesting to follow the conversation in https://github.com/grpc/grpc/pull/10529, which explains some of the motivation for why this is discouraged in production.