Getting TLS to work on gRPC server using Netty

70 views
Skip to first unread message

g...@relaycorp.tech

unread,
Apr 9, 2020, 5:19:35 PM4/9/20
to grpc.io
Hello!

I've got a question for those of you who've got a gRPC server running on Android: Did you manage to get TLS to work, and if so, how?

We've got the server to work on Android using Netty but the only thing that doesn't work is TLS and we've narrowed it down to Netty requiring Java >= 8 when using conscrypt, but Android reports Java 6.

Cheers,

Gus.
Message has been deleted

Chengyuan Zhang

unread,
Apr 9, 2020, 5:37:59 PM4/9/20
to grpc.io
Running a gRPC server on Android? That doesn't sound what we support. gRPC client on Android uses Okhttp (netty has problems on Android).

There were a lot of Github discussions regarding TLS on Android/Okhttp.

This document has some high-level discussion about gRPC with TLS in general. 

This Github issue contains fair amount of useful information for using TLS on Android/Okhttp. There are solid code snippets for TLS configurations in the comments and that user eventually got things to work.

We may add an example for using TLS on Android/Okhttp (existing one uses netty, which doesn't work for Android) soon. Please stay tuned. 

Gus Narea

unread,
Apr 9, 2020, 5:44:10 PM4/9/20
to Chengyuan Zhang, grpc.io
Hi Chengyuan and thanks for your reply!

Indeed, I'm talking about the server side. I understand the gRPC team doesn't support it on Android but the Netty team does officially support Android, which is why I'm looking into it.

Everything seems to work as far as we can tell, at least the hello-world example. But TLS doesn't work because of the issue I mentioned, so I was wondering if anyone here had any luck.

Cheers,

Gus.

--
You received this message because you are subscribed to a topic in the Google Groups "grpc.io" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/grpc-io/z3INkyJLuMQ/unsubscribe.
To unsubscribe from this group and all its topics, send an email to grpc-io+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/grpc-io/ad810ac8-c042-48fd-9bfe-4849d618fe5f%40googlegroups.com.

g...@relaycorp.tech

unread,
Apr 10, 2020, 11:45:41 AM4/10/20
to grpc.io
We've got TLS to work. More info here: https://github.com/netty/netty/issues/10181
To unsubscribe from this group and all its topics, send an email to grpc-io+unsubscribe@googlegroups.com.
Reply all
Reply to author
Forward
0 new messages