Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

need more documentation(help) on tls client certificates #2

Open
LeiYangGH opened this issue Nov 7, 2019 · 0 comments
Open

need more documentation(help) on tls client certificates #2

LeiYangGH opened this issue Nov 7, 2019 · 0 comments

Comments

@LeiYangGH
Copy link

你好,我是从你的技术博客转过来的,这些示例非常有用。
我是grpc的初学者,使用过基本的grpc的java,python,go客户端编程,服务端代码不熟悉。之前一直用的是plaintext传输,现在想学习tls。但网上没多少有用资料,你的这个算是又精简又可以直接下载运行的,所以非常好。
能不能再帮忙解答以下疑惑(也许你可以加到readme里面):

  1. 我们都知道grpc是基于httpv2的,那么使用Plaintext(比如java建联的时候用usePlaintext)可以与https共用吗?如果可以,https不就已经实现了安全性了吗(grpc不用再写相关代码了)?如果不能共用,那为什么?
  2. 你的代码的simple_server和simple_client我下载运行是成功的,但和网上很多教程一样,你都用了自己签发的证书,所以客户端需要加载相应的证书。那么grpc的tls有可能像我们平时访问https网站的时候,客户端不需要增加额外代码吗(拿python的requests来说,就没任何额外代码,也没要求输入本地证书路径)?如果服务端用的不是自签名证书,而用的权威证书颁发机构的证书,那么客户端的代码应该怎么写?类似的问题我在StackOverflow也看到一个
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant