GRPC_DEFAULT_SSL_ROOTS_FILE_PATH support in ::grpc::experimental::TlsChannelCredentialsOptions and tsi_create_ssl_client_handshaker_factory_with_options

80 views

Skip to first unread message

Erin McNulty

unread,

Feb 13, 2025, 8:44:50 PMFeb 13

to grpc.io

Hi all!

I see in the gRPC C++ docs that the SSLCredentialsOptions API supports the GRPC_DEFAULT_SSL_ROOTS_FILE_PATH environment variable to specify a default root cert.

Does the ::grpc::experimental::TlsChannelCredentialsOptions API support specifying the default root certs this way?

Similarly, does the tsi_create_ssl_client_handshaker_factory_with_options API support specifying the default root certs through the env variable?

Thank you!

-Erin McNulty

Gregory Cooke

unread,

May 16, 2025, 4:16:05 PMMay 16

to grpc.io

The TLS Credentials are not designed to support that environment variable. However, the TlsCredentialsOptions have a much more flexible API for configuring certificates via the CertificateProvider interfaces.

Reply all

Reply to author

Forward

0 new messages