Skip to content

gRPC triton/tfserve cannot handle SSL certificate with another CN #447

@ksmaze

Description

@ksmaze

I believe that --ssl-https-verify-peer and --ssl-https-verify-host flags are only applied to HTTP protocol, for gRPC in c++, there is no flag to ignore if SSL cert doesn't match with hosts, which will throw Peer name XXX is not in peer certificate

The only way I found is using SetSslTargetNameOverride, and pass that from

, all the way to here: https://github.com/triton-inference-server/client/blob/fdfa5cd8d893bbbb99b926612dd459b8005518f1/src/c%2B%2B/library/grpc_client.cc#L454-L475

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions