grpc-kv-examples 2025-01-23
Add RSA certificate generation and fix Python mTLS credential configuration
13 files · 246+ · 5-

Add RSA certificate support and rename cert files

5 files changed
  • gen-certs.sh New certificate generation script supporting both RSA and ECDSA algorithms
  • rsa-mtls-client.crt RSA-2048 client certificate
  • rsa-mtls-server.crt RSA-2048 server certificate
  • rsa-mtls-client.cnf RSA client certificate OpenSSL config
  • rsa-mtls-server.cnf RSA server certificate OpenSSL config
  • Added gen-certs.sh supporting RSA and ECDSA certificate generation with configurable curves instantiate behavioral
    1 file
    • gen-certs.sh
  • Renamed certificate files from .pem to .crt extension for consistency remediate internal
    2 files
    • rsa-mtls-client.crt
    • rsa-mtls-server.crt

Fix Python mTLS credential configuration

3 files changed
  • simple-py-server.py Fixed root_certificates parameter and added SSL algorithm channel option
  • simple-py-client.py Added grpc.ssl_common_algorithms channel option
  • env.sh Updated to use algorithm prefix for certificate path selection
  • Fixed Python server root_certificates to use named parameter instead of positional remediate behavioral
    1 file
    • simple-py-server.py
  • Added grpc.ssl_common_algorithms channel option for ECDSA+SHA256 and RSA+SHA256 harden behavioral
    2 files
    • simple-py-client.py
    • simple-py-server.py