grpc-kv-examples
2025-01-23
Add RSA certificate generation and fix Python mTLS credential configuration
13 files · 246+ · 5-
Add RSA certificate support and rename cert files
5 files changed
gen-certs.shNew certificate generation script supporting both RSA and ECDSA algorithmsrsa-mtls-client.crtRSA-2048 client certificatersa-mtls-server.crtRSA-2048 server certificatersa-mtls-client.cnfRSA client certificate OpenSSL configrsa-mtls-server.cnfRSA server certificate OpenSSL config
- Added gen-certs.sh supporting RSA and ECDSA certificate generation with configurable curves
instantiate
behavioral
1 file
gen-certs.sh
- Renamed certificate files from .pem to .crt extension for consistency
remediate
internal
2 files
rsa-mtls-client.crtrsa-mtls-server.crt
Fix Python mTLS credential configuration
3 files changed
simple-py-server.pyFixed root_certificates parameter and added SSL algorithm channel optionsimple-py-client.pyAdded grpc.ssl_common_algorithms channel optionenv.shUpdated to use algorithm prefix for certificate path selection
- Fixed Python server root_certificates to use named parameter instead of positional
remediate
behavioral
1 file
simple-py-server.py
- Added grpc.ssl_common_algorithms channel option for ECDSA+SHA256 and RSA+SHA256
harden
behavioral
2 files
simple-py-client.pysimple-py-server.py