Has the code been tested with grpcs?

[symbiont-ji]

Is there a worked out example for how to set up certs an keys on both the bazel-remote side and the bazel side? Doing the obvious (creating a self-signed CA, using it to sign a client and a server key, passing those as options in the config file of bazel-remote, and as options in bazel, results in the rather disappointing message ERROR: Failed to query remote execution capabilities: General OpenSslEngine problem.

It does not help that bazel's documentation is lacking; here is the corresponding issue I opened with them: bazelbuild/bazel#12764

[mostynb]

Hi.

I remember testing grpcs support when mTLS authentication was added- I think I either copied the test certs/keys from https://github.com/bazelbuild/bazel/tree/master/src/test/testdata/test_tls_certificate or generated my own by following that readme file. This comment in the mTLS PR mentions the relevant bazel and bazel-remote flags that I used: #360 (comment)

[mostynb]

I added a CI test for TLS and mTLS in #407. If anyone else is having trouble getting this working, here's an example:
6aa66a2