New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Allow specifying custom CA for certificate validation #508

Open

sajal opened this issue Jun 2, 2022 · 0 comments

sajal commented Jun 2, 2022

Almost all tools that rely on self-signed CA typically allow configuring a CA certificate along with server/client certificate and private key.

The behavior should be, if configured, the server/client should only trust the provided ca for certificate validation.

This way

I no longer need to trust self-signed cert/ca system wide
I no longer need to trust all root CAs for my internal communications

My assumption is most people running bchd, would do so with intention of using the grpc endpoint for internal services.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment