Hi,

I need to log cert based authentication failures and I don't see any hooks 
available to interact with the SSL handshake at the point of rejection. I 
found the following hooks but these seems to be after the handshake itself.

1.  TlsServerCredentialsOptions struct has the set_certificate_verifier() 
API which is for custom verifications, gets invoked only after the SSL 
handshake is completed. 
2. grpc::AuthMetadataProcessor::Process() API is also after the handshake 
itself.
3. C++ interceptors are also after the handshake is completed 
(builder.experimental().SetInterceptorCreators())

This can be done easily in grpc-go by wrapping 
credentials.TransportCredentials and implementing ServerHandshake() API to 
capture failures and logging them. 

Is this even possible using gRPC-C++ libs? Please advise.

-- 
You received this message because you are subscribed to the Google Groups 
"grpc.io" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to grpc-io+unsubscr...@googlegroups.com.
To view this discussion visit 
https://groups.google.com/d/msgid/grpc-io/8cb9ac46-1ea2-49f5-a8a1-97296001267an%40googlegroups.com.

Reply via email to