What's wrong with my TLS reasoning and FlightServerBase ?

2023-12-30 Thread Rick Spencer
I am working on supporting TLS, and it looks like everything that I need is built into FlightServerBase. However, I am struggling to understand how it works, or how to test that it is working. For example, I don't understand why I can pass garbage in for the tls_certs, and still get results when c

Re: What's wrong with my TLS reasoning and FlightServerBase ?

2023-12-30 Thread Bryce Mecum
Hi Rick, You're right that TLS support is built into PyArrow Flight [1]. I think the issue with your code is that your client isn't attempting to connect over TLS and that the default behavior of the FlightServerBase must be to allow both TLS and non-TLS connections. This seems to be similar to ho

Re: What's wrong with my TLS reasoning and FlightServerBase ?

2023-12-30 Thread David Li
Just to be clear - the server never supports both TLS and plaintext connections at the same time. (I don't believe this is possible in gRPC.) The URI scheme determines how the server listens so if you don't use grpc+tls:// it will use plaintext regardless of if you pass certificates or not. The

Re: What's wrong with my TLS reasoning and FlightServerBase ?

2023-12-30 Thread Bryce Mecum
Thanks David, and apologies to Rick. I missed that you were starting your server without TLS (as well as the client) and confused things here. On Sat, Dec 30, 2023 at 3:03 PM David Li wrote: > > Just to be clear - the server never supports both TLS and plaintext > connections at the same time.