Validate sslContext
doesn't override a configured trustManager
#1674
Labels
sslContext
doesn't override a configured trustManager
#1674
Short description
When your
GrpcClientSettings
specifies both ansslContext
and atrustManager
, Akka gRPC will use thesslContext
to create the TLS connection and ignore thetrustManager
.This might be non-obvious, and worst case cause too many CA's to be trusted. Perhaps we should add a validation that checks these settings are not both set. That validation could be in the
Settings
object (imposing a strict order in which settings are applied) or where the settings are used (causing a somewhat less helpful stack trace).The text was updated successfully, but these errors were encountered: