TLS is done except when root cert is not loaded.

aneoconsulting · Feb 22, 2024 · f2929b6 · f2929b6
1 parent b021b6a
commit f2929b6
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/ArmoniK.SDK.Client/src/ChannelPool.cpp b/ArmoniK.SDK.Client/src/ChannelPool.cpp
@@ -132,11 +132,17 @@ ChannelPool::ChannelPool(Common::Properties properties, logger::Logger &logger)
         tls_options.set_verify_server_certs(false);
         tls_options.set_certificate_provider(
             create_certificate_provider(root_cert_pem, user_public_pem, user_private_pem));
+        credentials_ = TlsCredentials(tls_options);
       }
-      is_secure = true;
     } else {
-      // TODO: certificats clients absents, le simple TLS.
+      TlsChannelCredentialsOptions tls_options;
+      tls_options.set_certificate_provider(
+          create_certificate_provider(root_cert_pem, user_public_pem, user_private_pem));
+      // FIXME: root certificate must be present if there is no client certificate.
+      tls_options.set_verify_server_certs(control_plane.isSslValidation());
+      credentials_ = TlsCredentials(tls_options);
     }
+    is_secure = true;
   } else {
     credentials_ = grpc::InsecureChannelCredentials();
   }