Does the python grpc have the ability to disable ssl validation on the client?

[dshylov]

Does the python grpc have the ability to disable ssl validation on the python client?
I didn't find this ability in ssl_channel_credentials or secure_channel options.

[dshylov]

I tried this:
ssl_credentials = grpc.ssl_channel_credentials()
self.__channel = grpc.secure_channel(connection_url, ssl_credentials, (('grpc.ssl_target_name_override', 'my.host.name',),))
self.__connection = ServerStub(self.__channel)
And just get
<_Rendezvous of RPC that terminated with (StatusCode.UNAVAILABLE, Connect Failed)>

E0519 01:21:43.648971832 2424 ssl_transport_security.cc:979] Handshake failed with fatal error SSL_ERROR_SSL: error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED.

[dshylov]

All works fine if I add correct CN and pem file. But I can't connect without pem file.
In Java we have GrpcSslContexts which can use InsecureTrustManagerFactory.INSTANCE
for avoiding this.
.sslContext(GrpcSslContexts.forClient().trustManager(InsecureTrustManagerFactory.INSTANCE).build())
Is there an alternative way for python?

[dshylov]

Okay, I found the answer here.

[prateek2408]

whats the resolution, even I am facing the same issue

[dshylov]

@prateek2408
It's still wasn't merged
#12656