Support loading TLS certificates in DER format.
Open
area/tls
enhancement
help wanted
- Dominant language
- C++
- Stars
- 28.9k
- Forks
- 5.6k
- Avg merge
- 1d 22h
- Merged PRs (30d)
- 430
Description
Currently supported PEM format is base64-encoded DER-encoded certificate with some extra prettifiers.
Supporting DER format would allow passing ~30% smaller certificates and private keys over xDS (compared to currently supported PEM format) and avoid base64-decoding in Envoy.
The idea is to support both formats, not replace PEM with DER.
Contributor guide
Assessment
This issue has not been assessed yet.