fullstorydev / fullstorydev/grpcurl
Does grpcurl support pulling a client certificate from the OS X Keychain?
- Dominant language
- Go
- Stars
- 12.8k
- Forks
- 580
- Avg merge
- 1h 8m
- Merged PRs (30d)
- 5
Description
This [answer](https://stackoverflow.com/a/73986026/391161) on Stackoverflow describes the following mechanism for using a client certificate from the OSX keychain, which I verified works for me.
```
CURL_SSL_BACKEND=secure-transport curl --cert "My Cert" https://10.0.1.101/
```
Is there an equivalent option or env var in `grpcurl` that allows it to pull a client certificate from the OSX keychain?
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reviewing grpcurl's existing client-certificate options and compare them with the documented CURL_SSL_BACKEND=secure-transport curl mechanism. Determine whether OS X Keychain certificates can be exposed through the current TLS path, and define the option or environment variable that would make this work. The issue names no files or tests, so completion criteria will need to be established.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, macos
- Domain
- cli, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100