[grpc-io] Re: On Windows, where are trust certificates stored?

['Xuan Wang' via grpc.io]

GRPC_DEFAULT_SSL_ROOTS_FILE_PATH is indeed used to specify the PEM file to 
load SSL roots from (doc about this and more env vars can be find here 
), 
so using it should be able to solve the issue too.

On Wednesday, February 14, 2024 at 8:47:39 AM UTC-8 Andrew Bay wrote:

> The windows certificates are fine because the site opens fine in Edge.
>
> I found that gRPC uses  
> %PYTHON_HOME%\lib\site-packages\grpc_cython_credentials\roots.pem 
> for its certificates and if I add the one I needed to the bottom of that, 
> it made it work.
>
> I didn't try, but I think if I were to create a file and set that file's 
> path in  GRPC_DEFAULT_SSL_ROOTS_FILE_PATH environment variable, that 
> would work too.
>
> On Tuesday, February 13, 2024 at 2:49:32 PM UTC-5 AJ Heller wrote:
>
>> I think this is a general Windows problem, nothing gRPC-specific you'd 
>> want to do here. A quick googling turned up this: 
>> https://learn.microsoft.com/en-us/skype-sdk/sdn/articles/installing-the-trusted-root-certificate
>>
>> On Monday, February 12, 2024 at 8:07:11 AM UTC-8 Andrew Bay wrote:
>>
>>> gRPC is used as a library inside of the databricks-connect library in 
>>> python.  I cannot programmatically add a trust certificate for the server 
>>> it is connecting to.  Where can I put my firewall's MitM certificate so I 
>>> do not get "CERTIFICATE_VERIFY_FAILED" errors on a windows machine?
>>
>>

-- 
You received this message because you are subscribed to the Google Groups 
"grpc.io" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to grpc-io+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/grpc-io/2e0b5822-df29-414f-b6da-318bcc155d0an%40googlegroups.com.

[grpc-io] Re: On Windows, where are trust certificates stored?

[Andrew Bay]

The windows certificates are fine because the site opens fine in Edge.

I found that gRPC uses  
%PYTHON_HOME%\lib\site-packages\grpc_cython_credentials\roots.pem 
for its certificates and if I add the one I needed to the bottom of that, 
it made it work.

I didn't try, but I think if I were to create a file and set that file's 
path in  GRPC_DEFAULT_SSL_ROOTS_FILE_PATH environment variable, that would 
work too.

On Tuesday, February 13, 2024 at 2:49:32 PM UTC-5 AJ Heller wrote:

> I think this is a general Windows problem, nothing gRPC-specific you'd 
> want to do here. A quick googling turned up this: 
> https://learn.microsoft.com/en-us/skype-sdk/sdn/articles/installing-the-trusted-root-certificate
>
> On Monday, February 12, 2024 at 8:07:11 AM UTC-8 Andrew Bay wrote:
>
>> gRPC is used as a library inside of the databricks-connect library in 
>> python.  I cannot programmatically add a trust certificate for the server 
>> it is connecting to.  Where can I put my firewall's MitM certificate so I 
>> do not get "CERTIFICATE_VERIFY_FAILED" errors on a windows machine?
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"grpc.io" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to grpc-io+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/grpc-io/b5945ec4-a60a-4490-9d59-1fa5af6984d8n%40googlegroups.com.