Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Hubble relay server doesn't provide ALPN during TLS handshake while establishing a GRPC connection #1615

Open
AmoghMK opened this issue Nov 8, 2024 · 0 comments

Comments

@AmoghMK
Copy link

AmoghMK commented Nov 8, 2024

I have a hubble relay setup with the following configuration:

hubble:
  relay:
    service:
      type: LoadBalancer
  tls:
    server:
      enabled: true
      mtls: true

I extracted ca.crt, client.crt and client.key from secret hubble-relay-client-certs and I'm able to fetch flows using hubble cli with the following:

hubble observe --server tls://<ip>:443 --tls-ca-cert-files ca.crt --tls-client-cert-file client.crt --tls-client-ley-file client.key --tls-allow-insecure

But when I try to do the same from go via grpc client in go, I'm seeing the following error:
"transport: authentication handshake failed: credentials: cannot check peer: missing selected ALPN property"

tlsConfig := &tls.Config {
  InsecureSkipVerify: true,
  ClientCAs: certPool,
  Certificates: []tls.Certificate{clientCertPair},
  NextProtos: []string{"h2"},
}
conn, err := grpc.NewClient(hubbleAddress, grpc.WithTransportCredentials(credentials.NewTLS(tlsconfig)))
client := observer.NewObserverClient(conn)
stream, err := client.GetFlows(ctx, req)
@AmoghMK AmoghMK changed the title Hubble relay doesn't provide ALPN during tls handshake while establishing a grpc connection Hubble relay server doesn't provide ALPN during TLS handshake while establishing a GRPC connection Nov 8, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant