Is there an equivalent to

c, err := client.New(*cerbosAddr, client.WithTLSInsecure())

for the Javascript GRPC client? i.e. use TLS, but allow insecure.

Hey David Did you see the

tls

option in the SDK? https://github.com/cerbos/cerbos-sdk-javascript/blob/main/docs/grpc.options.tls.md

Hi! Yes I was reading that but (if I understand correctly) its either false = no TLS, or true = TLS with valid/well-known cert. Im looking for the awkward middle ground 🙂 - TLS with self-signed cert

Ah I see - not sure of the top of my head, but you can pass in a

SecureContext

created via https://nodejs.org/api/tls.html#tlscreatesecurecontextoptions What that needs to look like for a self-signed cert I’m not 100% sure

I think something like this could work too;

const secureContext = tls.createSecureContext();
secureContext.context.addCACert("-----BEGIN CERTIFICATE----- ... -----END CERTIFICATE-----");

Many thanks, both solutions will work I think. But NODE_TLS_REJECT_UNAUTHORIZED is fine for testing. 👍