Details
-
Improvement
-
Resolution: Unresolved
-
Major - P3
-
None
-
None
-
None
-
Server Security
Description
Currently, `GRPCTransportLayerImpl` does not provide `getSSLManager()` because its SSL stack is provided opaquely by libgrpc.
In order for checks like enforceUserClusterSeparation to function correctly, we'll want a Stub implementation of `SSLManager`, or possibly just `getSSLConfiguration` (investigation needed).