Skip to content

[OTLP] Make OTEL_EXPORTER_OTLP_CERTIFICATE independent from mTLS #6764

@Kielek

Description

@Kielek

The OTEL_EXPORTER_OTLP_CERTIFICATE configuration option does not strictly apply to mTLS.

mTLS is an authentication system in which both the client and server authenticate each other.

The OTEL_EXPORTER_OTLP_CERTIFICATE option should be able to be used independently of an mTLS scenario. Common use case is where a server has a self-signed certificate that has not been verified by a third-party certificate authority. In this scenario you can use the OTEL_EXPORTER_OTLP_CERTIFICATE setting to enable the client to trust the certificate. This is not considered mTLS.

This is not a blocker for this PR since all this code is internal, but for clarity I'd suggest a small refactor reorganizing the code to decouple the the OTEL_EXPORTER_OTLP_CERTIFICATE from any classes with mTLS in their name.

Originally posted by @alanwest in #6343 (comment)

Metadata

Metadata

Assignees

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions