-
Notifications
You must be signed in to change notification settings - Fork 864
Description
The OTEL_EXPORTER_OTLP_CERTIFICATE configuration option does not strictly apply to mTLS.
mTLS is an authentication system in which both the client and server authenticate each other.
The OTEL_EXPORTER_OTLP_CERTIFICATE option should be able to be used independently of an mTLS scenario. Common use case is where a server has a self-signed certificate that has not been verified by a third-party certificate authority. In this scenario you can use the OTEL_EXPORTER_OTLP_CERTIFICATE setting to enable the client to trust the certificate. This is not considered mTLS.
This is not a blocker for this PR since all this code is internal, but for clarity I'd suggest a small refactor reorganizing the code to decouple the the OTEL_EXPORTER_OTLP_CERTIFICATE from any classes with mTLS in their name.
Originally posted by @alanwest in #6343 (comment)