@@ -225,16 +225,7 @@ def set_ssl_target_override(self, ssl_target_name_override=None):
225
225
-------
226
226
self
227
227
"""
228
- if ssl_target_name_override is None :
229
- if not self .__root_certificates :
230
- raise Exception ("Deriving override requires root certificate!" )
231
- ssl_target_name_override = get_cn_from_cert (self .__root_certificates )
232
- logging .warning (
233
- "Overriding SSL option from certificate could increase MITM susceptibility!"
234
- )
235
- self .set_channel_option (
236
- "grpc.ssl_target_name_override" , ssl_target_name_override
237
- )
228
+ self .__ssl_target_name_override = ssl_target_name_override
238
229
return self
239
230
240
231
def set_channel_option (self , name , value ):
@@ -296,6 +287,17 @@ def construct(self):
296
287
else :
297
288
channel_creds = channel_ssl_creds
298
289
logging .debug ("Using SSL credentials, no metadata authentication." )
290
+ if self .__ssl_target_name_override is not False :
291
+ if self .__ssl_target_name_override is None :
292
+ if not self .__root_certificates :
293
+ raise Exception ("Deriving override requires root certificate!" )
294
+ self .__ssl_target_name_override = get_cn_from_cert (self .__root_certificates )
295
+ logging .warning (
296
+ "Overriding SSL option from certificate could increase MITM susceptibility!"
297
+ )
298
+ self .set_channel_option (
299
+ "grpc.ssl_target_name_override" , self .__ssl_target_name_override
300
+ )
299
301
channel = grpc .secure_channel (
300
302
self .__target_netloc .netloc , channel_creds , self .__channel_options
301
303
)
@@ -320,4 +322,5 @@ def _reset(self):
320
322
self .__username = None
321
323
self .__password = None
322
324
self .__channel_options = None
325
+ self .__ssl_target_name_override = False
323
326
return self
0 commit comments