grpc tls_error ai_generated true

UNAVAILABLE: authority mismatch between target and certificate

ID: grpc/authority-mismatch

Also available as: JSON · Markdown
82%Fix Rate
86%Confidence
3Evidence
2023-01-01First Seen

Version Compatibility

VersionStatusIntroducedDeprecatedNotes
1 active — — —

Root Cause

gRPC :authority header doesnt match server TLS certificate.

generic

Workarounds

  1. 92% success Ensure dial target matches TLS certificate CN/SAN
  2. 88% success Use grpc.WithAuthority() to set correct authority for proxied connections

Dead Ends

Common approaches that don't work:

  1. Override authority header arbitrarily 82% fail

    Breaks TLS verification

  2. Disable hostname verification 90% fail

    MITM vulnerability