TLS settings for OtlpHttpExporter

[sirzooro]

I am checking how to enable TLS encryption for connection between OtlpHttpExporter and Otel Collector. I found that exporter should supports https endpoint address, but it does not allow to configure TLS options. As a minimum I have to specify custom root CA certificate file. I also would like to enforce TLS 1.2+ and selected ciphers. Please add such configuration options for exporter.

I found that grpc exporter allows to specify path to CA certificates using ssl_credentials_cacert_path option or OTEL_EXPORTER_OTLP_CERTIFICATE env var. However it also does now allow to specify minimum TLS version and ciphers list: https://github.com/open-telemetry/opentelemetry-cpp/tree/main/exporters/otlp

I suspect that this may require some changes to OTEL specification too.

[lalitb]

This is blocked for - #389

As of now, the our HTTP Client doesn't have provision to supply the root ca certificate (for server authentication), and client certificate chain (for client authentication) during HTTP(S) handshake.

However it also does now allow to specify minimum TLS version and ciphers list

Yes this would require a changes in OTEL specification, if you would like to initiate the discussion there.

[sirzooro]

Yes this would require a changes in OTEL specification, if you would like to initiate the discussion there.

Done: open-telemetry/opentelemetry-specification#2932

[lalitb]

Refer : https://github.com/open-telemetry/opentelemetry-cpp/pull/938/files

[marcalff]

@sirzooro

Please check #1793 and comment.

This PR implements the first step, to fix #389, with placeholders for TLS.

Regards.

[github-actions]

This issue was marked as stale due to lack of activity.