From d47a264991cf52cf5ee48ea85047e04005d5b3fe Mon Sep 17 00:00:00 2001 From: Gregory Cooke Date: Tue, 28 Nov 2023 11:48:50 -0800 Subject: [PATCH] [Security - Documentation] Mark cpp crl_directory method as deprecated (#35128) The c-core API was marked as deprecated, also mark the cpp api as deprecated Closes #35128 COPYBARA_INTEGRATE_REVIEW=https://github.com/grpc/grpc/pull/35128 from gtcooke94:deprecate_cpp_crl_directory 56717d020c3a8b36996878b8f953968b99205e2f PiperOrigin-RevId: 586057092 --- include/grpcpp/security/tls_credentials_options.h | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/include/grpcpp/security/tls_credentials_options.h b/include/grpcpp/security/tls_credentials_options.h index 341d3a857bf..7ad5b088568 100644 --- a/include/grpcpp/security/tls_credentials_options.h +++ b/include/grpcpp/security/tls_credentials_options.h @@ -99,8 +99,9 @@ class TlsCredentialsOptions { // verifiers other than the host name verifier is used. void set_check_call_host(bool check_call_host); - // TODO(zhenlian): This is an experimental API is likely to change in the - // future. Before de-experiementalizing, verify the API is up to date. + // Deprecated in favor of set_crl_provider. The + // crl provider interface provides a significantly more flexible approach to + // using CRLs. See gRFC A69 for details. // If set, gRPC will read all hashed x.509 CRL files in the directory and // enforce the CRL files on all TLS handshakes. Only supported for OpenSSL // version > 1.1.